Are ATEX powder storage silos disasters waiting to happen?
19 October 2015
According to Nigel Allen, managing director of level measurement specialist Hycontrol, many ATEX-rated powder storage silos are disasters waiting to happen, putting lives at risk and posing serious threats to the environment. He says that the latest silo protection technology provides much more than a safety system to prevent over-filling and over-pressurisation.
“Our findings are worrying to say the least and the photos taken by our installation engineers speak for themselves,” says Allen.
“Companies just don’t seem to understand the consequences of poorly maintained protection systems. It’s quite frightening that operators accept pressure blow outs via the pressure relief valve (PRV), erroneously thinking that ‘It’s OK - the PRV is doing its job’. This couldn’t be further from the truth - PRVs are there as a last resort.
“If the silo protection system is working correctly and is fitted with an automatic shut-off feature to prevent over-filling, the PRV should never be used. If a PRV blows then there’s an inherent problem with the system or the filling protocol and corrective action must be taken.
“Material in and around a PRV is a tell-tale sign that there’s something wrong and a catastrophic blow-out is waiting to happen,” he continues.
“The material blown out from the silos will almost certainly solidify over time and this will, at best, prevent the PRV from working correctly and, at worst, completely clog it up. Unfortunately many maintenance engineers just don’t realise the potential dangers that lurk beneath. They often think that simply cleaning off the material on and around the PRV is good enough. They don’t realise that if the PRV doesn’t lift next time an ‘event’ occurs, the over-pressure could easily rupture the silo or eject the filter housing from the top. On an ATEX-rated silo the over-pressure could be sufficient to simulate an explosion and open the protective blast panels, resulting in costly loss of product and silo contents being left open to the elements.”
With regard to filter housings, Hycontrol engineers have witnessed another worrying practice at a number of sites where companies fit chains to prevent the housing being blown off the top of the silo, almost accepting blow-outs as being inevitable.
What Causes Over-Pressurisation Problems?
Silo protection systems are designed to prevent the damaging and potentially dangerous
consequences of silo over-filling or over-pressurisation when powdered material is being transferred pneumatically from road tankers to silos. Unfortunately, perched out on the top of silos, such protection systems are all too often ‘out of sight, out of mind’ – until a major problem occurs!
Problems during the filling process usually arise through an inherent problem with the silo protection system or with the air filtration system on top of the silo. Problems can also occur through tanker driver/operator error. Delivery tankers are pressure-tested vessels typically capable of withstanding up to 2 bar (29 psi) pressure. Storage silos, on the other hand, are only designed to withstand the weight of material stored in them and can rupture at pressures as low as 1-2 psi above atmospheric pressure.
The possible consequences of over-filling or over-pressurisation include:
• Serious or fatal injury to workers and the public
• Catastrophic silo damage
• Loss of material and production plus
• Harmful environmental pollution
• Damage to company reputation
A key issue with many silo protection systems is that without adequate ground level testing capabilities, operators don’t know if they will work when needed. Working at height restrictions limit silo top inspections and maintenance, especially in adverse weather conditions. However, the main problem is: what can engineers actually do when they are at the top of the silo? How do you physically test a relief valve or pressure transmitter unless you remove them?
Even if the protection system does do its intended job and prevents a major incident, companies rarely investigate the root cause of the problem so that remedial work can be carried out to prevent the situation re-occurring. Important near-miss events such as PRV (Pressure Relief Valve) lifts, high level events and high pressure events are routinely not recorded and often conveniently dismissed. Hycontrol have clear evidence that in practice there are more near-misses than realised and that the situation is a ticking time bomb.
Filter housings on top of silos are designed to vent the silo during filling, whilst preventing dust escaping into the atmosphere. Normally these are fitted with some form of self-cleaning system to keep filters clear, typically mechanical shakers or reverse jet systems. Although filter manufacturers give recommended check routines and filter replacement schedules, in practice it would appear these guidelines are regularly ignored. Faulty operation can be caused by a range of issues, including blockages and the fitting of unsuitable or wrongly-sized filters. Most powders form hard compounds when mixed with water from the atmosphere, further exacerbating the problems at the top of the silo.
Effective Silo Protection
Other industrial areas are further ahead in dealing with this issue. For example, the MPA (Mineral Products Association) publishes comprehensive guidelines for silo protection systems in UK quarries and cement works. But worryingly there are little or no such recommendations for powder silos used in a broader range of industries, including food and beverage, grain, starch, sugar, and animal feed. The primary principles are the same for protecting any pneumatically-filled silo, yet the issue is being routinely overlooked.
Even with guidelines in place, the benchmark for the effectiveness of any silo safety protection system can only relate to the last time all the components were fully tested.
The only effective solution is to take an integrated approach to silo protection design whereby the PRV, pressure sensor and high level alarm can be tested at ground level, prior to each fill. Only when all these safety devices have passed the checks should the safety interlock allow the silo inlet valve to open and the delivery to commence.
As an added benefit, an effective protection system can serve as a powerful predictive maintenance diagnostic tool by recording critical near-miss events that occur during the filling process. This information allows managers to carry out effective predictive maintenance by means of a logical step-by-step root cause analysis (RCA) process to understand why the problems are arising. For example, high pressure and PRV lift events may be due to filter problems, prompting questions such as:
• Are the filters the correct size?
• Is the filter cleaning regime fully operational?
• Have the filter bags/cartridges been changed as per manufacturers’ recommendations?
In parallel the logs will also indicate if the tanker drivers are routinely over-pressurising during the fill process.
In summary, the optimised silo protection system should incorporate:
• Pressure sensor, high alarm level sensor and PRV testing (essential)
• Simple one-button press to test all components
• Silo filling auto shut-off control
• Pneumatic cleaning of pressure sensor
• Recording of the number of events on incidents of over-pressure (time / date stamp)
• Recording of the number of events of PRV lift and opening (time / date stamp)
• Recording of the number of events of high level probe activation (time / date stamp)
• Filter ON / OFF output option to check filter status
• Filter air supply monitoring alarm option
There is strong empirical evidence that many silos are disasters waiting to happen. The practical reality is that powder storage silos can split or rupture at pressures as low as 1 or 2 psi above atmospheric pressure. Malfunctioning filter housings can and have been ejected at similar pressures.
Simply relying on cursory visual inspections of silo protection equipment is woefully inadequate. Therefore it is imperative that any installed safety system must be capable of providing reliable protection that can be easily verified by testing critical components before each and every delivery – without having to climb to the top of the silo. This approach will provide total silo safety; protecting assets, the environment and most importantly site personnel and the public.