Open Journal of Safety Science and Technology
Vol.04 No.03(2014), Article ID:50139,11 pages
10.4236/ojsst.2014.43016

Lessons Learned from Recent Accidents in the Chemical Industry in Japan

Akihiko Hidaka, Yuichiro Izato, Atsumi Miyake

Graduate School of Environment and Information Sciences, Yokohama National University, Yokohama, Japan

Email: akihiko_hidaka@plamatels.co.jp

Copyright © 2014 by authors and Scientific Research Publishing Inc.

This work is licensed under the Creative Commons Attribution International License (CC BY).

http://creativecommons.org/licenses/by/4.0/

Received 28 July 2014; revised 24 August 2014; accepted 22 September 2014

ABSTRACT

Japanese chemical companies should extensively study the accidental fires and explosions that occurred in the industrial complexes of Japan in 2011 and 2012. We picked two major accidents and distributed questionnaires to large chemical companies in the Keihin Complex, Japan. Here, we report the results of our investigation of improvements in process safety.

Keywords:

Chemical Accident, Lessons Learned, Explosion, Fire

1. Introduction

Chemical companies in Japan are currently facing major issues, as described below.

1) The lessons to be learned from the Tohoku Earthquake disaster, which occurred in March, 2011, are still being examined [1] -[3] . 2) Japanese chemical companies should study the accidental fires and explosions that occurred in industrial complexes in Japan in 2011 and 2012 [4] [5] .

Here, we describe the safety improvements that should be implemented, based on the accidental fires and explosions in the two cases mentioned above.

The serious accidents that occurred in industrial complexes in Japan during 2011 and 2012 shocked the chemical industry. And also the Japanese chemical industry had a big subject that they should improve their level.

Accidents occurred at the Tosoh Corporation [4] , Mitsui Chemicals [5] , Nippon Shokubai [6] , Cosmo Oil Chiba [7] , Mitsubishi Chemical Kajima [8] , and Showa Denko Oita. We should reflect on and reexamine these accidents, and improve our technological expertise to prevent such accidents. This should also apply to the development of new factories abroad from now on, and the results of investigations of these accidents and new security measures for disaster prevention should be applied globally. To investigate these accidents, a questionnaire was sent to large chemical corporations with high-pressure gas installations, located in the Kawasaki area in the Keihin complex, Japan. The questionnaire dealt with the accidents at Tosoh in the Nanyo district and Mitsui Chemicals in the Iwakuni-Ootake factory area. The theme we focused on in the investigation was “the emergency shutdown of production facilities, such as industrial complexes”, because both these accidents continued for several hours, ~10 h, after from the emergency shutdown of the production facilities. We also tried to clarify what has already been done and what has not yet been done by Japanese chemical companies.

2. Tosoh Accident

This accident occurred on November 13, 2011. The process from which the accident arose is VCM production facilities (Figure 1). And the process which explosion and fire generated is HCl tower in it (Figure 2). The timeline is shown in Table 1. The displayed times show the progress from the time at which the emergency block valve was closed [4] (refer the Table 1).

2.1. Presumed Cause of the Explosion

HCl reacted with VCM to produce 1,1-EDC, catalyzed by FeCl3, which was produced by HCl and iron rust inside the back-flow tank of the HCl tower.

Table 1. Timeline of Tosoh accident [4] .

Figure 1. Flow chart of Tosoh VCM production facilities.

Figure 2. Flow chart around HCl tower of VCM process.

HCl + VCM → 1,1-EDC + 62 kJ/mol (exothermic reaction)

The temperature of the back-flow tank of the HCl tower increased, because this reaction is exothermic, and the reaction rate increased exponentially. After 6 h under these conditions, this reaction ruptured and destroyed the back-flow tank of the HCl tower.

2.2. Lessons to Be Learned from the Tosoh Accident

As mentioned above, we investigated the issues involved in this accident by sending questionnaires to large chemical corporations with high-pressure gas installations in the Kawasaki Keihin complex in Japan.

1) The main items in the questionnaire regarding the Tosoh accident were as follows.

a) Monitoring during normal operation

i) Does it clear the normal range of control for important equipment?

ii) Are the important alarms located separately from the DCS alarm?

iii) Can the slopes of important temperatures or pressures be easily identified?

b) Prior examination, and monitoring of emergency

i) Do you consider abnormal reactions or sub-reactions when operation is irregular?

ii) Do you consider the possibility of iron mixing, which could cause an abnormal reaction?

iii) Do you monitor the plant conditions after setting the appropriate control range for an abnormal reaction?

c) Preparation for emergency shutdown

i) Was the emergency shutdown manual prepared based on sufficient information?

ii) Is the person who is to initiate the emergency shutdown and evacuation identified?

iii) Is regular training regarding emergency shutdown provided?

d) Action after emergency shutdown

i) Are the plant safety conditions after an emergency shutdown clear?

ii) Are the procedures for reversing the emergency shutdown and returning to normal operation clear? Also, who is the person who approves this action?

2) The results from the main questionnaire are shown below.

a) Monitoring during normal operation

i) Does it cover the normal range of control for important equipment?

Yes: 11 facilities; No: 1 facility

Figure 3 shows a typical monitoring during normal operation in Japan.

◆ Examples of reply

With regard to the operating conditions, the range is defined as a job standard or a process control standard value.

Because abnormal values are defined by the DCS system, this can be detected by the alarm.

ii) Are the important alarms located separately from the DCS alarm?

Yes: 10 facilities; No: 2 facilities

Figure 4 shows that the important alarm located separately from DCS in Japan.

iii) Can the slopes of important temperature or pressure be easily identified?

Yes: 12 facilities; No: 0 facilities

Figure 5 shows typical trend records of conditions in Japan.

Monitoring during normal operation

Figure 3. Observation of operating condition by DCS [questionnaire a)-i)].

Figure 4. Important alarms located separately from DCS [questionnaire a)-ii)].

Figure 5. Trend records of conditions [questionnaire a)-iii)].

b) Prior examination, and monitoring of emergency

i) Do you consider abnormal reactions or sub-reactions when operation is abnormal?

Yes: 11 facilities; No: 1 facility

◆ Example of examination

The danger of material B polymerizing was examined by considering potential factors that could lead to temperature increases caused by heat of polymerization, leading to explosions. The factors that we considered are the material, operation, facility, and staff. Based on this analysis, we are now planning the necessary countermeasures.

ii) Do you consider the possibility of iron mixing, which could cause an abnormal reaction?

Yes: 11 facilities; No: 1 facility

◆ Examples of answer

Company A

We make it a rule in our standard operation to explore the influence of corrosion or damage to the installation and lower equipment. Previous experience and the process licenser’s opinion suggest that there is almost no possibility of an abnormal reaction being caused by mixing of rust, so this is not examined.

Company B

In response to this accident, we examined the possibility that corrosion products (iron rust, etc.) could trigger an abnormal reaction.

iii) Are the control points for normal and abnormal reactions identified and monitored continuously?

Yes: 11 facilities; No: 1 facility

◆ Examples of answer

The controls are identified and are always supervised in DCS.

(Trend monitoring at control points, alarms set up at these points) A range deviation alarm is set up in four steps; interlock is set up in two steps.

c) Preparation for emergency shutdown

i) Was the emergency shutdown manual prepared based on sufficient information?

Yes: 12 facilities; No: 0 facilities

Figure 6 shows the example of emergency procedure prepared card style.

◆ Examples of answer

We revised the emergency shutdown manual for the following situations:

-gas, water, and electricity supply stoppages

-abnormalities caused by a natural disaster

-plant abnormalities

ii) Is the person who makes the decision and the exemption-from-responsibility regulation for a scram defined?

Yes: 12 facilities; No: 0 facilities

Figure 7 shows the example of exemption from responsibility regulation in Japan.

iii) Is regular training regarding emergency shutdown provided?

Figure 8 shows the example of the training of emergency shutdown.

Yes: 12 facilities; No: 0 facilities

◆ Examples of answer

Figure 6. Example of emergency procedures prepared card style [questionnaire c)-i)].

Figure 7. Example of exemption from responsibility regulation [questionnaire c)-ii)].

Figure 8. The training of emergency shutdown [questionnaire c)-iii)].

Training on troubleshooting is carried out regularly. However, because of generational changes, traditional technical information is currently required. The plant has now been operating continuously for four years, so staff have less experience of plant shutdown and startup. Moreover, operation is now stable, and because there is little experience of scram operation of equipment, the necessity for training is increasing. Troubleshooting training is therefore periodically conducted using training facilities etc.

d) Action after emergency shutdown

i) Is the safe state after an emergency shutdown clear?

Yes: 8 facilities; No: 4 facilities

Figure 9 shows the example of the observation of plant conditions after emergency shutdown.

ii) Is the procedure for canceling an emergency shutdown clear? Is the decision maker clearly identified?

Have a procedure: 4 facilities;

Only decision maker specified: 3 facilities;

No procedure and no decision maker specified: 5 facilities.

Figure 10 shows the example of the procedure of canceling for emergency shutdown condition.

Figure 9. Observation of plant conditions after emergency shutdown [questionnaire d)-i)].

Figure 10. Procedure of canceling for emergency shutdown condition [questionnaire d)-ii)].

◆ Examples of answer

After discussion with the division manager, the plant manager and factory area manager decide conditions for canceling an emergency shutdown.

3. Mitsui Chemical Accident

The accident at the Mitsui Chemical Otake factory was examined as the second accident case study. The process from which the accident arose was RESORSINOL production facilities (Figure 11). And the equipment with which explosion and a fire broke out was an oxidational reactor of RS (Figure 12). The timeline in Table 2 shows how the accident progressed. The displayed times show the progress at different times from the start time, at which the order was given to stop operation of the plant [5] .

3.1. Presumed Cause of the Explosion (Direct Cause)

Although the emergency shutdown was initiated at the oxidation reactor, which generates an organic peroxide, the subsequent interlock released this oxidation reactor. Then, the nitrogen being supplied to the oxidation reactor stopped, and churning of the liquid phase stopped.

As a result, decomposition of the organic peroxide occurred in the liquid phase upper part, and this heat could not be removed, so the temperature of the upper part of the reactor rose.

Table 2. Timeline of Mitsui chemical accident [5] .

Figure 11. Block flow of resorsinol production facilities [5] .

Figure 12. Flow sheet for oxidational reactor of RS [5] .

The decomposition of the organic peroxide accelerated the heat increase. As a result, the pressure of the oxidation reactor increased, resulting in rupture, explosion, a fire explosion, and a fire.

3.2. Lessons to Be Learned from Mitsui Chemical Accident

1) The main questionnaire items concerning the Mitsui Chemical Otake factory accident are follows.

a) Cooling capacity

i) Is the cooling capacity sufficient to maintain safety and a stable reaction when cooling is required?

ii) Do the design and structure of the cooling system enable it to cool all the parts of the reaction vessel and a tank?

b) Two or more important hardware-monitoring installations

i) Are the operating conditions of important apparatus in the process always monitored and controlled at two or more places?

c) Interlock release

i) Even if the interlock is canceled, can important utilities, such as cooling water and nitrogen, be operated independently?

ii) Is the importance of interlock release fully understood by staff?

2) The questionnaire results are shown below.

a) Cooling capacity

i) Is the cooling capacity sufficient to maintain safety and a stable reaction when cooling is required?

Have sufficient capacity: 8 facilities

Do not need cooling or N2 purge: 3 facilities

Insufficient: 1 facility

◆ Examples of answer

Required amount of water, resisting pressure performance, etc. are examined and designed.

In a scram, in order to stop the reaction but not cooling, the nitrogen or steam supply is set by interlock.

ii) Do the design and structure of the cooling system enable it to cool all the parts of the reaction vessel and a tank?

Yes: 7 facilities

Not applicable: 4 facilities (another safety method is used)

No: 1 facility

◆ Examples of answer

The exterior is cooled using a coil and a jacket. Moreover, reaction solution is circulated through the inner liquid with a stirrer, and attains equilibrium.

The facility design is inadequate, and all the portions generating reaction heat cannot be cooled.

b) Two or more important hardware-monitoring installations

i) Are the operating conditions of important apparatus in the process always monitored and controlled at two or more places?

Yes: 10 facilities; No: 2 facilities

◆ Example of answer

We monitor the top, middle, and bottom of the tower using several instruments, but we monitor a tank or heat exchanger using only one instrument.

c) Interlock release

i) Even if the interlock is canceled, can important utilities, such as cooling water and nitrogen, be operated independently?

Yes: 12 facilities; No: 0 facilities

◆ Examples of answer

Whether the interlock is ON or OFF, the utility can be operated manually.

We designed the important utility system as an independent system.

ii) Is the importance of interlock release fully understood by staff?

Yes: 12 facilities; No: 0 facilities

Figure 13 shows the example of permit for the interlock setting change and by-pass operation.

◆ Example of answer

It is a security system and its importance is recognized. When it is necessary to cancel the interlock and continue operation, we perform change management and implement the required countermeasure.

4. The Issues Highlighted by This Examination Should Be Improved in the Future

In this study, two major accidental fires and explosions that occurred in industrial complexes in Japan were investigated. Each of these accidents developed during several hours after carrying out a scram of the manufacturing equipment [4] [5] . This poses the following questions. 1) Can we identify the deviation between stable operating conditions and abnormal conditions? Are there suitable sensing systems and methods for these condi-

Figure 13. Permit for the interlock setting change and by-pass operation [questionnaire c)-ii)].

tions? 2) Is examination for abnormal plant conditions sufficiently made, or has the measure to be specified? 3) Is training in emergency shutdown performed daily? 4) Are the safe and stable states, even under emergency shutdown conditions, firmly understood? Moreover, is monitoring continued even after emergency shutdown, with a defined monitoring point? 5) Are the criteria and procedures for reversing an emergency shutdown clear? A subsequent reexamination was carried out after the accident at Mitsui Chemicals. 6) At a reaction vessel or a tank, are there devices or systems which can be used to identify or monitor reactions, even if they occur locally? From this examination, it is clear that the actual conditions at the company located in an industrial complex in the Kawasaki area in Japan are as follows.

1) Usually, an operation-monitoring method is established. Moreover, the difference between normal and abnormal conditions is clear. A detection method is also established. 2) In the case of inherent abnormal reactions in the plant, a general examination had already been made and inherited as a technical tradition from the past. However, because this cannot rule out new unexpected reactions in the future, the actual conditions must be reexamined using all resources. 3) Education and training for emergency shutdown are performed by compa- nies that are experiencing a crisis because they have reached a change-of-generation stage, and because operators do not have experience in the shutdown or restarting of plants, because stable continuous operation has been achieved for two or four years. However, this effect has now been fully demonstrated, and a state is being been reached with which companies feel comfortable; this is now underway, and actual conditions are being improved.

However, there are two further viewpoints. 4) Is a safe state after an emergency shutdown ensured and is monitoring sufficient? 5) Were the criteria and procedure for restarting after a scram fully developed? Companies conclude that these have been inadequate. This is demonstrated by two questions and answers below.

◆ Measures after emergency shutdown

1) Is a safe state after an emergency shutdown ensured, and is monitoring adequate?

Yes: 8 facilities; No: 4 facilities

2) Were the criteria and procedures for restarting after an emergency shutdown fully developed?

Have a procedure: 4 facilities

Only acknowledger specified: 3 facilities

No procedure and no acknowledge specified: 5 facilities

The reason why this aspect is weak is because it is based on former beliefs. We believed that an emergency shutdown was a safe action. Because there was a shift to a safe state when carrying out the emergency shutdown, it was assumed that safety was achieved. These were blind spots. Furthermore, because operator skill has improved in Japan as a result of education and training in the operating sector, some problems can be solved by partial or transitory shutdowns, and there is a trend to avoid shutdowns of large plants. It is considered that part of the background to these accidents was the wish for partial continuation of operations and early resumption of operations, and confidence in doing this was too high. If abnormalities occur in part of a plant, after stopping all processes completely, the cause of the abnormality is analyzed; if it is removed, an accident will not happen.

It is also the case that the success of advanced technology was also insufficient, and the risks of performing continuous operation may have been added as a result of improvements in the skills of Japanese operators. I think that Japanese chemical companies need to choose one of the following two methods. The first method is to deal with plant accidents by partial shutdown or short-term plant idling, even if there is a risk of a major accident. The other method is to accept production or opportunity losses, in order to reduce the risk of a major accident.

Next, we consider the following questions. 6) At a reaction vessel or a tank, are there devices or systems which can be used to identify or monitor reactions, even if they occur locally?

It cannot be said that this has been fully achieved. Therefore, for containers that hold polymerization monomers, including liberating tanks, middle tanks, and even those that are not frequently used, the following equipment is required.

◆ Containers that hold polymerizable monomers (reservoirs, reaction vessels, separation towers, etc.)

1) The container should be designed to have thermometers and pressure gauges in the upper part, central part, and lower part of the container. The system should be continuously monitored for local heat increases. If a temperature distribution is detected by this system, an alarm should be triggered.

2) A churning function should cover the whole container and it should be designed so that it is not suspended in the event of a system scram.

3) A cooling device that covers the whole container should be designed so that it functions during a system scram.

We have learned many things from these two accidents. I want to improve the level of safety of the chemical industry globally, by using the lessons learned.

Acknowledgements

We acknowledge assistance from the High-Pressure Gas Safety Institute of Kanagawa prefecture. This examination was performed with a member of this institute.

References

  1. Krausmann, E. and Cruz, A.M. (2013) Impact of the 11 March 2011, Great East Japan Earthquake and Tsunami on the Chemical Industry. Natural Hazards, 67, 811-828. http://dx.doi.org/10.1007/s11069-013-0607-0
  2. Dobashi, R. (2014) Fire and Explosion Disasters Occurred Due to the Great East Japan Earthquake (March 11, 2011). Journal of Loss Prevention in the Process Industries, 31, 121-126. http://dx.doi.org/10.1016/j.jlp.2014.03.001
  3. Li, X., Koseki, H. and Mannan, M.S. (2014) Case Study: Assessment on Large Scale LPG BLEVEs in the 2011 Tohoku Earthquakes. Journal of Loss Prevention in the Process Industries, in Press. http://dx.doi.org/10.1016/j.jlp.2014.07.015
  4. Tosoh Corporation (2012) Investigation Report of Explosion Accident at Nanyo Plant.
  5. Mitsui Chemicals Inc. (2013) Accident Investigation Committee Report on the Iwakuni-Ohtake Works Explosion and Fire.
  6. Nippon Shokubai Co. Ltd. (2013) Accident Investigation Committee Report on the Himeji Works Explosion and Fire.
  7. COSMO Oil Co. Ltd. (2013) Accident Investigation Committee Report on the Chiba Works Leakage.
  8. Mitsubishi Chemical Corporation (2008) Accident Investigation Committee Report on the Kajima Works Fire.