1. 1v1

2. Beam Interlock Systems
LHC2
LHC1
INJ2
INJ1
TI8
EXT1
TI2
CNGS
2006: SPS, EXT1, EXT2, CNGS operational
2007: TI2, TI8 operational
2008: INJ1, INJ2, LHC1, LHC2 operational
SPS
EXT2
Safe Machine Parameters System

3. Beam Interlock System At the end of last year:
99.996% availability 2006-date
Internally and externally reviewed
will be ready for 2010 with minor changes
for 2010:
Java Application has known limitation and bugs, not critical for operation.
Pre-Operational Checks and Internal Post-Operational Checks improvement
Automated Interface Tests to be implemented by User Systems
Additional inputs to be commissioned
Documented and ranked in JIRA, being implemented → Alick Macpherson
In progress, need more real events to use as templates → TE/MPE/MI
PIC, WIC, FMCM, BLM, BTV all ready, others coming → TE/MPE/MI and MPP
Redundant Beam Position Monitor in IR6 → installed if cables ready
“Injection Kicker in Timing Test Mode” key switch → in preparation
Safe Machine Parameters System

4. Safe Machine Parameters System
SPS SMP
LHC SMP
Safe Machine Parameters System

5. Safe Machine Parameters System
SPS SMP
LHC SMP
Safe Machine Parameters System

6. Safe Machine Parameters System
At the end of last year:
2008: SPS SMP operational
no missed extractions
no loss of availability due to this system
2009: LHC SMP operational
first implementation → some availability issues
Several changes → no availability issues
Safe Machine Parameters System

7. Compare BETS Energy + Status with BLM Energy
Energy Path
Compare BETS Energy + Status with BLM Energy
Safe Machine Parameters System

8. Energy Path Courtesy of G. Kourkafas, M. Koratzinos
Installation & commissioning of modified hardware
Before modification
2-3 times per week
Not observed since 20th November
Safe Machine Parameters System

9. Safe Machine Parameters System
At the end of last year:
2008: SPS SMP operational
no missed extractions
no loss of availability due to this system
2009: LHC SMP operational
first implementation → some availability issues
Several changes → no availability issues
Known limitations with 2009 version:
No consistency check between energy values received (from BETS)
No truly-redundant path for producing flags
Timing distribution is not cross-checked
User Permit connection from SMP to BIS is not implemented
Difficult to find balance between safety and availability
& feedback from BIS external review revealed areas for improvement:
System specifications are incomplete
Stakeholder expectations are not consistent
Difficult to appraise safety without a solid base
Current approach is not satisfactory
Safe Machine Parameters System

10. Two Phases
1. Reinforce the 2009 system for 2010 during the next four weeks
Software Interlock System – check energy over timing
Setup-Beam Flag – automatically forced false during normal physics fills
Masks on the BIS – automatically removed during normal physics fills
Jorg coordinating, ready for restart
afe
2. Overhaul LHC SMP in 2010, by 2011 ready for LHC nominal energy & intensity
Specification – re-write and ratification
SMP Controller – redesign (20% to 80%) to new specification
Safety Review – to check adherence
Note: SMP is only as strong as its dependencies:
Intensity Information – Beam Current Transformer
Dependability (safety, reliability, availability) must be clarified
Transmission medium – General Machine Timing
Various methods and solutions for cross-checking must be investigated
Safe Machine Parameters System