02 Exhibit I Services

Vender: OGPE-VSP Page 1 of 27
Provision of Upgrading Emergency Shutdown and Flame Detector System on FPU DH01, Block 05.1a,
Offshore Vietnam
SCOPE OF WORKS AND TECHNICAL REQUIREMENTS FOR UPGRADING
EMERGENCY SHUTDOWN AND FLAME DETECTOR SYSTEM ON FPU DH01, BLOCK
05.1a, OFFSHORE VIETNAM
1. INTRODUCTION
1.1. Project Description
The Dai Hung field is located in Block 05.1A, approximately 250 km, from the coastline of the
South Eastern Vietnam, and situated in a water depth of 110 m (average). The field is operated by
PETROVIETNAM Domestic Exploration Production Operating Company Limited (Hereinafter
referred to as PVEP POC).

Figure 1 Location layout of Dai Hung Field, Vietnam
Dai Hung 01 FPU, which is connected to twelve subsea wells (eleven production and one water
injection) named 1P, 2P, 3P, 4P, 4X, 5P, 6P/7P, 7X, 8P, 9P, 10P, 12X) and WHP DH02 via 28 no of
flexible flow lines, 12 no of control umbilical and 01 Submarine cable. The risers and
umbilical/submarine cable are arranged in a lazy-S configuration using a MDB and are connected to
the Dai Hung 01 FPU balcony at the aft, forward and starboard side.
Crude oil is stabilized on the Dai Hung 01 FPU and offloaded to a FSO vessel by two 6 flexible
risers, which is moored to a CALM buoy.
1.2. Emergency Shutdown System and Flame Detector System
In event of a hazardous condition occurring, the Emergency Shutdown System (ESD) shuts down the
process to protect personnel and equipment on the FPU.
The ESD system comprises:
- An ESD panel incorporating input and output status displays mounted on the front
face of the panel
- A Marshaling panel.
The ESD panel is located in the Process Control Room (PCR). The ESD panel logic is designed to
prevent hazardous situations.
The safety shutdown and control instrumentation is designed to be fail safe as follows:
- Sensing and control devices will open circuit to indicate a fault condition.
- The subsea hydraulically controlled valves will fail closed and are manually reset at
the hydraulic control panel.
Provision of Upgrading Emergency Shutdown and Flame Detector on FPU DH01, Block 05.1a, Offshore
Vietnam
- The ESD valves will de-energize on electrical, pneumatic or hydraulic failure and
return to their failsafe condition.
There are four classes of safety shutdown provided on the platform:
- Level 1: Emergency Shutdown (ESD): It is initiated by manual operation of an ESD
push button located in various areas on DH-01. An ESD initiates a full platform
shutdown:
HP flare KO drum drain valve closes,
LP flare KO drum drain valve (XV14) closes,
Shutdown all process operations. Oil/gas/water separation system depressive
to flare,
All vents to flare open. All ESD valves move to their failsafe positions,
Gas turbines trip and inhibit re-start,
Diesel generators trip and inhibit re-start,
All down hole safety valves close,
All tree and manifold valves close.
Shutdown DH-02 as emergency shutdown DH-02.
The following systems, powered by the UPS, will continue to function:
Fire and gas detection system,
Navigational aids/fog horn system,
Communication system,
Diesel driven fire pumps,
Diesel driven foam pumps,
Emergency lighting
Emergency generator starts
- Level 2: Fire and Gas Shutdown (SSD Surface): It is initiated by signals from the
fire and gas control panel (when two or more coincident detection circuits within the
effected zone have been activated) and shutdowns the hazard effected area. This also
initiates the following:
Shutdown process or other equipment located in the affected area.
Hydrocarbon inventories will be vented from the affected areas.
Non-essential electrical supply in the control room and switchgear room
may be isolated.
Shutdown DH-02 from DH-01
- Level 3: Production Shutdown (PSD): It is initiated automatically by an undesirable
process state occurring within a system, vessel or essential equipment. A PSD
initiates shutdown and blow-down of the Production/Process System:
Vietnam
Shutdown of all production wells.
Closure of wellhead safety valves (Subsea Tree wing valve).
Shut-in all process streams and separators.
Shut down of produced water and water injection.
Process shutdown DH-02.
In 1994, as part of the modification converting the Deep Sea Pioneer semi-submersible rig to the Dai
Hung 01 FPU, the ESD and the Flame Detector System was installed for six old wells (1P, 2P, 3P,
4P, 4X and 5P). In 2005, a new ESD cabinet was built for five new wells (7X, 8P, 9P, 10P, 12X)
based on relay logic technology. In 2007, a ESD for a dual bore well (6P/7P) was extended inside
the new ESD cabinet.
As the ESD system and Flame detector system are too old and spare parts are obsoleted, faults occur
fluently and downtime increase. Therefore, an modification and upgrading for the ESD system and
flame detector system is necessary.
1.3. Scope
This specification covers the minimum requirements for the design, manufacture, inspection and
testing, delivery and installation supervision of the emergency shutdown system and Flame detector
system dedicated to the monitoring and control of DH-01 and interfaces with existing Process
Control System.
1.4. Acronyms and Abbreviations
The following abbreviations are used in this document:
API American Petroleum Institute
AISI American International Standards Institute
BDV Blow-down valve
BS British Standards
CPU Central Processing Unit
ESD Emergency Shutdown
EMI Electro-Magnetic Interference
Ex(d) Explosion Proof
Ex(e) Increased Safety
Ex(i) Intrinsic Safety
F&G Fire and Gas
FD Flame detector
FEED Front End Engineering and Design
FSO Floating Storage and Offloading Vessel
FPU-DH1 Floating Production Unit - Dai Hung 1
HIPPS High Integrity Pressure Protection System
HR Hydraulic Room (Formerly known as CAMCO Room)
IEC International Electrotechnical Commission
IPF Instrument Protected Function
IS Intrinsically Safe
Vietnam
ISA Instrument Society of America
ISO International Standards Organization
I/O Input/output
LED Light Emitting Diode
MCC Motor Control Centre
MDB Mid Depth Buoy
MOS Maintenance Override Switch
MV Master Valve
HMI Human Machine Interface
OIS Operator Interface Station
OOS Out of Sequence
PCR Process Control Room (FPU-DH1)
PCS Process Control System
PES Programmable Electronic System
PLC Programmable Logic Controller
PLEM Pipeline End Manifold
PSD Process Shutdown
PSHH Pressure Switch High High
PSV Pressure safety Valve
PVEP Petro Vietnam Exploration and Production Company
QRA Quantitative Risk Assessment
RFI Radio Frequency Interference
SCSSV Surface Controlled Subsurface Safety Valve
SDS Shutdown System
SIL Safety Integrity Level
SIS Safety Instrumented System (ESD & F&G)
SPDT Single Pole Double Throw
SSV Surface Safety Valve
SUO Start Up Override
UCP Unit Control Panel
UPS Uninterruptible Power Supply
USD Unit Shutdown
VAC Volts (Alternating Current)
VDC Volts (Direct Current)
VDRL OGPE-VSP Document Requirement List
VDU Visual Display Unit
Vietnam
XV Shutdown Valve
WHCP Wellhead Control Panel
WHP-DH2 Wellhead Platform - Dai Hung 2
WV Wing Valve
1.5. Definitions
Company PVEP POC
OGPE-VSP OGPE-VSP of Equipment, including Sub-OGPE-VSP(s) appointed
by the OGPE-VSP to carry out part or all the work. All Sub-OGPE-
VSPs shall be subject to approval by the Company. All technical
terms and conditions applicable to the OGPE-VSP shall also be
applicable to the Sub-OGPE-VSPs. The OGPE-VSP shall assume
overall responsibility for the equipment supplied herein.
INSPECTOR The inspector shall mean the person appointed to act on behalf of the
Purchaser in carrying out witness testing of equipment at the OGPE-
VSP's or the Sub OGPE-VSPs works
OGPE-VSP Appointed Engineering OGPE-VSP/ Fabricator
MANUFACTURER The Manufacturer for the production of the Goods or any part thereof
SUBCONTRACT "SUBCONTRACT" means any contract, other than this PURCHASE
ORDER, between the OGPE-VSP and any other party for the
performance of any part of the PURCHASE ORDER.
Integrated System A system including subsystems which are directly connectable and
communicating together without specific development. Sub-systems
can introduce some limitations to the functionalities of the system
Workstation A basic set which allows one operator to achieve control and
monitoring. In addition some stations can achieve other functions
like Engineering and maintenance functions. A station is made up of
one electronic rack, one keyboard, and one or two screens
1.6. Project References (Mandatory documents)
The SIS specification is an integral part of all mandatory documents including the following: Project
Specifications
D50-005 Matrix shutdown
D50-006 Matrix shutdown (Cont.)
D50-007 Matrix shutdown (Cont.)
D50E ESD/Annunciator panel extend cabinet.
3-DJ-5000s Schematic emergency shutdown system.
1.7. Standards and Codes
As a minimum, all equipment supplied as part of this package shall be designed, manufactured and
delivered in accordance with the relevant section of the national/ international Codes, Standards and
Regulations, as listed below. The latest editions of codes and standards, including all addenda,
supplements or revisions current at time of order placement, as issued by the following authorities
shall apply:
International Electro technical Commission (IEC)
American Petroleum Institute (API)
Institute Of Electrical and Electronics Engineers (IEEE)
Vietnam
British Standards Institution (BS)
It is the System OGPE-VSP's responsibility to ensure his own compliance and also that of his sub-
suppliers with all the applicable Codes, Standards and Regulations.
Particular attention is drawn to the following standards and codes of practice:
IP Codes Of Practice
In the event of any conflict, the most stringent requirement shall be applied. The order of precedence
for these documents is:
This Specification
General Specification
Codes And Standards
The equipment shall be designed, fabricated and tested in accordance with the latest revision of all
relevant international Codes and Standards including, but not limited to, the standards listed below.
In the event of conflict between codes and standards and/or this specification, the matter shall be
highlighted for Company's attention/approval.
In addition to ITB and project references as stated Item 1.6 above the design and selection of FPU
DH-01 systems shall comply with the applicable sections of the latest editions of the engineering
codes, standards and references at least but not limited to the list below:
Statutory Requirements
TCVN 5315:2001: Vietnamese Standard for floating unit Regulation for classification and
fabrication machinery and process system.
International Standards
API RP-14C Recommended Practice for Analysis, Design, Installation, and Testing of
Basic Surface Safety Systems for Offshore Production Platforms
API RP 505 Recommended Practice for Classification of Locations for Electrical
Installations at Petroleum Facilities Classified as Class I, Zone 0, and Zone 2
API RP 551 Process Measurement Instrumentation
API RP 552 Transmission Systems
API RP 554 Process Instrument and Control
BS EN 61000-6-4 Electromagnetic compatibility (EMC) Part 6-4: Generic standards -
Emission standard for industrial environments
BS EN 61000-6-2 Electromagnetic compatibility (EMC) - Part 6-2: Generic standards
Immunity for industrial environments
BS 5308 Part 1 Instrumentation Cable Part 1
BS 6883 Industry standard for the Offshore Oil and Gas, Ship Building and Marine
Industries in the UKCS
BS 7671 Requirements for electrical installations
IEC 60079 Electrical equipment in hazardous areas
IEC 60331 Tests for Electric Cables under Fire Conditions
IEC 60332 Flame Test On Single Vertical Insulated Wires/Cables
IEC 60529 Degrees of protection provided by enclosures (IP Code)
IEC 60801 Part 3 EMI and RFI Immunity
IEC 61131 Programmable Logic Controllers
IEC 61508 Functional safety of electrical/electronic/programmable electronic safety-
related systems
IEC 61511 Functional safety safety instrumented systems for the process industry
sector
ISA S5.1 Instrumentation Symbols and Identification
ISA 5.3 Graphic Symbols for Distributed Control/ Shared display Instrumentation,
Logic and computer system
ISA S5.4 Graphic Symbols for Distributed Control
ISA S18-1 Annunciator Sequences & Specifications
Vietnam
1.8. Service Conditions
Location: The Dai Hung Field is located offshore south east of Vung Tau, Southern Vietnam.
Environmental Conditions:
External Conditions:
Ambient Temperature: 15 deg C min. to 35 deg C max
Environment: Salt Laden: Salinity 35%o
Max. Relative Humidity 100%
Wind: 26 m/s (1 minute), 29 m/s (3 sec gust) @10m above mean sea level
Indoor (Process control Room):
Air Conditioned Room

Temperature max +31C
nominal+24 C
min19C
Humidity 50%R.H. non-condensing
Area Classification Non hazardous
1.9. Hazardous Area Classification
The PCR shall be non-hazardous (safe area). All control system equipment within the PCR shall be
suitable for safe area.
The process areas are hazardous with zone 1.
The utilities areas are hazardous with zone 2
1.10. Power Supply
The following power supplies and utilities will be available for use by the OGPE-VSP's package
from the Purchaser's supply systems.
Electrical Supplies
220 V AC (10%), 60 Hz ( 5%) - Non-UPS for lighting and Operator Stations.
24 V DC (10%) for Control System and field instrumentation.
1.11. Units of Measurement
The following units of measurement shall be used:
Measured Value Unit Symbol
Flow - mass kilograms/hour kg/hr
Flow - volumetric cubic meters/hour m3/hr
Volume cubic meters m3
Level centimeters / millimeters |m or mm
Pressure - gauge kilopascals (gauge) kPag
Pressure - absolute kiloPascals (absolute) kPaa
Differential Pressure millimeters Water Gauge mmWG
Temperature degrees Celcius C
Length meters / millimeters m, mm
Density kilograms/cubic meter kg/m3
Dynamic Viscosity centipoise CP
Kinematic Viscosity centistokes cSt
Sound Pressure decibels dBA
Vietnam
2. GENERAL REQUIREMENTS
2.1. Overall Concept
Emergency shutdown system shall be supplied as follow:
Monitor and control six old wells: 1P, 3P, 4P, 4X and 5P.
Monitor and control six new wells: 8P, 9P, 10P and 6P/7P.
Monitor and control 05 shutdown valves from WHP-DH02
Monitor and control shutdown valves on process system.
Flame detector system shall be supplied as follow:
Flame detector transmitters.
The SIS system consisting of ESD and FD hardware shall be combined and supplied as a
single system in order to optimize the space and hardware requirement.
The I/O modules shall be segregated between ESD and FD, however processor can be
combined for both ESD and FD functions.
The SIS system shall be interfaced directly with the PCS system so as to enable the operator to
monitor all SIS system data either from PCR.
The HMI interface for the ESD system and FD must be separated from the HMI for PCS.
2.2. Environmental Protection
The minimum ingress protection according to IEC 60529 applied for instrumentation equipment
shall be:
IP42: Equipment located inside enclosure hoods or indoors.
IP65: All equipment to outdoor weather conditions
The instrumentation equipment selected, especially the electronic parts and circuit boards shall be
suitable for tropical, humid, salt laden, marine saliferous and offshore environment.
All field devices exposed to direct sunlight (e.g. instruments on main deck, under inlet manifold),
shall be protected with weather protection enclosures or sunshades.
2.3. General requirement
The materials shall be designed and manufactured for operation in marine offshore
condition.
Year of production: Goods must be brand new and unused, manufactured in year
2014 or later.
Main materials (transmitters, controller, I/O modules, power supplies, switches,
cabinets, licenses ) shall be manufactured from EU or G7.
Specifications, compositions of all details in bidders datasheets: Fully comply with
described in the order.
Delivery Time: OGPE-VSP to quote the best delivery time applicable in calendar
days. OGPE-VSP should note that based on project schedule, the material
/equipment shall be required on delivery address (PVEP POC Vung Tau base) no
later than 24 calendar weeks from the date of signing contract.
One shipment.
Vietnam
2.4. Warranty
OGPE-VSP guarantees that the supplied SIS system shall be the highest quality and design standard
as set in Manufactures country for that type of equipment and shall meet current technological
achievements as require, and shall be suitable for normal operation in tropical area condition
regarding environment temperature up to 45 Deg. C, humidity up to 100%.
Warranty period: 18 months from date of delivery or 12 months from date of GOODS being
commissioned and place in services, whichever comes first.
2.5. Schedule Plan
OGPE-VSP shall submit schedule / execution plan and must follow key milestone:
- Design approved by third party
- Factory Acceptance Test: Procedure
- Completed installation at site: Procedure
- Pre-commissioning at site: Procedure
- Commissioning, Running Test before start up: Procedure
3. SCOPE OF SUPPLY
3.1. Scope of supply
The SIS shall be complete in all respects, including all required ancillary equipment necessary for the
satisfactory operation of the system.
OGPE-VSP's proposal for scope of work shall include all hardware, software, fabrication, assembly,
wiring, testing, installation, commission and documentation as per this specification and its
attachments including, but not limited to, the following:
- Design SIS and approved by third party (Lloyd Register, Vietnam Register or
- Gemanischer Lloyd)
- Supply of SIS System consisting of ESD and FD for the FPU DH-01
- Supply 40 Flame detector transmitters compatible with new SIS and operation
temperature up to 75 Celsius degree
- Supply of Engineering System facility for the above system to be located in FPU-
DH1 at PCR.
- Supply of all the necessary software for the SIS system including SER software.
- Configuration SIS compatible with exist PCS, communication data from PCS to SIS
and vice versa, configuration graphic display on SIS and PCS.
- Remove exist SIS on Dai Hung 01 FPU at PCR.
- Renew Flame detector supply by OGPE-VSP from various locations on Dai Hung-
01 FPU.
- Installation SIS on Dai Hung 01 FPU at PCR.
Vietnam
- Commissioning and hand over.
3.2. I nput - Output summary
3.2.1. Input - Output license request
Input/ Output AI DI AO DO
5 Old Wells 0 25 0 60
4 New Wells 0 20 0 48
Process DH-01 30 60 0 52
WHP-DH02 12 12 0 2
Flame Detector 46 0 0 16
Heat detector 0 20 0 0
Smoke detector 0 86 0 0
Gas detector 130 0 0 0
Manual Alarm call point 0 35 0 0
Deluge system 0 9 0 9
Halon system 0 16 0 8
HVAC system 0 0 0 14
Sprinkler system 0 2 0 0
Sub-Total 218 285 0 209
Spare 20% 40 50 20 40
Total 285 335 20 249
3.2.2. Input - Output hardware request
Input/ Output AI DI AO DO
5 Old Wells 0 25 0 60
4 New Wells 0 20 0 48
Process DH-01 30 60 0 52
WHP-DH02 12 12 0 2
Flame Detector 46 0 0 16
Sub-Total 88 117 0 178
Spare 20% 18 25 16 36
Total 106 142 16 214
4. HARDWARE DESIGN REQUIREMENTS
4.1. General
The SIS systems shall be compatible with the PCS to form a platform Integrated Control System.
The SIS systems shall be redundancy full specification (Power supplies, controllers, I/O modules,
etc.)
Hardware design request to be certified by third party (Lloyds Register, Vietnam Register or
Germanischer Lloyd)
4.2. Cabinets
All electronic equipment shall be housed in OGPE-VSP'S cabinet (e.g. RITTAL type or equivalent).
Final cabinet layouts will be subject to OWNER'S approval. Cabinets will conform to IP 54
standards, or better.
Cabinets shall generally be dimensions of 1200 mm (W)x800mm(D)x2200mm(H), excluding 100mm
integral plinth. However due to the HVAC duct above the available free space at PCR, the maximum
height PCS/ESD/F&G cabinet in the PCR shall not be more that 2400mm. The cabinets shall be
preferably front and rear accessable only with two 600 mm (W) doors. However, OGPE-VSP may
Vietnam
propose any cabinet sizes and front/rear access types that would fit in the supplied system devices
and accessories for review and approval by the Purchaser.
The OGPE-VSP shall design and supply a rigid, self-supporting free standing cabinet for
incorporation within a suite of cabinets and bolted.
Access to the equipment mounted within the panel shall be from lockable, vertically hinged doors.
Hinges shall be lifted off type. The doors shall be hinged to open 180.
Removable access doors and panels shall be fitted with dust tight seals.
All door locks shall be provided with the same lock and key combination. Keys shall be removable
with the doors either locked or unlocked.
Adequate natural ventilation shall be provided to ensure the internal ambient temperature does not
exceed the safe continuous operating temperature of the components located therein. No external
forced ventilation is to be provided by the OWNER.
Cabinet shall be provided with fan(s) and sufficient louvers with dust filters to extract heat out of the
cabinet. Suitable high panel temperature and over temperature switches shall be installed inside the
cabinet and connected to the PLC for alarming (these inputs are excluded from OGPE-VSP'S I/O list
and I/O count, but shall be considered in OGPE-VSP'S Scope of Supply).
Welding shall be neat, uniform and have sufficient strength to withstand the loads imposed upon it.
Welding shall have 100 % penetration and shall be free from siag inclusions. All welds to be fully
cleaned and free from burrs on completion of operation.
OGPE-VSP shall provide tapped holes and removable ring bolts for lifting purpose.
A metallic pocket shall be provided on the inside of the doors to contain drawings and data.
Cables entrance will be from the top of the cabinets.
OGPE-VSP shall provide sufficient clearance between components to permit maintenance-whilst in
operation.
Consideration shall be given to maintain a low center of gravity during lay out design.
Nameplates shall be made from laminated plastic, white-black-white and shall be attached with
stainless steel screws. Nameplates engraving shall be subject to OWNER review and approval
They shall have the same color and painting quality and general internal layout. The cabinet painting
shall be as per manufacturer's standards. The Painting Procedure shall be submitted for OGPE-VSP /
COMPANY'S approval. Each rack shall be completely filled and unused slots shall have blanking
plates.
The modules shall be easily removable for replacement but secure from vibration. The module shall
have plug-in connectors or edge connectors.
All cabinets shall have as a minimum; common alarms for power supply failure, fan failure and high
temperature (volt free contact).
4.3. Earthing, grounding and shielding
The earthing, grounding and shielding shall be in accordance with the requirements described below.
There shall be three types of earthing systems within the SIS system.
Safety earth (power system earth)
Instrumentation (clean) earth
I.S. Earth for IS instruments (if applicable)
All metallic structures, enclosures, doors and equipment shall be boned, within each cabinet or
console, to a single safety earth point. This single point shall be a brass or copper bolted lug
connection, adequate to receive a 16 mm
2
copper earth cable terminated in a ring lug.
Each system cabinet, console or marshaling cabinet shall contain an instrumentation earth bar, of
minimum cross section 35 mm
2
. This bar shall be insulated from the cabinet. In marshaling cabinets,
this bar shall be equipped with means to attach cable screens/drain wires of incoming field cables.
All earth conductors shall be insulated and identified at connection to earth bar. Earth conductor
insulation shall be colored as follows:
Safety Earth Green with yellow stripe
Instrumentation Earth/ I.S Earth Plain Green
Vietnam
4.4. Power supplies
The Purchaser shall provide a dual power feed from 24V DC Battery Backed-up Power Supply ( 10
%) for the system/marshaling cabinets and a single non-UPS feed 220V AC ( 10 %), 60 Hz (2) for
cabinet light, operator consoles and service socket.
The SIS system equipment shall be designed to operate on 24 VDC 10% floating power from a
battery charger source, supplied by others.
The power supply distribution within the SIS cabinets shall not be referenced to the ground. Should
any part of the system be referenced to the ground, OGPE-VSP shall provide isolating devices to
maintain the floating power supply distribution.
DC power shall be distributed via MCB's in such a manner that each circuit or system may be
individually isolated.
The OGPE-VSP shall provide a complete, detailed power supply system to meet the needs of his
own equipment as well as the needs of the field devices. Spare capacity shall be provided to
accommodate fully loaded cabinets.
OGPE-VSP shall indicate the total power consumption and heat dissipation values for all system
components.
OGPE-VSP shall state the maximum power supply interruption time, the system can withstand
without affecting the functionality and the inrush current details for switching power on.
4.5. Termination modules
The termination modules shall meet the following requirements:
plug / socket connection shall be used,
all inputs and outputs shall be fuse protected,
termination module circuits shall not be referenced to earth,
analogue termination modules shall have current limiting resistors to provide short circuit protection
on field inputs,
SIS PLC termination modules shall be powered by redundant power supplies.
4.6. Wiring and connections
Each cabinet shall be equipped with one auxiliary 220 VAC outlets for maintenance and test
instruments.
220 VAC power wiring shall be standard for the application and according to the latest editions of
IEC.
All terminals carrying more than 24 VDC shall be protected against accidental contact by removable
cover plates and labeled accordingly
Wiring required for interconnecting cabinets, consoles, or other system components shall be in the
form of plug-in cables.
Plug connection and internal wiring to fit maintenance communication links.
These cables shall be manufactured to length per site requirements, and their source and destination
clearly identified.
The interconnection cables between the system cabinets and the field termination cabinets are to
include 20 % additional prefabricated construction spares and terminated using plug-in type
connectors. The cables shall be specified according to site technical requirements.
The inter-cabinet cables shall be furnished by the OGPE-VSP. The cables shall conform to
applicable industry standards for data transmission.
All signal wire shields shall be drained to a heavy ground bus at each cabinet (isolated ground) and at
one end only.
All wire ends shall be identified with permanently attached (shrink-on shrouding) tags showing wire
identification and loop number.
Cables shall enter from the top of the cabinet and shall not block service or maintenance access to
rack-mounted equipment (e.g., power supply, etc.).
Each terminal shall hold only one wire. Jumper straps especially designed for the block must be used
if more than one wire requires connection to a common point.
Vietnam
Raceways shall be designed to segregate input/output signals of different voltage levels, and must
accommodate all cables without overflow.
The equipment will normally be installed so that terminals and all electronic equipment are
accessible from the front and rear of the cabinet. A plan drawing showing accessibility to all system
and termination cabinets will be furnished by OGPE-VSP.
OGPE-VSP'S standard internal wiring conductor identification method shall be submitted for
approval.
4.7. Tagging and numbering
The identification of all internal components and interconnections as part of the SIS equipment
supply shall be done by the OGPE-VSP.
The application tagging (cabinets, systems, etc..) shall be in accordance with a project tagging
specification to be provided by the OGPE-VSP during detailed engineering.
Each cabinet shall have its own identification name plates on both cabinet's front and rear side.
Fixing method of name plates to be subject to OGPE-VSP/OWNER approval detailed design. All
engraving shall be in English language and shall confirm to the tagging convention to be defined
during detail design.
4.8. PLC Hardware Requirement
In cases of redundant equipment (power supply, CPU, I/O modules etc.) on failure, the switching of
one equipment to another shall be automatic and should not create any disturbance to the operation
of the system. Failure of any modules shall be annunciated and replacement of failed module shall be
possible without isolating the power supply.
4.8.1. Input and Output modules (I/O)
4.8.1.1. General Requirement
All I/O modules shall have optical isolation from logic system (1500 V DC).
All input/output module electronics and channels shall include individual protecting
device to prevent shorting of the card.
The I/O modules design shall allow replacement while power is supplied without
affecting the operations of any I/O of the system.
The I/O modules design shall be fitted with status and diagnostic LED's (as a minimum,
power supply status and I/O channel status).
The field I/O channels shall be electrically isolated from the I/O module electronics and
shall not be referenced to the system earthing.
The system shall be designed to automatically self-test input and output cards in such a
way as not to cause any process disturbance, but shall reliably detect otherwise covert
failures.
Access-protected override facilities for certain individual input channels shall be
provided for maintenance purposes.
Input /output modules shall form part of the system feature which shall provide
diagnostics for any faults in the I/O modules. A standard requirement of the autotest
system shall be test-abort function in case of genuine alarm.
Input/output modules shall be replaceable without removing the signal wiring between
the module and the termination module and without use of special tool.
I/O shall typically provide 8, 16 or 32 points per module and shall be capable of being
mixed in any I/O chassis. OGPE-VSP shall provide the complete reference and datasheet
of proposed I/O modules.
The Analogue to Digital Conversion (ADC) performed by the I/O module electronics for
digital transmission shall meet the following minimum requirements:
Resolution : 12 bits
Linearity + 1 least significant bit (LSB)
Repeatability + 14 LSB
Vietnam
Accuracy + 0.1 % full range over entire operating temperature range
Common Mode Rejection @ 50 Hz 65 dB
4.8.1.2. Analogue input
The maximum impedance of 4-20 mA analogue input circuit shall be 250 ohms. 1-5
VDC input option is to be provided, input resistance equal to 500 K ohms or greater.
Channel analogue input module can be either used active or passive circuit. Analogue
input circuit will be 24 VDC from SIS by redundant DC power supplies unless otherwise
noticed.
Analogue input modules shall have transmitter out-of-range fault detection, as well as
open and short circuit detection.
Line monitoring fault (applicable for F&G System l/O's only):
Shall be displayed and reported at the PCS consoles
Shall generate alarm or shutdown.
Analogue input modules shall have differential, DC coupled input circuits.
Each input circuit shall be individually isolated and individually protected by fuse.
4.8.1.3. Digital Input
All input shall be powered under 24 VDC by the SIS using redundant 24 VDC power
supplies. Digital input modules shall have common input circuits in group of 8. Switches
shall have normally closed contact to open on trip condition. Each input circuit shall be
individually protected by fuse.
Digital input modules shall be capable to integrate with field mounted Proximity type
sensors.
4.8.1.4. Digital output
All outputs shall be powered under 24 VDC by the SIS.
Excepted for the monitoring of the complete output circuits, the output modules shall
have the output signals closed during normal operation and open during safety trip or
field-safe position.
Momentary or latched type outputs shall be possible on each channel and the same shall
be software selectable.
Generally interposing relays shall be avoided, however they are used to interface
electrical circuits. Relay digital output modules shall be duplicated or triplicated modules
with external relay on associated termination module.
Each output circuit shall be individually isolated and individually protected by the fuse.
Output requirement:
a) Output to solenoid valves:
24 VDC to Ex(d) or Ex(n) solenoid valves, normally energised, de-energised to trip.
This voltage shall be supplied from the ESD system. The output current rating per
channel shall be minimum 0.5A at 24 VDC.
b) Outputs to Switch rack or to packaged unit control panel:
Output contacts to Switch rack shall be 24 VDC, 2A. The required 24 VDC power
supply shall be supplied by the ESD system. The volt free contacts shall be closed
during normal operation and open during safety trip or fail-safe position.
4.8.2. Programmable Logic Controller
4.8.2.1. General requirements
SIS system shall be implemented in a fault tolerant, dual or triple modular redundant
format so that no single component or module failure shall cause a system failure or
process shutdown. These systems shall have a fully duplicated or triplicated architecture
Vietnam
from the I/O modules to the main processor. Systems shall be specifically designed for
safety applications. Integrated systems comprising general purpose PLC hardware are
not acceptable. Dual redundant systems shall be diagnostics based 1 out of 2
architecture. Each signal channel shall be fully isolated from the others while performing
parallel control. These systems shall employ voting scheme or enhanced self-diagnostics
to provide a high integrity, error free, and uninterrupted process operation with no single
point of failure.
System components shall be rack-mounted, modular design, plug-in type. Modules shall
be replaceable without the need for special tools.
The system shall have self-diagnostic programs that run independent of the application
programs on a continuous basis with fault detection capability down to the I/O module
individual channel. All modules shall be replaceable on line without causing further
system degradation. Re-initialization of replacement module shall be automatic.
Identification and location of faults and status shall be automatic, by means of indicators
(LED) located on each module with displays of faults on maintenance/override local
console and with common fault alarm and status displayed on PCS via a dual redundant
digital high speed communication links.
4.8.2.2. Power supply modules
The PLC shall operate with a minimum dual redundant power supply. Each power
supply shall be individually capable of supporting the power requirements of all
modules.
Each power supply shall feed a separate power rail.
The power supply modules shall be fitted with status and diagnostic LED's (as a
minimum, module status, fault).
The power supply module shall be replaceable without affecting the working of any
other modules in PLC.
4.8.2.3. Main Processor Modules
The duplicated or triplicated main processors shall operate in parallel and as one
integrated unit, with each processor controlling one leg of the I/O bus (i.e. the processor
duplication or triplication shall be transparent to the user).
Identical operating software and applications programs, including fault history, residing
in each processor memory shall be executed independently. The processor shall also
execute a voting of all data received and transmitted to the I/O modules that will control
the process.
Input signal will be separated into two or three isolated paths from the input terminal of
the input module to the voter circuit output.
The PLC shall be provided with individual battery back-up to maintain the integrity of
the memory for minimum six (6) months in case of power failure. Battery degradation
shall be included as part of the diagnostic alarm.
The system must be protected from unauthorized or accidental modification of programs
(password). OGPE-VSP shall indicate the protection procedures available on the system.
All facilities necessary for making modification to the logic system should be provided
as part of the program development and maintenance console.
Scan time of the PLC shall not exceed 200 msec.
4.8.2.4. Communication modules
General requirements
Digital communication link shall preferably utilize coaxial cable that allows a high-speed
data transfer.
Communication module shall be automatically and permanently tested to ensure that it is
not out of service. Identification and location of faults and status shall be automatic, and
shall be recorded and displayed on PCS Console. Transfer to a back-up communication
module or channel shall be automatic without disrupting the system operation.
Vietnam
The communication cable shall be flexible for ease of installation and termination within
equipment cabinets. Cable and fittings shall be of top quality and shall be field proven.
The system shall be designed for quick and easy connection and disconnection of
devices.
OGPE-VSP shall provide the complete reference and datasheet of the proposed
communication modules at a bid stage.
Internal communications
All PLC internal communication shall be duplicated as minimum. Internal
communication to include:
Communication between the main processors,
Communication between the main processors and the I/O modules,
Communication between the main processors and the communication modules.
PCS communication modules
SIS Systems are network devices of the Control System network similar to Operator
Control Station, PCS Controllers.
SIS system shall be connected to the PCS system via a redundant communication link to
allow data acquisition, supervisory and control from/to the operator control station. This
link shall be direct link to the PCS network.
PCS to SIS communication links shall be highly secured in order to eliminate any wrong
or corrupted data transfer. OGPE-VSP shall detail the propose communication link
principle at bid stage.
Communication modules shall be designed for optimum data transmission speed.
The communication parameters (ports, protocol, communication speed, etc.) shall be
determined at detail design stage.
Printer interface
PLC shall be able to be connected to a printer permanently. Auto documentation
(including logic diagrams) print out facility shall be provided for all application
programs.
Program development and maintenance console interface
PLC shall be able to connect to the programming/maintenance console to allow
upload/download/reload memory, real time data transfers, system maintenance, and
modification in the current program, etc.
Refer to section 4.11 for details of the PC based Engineering station
OGPE-VSP shall provide all devices (port, cables and fittings) to ensure operational
communication
4.9. Automatic self-testing and diagnostics
The system shall be self-checking. The main processor modules shall run regular and frequent
diagnostics in between the execution of the application program in such a manner as not to interfere
with the basis cycle time operation of any program.
As a minimum, on-line diagnostics shall perform the following:
check voting and fault detection circuit,
vote and verify all memories,
vote and verify all inputs and outputs,
diagnostic check of operating system and user program,
Reveal all hidden faults or the potential of a fault occurrence and provide a sufficient
warning for plant maintenance to correct the situation
Diagnostic alarms shall be accessible through the maintenance console; LED's on the modules and
on the PCS via the communication links.
PLC shall have its internal "watchdog" contact arranged so that a common signal is initiated for a
system fault. Signal will be available on hardwired alarm contact.
Vietnam
OGPE-VSP will state clearly in their proposal how the system is diagnosed (type of diagnostic, scan
time, etc..) and which alarms are available.
The following types of testing and fault monitoring shall be provided for F&G System as a
minimum:
First out alarm in a Digital Output (to ESD System) group
Power supply distribution monitoring
Data storage availability and integrity tests
Communication interface checks.
Wire break in the loop.
Ground fault detection in the loop.
Controller/Monitor malfunction and failure.
Signal processing fault.
Line fault (short circuit and/or open circuit).
Power supply faults.
Common database facilities such as sorting, querying etc. shall be available as well as the possibility
to export the SER file to Microsoft windows based applications.
Historical data shall be retained on losses of power supply to the system.
4.10. Sequence of Events Recorder (SER)
Emergency shutdown system failure, etc. shall require a Sequence of events Recorder. The SER
function shall be handled by the PLC.
The principle of SER function is to keep a record of all the event sequencing between several
information of a same process area.
This means SER function shall be able to :
Discriminate status change of information within 100 msec.
Store the events with a time stamping precision of 100m.sec. into its own memory.
Send the events with all information to printer, dedicated PC and PCS system.
Events report shall include but not be limited to the following:
Change of state of discrete inputs and outputs, alarm thresholds on the analogue
input,
Alarm and/or trip points,
System diagnostics,
Event log printout shall include as a minimum: Date / hours / minutes / seconds / milliseconds / tag /
Status.
The SER function shall be standard feature of the system software and hardware.
SER data integration within the PCS alarm management shall be proposed by the PCS OGPE-VSP
4.11. Program Development And Maintenance Console Requirements (ENGI NEERI NG
CONSOLE)
A complete console with the operating system and programming software shall be supplied for the
SIS system.
This console shall be PC based, including latest microprocessor, disk and memory of sufficient
capacity and relevant peripherals. It shall be equipped with the latest version of a proven operating
system (e.g. Windows XP or later) and with the programming and maintenance software.
The programming and maintenance software shall include, but shall not be limited to the following
minimum software requirements:
System and I/O configurations identifying each module type location and tag name,
Vietnam
System data base including tag names, descriptions, type, etc.
Programming user program (SIS and SER),
Maintenance system,
Online modification of user program
Automatic on line documentation,
Off line testing of the control program including full emulation of program and
monitoring of the emulated program,
On line monitoring of the program execution in the PLC,
Download/upload/reload program facilities,
Output overrides, this function shall only be performed under password protection
and work permit conditions.
Inputs/outputs forcing facility shall be provided (for testing and maintenance
purposes)
OGPE-VSP supplied program development and maintenance console shall be equipped with
password security to access the different levels of operation.
Application program shall be identified by the date and time of last CPU loading or by a revision
number automatically updated in order to ensure the identity between source and object running
program. If not, the Engineering Console shall provide a comparison tool between object running
program into the controller and source program resident in the console. The details of the comparison
shall include the exact difference between the original and the modified program.
4.12. System Override and Maintenance Facilities
The following by-pass and override facilities shall be provided. Two different override modes shall
be available:
Start-up override (SUO),
Maintenance or Test Override Switch (MOS).
4.12.1. Start-up Override (SUO)
In order to be able to start-up equipment or sections of process, it shall be necessary to override some
inputs to the SIS system, as sensor signal may be in an abnormal state prior to start-up and could
cause a shutdown. Such overrides are designated as "Start-up overrides".
Activation of start-up overrides shall be carried out automatically by the SIS system during a start-up
sequence. It will only defeat the shutdown function, input status monitoring will remain operable.
Each override function shall be reset automatically either by the sensor signal reverting to the normal
or healthy state, after a dedicated step of the equipment start-up sequence, or after a predetermined
time delay or by a set of process conditions. If cancelled automatically by the sensor signal, the input
circuitry will prevent nuisance trips being caused by oscillation of the input around the reset value.
Indication of the status of sensors overridden by automatic start-up shall be provided at the Operator
workstation (PCS consoles) and on event log print out.
The Tag-Nos. of the input signals which requires start-up override facility and its reset conditions
will be provided to the OGPE-VSP during detailed engineering.
4.12.2. Maintenance override
Overrides which have to be made in order to be able to safely perform maintenance work on sensors
during process operation are designed as "maintenance overrides".
This override facility shall be provided for inputs, where a second or back-up indication and a means
to stop the process are available to the operator.
A maximum of one trip initiator may be overridden per protection group at any one time.
Vietnam
To reduce the number of MOSs, an MOS shall not be applied for 2 out of 3 SIS initiator
configurations. To reduce the IPF PFD, and MOS function shall be provided for each of the initiators
of 2 out of 2 SIS initiator configurations. Setting of one MOS shall create a situation such that during
the time the override is switched on, the configuration automatically functions as a 1 out of 2 system.
Output shall not be overridden because, within one protection group (UZ group), they are usually the
result of more than one Input.
Individual override status indication shall also be provided, with alarm, at the Operator Workstation
and on event log print-out so that the overridden function cannot be left engaged.
A MOS shall be activated from the PCS. When a MOS is activated, the appropriate override signal
shall be sent via the communications link to the SIS.
A hard - wired, yellow, back-lit MOS enable switch shall be provided on the PCS console. At least
one switch shall be provided per process unit. Only when this switch is in the enable position, is the
MOS signal accepted by the actual protection logic. The operator has the possibility to de-activate
any override when the communication link fails because this switch is hardwired
The status of the MOS enable switch shall be read by the PCS via the integrated communication
network for event logging purposes.
The logic to activate only one override per protection group shall be implemented in the SIS system.
In case the PCS to SIS communication link fails, the override shall remain as they were before the
failure and when the link is re-established there shall be no status change.
Maintenance overrides and its reset shall be activated from the PCS consoles by the operator.
Several levels of password protection shall be provided to prevent the unauthorized use of these
facilities.
Setting of input override shall override the shutdown logic function only, Field input status indication
shall remain available.
Appropriate alarm shall be generated by SIS System and transmitted to the Sequence of Events
Recorder.
4.13. Printers requirements
The minimum speed shall be 250 characters / second and shall be of dot matrix impact and low-noise
type (50 dB at 0,5 meter distance).
It shall be able to handle continuous printing of 136 characters per line for folder paper and the paper
handling trays along with separate printer stand shall be supplied.
The printer shall be equipped with an automatic controlled motor ON/OFF facility.
4.14. System Software Configuration Requirements
4.14.1. General Requirements
The application software for the project shall be based on standard software typical modules. The
application software shall be structured as defined in the ESD and Flame detect Cause and Effect
Diagrams and the as per the specification requirements.
Each operational logic sequence for a separate unit of the plant shall have a corresponding software
module designed to operate as a stand-alone functioning unit. Each module shall be labeled.
Similarly, the common functions for the whole plant, such as Emergency Shutdown, shall have a
separate software module, and be labeled.
Subroutines shall not be utilised in the application program. Programming shall be accomplished
using standard conventional software packages (i.e. alarm levels, valves, etc.).
Programmable systems shall be fully configurable by the OGPE-VSP and shall require no specialised
programming whatsoever.
Program shall be performed using function block logic diagrams rather than ladder logic diagrams.
OGPE-VSP to quote optional price to provide cause and effect diagrams on the system using
software packages.
Function block diagrams with comment boxes and narrative descriptions shall be provided. All SIS
Software shall have complete function blocks diagrams containing descriptive function blocks
comments, tags, identification of all bits and words used, and be complemented with necessary full
Vietnam
narrative descriptions of each logic section. The top of the first page of the documentation shall bear
a full project title.
Links with other control systems shall be clearly identified and documented. Memory allocation
table shall be provided.
Data table assignment lists shall be provided. Complete listings of all data table files, and bit
assignments used throughout the programs containing the memory address, symbolic or tag name
and cross reference to function block usage within the programs shall be provided.
Program changes and modifications shall be fully recorded by the application software development
tool and shall be available as part of the on line documentation facility.
4.14.2. ESD executive actions upon field transmitter line monitoring faults
The OGPE-VSP shall provide internal software to accomplish this monitoring.
The monitoring system shall discriminate between Open-Circuit and Short- circuit faults and true
alarm conditions.
mA 0 3 4 20 21 26
Open circuit Normal Operating Short circuit
Tx with LL
threshold
Shutdown Shutdown Normal Operating Alarm
Tx with HH
threshold
Alarm Normal Operating Shutdown Shutdown
Tx with/
LL&HH
threshold
Shutdown Shutdown
Normal
Operating
Shutdown Shutdown

4.15. Configuration tools
The OGPE-VSP shall define the facilities and methods for implementing configuration on his
system. He shall submit a description of the software used to configure the system including the
software releases intended to be used. OGPE-VSP shall state if configuration can be done on a
personal computer or on a system console with keyboard.
Online modification and downloading of the configuration shall be possible. OGPE-VSP shall state
how new or modified configuration can be downloaded on line on the system, for the application
programs and data base.
4.16. Painting
The SIS cabinet(s) and equipment shall be given a robust paint finish commensurate with an offshore
industrial environment. As a minimum, the System OGPE-VSP shall provide his standard paint
specification for an offshore industrial environment for review and approval by the Purchaser. The
internal and external paint color of the cabinets shall be (RAL7032). Rack-mounted components in
the cabinets may be to manufacturers' standard finish.
4.17. Weight Control Requirements
The System OGPE-VSP shall provide unit weights for all items of equipment / material within this
specification. The manner in which this information is to be submitted to the Purchaser is specified
within the OGPE-VSP Weight Control Procedure.
4.18. RFI /EMI I nterference
The SIS system and the components shall be RFI/EMI immune such that no change in the function or
status shall occur, when a UHF 6 Watt hand-held radio is held in close proximity, even with the
cabinet doors open.
Vietnam
Operation of the SIS System shall be unaffected by Electromagnetic (or Radio Frequency
Interference), and tested in accordance with current IEC Standards.
The equipment shall not be susceptible to, or interfere with, radio transceivers, or any other
electronic equipment, switchgear etc. operated within 1 meter of the equipment with cabinet doors
open.
Radio transceivers are defined as UHF/VHF band units of 6 Watts.
1. Precautions shall be taken to protect equipment from the effects of stray RF (Radio
Frequency) fields, in particular those, which may occur during commissioning while
using portable radio equipment.
2. OGPE-VSP shall ensure all systems conform to EMC Directive and have been designed
and manufactured in accordance with BS EN 61000-6-4 "Electromagnetic compatibility
(EMC) Part 6-4: Generic standards Emission standard for industrial environments"
and BS EN 61000-6-2 "Electromagnetic compatibility (EMC) Part 6-2: Generic
standards Immunity for industrial environments".
The OGPE-VSP shall demonstrate that the system conforms with IEC 801-3, Severity level 3
(10V/M), over the frequency range 20 Hz to 1 GHz. The total effect of the radio frequency
interference shall be equal to or less than 0.1% of the output span with the doors closed and equal to
or less than 0.5% with the doors open. All control signals shall be unaffected by tests.
4.19. Network Load Analysis
The System OGPE-VSP is to provide a full load analysis of the system prior to a fully integrated
system FAT. The analysis shall detail network loading for normal operating conditions and
maximum theoretical load based on signal quantities. The loading on the processing units shall be
maximized at 50% of total capacity.
4.20. Flame detector transmitter
OGPE-VSP is required to supply 40 complete set of Flame Detector Transmitters (included
transmitters and mounting accessories) which must be compatible with the new system proposed.
The supplied flame detector transmitter shall meet the following requirements:
Specification Requirement Remark
Operation temperature
range
Operational -50C to +75C

Field of view Minimum 120 degrees horizontal / 95 degrees
vertical

Spectral range UV Radiation 185 to 260 nanometers
IR Radiation in the 4.4 micron range

Time delay Selectable

Sensitivity Setting Selectable

Response time <6 second

Enclosure material Stainless Steel material

Humidity range 0-95% RH (non-condensing)

Power supply 24Vdc

Output 4-20mA, HART communication
MODBUS RS-485 communication.

Vietnam
Certifications/ Approved Class 1, Zone 1, Ex d IIB + H2 T5
ATEX/IECEx - II 2 G Ex d II B+H2 T5 Gb
Factory Mutual (FM) 3260 SIL2
NEMA Type 4X
EN 54-10 Certified (VdS).
IP66 - Enclosure ratings

5. TECHNICAL REQUIREMENTS
5.1. General Requirements for ESD
5.1.1. Operator Interface
5.1.1.1. MOS Pushbutton Board
OGPE-VSP shall provide MOS/SUO pushbutton board attached to front door of ESD
cabinet complete with key operated MOS switches, latch type backlighted ESD
pushbuttons with protection cover. OGPE-VSP shall also include lamp test, reset
pushbuttons and indicating lamps as necessary.
5.1.1.2. ESD Matrix (mimic) Board
OGPE-VSP shall provide identical ESD Matrix (mimic) Boards attached on the front
door of the ESD Cabinet.
The ESD / FD Matrix (mimic) board shall have push buttons (MOS, SUO) and lamps.
Fire and Gas status shall also be indicated on the matrix.
5.2. ESD System
5.2.1. ESD System Overview
The primary objective in the design of the ESD for FPU-DH01 is to engineer a highly reliable Safety
System, with minimum operating cost. The following design principles are intended to consolidate /
standardize ESD System hardware, software and OGPE-VSP services, achieving minimum capital
and operating cost. The implementation of ESD System with high availability shall ensure the
continuous uninterrupted production of oil from FPU-DH01. Redundant architecture shall be
employed to avoid common mode failure points anywhere within the system.
The ESD system will be chosen to provide the user with safe, efficient, cost effective and reliable
equipment of proven technology, having a history of reliable operation in systems of similar
architecture, size and performance in offshore applications.
The ESD system shall be rated SIL 3 and certified by certifying agencies such as TUV.
The ESD system shall allow for expansion of the system in future. OGPE-VSP shall furnish details
of future expansion philosophy identifying the maximum capabilities including total I/O module
capacity per controllers, remote I/O capabilities, peer-to-peer communication facilities.
The ESD system shall be designed to receive all types of input signals and take executive actions as
per the shutdown Cause & Effect Chart. The system shall also exchange data transfer and actions to
the F&G System via hardwired links, and to the PCS via integrated communication network.
All analogue and digital inputs shall be of a fail-safe design. The ESD system shall be of normally
energized design. A "1" logic signal is considered to be normal state, and a "0" logic signal is the
abnormal (trip or failure) state.
The inputs to the ESD system will move to open circuit position for an alarm or abnormal condition.
In the normal state, the outputs from the logics shall be energized and any input becoming open
Vietnam
circuit shall result in de-energized of the associated output circuits. Output signals from the ESD
system should go to a "0" state on power failure or component failure. Open and short circuit of
inputs shall not cause nuisance shutdowns but shall be annunciated as fault condition.
All input cards shall provide visual indication of the status of the input, relative to the trip point and
status of the outputs. All output cards shall indicate the status of the output signal.
The ESD system shall provide as a minimum but not limited to the following alarm annunciation via
the PCS.
Power distribution MCB failure.
Power supply failure.
Cabinet temperature high.
Earth leakage.
Cabinet fan failure.
5.2.2. ESD Manual Push Button
In the event of a fire whilst people are still onboard the installation, there shall be manual platform
ESD buttons at strategic locations around the platform. The manual ESD push button shall be the
mushroom head key resettable type. On manual ESD initiation, the FPU DH-01 operator will be
informed of the status of the system via the PCS system.
5.3. General Requirements Flame Detector System
5.3.1. General Requirements
The primary objective in the design of the Flame Detector System for FPU DH-01 is to engineer a
highly reliable Safety System, with minimum operating cost. The following design principles are
intended to consolidate / standardize Flame Detector System hardware, software and OGPE-VSP
services, achieving minimum capital and operating cost. The implementation of Flame Detector
System with high availability shall ensure the continuous.
The Flame Detector system will be chosen to provide the user with safe, efficient, cost effective and
reliable equipment of proven technology, having a history of reliable operation in systems of similar
architecture, size and performance in offshore applications.
The Flame Detector system shall be rated SIL 3 by certifying agencies such as TUV.
The Flame Detector system shall allow for expansion of the system in future. OGPE-VSP shall
furnish details of future expansion philosophy identifying the maximum capabilities including total
I/O module capacity per controllers, remote I/O capabilities, peer-to-peer communication facilities.
The Flame Detector system shall be designed to receive all types of input signals and take executive
actions as per the shutdown Cause & Effect Chart. The system shall also exchange data transfer and
actions to the ESD System via hardwired links, and to the PCS via integrated communication
network.
The Flame Detector System shall be of failsafe design.
Open and short circuit of inputs shall not cause nuisance shutdowns but shall be annunciated as fault
condition.
All input cards shall provide visual indication of the status of the input, relative to the trip point and
status of the outputs. All output cards shall indicate the status of the output signal.
Flame Detector system shall provide as a minimum but not limited to the following alarm
annunciation via the PCS.
Power distribution MCB failure.
Power supply failure.
Flame detector.
Gas detector.
Smoke detector.
Vietnam
Heat detector.
Cabinet temperature high.
Earth leakage.
Cabinet fan failure.
Activate deluge systems.
Activate Halon (FM200) system.
Active HVAC system.
Trip power generators.
The FD system shall be state of the art microprocessor based having functional distribution and data
base distribution sub-system wise. The system shall be modular in construction and be capable of
future expansion by adding additional modules.
On-line replacement of any module shall be possible in such a way that removal and addition of a
module may be carried out without de-energizing the system. Wherever redundant modules are
provided, there should not be any interruption in the system while replacing a faulty module.
Galvanic isolation shall be provided for all field signals and the system shall have the capability of
detecting open sensors.
All sub-systems of this system shall be able to operate satisfactorily in a temperature range of
minimum 15 C and maximum 35 C and a humidity range of 20 to 90 % non-condensing.
OGPE-VSP's proprietary high speed network cable and communication software for communication
between their respective systems PCS, ESD, FD (F&G) system
5.3.2. Flame Detector System Overview
The Flame Detector System shall provide all functions necessary to monitor and safeguard the FPU
DH-01 from hazardous situations arising from the presence of fire. It shall support the following
functions as a minimum:

Fire Detection
Gas detection.
Status monitoring and alarm displays
Initiation of shutdown via the ESD
Sequence of Event Recording
Time synchronization with ESD, PCS via integrated communication network or
hardwired
The fire detection philosophy, which caters for only one major incident at any one time, shall be as
follows:
To detect fires or potential fires rapidly
To protect personnel, equipment and environment
To isolate, shut off and blow down hydrocarbon sources via the ESD.
To control / suppress the fire manually or automatically
5.3.3. Fire and gas logic
The Fire and gas logic will be configured to vote using "2ooND" (Two out of N, diagnostic)
detection concept. This concept requires two detectors in a voting group to cause an executive action.
The voting logic for Fire & Gas detection is 2ooND i.e. 2 out of "N" number of detectors in the
voting group/zone. The "D" denotes that if any detector in that group has faulted then the faulty
detector will initiate a voted input as high-high and as such the logic reverts to 1ooN (one out of N).
Vietnam
6. Package control philosophy
6.1. Software and Support
Where possible, previously implemented and proven generic software shall be utilised. However all
'Special to Contract' software development to meet any requirements of this specification shall be
clearly identified by the System OGPE-VSP to the Purchaser in his proposal and throughout the
detailed design phase.
The Purchaser reserves the right to conduct a full software design audit either by its own personnel or
by a nominated independent body.
The System OGPE-VSP shall provide full details, throughout the project, of all quality assurance and
control procedures utilised in 'special to contract software' preparation, in particular:
Establishing a software development plan to include the timely submittal of technical design
documentation.
Establishing 'special-to-contract' software QA procedures.
Establishing 'special-to-contract' software support and warranty.
The Purchaser shall be provided with fully annotated listings and machine-readable source code
along with provisions to edit, test, compile and re-install software for any special to contract software
developed for the Project.
7. ADDITIONAL REQUIREMENTS
7.1. Availability and Reliability
The design of the SIS systems is to be governed by SIL analysis in accordance with IEC 61508.
The SIS shall be built up from components and sub-systems having established field-proven
reliability. The use of novel or prototype equipment shall not be used particularly where a failure
would affect the control path of the system.
The availability of the SIS for the purpose of maintaining production shall be as a minimum 99.99
percent. This shall be calculated on the basis of a single control path from one process input to one
process output, and shall exclude marginal loss of availability due to automatic testing.
The fractional dead time of the SIS (i.e. the probability that the system is not capable of executing its
safety function) shall not exceed 10E'
7
. This shall be calculated on a single path basis as for
availability, but excluding the loss of availability due to testing and shall be based on a Mean Time to
Repair of 6 hours.
The loss of availability for automatic testing shall not exceed 1 second per operational hour as an
average, with no testing operation disabling the system for more than 4 seconds at a time.
The SIS shall have a high degree of tolerance to malfunctions of hardware and software. A fault in
any part of the SIS shall cause minimal effect, remaining local to that part and the system shall
remain operational.
The SIS shall maintain its safety functions independent of any other system.
7.2. Functional Design Specification
The functional design specification shall contain, as minimum:
Design philosophy
General description
System configuration and interfacing details
Interface Electronic Characteristics (supply current, impedance etc.)
Detailed equipment specifications
Full F&G Detector & field device details including Wiring details
System/Marshaling Cabinet's wiring details
Cabinet and equipment layout including dimensions, heat calculations & weight data
Typical loop diagrams for all inputs/outputs
Vietnam
Software Functional Design Specification
Functional Logic Diagrams (FLD's)
Power supply and distribution system plus maximum load
I.S. loop verification calculations
Equipotential bonding drawings
Availability and reliability calculations
7.3. Failure Mode and Effects Analysis
System OGPE-VSP shall execute an exhaustive and complete Failure Mode and Effects Analysis
(FMEA) or Fault Tree Analysis (FTA) on the complete control system.
The FMEA / FTA shall also predict the availability, reliability and fractional dead time of the
system. The results of this work shall be presented in a clear, comprehensible manner.
It is recognized that some components of the system furnished by sub-suppliers or others will have
insufficient data to permit a full FMEA. In this case, the use of fail-danger and fail-safe data based
on component counts may be acceptable.
The report shall detail all sources of data used and shall show all calculations and assumptions. The
failure mode effect analysis shall form part of the F.D.S.PACKAGE LIMIT CONNECTIONS.
7.4. Change Management
The System OGPE-VSP confirms to a schedule of rates for additional I/O. The schedule shall detail
each type of I/O and a cost for addition and deletion with respect to hardware and software
installation, engineering, amendments to system database, configuration, testing, documentation and
approvals by Verification Bodies as applicable.
The System OGPE-VSP confirms to a schedule of rates for the production of HMI graphics. This
schedule shall detail rates for 0.25, 0.5 and full screen graphics and include all engineering, displays
(static & dynamic), configuration, testing and approvals by Verification Bodies as applicable.
To mitigate against the risk to cost and schedule over run the OGPE-VSP should be prepared to
participate in a purchaser led workshop to formulate a joint risk action plan. The OGPE-VSP should
also be prepared to formulate a comprehensive schedule of rates to cover all identifiable hardware
and software changes. Further, the OGPE-VSP is to be prepared to formulate a joint change
procedure with the purchaser with the purchaser for the duration of the contract.
8. Testing
8.1. Factory Acceptance Test (FAT)
The System OGPE-VSP shall undertake as much testing of the new hardware as possible in the
factory in order to minimize the time required on site. Testing shall use test panels simulating all
(100%) I/O and shall include a fully integrated system test.
Testing shall include radio frequency immunity testing, including the use of hand held radios
provided by others, frequencies to be advised prior to testing.
At least four weeks prior to the commencement of any testing, the System OGPE-VSP shall submit a
full Inspection and Test Plan, FAT procedure, including check and sign off sheets, to the Purchaser
for approval. Testing will not commence until the ITP has been approved by the Purchaser.
All testing, in the System OGPE-VSP's Factory, at the Third Party link OGPE-VSPs works, and
onshore, shall be documented and all details recorded in the procedure, thereafter being signed by all
parties.
8.2. Onshore Testing
The onshore testing shall include a fully integrated test including field devices as much as practicable.
The test shall include for simulation of all new serial data through redundant links and hard I/O
interfaces direct to system nodes.
Vietnam
The System OGPE-VSP shall be responsible for undertaking and/or supervising all the onshore
installation and testing work of the complete system at their fabrication facility. A specific
test/commissioning procedure will be required and shall be issued for review and approval by the
Buyer at least 02 weeks prior to the work being undertaken on platform.
The System OGPE-VSP shall also provide all special installation tools and sufficient Commissioning
spares to complete the work, he shall not assume that operating spares will be made available.
OGPE-VSP shall provide his own commissioning tools including additional screens, keyboards, and
special tools, etc.
8.3. Offshore Testing
The offshore testing shall be carrying out final test before start-up production. The OGPE-VSP shall
be responsible for undertaking and/or supervising and troubleshooting to complete system.
8.4. Certificate
System shall be certified by Third party (Lloyds Register, Vietnam Register or Germanischer Lloyd)
during testing.
9. DOCUMENTATION
The OGPE-VSP confirms to all the documentation required and as per the VDRL.
The OGPE-VSP confirms to System Architecture and Functional Logic Diagram.
The OGPE-VSP confirms to System Loop Diagrams (to system boundaries only) in the Purchaser's
CAD format and interface to be defined during detailed design.
Dimensional drawings showing indicative dimensions (including any furniture), system block
diagram and panel general arrangements shall be provided with the bid. This is to facilitate the layout
of the Control and Equipment rooms by the Purchaser where space is at a premium.
Drawings may be submitted showing individual equipment items or showing 'equipment suites'
which can be located as blocks.

02 Exhibit I Services

Caricato da

Informazioni sul documento

Titolo originale

Copyright

Formati disponibili

Condividi questo documento

Condividi o incorpora il documento

Opzioni di condivisione

Hai trovato utile questo documento?

Questo contenuto è inappropriato?

Copyright:

Formati disponibili

02 Exhibit I Services

Caricato da

Copyright:

Formati disponibili

Vender: OGPE-VSP Page 1 of 27

Potrebbero piacerti anche