Development of a framework for the risk assessment of Na-Tech accidental events

Natural events impacting on chemical and process plants may cause severe accidents, triggering the release of relevant quantities of hazardous substances. The present study focused on the development of the tools needed to build up a general framework allowing the extension of quantitative risk assessment procedure to include the analysis of the industrial accidents caused by natural events. Specific methods and models were developed to allow the quantitative assessment of risk caused by two categories of “Na-Tech” accidents: accidents triggered by earthquakes and accidents triggered by floods. The approach allows the identification of the different damage modes expected for process equipment and of the accidental scenarios that may be triggered. The damage models developed allow the calculation of the damage probability of equipment items due to the natural events. A specific methodology was issued to take into account the consequences of the possible contemporary failure of several process units due to the impact of the natural event. The procedure allows the calculation of the overall individual and societal risk indexes including the multiple-failure scenarios caused by the impact of natural events. The overall methodology was applied to the analysis of specific case studies.     

基于事故树的海岛爆破飞石风险辨识

为帮助海岛爆破工程科学系统化的作业,运用事故树分析法对海岛爆破飞石事故的产生原因进行了分析,建立了爆破飞石事故树图,求出最小割集13个,最小径集8个,得到了基本事件的重要结构度值。结果表明:爆破方案审核不严、现场管理不当等问题是造成海岛爆破飞石事故的主要原因,针对这些基本事件提出了4点预防爆破飞石事故的对策措施,为今后的海岛工程爆破系统作业提供了决策支持。     

基于事故树的海岛爆破飞石风险辨识

为帮助海岛爆破工程科学系统化的作业,运用事故树分析法对海岛爆破飞石事故的产生原因进行了分析,建立了爆破飞石事故树图,求出最小割集13个,最小径集8个,得到了基本事件的重要结构度值。结果表明:爆破方案审核不严、现场管理不当等问题是造成海岛爆破飞石事故的主要原因,针对这些基本事件提出了4点预防爆破飞石事故的对策措施,为今后的海岛工程爆破系统作业提供了决策支持。     

A logical model for quantification of occupational risk

Functional block diagrams (FBDs) and their equivalent event trees are introduced as logical models in the quantification of occupational risks. Although a FBD is similar to an influence diagram or a belief network it provides a framework for introduction in a compact form of the logic of the model through the partition of the paths of the equivalent event tree. This is achieved by consideration of an overall event which has as outcomes the outmost consequences defining the risk under analysis. This event is decomposed into simpler events the outcome space of which is partitioned into subsets corresponding to the outcomes of the initial joint event. The simpler events can be further decomposed into simpler events creating a hierarchy where the events in a given level (parents) are decomposed to a number of simpler events (children) in the next level of the hierarchy. The partitioning of the outcome space is transferred from level to level through logical relationships corresponding to the logic of the model.Occupational risk is modeled trough a general FBD where the undesirable health consequence is decomposed to “dose” and “dose/response”; “dose” is decomposed to “center event” and “mitigation”; “center event” is decomposed to “initiating event” and “prevention”. This generic FBD can be transformed to activity—specific FBDs which together with their equivalent event trees are used to delineate the various accident sequences that might lead to injury or death consequences.The methodology and the associated algorithms have been computerized in a program with a graphical user interface (GUI) which allows the user to input the functional relationships between parent and children events, corresponding probabilities for events of the lowest level and obtain at the end the quantified corresponding simplified event tree.The methodology is demonstrated with an application to the risk of falling from a mobile ladder. This type of accidents has been analyzed as part of the Workgroup Occupational Risk Model (WORM) project in the Netherlands aiming at the development and quantification of models for a full range of potential risks from accidents in the workspace.     

Master Logic Diagram: method for hazard and initiating event identification in process plants

Master Logic Diagram (MLD), a method for identifying events initiating accidents in chemical installations, is presented. MLD is a logic diagram that resembles a fault tree but without the formal mathematical properties of the latter. MLD starts with a Top Event "Loss of Containment" and decomposes it into simpler contributing events. A generic MLD has been developed which may be applied to all chemical installations storing toxic and/or flammable substances. The method is exemplified through its application to an ammonia storage facility.     

A methodology for the quantitative risk assessment of major accidents triggered by seismic events

A procedure for the quantitative risk assessment of accidents triggered by seismic events in industrial facilities was developed. The starting point of the procedure was the use of available historical data to assess the expected frequencies and the severity of seismic events. Available equipment-dependant failure probability models (vulnerability or fragility curves) were used to assess the damage probability of equipment items due to a seismic event. An analytic procedure was subsequently developed to identify, evaluate the credibility and finally assess the expected consequences of all the possible scenarios that may follow the seismic events. The procedure was implemented in a GIS-based software tool in order to manage the high number of event sequences that are likely to be generated in large industrial facilities. The developed methodology requires a limited amount of additional data with respect to those used in a conventional QRA, and yields with a limited effort a preliminary quantitative assessment of the contribution of the scenarios triggered by earthquakes to the individual and societal risk indexes. The application of the methodology to several case-studies evidenced that the scenarios initiated by seismic events may have a relevant influence on industrial risk, both raising the overall expected frequency of single scenarios and causing specific severe scenarios simultaneously involving several plant units.     

基于FTA模型的荔枝冷藏运输环节风险分析

目的解决荔枝冷藏运输环节中安全风险识别及定性分析的难题。方法基于因素空间及故障树分析模型(FTA),分析荔枝冷链运输环节的安全事件集、空间结构(工位)集和简约因素集,建立荔枝冷藏运输环节风险因素关系矩阵,通过矩阵运算获取不同空间结构下荔枝运输安全事故发生的基本事件。结果根据运算求解结果,构建荔枝运输环节的故障树模型,获取了运输环节故障树的最小割集。荔枝冷藏运输事故最小割集数为13个,并分析了各个基本事件的结构重要度。结论通过研究最小割集及事件的结构重要度,进行荔枝冷链运输环节的安全分析,并提出了促进现场安全管理的对策及建议。     

Safety analysis in process facilities: Comparison of fault tree and Bayesian network approaches

Safety analysis in gas process facilities is necessary to prevent unwanted events that may cause catastrophic accidents. Accident scenario analysis with probability updating is the key to dynamic safety analysis. Although conventional failure assessment techniques such as fault tree (FT) have been used effectively for this purpose, they suffer severe limitations of static structure and uncertainty handling, which are of great significance in process safety analysis. Bayesian network (BN) is an alternative technique with ample potential for application in safety analysis. BNs have a strong similarity to FTs in many respects; however, the distinct advantages making them more suitable than FTs are their ability in explicitly representing the dependencies of events, updating probabilities, and coping with uncertainties. The objective of this paper is to demonstrate the application of BNs in safety analysis of process systems. The first part of the paper shows those modeling aspects that are common between FT and BN, giving preference to BN due to its ability to update probabilities. The second part is devoted to various modeling features of BN, helping to incorporate multi-state variables, dependent failures, functional uncertainty, and expert opinion which are frequently encountered in safety analysis, but cannot be considered by FT. The paper concludes that BN is a superior technique in safety analysis because of its flexible structure, allowing it to fit a wide variety of accident scenarios.     

Application of artificial neural networks to nuclear power plant transient diagnosis

A study on various artificial neural network (ANN) algorithms for selecting a best suitable algorithm for diagnosing the transients of a typical nuclear power plant (NPP) is presented. NPP experiences a number of transients during its operations. These transients may be due to equipment failure, malfunctioning of process systems, etc. In case of any undesired plant condition generally known as initiating event (IE), the operator has to carry out diagnostic and corrective actions. The objective of this study is to develop a neural network based framework that will assist the operator to identify such initiating events quickly and to take corrective actions. Optimization study on several neural network algorithms has been carried out. These algorithms have been trained and tested for several initiating events of a typical nuclear power plant. The study shows that the resilient-back propagation algorithm is best suitable for this application. This algorithm has been adopted in the development of operator support system. The performance of ANN for several IEs is also presented.     

Procedures and applications to enlarge the level 1+ PSA to internal fires in German nuclear power plants

Investigations have shown that the consequences from fires in nuclear power plants can be significant. Methodologies considering fire in probabilistic safety analyses have been evolving in the last few years. In order to provide a basis for further discussions on benefits and limits of such an analysis in Germany, current methods are investigated. As a result a qualitative screening process is proposed to identify critical fire zones followed by a quantitative event tree analysis in which the fire caused frequency of initiating events and different core damage states will be determined. The models and data proposed for a probabilistic fire risk analysis have been successfully applied in complete and partial fire risk assessments in German nuclear power plants.     

Analytical simulation and PROFAT II: a new methodology and a computer automated tool for fault tree analysis in chemical process industries

Fault tree analysis (FTA) is based on constructing a hypothetical tree of base events (initiating events) branching into numerous other sub-events, propagating the fault and eventually leading to the top event (accident). It has been a powerful technique used traditionally in identifying hazards in nuclear installations and power industries. As the systematic articulation of the fault tree is associated with assigning probabilities to each fault, the exercise is also sometimes called probabilistic risk assessment. But powerful as this technique is, it is also very cumbersome and costly, limiting its area of application. We have developed a new algorithm based on analytical simulation (named as AS-II), which makes the application of FTA simpler, quicker, and cheaper; thus opening up the possibility of its wider use in risk assessment in chemical process industries. Based on the methodology we have developed a computer-automated tool. The details are presented in this paper.     

The perception of causes of accidents in mountain sports: A study based on the experiences of victims

Each year, accidents involving mountain sports have many repercussions, including alarming public opinion and society. This study outlines the results of a qualitative study on the responses of 135 survivors of accidents that took place while mountaineering, climbing, downhill skiing and ski mountaineering, hiking, cross-country biking, and mountain racing. A content analysis was performed on the textual data obtained from the responses to an online survey. The identified causes were: environmental events, equipment, medical events, behavioral events, and time pressure, but they appear combined in different ways for the analyzed disciplines. Results show that for downhill skiing, direct causes of accidents were mainly behavioral: excessive speed, skiing errors, and fatigue. For ski mountaineering, direct causes were errors in decision-making and skiing. In mountaineering, precursors were unfavorable conditions, fatigue, lack of preparation, and skill errors. In climbing, difficulty is an omnipresent feature, but the precursors are mainly errors. Our results highlight the multi-causal nature of accidents that take place when practicing mountain sports. Finally, we examine the need to promote a mountain sports culture that highlights safety and injury prevention.     

A PSA-based vital area identification methodology development

This paper presents a vital area identification method based on the current probabilistic safety assessment (PSA) techniques. The vital area identification method in this paper is focused on core melt rather than radioactive material release. Furthermore, it describes a conceptual framework with which the risk from sabotage-induced events could be assessed.Location minimal cut sets (MCSs) are evaluated after developing a core melt location fault tree (LFT). LFT is a fault tree whose basic events are sabotage-induced damages on the locations within which various safety-related components are located. The core melt LFT is constructed by combining all sequence LFTs of various event trees with OR gates. Each sequence LFT is constructed by combining the initiating event LFT and the mitigating event LFTs with an AND gate. The vital area could be identified by using the location importance measures on the core melt location MCSs. An application was made to a typical 1000 MWe pressurized water reactor power plant located at the Korean seashore.The methodology suggested in the present paper is believed to be very consistent and most complete in identifying the vital areas in a nuclear power plant because it is based on the well-proven PSA technology.     

Mathematical foundations of event trees

A mathematical foundation from first principles of event trees is presented. The main objective of this formulation is to offer a formal basis for developing automated computer assisted construction techniques for event trees. The mathematical theory of event trees is based on the correspondence between the paths of the tree and the elements of the outcome space of a joint event. The concept of a basic cylinder set is introduced to describe joint event outcomes conditional on specific outcomes of basic events or unconditional on the outcome of basic events. The concept of outcome space partition is used to describe the minimum amount of information intended to be preserved by the event tree representation. These concepts form the basis for an algorithm for systematic search for and generation of the most compact (reduced) form of an event tree consistent with the minimum amount of information the tree should preserve. This mathematical foundation allows for the development of techniques for automated generation of event trees corresponding to joint events which are formally described through other types of graphical models. Such a technique has been developed for complex systems described by functional blocks and it is reported elsewhere. On the quantification issue of event trees, a formal definition of a probability space corresponding to the event tree outcomes is provided. Finally, a short discussion is offered on the relationship of the presented mathematical theory with the more general use of event trees in reliability analysis of dynamic systems.     

一起爆破飞石事故的事故树分析

在诸多露天采场爆破事故中,飞石事故占很大的比率,对矿区的安全生产构成了严重威胁.针对一起飞石事故案例,利用系统安全分析中的事故树分析方法,通过最小割集和最小径集的求取,寻找事故发生的原因,提出爆破飞石事故的预防途径和控制措施,从而有针对性地采取安全对策,以减少事故的发生.     

Comparison of Markov model and fault tree approach in determining initiating event frequency for systems with two train configurations

This study explores the use of Markov models in some areas of systems analysis in which time evolution of the system may be a significant factor in influencing the system reliability or availability. Comparisons are made between the Markov models and the time-averaged fault tree models for determining support system failure initiating event frequency in a nuclear power plant, for both power and shutdown conditions. Factors affecting consistency between the fault tree approach and the Markov model approach are studied for systems with common two train configurations. A correlation is developed to estimate the ratio between initiator frequencies through both approaches for a two parallel component system. Insights are developed as to when time averaged and simplified fault tree models support a good approximation to the more rigorous time-dependent Markov models.     

Quantitative risk analysis of oil storage facilities in seismic areas

Quantitative risk analysis (QRA) of industrial facilities has to take into account multiple hazards threatening critical equipment. Nevertheless, engineering procedures able to evaluate quantitatively the effect of seismic action are not well established. Indeed, relevant industrial accidents may be triggered by loss of containment following ground shaking or other relevant natural hazards, either directly or through cascade effects ('domino effects'). The issue of integrating structural seismic risk into quantitative probabilistic seismic risk analysis (QpsRA) is addressed in this paper by a representative study case regarding an oil storage plant with a number of atmospheric steel tanks containing flammable substances. Empirical seismic fragility curves and probit functions, properly defined both for building-like and non building-like industrial components, have been crossed with outcomes of probabilistic seismic hazard analysis (PSHA) for a test site located in south Italy. Once the seismic failure probabilities have been quantified, consequence analysis has been performed for those events which may be triggered by the loss of containment following seismic action. Results are combined by means of a specific developed code in terms of local risk contour plots, i.e. the contour line for the probability of fatal injures at any point (x, y) in the analysed area. Finally, a comparison with QRA obtained by considering only process-related top events is reported for reference.     

Acoustic emission during fatigue of Ti-6Al-4V: Incipient fatigue crack detection limits and generalized data analysis methodology

The fundamentals associated with acoustic emission monitoring of fatigue crack initiation and propagation of Ti-6Al-4V were studied. Acoustic emission can detect and locate incipient fatigue crack extensions of approximately 10 m. The technique therefore can serve as a sensitive warning to material failure. There are three distinct stages during which acoustic emission is generated. These stages are: crack initiation, slow crack propagation and rapid crack propagation. The distinction between the stages is based primarily on the rate of acoustic emission event accumulation. These three stages of acoustic emission correspond to the three stages of the failure process that occurs during fatigue loading. That is, changes in acoustic emission event rate correspond to changes in crack extension rate. Acoustic emission event intensities are greater during crack initiation than during slow crack propagation and greatest during rapid crack propagation. In a given fatigue cycle, event intensities increase with increasing stress and most high-intensity events occur near or at the maximum stress. Acoustic emission may therefore be used with confidence to detect, monitor and anticipate failure, in real-time.     

A systematic approach to analysing errors of commission from diagnosis failure in accident progression

The accident scenarios of a nuclear power plant are composed of an initiating event (IE), additional events/failures and human inappropriate actions, the combinations of which lead to irreversible consequences. In such a dynamic situation, operators should diagnose the occurring events/failures (including an initiating event and additional events) and assess the related situations utilising the available resources such as operating procedures or human–machine systems to control and maintain the plant in a stable condition. The misdiagnosis or diagnosis failure of the occurring events could cause critical human inappropriate actions that aggravate the plant condition, which is termed as errors of commission (EOCs). This paper presents a methodology for analysing the potential for diagnosis failure of the initiating and additional events and the consequent EOC events, based on the operating procedures, in the accident scenarios of nuclear power plants. The method to be presented categorizes the diagnostic situations in the accident scenarios into three cases according to the structure of the emergency operating procedures (EOPs) and the time of the occurring events: (1) the diagnosis of an initiating event, (2) the diagnosis of both an initiating event and an additional event when an additional event occurs prior to the performance of the diagnosis procedure, and (3) the diagnosis of an additional event when an additional events occurs after the performance of the diagnosis procedure. The application of the method is illustrated through three case example scenarios: (1) the power-operated relief valve (PORV) or the pressurizer safety valve (PSV) LOCA, (2) the loss of all feedwater (LOAF) event (loss of main feedwater*loss of auxiliary feedwater), (3) the sequence of<the station blackout (SBO)*loss of turbine-driven (or diesel-driven) auxiliary feedwater*PSV stuck-open*recovery of AC power>.     

Quantitative analysis of a fault tree with priority AND gates

A method for calculating the exact top event probability of a fault tree with priority AND gates and repeated basic events is proposed when the minimal cut sets are given. A priority AND gate is an AND gate where the input events must occur in a prescribed order for the occurrence of the output event. It is known that the top event probability of such a dynamic fault tree is obtained by converting the tree into an equivalent Markov model. However, this method is not realistic for a complex system model because the number of states which should be considered in the Markov analysis increases explosively as the number of basic events increases. To overcome the shortcomings of the Markov model, we propose an alternative method to obtain the top event probability in this paper. We assume that the basic events occur independently, exponentially distributed, and the component whose failure corresponds to the occurrence of the basic event is non-repairable. First, we obtain the probability of occurrence of the output event of a single priority AND gate by Markov analysis. Then, the top event probability is given by a cut set approach and the inclusion–exclusion formula. An efficient procedure to obtain the probabilities corresponding to logical products in the inclusion–exclusion formula is proposed. The logical product which is composed of two or more priority AND gates having at least one common basic event as their inputs is transformed into the sum of disjoint events which are equivalent to a priority AND gate in the procedure. Numerical examples show that our method works well for complex systems.