0 ISSUE TM STIN STIN DEC.

94
REV. DESCRIPTION PREP'D CHK'D APPR'D DATE

Il presente documento RISERVATO ed di propriet dell'AGIP. Esso non sar mostrato a Terzi n sar utilizzato per scopi diversi da quelli per i quali stato inviato.
This document is CONFIDENTIAL and the sole property of AGIP. It shall neither be shown to third parties nor used for purposes other than those for which it has been sent.
FUNCTIONAL SPECIFICATION
ELECTRIC NETWORK CONTROL SYSTEM WITH PROGRAMMABLE LOGIC
CONTROLLERS
20180.EQP.ELE.FUN
Rev. 0
December 1994
20180.EQP.ELE.FUN
Rev. 0 December 94
Sheet 2

Il presente documento RISERVATO ed di propriet dell'AGIP. Esso non sar mostrato a Terzi n sar utilizzato per scopi diversi da quelli per i quali stato inviato.
This document is CONFIDENTIAL and the sole property of AGIP. It shall neither be shown to third parties nor used for purposes other than those for which it has been sent.
FOREWORD
Rev. 0 Total Number of pages 34
December 1994
Issued to comply with the EEC directives
20180.EQP.ELE.FUN
Rev. 0 December 94
Sheet 3

Il presente documento RISERVATO ed di propriet dell'AGIP. Esso non sar mostrato a Terzi n sar utilizzato per scopi diversi da quelli per i quali stato inviato.
This document is CONFIDENTIAL and the sole property of AGIP. It shall neither be shown to third parties nor used for purposes other than those for which it has been sent.
INDEX
1. GENERAL
1.1. Scope
1.2. Normative references
1.2.1. European normative references
2. FUNCTIONAL NORMATIVE REQUIREMENTS
2.1. Definitions
2.2. Symbols and abbreviations
2.3. Operating Environment
2.4. Functional Requirements
2.4.1. Basic design data
2.4.2. Operating conditions
2.4.3. System composition
2.4.4. Operation characteristics
2.4.5. Construction characteristics
2.4.6. Packing for transport
2.5. Boundaries, limits and exclusions
2.5.1. Limits and exclusions
2.6. Ergonomics
2.7. Safety
2.7.1. General rules
2.8. Requirement for Quality Management and Assurance
2.9. Additional Requirements for Review
2.9.1. Type Test
2.9.2. Acceptance Test (individual)
2.9.3. Special Test
2.10. Documentation
2.10.1. Bid documentation
2.10.2. Documentation subjected to Approval
2.10.3 Documentation used by the Company for the system design
2.10.4. Test documents
2.10.5. Final technical documentation
20180.EQP.ELE.FUN
Rev. 0 December 94
Sheet 4

Il presente documento RISERVATO ed di propriet dell'AGIP. Esso non sar mostrato a Terzi n sar utilizzato per scopi diversi da quelli per i quali stato inviato.
This document is CONFIDENTIAL and the sole property of AGIP. It shall neither be shown to third parties nor used for purposes other than those for which it has been sent.
1. GENERAL
1.1. Scope
This specification defines the minimum requirements and the inspection plan for the
supply of "Electric network control system with programmable logic controllers (PLC).
For any other additional information not covered by this specification see the
applicable Normative References and Publications as well as the project technical
documentation, in particular:
Technical Data Sheet(T.D.S.);
Inspection Data Sheet (I.D.S.);
Required Documentation Data Sheet (R.D.D.S.).
The technicaI requirements of this Functional Specification are based upon
considerations of performances and functionality, therefore the instructions contained
in this document are not meant to be discriminatory.
Any alternative suggestions will be considered, provided that they comply with the
requirements of this document from both a functional and a performance point of view.
1.2. Normative References
The Normative References and the Publications that define the entirety of the variable
speed electric drives are listed below.
When applicable, references will be made to the European Normative References EN
and to the CENELEC Harmonisation Documents or, in their absence, to the CEI/CEI
UNEL Normative References and the IEC Publications.
In any case, the plants shall comply with the requirements of the Legislation and
Regulation issued by Local Authorities and Organisations under whose jurisdiction the
plants shall be installed.
1.2.1. European Normative References
EUROPEAN
CENELEC
INTERNATIONAL
IEC
NATIONAL
CEI/CEI UNEL
TITLE
( NOTE 1 )
--- 60 - 1 () 42 - 4
High voltage test techniques - General definitions
and test requirements
---
60 - 3 ()
60 - 4 ()
42 - 5
High voltage test techniques - Measuring devices
and application guide for measuring devices
EN 60068-2-1/2 (
)
68-2-1/2 ()
68-2-3 () Environmental testing -
HD 323 () 68-2-14/28 () 50 - 3 Temperature and damp heat tests
68-2-30/33 ()
68-3-1 ()
EN 60073 () 73 16 - 3 Coding of indicating devices and actuators by
colours and supplementary means
--- 255 41 - 1 Electrical relays
20180.EQP.ELE.FUN
Rev. 0 December 94
Sheet 5

Il presente documento RISERVATO ed di propriet dell'AGIP. Esso non sar mostrato a Terzi n sar utilizzato per scopi diversi da quelli per i quali stato inviato.
This document is CONFIDENTIAL and the sole property of AGIP. It shall neither be shown to third parties nor used for purposes other than those for which it has been sent.
follows " European Normative References "
EUROPEAN
CENELEC
INTERNATIONAL
IEC
NATIONAL
CEI/CEI UNEL
TITLE
( NOTE 1 )
EN 60546 1 ( ) 546 - 1 ---
Controllers with analogue signals for use in
industrial process control systems.
Part 1: Methods of evaluating the performance
EN 60546-2 ( ) 546 - 2 ---
Controllers with analogue signals for use in
industrial process systems.
Part 2: Guidance for inspection and routine
testing
--- 617 - 2 3 - 14
Graphical symbols for diagrams. Part 2: Symbol
elements, qualifying symbols and other symbols
having general application
--- 654 ---
Operating conditions for industrial-process
measurement and control equipment
HD 481 . 1 () 801 - 1 () 65 - 5 Electromagnetic compatibility for industrial-
EN 6081-2 () 801 - 2 () 65 - 6 -process measurement and control equipment
HD 481 . 3 S1 ( ) 801 - 3 () 65 - 7
--- 902 65
Industrial-process measurement and control.
Terms and definitions
--- 1131 - 1
--- 1131 - 2 --- Programmable controllers
EN 61131-3 ( ) 1131 - 3
-- 50 --- International Electrotechnical Vocabulary
Notes for reading the table in paragraph 1.2.1.:
1) Titles of IEC publications, when common to CEI rules and CENELEC, are
translated from the original relevant texts.
2) The Normative References and Publications with () have complete
correspondence with the CEI or UNI National ones. In the other cases the subject
is the same but the requirements are not entirely the same.
20180.EQP.ELE.FUN
Rev. 0 December 94
Sheet 6

Il presente documento RISERVATO ed di propriet dell'AGIP. Esso non sar mostrato a Terzi n sar utilizzato per scopi diversi da quelli per i quali stato inviato.
This document is CONFIDENTIAL and the sole property of AGIP. It shall neither be shown to third parties nor used for purposes other than those for which it has been sent.
2. FUNCTIONAL NORMATIVE REQUIREMENTS
2.1. Definitions
As to definitions and terminology reference shall be made to Normative References
listed in paragraph 1.2.
2.2. Symbols and abbreviations
As to symbols and abbreviations reference shall be made to the Normative
References listed in paragraph 1.2.
2.3. Operating environment
The entirety of the system shall be designed and built according to the environmental
conditions of the installation site specified in the Data Sheet.
When H
2
S is detected in the atmosphere, unless otherwise specified, the following
concentrations shall be considered:
0,10 ppm of H
2
S continuously.
5 ppm of H
2
S and 2 ppm of SO
2
occasionally and for short periods.
The Supplier shall adopt suitable protective measures and prove their validity with test
certificates for the components.
20180.EQP.ELE.FUN
Rev. 0 December 94
Sheet 7

Il presente documento RISERVATO ed di propriet dell'AGIP. Esso non sar mostrato a Terzi n sar utilizzato per scopi diversi da quelli per i quali stato inviato.
This document is CONFIDENTIAL and the sole property of AGIP. It shall neither be shown to third parties nor used for purposes other than those for which it has been sent.
2.4. Functional requirements
2.4.1. Basic design data
The system design shall be the Suppliers specific responsibility. He shall comply with
the requirements of this specification, of the Data Sheet and of the Normative
References listed in section 1.2.
In particular, the Supplier shall verify the data laid out in the Data Sheet, suggesting
any variations or changes he may deem necessary.
The entirety of the PLC electric network control system shall be designed in order to
operate in the environmental conditions of the installation site defined in the Data
Sheet.
Making sure that the system is perfectly functional and compatible with the controlled
electrical components (e.g. switchboards) shall also be responsibility of Supplier. For
this purpose the Supplier shall send (or send for in time) all the data, information,
documents recommendations, even if not specifically required, to the Manufacturers of
the electric switchboards, for the design and execution of all which is their
responsibility so as to make sure that the entire Control system and controlled
switchboards form a single constructively integrated and functionally homogeneous
unit.
The system design shall be carried out considering the following as fundamental:
easy command and regulation manoeuvre;
easy alarm reading;
separation of the equipment of different circuits or systems to avoid manoeuvre
and/or reading errors;
correct and immediate localisation of emergency equipment as well as their
protection to avoid manoeuvre problems;
easy intervention for maintenance and replacement of components.
The PLC electric network control system shall be designed for the following
operations and for the reasons indicated on the project documentation:
Control and management of the electric network;
Data acquisition from the field;
Alarm processing;
Communication with external units (supervisors, DCS, SCADA, etc.);
Remote control processing;
Management and/or functional calculations (load shedding, load sharing, user
change, etc.);
Autodiagnostic;
Visual display of the plant;
Historical file processing;
Maintenance management.
The system structure and the location of the components shall generally be
established by the Company in the Data Sheet. The quantity of the equipment shall be
defined in relation to the Companys requests and the system functional needs.
Defining the quantity of equipment shall be responsibility of the Supplier, even if it is
not specifically indicated in the Data Sheet.
20180.EQP.ELE.FUN
Rev. 0 December 94
Sheet 8

Il presente documento RISERVATO ed di propriet dell'AGIP. Esso non sar mostrato a Terzi n sar utilizzato per scopi diversi da quelli per i quali stato inviato.
This document is CONFIDENTIAL and the sole property of AGIP. It shall neither be shown to third parties nor used for purposes other than those for which it has been sent.
2.4.2. Operating conditions
2.4.2.1 Environmental conditions
The system equipment shall be suitable for operation in the environmental conditions
indicated in the Data Sheet, with the minimum requirements shown in TABLE 1:
TABLE 1
ENVIRONMENTAL CONDITIONS OPERATION LIMITS
Operation temperature (inside the switchboard)
+ 5C Errore. Il
segnalibro non definito.
Storage temperature (outside the switchboard)
- 25C Errore. Il
segnalibro non definito.
Hygrometry (without condensation)
30% Errore. Il segnalibro
non definito. Errore. Il
Altitude
0m Errore. Il segnalibro
non definito. Errore. Il
Depending on the ambient temperature, great attention shall be paid to the cooling
system in order to allow the release of the heat produced inside the switchboard by
the equipment in operation, so as to keep temperature below 50C. Ventilation can be
natural or forced.
Whenever necessary, prearranging equipment for the temperature check inside the
electric switchboard shall be responsibility of the Supplier.
The entirety of the system and the individual components shall not be affected by
harmonic vibrations and heavy impacts that may occur during transport and routine
operations within the limits indicated in the relevant Normative References.
20180.EQP.ELE.FUN
Rev. 0 December 94
Sheet 9

Il presente documento RISERVATO ed di propriet dell'AGIP. Esso non sar mostrato a Terzi n sar utilizzato per scopi diversi da quelli per i quali stato inviato.
This document is CONFIDENTIAL and the sole property of AGIP. It shall neither be shown to third parties nor used for purposes other than those for which it has been sent.
2.4.2.2. Power supply system
The electric power supply distribution shall comply with the Data Sheet and the
enclosed documents.
Each power supply shall have an input switch-breaker.
The power supply to the logic component shall be provided according to the following
outline:
Equipment code reading:
Q - Switch-Breaker with fuse
KM - On-line contactor
TF - Insulation transformer
KM01 KMn- Contactors for power supply to LCU unit racks and the inputs
KS01 KSn - Contactors for power supply to outputs
LCU - Local Control Unit
Any re-start after a shutdown caused by a blackout or an emergency stop shall be
allowed by the appointed personnel in compliance with the safety rules.
20180.EQP.ELE.FUN
Rev. 0 December 94
Sheet 10

Il presente documento RISERVATO ed di propriet dell'AGIP. Esso non sar mostrato a Terzi n sar utilizzato per scopi diversi da quelli per i quali stato inviato.
This document is CONFIDENTIAL and the sole property of AGIP. It shall neither be shown to third parties nor used for purposes other than those for which it has been sent.
The equipment feeder shall be compatible with the values of TABLE 2:
TABLE 2
TYPICAL VALUES
FUNCTIONS 24V D.C. 110-127V A.C. 220-240V A.C.
Operation field
19,2 Errore. Il
segnalibro non
definito. 30 V
90 Errore. Il
segnalibro non
definito. 140 V
180 Errore. Il
segnalibro non
definito. 264 V
Limit frequency ---
47 Errore. Il
segnalibro non
definito. 63 Hz
47 Errore. Il
segnalibro non
definito. 63 Hz
Micro-interruptions
(typical values)
duration 10ms
repetition 1Hz
duration 10ms
repetition 1Hz
duration 10ms
repetition 1Hz
Harmonic factor - 10% 10%
Included residual
waviness
5% max. --- ---
2.4.3. System composition
The control system, in its entirety, shall consist of the following interconnected parts,
in accordance with the requirements of the project documentation:
a) Conventional component (Hard Wired);
b) Logic component.
The two main components, Hard Wired and Logic components shall be strictly
interdependent. The Supplier shall guarantee their complete and perfect compatibility
looking for alternatives, if necessary, in order to obtain a symbiosis between Hard
Wired and Logic components. Since this specification defines the characteristics of
the Logic component, the Supplier shall check these characteristics with the Hard
Wired Component (e.g. if the analogue input cards are standardised at 0-20mA, the
measure convertors shall operate according to the analogue card characteristics).
2.4.3.1. Conventional component (Hard Wired)
The conventional component shall carry out the operation, protection and shutdown
functions. It typically consists of electric switchboards and related internal components
whose definition shall be found in the relevant Functional Specifications.
2.4.3.2. Logic component
The logic component shall carry out functions of command, control and supervision of
internal, external and in-between-switchboard automations. It shall control and
command all switchboard hard wired components.
The logic component generally consists of:
Local Control Unit (LCU) with related application programme;
Connection local network;
Video terminals or keyboards with display;
Supervision system (VDU);
Software.
20180.EQP.ELE.FUN
Rev. 0 December 94
Sheet 11

Il presente documento RISERVATO ed di propriet dell'AGIP. Esso non sar mostrato a Terzi n sar utilizzato per scopi diversi da quelli per i quali stato inviato.
This document is CONFIDENTIAL and the sole property of AGIP. It shall neither be shown to third parties nor used for purposes other than those for which it has been sent.
A LCU shall be normally provided for each section of the plant, switchboard or area,
as established in the Data Sheet. The Supplier, in agreement with the Company, shall
decide whether to add any further LCUs, when necessary for functional needs, and in
relation to their costs.
a) Local Control Unit (LCU)
It generally is a PLC consisting of the following parts:
1) Rack
It shall made of material suitable for its application (e.g. self-extinguishing),
with 8 card slots, unless otherwise specified.
Should operation needs require a ventilation system on the rack, it shall be
supplied with the same voltage foreseen for the main .feeder.
If necessary, expansion racks shall be provided with the same
characteristics as those of the main rack although they shall not be
interchangeable.
A mechanic and/or electronic protection shall be provided to avoid the
incorrect connection or the exchange between modules in case of
replacement.
2) Power supply module
It shall be able to supply all the cards foreseen in the LCU (even if not
installed), and, if necessary, it shall also supply the expansion rack.
The input power supply can be one of the following:
110 V 50/60 Hz;
220 V 50/60 Hz;
24 V D.C.
The module shall be suitable to bear a voltage and frequency variation as
previously shown in table 2; however, an internal protection shall be
provided to limit damages during a variation exceeding the operation limits.
Suitable pilot lights on the module shall indicate:
Input voltage included, or not included, within the operation limits;
Error detected in the power supply circuit.
An exchange contact shall be required to indicate the failure of the module
and/or an incorrect power supply.
3) CPU - Processing unit
The module shall be suitable for all the functions foreseen in the Data Sheet
and it shall be programmable and technologically up to date.
If necessary, the module shall be able to contain one or more memories
aimed at expanding its processing capacity; if the memory is of RAM type a
lithium battery shall supply it with power in case of power loss.
On the same module, indicators shall be provided with the purpose of
signalling:
Module being supplied;
Module in RUN (programme on running);
Errors of the module or in the running of the programme.
20180.EQP.ELE.FUN
Rev. 0 December 94
Sheet 12

Il presente documento RISERVATO ed di propriet dell'AGIP. Esso non sar mostrato a Terzi n sar utilizzato per scopi diversi da quelli per i quali stato inviato.
This document is CONFIDENTIAL and the sole property of AGIP. It shall neither be shown to third parties nor used for purposes other than those for which it has been sent.
The CPU shall be provided with a relevant connector for connection to the
programming unit, and if foreseen it shall be able to contain the network
card, connected in the network.
If the project requires the use of more than one LCU, CPUs should
preferably be always of the same type in order to minimise the spare
material and uniform their structure and programming.
4) Input/output cards
The input and output cards can be digital and analogue. Both shall have the
following characteristics:
High reliability
STD dimensions and possibility of being fitted in any rack slot
Terminal block that can be disconnected (replacing one card shall not
result into having to re-do the wiring harness);
Signalling the input or output state.
The operation characteristics shall be included among the following:
Digital inputs : 24 -110 V.D.C. / 110-220 V.A.C.;
Analogue inputs : 0 -10 V / 0-20 mA / 4-20 mA / 5V;
Digital outputs : 20-110 V.c.c. / 110-220 V.A.C.;
Analogue outputs : 0 -10 V / 0-20 mA / 4-20 mA / 5V.
In particular the cards shall have the following characteristics:
- Digital inputs
Galvanic insulation for each input;
Protection filter against induced signals;
Permissible modularity not higher than 4;
State-change acquisition time not longer than 25 ms;
Number of inputs that can be connected 16/24/32, and, anyway, in
compliance with the requests.
- Digital outputs
Protection against induced overvoltages;
Protection against polarity reversals (downstream connection of
external diode to the output, if necessary);
Minimum reply time not longer than 10 ms;
Number of outputs that can be connected 8/16/24/, and, anyway, in
compliance with the requests.
- Analogue inputs
Galvanic insulation for each input;
Max. permissible error <= 0,2%;
Acquisition time not longer than 100 ms;
Number of inputs that can be connected 2/4/8, independent of one
another.
- Analogue outputs
Protection against induced currents;
Protection against polarity reversals;
8 or 12 bit resolution as required in the project specification.
20180.EQP.ELE.FUN
Rev. 0 December 94
Sheet 13

Il presente documento RISERVATO ed di propriet dell'AGIP. Esso non sar mostrato a Terzi n sar utilizzato per scopi diversi da quelli per i quali stato inviato.
This document is CONFIDENTIAL and the sole property of AGIP. It shall neither be shown to third parties nor used for purposes other than those for which it has been sent.
In particular cases, a single card/module including inputs and outputs can be
provided.
All cards shall be provided with a simplified system for determining errors in
each input and output.
5) Communication module
It shall be of module STD size and it can be fitted in any rack slot.
Network connections shall be carried out with a simple and highly effective
technique in order to simplify all replacement and maintenance operations.
6) Compact PLCs
Some applications might require the use of a compact PLC which, although
being of reduced size, shall fit the following into a single module:
Feeder;
Processor;
Minimum 16 digital I/Os;
Pre-setting for analogue I/Os;
Pre-setting for connection into network.
7) Remote unit
It is an additional component to the LCU and it increases the processing
capacity of the latter (further increase of I/Os resident in the LCU).
Comprising of a rack and the I/O cards, it can be supplied separately or
through connection to the main LCU. The remote unit can be used as LCU
local extension, therefore fitted in the same switchboard, or it can be used as
unit subjected to the control of another switchboard. In this case, the
Supplier shall decide and agree with the Company upon a suitable
connection system which, in any case, shall guarantee a distance of at least
25 m between main rack and remote one.
An indicator signalling the correct communication between LCU and remote
unit shall be provided. Furthermore, the remote unit disconnection shall not
interfere in the operation of the cards fitted in the LCU.
8) Intelligent terminal blocks
Systems which cover very large areas might require the use of intelligent
terminal blocks in order to set inputs and outputs as remote using equipment
capable of minimise the usage of field wiring harnesses.
Intelligent terminal blocks are an integral part of the LCU; they shall be
connected to the latter by means of a specific bus.
In general, they shall have the following characteristics:
minimum number of I/Os for each terminal block: 16;
configuration of the individual terminal block as digital inputs, digital
outputs, and digital inputs and outputs mixed;
minimum number of terminal blocks that can be connected to the bus not
lower than 32;
possibility to set a terminal block as remote at 500 m. from the LCU at
least;
20180.EQP.ELE.FUN
Rev. 0 December 94
Sheet 14

Il presente documento RISERVATO ed di propriet dell'AGIP. Esso non sar mostrato a Terzi n sar utilizzato per scopi diversi da quelli per i quali stato inviato.
This document is CONFIDENTIAL and the sole property of AGIP. It shall neither be shown to third parties nor used for purposes other than those for which it has been sent.
the break of the bus (physical cut), shall guarantee the operation of the
terminal blocks connected upstream to the fault;
the fault of one terminal block shall not jeopardise the correct operation of
the others.
The wiring of I/Os shall be carried out with the same mechanism foreseen for
the LCU I/O cards.
b) Communication networks
1) Local network of connection between LCUs
It is the hardware support (typically it is a cable with 4 wires or coaxial) and it
links the system components. It is able to transport information between LCU
and other components such as the supervisor.
The communication network shall be placed onto a or specific conduit. It
shall follow a different route than the one used for the power cables in order
to avoid induced disturbances.
The communication modules fitted into the LCU are an integral part of the
communication network. The modules can be connected to the
communication network directly or indirectly through cable sections (T
joints); in any case, the communication network output and/or input to the
switchboard shall be connected through a different route from all other
connections (I/O, power supplies etc.), so as to allow an easy control of the
network cables.
The communication system shall guarantee control procedures of the
information in network so as to avoid unwanted manipulations of the
information passing through; a checksum shall be typically required for all
the information passing through the network.
It is important that each station recognise the state of the connection in the
network; such state shall have to be signalled locally and to the remote
control system, if there is any.
In accordance with the indications of the Data Sheet, and considering the
typology of the system checked, the communication network can be built on
the basis of the following typical architectures:
Master/Slave network
In this case, one of the LCUs forming the system shall be regarded as
Master and the remaining ones as Slaves. The Master is the network
information manager and administrator; it carries out a continuous polling
of all the network components, if a network component is to send
information to another component, the Master shall grant such request.
This architecture creates a convergence of information towards the
Master. The absence of the Master prevents any exchange of information.
A configuration like the one described above can be provided, but the
Master shall be floating; this architecture shall allow one or more Slaves
forming the network to be reset as Master, ensuring the exchange of
information even when the main Master is out of order.
Open network
In this case all the connected components shall be independent, the
network traffic shall be managed by a "token" (network traffic signal) that
cyclically moves from one network component to another. The network
20180.EQP.ELE.FUN
Rev. 0 December 94
Sheet 15

Il presente documento RISERVATO ed di propriet dell'AGIP. Esso non sar mostrato a Terzi n sar utilizzato per scopi diversi da quelli per i quali stato inviato.
This document is CONFIDENTIAL and the sole property of AGIP. It shall neither be shown to third parties nor used for purposes other than those for which it has been sent.
component which has the token is enabled to send information to the
other components. The token is released when a component does not
have any information to send through network or when the maximum level
of information that can be sent through network has been reached.
In both architectures described above, each network component shall be
coded with a one-way address.
If indicated in the Data Sheet, the network and/or LCU redundancy shall be
provided.
2) Communication with higher control system
The communication with higher control system (DCS, SCADA, etc.), if
foreseen, shall be carried out through one of the following communication
networks:
RS485/RS422 asynchronous serial with ModBus communication protocol;
Ethernet network.
The higher system shall be connected to a single LCU (main
switchboard/interface), taking into account that sending information through
to other LCUs which form the electric network control system shall be a task
of the local network. Different methods of connection to the higher system
shall be discussed with the Company (e.g. connection to the supervision
system)
c) Video terminals or keyboards with display
These are additional elements to the LCU, directly controlled and commanded
from the latter.
The keyboard shall be of membrane type or of similar construction; the display or
the monitor shall guarantee resistance to the environment in which it is placed.
d) Supervision system (VDU)
The supervision system, if any, shall be composed principally of:
Processing unit.(P.C. or something similar)
Colour monitor
Keyboard;
HD and FD magnetic storage supports;
Peripherals (e.g. printer);
Communication card to LCU or local network;
Alternative tracking system (e.g. mouse)
It is meant to :
visualise the state of the whole system;
receive commands from the operator;
process and print alarms;
process and display historical files (field measure collection etc.).
It can be fitted in the front panel or in a separate place with possibility of
connection within 500m. Unless otherwise specified in the Data Sheet, it is an
element connected to the network linking the LCUs.
20180.EQP.ELE.FUN
Rev. 0 December 94
Sheet 16

Il presente documento RISERVATO ed di propriet dell'AGIP. Esso non sar mostrato a Terzi n sar utilizzato per scopi diversi da quelli per i quali stato inviato.
This document is CONFIDENTIAL and the sole property of AGIP. It shall neither be shown to third parties nor used for purposes other than those for which it has been sent.
e) Software
1) General
The system software shall supply all control, diagnostic and monitoring
functions so as to provide the operator with all the means to allow a
continuous and simple operation of the systems.
The software architecture shall be designed to guarantee high reliability and
availability. The fault of any component shall in no case affect the
functionality of the entire system and it shall always be possible to replace
faulty parts without causing an out of order.
The entire system shall also have an extreme flexibility to allow interfacing
with other systems and the possibility of future expansions.
The choice of the optimum architecture, programming techniques and
instruments shall be made by the Supplier who shall forward his proposal
before starting to work on the software.
However, in this section there are some methods to comply with in order to
offer a product which can be best maintained and modified.
2) LCU software general structure
The software of the individual LCUs, apart from the programming language,
shall consist of a modular and flexible structure that can be summarised in
the following points:
Acquisition of inputs at the start of the programme and their location in
internal variables that shall be used in the remainder of the programme for
specific processes; this solution shall be adopted to make the software
flexible to modifications so that a change to the I/Os shall not require
further changes to other points in the programme.
Location of all the outputs in internal variables that shall be used by the
programme for specific processes; physical outputs shall be sent at the
end of the application programme.
Subdivision of the application programme so as to identify modularities
inside the programme itself:
procedures for network data exchange;
procedures for I/O card configuration and parameters;
procedures for preparing data for supervision systems, if any;
procedures for alarm detection and management;
procedures for processing the system functions;
Identification of the programme with clear and easily interpretable
comments.
3) I/O card parameters and configuration
I/O cards shall be set according to the following principles:
Univocal identifying of the card single channel;
Utilising variables that can be modified by the operator, without
intervening on the programme parameters;
Foreseeing all the diagnostic tests on the card correct operation.
These parameters shall be suitably modifiable by a function that shall be
easily manageable and sufficiently protected against involuntary
modifications (protection password for modifications).
20180.EQP.ELE.FUN
Rev. 0 December 94
Sheet 17

Il presente documento RISERVATO ed di propriet dell'AGIP. Esso non sar mostrato a Terzi n sar utilizzato per scopi diversi da quelli per i quali stato inviato.
This document is CONFIDENTIAL and the sole property of AGIP. It shall neither be shown to third parties nor used for purposes other than those for which it has been sent.
4) Environmental data
Environmental data are all those data used in the application programme
which depend on the field characteristics (e.g. current convertor full-scale).
Environmental data shall be loaded and used in the programme with internal
variables modifiable by the operator without entering the application
programme.
In case a supervision system is foreseen, a display and modification facility
for the environmental data shall be provided. It shall include a list of all the
environmental data with their current value; the operator, restrained by a
password system, can modify such data.
20180.EQP.ELE.FUN
Rev. 0 December 94
Sheet 18

Il presente documento RISERVATO ed di propriet dell'AGIP. Esso non sar mostrato a Terzi n sar utilizzato per scopi diversi da quelli per i quali stato inviato.
This document is CONFIDENTIAL and the sole property of AGIP. It shall neither be shown to third parties nor used for purposes other than those for which it has been sent.
2.4.4 Operation characteristics
This section and the related subsections have the scope to describe the maximum
functionalities that shall be guaranteed by the control system.
Further functionalities not included in this specification can be requested in the Data
Sheet.
2.4.4.1 Logic component functions
The logic component is considered to be the main instrument for human interface.
Therefore it shall guarantee reliability and dynamics in the management of displayed
information (occurrences, alarms...) and of the operations carried out (commands,
automatic sequences...).
The logic component is an instrument applied to the Hard Wired component in order to
obtain the control of the electric network. For this reason it shall be necessary to
foresee parallel functions to guarantee the system control even when the logic
component is faulty. The logic component shall control the Hard Wired one.
In its entirety the logic component shall guarantee:
Maximum flexibility;
Reliability and error management (autodiagnostic); the defect of a single piece of
equipment shall not jeopardise the operation of the others (unless there are
signals/controls interconnected to the faulty piece of equipment). Should this not be
the case all the functions depending on the single pieces of equipment shall be
highlighted;
Pre-setting for integration (also in future) with other pieces of equipment.
The functions carried out shall guarantee all which is required in the Data Sheet.
A table with a preliminary division of tasks between Logic and Hard Wired
components follows here below:
TABLE 3
FUNCTIONS LOGIC HARD WIRED
Controls YES NO
Measures YES NO
Signals YES NO
Alarms YES NO
Shutdowns YES YES
Protections YES YES
Inter-locks YES YES
Automatic sequences YES NO
The typology and quantity of controls, measures, alarms etc., necessary for the
management of the electric network shall be described in the Data Sheet.
20180.EQP.ELE.FUN
Rev. 0 December 94
Sheet 19

Il presente documento RISERVATO ed di propriet dell'AGIP. Esso non sar mostrato a Terzi n sar utilizzato per scopi diversi da quelli per i quali stato inviato.
This document is CONFIDENTIAL and the sole property of AGIP. It shall neither be shown to third parties nor used for purposes other than those for which it has been sent.
2.4.4.2 Ability to operate
The control system shall allow the management of the electric network from the
following spots (control centres) :
from the power switchboard front panels;
from the traditional synoptic switchboard;
from the higher system (when foreseen);
from the supervision system (VDU).
The control system, in compliance with the indications of the Data Sheet, shall
manage the plant according to the following modalities:
Manned modality, that indicates the operators presence on the plant. It this case
the system operates following their indications.
Unmanned modality that indicates the operators absence from the plant. In this
case the system takes operational decisions on the basis of the way it is set or of
indications coming from the upper control system (e.g. DCS).
In the absence of the logic component, the Hard Wired component shall guarantee the
minimum functionalities in order to operate manoeuvres on the plant. Such possibility
shall be chosen by means of a selector switch.
The manoeuvres carried out in this condition shall be total responsibility of the
operator.
20180.EQP.ELE.FUN
Rev. 0 December 94
Sheet 20

Il presente documento RISERVATO ed di propriet dell'AGIP. Esso non sar mostrato a Terzi n sar utilizzato per scopi diversi da quelli per i quali stato inviato.
This document is CONFIDENTIAL and the sole property of AGIP. It shall neither be shown to third parties nor used for purposes other than those for which it has been sent.
2.4.4.3 Logic component performances
The system performance is defined as its capacity and velocity of reaction to variously
originated occurrences (alarms, controls, etc.).
The logic component shall generally have the characteristics described in TABLE 4.
TABLE 4
FUNCTION
REQUIRED
PERFORMANCE
Minimum number of digital I/Os manageable by the single
LCU
256
Minimum number of analogue I/Os manageable by the
single LCU
32
Pre-setting for the connection of the equipment in the
Network (LCU etc.)
Always required
Execution time for locally sent command
1 s.
Execution time for command sent through network
2 s
Signalling of local occurrence on the switchboard front
panel
0.5 s
Signalling of remote occurrence on the switchboard front
panel
1.5 s
Maximum time of transmission of a single information into
the network (in the absence of defects in the network)
1 s
Maximum time of transmission of a single information into
the network (in the presence of defects in the network)
3 s
Minimum number of graphic pages manageable by the
VDU supervision system
16
Minimum number of manageable dynamic variables for a
single graphic page (VDU)
128
Minimum number of alarms manageable by the system 1024
Signalling of local occurrence on video 1.5 s
Signalling of remote occurrence on video 2 s
Maximum time of update for a video page 5 s
Database storage capacity (with samples Errore. Il
segnalibro non definito. 10 sec.)
200 hours
The response time of the various pieces of equipment forming the control system
(LCU, Network, Video) are a basic condition for the correct management of the plant
by the operator. In no case there shall be doubt; should a critical circumstances occur
intervening to eliminate them with alternative "escamotage" , shall be necessary (e.g.
should the video terminal show a command requiring an execution time > 5 sec., once
such command has been activated, the message Command being carried out.
Please wait shall appear so as to avoid any doubt for the operator who has carried it
out).
20180.EQP.ELE.FUN
Rev. 0 December 94
Sheet 21

Il presente documento RISERVATO ed di propriet dell'AGIP. Esso non sar mostrato a Terzi n sar utilizzato per scopi diversi da quelli per i quali stato inviato.
This document is CONFIDENTIAL and the sole property of AGIP. It shall neither be shown to third parties nor used for purposes other than those for which it has been sent.
2.4.4.4 Signalling of occurrences
Signalling occurrences, that is displaying the state of all field users (e.g. users, circuit
breakers, disconnectors etc.), shall be carried out on the switchboard front panel and
on the VDU, if foreseen, simultaneously.
Should any signal be flashing, it is compulsory for the flashing frequency to be
constant; in case this shall not be possible, the connection of an external impulse
generator shall be preferable.
The signals shall be displayed also on the synoptic video - VDU (when foreseen). The
display of the synoptic video and of the dynamic signals on it shall be carried out in
compliance with the following indications:
Graphic display of the plants main diagram, as similar as possible to the traditional
synoptic. The main signals shall be reported considering the complexity of the
synoptic and the number of signals displayed (the situation displayed shall be
clearly and immediately understandable). This shall be considered as the main
graphic page.
Starting from the main graphic page, it shall be possible to recall each section in
details. In order to obtain a good manipulation of the graphic system only one level
of detail shall be preferable.
The states shall be signalled with the same colours as the traditional synoptic,
considering that, further colours (of fixed type) shall be allocated to replace the
flashing effect, should the graphic system not allow a constant flashing.
Whenever information makes it possible, the graphic system shall carry out further
displays than the traditional synoptic (e.g. dynamic colouring of the bus-bars to
identify the voltage presence or absence).
An identification nameplate shall be placed next to the graphic display for each
piece of equipment.
The visualisation of analogue measures shall be an integral part of the graphic
display. The measures shall be visualised:
in a numeric format (also decimal if necessary) in the synoptic position where
the measure is taken;
with a bar-graph-type display (horizontal or vertical); this display shall identify
the operation limits, if any, with different colours (e.g. if measure M is to fall in
between (X-n) and (X+m) in normal conditions, the display shall be carried out
with three different colours such as to identify the state: M < X-n; X-n < M <
X+m, M > X+m);
with dynamic trend, where according to necessities, the time axis can be that of
abscissas rather than that of ordinates (such display is described in details in
section 2.4.4.8).
Should a magnetic storage peripheral unit be foreseen, a file for occurrences/states
arisen shall be provided; it shall have a 30-day historical base; it shall contain the
single changes of state for each signal as well as the date/time in which they were
noted.
Should a printing peripheral unit be foreseen, a procedure to print every change of
state for each signal with date/time of observation shall be devised (this shall be
used by the operator to reconstruct the history of occurrences for the times the
plant was not manned).
20180.EQP.ELE.FUN
Rev. 0 December 94
Sheet 22

Il presente documento RISERVATO ed di propriet dell'AGIP. Esso non sar mostrato a Terzi n sar utilizzato per scopi diversi da quelli per i quali stato inviato.
This document is CONFIDENTIAL and the sole property of AGIP. It shall neither be shown to third parties nor used for purposes other than those for which it has been sent.
2.4.4.5 Control management
In normal operating conditions, the logic component shall guarantee all the service
controls required in the Data Sheet.
The controls shall be carried out in parallel by:
A. Front panel push button (cabled onto the same inlets as the LCU);
B. Keyboard with display;
C. Supervision system (VDU);
D. Upper control system (e.g. DCS).
Checks for all shutdown sequences and control operability shall be guaranteed for all
positions; as for points B and C, a further direct control manoeuvre shall be carried
out (protected by password) to control the service excluding the operability checks
and/or shutdowns to which the control is constrained (control to be utilised in the plant
commissioning stages).
A selector or a password system, when a supervision system is foreseen, shall be
able to cut out all control positions.
The keyboard control procedure, when provided with a display, shall be able to show
the following information for each command given or that might be given:
Command active/non-active
Command cut out (it cannot be given);
Command shutdown (it cannot be given for lack of conditions);
The control manoeuvre shall be safe in order to avoid errors by the operator.
Should a magnetic storage peripheral unit be provided, all commands given shall be
filed in a 30-day historical base Data Base; the filing shall be complete with date/time
in which the command was given.
Should a printing peripheral unit be provided, all commands given shall be printed with
date/time in which they were given.
In order to guarantee the commands, even when the feasibility conditions determined
by the field signals do not arise, the supervision systems shall have a field-signal
forcing facility.
These "forcing" facilities, used to cut out the control of a field sensor, shall be useful
during maintenance in order to temporarily cut out a wrongly received signal. Access
to this facility shall be possible only through a high level password.
2.4.4.6 Alarm management
Alarms shall be controlled and displayed in parallel on:
Pilot lights on the front panel;
Led or similar panel placed on the synoptic front panel;
VDU system;
Upper system (DCS etc.).
The alarm display procedure shall comply with the requirements of the Data Sheet.
20180.EQP.ELE.FUN
Rev. 0 December 94
Sheet 23

Il presente documento RISERVATO ed di propriet dell'AGIP. Esso non sar mostrato a Terzi n sar utilizzato per scopi diversi da quelli per i quali stato inviato.
This document is CONFIDENTIAL and the sole property of AGIP. It shall neither be shown to third parties nor used for purposes other than those for which it has been sent.
A zero setting procedure shall be provided for alarms of particular interest and
seriousness (push button on the front panel and keyboard control). In the absence of
such procedure, the alarm shall be considered as still present even after it has been
brought back to normal (missing the conditions which had generated it) and it has
been switched off.
Should a magnetic storage peripheral unit be provided, all noted alarms shall be filed
in a 30-day historical base Data Base; the filing shall be complete with date/time in
which the alarms were noted, switched off and normalised.
Should a printing peripheral unit be provided, all noted alarms shall be printed
identifying date/time in which the alarms were noted, switched off and normalised.
2.4.4.7 Historical files
The VDU system, when provided with a magnetic storage peripheral unit (HD), shall
have the task of creating and managing historical files; they shall be typically used to
store information on the basis of the time of:
Occurrences and signals
Controls;
Alarms;
Measures (trend).
Procedures of "consulting" and "unloading of data" of historical files shall be
requested in order to complete the storage function; such procedures shall allow
access to all the information stored in the historical files according to typology and
period of time and to download them into alternative storage units (FD) in order to be
used afterwards on other equipment (e.g. for statistics...).
2.4.4.8 Trend and field measure gathering
Field measures of any nature can be displayed in trend format. The trend consists of:
Display plan: it is the static part of the trend (background), where axes, measure
units, readings, symbologies etc. are displayed;
Scribing peens: it is the dynamic part, there is one for each measure displayed on
the trend; its task shall be to scribe the measure sampling through time.
In order to make a trend, it shall be necessary to determine the sampling time for a/the
measure/s. This time shall be calculated taking into account the possible variations
the measure might show through time in normal conditions (e.g. it is useless to
sample a measure each second when such measure is being gathered from the field
each 10 sec.; on the other hand, very long sampling times shall not be adopted either
when the measure can show very quick variations).
The trend function can be used to display:
Real measures : those which are contained in the display plan;
Historical measures : those which are no longer contained in the display plan but
are filed on the 30-day Data Base.
2.4.4.9 Maintenance management
This paragraph has the scope of describing the maintenance function (when foreseen
in the Design Specification) required to complete the functions of the supervision
system (VDU).
20180.EQP.ELE.FUN
Rev. 0 December 94
Sheet 24

Il presente documento RISERVATO ed di propriet dell'AGIP. Esso non sar mostrato a Terzi n sar utilizzato per scopi diversi da quelli per i quali stato inviato.
This document is CONFIDENTIAL and the sole property of AGIP. It shall neither be shown to third parties nor used for purposes other than those for which it has been sent.
Such function shall not replace the maintenance system but it shall guarantee a series
of utilities able to facilitate the task of the plant maintenance engineer.
A database shall be provided for each electric and electronic component (CPU,
feeder, switches, etc.) and for each user in the plant (pumps, motors, valves, etc.).
The database shall be able to:
recall automatically the user and its related data by means of entering its
nameplate, or by selecting it;
display the literal description of the service;
calculate and display the operation hours and/or the moves carried out;
display the LCU I/Os on which the service depends;
input and process the preset values of the hours/moves after which the system
shall produce a message requesting maintenance;
input data related to the last 10 years of intervention for each user, in particular:
date/hour of intervention
literal description of intervention.
The above mentioned data shall all be permanently stored in a backing memory
support, with the possibility of being printed and displayed on the operators request.
2.4.4.10 Communications between sub-systems
Sub-systems consist of all the equipment that, provided with network card, perform
their function on the basis of local information (digital and analogue signals directly
cabled into the equipment) or remote information (local and other sub-systems).
The exchange modalities between sub-systems is regulated by the communication
protocol in use, which shall guarantee the safety and the correctness of the data
passing through the network.
The choice of the modality with which to process the writing and reading of network
information shall be issued by the Supplier who, in any case, shall comply with the
following rules:
the single software functions which depend on remote information shall be enabled
only when the processing unit is certain about information updating regarding time
the input of new information into the network even after the software development
phase, shall not result into the need of modifying the network architecture, that is,
inputting new information shall be possible only by expanding the application
software
communication modalities and protocol shall be the same for all sub-units;
furthermore, all LCU communication cards shall be interchangeable
should a hardware and/or software addressing system be present, all the
indications needed for its modification shall be provided
branching interfaces and/or interfaces for conveying network connections, if any,
shall be allowed only if they are clearly hardware components and do not need
software programming of any kind.
20180.EQP.ELE.FUN
Rev. 0 December 94
Sheet 25

Il presente documento RISERVATO ed di propriet dell'AGIP. Esso non sar mostrato a Terzi n sar utilizzato per scopi diversi da quelli per i quali stato inviato.
This document is CONFIDENTIAL and the sole property of AGIP. It shall neither be shown to third parties nor used for purposes other than those for which it has been sent.
2.4.4.11 Higher system interface (DCS, SCADA, etc.)
All information necessary for the remote control of the plant shall be made available to
the higher system (when foreseen). The information can be summarised into:
state of digital and analogue inputs/outputs;
state of signals used to manage the plant (manned, automatic, out of order, state of
the network, etc.).
The upper system shall be able to control the plant through remote controls; the latter,
activated on the basis of procedures resident in the plant, shall be considered as
parallel controls to the LCU internal sequences.
Should a supervision system be provided (VDU), each command given by the upper
system, and its result, shall be indicated.
It shall also be necessary for the operator to be always informed about the correct
connection with the upper system through a signal lamp on the front panel or, when
the supervision system is provided, by means of a descriptive string on the state of
the mentioned connection.
2.4.4.12 Network redundancy
The network redundancy needs a single LCU hardware architecture for each control
switchboard, connected to two parallel and different networks with different logistic
routes (see typical).
Given the two parallel connection networks: NETWORK 1 and NETWORK 2, the
network redundancy shall guarantee the communication between LCUs when they
are interconnected on any one of the two networks.
LCUs shall not change, whilst the communication network and its related modules
shall be doubled:
LCU 1 LCU2 LCU3
Network 1
Network 2
The architecture described here above foresees the network cable outline in different
layouts.
20180.EQP.ELE.FUN
Rev. 0 December 94
Sheet 26

Il presente documento RISERVATO ed di propriet dell'AGIP. Esso non sar mostrato a Terzi n sar utilizzato per scopi diversi da quelli per i quali stato inviato.
This document is CONFIDENTIAL and the sole property of AGIP. It shall neither be shown to third parties nor used for purposes other than those for which it has been sent.
2.4.4.13 LCU redundancy
The LCU redundancy shall be considered as an evolution of the network redundancy
(two parallel LCUs for each control switchboard). This architecture, keeping the
functional characteristics described in the previous section, shall guarantee operation
even when one of the two LCUs is out of order, whatever its cause may be (see
typical).
LCU 1
A
LC U2
A
LC U3
A
LC U 1
B
LCU2
B
LC U3
B
Network
coordination
unit
The architecture described here above foresees the splitting of the entire control logic
system, therefore it maintains the system functions unchanged even when there are
faults in the LCUs.
The network co-ordination units can be another specific LCU.
Any other configurations, if required, shall be identified in the Data Sheet.
20180.EQP.ELE.FUN
Rev. 0 December 94
Sheet 27

Il presente documento RISERVATO ed di propriet dell'AGIP. Esso non sar mostrato a Terzi n sar utilizzato per scopi diversi da quelli per i quali stato inviato.
This document is CONFIDENTIAL and the sole property of AGIP. It shall neither be shown to third parties nor used for purposes other than those for which it has been sent.
2.4.5. Construction characteristics
The logic component equipment shall be built in compliance with the main national
and international normative references concerning electronic equipment for industrial
automation.
The control system equipment, in general, shall be:
Reliable;
Built with up-to-date electronic technologies;
Safe in their operation;
Preset for easy and quick maintenance.
2.4.5.1. Reliability
The reliability of a device shall consist in its capacity to carry out a certain function
under conditions of use which are preset for a fixed time. Whoever the manufacturer
of electronic equipment might be and notwithstanding the efforts and controls ensured
by him, the fault rate is never null. It is, therefore, a matter of foreseeing, when
studying the control system, the necessary devices to repair the faults and limit their
effects according to the safety level required by the plant.
2.4.5.2. Auto-test and diagnostic
LCU and VDU equipment shall be provided with auto-diagnostic functions so as to
guarantee the detection of important fractions of any internal faults or any manoeuvres
that might be connected during installation and maintenance activities of the
equipment itself.
Depending on their nature, these tests shall be carried out either at the voltage setting
or cyclically; they shall apply mainly to:
processor: control of microprogramme, RAM memories, and watch-dog processing;
programme memories: checking the presence and the type of content;
input/output cards: checking the presence, controlling the output short circuit and
the exchange of information with CPU.
The result of such tests shall be reported immediately to the operator.
It is important to note that part of the defects may be external to the control equipment.
The use of control equipment (LCU etc.) to assist the operator in the rapid search for
faults is therefore recommended.
2.4.5.3. Safety of operation
Safety of operation for a device consists in its attitude to avoid the occurrence of faults
and to minimise their effects once they have occurred.
A system is said to be of total safety if the occurrence of faults does not result into
dangerous situations.
Internal faults in a system shall be of:
passive type, if they result into a cut-off output circuit (no command is given to the
actuators);
active type, if they result into a closed output circuit (a command is given to the
actuators).
20180.EQP.ELE.FUN
Rev. 0 December 94
Sheet 28

Il presente documento RISERVATO ed di propriet dell'AGIP. Esso non sar mostrato a Terzi n sar utilizzato per scopi diversi da quelli per i quali stato inviato.
This document is CONFIDENTIAL and the sole property of AGIP. It shall neither be shown to third parties nor used for purposes other than those for which it has been sent.
From the point of view of safety, the latter type of fault is or is not dangerous
depending on the nature of the command carried out during routine operation. A
passive fault is dangerous if the normal command consists in an alarm operation; an
active fault is dangerous if it carries on an unwanted command.
It is important to note the fundamental difference in behaviour between an
electromechanical relay and an electronic component (e.g. a transistor):
there is a great probability, about 90 out of 100 cases, that a faulty relay causes a
circuit cut-off (control circuit out of voltage);
there is the same probability, 50 out of 100 cases, that a faulty transistor causes
both the cut-off and the make of a circuit.
For this reason, it is important to check thoroughly the nature and effect of the faults
when the use of automated plants using electronic equipment is foreseen.
The Supplier of the system shall provide external devices against internal active faults
in the equipment (LCU) not signalled and considered as risky for the plant. As for the
treatment of such faults, different technological, mechanical, electromechanical,
electronic etc. solutions can be adopted (e.g. direct wiring of the nearest emergency
switch and stop on the coil of a move control contactor).
To protect the plant from dangerous faults likely to affect the output circuit and the pre-
actuators, the LCU treatment capacity shall be exploited, for instance the control
through the inputs of the good operation of the commands generated by the
programme.
2.4.5.4. Availability
The availability of a system consists in its capacity to carry out a required function, in
a precise moment and within a fixed time interval.
The availability is therefore typical of every application and it consists in the
combination of:
system architecture;
reliability and durability of all its components (LCU, VDU, hardwired part etc.);
maintenance logic, application software structure, fault display, spare parts
available on the spot, training of personnel for operation or maintenance.
2.4.5.5. Immunity to hits
The system shall be protected from damages to the hardware or to the memory
caused by:
transient electrical hits (radio frequencies, electric line faults, overvoltages,
magnetic fields);
parasitic line signals;
disturbed fields;
electrostatic discharges.
Should equipment emitting magnetic fields be detected in the electric switchboard,
they shall be covered in a material suitable for circumscribe the emission (e.g. soft
iron).
20180.EQP.ELE.FUN
Rev. 0 December 94
Sheet 29

Il presente documento RISERVATO ed di propriet dell'AGIP. Esso non sar mostrato a Terzi n sar utilizzato per scopi diversi da quelli per i quali stato inviato.
This document is CONFIDENTIAL and the sole property of AGIP. It shall neither be shown to third parties nor used for purposes other than those for which it has been sent.
2.4.5.6. Possibility of extension of the system
The system shall be designed so as to allow the upgrading of the functionalities
carried out.
In general, the future extension shall be possible simply by adding modules and
management software.
A 20% backup shall always be considered, and in particular :
20% free inputs;
20% free outputs;
Possibility of connecting other LCUs to the network (at least 2);
Possibility of connecting video terminals and/or keypads with display, if not
foreseen in the design specification, without interfering with the system architecture
(e.g. the CPU shall not be replaced);
Possibility of connecting the supervision system without intervening on the control
system architecture;
2.4.5.7. Installation
a) Terminal blocks and cabling
Terminal blocks shall be positioned so as to guarantee a sufficient space to fix
cable terminations and to allow an easy reading of the identification marks,
without running the risk of electrocution or involuntary interventions.
All the I/O signals from and to the LCUs shall be wired to the terminal block.
The division of the terminal blocks shall depend on:
Output and input signals from and to the switchboard;
Signal destination/origin: the terminal blocks dedicated to the wiring of the
logic units (PLC I/O cards) shall be differently located from the ones which are
totally depended on the Hard Wired component;
The terminal blocks dedicated to the wiring of the logic units shall be grouped
modularly in correspondence with the I/O cards used.
The quantity of terminals on each board shall allow the connection of only one
conductor coming from the switchboard to each terminal. The nomenclature of a
terminal going to or coming from a logic component I/O card shall indicate its
univocal location and point of connection (e.g. ID0703 identifies a digital input
addressed to the card in position 07 and to the connection terminal 03).
The same nomenclature shall be recalled to identify the conductor input or output
to/from the electric switchboard terminal strip.
The conductors shall be linked and grouped in bundles so as to group the signals
coming from or going to each single I/O card of the logic component or of
different control systems. The multi-pair cable grouping can be carried out for
signals that have the same nature and an identical reference with respect to the
mass. The conductor colouring shall identify:
Incoming signals;
Outgoing signals;
Power supplies;
Common.
20180.EQP.ELE.FUN
Rev. 0 December 94
Sheet 30

Il presente documento RISERVATO ed di propriet dell'AGIP. Esso non sar mostrato a Terzi n sar utilizzato per scopi diversi da quelli per i quali stato inviato.
This document is CONFIDENTIAL and the sole property of AGIP. It shall neither be shown to third parties nor used for purposes other than those for which it has been sent.
In order to wire electronic equipment it is necessary to comply, where possible,
with the following recommendations:
Digital inputs/outputs : it is advisable to separate the passage of incoming
cables from that of outcoming ones and to locate them as far as possible form
one another. It is therefore necessary to take these conditions into account
when the modules are installed in the racks. In case it were not possible to
install them as indicated, the inputs and outputs can be clustered making sure,
however, to separate the A.C. outputs from the D.C. ones.
Analogue inputs/outputs : it is advisable to separate the analogue input and
output cables form the digital input and output ones (especially the relay
outputs).
Other modules : the cables shall be separated from one another in order to
avoid confusion and interferences. Specific manuals on the cards shall be
consulted for the wiring harness of the various modules.
The I/O module cabling shall be carried out with cables having at least the
following characteristics:
Technical characteristics:
DATA CHARACTERISTICS
CEI - UNEL tag Cable H05V-K - 1 x -- CEI-UNEL 35750
Uo/U rated voltage 300/500 V
Conductor Red annealed flexible copper wire
Section 0,75 o 1 mm
2
Insulation PVC (CEI 20 - 20)
Particular characteristics:
NORMATIVE REFERENCES
CHARACTERISTICS EUROPEAN
CENELEC
INTERNATIONAL
IEC
NATIONAL
CEI/CEI UNEL
Fire-retardant --- 332 - 3 20 - 22
Flame-retardant HD 405. 1 S1 332 -.1 20 - 35
b) Installation of the rack in the switchboard
The installation of the system components, (e.g. LCU, expansion racks, VDU)
shall be carried out inside the switchboards with a front panel made of
transparent material (external display of all components).
Depending on the configuration, it shall be necessary to respect a few rules for
arranging the racks and the modules inside them.
To leave a minimum vertical room of 150 mm between one rack and the other
in order to allow access to the I/O card terminal boards and to facilitate air
circulation.
The LCU shall be installed on the lower part in order to benefit from the lowest
ambient temperature inside the switchboard.
to avoid installing the same switchboards (or switchboard wing) where there
are direct or indirect heat generators (transformers, feeders etc.).
20180.EQP.ELE.FUN
Rev. 0 December 94
Sheet 31

Il presente documento RISERVATO ed di propriet dell'AGIP. Esso non sar mostrato a Terzi n sar utilizzato per scopi diversi da quelli per i quali stato inviato.
This document is CONFIDENTIAL and the sole property of AGIP. It shall neither be shown to third parties nor used for purposes other than those for which it has been sent.
to foresee sufficient room for air circulation in order to facilitate the thermal
exchange with the outside.
2.4.5.8. Spare parts for start up
The system shall be provided complete with spare materials for the start up of the
plant.
Each drive shall be provided with the material indicated here below.
The Supplier can suggest other materials on the basis of previous experience and the
types used.
TABLE 5
POS. DESCRIPTION OF COMPONENT
QUANTITY
(note 1)
1
Fuses of different type and rated currents
in proportion to the installed quantities
10%
(note 2)
2 Signalling lamps
10%
(note 2)
3 CPU
5%
(note 2)
4 Feeders
5%
(note 2)
5
Conductor connection terminals of various
types and sections
10%
(note 2)
6 Auxiliary relays like the ones installed
10%
(note 2)
7 Manipulator push buttons etc.
5%
(note 2)
8 Rack
5%
(note 2)
9 Network cards
5%
(note 2)
10 I/O digital cards
10%
(note 2)
11 I/O analogue cards
10%
(note 2)
NOTES:
1) Round off to the upper whole number if the decimal is bigger than 5.
2) Percentage quantity referring to the total number of components of the
same type installed in the system, with a minimum quantity of 1.
2.4.5.9. Protective treatments
a) Painting
Painting and the relevant protective treatments will be done in accordance with
the prescriptions contained in the Data Sheet.
b) Tropicalisation
When required in the Data Sheet, equipment and materials will be subjected to
tropicalisation treatments in accordance with the relevant Reference
Specification.
20180.EQP.ELE.FUN
Rev. 0 December 94
Sheet 32

Il presente documento RISERVATO ed di propriet dell'AGIP. Esso non sar mostrato a Terzi n sar utilizzato per scopi diversi da quelli per i quali stato inviato.
This document is CONFIDENTIAL and the sole property of AGIP. It shall neither be shown to third parties nor used for purposes other than those for which it has been sent.
2.4.6. Packing for transport
Packing for transport shall be defined by the Supplier according to the instructions
indicated in the reference specification.
2.5. Boundary conditions, limits and exclusions
Not applicable
2.6. Ergonomics
Not applicable
2.7. Safety
2.7.1. General rules
There are no specific requirements for this topic. However, the Supplier shall
guarantee that the system, subject of this Functional Specification, will have a
workmanlike manufacture in order to comply with the safety requirements contained in
the relevant Normative References.
2.8. Requirements for Quality Management and Assurance
Any additional requirements of Quality Management and/or Quality Assurance are
contained in the relevant management specification enclosed in the request for bid.
20180.EQP.ELE.FUN
Rev. 0 December 94
Sheet 33

Il presente documento RISERVATO ed di propriet dell'AGIP. Esso non sar mostrato a Terzi n sar utilizzato per scopi diversi da quelli per i quali stato inviato.
This document is CONFIDENTIAL and the sole property of AGIP. It shall neither be shown to third parties nor used for purposes other than those for which it has been sent.
2.9. Additional Requirements for Review
When required, they will be indicated in the Inspection Data Sheet (I.D.S.) and are
subdivided in:
Type test;
Acceptance test (individual);
Special test.
For any inspection and test not included in the Normative References and in this
Specification and requested in the Inspection Data Sheet (I.D.S), the execution
procedures shall be defined on a case by case basis.
2.9.1. Type Test
The purpose of the type test is to verify that specific types of materials are in
compliance with the relevant Normative References and the original design.
The type test shall be carried out on samples of materials used for the supply and its
execution shall be entire responsibility of the Supplier.
Acceptance of materials similar to those supplied such as prototypes are exclusive
responsibility of the Company that is entitled to require further tests chosen among
type tests.
Type tests for auxiliaries and accessories shall not be required if the latter comply with
the relevant Normative References and if they are installed according to their
Manufacturers instructions.
The Supplier of the system shall verify the execution of the type tests for auxiliaries
and accessories and shall provide the related documentation.
2.9.2. Acceptance Test (individual)
The purpose of the acceptance test is to verify that the supply complies with the
original project and the prototype, through both a document check, and reduced but
relevant tests and inspections. Furthermore, the test is meant to verify the
correspondence with the Companys requirements and to detect any defects in the
materials and the construction.
The inspections and acceptance checks shall be carried out both on the whole supply
and on a sample as indicated in the Inspection Data Sheet (l.D.S.).
The sample shall consist of materials randomly chosen in the quantity indicated in the
relevant Normative References.
Should indications not be included in the Normative References, the sample shall be
defined case by case.
As to acceptance tests for auxiliaries and accessories the above indications for type
tests shall be applicable, provided that they are subjected to the checks and tests
listed in the Inspection Data Sheet (I.D.S.).
2.9.3. Special Test
It consists of all the tests and inspections not included in the type and acceptance
tests, that the Company might require from time to time.
The list of tests and inspections and any execution criteria shall be indicated in the
Inspection Data Sheet (I.D.S.).
20180.EQP.ELE.FUN
Rev. 0 December 94
Sheet 34

Il presente documento RISERVATO ed di propriet dell'AGIP. Esso non sar mostrato a Terzi n sar utilizzato per scopi diversi da quelli per i quali stato inviato.
This document is CONFIDENTIAL and the sole property of AGIP. It shall neither be shown to third parties nor used for purposes other than those for which it has been sent.
2.10. Documentation
The Supplier will deliver to the Company all the documents indicated in the Requested
Document Data Sheet (R.D.D.S.), in accordance with the agreed terms and schedule.
The technical documentation will be written in the official language indicated in the
Data Sheet and using the symbols indicated in the CENELEC, CEI Rules and in IEC
Publications.
2.10.1. Bid Documentation
The Supplier will include in his bid all the information and documentation required in
the Data Sheet (R.D.D.S.).
2.10.2. Documents Subjected to Approval
The approval of the documentation by the Company, if necessary, will refer to the
formal verification of the parameters indicated in the design's documents only.
2.10.3. Documentation used by the Company for the system design
The Supplier will deliver to the Company all the documentation necessary to the
execution of the system design and to the installation of the supplied system.
2.10.4. Test Documents
The Supplier will deliver to the Company, within the schedule and in the way indicated
in the Data Sheet, all the certificates relating to the type, acceptance and special
tests.
2.10.5. Final Technical Documentation
The final technical documentation, with the only exception of the Supplier and
Subsuppliers catalogues and publications will include the following references:
name of the Supplier;
name of the Company;
identification tag, as indicated by the Company;
title of the document;
details of the Company's orders.
and will consist of:
a) Design and Installation instructions;
b) Operations instructions;
c) Maintenance instructions.
The description and drawings can be contained in catalogues and documents of the
Supplier, as long as they satisfy the following conditions:
they contain all data and information required in their final form
they are relevant to the type supplied and the materials included in the supply are
clearly identified amongst those in the document.
The documentation subject to approval will be integral part of the final documentation
approved by the Company.