ASME B133.4-1978 — Gas Turbine Control and Protection Systems

🎛️ ASME B133.4-1978 is the B133 series standard that specifically defines the control and protection systems of a gas turbine. It requires the gas turbine control system to include sequencing, control, protection, and operator information functions that provide for orderly and safe startup of the turbine, control of proper loading, and an orderly shutdown procedure. It must include an emergency shutdown capability that can be operated automatically by suitable failure detectors or manually. Coordination between the gas turbine control and the driven equipment must be provided for startup, operation, and shutdown.

🚨 Core principle of the protection system: emergency shutdown must be executable both automatically (triggered by failure detectors) and manually. No single failure should depend on operator judgment — overspeed, flame failure, and lubrication loss must be shut down automatically, quickly, and reliably.

1. Scope and Control Functions 📌

The Standard defines control functions across three dimensions — starting, loading, and shutdown:

  • Starting: three modes are defined. Manual start requires the operator to start the auxiliary equipment and to initiate, hold, and advance the starting sequence (crank, purge, fire) and accelerate to minimum governor setting or, for generating sets, to ready-for-synchronizing. Semi-automatic sequence start may or may not require manual starting of auxiliaries and lets the operator commit the turbine to the complete starting sequence with a single action. Automatic sequence start requires only a single action to start the required auxiliaries and initiate the complete sequence up to minimum governor setting or ready for synchronizing. In every mode the starting control system must provide an automatic purge period of sufficient duration to displace combustibles from the inlet through the entire exhaust system, including the stack, before firing; additional precautions may be needed depending on the fuel or application.
  • Loading: may be manual, semi-automatic, or automatic up to a specified power level. Automatic loading may follow directly from the starting sequence without any additional action. Dwell periods at specific loads may be introduced for warm-up; where required, the time from start initiation to a specific load, or loading rates such as standard and emergency, may be specified.
  • Shutdown: normal or emergency. Normal shutdown follows an orderly, safe, step-by-step procedure. Consideration must be given to the relationship of turbine controls to driven equipment: unless otherwise specified, automatic means shall be provided to isolate the driven equipment on shutdown to prevent motoring or reverse flow, and venting systems may need to operate to release stored energy.
⚠️ The purge period is the first line of explosion defense: before firing, combustibles must be thoroughly displaced from the combustion chamber and exhaust path. Specify purge duration/air-exchange requirements in the procurement specification — never shorten or bypass them.

2. Fuel Control and Performance Requirements 🔧

The fuel control function regulates fuel flow and pressure so the turbine maintains speed and power per governor demand. The Standard addresses steady-state accuracy, dynamic response, and transition requirements for dual-fuel units when switching fuel. The performance requirements ensure the control system maintains stable operation within the specified grid frequency/load fluctuation range and meets the required loading rates for peaking duty. The Standard also specifies wiring requirements — cable selection, shielding, grounding, and segregation — to minimize electromagnetic interference on control signals.

Control Function Mode / Type Key Requirements
Starting control Manual / semi-automatic / automatic Sequence: crank → purge → fire → accelerate; automatic purge period; up to minimum governor setting or ready for synchronizing
Loading control Manual / semi-automatic / automatic Up to a specified power level; warm-up dwell periods; time-to-load and loading rates can be specified
Shutdown control Normal / emergency Orderly stepwise shutdown; automatic isolation of driven equipment to prevent motoring; venting to release stored energy
Fuel control Liquid / gas / dual fuel Flow-pressure regulation, steady-state accuracy, dynamic response, dual-fuel transfer transitions
Emergency shutdown Automatic / manual Triggered by failure detectors or manually; independent of the normal control path
✅ Procurement essentials: require the bidder to submit the control system functional block diagram, the alarm/shutdown list (per Table 1), the purge-period setpoint, and a statement of emergency shutdown circuit independence as the basis for technical review and commissioning acceptance.

3. Protection System, Instrumentation, and Communications 📊

The protection system must provide alarms and shutdowns for conditions that endanger personnel and equipment. The Standard’s Table 1, “Typical Alarm and Shutdown Functions,” lists typical items that should be covered, including but not limited to:

  • Overspeed trip;
  • High bearing temperature, low lube oil pressure, high oil temperature alarms/trips;
  • Excessive vibration alarms/trips;
  • High exhaust temperature and excess temperature-rate alarms;
  • Combustion failure (flame-out or ignition failure) trip;
  • Mechanical protection such as axial displacement and thrust-bearing temperature.

The instrumentation section specifies display and recording of the process parameters needed for operation and maintenance, including speed, power, temperature, pressure, and flow. The communications section defines the interfaces between the control room and local equipment, and between the unit and the grid dispatcher.

⚠️ Every alarm and trip on the list must be verified item by item in the commissioning program: each alarm point verifies display, each trip point verifies interlock action and shutdown time, and test records are kept as acceptance documentation.

4. Engineering Practice Essentials 🛠️

  • 🔍 Redundancy and independence: the emergency shutdown path should be independent of the normal control path (e.g., separate electrical trip circuits, independent overspeed detection channels) to avoid common-cause failures.
  • 🔧 Purge and explosion safety: strictly enforce the pre-fire purge and the re-purge logic after ignition failure; on dual-fuel units, watch combustion stability and interlocks during fuel transfer.
  • 📊 Commissioning verification: functionally test the starting sequence, loading rate, normal/emergency shutdown, and every alarm and trip point, recording purge duration and actual shutdown response time.
  • 📋 Documentation delivery: obtain the control system functional description, logic diagrams, terminal wiring diagrams, and alarm/trip setpoint documentation as the operating and maintenance baseline.

5. Frequently Asked Questions ❓

❓ Q: What is the difference between manual, semi-automatic, and automatic start?
A: The difference is the degree of operator involvement: manual requires step-by-step operation and advancing of each phase; semi-automatic and automatic both commit the turbine to the full sequence with a single action, and automatic mode also starts the auxiliaries by itself.
❓ Q: Why is purging required before firing?
A: After shutdown or an ignition failure, unburned fuel can accumulate in the combustion chamber and exhaust path. Purging displaces the combustible mixture through the exhaust system before ignition, preventing an explosive ignition — a critical explosion-safety procedure.
❓ Q: Why must emergency shutdown be both automatic and manual?
A: Automatic triggering protects personnel and equipment the instant a failure develops; the manual function is a backup that lets the operator shut down when the automatic system has not acted or other anomalies appear. The two are mutually redundant.
🔍 Q: How do B133.4 and B133.3 (auxiliary equipment) interface?
A: B133.3 specifies the equipment and piping of the lubrication, fuel, and other auxiliary systems; B133.4 specifies the starting/loading/shutdown control logic, fuel control, and protective trips that coordinate these systems with the machine — together they form the complete control-and-plant hierarchy.

发表回复

您的邮箱地址不会被公开。 必填项已用 * 标注