Realising the SMP 1. Safe Machine Parameters Overview Basics Piggy-Back on GMT 2. Evolution to the Proposal Basic Architecture Enhanced Architecture 3. Electrical Architecture Failure Modes, Effects and Criticality Analysis (FMECA) Electro-Magnetic Compatibility Signal Integrity Safe Machine Parameters System

Realising the SMP 1. Safe Machine Parameters Overview Basics Piggy-Back on GMT 2. Evolution to the Proposal Basic Architecture Enhanced Architecture 3. Electrical Architecture Failure Modes, Effects and Criticality Analysis (FMECA) Electro-Magnetic Compatibility Signal Integrity Safe Machine Parameters System

Safe Machine Parameters Several Safety Critical flags and values are needed around the LHC (see Bruno) -Initially a dedicated high-dependability communications system was proposed -it became clear that this would be a huge system having lots of infrastructure to maintain -finally it was decided to send these signals through the CERN General Machine Timing (GMT) The signals are generated externally and pushed into the GMT generator (CTG) … They are queued… They are sent… They are received all around the machine… (in a CTRV or CTRP) Safe Machine Parameters System

Good motivation for GMT Comms Errors Data given to GMT could be wrong GMT could corrupt data Front-End could corrupt data Safe Machine Parameters System

Good motivation for GMT Comms Errors Data given to GMT could be wrong Make a dependable source Bit Error Rate of GMT can be calculated Mean Time to Fail estimated Failure Mode estimated GMT could corrupt data Front-End could corrupt data Read-back and compare to source Safe Machine Parameters System

Realising the SMP 1. Safe Machine Parameters Overview Basics Piggy-Back on GMT 2. Evolution to the Proposal Basic Architecture Enhanced Architecture 3. Electrical Architecture Failure Modes, Effects and Criticality Analysis (FMECA) Electro-Magnetic Compatibility Signal Integrity Safe Machine Parameters System

The most fundamental SMP… Safe Machine Parameters System

The first step is to accommodate multiple data sources to increase dependability… Safe Machine Parameters System

… simplify the critical part… Safe Machine Parameters System

… duplicate the critical part… Safe Machine Parameters System

… cross-check the critical part… Safe Machine Parameters System

… allow the flags to drive Beam Interlock equipment… Safe Machine Parameters System

… verify that the machine parameters transmitted match those received… Safe Machine Parameters System

Safe Machine Parameters Several Safety Critical flags and values are needed around the LHC A modular system can be designed -lots of work, can be split -can come online piece by piece in order of importance -each piece can be tested independantly Let’s see about Bruno’s proposal: Safe Machine Parameters System

Realising the SMP 1. Safe Machine Parameters Overview Basics Piggy-Back on GMT 2. Evolution to the Proposal Basic Architecture Enhanced Architecture 3. Electrical Architecture Failure Modes, Effects and Criticality Analysis (FMECA) Electro-Magnetic Compatibility Signal Integrity Safe Machine Parameters System

Phase I Architecture Safe Machine Parameters System

Phase II Architecture Safe Machine Parameters System

Phase III Architecture Safe Machine Parameters System

Discussion Phase I – Deadline October / November 2007 Specify I/O of Chassis Specify Internal Layout of Chassis Specify Electrical Level Architecture for Whole Chassis Build simple Prototype based in the LAB Phase II – Deadline February / March 2008 Expand Prototype to include redundancy Develop Fail-safe, Monitoring and Test Mode in the LAB and SPS Phase III – Deadline Summer 2008 Include all Safety Aspects Include all FESA type Monitoring In the LAB, SPS and when completed roll out to LHC Safe Machine Parameters System

Discussion Several PCBs will be needed rely on existing technology and ideas. Don’t reinvent the wheel! See 1. Diagnosis and Monitoring needed Test modes needed System will be in one location, no need for remote update System will be built twice (plus spares) manufacturability NOT hugely critical CPLD / FPGA technology = good VHDL/Schematic Entry = good Displays / debugging access = good Elegant design, robust and ergonomic = good PCAD = good Design office = not so good 12b. Documentation is very very good. Safe Machine Parameters System

Discussion Your mission, should you choose to accept, is to participate in the realisation of the safe machine parameters system Ambitious, I know BUT… I know you guys want a challenge First thing is to digest the documentation Bruno has… It’s all preliminary 2 weeks: chassis sketches and electrical architectures Leading to several projects  Safe Machine Parameters System

FIN Safe Machine Parameters System