BACKGROUND OF THE INVENTION [0001] The present invention relates to the operation of a Fluidized Catalytic Cracking Unit (FCCU) comprising of the feed preheat unit, reactor, regenerator, wet gas compressor, the main fractionator and the downstream light ends processing towers. In particular, the present invention relates to determining when the process is deviating from normal operation and automatic generation of notifications isolating the abnormal portion of the process.

[0002] Catalytic cracking is one of the most important and widely used refinery processes for converting heavy oils into more valuable gasoline and lighter products. The process is carried out in the FCCU, which is the heart of the modern refinery. The FCCU is a complex and tightly integrated system comprising of the reactor and regenerator. Figure 23 shows a typical FCCU layout. The fresh feed and recycle streams are preheated by heat exchangers and enter the unit at the base of the feed riser where they are mixed with the hot regenerated catalyst. The FCC process employs a catalyst in the form of very fine particles (-70 microns) which behave as a fluid when aerated with a vapor. Average riser reactor temperatures are in the range of 900 to 10000F with oil feed temperatures from 500-8000F and regenerator exit temperatures for catalyst from 1200 to 15000F. The process involves contacting the hot oil feed with the catalyst in the feed riser line. The heat from the catalyst vaporizes the feed and brings it up to the desired reaction temperature. The cracking reactions start when the feed contacts the hot catalyst in the riser and continues until the oil vapors are separated from the catalyst in the reactor. As the cracking reaction progresses, the catalyst is progressively deactivated by the formation of coke in the surface of the catalyst. The spent catalyst flows into the regenerator and is reactivated by burning off the coke deposits with air. The flue gas and catalyst are separated in the cyclone precipitators. The fluidized catalyst is circulated continuously between the reaction zone and regeneration zone and acts as a vehicle to transfer heat from the regenerator to the oil feed and reactor. The catalyst and hydrocarbon vapors are separated mechanically and the oil remain¬ ing on the catalyst is removed by steam stripping before the catalyst enters the regenerator. The catalyst in some units is steam-stripped as it leaves the regenerator to remove adsorbed oxygen before the catalyst is contacted with the oil feed. The hydrocarbon vapors are sent to the synthetic crude fractionator for separation into liquid and gaseous products. These are then further refined in the downstream light ends towers to make gasoline and other saleable products. The complete schematic with FCCU and the downstream units is shown in Figure 24.

[0003] Due to the complicated dynamic nature of the FCCU, abnormal process operations can easily result from various root causes that can escalate to serious problems and even cause plant shutdowns. These operations can have significant safety and economic implications ranging from lost production, equipment damage, environmental emissions, injuries and death. A primary job of the operator is to identify the cause of the abnormal situation and execute compensatory or corrective actions in a timely and efficient manner.

[0004] The current commercial practice is to use advanced process control applications to automatically adjust the process in response to minor process disturbances, to rely on human process intervention for moderate to severe abnormal operations, and to use automatic emergency process shutdown systems for very severe abnormal operations. The normal practice to notify the console operator of the start of an abnormal process operation is through process alarms. These alarms are triggered when key process measurements (temperatures, pressures, flows, levels and compositions) violate predefined static set of operating ranges. This notification technology is difficult to provide timely alarms while keeping low false positive rate when the key measurements are correlated for complicated processes such as FCCU. [0005] There are more than 600 key process measurements, which cover the operation of a typical FCCU. Under the conventional Distributed Control System (DCS) system, the operator must survey this list of sensors and its trends, compare them with a mental knowledge of normal FCCU operation, and use his/her skill to discover the potential problems. Due to the very large number of sensors in an operating FCCU, abnormalities can be and are easily missed. With the current DCS based monitoring technology, the only automated detection assistance an operator has is the DCS alarm system which is based on the alarming of each sensor when it violates predetermined limits. In any large- scale complex process such as the FCCU, this type of notification is clearly a limitation as it often comes in too late for the operator to act on and mitigate the problem. The present invention provides a more effective notification to the operator of the FCCU.

SUMMARY OF THE INVENTION [0006] The present invention is a method for detecting an abnormal event for the process units of a FCCU. The Abnormal Event Detection (AED) system includes a number of highly integrated dynamic process units. The method compares the current operation to various models of normal operation for the covered units. If the difference between the operation of the unit and the normal operation indicates an abnormal condition in a process unit, then the cause of the abnormal condition is determined and relevant information is presented efficiently to the operator to take corrective actions.

BRIEF DESCRIPTION OF THE DRAWINGS [0007] Figure 1 shows how the information in the online system flows through the various transformations, model calculations, fuzzy Petri nets and consolidation to arrive at a summary trend which indicates the normality/ abnormality of the process areas.

[0008] Figure 2 shows a valve flow plot to the operator as a simple x-y plot. [0009] Figure 3 shows three-dimensional redundancy expressed as a PCA model.

[0010] Figure 4 shows a schematic diagram of a fuzzy network setup.

[0011] Figure 5 shows a schematic diagram of the overall process for developing an abnormal event application.

[0012] Figure 6 shows a schematic diagram of the anatomy of a process control cascade.

[0013] Figure 7 shows a schematic diagram of the anatomy of a multivariable constraint controller, MVCC.

[0014] Figure 8 shows a schematic diagram of the on-line inferential estimate of current quality.

[0015] Figure 9 shows the KPI analysis of historical data.

[0016] Figure 10 shows a diagram of signal to noise ratio.

[0017] Figure 11 shows how the process dynamics can disrupt the correlation between the current values of two measurements.

[0018] Figure 12 shows the probability distribution of process data.

[0019] Figure 13 shows illustration of the press statistic.

[0020] Figure 14 shows the two-dimensional energy balance model.

[0021] Figure 15 shows a typical stretch of Flow, Valve Position, and Delta Pressure data with the long period of constant operation.

[0022] Figure 16 shows a type 4 fuzzy discriminator.

[0023] Figure 17 shows a flow versus valve paraeto chart. [0024] Figure 18 shows a schematic diagram of operator suppression logic.

[0025] Figure 19 shows a schematic diagram of event suppression logic.

[0026] Figure 20 shows the setting of the duration of event suppression.

[0027] Figure 21 shows the event suppression and the operator suppression disabling predefined sets of inputs in the PCA model.

[0028] Figure 22 shows how design objectives are expressed in the primary interfaces used by the operator.

[0029] Figure 23 shows the schematic layout of a FCCU.

[0030] Figure 24 shows the overall schematic of FCCU and the light ends towers.

[0031] Figure 25 shows the operator display of all the problem monitors for the FCCU operation

[0032] Figure 26 shows the fuzzy-logic based continuous abnormality indicator for the Catalyst Circulation problem.

[0033] Figure 27 shows that complete drill down for the Catalyst Circulation problem along with all the supporting evidences.

[0034] Figure 28 shows the fuzzy logic network for the Catalyst Circulation problem.

[0035] Figure 29 shows alerts in the Catalyst Circulation, FCC-Unusual and FCC-Extreme abnormality monitors.

[0036] Figure 30 shows the pareto chart for the tags involved in the FCC- Unusual scenario in Figure 29.

[0037] Figure 31 shows the multi-trends for the tags in Figure 30. It shows the tag values and also the model predictions. [0038] Figure 32 shows the ranked list of deviating valve flow models (pareto chart).

[0039] Figure 33 shows the X-Y plot for a valve flow model - valve opening versus the flow.

[0040] Figure 34 shows the pareto chart and X-Y plot for the air blower monitor.

[0041] Figure 35 shows the Regenerator stack valve monitor drill down.

[0042] Figure 36 shows the Regenerator Cyclone monitor drill down.

[0043] Figure 37 shows the Air blower monitor drill down.

[0044] Figure 38 shows the Carbon Balance monitor drill down.

[0045] Figure 39 shows the Catalyst carryover to Main Fractionator drill down.

[0046] Figure 40 shows the Wet Gas Compressor drill down.

[0047] Figure 41 shows a Valve Flow Monitor Fuzzy Net.

[0048] Figure 42 shows an example of valve out of controllable range.

[0049] Figure 43 shows the Event Suppression display.

[0050] Figure 44 shows the AED Event Feedback Form.

[0051] Figure 45 shows a standard statistical program, which plots the amount of variation modeled by each successive PC.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS [0052] The present invention is a method to provide early notification of abnormal conditions in sections of the FCCU to the operator using Abnormal Event Detection (AED) technology. [0053] In contrast to alarming techniques that are snapshot based and provide only an on/off indication, this method uses fuzzy logic to combine multiple supportive evidences of abnormalities that contribute to an operational problem and estimates its probability in real-time. This probability is presented as a continuous signal to the operator thus removing any chattering associated with the current single sensor alarming-based on/off methods. The operator is provided with a set of tools that allow complete investigation and drill down to the root cause of a problem for focused action. This approach has been demonstrated to furnish the operator with advanced warning of the abnormal operation that can be minutes to hours earlier than the conventional alarm system. This early notification lets the operator make informed decision and take corrective action to avert any escalation or mishaps. This method has been successfully applied to the FCCU. As an example, Figure 27 shows the complete drill down for the Catalyst Circulation problem (the details of the subproblems are described later).

[0054] The FCCU application uses diverse sources of specific operational knowledge to combine indications from Principal Component Analysis (PCA), Partial Least Squares (PLS) based inferential models, correlation-based engineering models, and relevant sensor transformations into several fuzzy logic networks. This fuzzy logic network aggregates the evidence and indicates the combined confidence level of a potential problem. Therefore, the network can detect a problem with higher confidence at its initial developing stages and provide crucial lead-time for the operator to take compensatory or corrective actions to avoid serious incidents. This is a key advantage over the present commercial practice of monitoring FCCU based on single sensor alarming from a DCS system. Very often the alarm comes in too late for the operator to mitigate an operational problem due to the complicated, fast dynamic nature of FCCU or multiple alarms could flood the operator, confusing him/her and thus hindering rather than aiding in response.

[0055] The catalytic cracking unit is divided into equipment groups (referred to as key functional sections or operational sections). These equipment groups may be different for different catalytic cracking units depending on its design. The procedure for choosing equipment groups which include specific process units of the catalytic cracking unit is described in Appendix 1.

[0056] In the preferred embodiment, the present invention divides the Fluidized Catalytic Cracking Unit (FCCU) operation into the following overall monitors 1. Overall FCCU Unusual Operation 2. Overall FCCU Extreme Operation 3. Over Cat Light Ends Unusual Operation 4. Overall Cat Light Ends Extreme Operation and these special concern monitors 1. Reactor-Regenerator Catalyst Circulation 2. Regenerator Stack Valves Operation 3. Cyclone Operation 4. Air blower Operation 5. Carbon Balance Checks 6. Catalyst Carryover to Main Fractionator 7. Wet Gas Compressor 8. Valve-Flow Consistency Models

[0057] The overall monitors carry out "gross model checking" to detect any deviation in the overall operation and cover a large number of sensors. The special concern monitors cover areas with potentially serious concerns and consist of focussed models for early detection. In addition to all these monitors the application provides for several practical tools such as those dealing with suppression of notifications generated from normal/routine operational events and elimination of false positives due to special cause operations.

A. Operator Interface [0058] The operator user interface is a critical component of the system as it provides the operator with a bird's eye view of the process. The display is intended to give the operator a quick overview of FCCU operations and indicate the probability of any developing abnormalities.

[0059] Figure 25 shows the operator interface for the system. A detailed description on operator interface design considerations is provided in subsection IV "Operator Interaction & Interface Design" under section "Deploying PCA models and Simple Engineering Models for AED" in Appendix 1 section IV, under The interface consists of the abnormality monitors mentioned above. This was developed to represent the list of important abnormal indications in each operation area. Comparing model results with the state of key sensors generates abnormal indications. Fuzzy logic is used to aggregate abnormal indications to evaluate a single probability of a problem. Based on specific knowledge about the normal operation of each section, we developed a fuzzy logic network to take the input from sensors and model residuals to evaluate the probability of a problem. Figure 26 shows the probability for the Catalyst Circulation problem using the corresponding fuzzy logic network shown in Figure 28. Figure 27 shows the complete drill down of the catalyst circulation problem. The green nodes in Figure 28 show the subproblems that combine together to determine the final certainty of the "Catalyst Circulation Problem". The estimated probability of an abnormal condition is shown to the operating team in a continuous trend to indicate the condition's progression. Figure 29 shows the operator display of the problem presenting the continuous signal indications for all the areas. This gives the operator a significant advantage to get an overview of the health of the process than having to check the status of each sensor individually. More importantly, it gives the operator 'peace-of-mind' - due to its extensive coverage, chances of missing any event are remote. So, it is can also be used as a normality-indicator. When the probability reaches 0.6, the problem indicator turns yellow (warning) and the indicator turns, red (alert) when the probability reaches 0.9.

[0060] This invention comprises three Principle Component Analysis (PCA) models to cover the areas of Cat Circulation (CCR), Reactor-Regenerator operation (FCC) and Cat Light Ends (CLE) operation. The coverage of the PCA models was determined based on the interactions of the different processing units and the models have overlapping sensors to take this into account. Since there is significant interaction in the Reactor-Regenerator area, one PCA model is designed to cover both their operations. The Cat Circulation PCA is a more focussed model targeted specifically to monitor the catalyst flow between the reactor-regenerator. The cat light ends (CLE) towers that process the product from the FCCU are included in a separate PCA. In addition, there are a number of special concern monitors intended to watch conditions that could escalate into serious events. The objective is to detect the problems early on so that the operator has sufficient lead time to act.

[0061] Under normal operations, the operator executes several routine actions such as feedrate changes, setpoint moves that could produce short-lived high residuals in some sensors in the PCA models. Since such notifications are redundant and do not give new information, this invention has mechanism built- in to detect their onset and suppress the notifications.

[0062] The operator is informed of an impending problem through the warning triangles that change color from green to yellow and then red. The application provides the operator with drill down capability to further investigate the problem by viewing a list of prioritized subproblems. This novel method provides the operator with drill down capabilities to the subproblems. This enables to operator to narrow down the search for the root cause. Figure 29 shows that the Cat Circulation, FCC Unusual and FCC Extreme Operations have a warning alert. This assists the operator in isolating and diagnosing the root cause of the condition so that compensatory or corrective actions can be taken. Figure 30 shows the result of clicking on the yellow triangle - a pareto chart indicating the residual of the deviating sensors sorted by their deviations.

[0063] The application uses the pareto-chart approach quite extensively to present information to the operator. The sequence of presentation is in decreas¬ ing order of individual deviation from normal operation. This allows a succinct and concise view of the process narrowed down to the few critical bad actors so the console operator can make informed decisions about course of action. Figure 30 demonstrates this functionality through a list of sensors organized in a pareto- chart. Upon clicking on an individual bar, a custom plot showing the tag trend versus model prediction for the sensor is created. The operator can also look at trends of problem sensors together using the "multi-trend view". For instance, Figure 31 shows the trends of the value and model predictions of the sensors in the Pareto chart of Figure 30. Figure 32 shows the same concept, this time applied to the ranking of valve-flow models based on the normalized-projection- deviation error. Clicking on the bar in this case, generates an X-Y scatter plot that shows the current operation point in the context of the bounds of normal operation (Figure 33). Another example of its application is shown in Figure 34 for the pareto chart and the X-Y plot for the air blower monitor.

[0064] In addition to the PCA models, there are a number of special concern monitors built using engineering relationships and Partial Least Squares' based inferentials. These cover critical equipment in the Reactor-Regenerator area such as the Air Blower and Wet Gas compressor. Underlying these monitors are fuzzy-logic networks that generate a single abnormality signal.

[0065] In summary, the advantages of this invention include: 1. The decomposition of the entire FCCU operation into 10 operational areas - Reactor-Regenerator, Cat Light Ends Towers, Cat Circulation, Stack Valves, Cyclones, Air Blower, Carbon Balance, Catalyst Carryover to Main Fractionator, Wet Gas Compressor, Valve-Flow Models - for supervision.

2. The operational condition of the entire FCCU is summarized into 12 single alerts.

3. The PCA models provide model predictions of the 600+ sensors covered in the models.

4. The abnormal deviations of these 600+ sensors are summarized by the 5 alerts based on the Sum of Square Error of the 3 PCA models.

5. The engineering models - inferentials for Regenerator stack valve, Regenerator cyclone, Air blowers, Carbon balance, Catalyst carryover and Wet Gas compressor add enhanced focussed and early detection capability.

6. The valve-flow models provide a powerful way to monitor control loops, which effect control actions and thus can be the source or by affected by upsets.

7. Events resulting from special cause/routine operations are suppressed to eliminate the false positives. The enormous dimensionality reduction from 600+ individual tags to just 12 signals significantly cuts down on the false positive rate. The PCA modeling approach inherently resolves the single sensor alarming issue in an elegant manner.

B. Development and Deployment of AED Models for a FCCU [0066] The application has PCA models, engineering models and heuristics to detect abnormal operation in a FCCU. The first steps involve analyzing the concerned unit for historical operational problems. This problem identification step is important to define the scope of the application. [0067] The development of these models is described in general in Appendix 1. Some of the specific concerns around huilding these models for the fluidized catalytic cracker unit are described below.

Problem Identification [0068] The first step in the application development is to identify a significant problem, which will benefit process operations. The abnormal event detection application in general can be applied to two different classes of problem. The first is a generic abnormal event application that monitors an entire process area looking for any abnormal event. This type will use several hundred measure¬ ments, but does not require a historical record of any specific abnormal opera¬ tions. The application will only detect and link an abnormal event to a portion (tags) of the process. Diagnosis of the problem requires the skill of the operator or engineer.

[0069] The second type is focused on a specific abnormal operation. This type will provide a specific diagnosis once the abnormality is detected. It typically involves only a small number of measurements (5 -20), but requires a historical data record of the event. This model can PCA/PLS based or simple engineering correlation (mass/energy-balances based). This document covers both kinds of applications in order to provide extensive coverage. The operator or the engineer would then rely on their process knowledge/expertise to accurately diagnose the cause. Typically most of the events seem to be primarily the result of problems with the instruments and valves.

[0070] The following problem characteristics should be considered when selecting an abnormal event detection problem: Infrequent abnormalities (every 3 - 4 months) may not justify the effort to create an abnormal event detector. Also, when a particular abnormality occurs only every 3 or 4 months, an individual operator may go for years without seeing the event. As a consequence, he would not know what to do once the event finally occurs. Therefore the problem identification should be broad enough that the operator would be regularly interacting with the application.

[0071] When scoping the problem, it is common to get the wrong impression from site personnel that there would not be a sufficient number of abnormal events to justify an abnormal event detection application. In general, an overly low estimate of how frequently abnormal events affect the process occurs because: Abnormal events are often not recorded and analyzed. Only those that cause significant losses are tracked and analyzed.

Abnormal events are often viewed as part of normal operations since operators deal with them daily.

Unless there is a regularly repeating abnormal event, the application should cover a large enough portion of the process to "see" abnormal events on a regular basis (e.g. more than 5 times each week).

I. PCA Models [0072] The PCA models are the heart of the FCCU AED. PCA transforms the actual process variables into a set of 'orthogonal' or independent variables called Principal Components (PC) which are linear combinations of the original vari¬ ables. It has been observed that the underlying process has a number of degrees of freedom which represent the specific independent effects that influence the process. These different independent effects show up in the process data as process variation. Process variation can be due to intentional changes, such as feed rate changes, or unintentional disturbances, such as ambient temperature variation.

[0073] Each principal component captures a unique portion of the process variability caused by these different independent influences on the process. The principal components are extracted in the order of decreasing process variation. Each subsequent principal component captures a smaller portion of the total process variability. The major principal components should represent significant underlying sources of process variation. As an example, the first principal component often represents the effect of feed rate changes since this is usually the largest single source of process changes.

[0074] The application is based on a Principal Component Analysis, PCA, of the process, which creates an empirical model of "normal operations". The process of building PCA models is described in detail in the section "Developing PCA Models for AED" in Appendix 1. The following will discuss the special considerations that are necessary to apply PCA toward creating an abnormal event detection application for an FCCU.

FCCU PCA Model Development

[0075] The application has PCA models covering the reactor-regenerator area (FCC-PCA), the cat circulation (CCR-PCA) and the cat light ends towers (CLE-PCA). This allows extensive coverage of the overall FCC operation and early alerts.

[0076] The PCA model development comprises of the following steps:

1) Input Data and Operating Range Selection 2) Historical data collection and pre-processing 3) Data and Process Analysis 4) Initial model creation 5) Model Testing and Tuning 6) Model Deployment [0077] The general principles involved in building PCA models are described in the subsection I "Conceptual PCA Model Design" under section "Developing PCA Models for AED" in Appendix 1 These steps constitute the primary effort in model development. Since PCA models are data-driven, good quality and quantity of training data representing normal operations is very crucial. The basic development strategy is to start with a very rough model, then to successively improve that model's fidelity. This requires observing how the model compares to the actual process operations and re-training the model based on these observations. The steps are briefly described next.

Input Data and Operating Range Selection [0078] As the list of tags in the PCA model dictates coverage, we start with a comprehensive list of all the tags in the concerned areas. The process of select¬ ing measurements and variables is outlined in subsection II "Input Data and Operating Range Selection" under the section "Developing PCA Models for AED" in Appendix 1. Any measurements that were known to be unreliable or exhibit erratic behavior should be removed from the list. Additional measure¬ ment reduction is performed using an iterative procedure once the initial PCA model is obtained.

Historical Data collection and Pre-Processing [0079] Developing a good model of normal operations requires a training data set of normal operations. This data set should:

• Span the normal operating range • Only include normal operating data

[0080] Because it is very rare to have a complete record of the abnormal event history at a site, historical data can only be used as a starting point for creating the training data set. Operating records such as Operator logs, Operator Change Journals, Alarm Journals, Instrument Maintenance records provide a partial record of the abnormal process history. The process of data collection is elaborated upon in subsection III "Historical Data collection" under the section "Developing PCA Models for AED" in Appendix I.

[0081] In the FCCU case, the historical data spanned 1.5 years of operation to cover both summer and winter periods. With one-minute averaged data the number of time points turn out to be around 700,000+ for each tag. In order to make the data-set more manageable while still retaining underlying information, engineering judgement was applied and every 6th point was retained resulting in about 100,000+ points for each sensor. This allowed the representative behavior to be captured by the PCA models.

[0082] Basic statistics such as average, min/max and standard deviation are calculated for all the tags to determine the extent of variation/information contained within. Also, operating logs were examined to remove data contained within windows with known unit shutdowns or abnormal operations. Each candidate measurement was scrutinized to determine appropriateness for inclusion in the training data set.

Creating Balanced Training Data Set

[0083] Using the operating logs, the historical data is divided into periods with known abnormal operations and periods with no identified abnormal operations. The data with no identified abnormal operations will be the preliminary training data set.

[0084] Once these exclusions have been made the first rough PCA model can be built. Since this is going to be a very rough model the exact number of principal components to be retained is not important. This should be no more than 5% of the number measurements included in the model. The number of PCs should ultimately match the number of degrees of freedom in the process, however this is not usually known since this includes all the different sources of process disturbances. There are several standard methods for determining how many principal components to include. Also at this stage the statistical approach to variable scaling should be used: scale all variables to unit variance.

[0085] The training data set should now be run through this preliminary model to identify time periods where the data does not match the model. These time periods should be examined to see whether an abnormal event was occurring at the time. If this is judged to be the case, then these time periods should also be flagged as times with known abnormal events occurring. These time periods should be excluded from the training data set and the model rebuilt with the modified data. The process of creating balanced training data sets using data and process analysis is outlined in Section IV "Data & Process Analysis" under the section "Developing PCA Models for AED" in Appendix 1.

Initial Model Creation [0086] The model development strategy is to start with a very rough model (the consequence of a questionable training data set) then use the model to gather a high quality training data set. This data is then used to improve the model, which is then used to continue to gather better quality training data. This process is repeated until the model is satisfactory.

[0087] Once the specific measurements have been selected and the training data set has been built, the model can be built quickly using standard statistical tools. An example of such a program showing the percent variance captured by each principle component is shown in Figure 45.

The model building process is described in Section V "Model Creation" under the section "Developing PCA Models for AED" in Appendix 1.

Model Testing and Tuning [0088] Once the initial model has been created, it needs to be enhanced by creating a new training data set. This is done by using the model to monitor the process. Once the model indicates a potential abnormal situation, the engineer should investigate and classify the process situation. The engineer will find three different situation, either some special process operation is occurring, an actual abnormal situation is occurring, or the process is normal and it is a false indication. [0089] The process data will not have a gaussian or normal distribution. Consequently, the standard statistical method of setting the trigger for detecting an abnormal event from the variability of the residual error should not be used. Instead the trigger point needs to be set empirically based on experience with using the model. Section VI "Model Testing & Tuning" under the section "Developing PCA Models for AED" in Appendix 1 describes the Model testing and enhancement procedure.

PCA Model Deployment [0090] Successful deployment of AED on a process unit requires a combina¬ tion of accurate models, a well designed user interface and proper trigger points. The detailed procedure of deploying PCA model is described under "Deploying PCA Models and Simple Engineering Models for AED" in Appendix 1.

[0091] Over time, the developer or site engineer may determine that it is necessary to improve one of the models. Either the process conditions have changed or the model is providing a false indication. In this event, the training data set could be augmented with additional process data and improved model coefficients could be obtained. The trigger points can be recalculated using the same rules of thumb mentioned previously.

[0092] Old data that no longer adequately represents process operations should be removed from the training data set. If a particular type of operation is no longer being done, all data from that operation should be removed. After a major process modification, the training data and AED model may need to be rebuilt from scratch.

[0093] The FCCU PCA model started with an initial set of 388 tags, which was then refined to 228 tags. The Cat Circulation PCA (CCR-PCA) model includes 24 tags and monitors the crucial Cat Circulation function. The Cat Light Ends PCA (CLE-PCA) narrowed down from 366 to 256 tags and covers the downstream sections involved in the recovery - the Main Fractionator, Deethanizer Absorber, Debutanizer, Sponge Absorber, LPG scrubber and Naphtha Splitter (Figure 24). The details of the FCC-PCA model is shown in Appendix 2A, the Catalyst Circulation PCA model is described in Appendix 2B and the CLE-PCA model is described in Appendix 2C.

II. AED Engineering Models Engineering Models Development [0094] The engineering models comprise of inferentials and correlation-based models focussed on specific detection of abnormal conditions. The detailed description of building engineering models can be found under "Simple Engineering Models for AED" section in Appendix 1.

[0095] The engineering model requirements for the FCCU application were determined by: performing an engineering evaluation of historical process data and interviews with console operators and equipment specialists. The engineer¬ ing evaluation included areas of critical concern and worst case scenarios for FCCU operation. To address the conclusions from the engineering assessment, the following engineering models were developed for the FCCU AED application: • Catalyst Circulation Monitor • Stack Valves Monitor • Regenerator Cyclone Operation Monitor • Air Blower Operation Monitor • Carbon Balance Monitor • Catalyst Carryover to Main Fractionator Monitor • Wet Gas Compressor Monitor • Valve-Flow consistency monitors [0096] The procedure for building the inferentials is quite similar to that of the PCA models discussed earlier. However, unlike in the case of PCA models where there is no specific output being predicted (all data are inputs), with infer¬ entials there is a desired variable for prediction. We use Partial Least Squares (PLS) to model the output tag based on certain inputs. As in the case of PCA this calls for measurement selection and data preprocessing. However, in this case measurement selection is from the point of view of variables that would be the best predictors for the output tag. This involves interacting with process experts and going through a couple of iterations to narrow down the input list to the best set.

[0097] The Catalyst Circulation monitor monitors the health of catalyst circulation using 6 subproblem areas - (a) Catalyst circulation operating range (b) Cat Circulation PCA model residual (c) Rx-Rg J-bend density (d), Rx-Rg catalyst levels (e) Abnormal RxRg DeltaP control (f) Consistency between energy and pressure balance cat circulation calcs. Catalyst circulation is a key component of efficient FCC operation and early detection of a problem can lead to significant savings. The complete breakdown of the problem is shown in Figure 27 and the corresponding Fuzzy Net in Figure 28.

[0098] The Regenerator stack valve is crucial in maintaining the Reactor- Regenerator pressure differential. It is an important link the Reactor cascade temperature control chain wherein the Reactor temperature adjusts the Reactor- Regenerator pressure differential by manipulating the stack valve opening. In order to monitor the valves, (a) the stack valve normal operating ranges are checked and (b) the consistency between the stack valve openings and the differential pressure controller output is checked. Figure 35 shows the drill down for the Regenerator Stack Valve monitor. Appendix 3 A gives the details of this monitor. [0099] The Regenerator Cyclones are used to precipitate the catalyst fines from the flue gas to prevent catalyst loss. The catalyst is collected in catalyst hoppers to be reused in the FCCU. This monitor checks several key model parameters - the flue gas temperature, the regenerator top pressure, flue gas 02 model, fines hopper weight rate-of-change and the cyclone differential pressure. Appendix 3 B gives the details of this monitor and Figure 36 shows the display.

[00100] The Air Blower supplies air to the regenerator, which is used to burn off the coke deposited in the spent catalyst from the reactor. The air blower is thus a critical piece of equipment to maintain stable FCC operations. The air blower monitor checks the turbine speed, the delta air temperature, steam pressure supply, air flow, steam flow to turbine, air discharge temperature. The inferential models in this case were - (a) air flow to the airblower, (b) Steam flow to turbine (c) Regenerator temperature and (d) Air blower discharge. The details of the predictor tags in the inferential is shown in Appendix 3 C. Figure 37 shows the monitor drill down.

[00101] The carbon balance monitor checks for the carbon balance in the Reactor-Regenerator. The evidences it uses are the T-statistic of the Catalyst Circulation PCA model, the flue gas CO level, the flue gas O2 level and some other supporting sensors. This monitor is shown in Figure 38 and Appendix 3 D has its details.

[00102] The catalyst carryover to main fractionator monitors the reactor stripper level, the reactor differential pressure, the slurry pumparound to the main fractionator and the strainer differential pressure. Figure 39 shows the monitor. Appendix 3 E has monitor details.

[00103] The Wet Gas compressor takes the main fractionator overhead product and compresses it for further processing in the downstream light ends towers. The WGC also maintains the tower pressure and hence is another critical concern area to be monitored. This monitor checks the second stage suction flow, steam to turbine, first stage discharge flow, cat gas exit temperature. The inferential models in this monitor are (a) 2nd stage compressor suction flow, (b) Steam flow to turbine, (c) 1st stage compressor discharge flow and (d) Cat Gas discharge. The details of these inferentials are given in Appendix 3.F. Figure 40 shows the monitor.

[00104] The Flow- Valve position consistency monitor was derived from a comparison of the measured flow (compensated for the pressure drop across the valve) with a model estimate of the flow. These are powerful checks as the condition of the control loops are being directly monitored in the process. The model estimate of the flow is obtained from historical data by fitting coefficients to the valve curve equation (assumed to be either linear or parabolic). In the initial application, 12 flow/valve position consistency models were developed. An example is shown in Figure 33 for Regenerator Spent Aeration Steam Valve. Several models were also developed for control loops which historically exhibited unreliable performance. The details of the valve flow models is given in Appendix 3 G.

[00105] In addition to the valve-flow model mismatch, there is an additional check to notify the operator in the event that a control valve is beyond control¬ lable range using value-exceedance. Figure 41 shows both the components of the fuzzy net and an example of value-exceedance is shown in Figure 42.

[00106] A time-varying drift term was added to the model estimate to compensate for long term sensor drift. The operator can also request a reset of the drift term after a sensor recalibration or when a manual bypass valve has been changed. This modification to the flow estimator significantly improved the robustness for implementation within an online detection algorithm.

Engineering Model Deployment [00107] The procedure for implementing the engineering models within AED is fairly straightforward. For the models which identify specific known types of behavior within the unit (e.g. Regenerator cyclone, stack valve, air blower, wet gas compressor operation ) the trigger points for notification were determined from the analysis of historical data in combination with console operator input. For the computational models (e.g. flow/valve position models), the trigger points for notification were initially derived from the standard deviation of the model residual. For the first several months of operation, known AED indica¬ tions were reviewed with the operator to ensure that the trigger points were appropriate and modified as necessary. Section "Deploying PCA Models and Simple Engineering Models for AED" in Appendix 1 describes details of engineering model deployment.

[00108] Under certain circumstances, the valve/flow diagnostics could provide the operator with redundant notification. Model suppression was applied to the valve/flow diagnostics to provide the operator with a single alert to a problem with a valve/flow pair.

C. AED Additional Tools [00109] In order to facilitate smooth daily AED operation, various tools are provided to help maintain AED models and accommodate real concerns.

Event suppression/Tags Disabling [00110] The operator typically makes many moves (e.g., setpoint changes, tags under maintenance, decokes, drier swaps, regenerations) and other process changes in routine daily operations. In order to suppress such known events beforehand, the system provides for event suppression. Whenever setpoint moves are implemented, the step changes in the corresponding PV and other related tags might generate notifications. In practice if the AED models are not already aware of such changes, the result can be an abnormality signal. To suppress this a fuzzy net uses the condition check and the list of tags to be suppressed. In other situations, tags in PCA models, valve flow models and fuzzy nets can be temporarily disabled for pecified time periods. In most cases, a reactivation time of 12 hours is used to prevent operators from forgetting to reactivate. If a tag has been removed from service for an extended period, it can be disabled. The list of events currently suppressed is shown in Figure 43.

Logging Event Details [00111] To derive the greatest benefits from such a system, it is necessary to train the operators and incorporate the AED system into the daily 'work process. Since the final authority still rests with the operator to take corrective actions, it is important to get their input on AED performance and enhancements. In order to capture AED event details in a systematic manner to review and provide feedback, the operators were provided with AED Event Forms. These helped maintain a record of events and help evaluate AED benefits. Since the time AED was commissioned, several critical events have been captured and documented for operations personnel. A sample form is shown in Figure 44.

Alternative Solutions May Be Better -Corrective actions for repeated events [00112] If a particular repeating problem has been identified, the developer should confirm that there is not a better way to solve the problem. In particular the developer should make the following checks before trying to build an abnormal event detection application.

• Can the problem be permanently fixed? Often a problem exists because site personnel have not had sufficient time to investigate and permanently solve the problem. Once the attention of the organization is focused on the problem, a permanent solution is often found. This is the best approach.

• Can the problem be directly measured? A more reliable way to detect a problem is to install sensors that can directly measure the problem in the process. This can also be used to prevent the problem through a process control application. This is the second best approach. • Can an inferential measurement be developed which will measure the approach to the abnormal operation? Inferential measurements are very close relatives to PCA abnormal event models. If the data exists which can be used to reliable measure the approach to the problem condition (e.g. tower flooding using delta pressure), this can then be used to not only detect when the condition exists but also as the base for a control application to prevent the condition from occurring. This is the third best approach.

Abnormal Event Detection Applications Do Not Replace the Alarm System [00113] Whenever a process problem occurs quickly, the alarm system will identify the problem as quickly as an abnormal event detection application. The sequence of events (e.g. the order in which measurements become unusual) may be more useful than the order of the alarms for helping the operator diagnose the cause. This possibility should be investigated once the application is on-line.

[00114] However, abnormal event detection applications can give the operator advanced warning when abnormal events develop slowly (longer than 15 minutes). These applications are sensitive to a change in the pattern of the process data rather than requiring a large excursion by a single variable. Consequently alarms can be avoided. If the alarm system has been configured to alert the operator when the process moves away from a small operating region (not true safety alarms), this application may be able to replace these alarms.

[00115] In addition to just detecting the presence of an abnormal event the AED system also isolates the deviant sensors for the operator to investigate the event. This is a crucial advantage considering that modern plants have thousands of sensors and it is humanly infeasible to monitor them all online. The AED system can thus be thought of as another powerful addition to the operator toolkit to deal with abnormal situations efficiently and effectively. APPENDIX 1

[00116] Events and disturbances of various magnitudes are constantly affecting process operations. Most of the time these events and disturbances are handled by the process control system. However, the operator is required to make an unplanned intervention in the process operations whenever the process control system cannot adequately handle the process event. We define this situation as an abnormal operation and the cause defined as an abnormal event.

[00117] A methodology and system has been developed to create and to deploy on-line, sets of models, which are used to detect abnormal operations and help the operator isolate the location of the root cause. In a preferred embodiment, the models employ principle component analysis (PCA). These sets of models are composed of both simple models that represent known engineering relationships and principal component analysis (PCA) models that represent normal data patterns that exist within historical databases. The results from these many model calculations are combined into a small number of summary time trends that allow the process operator to easily monitor whether the process is entering an abnormal operation.

[00118] Figure 1 shows how the information in the online system flows through the various transformations, model calculations, fuzzy Petri nets and consolidations to arrive at a summary trend which indicates the normality / abnormality of the process areas. The heart of this system is the various models used to monitor the normality of the process operations.

[00119] The PCA models described in this invention are intended to broadly monitor continuous refining and chemical processes and to rapidly detect developing equipment and process problems. The intent is to provide blanket monitoring of all the process equipment and process operations under the span of responsibility of a particular console operator post. This can involve many major refining or chemical process operating units (e.g. distillation towers, reactors, compressors, heat exchange trains, etc.) which have hundreds to thousands of process measurements. The monitoring is designed to detect problems which develop on a minutes to hours timescale, as opposed to long term performance degradation. The process and equipment problems do not need to be specified beforehand. This is in contrast to the use of PCA models cited in the literature which are structured to detect a specific important process problem and to cover a much smaller portion of the process operations.

[00120] To accomplish this objective, the method for PCA model develop¬ ment and deployment includes a number of novel extensions required for their application to continuous refining and chemical processes including:

• criteria for establishing the equipment scope of the PCA models criteria and methods for selecting, analyzing, and transforming measurement inputs

• developing of multivariate statistical models based on a variation of principle component models, PCA

• developing models based on simple engineering relationships restructuring the associated statistical indices

• preprocessing the on-line data to provide exception calculations and continuous on-line model updating

• using fuzzy Petri nets to interpret model indices as normal or abnormal

• using fuzzy Petri nets to combine multiple model outputs into a single continuous summary indication of normality / abnormality for a process area

• design of operator interactions with the models and fuzzy Petri nets to reflect operations and maintenance activities

[00121] These extensions are necessary to handle the characteristics of continuous refining and chemical plant operations and the corresponding data characteristics so that PCA and simple engineering models can be used effectively. These extensions provide the advantage of preventing many of the Type I and Type II errors and quicker indications of abnormal events.

[00122] This section will not provide a general background to PCA. For that, readers should refer to a standard textbook such as E. Jackson's "A User's Guide to Principal Component Analysis" (2)

[00123] The classical PCA technique makes the following statistical assumptions all of which are violated to some degree by the data generated from normal continuous refining and chemical plant process operations:

1. The process is stationary-its mean and variance are constant over time.

2. The cross correlation among variables is linear over the range of normal process operations

3. Process noise random variables are mutually independent.

4. The covariance matrix of the process variables is not degenerate (i.e. positive semi-definite).

5. The data are scaled "appropriately" (the standard statistical approach being to scale to unit variance).

6. There are no (uncompensated) process dynamics (a standard partial compensation for this being the inclusion of lag variables in the model)

7. All variables have some degree of cross correlation.

8. The data have a multivariate normal distribution

[00124] Consequently, in the selection, analysis and transformation of inputs and the subsequent in building the PCA model, various adjustments are made to evaluate and compensate for the degree of violation.

[00125] Once these PCA models are deployed on-line the model calculations require specific exception processing to remove the effect of known operation and maintenance activities, to disable failed or "bad acting" inputs, to allow the operator observe and acknowledge the propagation of an event through the process and to automatically restore the calculations once the process has returned to normal.

[00126] Use of PCA models is supplemented by simple redundancy checks that are based on known engineering relationships that must be true during normal operations. These can be as simple as checking physically redundant measurements, or as complex as material and engineering balances.

[00127] The simplest form of redundancy checks are simple 2x2 checks, e.g. • temperature 1 = temperature 2 • flow 1 = valve characteristic curve 1 (valve 1 position) • material flow into process unit 1 = material flow out of process unit 1

[00128] These are shown to the operator as simple x-y plots, such as the valve flow plot in Figure 2. Each plot has an area of normal operations, shown on this plot by the gray area. Operations outside this area are signaled as abnormal.

[00129] Multiple redundancy can also be checked through a single multidimensional model. Examples of multidimensional redundancy are: • pressure 1 = pressure 2 = .... = pressure n • material flow into process unit 1 = material flow out of process unit 1 = ... = material flow into process unit 2

[00130] Multidimensional checks are represented with "PCA like" models. In Figure 3, there are three independent and redundant measures, Xl, X2, and X3. Whenever X3 changes by one, Xl changes by ai3 and X2 changes by a23. This set of relationships is expressed as a PCA model with a single principle component direction, P. This type of model is presented to the operator in a manner similar to the broad PCA models. As with the two dimensional redundancy checks the gray area shows the area of normal operations. The principle component loadings of P are directly calculated from the engineering equations, not in the traditional manner of determining P from the direction of greatest variability.

[00131] The characteristics of the process operation require exception operations to keep these relationships accurate over the normal range of process operations and normal field equipment changes and maintenance activities. Examples of exception operations are: • opening of bypass valves around flow meters • compensating for upstream / downstream pressure changes • recalibration of field measurements • redirecting process flows based on operating modes

[00132] The PCA models and the engineering redundancy checks are combined using fuzzy Petri nets to provide the process operator with a continuous summary indication of the normality of the process operations under his control (Figure 4).

[00133] Multiple statistical indices are created from each PCA model so that the indices correspond to the configuration and hierarchy of the process equip¬ ment that the process operator handles. The sensitivity of the traditional sum of Squared Prediction Error, SPE, index is improved by creating subset indices, which only contain the contribution to the SPE index for the inputs which come from designated portions of the complete process area covered by the PCA model. Each statistical index from the PCA models is fed into a fuzzy Petri net to convert the index into a zero to one scale, which continuously indicates the range from normal operation (value of zero) to abnormal operation (value of one). [00134] Each redundancy check is also converted to a continuous normal - abnormal indication using fuzzy nets. There are two different indices used for these models to indicate abnormality; deviation from the model and deviation outside the operating range (shown on Figure 3). These deviations are equivalent to the sum of the square of the error and the Hotelling T square indices for PCA models. For checks with dimension greater than two, it is possible to identify which input has a problem. In Figure 3, since the X3-X2 relationship is still within the normal envelope, the problem is with input Xl. Each deviation measure is converted by the fuzzy Petri net into a zero to one scale that will continuously indicate the range from normal operation (value of zero) to abnormal operation (value of one).

[00135] For each process area under the authority of the operator, the applic¬ able set of normal - abnormal indicators is combined into a single normal - abnormal indicator. This is done by using fuzzy Petri logic to select the worst case indication of abnormal operation. In this way the operator has a high level summary of all the checks within the process area. This section will not provide a general background to fuzzy Petri nets. For that, readers should refer to Cardoso, et al, Fuzzy Petri Nets: An Overview (1)

[00136] The overall process for developing an abnormal event application is shown in Figure 5. The basic development strategy is iterative where the developer starts with a rough model, then successively improves that model's capability based on observing how well the model represents the actual process operations during both normal operations and abnormal operations. The models are then restructured and retrained based on these observations.

Developing PCA models for Abnormal Event Detection I. Conceptual PCA Model Design [00137] The overall design goals are to: • provide the console operator with a continuous status (normal vs. abnormal) of process operations for all of the process units under his operating authority

• provide him with an early detection of a rapidly developing (minutes to hours) abnormal event within his operating authority

• provide him with only the key process information needed to diagnose the root cause of the abnormal event.

[00138] Actual root cause diagnosis is outside the scope of this invention. The console operator is expected to diagnosis the process problem based on his process knowledge and training.

[00139] Having a broad process scope is important to the overall success of abnormal operation monitoring. For the operator to learn the system and main¬ tain his skills, he needs to regularly use the system. Since specific abnormal events occur infrequently, abnormal operations monitoring of a small portion of the process would be infrequently used by the operator, likely leading the operator to disregard the system when it finally detects an abnormal event. This broad scope is in contrast to the published modeling goal which is to design the model based on detecting a specific process problem of significant economic interest (see Kourti, 2004).

[00140] There are thousands of process measurements within the process units under a single console operator's operating authority. Continuous refining and chemical processes exhibit significant time dynamics among these measure¬ ments, which break the cross correlation among the data. This requires dividing the process equipment into separate PCA models where the cross correlation can be maintained.

[00141] Conceptual model design is composed of four major decisions: • Subdividing the process equipment into equipment groups with corresponding PCA models

• Subdividing process operating time periods into process operating modes requiring different PCA models

• Identifying which measurements within an equipment group should be designated as inputs to each PCA model

• Identifying which measurements within an equipment group should act as flags for suppressing known events or other exception operations

A. Process Unit Coverage [00142] The initial decision is to create groups of equipment that will be covered by a single PCA model. The specific process units included requires an understanding of the process integration / interaction. Similar to the design of a multivariable constraint controller, the boundary of the PCA model should encompass all significant process interactions and key upstream and downstream indications of process changes and disturbances.

[00143] The following rules are used to determined these equipment groups:

[00144] Equipment groups are defined by including all the major material and energy integrations and quick recycles in the same equipment group. If the process uses a multivariable constraint controller, the controller model will explicitly identify the interaction points among the process units. Otherwise the interactions need to be identified through an engineering analysis of the process.

[00145] Process groups should be divided at a point where there is a minimal interaction between the process equipment groups. The most obvious dividing point occurs when the only interaction comes through a single pipe containing the feed to the next downstream unit. In this case the temperature, pressure, flow, and composition of the feed are the primary influences on the downstream equipment group and the pressure in the immediate downstream unit is the primary influence on the upstream equipment group. These primary influence measurements should be included in both the upstream and down¬ stream equipment group PCA models.

[00146] Include the influence of the process control applications between upstream and downstream equipment groups. The process control applications provide additional influence paths between upstream and downstream equipment groups. Both feedforward and feedback paths can exist. Where such paths exist the measurements which drive these paths need to be included in both equipment groups. Analysis of the process control applications will indicate the major interactions among the process units.

[00147] Divide equipment groups wherever there are significant time dynamics ( e.g. storage tanks, long pipelines etc.). The PCA models primarily handle quick process changes (e.g. those which occur over a period of minutes to hours). Influences, which take several hours, days or even weeks to have their effect on the process, are not suitable for PCA models. Where these influences are important to the normal data patterns, measurements of these effects need to be dynamically compensated to get their effect time synchronized with the other process measurements (see the discussion of dynamic compensation).

B. Process Operating Modes [00148] Process operating modes are defined as specific time periods where the process behavior is significantly different. Examples of these are production of different grades of product (e.g. polymer production), significant process transitions (e.g. startups, shutdowns, feedstock switches), processing of dramatically different feedstock (e.g. cracking naphtha rather than ethane in olefins production), or different configurations of the process equipment (different sets of process units running).

[00149] Where these significant operating modes exist, it is likely that separate PCA models will need to be developed for each major operating mode. The fewer models needed the better. The developer should assume that a specific PCA model could cover similar operating modes. This assumption must be tested by running new data from each operating mode through the model to see if it behaves correctly.

C. Historical Process Problems

[00150] In order for there to be organizational interest in developing an abnormal event detection system, there should be an historical process problem of significant economic impact. However, these significant problems must be analyzed to identify the best approach for attacking these problems. In particular, the developer should make the following checks before trying to build an abnormal event detection application:

1. Can the problem be permanently fixed? Often a problem exists because site personnel have not had sufficient time to investigate and permanently solve the problem. Once the attention of the organization is focused on the problem, a permanent solution is often found. This is the best approach.

2. Can the problem be directly measured? A more reliable way to detect a problem is to install sensors that can directly measure the problem in the process. This can also be used to prevent the problem through a process control application. This is the second best approach.

3. Can an inferential measurement be developed which will measure the approach to the abnormal operation? Inferential measurements are usually developed using partial least squares, PLS, models which are very close relatives to PCA abnormal event models. Other common alternatives for developing inferential measurements include Neural Nets and linear regression models. If the data exists which can be used to reliably measure the approach to the problem condition (e.g. tower flooding using delta pressure), this can then be used to not only detect when the condition exists but also as the base for a control application to prevent the condition from occurring. This is the third best approach.

[00151] Both direct measurements of problem conditions and inferential measurements of these conditions can be easily integrated into the overall network of abnormal detection models.

II. Input Data and Operating Range Selection

[00152] Within an equipment group, there will be thousands of process measurements. For the preliminary design:

• Select all cascade secondary controller measurements, and especially ultimate secondary outputs (signals to field control valves) on these units

• Select key measurements used by the console operator to monitor the process (e.g. those which appear on his operating schematics)

• Select any measurements used by the contact engineer to measure the performance of the process

• Select any upstream measurement of feedrate, feed temperature or feed quality

• Select measurements of downstream conditions which affect the process operating area, particularly pressures.

• Select extra redundant measurements for measurements that are important

• Select measurements that may be needed to calculate non-linear transformations . • Select any external measurement of a disturbance (e.g. ambient temperature)

• Select any other measurements, which the process experts regard as important measures of the process condition

[00153] From this list only include measurements which have the following characteristics:

• The measurement does not have a history of erratic or problem performance

• The measurement has a satisfactory signal to noise ratio

• The measurement is cross-correlated with other measurements in the data set

• The measurement is not saturated for more than 10% of the time during normal operations.

• The measurement is not tightly controlled to a fixed setpoint, which rarely changes (the ultimate primary of a control hierarchy).

• The measurement does not have long stretches of "Bad Value" operation or saturated against transmitter limits.

• The measurement does not go across a range of values, which is known to be highly non-linear

• The measurement is not a redundant calculation from the raw measurements

• The signals to field control valves are not saturated for more than 10% of the time.

A. Evaluations for Selecting Model Inputs [00154] There are two statistical criteria for prioritizing potential inputs into the PCA Abnormal Detection Model, Signal to Noise Ratio and Cross- Correlation.

1 ) Signal to Noise Test The signal to noise ratio is a measure of the information content in the input signal.

The signal to noise ratio is calculated as follows:

1. The raw signal is filtered using an exponential filter with an approximate dynamic time constant equivalent to that of the process. For continuous refining and chemical processes this time constant is usually in the range of 30 minutes to 2 hours. Other low pass filters can be used as well. For the exponential filter the equations are:

Yn = P * Yn-1-H(I-P) * Xn Exponential filter equation Equation 1

P = Exρ(-Ts/Tf) Filter constant calculate Equation 2

where: Yn the current filtered value Yu-I the previous filtered value Xn the current raw value P the exponential filter constant Ts the sample time of the measurement Tf the filter time constant

2. A residual signal is created by subtracting the filtered signal from the raw signal Rn = Xn - Yn Equation 3

3. The signal to noise ratio is the ratio of the standard deviation of the filtered signal divided by the standard deviation of the residual signal

S / N = σγ / σR Equation 4 [00155] It is preferable to have all inputs exhibit a S/N which is greater than a predetermined minimum, such as 4. Those inputs with S/N less than this minimum need individual examination to determine whether they should be included in the model

[00156] The data set used to calculate the S/N should exclude any long periods of steady-state operation since that will cause the estimate for the noise content to be excessively large.

2) Cross Correlation Test [00157] The cross correlation is a measure of the information redundancy the input data set. The cross correlation between any two signals is calculated as:

1. Calculate the co-variance, Sik, between each input pair, i and k

Sue = N* σ (XL*Xv) - (σ XL) * (σ Xv) Equation 5 N*(N-1)

2. Calculate the correlation coefficient for each pair of inputs from the co- variance:

CCik = Sik/(Sii*Skk)1/2 Equation 6

[00158] There are two circumstances, which flag that an input should not be included in the model. The first circumstance occurs when there is no significant correlation between a particular input and the rest of the input data set. For each input, there must be at least one other input in the data set with a significant correlation coefficient, such as 0.4.

[00159] The second circumstance occurs when the same input information has been (accidentally) included twice, often through some calculation, which has a different identifier. Any input pairs that exhibit correlation coefficients near one (for example above 0.95) need individual examination to determine whether both inputs should be included in the model. If the inputs are physically independent but logically redundant (i.e., two independent thermocouples are independently measuring the same process temperature) then both these inputs should be included in the model.

[00160] If two inputs are transformations of each other (i.e., temperature and pressure compensated temperature) the preference is to include the measurement that the operator is familiar with, unless there is a significantly improved cross correlation between one of these measurements and the rest of the dataset. Then the one with the higher cross correlation should be included.

3) Identifying & Handling Saturated Variables

[00161] Refining and chemical processes often run against hard and soft constraints resulting in saturated values and "Bad Values" for the model inputs. Common constraints are: instrument transmitter high and low ranges, analyzer ranges, maximum and minimum control valve positions, and process control application output limits. Inputs can fall into several categories with regard to saturation which require special handling when pre-processing the inputs, both for model building and for the on-line use of these models.

[00162] For standard analog instruments (e.g., 4-20 milliamp electronic transmitters), bad values can occur because of two separate reasons:

• The actual process condition is outside the range of the field transmitter • The connection with the field has been broken

[00163] When either of these conditions occur, the process control system could be configured on an individual measurement basis to either assign a special code to the value for that measurement to indicate that the measurement is a Bad Value, or to maintain the last good value of the measurement. These values will then propagate throughout any calculations performed on the process control system. When the "last good value" option has been configured, this can lead to erroneous calculations that are difficult to detect and exclude. Typically when the "Bad Value" code is propagated through the system, all calculations which depend on the bad measurement will be flagged bad as well.

[00164] Regardless of the option configured on the process control system, those time periods, which include Bad Values should not be included in training or test data sets. The developer needs to identify which option has been configured in the process control system and then configure data filters for excluding samples, which are Bad Values. For the on-line implementation, inputs must be pre-processed so that Bad Values are flagged as missing values, regardless of which option had been selected on the process control system.

[00165] Those inputs, which are normally Bad Value for extensive time periods should be excluded from the model.

[00166] Constrained variables are ones where the measurement is at some limit, and this measurement matches an actual process condition (as opposed to where the value has defaulted to the maximum or minimum limit of the transmitter range - covered in the Bad Value section). This process situation can occur for several reasons:

• Portions of the process are normally inactive except under special override conditions, for example pressure relief flow to the flare system. Time periods where these override conditions are active should be excluded from the training and validation data set by setting up data filters. For the on-line implementation these override events are trigger events for automatic suppression of selected model statistics

• The process control system is designed to drive the process against process operating limits, for example product spec limits. These constraints typically fall into two categories: - those, which are occasionally saturated and those, which are normally saturated. Those inputs, which are normally saturated, should be excluded from the model. Those inputs, which are only occasionally saturated (for example less than 10% of the time) can be included in the model however, they should be scaled based on the time periods when they are not saturated.

B. Input from Process Control Applications

[00167] The process control applications have a very significant effect on the correlation structure of the process data. In particular:

• The variation of controlled variables is significantly reduced so that movement in the controlled variables is primarily noise except for those brief time periods when the process has been hit with a significant process disturbance or the operator has intentionally moved the operating point by changing key setpoints.

• The normal variation in the controlled variables is transferred by the control system to the manipulated variables (ultimately the signals sent to the control valves in the field).

[00168] The normal operations of refinery and chemical processes are usually controlled by two different types of control structures: the classical control cascades (shown in Figure 6) and the more recent multivariable constraint controllers, MVCC (shown in Figure 7).

1) Selecting model inputs from cascade structures [00169] Figure 6 shows a typical "cascade" process control application, which is a very common control structure for refining and chemical processes. Although there are many potential model inputs from such an application, the only ones that are candidates for the model are the raw process measurements (the "PVs" in this figure ) and the final output to the field valve.

[00170] Although it is a very important measurement, the PV of the ultimate primary of the cascade control structure is a poor candidate for inclusion in the model. This measurement usually has very limited movement since the objective of the control structure is to keep this measurement at the setpoint. There can be movement in the PV of the ultimate primary if its setpoint is changed but this usually is infrequent. The data patterns from occasional primary setpoint moves will usually not have sufficient power in the training dataset for the model to characterize the data pattern.

[00171] Because of this difficulty in characterizing the data pattern resulting from changes in the setpoint of the ultimate primary, when the operator makes this setpoint move, it is likely to cause a significant increase in the sum of squared prediction error, SPE, index of the model. Consequently, any change in the setpoint of the ultimate primary is a candidate trigger for a "known event suppression". Whenever the operator changes an ultimate primary setpoint, the "known event suppression" logic will automatically remove its effect from the SPE calculation.

[00172] Should the developer include the PV of the ultimate primary into the model, this measurement should be scaled based on those brief time periods during which the operator has changed the setpoint and until the process has moved close to the vale of the new setpoint (for example within 95% of the new setpoint change thus if the setpoint change is from 10 to 11, when the PV reaches 10.95)

[00173] There may also be measurements that are very strongly correlated (for example greater than .95 correlation coefficient) with the PV of the Ultimate Primary, for example redundant thermocouples located near a temperature measurement used as a PV for an Ultimate Primary. These redundant measure¬ ments should be treated in the identical manner that is chosen for the PV of the Ultimate Primary.

[00174] Cascade structures can have setpoint limits on each secondary and can have output limits on the signal to the field control valve. It is important to check the status of these potentially constrained operations to see whether the measurement associated with a setpoint has been operated in a constrained manner or whether the signal to the field valve has been constrained. Date during these constrained operations should not be used.

2) Selecting / Calculating Model Inputs from Multivariable Constraint Controllers, MVCC

[00175] Figure 7 shows a typical MVCC process control application, which is a very common control structure for refining and chemical processes. An MVCC uses a dynamic mathematical model to predict how changes in manipulated variables, MVs, (usually valve positions or setpoints of regulatory control loops) will change control variables, CVs (the dependent temperatures, pressures, compositions and flows which measure the process state). An MVCC attempts to push the process operation against operating limits. These limits can be either MV limits or CV limits and are determined by an external optimizer. The number of limits that the process operates against will be equal to the number of MVs the controller is allowed to manipulate minus the number of material balances controlled. So if an MVCC has 12 MVs, 30 CVs and 2 levels then the process will be operated against 10 limits. An MVCC will also predict the effect of measured load disturbances on the process and compensate for these load disturbances (known as feedforward variables, FF).

[00176] Whether or not a raw MV or CV is a good candidate for inclusion in the PCA model depends on the percentage of time that MV or CV is held against its operating limit by the MVCC. As discussed in the Constrained Variables section, raw variables that are constrained more than 10% of the time are poor candidates for inclusion in the PCA model. Normally unconstrained variables should be handled per the Constrained Variables section discussion.

[00177] If an unconstrained MV is a setpoint to a regulatory control loop, the setpoint should not be included; instead the measurement of that regulatory control loop should be included. The signal to the field valve from that regulatory control loop should also be included.

[00178] If an unconstrained MV is a signal to a field valve position, then it should be included in the model.

C. Redundant Measurements

[00179] The process control system databases can have a significant redundancy among the candidate inputs into the PCA model. One type of redundancy is "physical redundancy", where there are multiple sensors (such as thermocouples) located in close physical proximity to each other within the process equipment. The other type of redundancy is "calculational redundancy", where raw sensors are mathematically combined into new variables (e.g. pressure compensated temperatures or mass flows calculated from volumetric flow measurements).

[00180] As a general rule, both the raw measurement and an input which is calculated from that measurement should not be included in the model. The general preference is to include the version of the measurement that the process operator is most familiar with. The exception to this rule is when the raw inputs must be mathematically transformed in order to improve the correlation structure of the data for the model. In that case the transformed variable should be included in the model but not the raw measurement.

[00181] Physical redundancy is very important for providing cross validation information in the model. As a general rule, raw measurements, which are physically redundant, should be included in the model. When there are a large number of physically redundant measurements, these measurements must be specially scaled so as to prevent them from overwhelming the selection of principle components (see the section on variable scaling). A common process example occurs from the large number of thermocouples that are placed in reactors to catch reactor runaways.

[00182] When mining a very large database, the developer can identify the redundant measurements by doing a cross-correlation calculation among all of the candidate inputs. Those measurement pairs with a very high cross- correlation (for example above .95) should be individually examined to classify each pair as either physically redundant or calculationally redundant.

///. Historical Data Collection

[00183] A significant effort in the development lies in creating a good training data set, which is known to contain all modes of normal process operations. This data set should:

[00184] Span the normal operating range: Datasets, which span small parts of the operating range, are composed mostly of noise. The range of the data compared to the range of the data during steady state operations is a good indication of the quality of the information in the dataset.

[00185] Include all normal operating modes (including seasonal mode variations). Each operating mode may have different correlation structures. Unless the patterns, which characterize the operating mode, are captured by the model, these unmodeled operating modes will appear as abnormal operations.

[00186] Only include normal operating data: If strong abnormal operating data is included in the training data, the model will mistakenly model these abnormal operations as normal operations. Consequently, when the model is later compared to an abnormal operation, it may not detect the abnormality operations.

[00187] History should be as similar as possible to the data used in the on¬ line system: TIie online system will be providing spot values at a frequency fast enough to detect the abnormal event. For continuous refining and chemical operations this sampling frequency will be around one minute. Within the limitations of the data historian, the training data should be as equivalent to one- minute spot values as possible.

[00188] The strategy for data collection is to start with a long operating history (usually in the range of 9 months to 18 months), then try to remove those time periods with obvious or documented abnormal events. By using such a long time period,

• the smaller abnormal events will not appear with sufficient strength in the training data set to significantly influence the model parameters

• most operating modes should have occurred and will be represented in the data.

A. Historical Data Collection Issues 1) Data Compression

[00189] Many historical databases use data compression to minimize the storage requirements for the data. Unfortunately, this practice can disrupt the correlation structure of the data. At the beginning of the project the data compression of the database should be turned off and the spot values of the data historized. Final models should be built using uncompressed data whenever possible. Averaged values should not be used unless they are the only data available, and then with the shortest data average available.

2) Length of Data History [00190] For the model to properly represent the normal process patterns, the training data set needs to have examples of all the normal operating modes, normal operating changes and changes and normal minor disturbances that the process experiences. This is accomplished by using data from over a long period of process operations (e.g. 9 - 18 months). In particular, the differences among seasonal operations (spring, summer, fall and winter) can be very significant with refinery and chemical processes.

[00191] Sometimes these long stretches of data are not yet available (e.g. after a turnaround or other significant reconfiguration of the process equipment). In these cases the model would start with a short initial set of training data (e.g. 6 weeks) then the training dataset is expanded as further data is collected and the model updated monthly until the models are stabilized (e.g. the model coefficients don't change with the addition of new data)

3) Ancillary Historical Data

[00192] The various operating journals for this time period should also be collected. This will be used to designate operating time periods as abnormal, or operating in some special mode that needs to be excluded from the training dataset. In particular, important historical abnormal events can be selected from these logs to act as test cases for the models.

4) Lack of Specific Measurement History [00193] Often setpoints and controller outputs are not historized in the plant process data historian. Historization of these values should immediately begin at the start of the project.

5) Operating Modes [00194] Old data that no longer properly represents the current process operations should be removed from the training data set. After a major process modification, the training data and PCA model may need to be rebuilt from scratch. If a particular type of operation is no longer being done, all data from that operation should be removed from the training data set. [00195] Operating logs should be used to identify when the process was run under different operating modes. These different modes may require separate models. Where the model is intended to cover several operating modes, the number of samples in the training dataset from each operating model should be approximately equivalent.

6) Sampling Rate [00196] The developer should gather several months of process data using the site's process historian, preferably getting one minute spot values. If this is not available, the highest resolution data, with the least amount of averaging should be used.

7) Infrequently Sampled Measurements [00197] Quality measurements (analyzers and lab samples) have a much slower sample frequency than other process measurements, ranging from tens of minutes to daily. In order to include these measurements in the model a continuous estimate of these quality measurements needs to be constructed. Figure 8 shows the online calculation of a continuous quality estimate. This same model structure should be created and applied to the historical data. This quality estimate then becomes the input into the PCA model.

8) Model Triggered Data Annotation

[00198] Except for very obvious abnormalities, the quality of historical data is difficult to determine. The inclusion of abnormal operating data can bias the model. The strategy of using large quantities of historical data will compensate to some degree the model bias caused by abnormal operating in the training data set. The model built from historical data that predates the start of the project must be regarded with suspicion as to its quality. The initial training dataset should be replaced with a dataset, which contains high quality annotations of the process conditions, which occur during the project life. [00199] The model development strategy is to start with an initial "rough" model (the consequence of a questionable training data set) then use the model to trigger the gathering of a high quality training data set. As the model is used to monitor the process, annotations and data will be gathered on normal operations, special operations, and abnormal operations. Anytime the model flags an abnormal operation or an abnormal event is missed by the model, the cause and duration of the event is annotated. In this way feedback on the model's ability to monitor the process operation can be incorporated in the training data. This data is then used to improve the model, which is then used to continue to gather better quality training data. This process is repeated until the model is satisfactory.

TV. Data & Process Analysis A. Initial Rough Data Analysis

[00200] Using the operating logs and examining the process key performance indicators, the historical data is divided into periods with known abnormal operations and periods with no identified abnormal operations. The data with no identified abnormal operations will be the training data set.

[00201] Now each measurement needs to be examined over its history to see whether it is a candidate for the training data set. Measurements which should be excluded are:

• Those with many long periods of time as "Bad Value"

• Those with many long periods of time pegged to their transmitter high or low limits

• Those, which show very little variability (except those, which are tightly controlled to their setpoints) • Those that continuously show very large variability relative to their operating range

• Those that show little or no cross correlation with any other measurements in the data set

• Those with poor signal to noise ratios

[00202] While examining the data, those time periods where measurements are briefly indicating "Bad Value" or are briefly pegged to their transmitter high or low limits should also be excluded.

[00203] Once these exclusions have been made the first rough PCA model should be built. Since this is going to be a very rough model the exact number of principal components to be retained is not important. This will typically be around 5% of the number measurements included in the model. The number of PCs should ultimately match the number of degrees of freedom in the process, however this is not usually known since this includes all the different sources of process disturbances. There are several standard methods for determining how many principal components to include. Also at this stage the statistical approach to variable scaling should be used: scale all variables to unit variance. X'= (X - Xavg) / σ Equation ?

[00204] The training data set should now be run through this preliminary model to identify time periods where the data does not match the model. These time periods should be examined to see whether an abnormal event was occurring at the time. If this is judged to be the case, then these time periods should also be flagged as times with known abnormal events occurring. These time periods should be excluded from the training data set and the model rebuilt with the modified data. B. Removing Outliers and Periods of Abnormal Operations [00205] Eliminating obvious abnormal events will be done through the following:

Removing documented events. It is very rare to have a complete record of the abnormal event history at a site. However, significant operating problems should be documented in operating records such as operator logs, operator change journals, alarm journals, and instrument maintenance records. These are only providing a partial record of the abnormal event history.

Removing time periods where key performance indicators, KPIs, are abnormal. Such measurements as feed rates, product rates, product quality are common key performance indicators. Each process operation may have additional KPIs that are specific to the unit. Careful examination of this limited set of measurements will usually give a clear indication of periods of abnormal operations. Figure 9 shows a histogram of a KPI. Since the operating goal for this KPI is to maximize it, the operating periods where this KPI is low are likely abnormal operations. Process qualities are often the easiest KPIs to analyze since the optimum operation is against a specification limit and they are less sensitive to normal feed rate variations.

C. Compensating for Noise

[00206] By noise we are referring to the high frequency content of the measurement signal which does not contain useful information about the process. Noise can be caused by specific process conditions such as two-phase flow across an orifice plate or turbulence in the level. Noise can be caused by electrical inductance. However, significant process variability, perhaps caused by process disturbances is useful information and should not be filtered out.

[00207] There are two primary noise types encountered in refining and chemical process measurements: measurement spikes and exponentially correlated continuous noise. With measurement spikes, the signal jumps by an unreasonably large amount for a short number of samples before returning to a value near its previous value. Noise spikes are removed using a traditional spike rejection filter such as the Union filter.

[00208] The amount of noise in the signal can be quantified by a measure known as the signal to noise ratio (see Figure 10). This is defined as the ratio of the amount of signal variability due to process variation to the amount of signal variability due to high frequency noise. A value below four is a typical value for indicating that the signal has substantial noise, and can harm the model's effectiveness.

[00209] Whenever the developer encounters a signal with significant noise, he needs to make one of three choices. In order of preference, these are:

• Fix the signal by removing the source of the noise (the best answer) • Remove / minimize the noise through filtering techniques • Exclude the signal from the model

[00210] Typically for signals with signal to noise ratios between 2 and 4, the exponentially correlated continuous noise can be removed with a traditional low pass filter such as an exponential filter. The equations for the exponential filter are: Yn = P * Y1^1H-(I-P) * Xn Exponential filter equation Equation 8

P = Exp(-Ts/Tf) Filter constant calculation Equation 9

Ynis the current filtered value Y"'1 is the previous filtered value Xn is the current raw value P is the exponential filter constant Ts is the sample time of the measurement Tf is the filter time constant

[00211] Signals with very poor signal to noise ratios (for example less than 2) may not be sufficiently improved by filtering techniques to be directly included in the model. If the input is regarded as important, the scaling of the variable should be set to de-sensitize the model by significantly increasing the size of the scaling factor (typically by a factor in the range of 2 - 10).

D. Transformed Variables

[00212] Transformed variables should be included in the model for two different reasons.

[00213] First, based on an engineering analysis of the specific equipment and process chemistry, known non-linearities in the process should be transformed and included in the model. Since one of the assumptions of PCA is that the variables in the model are linearly correlated, significant process or equipment non-linearities will break down this correlation structure and show up as a deviation from the model. This will affect the usable range of the model.

[00214] Examples of well known non-linear transforms are:

• Reflux to feed ratio in distillation columns • Log of composition in high purity distillation • Pressure compensated temperature measurement • Sidestream yield • Flow to valve position (Figure 2) • Reaction rate to exponential temperature change

[00215] Second, the data from process problems, which have occurred historically, should also be examined to understand how these problems show up in the process measurements. For example, the relationship between tower delta pressure and feedrate is relatively linear until the flooding point is reached, when the delta pressure will increase exponentially. Since tower flooding is picked up by the break in this linear correlation, both delta pressure and feed rate should be included. As another example, catalyst flow problems can often be seen in the delta pressures in the transfer line. So instead of including the absolute pressure measurements in the model, the delta pressures should be calculated and included.

E. Dynamic Transformations

[00216] Figure 11 shows how the process dynamics can disrupt the correla¬ tion between the current values of two measurements. During the transition time one value is constantly changing while the other is not, so there is no correlation between the current values during the transition. However these two measure¬ ments can be brought back into time synchronization by transforming the leading variable using a dynamic transfer function. Usually a first order with deadtime dynamic model (shown in Equation 9 in the Laplace transform format) is sufficient to time synchronize the data. YXs) = e " θ S Y(s) Equation 9 T s + 1

Y - raw data Y' - time synchronized data T - time constant θ - deadtime S - Laplace Transform parameter

[00217] This technique is only needed when there is a significant dynamic separation between variables used in the model. Usually only 1-2% of the variables requires this treatment. This will be true for those independent variables such as setpoints which are often changed in large steps by the operator and for the measurements which are significantly upstream of the main process units being modeled. F. Removing Average Operating Point

[00218] Continuous refining and chemical processes are constantly being moved from one operating point to another. These can be intentional, where the operator or an optimization program makes changes to a key setpoints, or they can be due to slow process changes such as heat exchanger fouling or catalyst deactivation. Consequently, the raw data is not stationary. These operating point changes need to be removed to create a stationary dataset. Otherwise these changes erroneously appear as abnormal events.

[00219] The process measurements are transformed to deviation variables: deviation from a moving average operating point. This transformation to remove the average operating point is required when creating PCA models for abnormal event detection. This is done by subtracting the exponentially filtered value (see Equations 8 and 9 for exponential filter equations) of a measurement from its raw value and using this difference in the model. X = X - Xfiltered Equation 10

X' - measurement transformed to remove operating point changes X - original raw measurement Xfiitered - exponentially filtered raw measurement

[00220] The time constant for the exponential filter should be about the same size as the major time constant of the process. Often a time constant of around 40 minutes will be adequate. The consequence of this transformation is that the inputs to the PCA model are a measurement of the recent change of the process from the moving average operating point.

[00221] In order to accurately perform this transform, the data should be gathered at the sample frequency that matches the on-line system, often every minute or faster. This will result in collecting 525,600 samples for each measurement to cover one year of operating data. Once this transformation has been calculated, the dataset is resampled to get down to a more manageable number of samples, typically in the range of 30,000 to 50,000 samples.

V. Model Creation [00222] Once the specific measurements have been selected and the training data set has been built, the model can be built quickly using standard tools.

A. Scaling Model Inputs

[00223] The performance of PCA models is dependent on the scaling of the inputs. The traditional approach to scaling is to divide each input by its standard deviation, σ, within the training data set. Xi> = Xi / σ. Equation 11

[00224] For input sets that contain a large number of nearly identical measurements (such as multiple temperature measurements of fixed catalyst reactor beds) this approach is modified to further divide the measurement by the square root of the number of nearly identical measurements.

For redundant data groups x^xJ cσ^ sqrtCN) ) Equation 12

Where N = number of inputs in redundant data group

[00225] These traditional approaches can be inappropriate for measurements from continuous refining and chemical processes. Because the process is usually well controlled at specified operating points, the data distribution is a combina¬ tion of data from steady state operations and data from "disturbed" and operating point change operations. These data will have overly small standard deviations from the preponderance of steady state operation data. The resulting PCA model will be excessively sensitive to small to moderate deviations in the process measurements.

[00226] For continuous refining and chemical processes, the scaling should be based on the degree of variability that occurs during normal process distur¬ bances or during operating point changes not on the degree of variability that occurs during continuous steady state operations. For normally unconstrained variables, there are two different ways of determining the scaling factor.

[00227] First is to identify time periods where the process was not running at steady state, but was also not experiencing a significant abnormal event. A limited number of measurements act as the key indicators of steady state opera¬ tions. These are typically the process key performance indicators and usually include the process feed rate, the product production rates and the product quality. These key measures are used to segment the operations into periods of normal steady state operations, normally disturbed operations, and abnormal operations. The standard deviation from the time periods of normally disturbed operations provides a good scaling factor for most of the measurements.

[00228] An alternative approach to explicitly calculating the scaling based on disturbed operations is to use the entire training data set as follows. The scaling factor can be approximated by looking at the data distribuion outside of 3 standard deviations from the mean. For example, 99.7% of the data should lie, within 3 standard deviations of the mean and that 99.99% of the data should lie, within 4 standard deviations of the mean. The span of data values between 99.7% and 99.99% from the mean can act as an approximation for the standard deviation of the "disturbed" data in the data set. See Figure 12.

[00229] Finally, if a measurement is often constrained (see the discussion on saturated variables) only those time periods where the variable is unconstrained should be used for calculating the standard deviation used as the scaling factor. B. Selecting the Number of Principal Components [00230] PCA transforms the actual process variables into a set of independent variables called Principal Components, PC, which are linear combinations of the original variables (Equation 13). PQ = A ifi * X1 + A i>2 * X2+ A i>3 * X3 + . . . Equation 13

[00231] The process will have a number of degrees of freedom, which represent the specific independent effects that influence the process. These different independent effects show up in the process data as process variation. Process variation can be due to intentional changes, such as feed rate changes, or unintentional disturbances, such as ambient temperature variation.

[00232] Each principal component models a part of the process variability caused by these different independent influences on the process. The principal components are extracted in the direction of decreasing variation in the data set, with each subsequent principal component modeling less and less of the process variability. Significant principal components represent a significant source of process variation, for example the first principal component usually represents the effect of feed rate changes since this is usually the source of the largest process changes. At some point, the developer must decide when the process variation modeled by the principal components no longer represents an independent source of process variation.

[00233] The engineering approach to selecting the correct number of principal components is to stop when the groups of variables, which are the primary contributors to the principal component no longer make engineering sense. The primary cause of the process variation modeled by a PC is identified by looking at the coefficients, Ai?n, of the original variables (which are called loadings). Those coefficients, which are relatively large in magnitude, are the major contributors to a particular PC. Someone with a good understanding of the process should be able to look at the group of variables, which are the major contributors to a PC and assign a name (e.g. feed rate effect) to that PC. As more and more PCs are extracted from the data, the coefficients become more equal in size. At this point the variation being modeled by a particular PC is primarily noise.

[00234] The traditional statistical method for determining when the PC is just modeling noise is to identify when the process variation being modeled with each new PC becomes constant. This is measured by the PRESS statistic, which plots the amount of variation modeled by each successive PC (Figure 13). Unfortunately this test is often ambiguous for PCA models developed on refining and chemical processes.

VI. Model Testing & Tuning [00235] The process data will not have a gaussian or normal distribution. Consequently, the standard statistical method of setting the trigger for detecting an abnormal event at 3 standard deviations of the error residual should not be used. Instead the trigger point needs to be set empirically based on experience with using the model.

[00236] Initially the trigger level should be set so that abnormal events would be signaled at a rate acceptable to the site engineer, typically 5 or 6 times each day. This can be determined by looking at the SPEx statistic for the training data set (this is also referred to as the Q statistic or the DMODx statistic). This level is set so that real abnormal events will not get missed but false alarms will not overwhelm the site engineer.

A. Enhancing the Model [00237] Once the initial model has been created, it needs to be enhanced by creating a new training data set. This is done by using the model to monitor the process. Once the model indicates a potential abnormal situation, the engineer should investigate and classify the process situation. The engineer will find three different situations, either some special process operation is occurring, an actual abnormal situation is occurring, or the process is normal and it is a false indication.

[00238] The new training data set is made up of data from special operations and normal operations. The same analyses as were done to create the initial model need to be performed on the data, and the model re-calculated. With this new model the trigger lever will still be set empirically, but now with better annotated data, this trigger point can be tuned so as to only give an indication when a true abnormal event has occurred.

Simple Engineering Models for Abnormal Event Detection [00239] The physics, chemistry, and mechanical design of the process equipment as well as the insertion of multiple similar measurements creates a substantial amount of redundancy in the data from continuous refining and chemical processes. This redundancy is called physical redundancy when identical measurements are present, and calculational redundancy when the physical, chemical, or mechanical relationships are used to perform independent but equivalent estimates of a process condition. This class of model is called an engineering redundancy model.

/. Two Dimensional Engineering Redundancy Models [00240] This is the simplest form of the model and it has the generic form:

F(y j) = G(x 0 + filtered bias i + operator bias + error i Equation 14

raw bias i = FCy1) - { G(x i) + filtered bias x - + operator bias } Equation 15 = error J filtered bias i = filtered bias ^ + N *raw bias ^1 Equation 16

N - convergence factor ( e.g. .0001 ) Normal operating range: xmin < x < xmax Normal model deviation: -(max_error) < error < (max_error) [00241] The "operator bias" term is updated whenever the operator determines that there has been some field event (e.g. opening a bypass flow) which requires the model to be shifted. On the operator's command, the operator bias term is updated so that Equation 14 is exactly satisfied (error {= 0)

[00242] The "filtered bias" term updates continuously to account for persistent unmeasured process changes that bias the engineering redundancy model. The convergence factor, "N", is set to eliminate any persistent change after a user specified time period, usually on the time scale of days.

[00243] The "normal operating range" and the "normal model deviation" are determined from the historical data for the engineering redundancy model. In most cases the max_error value is a single value; however this can also be a vector of values that is dependent on the x axis location.

[00244] Any two dimensional equation can be represented in this manner. Material balances, energy balances, estimated analyzer readings versus actual analyzer readings, compressor curves, etc. Figure 14 shows a two dimensional energy balance.

[00245] As a case in point the flow versus valve position model is explained in greater detail.

A. The Flow versus Valve Position Model [00246] A particularly valuable engineering redundancy model is the flow versus valve position model. This model is graphically shown in Figure 2. The particular form of this model is:

Flow + filtered bias + operator bias = Cv (VP) (Delta_Pressure / Delta_Pressurereference) Equation 17 where: Flow: measured flow through a control valve Delta_Pressure = closest measured upstream pressure - closest measured downstream pressure Delta_Pressurereference : average Delta_Pressure during normal operation a : model parameter fitted to historical data Cv: valve characteristic curve determined empirically from historical data VP: signal to the control valve (not the actual control valve position)

The objectives of this model are to: • Detecting sticking / stuck control valves • Detecting frozen / failed flow measurements • Detecting control valve operation where the control system loses control of the flow

[00247] This particular arrangement of the flow versus valve equation is chosen for human factors reasons: the x-y plot of the equation in this form is the one most easily understood by the operators. It is important for any of these models that they be arranged in the way which is most likely to be easily understood by the operators.

B. Developing the Flow versus Valve Position Model [00248] Because of the long periods of steady state operation experienced by continuous refining and chemical processes, a long historical record (1 to 2 years) may be required to get sufficient data to span the operation of the control valve. Figure 15 shows a typical stretch of Flow, Valve Position, and Delta Pressure data with the long periods of constant operation. The first step is to isolate the brief time periods where there is some significant variation in the operation, as shown. This should be then mixed with periods of normal operation taken from various periods in history. [00249] Often, either the Upstream_Pressure (often a pump discharge) or the Downstream_Pressure is not available. In those cases the missing measurement becomes a fixed model parameter in the model. If both pressures are missing then it is impossible to include the pressure effect in the model.

[00250] The valve characteristic curve can be either fit with a linear valve curve, with a quadratic valve curve or with a piecewise linear function. The piecewise linear function is the most flexible and will fit any form of valve characteristic curve.

[00251] The theoretical value for "a" is 1/2 if the measurements are taken directly across the valve. Rarely are the measurements positioned there, "a" becomes an empirically determined parameter to account for the actual positioning of the pressure measurements.

[00252] Often there will be very few periods of time with variations in the Delta_Pressure. The noise in the Delta_Pressure during the normal periods of operation can confuse the model-fitting program. To overcome this, the model is developed in two phases, first where a small dataset, which only contains periods of Delta_Pressure variation is used to fit the model. Then the pressure dependent parameters ("a" and perhaps the missing upstream or downstream pressure) are fixed at the values determined, and the model is re-developed with the larger dataset.

C. Fuzzy-net Processing of Flow versus Valve Abnormality Indications [00253] As with any two-dimensional engineering redundancy model, there are two measures of abnormality, the "normal operating range" and the "normal model deviation". The "normal model deviation" is based on a normalized index: the error / max_error. This is fed into a type 4 fuzzy discriminator (Figure 16). The developer can pick the transition from normal (value of zero) to abnormal (value of 1) in a standard way by using the normalized index. [00254] The "normal operating range" index is the valve position distance from the normal region. It typically represents the operating region of the valve where a change in valve position will result in little or no change in the flow through the valve. Once again the developer can use the type 4 fuzzy discriminator to cover both the upper and lower ends of the normal operating range and the transition from normal to abnormal operation.

D. Grouping Multiple Flow / Valve Models [00255] A common way of grouping Flow / Valve models which is favored by the operators is to put all of these models into a single fuzzy network so that the trend indicator will tell them that all of their critical flow controllers are working. In that case, the model indications into the fuzzy network (Figure 4) will contain the "normal operating range" and the "normal model deviation" indication for each of the flow/valve models. The trend will contain the discriminator result from the worst model indication.

[00256] When a common equipment type is grouped together, another operator favored way to look at this group is through a Pareto chart of the flow / valves (Figure 17). In this chart, the top 10 abnormal valves are dynamically arranged from the most abnormal on the left to the least abnormal on the right. Each Pareto bar also has a reference box indicating the degree of variation of the model abnormality indication that is within normal. The chart in Figure 17 shows that "Valve 10" is substantially outside the normal box but that the others are all behaving normally. The operator would next investigate a plot for "Valve 10" similar to Figure 2 to diagnose the problem with the flow control loop.

//. Multidimensional Engineering Redundancy Models [00257] Once the dimensionality gets larger than 2, a single "PCA like" model is developed to handle a high dimension engineering redundancy check. Examples of multidimensional redundancy are: • pressure 1 = pressure 2 = .... = pressure n • material flow into process unit 1 = material flow out of process unit 1 = ... = material flow into process unit 2

[00258] Because of measurement calibration errors, these equations will each require coefficients to compensate. Consequently, the model set that must be first developed is: Fi(y i) = aiGi (Xi) + filtered biasi; i + operator biasi + error^i

F2(y i) = anG2 (Xi) + filtered bias2j i + operator bias2 + error2> i

Fn(y i) = anGn (x i) + filtered biasn> i + operator biasn + errornj j Equation 18

[00259] These models are developed in the identical manner that the two dimensional engineering redundancy models were developed.

[00260] This set of multidimensional checks are now converted into "PCA like" models. This conversion relies on the interpretation of a principle component in a PCA model as a model of an independent effect on the process where the principle component coefficients (loadings) represent the proportional change in the measurements due to this independent effect. In Figure 3, there are three independent and redundant measures, Xl, X2, and X3. Whenever X3 changes by one, Xl changes by ax and X2 changes by a2. This set of relationships is expressed as a single principle component model, P, with coefficients in unsealed engineering units as:

P = ai Xi + a2 X2 + a3X3 Equation 19 Where a3 = 1

[00261] This engineering unit version of the model can be converted to a standard PCA model format as follows: [00262] Drawing analogies to standard statistical concepts, the conversion factors for each dimension, X, can be based on the normal operating range. For example, using 3σ around the mean to define the normal operating range, the scaled variables are defined as:

Xscaie = X normal operating range / 6σ Equation 20

(99.7% of normal operating data should fall within 3 σ of the mean)

Xmid = X mid point of operating range Equation 21

(explicitly defining the "mean" as the mid point of the normal operating range) X' = (X - X1nJd ) / X50316 Equation 22

(standard PCA scaling once mean and σ are determined) Then the P' loadings for X1 are: bi= (ai/Xi.seafc) / ( ∑f=1 (ak/Xk.scale)2 )m Equation 23

(the requirement that the loading vector be normalized)

This transforms P to P' = bi * Xl + b2 * X2 + • • • +bn * XN Equation 24

P' "standard deviation" = bi + b2 + • • • + bn Equation 25

[00263] With this conversion, the multidimensional engineering redundancy model can now be handled using the standard PCA structure for calculation, exception handling, operator display and interaction.

Deploying PCA models and Simple Engineering Models for Abnormal Event Detection /. Operator and Known Event Suppression [00264] Suppression logic is required for the following: • Provide a way to eliminate false indications from measurable unusual events • Provide a way to clear abnormal indications that the operator has investigated • Provide a way to temporarily disable models or measurements for maintenance • Provide a way to disable bad acting models until they can be retuned • Provide a way to permanently disable bad acting instruments.

[00265] There are two types of suppression. Suppression which is automatically triggered by an external, measurable event and suppression which is initiated by the operator. The logic behind these two types of suppression is shown in Figures 18 and 19. Although these diagrams show the suppression occurring on a fuzzified model index, suppression can occur on a particular measurement, on a particular model index, on an entire model, or on a combination of models within the process area.

[00266] For operator initiated suppression, there are two timers, which determine when the suppression is over. One timer verifies that the suppressed information has returned to and remains in the normal state. Typical values for this timer are from 15 - 30 minutes. The second timer will reactivate the abnormal event check, regardless of whether it has returned to the normal state. Typical values for this timer are either equivalent to the length of the operator's work shift (8 to 12 hours) or a very large time for semi-permanent suppression.

[00267] For event based suppression, a measurable trigger is required. This can be an operator setpoint change, a sudden measurement change, or a digital signal. This signal is converted into a timing signal, shown in Figure 20. This timing signal is created from the trigger signal using the following equations:

Yn = P * Yn-1-H(I-P) * Xn Exponential filter equation Equation 26

P = Exρ(-T/Tf) Filter constant calculation Equation 27 Zn = Xn - Yn Timing signal calculation Equation 28

where: Yn the current filtered value of the trigger signal Yn-1 the previous filtered value of the trigger signal Xn the current value of the trigger signal Zn the timing signal shown in Figure 20 P the exponential filter constant Ts the sample time of the measurement Tf the filter time constant

[00268] As long as the timing signal is above a threshold (shown as .05 in Figure 20), the event remains suppressed. The developer sets the length of the suppression by changing the filter time constant, Tf . Although a simple timer could also be used for this function, this timing signal will account for trigger signals of different sizes, creating longer suppressions for large changes and shorter suppressions for smaller changes.

[00269] Figure 21 shows the event suppression and the operator suppression disabling predefined sets of inputs in the PCA model. The set of inputs to be automatically suppressed is determined from the on-line model performance. Whenever the PCA model gives an indication that the operator does not want to see, this indication can be traced to a small number of individual contributions to the Sum of Error Square index. To suppress these individual contributions, the calculation of this index is modified as follows: E2 _ γ« 2 Equation 29

Wi - the contribution weight for input i (normally equal to 1) ei - the contribution to the sum of error squared from input i [00270] When a trigger event occurs, the contribution weights are set to zero for each of the inputs that are to be suppressed. When these inputs are to be reactivated, the contribution weight is gradually returned to a value of 1.

//. PCA Model Decomposition [00271] Although the PCA model is built using a broad process equipment scope, the model indices can be segregated into groupings that better match the operators' view of the process and can improve the sensitivity of the index to an abnormal event.

[00272] Referring again to Equation 29, we can create several Sum of Error Square groupings: £i2 = ∑LlWze? Equation 30

©

[00273] Usually these groupings are based around smaller sub-units of equipment (e.g. reboiler section of a tower), or are sub-groupings, which are relevant to the function of the equipment (e.g. product quality).

[00274] Since each contributor, e;, is always adding to the sum of error square based on process noise, the size of the index due to noise increases linearly with the number of inputs contributing to the index. With fewer contributors to the sum of error square calculation, the signal to noise ratio for the index is improved, making the index more responsive to abnormal events.

[00275] In a similar manner, each principle component can be subdivided to match the equipment groupings and an index analogous to the Hotelling T2 index can be created for each subgroup. p rl,a _- Equation 31

[00276] The thresholds for these indices are calculated by running the testing data through the models and setting the sensitivity of the thresholds based on their performance on the test data.

[00277] These new indices are interpreted for the operator in the identical manner that a normal PCA model is handled. Pareto charts based on the original inputs are shown for the largest contributors to the sum of error square index, and the largest contributors to the largest P in the T2 calculation.

HI. Overlapping PCA models [00278] Inputs will appear in several PCA models so that all interactions affecting the model are encompassed within the model. This can cause multiple indications to the operator when these inputs are the major contributors to the sum of error squared index.

[00279] To avoid this issue, any input, which appears in multiple PCA models, is assigned one of those PCA models as its primary model. The contribution weight in Equation 29 for the primary PCA model will remain at one while for the non-primary PCA models, it is set to zero.

IV. Operator Interaction & Interface Design [00280] The primary objectives of the operator interface are to:

• Provide a continuous indication of the normality of the major process areas under the authority of the operator • Provide rapid (1 or 2 mouse clicks) navigation to the underlying model information • Provide the operator with control over which models are enabled.

Figure 22 shows how these design objectives are expressed in the primary interfaces used by the operator.

[00281] The final output from a fuzzy Petri net is a normality trend as is shown in Figure 4. This trend represents the model index that indicates the greatest likelihood of abnormality as defined in the fuzzy discriminate function. The number of trends shown in the summary is flexible and decided in discussions with the operators. On this trend are two reference lines for the operator to help signal when they should take action, a yellow line typically set at a value of 0.6 and a red line typically set at a value of 0.9. These lines provide guidance to the operator as to when he is expected to take action. When the trend crosses the yellow line, the green triangle in Figure 4 will turn yellow and when the trend crosses the red line, the green triangle will turn red. The triangle also has the function that it will take the operator to the display associated with the model giving the most abnormal indication.

[00282] If the model is a PCA model or it is part of an equipment group (e.g. all control valves), selecting the green triangle will create a Pareto chart. For a PCA model, of the dozen largest contributors to the model index, this will indicate the most abnormal (on the left) to the least abnormal (on the right) Usually the key abnormal event indicators will be among the first 2 or 3 measurements. The Pareto chart includes a red box around each bar to provide the operator with a reference as to how unusual the measurement can be before it is regarded as an indication of abnormality.

[00283] For PCA models, operators are provided with a trend Pareto, which matches the order in the bar chart Pareto. With the trend Pareto, each plot has two trends, the actual measurement (in cyan) and an estimate from the PCA model of what that measurements should have been if everything was normal (in tan).

[00284] For valve / flow models, the detail under the Pareto will be the two dimensional flow versus valve position model plot. From this plot the operator can apply the operator bias to the model.

[00285] If there is no equipment grouping, selecting the green triangle will take the operator right to the worst two-dimensional model under the summary trend.

[00286] Operator suppression is done at the Pareto chart level by selecting the on/off button beneath each bar. BIBLIOGRAPHY

/. U.S. Patent Documents

1 5 859 964 1/12/99 Wang, et ^» "System and method for performing real time ' ' data acquisition, process modeling and fault detection of wafer fabrication processes"

2 5,949,678 9/7/99 Wold, et al, "Method for Monitoring Multi variable Processes" 3 6 522 978 2/18/02 Chen, et al, "Paper web breakage prediction using ' ' principal components analysis and classification and regression trees" 4 f\ 36R Q75 4/Q/O? Balasubramhanya, et al, "Method and apparatus for ' ' monitoring a process by employing principal component analysis" 5 s Af- ^ o77 i QIi <r /Q2 Chen, et aϊ, "Paper web breakage prediction using ' ' principal components analysis and classification and

//. Literature

1. Cardoso, J. "Fuzzy Petri Nets : An Overview", 13* Word Congress of IFAC, et Vol. I : Identification II, Discrete Event Systems, San Francisco, CA, USA, June 30 - My 5, 1996, pp. 443-448.

2. Jackson, E. " A User's Guide to Principal Component Analysis ", John Wiley & Sons, 1991

3. Kourti, T. "Process Analysis and Abnormal Situation Detection: From Theory to Practice", JJEEE Control Systems Magazine, Oct. 2002, pp. 10 - 25

4. Ku, W. "Disturbance Detection and Isolation for Statistical Process Control in Chemical Processes", PhD Thesis, Lehigh University, August 17,1994

5. Martens, H., "Multivariate Calibration", John Wiley & Sons, 1989 & Naes, T.,

6. Piovoso, M.J., "Process Data Chemometrics", JJEEE Trans on Instrumentation et al and Measurement, Vol. 41, No. 2, April 1992, pp. 262 - 268 APPENDIX 2

Principal Component Analysis Models

APPENDIX 2 A

The FCC-PCA Model: 15 Principal Components (Named)

With Sensor Description, Engineering Units, and Principal Component Loading

1. Overall Pressure Balance

1 MAIN FRACTIONATORBOTTOMOFSHEDS KG/CM2 1.44E-01 2 REGENERATOROVERHEADLINEPRESSURE KG/CM2 1.44E-01 3 FLUEGAS FROM REGENERATOR PRESSURE KG/CM2 1.44E-01 4 COLDFLUEGASTOTERTIARYCYCLONE KG/CM2 1.44E-01 5 WETGASCOMPRESSOR 1STSTAGE DISCHARGE PRESSURE KG/CM2 1.44E-01

2. Regenerator Heat Balance

1 FLUE GAS TO TERTIARY CYCLONE TEMPERATURE DEGC -1.82E-01 2 FLUE GAS FROM REGENERATOR TEMPERATURE DEGC -1.81 E-01 3 FLUE GAS COOLER GAS INLET TEMPERATURE DEGC -1.76E-01 4 REGENERATOR PLENUM NW TEMPERATURE DEGC -1.75E-01 5 REGENERATOR OVERHEAD FLUE GAS TEMPERATURE DEGC -1.70E-01

3. Coke Burn in Regenerator

1 AIR BLOWER FLOW KM3/HR 1.74E-01 2 AIR INTO AIR BLOWER FLOW KM3/HR 1.74E-01 3 AIR BLOWER TURBINE SPEED RPM 1.73E-01 4 AIR BLOWER TOTAL AIR SP OUTPUT PCT 1.70E-01 5 MAIN AIR TO REGENERATOR BURNER FLOW KSM3/HR 1.54E-01

4. Feed Rate

1 WET GAS COMPRESSOR 1 ST STAGE SUCTION DEGC 1.71 E-01 TEMPERATURE 2 REGENERATOR DENSE BED AIR VELOCITY M/SEC -1.63E-01 3 PRIMARY CYCLONE INLET VELOCITY M/SEC -1.56E-01 4 SECONDARY CYCLONE INLET VELOCITY M/SEC -1.56E-01 5 REGENERATOR DILUTE PHASE AIR VELOCITY M/SEC -1.56E-01

5. Reactor Cyclones

1 MAIN FRACTIONATOR SLURRY PUMP AROUND DEGC 8.03E-02 TEMPERATURE 2 4TH SIDESTREAM TO FCCU FEED DRUM M3/HR 6.07E-02 3 FLUE GAS CO LEVEL VPPM 5.02E-03 4 REGENERATOR TORCH OIL ATOMISING STEAM FLOW KG/HR 9.26E-02 5 AERATION STM TO REACTOR STAND PIPE FLOW KG/HR 4.56E-03 6. Air Blower Capacity

1 FRESH FEED PREHEAT TEMPERATURE DEGC 1.95E-01 2 FEED TO REACTOR RISER TEMPERATURE DEGC 1.95E-01 3 AIR BLOWER TURBINE STEAM SUPPLY KG/CM2 -1.93E-01 4 STEAM DRUM PRESSURE KG/CM2 -1.92E-01 5 STEAM TO WET GAS COMPRESSOR TURBINE KG/CM2 -1.87E-01

7. Cat Circulation Pressure Balance

1 STEAM DRUM PRESSURE KG/CM2 2.35E-01 2 STEAM TO SUPERHEATER TEMPERATURE DEGC 2.25E-01 3 STEAM DRUM VALVE POSITION PCT -2.15E-01 4 BOILER FEED WATER FLOW TO STEAM DRUM M3/HR -2.08E-01 5 REACTOR TOTAL FEED FLOW M3/HR 1.85E-01

8. Steam Drum Operation

1 REACTOR SPENT JBEND AERATION STEAM VALVE POSITION PCT -2.48E-01 2 REGENERATOR AERATION STEAM J BEND VALVE POSITION PCT -2.34E-01 3 REGENERATOR TORCH OIL ATOMISING STEAM FLOW KG/HR 2.12E-01 4 AERATION STEAM TO REACTOR STAND PIPE PRESSURE KG/CM2 1.89E-01 5 REACTOR AERATION STM SPENT J BEN KG/HR -1.78E-01

9. Control Of Aeration Steam

1 REACTOR STRIPPER LEVEL PCT -2.39E-01 2 REACTOR LEVEL PCT -2.37E-01 3 REACTOR STRIPPER HOLDUP TONS -2.37E-01 4 REGENERATOR OVERFLOW WELL TEMPERATURE DEGC 1.79E-01 5 REACTOR/REGENERATOR DELTAP KGF/CM2A -1.74E-01

10. Stripping Efficiency

1 MAIN FRACTIONATOR SLURRY PUMP AROUND DEGC -2.46E-01 TEMPERATURE 2 SLURRY PRODUCT TO FUELOIL BLENDING DEGC -2.44E-01 3 FCC FEED TO PREHEAT EXCHANGER TEMPERATURE DEGC -2.44E-01 4 FEED TO REACTOR RISER BYPASS DEGC -2.36E-01 5 FCC FEED TO PREHEAT EXCHANGER DEGC -2.34E-01

11. Cat Circulation Energy Balance

1 REACTOR RISER VELOCITY M/SEC -2.41 E-01 2 TOP STEAM STRIPPER PRODUCT TEMPERATURE DEGC 1.80E-01 3 FCC FEED PUMP SUCTION TEMPERATURE DEGC -1.68E-01 4 FRESH FEED PREHEAT TEMPERATURE DEGC -1.66E-01 5 FEED TO REACTOR RISER TEMPERATURE DEGC -1.66E-01 12. Stripper Inventory

1 STEAMTODESUPERHEATERTEMPERATURE DEGC 3.21 E-01 2 STEAMDRUMPRESSUREVALVEPOSITION PCT -2.84E-01 3 STEAMTOREFINERYHEADER TONNE/HR -2.78E-01 4 STEAMTOSUPERHEATERFLOW TONNE/HR -2.73E-01 5 STEAMTOSUPERHEATERFLOW TONNE/HR -2.68E-01

13. Flue Gas Cooler

1 STRIPPEDSLURRYTEMPERATURE DEGC 2.36E-01 2 TOP STEAM STRIPPER PRODUCT TEMPERATURE DEGC 2.27E-01 3 FCC BOTTOMS TO FUEL OIL BLENDING M3/HR 2.21 E-01 4 FEED TO REACTOR RISER VALVE POSITION PCT -2.08E-01 5 STEAM TO DESUPERHEATER TEMPERATURE DEGC 2.00E-01

14. Regenerator Cyclone Temperature

1 AIRFROMTERTIARYFINESHOPPERPRESSURE KG/CM2 -5.21 E-01 2 REGENERATORSTANDPIPEAERATIONVALVEPOSITION PCT 5.13E-01 3 REGENERATORSTANDPIPEAERATIONFLOW . SM3/HR 4.98E-01 4 TERTIARYFINESCOOLINGAIRFLOW SM3/HR -1.88E-01 5 REACTOR AERATION STEAM STAND PIPE VALVE POSITION PCT -1.22E-01

15. Tertiary Cyclones

1 MAIN FRACTIONATOR SLURRY PUMP AROUND DEGC -4.29E-02 TEMPERATURE 2 4TH SIDESTREAM TO FCCU FEED DRUM M3/HR -2.78E-02 3 FLUE GAS CO LEVEL VPPM -1.12E-02 REGENERATOR TORCH OIL ATOMISING STEAM KG/HR 5.77E-02 REACTOR AERATION STEAM TO REACTOR STANDPJPE KG/HR 1.66E-02 APPENDIX 2 B: CATALYST CIRCULATION PCA TAGS The CCR-PCA Model: 6 Principal Components

With Sensor Description and Engineering Units

APPENPIX 2 C

The CLE-PCA Model: 15 Principal Components (Named)

With Sensor Description, Engineering Units, and Principal Component Loading

1. Principle Component 1

1 SPONGE ABSORBER SAFETY VALVE OUTPUT PCT -1.41E-01 2 C2- TO SPONGE ABSORBER FLOW RATE KSM3/HR -1.40E-01 3 SPONGE ABSORBER OVERHEAD FLOW SM3/HR -1.39E-01 4 CAT GAS COMP 2ND STAGE DISCHARGE TEMP DEGC -1.38E-01 5 CAT GAS FLOW TO HX KSM3/HR -1.37E-01

2. Principle Component 2

1 MID PA TO DEETHANIZER REBOILER M3/HR -1.81E-01 2 MAIN FRAC MID PA HX TEMP DEGC 1.75E-01 3 HX INLET TEMP FR MAIN FRAC MID PA DEGC 1.73E-01 4 MAIN FRAC MID PA DRAW TEMP DEGC 1.55E-01 5 MAIN FRAC MID PA TEMP DEGC 1.54E-01

3. Principle Component 3

1 MAIN FRAC. OVHD TEMP DEGC 1.65E-01 2 MAIN FRAC TPA RETURN TEMP DEGC 1.61E-01 3 INT STG COOL HX TEMP TO DEETHANIZER DEGC 1.61E-01 4 CAT GAS TO CAT HAS COMP TEMP DEGC 1.58E-01 5 CAT GAS COMP 1 ST STAGE SUCTION TEMP DEGC 1.57E-01

4. Principle Component 4

1 CAT NAPHTHA SPLITTER TRAY 10 TEMP DEGC 2.77E-01 2 CAT NAPHTHA SPLITTER TRAY 6 TEMP DEGC 2.72E-01 3 CAT NAPHTHA SPLITTER TRAY 4 TEMP DEGC 2.71E-01 4 MAIN FRAC MID PA REBOIL SHELL I/L TEMP DEGC 2.63E-01 5 MAIN FRAC MID PA REBOIL TUBE 0/L TEMP DEGC 2.56E-01

5. Principle Component 5

1 MAIN FRAC OVHD LEVEL Output PCT -2.00E-01 2 DISTILLATE FLOW TO DEETHANIZER M3/HR -1.94E-01 3 DEETHANIZER BOTTOMS LEVEL Output PCT -1.94E-01 4 DEETHANIZER BTMS FLOW TO DEBUTANIZER M3/HR -1.51E-01 5 DISTILLATE FLOW TO DEETHANIZER Output PCT -1.32E-01 6. Principle Component 6

1 BTMS PRODUCT TEMP TO MAIN FRAC STRIP HX DEGC -1.65E-01 2 SLURRY PRODUCT TO FO BL TEMP DEGC -1.63E-01 3 FCC FEED TO MAIN FRAC BTMS HX DEGC -1.62E-01 4 CATGAS PRESS TO WET GAS COMP FOR FLARE KG/CM2 -1.61E-01 5 CAT GAS PRESS TO WET GAS COMP KG/CM2 -1.60E-01

7. Principle Component 7

1 SPA RETURN TO MAIN FRAC FLOW M3/HR -2.10E-01 2 MAIN FRAC TEMP BELOW TRAY 1 Output PCT -2.06E-01 3 MAIN FRAC BELOW TRAY 1 TEMP DEGC 1.78E-01 4 MAIN FRAC TEMP BELOW TRAY 1 DEGC 1.73E-01 5 MAIN FRAC TRAY 1 TEMP CONTRL DEGC 1.69E-01

8. Principle Component 8

1 DEBUTANIZER TRAY 5 DOWNCOMER TEMP DEGC 2.74E-01 2 DEBUTANIZER TRAY 5 DOWNCOMER TEMP DEGC 2.74E-01 3 DEBUTANIZER REBOIL TO MAIN FRAC MPA HX DEGC 2.29E-01 4 DEBUTANIZER BOTTOMS TEMP DEGC 2.13E-01 5 DEBUTANIZER REBOIL RETURN TEMP DEGC 1.96E-01

9. Principle Component 9

1 DEBUTANIZER REBOIL RETURN TEMP DEGC -2.34E-01 2 DEBUTANIZER BTM TO REBOIL TEMP DEGC -2.22E-01 3 DEBUTANIZER BOTTOMS TEMP DEGC -2.17E-01 4 DEETHANIZER REBOIL RETURN TEMP DEGC 2.12E-01 5 DEETHANIZER BOTTOMS TEMP TO DEBUTANIZER DEGC 2.03E-01

10. Principle Component 10

1 DEBUTANIZER SAFETY VALVE Output PCT 1.87E-01 2 MAIN FRAC TRAY 1 TEMP CONTRL DEGC -1.77E-01 3 MAIN FRAC TEMP BELOW TRAY 1 DEGC -1.77E-01 4 MAIN FRAC TEMP BELOW TRAY 1 DEGC -1.72E-01 5 FCC FEED TO MAIN FRAC BTMS HX DEGC -1.71E-01

11. Principle Component 11

1 DEBUTANIZER MIN COND SUB-COOL TEMP DEGC 1.90E-01 2 MAIN FRAC BTMS RETURN TEMP CNTL DEGC -1.72E-01 3 BTMS RETURN TO MAIN FRAC TEMP DEGC -1.72E-01 4 SPA RETURN TO MAIN FRAC DEGC -1.71E-01 5 DEBUTANIZER OVERHEADS TEMP DEGC 1.68E-01 12. Principle Component 12

1 TPA FLOW TO MAIN FRAC M3/HR -2.35E-01 2 TPA TO MAIN FRAC Output PCT -2.28E-01 3 MAIN FRAC OVHD TEMP CNTL DEGC 2.02E-01 4 MAIN FRAC OVERHEADS TEMP DEGC 2.00E-01 5 MAIN FRAC OVERHEADS TEMP DEGC 1.99E-01

13. Principle Component 13

1 FCCU FRESH FEED RATE M3/HR 2.06E-01 2 TOTALHCDPRODUCT M3/HR 1.80E-01 3 HCDPRODUCTTOG0HF2 M3/HR 1.77E-01 4 SPONGEABSORBEROVERHEADSTEMP KG/CM2 -1.77E-01 5 SPONGEABSORBEROVERHEADSTEMP KG/CM2 -1.77E-01

14 Principle Component 14

1 LEAN OIL TO DEETHANIZER Output PCT 2.03E-01 SPONGEABSORBEROVERHEADSTEMP KG/CM2 1.89E-01 SPONGEABSORBEROVERHEADSTEMP KG/CM2 1.88E-01 TOTALHCD PRODUCT M3/HR 1.73E-01 HCD PRODUCTTOG0HF2Output PCT 1.69E-01

15 Principle Component 15

1 WET GAS COMP 1ST STG FRUM INTERFACE LEVEL PCT -3.05E-01 SOUR WATER FLOW TO HX M3/HR -2.99E-01 MAIN FRAC OVHD DRUM SW LEVEL Output PCT -2.94E-01 WET GAS COMP 1 ST STG INT LEVEL Output PCT -2.30E-01 WET GAS COMP 2ND STG INT LEVEL Output PCT -1.81 E-01 APPENDIX 3

ENGINEERING MODELS / INFERENTIALS

A. Regenerator Stack Valves Monitor

The regenerator stack valves A and B values are cross-checked against the

differential pressure controller output. Under normal conditions they should all

match up.

B. Regenerator-Cyclones Monitor:

C. C4101 Air Blower Monitor

D. Carbon Balance:

This monitor focuses on the T-statistic of the 4th principal component of the

Catalyst Circulation CCR-PCA model.

E. Cat-Carryover-to-Main Fractionator:

This monitor checks whether the following variables are within limits (a) the Reactor stripper level

(b) Reactor differential pressure,

(c) Main Fractionator bottoms strainer differential pressure and

(d) Slurry Pumparound from the Main Fractionator pressure

F. C4201 Wet Gas Compressor:

G. Valve-Flow-Models

There are a total of 12 valve models developed for the AED application. All the

valve models have bias-updating implemented. The flow is compensated for the

Delta Pressure in this manner:

Compensated Flow = FL / (DP/ StdDP)λa, where

FL= Actual Flow, DP = Upstream Pressure - Downstream Pressure, StdDP =

Standard Delta Pressure, a are parameters. A plot is then made between the

Estimated Compensated Flow and the Actual Compensated Flow to check the

model consistency (X-Y plot). The following is the list of the 12 valve flow

models. The order of the variables in the models below are thus: (OP, FL, UpP-

DnP, StdDP, a, Bound)