2. Realising the SMP 1. Safe Machine Parameters Overview
Basics
Piggy-Back on GMT
2. Evolution to the Proposal
Basic Architecture
Enhanced Architecture
3. Electrical Architecture
Failure Modes, Effects and Criticality Analysis (FMECA)
Electro-Magnetic Compatibility
Signal Integrity
Safe Machine Parameters System

3. Realising the SMP 1. Safe Machine Parameters Overview
Basics
Piggy-Back on GMT
2. Evolution to the Proposal
Basic Architecture
Enhanced Architecture
3. Electrical Architecture
Failure Modes, Effects and Criticality Analysis (FMECA)
Electro-Magnetic Compatibility
Signal Integrity
Safe Machine Parameters System

4. Safe Machine Parameters
Several Safety Critical flags and values are needed around the LHC (see Bruno)
-Initially a dedicated high-dependability communications system was proposed
-it became clear that this would be a huge system having lots of infrastructure to maintain
-finally it was decided to send these signals through the CERN
General Machine Timing (GMT)
The signals are generated externally and pushed into the GMT generator (CTG) …
They are queued…
They are sent…
They are received all around the machine… (in a CTRV or CTRP)
Safe Machine Parameters System

5. Good motivation for GMT
Comms Errors
Data given to GMT could be wrong
GMT could corrupt data
Front-End could corrupt data
Safe Machine Parameters System

6. Good motivation for GMT
Comms Errors
Data given to GMT could be wrong
Make a dependable source
Bit Error Rate of GMT can be calculated
Mean Time to Fail estimated
Failure Mode estimated
GMT could corrupt data
Front-End could corrupt data
Read-back and compare to source
Safe Machine Parameters System

7. Realising the SMP 1. Safe Machine Parameters Overview
Basics
Piggy-Back on GMT
2. Evolution to the Proposal
Basic Architecture
Enhanced Architecture
3. Electrical Architecture
Failure Modes, Effects and Criticality Analysis (FMECA)
Electro-Magnetic Compatibility
Signal Integrity
Safe Machine Parameters System

8. The most fundamental SMP…
Safe Machine Parameters System

9. The first step is to accommodate multiple data sources to increase dependability…
Safe Machine Parameters System

10. … simplify the critical part…
Safe Machine Parameters System

11. … duplicate the critical part…
Safe Machine Parameters System

12. … cross-check the critical part…
Safe Machine Parameters System

13. … allow the flags to drive Beam Interlock equipment…
Safe Machine Parameters System

14. … verify that the machine parameters transmitted match those received…
Safe Machine Parameters System

15. Safe Machine Parameters
Several Safety Critical flags and values are needed around the LHC
A modular system can be designed
-lots of work, can be split
-can come online piece by piece in order of importance
-each piece can be tested independantly
Let’s see about Bruno’s proposal:
Safe Machine Parameters System

16. Realising the SMP 1. Safe Machine Parameters Overview
Basics
Piggy-Back on GMT
2. Evolution to the Proposal
Basic Architecture
Enhanced Architecture
3. Electrical Architecture
Failure Modes, Effects and Criticality Analysis (FMECA)
Electro-Magnetic Compatibility
Signal Integrity
Safe Machine Parameters System

17. Phase I Architecture
Safe Machine Parameters System

18. Phase II Architecture
Safe Machine Parameters System

19. Phase III Architecture
Safe Machine Parameters System

20. Discussion Phase I – Deadline October / November 2007
Specify I/O of Chassis
Specify Internal Layout of Chassis
Specify Electrical Level Architecture for Whole Chassis
Build simple Prototype based in the LAB
Phase II – Deadline February / March 2008
Expand Prototype to include redundancy
Develop Fail-safe, Monitoring and Test Mode in the LAB and SPS
Phase III – Deadline Summer 2008
Include all Safety Aspects
Include all FESA type Monitoring
In the LAB, SPS and when completed roll out to LHC
Safe Machine Parameters System

21. Discussion Several PCBs will be needed
rely on existing technology and ideas. Don’t reinvent the wheel!
See 1.
Diagnosis and Monitoring needed
Test modes needed
System will be in one location, no need for remote update
System will be built twice (plus spares) manufacturability NOT hugely critical
CPLD / FPGA technology = good
VHDL/Schematic Entry = good
Displays / debugging access = good
Elegant design, robust and ergonomic = good
PCAD = good
Design office = not so good
12b. Documentation is very very good.
Safe Machine Parameters System

22. Discussion Your mission, should you choose to accept, is
to participate in the realisation of the safe machine parameters system
Ambitious, I know
BUT…
I know you guys want a challenge
First thing is to digest the documentation Bruno has…
It’s all preliminary
2 weeks: chassis sketches and electrical architectures
Leading to several projects 
Safe Machine Parameters System

23. FIN
Safe Machine Parameters System