Electronic – Heater control circuit improvement

control

I am working on a control circuit for a heater. The circuit has a temperature controller (not included in the drawing), an overtemp controller, I/O going back to the PLC providing "heater ON" and "heater overtemp" status to the operators in the control room, and a strobe light on top of the heater panel.

Green on the strobe light indicates that the heater is ON. Amber indicates that the level of water in the tank that the heater is heating is low; this is controlled by a float switch in the tank. Red indicates that the heater is in overtemp condition.

One of the permissives required for the heater to run is that the drive controlling the pump should be in run mode: NO contact CR in the drawing. This is so that the heater doesn't run dry.

The circuit is working the way it's supposed to but I feel like it could be improved…and that's why I am posting here. I'd appreciate if you guys pitch in to simplify my design while satisfying all the requirements.

For the curious ones, the main temp controller (Yokogawa UT35A) has a 4-20mA signal going to a step controller which then controls 4 heater banks based on PID. I didn't include that because that was designed and installed by the manufacturer. I only did the overtemp and status indication part of the project.

Stack exchange wouldn't let me upload a DWG or a pdf file, so I am attaching a snapshot of the dwg. Hope it's legible.

Heater control circuit

Heater control circuit Rev1

Best Answer

It appears that the overtemp controller is acting as a supervisor to the main temperature controller. I offer the following comments:

  1. I would be inclined to hard-wire a contact of the over-temperature controller's output, CR28, into the heater circuit so that in the event of a PLC malfunction that the heaters would be switched off.
  2. I would consider adding an NC contact of CR28 in series with the LT26 reset button to confirm that CR28 has dropped out correctly before reset can be carried out. This is common on e-stop safety circuits and, at least, tests the circuit on power-up.
  3. I would check the overtemp controller's reset to establish whether or not it can be held in reset mode by holding the button in with a wedge, etc. The controller should be using an internal one-shot to prevent this but if it doesn't then you may need to address that risk. Providing the reset one-shot through the PLC might be a solution.
    To test this hold the reset in (or jam the button in the depressed state using a toothpick or match), create a fault, clear the fault and see if the overtemp auto-resets or not. (It shouldn't.)
  4. Check that you have open-loop protection in your setup. This means that if the controller doesn't see the expected response in the sensor feedback within a specified time that an alarm is generated and this can be used to cut power via an additional relay. This can protect against situations such as continuously heating while the sensor is hanging out in the air or a short-circuit failure of the heater control relay / SSR.

The need for each additional protection depends on the risk to personnel, property and product which you will have to assess.