1. Universidade do Minho Escola de Engenharia Techniques for Modeling Discrete Controllers for the Optimization of Hybrid Plants: a Case Study Universidade do Minho - Escola de Engenharia 1 Departamento de Engenharia Mecânica 2 Departamento de Produção e Sistemas Campus de Azurém 4800-058 Guimarães Portugal Dynamics of Mechanical Systems E. Seabra 1 | J. Machado 1 | C. Leão 2 | L. F. Silva 1

2. 2 / 43 Outline Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

3. 3 / 43 Support SCAPS Project “Safety Control of Automated Production Systems” Simulation and Formal Verification of Real-Time Systems -taking into account the plant modeling Supported by FCT the Portuguese Foundation for Science and Technology, and FEDER, the European Regional Development Fund Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

4. 4 / 43 Automated system – Static point of view Controller Plant Does the program is correct ? (in accordance with the expected behavior?) OutputsInputs Scan cycleProgram Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

5. 5 / 43 Automated system – Dynamic point of view How to create the plant model for: -Simulation purposes? and/or -Formal verification purposes? Taking the time into account … Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

6. 6 / 43 State of the art Analysis Techniques of Industrial Controllers: Not exhaustive (Simulation) [Barton 1992] [Baresi et al. 1998] [Amerongen 2003] [Mattsson et al. 1998] [Lebrun 2003] Exhaustive (Formal Verification) -Model-Checking [Clarke et al. 1986] [Moon et al. 1992] -Theorem-proving [Volker & Kramer, 1999] [Roussel & Denis, 2002] -Reachability analysis [Kowalewski & Preu  ig,1996] [Frey & Litz, 2000] Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

7. 7 / 43 State of the art Analysis Techniques of Industrial Controllers: Not exhaustive ( Simulation ) [Barton 1992] [Baresi et al. 1998] [Amerongen 2003] [Mattsson et al. 1998] [Lebrun 2003] For Real-Time Hybrid systems (tools and formalisms): Dymola software and programming language Modelica [Elmqvist and Mattson, 1997]; with the library for hierarchical state machines StateGraph [Otter, 2005] Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

8. 8 / 43 Our Goal Modelica modeling language To show as Modelica modeling language can be used for:  Safety behavior of the system (Controller + Plant)  Optimization of hybrid plant behavior parameters  Analysis of discrete controllers for hybrid plants Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

9. 9 / 43 Case Study (Normal Behavior) Tank1 is filled with an aqueous solution by opening valve V12. When the level becomes high, the valve is closed and the heating system is switch on and also, in simultaneous, the cooling system of the condenser by opening valve V13. When the concentration desired in the tank1 is reached, there are switch off the heating system and the cooling system of the condenser. Continuously the solution flows from tank1 into tank2, and it must be guaranteed that the tank2 is empty. When the first tank is empty the solution in tank2 stays for post ‑ processing operation where the solution is heated to avoid possible crystallization, using two approaches: heat until the temperature sensor TIS2 indicates that the desired temperature was reached; or heat for a certain time. Finally, the tank2 is emptied by the pump P1, if the valve V18 be opened. Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

10. 10 / 43 Tank1 is filled with an aqueous solution by opening valve V12. When the level becomes high, the valve is closed and the heating system is switch on and also, in simultaneous, the cooling system of the condenser by opening valve V13. When the concentration desired in the tank1 is reached, there are switch off the heating system and the cooling system of the condenser. Continuously the solution flows from tank1 into tank2, and it must be guaranteed that the tank2 is empty. When the first tank is empty the solution in tank2 stays for post ‑ processing operation where the solution is heated to avoid possible crystallization, using two approaches: heat until the temperature sensor TIS2 indicates that the desired temperature was reached; or heat for a certain time. Finally, the tank2 is emptied by the pump P1, if the valve V18 be opened. Case Study (Normal Behavior) Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

11. 11 / 43 Tank1 is filled with an aqueous solution by opening valve V12. When the level becomes high, the valve is closed and the heating system is switch on and also, in simultaneous, the cooling system of the condenser by opening valve V13. When the concentration desired in the tank1 is reached, there are switch off the heating system and the cooling system of the condenser. Continuously the solution flows from tank1 into tank2, and it must be guaranteed that the tank2 is empty. When the first tank is empty the solution in tank2 stays for post ‑ processing operation where the solution is heated to avoid possible crystallization, using two approaches: heat until the temperature sensor TIS2 indicates that the desired temperature was reached; or heat for a certain time. Finally, the tank2 is emptied by the pump P1, if the valve V18 be opened. Case Study (Normal Behavior) Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

12. 12 / 43 Tank1 is filled with an aqueous solution by opening valve V12. When the level becomes high, the valve is closed and the heating system is switch on and also, in simultaneous, the cooling system of the condenser by opening valve V13. When the concentration desired in the tank1 is reached, there are switch off the heating system and the cooling system of the condenser. Continuously the solution flows from tank1 into tank2, and it must be guaranteed that the tank2 is empty. When the first tank is empty the solution in tank2 stays for post ‑ processing operation where the solution is heated to avoid possible crystallization, using two approaches: heat until the temperature sensor TIS2 indicates that the desired temperature was reached; or heat for a certain time. Finally, the tank2 is emptied by the pump P1, if the valve V18 be opened. Case Study (Normal Behavior) Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

13. 13 / 43 Tank1 is filled with an aqueous solution by opening valve V12. When the level becomes high, the valve is closed and the heating system is switch on and also, in simultaneous, the cooling system of the condenser by opening valve V13. When the concentration desired in the tank1 is reached, there are switch off the heating system and the cooling system of the condenser. Continuously the solution flows from tank1 into tank2, and it must be guaranteed that the tank2 is empty. When the first tank is empty the solution in tank2 stays for post ‑ processing operation where the solution is heated to avoid possible crystallization, using two approaches: heat until the temperature sensor TIS2 indicates that the desired temperature was reached; or heat for a certain time. Finally, the tank2 is emptied by the pump P1, Case Study (Normal Behavior) Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

14. 14 / 43 Tank1 is filled with an aqueous solution by opening valve V12. When the level becomes high, the valve is closed and the heating system is switch on and also, in simultaneous, the cooling system of the condenser by opening valve V13. When the concentration desired in the tank1 is reached, there are switch off the heating system and the cooling system of the condenser. Continuously the solution flows from tank1 into tank2, and it must be guaranteed that the tank2 is empty. When the first tank is empty the solution in tank2 stays for post ‑ processing operation where the solution is heated to avoid possible crystallization, using two approaches: heat until the temperature sensor TIS2 indicates that the desired temperature was reached; or heat for a certain time. Finally, the tank2 is emptied by the pump P1, if the valve V18 be opened. Case Study (Normal Behavior) Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

15. 15 / 43 The condenser may fail: the steam can not be cooled and the pressure inside the condenser rises. The heater must be switched off to avoid the condenser explosion The temperature of tank1 decreases and the solution may become solid and can not be drained in tank2. Valve V15 must be opened early enough for preventing tank2 overflow, but after opening first valve V18 In the case of a condenser malfunction, it is also necessary to ensure some response times of the controller program whenever a condenser malfunction starts, the condenser can explode if steam is produced during 22 time units if the heating device is switched off, the steam production stops after 12 time units If no steam is produced in tank 1, the solution may solidify after 19 time units emptying tank 2 takes between 0 and 26 time units filling tank 1 takes 6 time units, at most Case Study (Failure behavior) Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

16. 16 / 43 The condenser may fail: the steam can not be cooled and the pressure inside the condenser rises. The heater must be switched off to avoid the condenser explosion The temperature of tank1 decreases and the solution may become solid and can not be drained in tank2. Valve V15 must be opened early enough for preventing tank2 overflow, but after opening first valve V18 In the case of a condenser malfunction, it is also necessary to ensure some response times of the controller program whenever a condenser malfunction starts, the condenser can explode if steam is produced during 22 time units if the heating device is switched off, the steam production stops after 12 time units If no steam is produced in tank 1, the solution may solidify after 19 time units emptying tank 2 takes between 0 and 26 time units filling tank 1 takes 6 time units, at most Case Study (Failure behavior) Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

17. 17 / 43 The condenser may fail: the steam can not be cooled and the pressure inside the condenser rises. The heater must be switched off to avoid the condenser explosion The temperature of tank1 decreases and the solution may become solid and can not be drained in tank2. Valve V15 must be opened early enough for preventing tank2 overflow, but after opening first valve V18 In the case of a condenser malfunction, it is also necessary to assure some response times of the controller program whenever a condenser malfunction starts, the condenser can explode if steam is produced during 22 time units if the heating device is switched off, the steam production stops after 12 time units If no steam is produced in tank 1, the solution may solidify after 19 time units emptying tank 2 takes between 0 and 26 time units filling tank 1 takes 6 time units, at most Case Study (Failure behavior) Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

18. 18 / 43 The condenser may fail: the steam can not be cooled and the pressure inside the condenser rises. The heater must be switched off to avoid the condenser explosion The temperature of tank1 decreases and the solution may become solid and can not be drained in tank2. Valve V15 must be opened early enough for preventing tank2 overflow, but after opening first valve V18 In the case of a condenser malfunction, it is also necessary to assure some response times of the controller program whenever a condenser malfunction starts, the condenser can explode if steam is produced during 22 time units if the heating device is switched off, the steam production stops after 12 time units If no steam is produced in tank 1, the solution may solidify after 19 time units emptying tank 2 takes between 0 and 26 time units filling tank 1 takes 6 time units, at most Case Study (Failure behavior) Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

19. 19 / 43 The condenser may fail: the steam can not be cooled and the pressure inside the condenser rises. The heater must be switched off to avoid the condenser explosion The temperature of tank1 decreases and the solution may become solid and can not be drained in tank2. Valve V15 must be opened early enough for preventing tank2 overflow, but after opening first valve V18 In the case of a condenser malfunction, it is also necessary to assure some response times of the controller program whenever a condenser malfunction starts, the condenser can explode if steam is produced during 22 time units if the heating device is switched off, the steam production stops after 12 time units If no steam is produced in tank 1, the solution may solidify after 19 time units emptying tank 2 takes between 0 and 26 time units filling tank 1 takes 6 time units, at most Case Study (Failure behavior) Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

20. 20 / 43 The condenser may fail: the steam can not be cooled and the pressure inside the condenser rises. The heater must be switched off to avoid the condenser explosion The temperature of tank1 decreases and the solution may become solid and can not be drained in tank2. Valve V15 must be opened early enough for preventing tank2 overflow, but after opening first valve V18 In the case of a condenser malfunction, it is also necessary to assure some response times of the controller program whenever a condenser malfunction starts, the condenser can explode if steam is produced during 22 time units if the heating device is switched off, the steam production stops after 12 time units If no steam is produced in tank 1, the solution may solidify after 19 time units emptying tank 2 takes between 0 and 26 time units filling tank 1 takes 6 time units, at most Case Study (Failure behavior) Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

21. 21 / 43 The condenser may fail: the steam can not be cooled and the pressure inside the condenser rises. The heater must be switched off to avoid the condenser explosion The temperature of tank1 decreases and the solution may become solid and can not be drained in tank2. Valve V15 must be opened early enough for preventing tank2 overflow, but after opening first valve V18 In the case of a condenser malfunction, it is also necessary to assure some response times of the controller program whenever a condenser malfunction starts, the condenser can explode if steam is produced during 22 time units if the heating device is switched off, the steam production stops after 12 time units If no steam is produced in tank 1, the solution may solidify after 19 time units emptying tank 2 takes between 0 and 26 time units filling tank 1 takes 6 time units, at most Case Study (Failure behavior) Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

22. 22 / 43 Controller specification for the system behavior SFC (IEC 60848) Specification Normal operation Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

23. 23 / 43 Controller specification for the system behavior SFC (IEC 60848) Specification Failure operation Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

24. 24 / 43 Controller specification for the system behavior SFC (IEC 60848) Specification StateGraphs (Otter, 2005) Simulation with Dymola Translation Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

25. 25 / 43 Modelica System Modeling Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

26. 26 / 43 Modelica model for tank1 (Evaporator) Plant modeling - Simulation Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

27. 27 / 43 Plant modeling - Simulation Takes into account the functioning constraints indicated before; There were modelled, also, the other system physical devices. Modelica model for tank1 (Evaporator) Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

28. 28 / 43 Plant modeling - Simulation Takes into account the functioning constraints indicated before; There were modelled, also, the other system physical devices Modelica model for tank1 (Evaporator) Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

29. 29 / 43 Controller modeling - Simulation StateGraph model for normal operation Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

30. 30 / 43 Controller modeling - Simulation StateGraph model for failure operation Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

31. 31 / 43 Simulation Methodology 1 – Simulation of system behavior using a discrete controller (operation and failure modes) 2 – Increasing the productivity of the system (number of batches in the evaporator system) Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

32. 32 / 43 Simulation of system behavior using a discrete controller Normal behavior – Tanks’ levels The two main properties are confirmed, the drainage of the solution present in the tank 1 only to happen when the tank2 is empty and also the filling of the tank1 to happen soon after this to be empty. Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

33. 33 / 43 Simulation of system behavior using a discrete controller Failure behavior (condenser malfunction) – Tanks’ levels It can be concluded that the failure operation mode is properly simulated, given that is proven that the tank1 is drained through the safety valve (V16) because it is seen that the tank2 remains empty. Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

34. 34 / 43 Increasing the productivity of the system The batches number optimization depends on the best synchronism that happens among the time in that the solution present in the tank1 is prepared to be drained and the time in that the tank2 finishes its emptying, because it implicates lesser wastes of time in the process. Among of several physical variables of the process it was chosen the heat supply rate (QHeat) because it is the most relevant variable that determine the rate of the steam formation (this condenses in the condenser C) and correspondingly, the time in that the solution present in the evaporator (tank1) is prepared to be drained (desired concentration reached). In addition, in all of the performed simulations, it was assumed a time of 200s for the solution powder-processing operation fulfill in the tank2. Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

35. 35 / 43 Increasing the productivity of the system The batches number optimization depends on the best synchronism that happens among the time in that the solution present in the tank1 is prepared to be drained and the time in that the tank2 finishes its emptying, because it implicates lesser wastes of time in the process. heat supply rate (QHeat) Among of several physical variables of the process it was chosen the heat supply rate (QHeat) because it is the most relevant variable that determine the rate of the steam formation (this condenses in the condenser C) and correspondingly, the time in that the solution present in the evaporator (tank1) is prepared to be drained (desired concentration reached). In addition, in all of the performed simulations, it was assumed a time of 200s for the solution powder-processing operation fulfill in the tank2. Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

36. 36 / 43 Increasing the productivity of the system The batches number optimization depends on the best synchronism that happens among the time in that the solution present in the tank1 is prepared to be drained and the time in that the tank2 finishes its emptying, because it implicates lesser wastes of time in the process. Among of several physical variables of the process it was chosen the heat supply rate (QHeat) because it is the most relevant variable that determine the rate of the steam formation (this condenses in the condenser C) and correspondingly, the time in that the solution present in the evaporator (tank1) is prepared to be drained (desired concentration reached). In addition, in all of the performed simulations, it was assumed a time of 200s for the solution powder-processing operation fulfill in the tank2. Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

37. 37 / 43 Increasing the productivity of the system Heat supply rate of 2500 W – Tanks’ levels It happens a great synchronism lack between the time in that the solution present in the tank1 is prepared to be drained and the time in that the tank2 finishes its emptying (waste of time of about 300 s). Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

38. 38 / 43 Increasing the productivity of the system Heat supply rate of 3170 W – Tanks’ levels It can be verified the synchronism that occurs among the time in that the solution present in the tank1 is prepared to be drained and the time in that the tank2 finishes its emptying. Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

39. 39 / 43 Increasing the productivity of the system Heat supply rate of 3170 W – Tanks’ levels An excellent synchronization can be confirmed by the simulation results for the time period that take places the transfer of the solution between tank1 and tank2, because wastes of time don't exist. Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

40. 40 / 43 Increasing the productivity of the system Simulations with different heat supply rates – Tanks’ levels Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

41. 41 / 43 Conclusions The presented approach (to increase the Systems Safety) is useful because: In Simulation: -we can avoid, using simulation, a set of program errors in reduced time intervals; -some functioning delays may be obtained by simulation; these delays are important to create the plant models for formal verification purposes; In Formal Verification -the verification of complex hybrid systems is limited due to the number of states involved, this way the simulation is the best solution for obtaining safety hybrid systems. Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

42. 42 / 43 Perspectives To use Simulation to : Evaluate and optimization of different parameters of the plant functioning to find critical delays of the plant functioning -to see if a property, for different considered delays, is still true or if different delays imply that a property that is true, for a delay, will become false for another To apply the results indicated before: In order to apply on the formal verification of hybrid systems Context of the work Contribution of this work The case study Plant modeling for simulation purposes Controller modeling for simulation purposes Simulation results Conclusions and perspectives

43. Universidade do Minho Escola de Engenharia Techniques for Modeling Discrete Controllers for the Optimization of Hybrid Plants: a Case Study Dynamics of Mechanical Systems  eseabra@dem.uminho.pt  +351 253 510 227  +351 253 516 007 Thank you for your attention Questions?