The 40-Second Motor Burnout: Tank Level Hysteresis, Schmitt Triggers & Anti-Short-Cycling

FIG 1.1 // PROCESS VESSEL LEVEL HYSTERESIS & SCHMITT TRIGGERDUAL-THRESHOLD DEADBAND & NEMA MG 1 PROTECTION ARCHITECTURE

1. The 40-Second Motor Burnout & The Welded Contactor

At 03:14 AM on a frigid November night inside a commercial beverage bottling and pasteurization plant, a pungent chemical stench of charred epoxy and vaporized copper filled the motor control center (MCC). Seconds later, the main 480V substation feeder breaker tripped on instantaneous magnetic overcurrent, plunging the entire packaging line into total blackout.

The culprit was the primary 75 kW (100 HP) centrifugal pump (P-201) feeding a 50,000-gallon raw water buffer vessel (TK-201). When electricians unbolted the enclosure of motor starter contactor M-201, they found the silver-cadmium contacts burned into molten spheres and permanently welded shut. The motor windings had reached temperatures exceeding 240°C, destroying the Class H insulation and shorting all three phases directly to ground.

During the root-cause investigation, controls engineers pulled the PLC program archive. A junior automation technician had implemented the tank filling routine using a single naive analog comparator:

The incoming city water feed was turbulent, and the liquid surface suffered continuous 2-inch ripples from an adjacent agitator. As the tank filled to exactly 50.0%, the radar level transmitter (LT-201) dithered between 49.9% and 50.1% every 300 to 500 milliseconds.

In less than 12 minutes, the 480V contactor slammed open and closed over 1,400 times. The motor inrush current (6× to 8× full load amperage) never subsided. Heat accumulated in the copper stator windings exponentially faster than the cooling fan could dissipate it, incinerating a $14,000 motor and causing $85,000 in unscheduled downtime.

2. Engineering Theory: Schmitt Triggers, Deadband Sizing & Fluid Slosh Dynamics

To stop rapid chattering, control engineers implement Hysteresis (also known as a Schmitt Trigger or Differential Gap). Instead of a single switching point, the control algorithm defines two discrete, separated thresholds:

1. Lower Threshold (H_start): Turn the pump ON when level drops below 20%.
2. Upper Threshold (H_stop): Turn the pump OFF when level reaches 80%.
3. Deadband (ΔH): Between 20% and 80%, the controller holds its previous state. No switching can occur inside the deadband!

Sizing the Hysteresis Deadband vs. Vessel Geometry

The time required to complete one full fill-drain cycle (t_cycle) is a direct mathematical function of the deadband volume:

For a 50,000-gallon vessel with a 1,200 GPM pump and a 400 GPM average process draw:

• With a naive 0.2% ripple at 50%: ΔV = 100 gal → t_cycle = 18.7 seconds (192 starts/hour — fatal!)
• With a 60% hysteresis band (20% to 80%): ΔV = 30,000 gal → t_cycle = 5,625 seconds ≈ 1.56 hours (0.64 starts/hour — rock solid!)

3. Stage 1: The Naive Single-Setpoint Flaw (Destructive Short-Cycling)

Examine the Stage 1 circuit below. It implements the exact naive boolean comparison that destroyed the bottling plant's motor:level.Q → comp.A (operation="lt") with setpoint = 50%.

We have wired an edge trigger (R_TRIG) into a COUNTER block to record every time the motor contactor is energized.

4. Stage 2: Dual Threshold Hysteresis with ANALOG_DIFFERENTIAL (Schmitt Trigger)

To solve short-cycling once and for all, Stage 2 introduces the ANALOG_DIFFERENTIAL functional block. It features independent turn-on and turn-off thresholds:

• onThreshold = 20: When the tank level drops down to or below 20%, the block turns its output Q to TRUE (starts the fill pump).
• offThreshold = 80: When the tank level rises up to or above 80%, the block turns its output Q to FALSE (shuts the fill pump off).
• The Deadband: While the level is anywhere between 20% and 80%, the block retains its existing state.

5. Stage 3: Closed-Loop Dynamic Storage Tank with Wave Slosh Filter & Safety Alarms

In real-world process vessels, liquid is continuously consumed by downstream equipment while the pump delivers pressurized inflow. Furthermore, incoming fluid creates surface sloshing, splashing, and acoustic radar echo noise.

Stage 3 couples a dynamic physical vessel with industrial signal conditioning:

1. Dynamic Plant Model (ANALOG_RAMP + ANALOG_MUX): When the pump is ON, inflow exceeds outflow (level rises at 7%/s). When the pump is OFF, gravity drain empties the tank at 4%/s.
2. First-Order Low-Pass Filter (ANALOG_FILTER): Uses an exponential moving average with time constant τ = 1,000 ms to eliminate turbulence before feeding the Schmitt trigger.
3. Safety Protection Permissives:
   • High-High Limit (LSHH-201 at 92%): Independent trip gate that immediately de-energizes the pump contactor if fluid nears tank overflow.
   • Low-Low Dry-Run Alarm (LSLL-201 at 8%): Warns operators of suction well starvation to protect downstream impellers from cavitation.

6. Commissioning Checklist & Plant Floor Level Sensor Proof Testing

• Calculate Minimum Deadband from Motor Nameplate: Verify the motor's rated maximum starts per hour with the manufacturer (f_max). Ensure the volume deadband ΔV guarantees t_cycle ≥ 3600 / f_max under worst-case peak inflow and minimum gravity consumption.
• Instrument Stilling Well Verification: Ultrasonic and radar transmitters must be mounted inside a vertical, perforated stilling well (or bypass bridle) if the vessel has mechanical agitation, turbulent top-filling nozzles, or boiling liquids.
• Damping Parameter Alignment: Configure transmitter internal damping (2 to 5 seconds) to suppress physical surface ripples before transmitting 4–20 mA signals to the analog input card.
• Independent High-High Float Switches (LSHH): Never rely solely on an analog transmitter for overflow prevention. A physical magnetic float or tuning fork switch must be hardwired directly into the motor starter safety circuit.
• Fail-Safe Signal Behavior (NAMUR NE 43): Ensure that sensor wire break (<3.6 mA) or short circuit (>21.0 mA) causes the PLC to immediately default to a safe state (stop filling pump, trigger operator diagnostic alarm).
• Quarterly Contactor Tip Inspection: Periodically unbolt MCC starter covers and inspect silver-alloy contact tips for pitting, carbon buildup, or signs of contact chatter arcing.