SNS Integrated Control System MPS - Commissioning Plans 1. Quick MPS System Overview 2. Run Permit System 3. Fast Protect Auto Reset 4. Fast Protect Latched 5. High QA (Hard Wired) MPS System

SNS Integrated Control System MPS Design Assumptions l Four layers of protection! »High QA (Hardware)PLC »Hardware / Software(Fast Protect System) »Software (Run Permit System) l Machine Protection System is not a “Safety Class” or “Safety Significant” System. l SNS will be built and commissioned in Phases, MPS must accommodate this schedule, (Flexible and Reliable). l Reliability – The Machine Protection System must inhibit the beam when required. It must fail in a SAFE state. l Availability – The machine availability should be as high as possible. The MPS must be easy to configure and have a “friendly” operator interface. False trips must be minimized.

SNS Integrated Control System MPS - Layered Protection

SNS Integrated Control System MPS Commissioning (Verification, systems checked previously without beam, Commissioning and testing) l Run Permit System (1 second) »Verifies IOC configuration and beam line equipment status. »MPS masking, Beam Power limit verification l Fast Protect Auto Reset (20 microseconds) »Beam Loss Monitors »Beam Current Monitors l Fast Protect Latched System (20 microseconds) »Power Supply status, RF, Kicker status »System cooling status (Collimators, dumps, etc) »Etc. l High QA MPS (~ 33 msec) »Magnetic Field limit(s) verification »Beam Diagnostics verification, calibration, testing

SNS Integrated Control System MPS Fast Protect System Layout

SNS Integrated Control System MPS Shutoff Equipment l Hard Wire Protect »RF drive to RFQ Power Supply interlocks »65 KV Power Supply Interlocks l Fast Protect – Auto Reset »RF drive to RFQ »LEBT Chopper l Fast Protect - Latched »65 KV Power supply »RFQ Power Supply l Run Permit »Fast Protect - Latched »Fast Protect - Auto Reset l ( Time Line Decoder (un-schedule all beam) )

SNS Integrated Control System MPS - Fast Protect Inputs LLRF Inputs could be auto reset (FPAR) ~50% of corrector supplies will not initially be MPS inputs HEBT 12/18, RING 12/126, RTBT 12/19 BLM’s could be Latched, as determined during commissioning

SNS Integrated Control System Bypassing MPS Inputs l Allow easy bypass (Software Masking) »Different rules for commissioning and operations »Commissioning, FPAR devices can be masked »Commissioning, FPL – subset of Quads and correctors can be masked, all dipoles and rest of quads need ASD Radiation safety approval. »Commissioning team – ASD-RS should agree on list before commissioning. l Easy OPI for verifying, changing software MASK. l MODE masks are defined by ASD-RS, not easily changed.

SNS Integrated Control System

Run Permit System – Tasks l Machine Mode Setup »Machine Mode (Dump) and Beam Mode (Power, Width restrictions) Selection (From High QA System) »Longitudinal pulse profile verification and selection »Verifies machine setup before changing mode l Schedules Machine Sequence »Keeps Beam, RF, Modulator gates in sync »Schedules Pulse Profiles at requested rate »Calculates / verifies table checksums (pulse to pulse) l Operator Interface to MPS »Control and Status Displays »Software Masking of inputs / Trip limit Controls l Hardware configuration verification »SNL task scans IOC hardware configuration for verification

SNS Integrated Control System Run Permit System – Mode Definitions l Machine Modes »Ion Source »D-Plate »Linac Dump »Injection Dump »Ring »Extraction Dump »Target l Beam Modes »Beam Off »Diagnostics (10 usec) »Diagnostics (50 usec) »Diagnostics (100 usec) »Full Pulse Width (1 msec) »Low Power (7.5 kW) »Medium Power (200 kW) »Full Power (2 MW) l Machine mode selected by Key switch in control room, Beam Mode selected by Key or software. Switches read by High QA MPS system.

SNS Integrated Control System RPS – Operating Envelope Calculations

SNS Integrated Control System User Beam Profile Request

SNS Integrated Control System MPS Top Level Screen

SNS Integrated Control System Run Permit System – Operator Interface

SNS Integrated Control System Typical Top Level Screens l Global Software Mask Status Display l BLM Trip Point Display l Time / Fault display line »Post Mortem playback, Loss verses RF, etc l Time Line Recorder »Timing system faults, missing events, extra events, etc l PPS Status, Beam line readiness, etc l Fault by system, Fault by area l Beam Profile scheduling, Rate requests, etc. l Requests for specific displays seen elsewhere appreciated, a quick hand sketch is useful.

SNS Integrated Control System

Fast Protect – Auto Reset l ALARA – Pulse Width Modulation, Tuning Aid l Concentrates Permit Inputs l Beamline Inputs Bypassed by Mode l Inhibits carrier link to disable Beam l Typical Inputs: »Loss Monitors »Time Line Recorder (Noise detected on Event Link) »Differential current monitors l Auto resets for next beam pulse, Latches to FAULT state after N trips in M pulses l Auto mask sets(MODE MASK) (Wire Scanners) »Mode allows WS to be bypassed, SW Mask bypasses WS input

SNS Integrated Control System SNS BLM SYSTEM DESIGN CRITERIA Upper end signal: (Fast Protect Auto Reset) – Maximum beam loss of 1 % at a single location –35-50 kHz signal BW –Beam interrupt via MPS based on integrated loss during pulse ( 10 μsec response) Lower end signal: (Beam Loss Accounting System) –Set by 1 W/m requirement for maintenance –Must resolve 1% of 1 W/m but at BW of < 1 Hz –Warning only after extended period of loss (1 minute) –(Saeed Assadi, MPS FDR slides)

SNS Integrated Control System BLM-- Specification: Fast Loss : (Determine thresholds during commissioning) 1)10 µsec Detect-to-Beam Inhibit time. 2) Programmable threshold, each detector, level changes/macro-pulse 3) Each detector maskable (eliminate bad channels, permit studies resulting in higher than normal losses) Single output line/analog crate Long-term: (Calibration Studies) 1) Low level loss: "Soft" alarm through network or 2) Programmable threshold, each detector, 3) Each detector maskable (eliminate bad channels, permit studies resulting in higher than normal losses) Single output line/analog crate Local Data Storage: "Flight-Recorder Mode, 60 (1-second) records of "Detailed Losses" for each detector. Available for read-back on beam abort. In-Situ System check: On-line check of all detectors, connections and electronics by cycling HV Off/On.

SNS Integrated Control System BLM AFE Configuration

SNS Integrated Control System Beam and Loss Display (Simulated data II)

SNS Integrated Control System LINAC Dose Rate: ** Data is provided by Franz X Gallmeier.

SNS Integrated Control System LINAC Dose Rate (Simulated data) Distance along LINAC  Time 

SNS Integrated Control System Beam Loss Monitors (Commissioning) l Verify BLM Operation (Part of BLM / Diagnostics commissioning plans) l MPS »Measure (Verify) Integration Times (1 % Loss) »Determine Trip Point Limits for each BLM »Determine Radiation Dose Calibration »Calibrate losses in units of W/m »Verify Masking Capabilities (Software masks) »Verify Wire Scanner Masks (BLM Mode masks) l BLM Accounting »Calibrate low loss measurements –Change vacuum by order(s) of magnitude? l See Saeed’s slides from Ring commissioning meeting in Dec and slides from MPS FDR: »

SNS Integrated Control System Commissioning activities l Select device and mask (or desensitize) adjacent devices l Loose beam, verify time response »Log MPS input fault time »Log Front end shutdown time »Verify response time with diagnostics: –Current monitors, analog signal, scope mode –Fast Loss Monitor(s) –BPM Power (Amplitude) l Verify Loss mechanism (Change vacuum, monitor response) l Determine appropriate trip levels for commissioning, operations »Poor vacuum conditions, Energy changes, Tune changes (Instabilities) l Calibrate differential current monitors vs. Beam loss monitors l Identify, Eliminate(minimize) sources of false trips »Beam noise (50 1MHz), Kicker noise, etc.

SNS Integrated Control System Conclusions: 1)SNS expects to maintain losses below 1Watt/meter over most of the Accelerator in order to allow hands-on maintenance. As such the BLM system will play a major roll in commissioning. 2)Important loss mechanisms include gas stripping, magnetic stripping and Halo generation from “mismatches”. We hope to use the BLM system to confirm the models and set the limits for the BLM-to-MPS trip levels. 3)Loss Monitor system will provide signals to the MSP system which are not modifiable by software (a layer of protection). 4)HARPS and specialized edge loss detection diagnostics are under studies but not included in the base-line systems yet.

SNS Integrated Control System

Fast Protect - Latched System l Concentrates Permit Inputs l Latches carrier link in FAULT state to disable beam l Input bypassing allowed with Jumper, Key or PLC l Beam line inputs bypassed by machine mode (event link) l Equipment maintained in locked racks l Documentation control of changes l System verification after changes l When MPS inputs need bypassing for beam studies, Software masking will be available as required. (Masking some devices will need the approval from Radiation safety committee)

SNS Integrated Control System Fast Protect - Latched Inputs l Power supply status (Fault when PS is not ON) l Valve Status (Fault when valve is not OPEN) l LLRF RF Status (Fault when PS is not Enabled) l Target Status »Response should be faster than target shutdown signal. »Time Stamp verifies MPS ACTED FIRST l Dump Status (Fault when all dump sensor not OK) l Loss monitors (High QA chipmunks) l Timing System Status »Ring RF required for IDMP, RING, EDPM, and target modes »Local Oscillator allowed for LDMP, D-plate, and Ion Source modes l PPS Input »PPS search status will latch off beam

SNS Integrated Control System Vacuum Level – MPS trip levels Vacuum Level Requirements SystemDesign ConditioningOperational(1)DocumentTrip FE5x x x10 -6 Front End Systems SRD DTL1x x x10 -6 Linac Systems SRD CCL5x x x10 -7 Linac Systems SRD SCL1x x x10 -8 Vacuum System Interrupts (2) Coupler1x x x10 -7 Vacuum System Interrupts (3) HEBT5x x x10 -7 Ring and Transfer lines (4) Ring1x x x10 -8 Ring and Transfer lines RTBT1x x x10 -7 Ring and Transfer lines (1) Actual trip points can vary and will be set during commissioning. (2) Gate valves close if vacuum > 1x10 -9 longer than 3600 seconds or > ASAP. (3) Inhibit RF and Beam if pressure >10 -8 for 10 seconds, for 1 second, or ASAP. (4) Estimated losses due to H- stripping (50% H  ~ cm 2 /atom, 50% Oxygen, Nitrogen  ~ cm 2 /atom) is 0.3 nA/m at 5x10 -8 Torr. l Vacuum Status – Valve closures operate trip defined below. Integrated vacuum levels produce EPICS Alarms, which could shut off the beam (MPS). MPS trips on VALVE Closure.

SNS Integrated Control System Fast Protect - Latched Inputs l Injection Kickers l Extraction Kickers l Ring RF l Current monitors l HARP – Backup to HQA-MPS l SEM »Possible backup to HARP l Beam Position Monitors »Beam off target/dump violation

SNS Integrated Control System Fast Protect - Latched Inputs l EPICS Alarm Inputs »EPICS Alarms for any PV can trigger latched input on a board level or input signal level. l MPS Verification Software »SNL program verifies jumper settings, Latches beam off in case of discrepancy. l Beam Loss Accounting »Integrated loss sets Alarm, could trip beam l Beam Current Accounting

SNS Integrated Control System

Injection Kicker l 2 Horizontal, 2 Vertical pairs, 8 power supplies l Power supply status inputs to MPS-FPL l Each kicker in a pair should be matched l Fault on unmatched waveforms ? »Run Loss studies on unmatched waveforms. »Sensitivity studies on painting schemes l 2 kHz comparators for Reference and Shunt

SNS Integrated Control System Injection Foil l Foil Failure »Beam Loss Monitors »HARPS »Integrating Current Monitor »Peak Current Monitor »Foil Video monitor l Foil Motion »Low power mode required? (LANSCE allows) »LVDT – Motion range available »Limit Switches l Foil Position »Use Mode Mask to allow beam for BLANK foil position or Phosphorous screen in place

SNS Integrated Control System Ring RF MPS Considerations l RF Power Supply l RF Cavity Field Error Signals l Reflected Power l RF Phase Error monitoring l RF – Beam phase monitoring? l RF Power Ramping (Amplitude modulation?) l Commissioning studies to determine acceptable losses verses RF parameters.

SNS Integrated Control System Ring Collimator MPS Inputs l Temperature sensors l Water Flow l Normal loss monitors? (Dynamic range OK?) l Motion – (Drop to lower beam power?) l Motion out of range (LVDT’s?) l Limit Switches

SNS Integrated Control System Extraction Kicker l “Fast and Slow” Kicker protection will be combined to give MPS one Fault output. (Charging supply status, Kicker Charged, Thyratron supply OK, Filament supply status, temp, flow, etc.) l One MPS signal per kicker. »Allow Operations to mask one kicker out. EPICS App. Does not allow more than one kicker to be masked l Kicker System needs 3 pulses from timing system, Start charge, Stop Charge, and Extract. l False firing – Abort ASAP or synchronous with beam gap. l Storage mode: If kickers are used to abort beam in storage mode additional timing signals are required, charging current goes through kicker magnets (1/e ~1sec), and kickers would need to be masked during storage.

SNS Integrated Control System

High QA MPS Dump, TGT, Window l HQA – Time response, 32 msec (12 msec measured ) »Latched in PLC »Does not rely on Software l Machine Can Take Two Full Pulses l High QA configuration Controls »Hardware normally inaccessible »System Verification, routine testing »Documentation trail »Operational procedures l Redundancy –1 PLC, double up on sensors, use MPS-FPL for redundancy l Redundant shutdown devices

SNS Integrated Control System Control Net Layout

SNS Integrated Control System High QA PPS Inputs and Selection Switches l Personnel Protection System »Linac zone »HEBT Zone »Ring Zone »RTBT Zone »Target Zone l Machine Mode Selection »Ion Source »D-Plate »L_DMP »I_DMP »RING »E_DMP »TGT l Beam Mode Selection »7.5 kW »200 kW »2 MW »10 μsec »50 μsec »100 μsec »1 msec

SNS Integrated Control System High QA Dump, Target PLC Remote Inputs l Target (or Dump) Status »Pressure, Temperature »Flow, Vacuum status l Power supply current monitor’s »Current and Voltage window comparators »Quads – Hi window, Dipoles, Hi and Off windows. »Steering corrector’s – Window (RTBT only) l HARP Status, P-P Permit Signal (Target only, Baseline) l Beam Current Monitor (Not in baseline, Hardware not chosen) »Co-Injection (Pulse-to-Pulse Species Modulation) ? »P-P Pulse Width verification »Beam Power, Integrated Beam Current l Beam Loss Monitor (2 per current monitor)

SNS Integrated Control System Injection Dump inputs

SNS Integrated Control System Target MPS Inputs

SNS Integrated Control System Power Supply Window monitors l Quad (Dipole) Magnet current compared with upper and lower limits, set in PLC Code. Limits determined by Accelerator Physics group. Magnet voltage used as redundant sensor. Commissioning: 1. With any input beam characteristics, quads limit peak current density at window and dump(tgt) below charge density threshold. 2. Upper and lower limits allow tunability from lowest LINAC energy to highest energy. 3. Beam size (density) verified by Wire Scanners and HARPS.

SNS Integrated Control System Power Supply Setting’s – Linac Dump (Data from Deepak)

SNS Integrated Control System Power Supply Setting’s – Linac Dump Window (Data from Deepak) l Problem in this case was percent of beam outside allowable area on dump)

SNS Integrated Control System Harp Commissioning l Target Harp can not operate 1 Yr. Pulse to Pulse l Target Harp is not retractable and is connected to window l Harp will probably survive a few months. l Operating Philosophy »Install set of redundant, retractable HARPS 180º upstream »Commission retractable HARPs with Window HARP »Set comparator limits on Optics »Once a year, verify system HARPS

SNS Integrated Control System Beam Current Monitor l Beam Power on Target (Dump) measurement l Target has maximum charge on target spec l Current monitor used to normalize Harp and WS l Current monitor problems: »Droop (L_DMP, I_DMP) –Use baseline correction for toroids »False signals with beam spray –Use Beam Loss Monitors (2) to monitor loss on toroid core. »Baseline monitors use software –Purchase Bergoz PDCCT or equivalent