SIF design

Burner management systems: key functions and SIL considerations

The functions a burner management system performs, which of them are SIFs, and the design points that matter.

2 min read · First Out AI knowledge library

A burner management system (BMS) sequences and protects fired equipment: heaters, boilers, thermal oxidisers. Several of its functions are safety instrumented functions.

Typical functions

FunctionPurposeTypical design
Pre-ignition purgeRemove combustible gas before light-offAir flow proven for a set time and volume; purge permissive
Pilot and main flame provingConfirm ignition within a trial timeFlame scanners with timed trials
Flame failure tripStop fuel on loss of flameSelf-checking scanners, fuel double block and bleed
Low or high fuel pressure tripPrevent unstable combustionPressure transmitters on the fuel header
Low combustion air tripPrevent fuel-rich firingAir flow measurement, fan running
Low process flow trip (heaters)Protect tubes from overheatingPass flow transmitters

Design points

  • Fuel shutdown with two valves in series and a vent between them (double block and bleed); test both valves and the vent.
  • Flame scanners must be self-checking for continuous operation and see their own burner, not the neighbour's flame.
  • Purge requirements come from the equipment design and applicable codes; the BMS enforces them.
  • Separate the BMS safety functions from combustion control.

In First Out AI

The fired heater example (SIF-103), its LOPA scenario, the HAZOP library for heaters and the burner management C&E example show these functions working together.

Written for First Out AI as engineering guidance. It supports engineering work and does not replace it; check every value against your standards, certificates and company rules with a competent functional safety engineer.