Fault Tree Analysis
Fault Tree Analysis
The flat tire example is pictured using a fault tree logic diagram shown in Fig 1. The circles
denote basic events and the rectangles denote intermediate events and top event. The fish-like
symbol represents the OR logic function. It means that either of the input events will cause the
output state to occur. As shown on Fig. 1 the flat tire is caused by either a defective tire or a worn
tire.
Flat Tire
TOP EVENT
OR
INTERMEDIATE
EVENT
Tire Failure
OR
Defective
Tire
Road
Debris
BASIC EVENT
Worn
Tire
Fig. 1: A fault tree describing the various events contributing to a flat tire
The example shown here is a very simple process. For more complex processes, a number of
additional logic functions are needed to construct a fault tree. A list of commonly used logic
function is given in Table 2. The AND logic function is very important for describing process
that interact in parallel. This means that the output state of the AND logic function is active only
when all of the input states are active.
A A.B
B
AND Gate
A
0
1
0
1
B
0
0
1
1
A+B
0
1
1
1
A
0
1
0
1
B
0
0
1
1
A.B
0
0
0
1
A
0
1
NOT Gate
1
0
Let us consider another example of pressure vessel shown in Fig. 2. The safety system consists
of four valves, which are connected to the tank. The valves will open if the pressure in the tank
exceeds a certain level (for example P0). The content in the tank will be release to the
environment if both valves A1 and A2 on Line-1 or both valves A3 and A4 on Line-2 are open.
What is the probability that the safety system fails to function when needed, i.e. the valves do not
open when the pressure in the tank exceeds P0?
The first step in FTA is to define the Top Event. The Top Event in this case is that the safety
system fails to release the content in the tank when the pressure is more than P 0. The second step
is to construct the Fault Tree showing the necessary conditions or events that must occur in order
for the top event to occur. First, the intermediate events are identified and their logical
relationships to the top-level event are determined. For the safety system of the pressure tank to
fail to work, the following two events must occur simultaneously:
(i) Line-1 fails to open and (ii) Line-2 fails to open
Note that the failure could not occur if either one of these two events does not occur. Therefore,
these two intermediate events are connected with the top event through "AND" logical
relationship.
3
Line-2
Line-1
A2
A4
A1
A3
TANK
Fig. 2: Arrangement of pressure tank and valves
Construction of the fault tree continues by identifying the appropriate events at lower levels and
their logical relationship to the higher-level events. This process is continued until basic failure
events are identified. The basic events are placed at the bottom of the tree. The basic failures
chosen are: (i) Valve 1 fails to open (ii) Valve 2 fails to open, (iii) Valve 3 fails to open and (iv)
Valve 4 fails to open and the resulting fault tree is shown in Fig. 3
The objective of FTA is to compute the probability of the top event based on the probability of
the basic failures. The probability of bottom events can be determined through direct
experimentation, historical experience, or estimation. For example, from past data, we know that
the probability that the valve will fail open when the pressure is more than P 0 is p (A1 fails to
open) = p (A2 fails to open) = p (A3 fails to open) = p (A4 fails to open) = 0.001.
Once the probabilities of the basic events are known the fault tree is solved from the bottom up
using Boolean logic and mathematics. We assume for now that the basic failures are considered
to be independent events. So the probability of the top event is
P (failure to danger mode) = [p (A1 fails to open) + p (A2 fails to open)] [p (A1 fails to open) +
p (A2 fails to open)]
4
AND
OR
A1 fails
to open
OR
A2 fails
to open
A3 fails
to open
A4 fails
to open
REVIEW QUESTIONS
1.
2.
3.
4.
5.
6.
Assume that a windowless room contains three light bulbs (i.e., A, B and C) and one switch.
Develop a fault tree for the top fault event dark room
7. In Question 6 the probabilities of occurrence of fault events fuse failure, switch failure,
power failure, bulb-A failure, bulb-B failure and bulb-C failure are 0.01, 0.02, 0.03,
0.04, 0.05 and 0.06 respectively. Calculate the probability of occurrence of the unsafe event
dark room
REFERENCE
1. Dhillon, B.S. (2003) Engineering Safety: Fundamentals, Techniques, Applications,
World Scientific Publishing Co. Pte. Ltd., Singapore.
2. Crowl, D.A. and Louvar, J.F. (1990) Chemical Process Safety: Fundamentals with
Applications Prentice Hall PTR, New Jersey.