| Paper |
Title |
Page |
| MOPLT015 |
Reliability Issues of the LHC Beam Dumping System
|
563 |
| |
- R. Filippini, E. Carlier, B. Goddard, J.A. Uythoven
CERN, Geneva
|
|
| |
The Beam Dumping System of the Large Hadron Collider, presently under construction at CERN, must function with utmost reliability to protect the personnel, minimize the risk of severe damage to the machine and avoid undue impact to the environment. The dumping action must be synchronized with the particle free gap and the field of the extraction and dilution elements must be well adjusted to the beam energy. The measures taken to arrive at a reliable and safe system will be described, like the adoption of fault tolerant design principles and other safety related features as comprehensive monitoring, diagnostics and protection facilities. These issues will be discussed in the general framework of the IEC standard recommendations for safety critical systems. Some examples related to the most critical functions will be included.
|
|
| MOPLT034 |
Possible Causes and Consequences of Serious Failures of the LHC Machine Protection System
|
620 |
| |
- J.A. Uythoven, R. Filippini, B. Goddard, M. Gyr, V. Kain, R. Schmidt, J. Wenninger
CERN, Geneva
|
|
| |
The LHC machine protection systems, including the beam dumping system, are designed to ensure that failures leading to serious damage to the LHC during its lifetime are extremely unlikely. These kind of failures have to date been considered as being ?beyond the design case?, for instance requiring a combination of equipment failure and surveillance failure. However, they need to be evaluated to determine the required safety levels of the protection systems. A second objective is to understand if measures can and should be taken to further reduce the probability of such failures, or to minimise their impact. This paper considers various serious failure modes of the different machine protection systems. The probable consequences and possible ameliorating measures of the worst-case scenarios are discussed. The particular case of having a stored beam with an unavailable beam dumping system is mentioned, together with possible actions to be taken in such an event.
|
|