14.4 Intrinsic Safety Barriers, Zener Diodes & Hazardous Area Automation

14.4 Intrinsic Safety Barriers, Zener Diodes & Hazardous Area Automation

In Canadian industrial facilities—such as oil refineries, natural gas compressor stations, petrochemical processing plants, grain elevators, and mining flotation circuits—automated PLC control systems must interface with sensors and actuators located in flammable, combustible, or explosive atmospheres. The Canadian Electrical Code (CEC Part I, CSA C22.1) Section 18 establishes comprehensive mandates for hazardous locations, classifying them into Zones based on explosive risk. Among all explosion protection techniques, Intrinsic Safety (Ex i) is unique because it ensures safety not by containing an explosion, but by eliminating the ignition source entirely.

1. Principles of Intrinsic Safety (Ex i) & Hazardous Area Physics

An explosion requires three simultaneous components (the Fire Triangle): Fuel (flammable gas, vapor, or dust), Oxygen (ambient air), and an Ignition Source (electrical spark or hot surface).

   HAZARDOUS AREA EXPLOSION PROTECTION STRATEGIES:

   1. EXPLOSION-PROOF (Ex d):      2. PURGED / PRESSURIZED (Ex p):  3. INTRINSIC SAFETY (Ex i):
      ┌──────────────────────┐        ┌──────────────────────┐         ┌──────────────────────┐
      │ Heavy Cast Enclosure │        │ Clean Air / N2 Purge │         │ Energy Limited Loop  │
      │ Contains internal    │        │ Keeps flammable gas  │         │ Spark & Heat Cannot  │
      │ explosion; cools gas │        │ out under positive   │         │ Reach MIE Under Any  │
      │ through flame paths. │        │ internal pressure.   │         │ Fault Condition!     │
      └──────────────────────┘        └──────────────────────┘         └──────────────────────┘

The Fundamental Principle of Intrinsic Safety

Intrinsic Safety (certified under standard CSA C22.2 No. 60079-11) limits the total electrical and thermal energy entering the hazardous atmosphere under both normal operating conditions and worst-case component failure conditions. The energy is held well below the Minimum Ignition Energy (MIE) of the specific gas group:

$E_{\text{capacitive}} = \frac{1}{2} C V^2 < \text{MIE}$ $E_{\text{inductive}} = \frac{1}{2} L I^2 < \text{MIE}$

• Hydrogen (Gas Group IIC): MIE is an extraordinarily low $20\ \mu\text{J}$. A static spark undetectable by human touch can cause catastrophic ignition.
• Propane / Methane (Gas Group IIA): MIE is approximately $260\ \mu\text{J}$.

Protection Levels (Ex ia, Ex ib, Ex ic)

Under CEC Section 18 Zone classifications (Zone 0, Zone 1, and Zone 2):

• Ex ia (Zone 0, 1, 2): Equipment must remain completely safe with two independent internal electrical faults applied simultaneously while the circuit is energized. Mandatory for Zone 0 (continuous hazard $>1,000\text{ hours/year}$).
• Ex ib (Zone 1, 2): Equipment must remain safe with one internal fault applied. Permitted in Zone 1 (intermittent hazard $10\text{ to }1,000\text{ hours/year}$).
• Ex ic (Zone 2): Equipment is evaluated only under normal, non-fault operating conditions. Permitted exclusively in Zone 2 ($<10\text{ hours/year}$).

2. Intrinsically Safe (IS) Barriers: Passive Zener vs. Active Galvanic

To connect standard safe-area PLC I/O modules to hazardous-area field instruments, an Associated Apparatus (IS Barrier) must be installed at the boundary between the safe non-hazardous area (control room or MCC) and the hazardous location.

   SAFE NON-HAZARDOUS AREA (CONTROL ROOM)     │ HAZARDOUS AREA (ZONE 0 / 1)
                                              │
                     PASSIVE ZENER BARRIER    │ Field Instrument
   PLC 24 VDC        ┌── Fast Fuse ──/\[R]────┼────────► (4-20 mA Transmitter)
   Analog Input ─────┤       │                │
                     │       ▼ Zener 1        │
                     │       ▼ Zener 2        │
   PLC Common ───────┴───────┴────────────────┼────────► Field Return
                             │                │
                             ▼                │
            Dedicated High-Integrity Ground   │
            (< 1.0 Ohm to Main Electrode)     │

1. Passive Zener Diode Barriers

A passive Zener barrier uses three robust solid-state components:

1. Zener Diodes: Two or three redundant, high-speed Zener diodes connected in parallel to ground. Under normal operating voltages ($<24\text{ V DC}$), the Zeners do not conduct. If a catastrophic high-voltage fault occurs in the safe area (e.g., a 120 V AC or 600 V line crosses into the PLC card), the Zeners immediately avalanche into conduction, clamping the hazardous area voltage to the safe Zener breakdown voltage ($V_z \approx 28\text{ V DC}$).
2. Current-Limiting Resistor ($R$): A precision, wire-wound, non-inductive power resistor wired in series with the field lead. It restricts maximum short-circuit current to a safe value ($I_{sc} = \frac{V_z}{R}$), preventing ignition sparks.
3. Fast-Acting Fuse: Connected ahead of the Zeners. When safe-area overvoltage forces the Zeners to conduct heavy ground-fault current, the fuse blows in milliseconds, permanently disconnecting the safe-area fault.

The Mandatory Dedicated IS Grounding Rule (CEC Rule 18-064)

Because a passive Zener barrier shunts high-voltage fault current directly to earth, its entire safety integrity depends entirely on the electrical ground return path! If the ground connection is severed or has high resistance, fault energy will bypass the barrier and surge straight into the hazardous area, causing an immediate catastrophe.

Under CEC Rule 18-064, passive Zener barriers mandate:

• A dedicated high-integrity grounding conductor connecting the barrier ground busbar directly to the plant's main electrical supply grounding electrode without splices.
• Total grounding loop impedance from the barrier busbar to the main grounding electrode must measure less than 1.0 ohm.
• To guard against broken wires or loose lugs, two independent grounding conductors must be installed in parallel. Each conductor must be sized not smaller than #12 AWG copper (or #10 AWG depending on mechanical protection).

   PASSIVE ZENER BARRIER DUAL GROUNDING MANDATE (CEC RULE 18-064):

   ┌────────────────────────────────────────────────────────┐
   │ Safe Area Control Panel / Barrier Mounting DIN Rail    │
   │                                                        │
   │  [ Barrier 1 ]   [ Barrier 2 ]   [ Barrier 3 ]         │
   │       │               │               │                │
   │   ════╧═══════════════╧═══════════════╧════ IS Busbar  │
   └───────────────┬────────────────────────┬───────────────┘
                   │                        │
     Conductor 1   │ (< 1.0 Ohm Impedance)  │ Conductor 2
     (#12 AWG Cu)  │                        │ (#12 AWG Cu)
                   ▼                        ▼
   ┌────────────────────────────────────────────────────────┐
   │     PLANT MAIN ELECTRICAL GROUNDING ELECTRODE SYSTEM   │
   └────────────────────────────────────────────────────────┘

2. Active Galvanic Isolators

An active galvanic isolator utilizes internal high-frequency isolation transformers, optical couplers, or capacitive barriers to completely isolate the safe-area PLC circuit from the hazardous-area field wiring:

   SAFE AREA (PLC I/O)                          HAZARDOUS AREA FIELD
   24 VDC Logic ───► [ Opto / Transformer ] ───► Isolated 4-20 mA Loop
   0 VDC Common ───► [ Galvanic Isolation ] ───► (No Earth Ground Required!)
                     (1,500 V - 3,000 V Barrier)

Comparison: Passive Zener Barriers vs. Active Galvanic Isolators

3. The Entity Concept & Loop Safety Validation

The Entity Concept is the standardized engineering method used to prove that a specific intrinsically safe field apparatus and a specific associated apparatus (barrier) are mathematically safe when connected together, regardless of who manufactured each individual component.

Entity Parameter Matching Rules

To achieve certified loop safety, the electrician or engineer must compare the barrier output parameters against the field instrument input parameters:

   ASSOCIATED APPARATUS (BARRIER)                    INTRINSICALLY SAFE FIELD DEVICE
   Max Open-Circuit Voltage: V_oc (or U_o)    ≤      Max Safe Input Voltage: V_max (or U_i)
   Max Short-Circuit Current: I_sc (or I_o)   ≤      Max Safe Input Current: I_max (or I_i)
   Max Output Power: P_o                      ≤      Max Safe Input Power: P_max (or P_i)

   Allowed External Capacitance: C_a (or C_o) ≥      Internal Capacitance + Cable Capacitance: (C_i + C_cable)
   Allowed External Inductance: L_a (or L_o)  ≥      Internal Inductance + Cable Inductance: (L_i + L_cable)

Cable Parameter Calculations

Field instrumentation cables contain distributed capacitance ($C_{\text{cable}}$) and distributed inductance ($L_{\text{cable}}$) that store reactive energy. If the cable is too long, the energy stored in its magnetic and electrostatic fields can discharge as an incendiary spark during a short circuit:

$C_{\text{cable}} = \text{Cable Length (m)} \times C_{\text{spec}} (\text{pF/m})$ $L_{\text{cable}} = \text{Cable Length (m)} \times L_{\text{spec}} (\mu\text{H/m})$

The Crucial Inequality: Total cable capacitance plus the field device's internal capacitance ($C_i$) must never exceed the maximum allowable capacitance rating of the barrier ($C_o$): $C_i + C_{\text{cable}} \le C_o$ $L_i + L_{\text{cable}} \le L_o$

4. Simple Apparatus & Field Wiring Standards

Simple Apparatus Exemption (CSA C22.2 No. 60079-11)

A major advantage of Intrinsic Safety is the Simple Apparatus rule. Simple apparatus devices are electrical components or combinations of components that, by their physical nature, are incapable of generating or storing significant electrical energy.

Wiring Separation and Raceway Segregation (CEC Rule 18-066)

To prevent high-voltage safe-area circuits from accidentally inducing energy into intrinsically safe loops, strict physical segregation rules apply:

1. Color Identification: Intrinsically safe cables, terminal blocks, wireways, and junction boxes must be clearly identified with a distinct light blue color (e.g., light blue wire jackets or terminal markers).
2. Physical Spacing: A minimum physical air separation of $50\text{ mm}$ (2 inches) must be maintained between all intrinsically safe conductors and non-intrinsically safe conductors in panels and raceways.
3. Physical Partitioning: Where 50 mm separation is impossible within an enclosure, a continuous, grounded metal partition or certified insulating barrier must separate the wiring.
4. Raceway Prohibitions: Intrinsically safe conductors must never be pulled through the same conduit, cable tray, or multi-conductor cable assembly as non-intrinsically safe circuits!