Architecture assessment for safety critical plant operation using reachability analysis of timed automata

David Gouyon (1) , Jean-François Pétin (1) , Thomas Cochard (1) , Catherine Devic (2)

1 CRAN - Centre de Recherche en Automatique de Nancy
2 EDF - EDF

This article deals with the validation of critical industrial process architec-tures from the point of view of safety and operation. During the engineering phases, the objective is to complement conventional safety studies with an approach that focuses on plant operation. In this context, one of the major challenges is to provide a guarantee that the designed architecture will be able to react safely to critical situations and events. To face the complexity resulting from the large number of functionalities and devices of the installations under consideration, the proposed approach is based on dynamic models of architectures, using the formalism of timed automata and reachability analysis to verify that, given a particular configuration of an architecture, the process can be safely operated to achieve a given objective. The result is a formal tool that allows engineers and plant operators to evaluate architecture safety with different types of dysfunctional scenarios based on their operational safety expertise. The article presents the formal modelling framework, which emphasizes structured modelling using patterns to promote reuse and instantiation over several candidate architectures. The contribution is illustrated and discussed using an experimental laboratory platform.

Mots clés: Plant operation; safety assessment; critical process architecture; reachability analysis; timed automata; modelling patterns

Domaines: Sciences de l'information et de la communication

David Gouyon, Jean-François Pétin, Thomas Cochard, Catherine Devic. Architecture assessment for safety critical plant operation using reachability analysis of timed automata. Reliability Engineering and System Safety, 2020, 199, pp.106923. ⟨10.1016/j.ress.2020.106923⟩. ⟨hal-02514845⟩