Engineering Standard

SAES-Z-008 2 May 2019

Design of Terminal Management Systems
Document Responsibility: Process Control Standards Committee

Contents
1 Scope ................................................................ 2
2 Conflicts and Deviations ................................... 4
3 References........................................................ 4
4 Definitions ......................................................... 5
5 Tms General Requirements ............................ 10
6 Operation Specific Requirements for TMS ...... 12
7 Tms Control Layer Configuration .................... 19
8 Tms Components Configuration ..................... 24
9 Electrical and Environmental Conditions ......... 32
10 Operation Centers........................................... 32
Appendix A - Typical Product Tank Allocation ........ 33
Appendix B - Typical Tank Truck Unloading ........... 34
Appendix C - Typical Tank Truck Loading
(No Queue) ........................................ 36
Appendix D - Typical Queue Algorithm ................... 39
Appendix E - Typical Tank Truck
Loading (with Queue) ........................ 44
Appendix F - Typical Pipeline Meter Proving .......... 48
Appendix G - Typical Bulk Plant
Automation Overview ........................ 49

Previous Issue: 11 October 2018 Next Planned Update: 11 October 2021

Contact: Karande, Dadasaheb Sukadeo (karandds) on +966-13-8800892

©Saudi Aramco 2019. All rights reserved.

Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

1 Scope

1.1 This document prescribes the minimum mandatory requirements and guidelines
governing the engineering, design and installation of Terminal Management
Systems (TMS) in a Saudi Aramco Bulk Plants Terminal automation. The TMS
is used to automate the bulk plant or other plants operations where product is
loaded (shipped) and unloaded (received) through road truck, rail car, ship
vessel and pipeline.

Following are minimum functions executed by TMS in Bulk Plant Operations:

a) Measure, control and store records of the product delivered and received
b) Loading and Unloading through Road Truck and Railcar for the products:
refined products (Diesel, Gasoline, Jet Fuel, and Kerosene), Crude Oil,
Sulphur, Liquid Chemicals, Liquefied Petroleum Gas (LPG) and Asphalt
c) Identification and authorization for Truck/Rail (vessel), driver and order.
d) Download and upload bulk plant operation and transactional data into
Enterprise Resource Planning System.
e) Plant and equipment control: Pump Operation, Valve Operation (MOV,
ZV, FV, etc.), third party sub-system interface like Vapor Recovery.
f) Pipeline Product Receipt and Delivery (Shipping and transfer): Refined
products (Diesel, Gasoline, Jet Fuel, and Kerosene), Crude Oil, Liquid
Chemicals, Liquefied Petroleum Gas (LPG), and sales gas.
g) Calibration and Quality data hosting such as Pipeline Meter Proving
h) Product Reconciliation
i) Inventory Management
j) Tank gauge and Inventory Management interface
k) Batch management

1.2 TMS Components and its functionalities:

a) TMS Control Application- interface to field, operator and business
application
b) TMS Business Application- interface to field, operator, Enterprise Resource
Planning System and control layer
c) Driver Verification System (DVS)- to identify and verify driver
d) Order Information System (OIS) - to identify and verify order
Saudi Aramco: Company General Use
©Saudi Aramco 2019. All rights reserved. Page 2 of 49
 Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

e) Truck Identification System (TIS)- to identify and verify

truck/vessel/railcar
f) Preset Controller- interface with flow meters, field instruments, TMS,
operator, driver and host system
g) Driver Interface Device (DID)- to identify and verify order, driver and truck
h) Queue Monitoring System (QMS)- display waiting trucks, its sequence to
load and an assigned bay number for the truck
i) Weighscale Electronics- measure weight of truck and rail car
j) Bill of Lading (BoL)- print the authorization note/receipt
k) Terminal Servers (TS)-interface device for TMS to field instruments
l) Custody Pipeline Metering and Proving Control Systems (MSC)-
calibration
m) Automatic Tank Gauging (ATG)- measure level and inventory of product in
the tank
n) ESD system- ensure safe operation and interface with control layer
o) VMS (RMPS)- machine health monitoring and advisory system

1.3 Below table provides a matrix for TMS components use by process.

Authentication System
Truck Identification

Bill of Lading (BoL)

Batch Management

Gauging/Inventory
Driver Verification

Queue Monitoring
Order Information

Preset Controller

Automatic Tank
System (DVS)

System (OIS)

Management
System (TIS)

(DID/DVS/OIS)
ESD System

Weighscale
Application

Application
Business

Control

Process↓ X Component→

Road Tanker Loading X X X X X X X X X X X

Road Tanker Unloading X X X X X X X X X X X
Asphalt and Sulphur loading X X X X X X X X X X X X
LNG/LPG loading X X X X X X X X X X X X
Rail Tanker Loading X X X X X X X X X X X X X
Marine Unloading X X X X X X X X X X X X
Marine Bunkering X X X X X X X X X X X X
Marine Loading (Cargo) X X X X X X X
Dedicated Receipt Pipeline X X X X X
Multi-Product Receipt
X X X X X
Pipeline
Delivery Pipeline X X X X X
Tankage X X X X X

Note: Some of the listed TMS components are not within the scope of this standard.
Saudi Aramco: Company General Use
Page 3 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

1.4 This entire standard may be attached to and made a part of purchase orders.

2 Conflicts and Deviations

Any conflicts between this document and other applicable Mandatory Saudi Aramco
Engineering Requirements (MSAERs) shall be addressed to the EK&RD Coordinator.

Any deviation from the requirements herein shall follow internal company procedure
SAEP-302.

3 References

Specific sections of the documents listed below are referenced within the body of this
standard. Material or equipment supplied to this standard shall comply with the
referenced section of the latest edition of these documents. Where specific sections are
not referenced, the equipment or material shall comply with the entire referenced
document.

3.1 Saudi Aramco References

Saudi Aramco Engineering Procedures

SAEP-99 Saudi Aramco Industrial Control System Security
SAEP-302 Waiver of a Mandatory Saudi Aramco Engineering
Requirement.
SAEP-368 Alarm System Management

Saudi Aramco Engineering Standards

SAES-B-014 Safety Requirements for Plant and Operations
Support Buildings
SAES-B-070 Fire and Safety Requirements for Bulk Plants, Air
Fueling Terminals and Sulfur Handling Facilities
SAES-J-601 Emergency Shutdown and Isolation Systems
SAES-J-902 Electrical Wiring for Instrumentation
SAES-T-566 Plant Demilitarized Zone (DMZ) Architecture
SAES-Y-103 Royalty/Custody Metering of Hydrocarbon Liquids
SAES-Y-301 Royalty Custody Measurement of Hydrocarbon
Liquids using Radar Tank Gauging Systems
SAES-Z-001 Process Control Systems
SAES-Z-010 Process Automation Networks
Saudi Aramco: Company General Use
©Saudi Aramco 2019. All rights reserved. Page 4 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

Saudi Aramco Materials System Specifications

23-SAMSS-010 Distributed Control Systems
23-SAMSS-050 Terminal Management Systems
34-SAMSS-180 Truck Weigh Scale System
34-SAMSS-319 Automatic Tank Gauging Equipment
34-SAMSS-847 Preset Controller for Truck Loading and Unloading
Systems

International standards
ANSI/ISA-88 Batch Control
ANSI/ISA-95 Enterprise-Control System Integration

4 Definitions

4.1 Abbreviations
ATG Automatic Tank Gauging
BOL Bill of Lading
MSC Metering Supervisory Computer
DCS Distributed Control System
DID Driver Interface Device
DVS Driver Verification System
ESD Emergency Shutdown Systems
ERP Enterprise Resource Planning
FACP Fire Alarm Control Panel
HMI Human Machine Interface
I/O Input / Output
LAN Local Area Network
LIMS Laboratory Information Management System
MES Manufacturing Execution System
MOV Motor Operated Valve
OLE Object Linking and Embedding
OPC OLE for Process Control

Saudi Aramco: Company General Use

Page 5 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

OIS Order Information System

PIN Plant information Network
PLC Programmable Logic Controller
SAEP Saudi Aramco Engineering Procedures
SAES Saudi Aramco Engineering Standards
SAMSS Saudi Aramco Material System Specifications
TCP/IP Transmission Control Protocol/Internet Protocol
TIS Truck Identification System
TMS Terminal Management System
UPS Uninterruptible Power Supply

4.2 Definitions

In this standard, the terms “must”, “shall”, “should” and “can” are used.
When “must” or “shall” are used, the item is a mandatory requirement.
When “should” is used, the item is strongly recommended but not mandatory.
When “can” is used, compliance may further enhance the system functionality
but is optional.

Algorithm: A prescribed set of well-defined rules or processes for the solution

of a problem in a finite number of steps. (See also control algorithm).

Auxiliary System: A control and/or monitoring system that is stand-alone,

performs a specialized task, and communicates with the TMS.

Availability: The amount of time a device is actually working as a percentage

of total time it should be operating.

Batch Management System: Batch Management System provides automatic /

manual product receipt and delivery operation with controlled manner.
It measure, control and records various parameters of the operation.

Bulk Plant: A terminal or depot that receives, stores, and dispenses

hydrocarbon product via tank trucks, rail, pipeline or marine vessels.
Typical Bulk Plant loads multiple products such as gasoline, diesel, jet fuel, via
multiple loading bays.

Control Algorithm: A mathematical representation of the control action to be

performed.

Saudi Aramco: Company General Use

©Saudi Aramco 2019. All rights reserved. Page 6 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

Custom Application Software: The software written specifically to perform

functional requirements for an individual plant when standard software packages
cannot be configured to meet the requirements. Custom Application Software
works with the standard operating software; it does not modify any standard
software.

Distributed Control System (DCS): A process control system that is

composed of distinct modules. These modules may be physically and
functionally distributed over the plant area. The distributed control system
contains all the modules and associated software required to accomplish the
regulatory control and monitoring of a process plant, excluding field
instruments, remote terminal units, auxiliary control systems and Plant
information systems.

Emergency Shutdown System (ESD): A system composed of sensors, logic

solvers, and final control elements for the purpose of taking the process, or
specific equipment in the process to a safe state when predetermined conditions
are violated. The system is designed to isolate, de-energize, shutdown or
depressure equipment in a process unit. Another term commonly used
throughout the hydrocarbon and petrochemical industry is a Safety Instrumented
System (SIS).

Estimated Time of Arrival (ETA): The Estimated Time of Arrival when the
product switch occurs on multiproduct pipeline.

Hardware: Physical components used within a Terminal Management System

such as: Controllers, I/O cards, power supplies, network devices, workstations,
and servers.

Loading Rack: A framework, constructed of pipes, instruments, mechanical

components, and support structure for the loading bays.

Logs: Files or printouts of information in chronological order.

Mode: Control block operational condition, such as manual, automatic, or cascade.

Operational Data: The statistical data such as process values and alarm limits,
tuning parameters, etc.

Operator Console: A console used by an operator to perform the functions

required to monitor and control the assigned process facility units.

Operating System: Software that runs on a computer for the purpose of

managing computer hardware and providing common services for the execution
of application software.

Saudi Aramco: Company General Use

Page 7 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

Pipeline Receiving Station: The station where hydrocarbon products are

received via pipeline for distribution at the bulk plant and/or for further shipping
to other bulk plants via pipelines.

Preset Controller: An electronic metering device used in an industrial

environment to provide totaling volumes, correcting volumes to reference
conditions, and controlling the loading operation at the rack (batch loading).

Process Controller: A microprocessor-based device used primarily to perform

control functions of plant. Process controller uses a programmable memory for
the internal storage of user-oriented instructions for implementing specific
functions i.e. configuration. The controller collect the field and upper layer data,
performs operation as per configuration and send the data to field and upper
layer. Typically, DCS controller or PLC CPU is considered process controller.

Process Control System: The integrated system which is used to automate,

monitor and/or control an operating facility (e.g., plant process units). The TMS
consists of operating area Distributed Control Systems and their related auxiliary
systems which are connected together at the Process Control Network and
Process Automation Network level to form a single integrated system.

Rebrand: The reclassification of a product that includes transfer between

product tanks, the sale of one product as another, and transfer of product
classification on a standing tank.

Recovered Product: The amount of products that are recovered as a result of

tank reconciliation calculation.

Redundant Configuration: A configuration that provides automatic

switchover, in the event of a failure, without loss of a system function.

Regulatory Control: The functions of regulating certain process measurement

via manipulation of final element. The regulatory control includes fetching
process measurement, control algorithm execution, and final control device
manipulation.

Reliability: The probability that a system will provide correct outputs up till
some given time.

Restricted Access Level: The TMS system access authority level where users
has right to perform critical and key business processes. Normally, these
authorization are given to system administrator, plant superintendent, and plant
manager.

Saudi Aramco: Company General Use

©Saudi Aramco 2019. All rights reserved. Page 8 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

Semi-Automatic: Semi-Automatic control is the operate process and

equipment in the plant with partial human intervention.

Software: Software shall be considered programming code, computer

instructions or data that can be stored electronically. The storage devices and
display devices are hardware. Software is often divided into two categories:
 Systems Software: Includes the operating system and all the utilities that
enable the computer to function.
 Applications Software: Includes programs that do real work for users.
For example, word processors, spreadsheets, and database management
systems fall under the category of applications software.

System Access Restriction: Means of controlling and regulating access to

computing resources and information through predefined access level.

System Alarm: The abnormal state indication of system and system

performance.

Tag: A collection of attributes that specify either a control loop or a process

variable, or a measured input, or a calculated value, or some combination of
these, and all associated control and output algorithms.

Tag ID: The unique alphanumeric code assigned to inputs, outputs, equipment
items, and control blocks. The tag ID might include the plant area identifier and
unique throughout the plant.

Tank Reconciliation: Tank Reconciliation tracks all the fuel that enters or exits
in each tanks, regardless of delivery or dispensing activity. The reconciliation
reports can generate on a shift, daily, weekly, etc., basis to provide the current
state of product, quality and delivery/receipt quantity.

Terminal Management System: A system comprised of automation (Process

Control System, an Emergency Shutdown System, related subsystems,) and
transactional Business Management System which is utilized to control the
loading, unloading, delivery and receipts of a products in Bulk Plants facility.
In addition, the system manage record and execute the product delivery orders to
customers that initiated from Enterprise Resource Planning System. The TMS
architecture, terminology and processes are aligned to ANSI/ISA-88 and
ANSI/ISA-95.

TMS Business Application: Application which handles and process business

transactional data related to orders.

Saudi Aramco: Company General Use

Page 9 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

TMS Control Application: Application which monitors and controls bulk

plant terminal operation using DCS, ESD and subsystem.

TMS Controller: Refer Process Controller

Transaction: An input message to a computer system that must be dealt with as

a single unit of work. A transaction typically includes data such as date, time,
quantity, source and destination of an order request or action taken.

Workflow: The process consists of coordinated and repeatable pattern of activity

enabled by the systematic method to ensure each step achieved a required condition.
It is a sequence of operations, with one or more simple or complex mechanisms.

5 TMS General Requirements

5.1 The TMS shall meet the Sections 5 to 20 requirements defined in SAES-Z-001.

5.2 Emergency Shutdown Systems provided as part of an integrated TMS, shall

meet all requirements defined in SAES-J-601.

5.3 TMS shall have capability to implement alarm rationalization process for all
configured alarms as per SAEP-368 and Section 12 of SAES-Z-001.

5.4 The TMS shall be designed and configured to for safety functions using the
SAES-J-601, SAES-B-014 and SAES-B-070 . The ESD system shall initiate
shutdown in the event of an emergency and abnormal operation to protect the
peoples, assets and environment.

5.5 TMS shall designed and configured to meet SAEP-99 requirement and the latest
vendor recommendations.

5.6 TMS shall be designed using Domain Controller to control device connectivity
on the Plant Network and User Account Management.

5.7 TMS System shall be designed using redundant architecture to meet the fault
tolerant functionality.

5.8 The TMS shall be designed using integrated approach with components,
subsystems, and field devices to ensure reliable communication.

5.9 The TMS shall configure to display the health of all components and facility.
The TMS system overall status shall be displayed dynamically on HMI same as
system architecture drawing. The system shall have the ability to switchover
manually to standby device as well as enable /disable the communication of a
device from the graphics object itself.

Saudi Aramco: Company General Use

©Saudi Aramco 2019. All rights reserved. Page 10 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

5.8 The TMS shall be configured to implement the functions of Oily water,
Sampling, blending and VRU sub-system applications or able to interface with
these sub-systems through standard protocol such as MOD bus, OPC etc.

5.10 Control layer (PCS) and ESD components of the TMS are allowed to install in
outdoor if components approved by Saudi Aramco for outdoor application and
the design improves the CAPEX and OPEX. The outdoor design shall be
reviewed and approved by all stake holders.

5.11 The TMS shall be configured to record all business actions / transactions with
time stamp e.q. the tanker entry, loading starting.

5.12 The TMS System shall be designed to achieve 5 seconds or less response time to
any transaction action. For example, confirmation or error message shall
display on Preset within 5 seconds or less after data entered into Preset
Controller.

5.13 The TMS shall be configured to have the capability to enter data manually and
perform the validation of driver, tank truck and order details.

5.14 The TMS shall be configured to upload / download the transactions to the
Enterprise Resource Planning System/host computer in auto and manual mode.

5.15 The TMS shall be configured to allow manual entry of product density for mass
and volume calculations.

5.16 The TMS shall be configured to automatically upload/download the online and
offline product density using restricted access level.

5.17 The TMS shall be configured to automatically upload/download flow meter

factors using restricted access level.

5.18 The TMS shall be configured to perform automatic and/or manual order matching
task. The operator shall be promoted to acknowledge the auto order matching.

5.19 TMS shall be configured to allow to create emergency orders as well as accept
manually entered order details from authorized site personnel.

5.20 Automatic backup of daily transactional data (orders executed) shall be

configured store in backup server for last seven days. More than seven days or
certain number of orders data shall be deleted automatically.

5.21 The TMS shall be configured have the capability to schedule the trucks / batches
in auto or manual mode.

Saudi Aramco: Company General Use

Page 11 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

5.22 The TMS shall configure the rules for queuing and assigning the bay. The rules
shall be based on arrival time and priority driven weightage method. The
weightage calculation shall be real time on the basis of current time and its
priority.

5.23 The TMS shall have the capability to show the details of orders (product receipt,
dispatch and transfer) in a GANT Chart and shall have predefined reports.

5.24 The TMS shall provide process and deviation alarms / advisory messages for all
events and incidents to alert operator with correct expected action message. The
message example “Enough tanks are not allocated to meet the batch under
allocation”.

5.25 All events and logs shall be recorded in a single database where viewing and
tracking can be done using unique field such as order or equipment number.

6 Operation Specific Requirements for TMS

6.1 Tank Truck Loading / Unloading

6.1.1 The TMS shall be configured to execute orders according to Section-5,

and the steps defined in Appendixes (B and C).

6.1.2 The following functionality shall be configured in TMS as a minimum

for loading/unloading operation:
 Identify and verify Driver, Tank Truck, and Order in Automatic,
semi-automatic, or manual at below locations:
o Entry Gate
o Driver waiting area
o Loading and unloading Bay
o BOL/Exit Gate
 Display and Control of loading/unloading operation and its process
parameters.
 Display the status of all equipment including all metering data on
the TMS HMI.
 Display the total volume transferred on real time basis, status of
order and all operations interlocks on the TMS HMI.
 Display Transactional data and workflow (business application
interlocks) processing.

Saudi Aramco: Company General Use

©Saudi Aramco 2019. All rights reserved. Page 12 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

 Configure and display Safety interlocks and ability to shutdown the

risk area or total plant in the event of an emergency or abnormal
process conditions through auto or manual action.
 Automatically update business system, BOL, and tank information
based on tank status.
 The TMS shall be configured to manually or automatically enter truck
inspection results after inspection. Enabling inspection shall be
through TMS
 Preset controller function:
o Upload and download data from TMS
o Provide pump demand and get loading permissive
o Measure and monitor flow parameters
 BOL/Transaction ticket printing.
 Store operation and transactional data.

6.1.3 The TMS shall not allow to change the details of orders which are
loaded into auto mode.

6.1.4 The TMS shall have a provision to allow operator to enter comments
when they manually update transactions/order details.

6.1.5 The TMS shall be configured to prevent the simultaneous unloading

(filling) of a product to a single tank.

6.1.6 The TMS shall be configured to permit the completion of a single

loading/unloading operation at more than one bay, in case of the
loading/unloading operation was not possible to be completed at the
assigned bay.

6.1.7 The TMS shall be configured to allow operator to reassign the bay to
already assigned bay to a truck.

6.1.8 The TMS shall be configured to allow operator to stop the loading
operation intermediate in case of unsafe or abnormal situation.

6.2 LPG, Sulphur, Crude Oil, Asphalt and Vacuum Bottoms Loading

6.2.1 The TMS shall measure the weight of loaded Product using weighing
scale and shall calculate net weight of loaded product in the truck or
rail tanker using initial and final weight.

Saudi Aramco: Company General Use

Page 13 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

6.2.2 If required, the TMS shall configured meet Section 6.1 few or all
functionalities for LPG, Sulphur, Crude Oil, Asphalt and Vacuum
Bottoms Loading operation

6.2.3 The weigh scale building shall house an interface for drivers to enter
their driver, tank truck and order numbers for identification.

6.2.4 The TMS shall be configured to allow the operator to display quantities
measured in units of volume and mass.

6.2.5 The TMS shall communicate to weighscale electronics or measurement

device via redundant Modbus or OPC protocols.

6.2.6 The TMS design shall include preset controller or DID at the bay to
identify and allow only pre-weighted and authorized trucks to load.

6.2.7 The TMS shall be able to interface to other applicable type of

measurements, (e.g., Coriolis Mass Flow Meters / Mass Flow
Controllers, for Liquids and Gases) used to measure product transfer.

6.3 Rail Car Loading / Unloading

6.3.1 The TMS shall be configure to control the product transfer through
Rail Car movement operations.

6.3.2 If required, the TMS shall configured to meet Section 6.1 and Section
6.2 few or all functionalities for Rail car Loading/unloading operation.

6.3.3 The TMS shall be configure to monitor and control all process and
interlocks of Rail Car movement operations.

6.4 Pipeline Product Receipt

6.4.1 The TMS shall be configured to monitor and control the product
receipt operation.

6.4.2 The TMS shall be configured to monitor product tank parameters and
take corrective actions if required to ensure safe operation.

6.4.3 The TMS shall be configured to automate tank allocation (per product
allocation table and current state) and auto line-up of product to
specified tank without contamination. Refer to Appendix A flow chart.

6.4.4 The TMS shall be configured for automatic or semiautomatic or

manual routing of product from Pipeline Receiving Station to the Tank
Farm.
Saudi Aramco: Company General Use
©Saudi Aramco 2019. All rights reserved. Page 14 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

6.4.5 For each scheduled batch, the TMS shall be configured to allow the
operator to allocate a tank, or number of tanks to receive the batch and
lineup in auto or manual mode.

6.4.6 The TMS shall be configured to allow the operator to carry the
operation in manual, however, system shall provide advisory alert to
the operator during manual operation. Following are typical manual
operations to allowed:

6.4.6.1 Line up valves from the Pipeline Receiving Station to the

tank which is listed in the tank allocation table.
6.4.6.2 To switch valves proactively based on the process
measurements.
6.4.6.3 To prevent the dead-heading of a line during valve
switching.
6.4.6.4 To prevent cross product contamination using interlocking
valves and selecting the interface tanks.
6.4.6.5 To manually operate pipeline product receipt.
6.5 Pipeline Product Delivery (Shipping)

The TMS shall be configured to monitor and control the following operation as
a minimum for pipeline product delivery:
 Shipper pumps operation
 Booster pumps operation.
 Associated custody transfer metering and proving.
 Control valve station.
 Associated instrumentation and MOV's.
 Transfer from Automatic Tank Gauging.
 Safety interlocks.
 Selecting correct channels to detect product contamination using density
meter or online analyzers.
 TMS shall have the capability to interface with Supervisory Metering
Systems.

6.6 Batch Management System

6.6.1 The Batch Management System shall be designed to ensure that

sufficient tank capacity is available for desired batch.

Saudi Aramco: Company General Use

Page 15 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

6.6.2 The TMS shall be configured for following Batch Management

functions:

6.6.2.1 To provide Manifold and Tank MOV switching manually.

6.6.2.2 To provide interlocking of MOV valves dependent on

product routing to prevent cross product contamination.

6.6.2.3 To allow manual allocate tanks to the products.

6.6.2.4 To allow allocate tanks manually to products if the tank is

suitable for the product but not listed in the allocation table.

6.6.2.5 To provide deviation or discrepancy alarms to unclosed

valves, unselected tanks, loading and shipping errors.

6.6.2.6 TMS shall continuously indicate batch current state, received

quantity, tank filled level etc.

6.6.3 The TMS should be configured to follow the typical operation

workflow shown in Appendix A for a typical Product Tank Allocation
Check, unless specified otherwise in the project specifications.

6.7 Inventory Management

6.7.1 The TMS shall provide a complete inventory management package that
include tracking product receipt, deliveries, transfers, re-branding, and
tank's volume. Product inventory shall be logged on a continuous
basis.

6.7.2 The TMS shall be configured to perform product receipt using data
transmitted from an Automatic Tank Gauging (ATG) system designed
based on SAES-Y-301, to determine the quantity transferred by
calculating the difference in tank level.

6.7.3 The TMS shall monitor the tank conditions and to alert the operation
personnel at the control console in case of any deviation including
level, flow, temperature, density, pressure, unexpected movement or
movement in wrong direction, leak, flow start/stop and stop gauge.

6.7.4 The TMS shall be configured to automatically print tank reconciliation

report when Tank status is changed in DCS (TMS Control Server).

6.7.5 The TMS shall be configured to re-brand products, i.e., the re-
classification of a product that include:

Saudi Aramco: Company General Use

©Saudi Aramco 2019. All rights reserved. Page 16 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

 Transfer between product tanks.

 Transfer of product classification on a standing tank.

6.7.6 The TMS shall be configured to transfer between tanks and shall
include the following at a minimum:
 Transfer of recovered product to product tank.
 Transfer of gasoline rich product to product tank.
 Transfer of diesel rich product to product tank.
 Transfer of one product to another via a meter proving operation.

6.7.7 The TMS shall be configured to allow the operator to select the
destination for re-branding of transferred product.

6.7.8 The TMS shall be configured to automatically reconcile inventory

changes from Re-branding operations.

6.7.9 The TMS shall be configured to allow the operator to select from a list
the allowable re-brand names for both sale and transfer.

6.7.9 TMS shall be configured to use tank High Level and High Level
signals to prevent overfill in the tanks.

6.8 Product Reconciliation

6.8.1 The TMS shall be configured to calculate and auto-print product

inventory balance using information from product receipts, transfers,
deliveries, inventory, plant diesel and gasoline usage and re-brands.

6.8.2 The TMS shall be configured with manual data entry screens and
associated data storage for product receipts, transfers, deliveries,
inventory, own use and re-brands functions.

6.8.3 The TMS shall be configured to account for recovered product tank
inventory and calculate the quantity of recovered product transferred to
product storage.

6.8.4 The TMS shall be configured to reconcile inventory errors in the event
of loss of meter data, metering system inaccuracy or the removal of
product from a location where there is no metering.

6.8.5 The TMS shall be configured with a manual data entry screen to allow
losses to be accounted for by authorized personnel under password
access. Entry field shall be provided on the screen for recording the
reason for the loss.
Saudi Aramco: Company General Use
Page 17 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

6.8.6 The TMS shall be configured with the following inventory

reconciliation functionality:
 Graphic presentation of equipment and related variables.
 Entry for adjusting individual transfer quantities.
 Highlighted losses/gains.
 Interactive report configuration to store or modify reporting
parameters.
 Routing reports to other users and printers as needed.
 Error-log summary for all the errors encountered.
 View of the balances, together with raw measurements, and
reconciled data.
 Any operator changes for inventory reconciliation shall be
logged and documented by an audit trail.

6.9 Pipeline Meter Proving

Note that- this operation may not require if the meter proving is carried using
standalone proving system.

6.9.1 The TMS shall be designed to interface with pipeline metering and
meter proving operations at each facility. The TMS shall perform the
following functions:
 Retain meter transaction data.
 Maintain meter factor database information for all meters.
 Maintain information on volume readings during meter
proving and other maintenance activities.
6.9.2 The TMS shall be configured to initiate a pipeline proving operation
based on operator request, or automatically or manually.

6.9.3 The TMS shall be configured to continuously receive the metering

system and prover status and process variables.

6.9.4 The TMS shall be configured to receive and store new meter factors
from the Metering Supervisory Computer (MSC) upon completion of a
proving operation.

6.9.5 The TMS shall be configured to send a command for the MSC to print
a proving report with details for the new meter factors.
Saudi Aramco: Company General Use
©Saudi Aramco 2019. All rights reserved. Page 18 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

6.9.6 The TMS shall be configured to accept or reject new meter factors on
the operator graphic based on the deviation from the previous meter
factors outlined in the proving report:
 The TMS shall automatically upload accepted meter factors.
 The TMS shall utilize existing meter factors when new meter
factors are rejected.
 The TMS shall make the rejection of the meter factor based on
a pre-configured range (+/- “a” %) limit.
6.9.7 The TMS shall be configured to keep a read-only record with
timestamps of all meter factors downloaded from the MSC.

6.9.8 The TMS shall be configured to allow an operator to display and print
meter factors and meter history reports.

6.9.9 The TMS shall be configurable to follow a typical procedure for meter
proving such as the illustrated in Appendix F unless specified
otherwise in the project specifications.

6.9.8 The TMS shall be configured to allow an operator to take actions to

meet the corporate Enterprise Resource Planning System workflows.

7 TMS Control Layer configuration

7.1 Engineering Units

The TMS shall be configurable to use the applicable measurement system as

provided in Section 5.1 of SAES-Y-103.

7.2 Valve Operation

7.2.1 The TMS PCS controller shall be configured to operate:

 Control valves including PCV's, and FCV's in regulatory mode.
 ON/OFF valves including MOV's, ZV in discrete mode
7.2.2 The TMS shall be configured for the operator to operate a valve in
Auto and manual mode from HMI for all actions like open, close and
stop.

7.2.3 The TMS shall be configured to allow operator to operate valve in

manual mode or manually from field whenever required.

7.2.4 The TMS shall be configured following IO types for ON/OFF valve:
Saudi Aramco: Company General Use
Page 19 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

a) Digital output:
 Open (Momentary)
 Close (Momentary)
 Stop (Momentary)
b) Digital input:
 Opened
 Closed
 Not-in-Remote/ Power Failure.
c) Read back the actual percentage opening of control valves.

7.2.5 The TMS shall be configured to provide deviation alarms for ON- OFF
/control valves for fault conditions including when:
 Time exceeds the configured delay time to change from
Open/Close state.
 Travel time exceeds a configurable delay.
 A command action did not occur within the specified time.
7.2.6 The TMS shall be configured ZV based on SAES-J-0601 requirement
and the ESD ZV / MOV discrepancy alarm shall be annunciated
separately from a normal operation discrepancy alarm.

7.2.7 ZVs used in an ESD sequence should be go to fail safe mode position
when the electrical (power) supply is disconnected.

7.3 Pump Configuration

The TMS shall configured following as minimum:

7.3.1 The TMS HMI shall be configured to have a graphical symbol per
pump with start, stop, logic reset and auto/manual control
functionality.

7.3.2 The TMS shall be configured to have two discrete inputs and two
discrete outputs for motor/pump control as follows:
 Discrete output: Start (Momentary).
 Discrete output: Run/ Stop (Maintained).
 Discrete input: Running.

Saudi Aramco: Company General Use

©Saudi Aramco 2019. All rights reserved. Page 20 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

 Discrete input: Remote (energize) / Local.

7.3.3 The TMS shall be configured to allow TMS local operation of a pump
through a remote/local field switch terminated in the system.

7.3.4 The TMS shall be configured to allow the operation of a pump in

manual through a software selector switch.

7.3.5 The TMS shall be configured to generate an alarm if the following

fault conditions occur when the pump is switched to remote:
 A Pump is requested to start and the running signal is not energized
within 5 seconds.
 A Pump is requested to stop and the running signal is not
de-energized within a 5 seconds.

7.3.6 The TMS shall be configured to require the discrepancy alarm fault
condition manually cleared and the pump logic reset by operations
prior to restart of a pump.

7.3.7 Discrepancy alarms shall be configured in the TMS and shall be

automatically disabled in the event of an ESD pump shutdown.

7.3.8 The TMS shall be configured to provide ESD discrepancy checking in

the event of an ESD shutdown of a pump. This discrepancy alarm
shall be annunciated separately from a normal operation discrepancy
alarm within 5 seconds of an ESD shutdown signals sent to a pump.

7.3.9 The TMS shall be configured to automatically start/stop product

loading/unloading pumps based on product demand when the
instantaneous demand is greater than the sum of the capacity (defined
in the data table ) of all running pumps.

7.3.10 The TMS shall be configured to automatically start a parallel pump in

the event of a pump fails to start.

7.3.11 The TMS shall be configured to stop a pump automatically when no

flow demand or condition, low suction pressure or excess discharge
pressure.

7.3.12 Pumps shall be interlocked stop automatically when suction and

discharge ZV’s (isolation valves) close in position such that pumps
shall stop if the valve in closed position.

7.3.13 The TMS shall be capable to configure recycle flow control valves for
loading pumps.
Saudi Aramco: Company General Use
Page 21 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

7.3.14 The TMS shall be configured to allow authorized user to override the
ESD interlock manually for a certain time. The TMS should be log all
override / bypasses and shall automatically alarm after set time time
lapse.

7.3.15 The TMS shall be configured to allow a MOV to operate in

Remote/Local mode.

7.3.16 The TMS shall be configured to run all pumps when to reduce the
loading/unloading rates or unable to maintain the demand rate.

7.4 Equipment and driver actions monitoring

7.4.1 The TMS shall be configured to display and log the process,
equipment, field instrument, UPS and TMS component failure alarms
in the system.

7.4.2 The TMS shall be configured to display and log equipment, field
instrument, UPS and TMS component current health status.

7.4.3 TMS shall display and log the Server’s CPU and memory usage and
alarm if the usage is more than 50%.

7.4.4 The TMS shall be configured to log and display historical data of
following parameters at a minimum:
 Process Pumps: Total running hours
 Custody Transfer and Tank Truck Loading/unloading Meters:
Total net volume throughput.
 TMS shall provide loading arm, flow, total loaded flow, grounding,
ESD condition, Knock Out Drum (KOD) level switch, vapor return
condition on HMI graphics.
7.4.4 The TMS shall be configured to lock the driver after three successive
wrong access attempts. The lock status alarm shall be generated to
inform to operator. Simultaneously, system shall provide a clear
message to the driver to contact operator to unlock or get more support.

7.5 TMS Interlocks

7.5.1 The TMS shall be configured different interlocks to monitor and

conduct loading, unloading, receipt and delivery operation in safe and
reliable mode. Following are minimum interlocks to implemented in
the TMS-

Saudi Aramco: Company General Use

©Saudi Aramco 2019. All rights reserved. Page 22 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

 Bay available
 Bay locked
 Rack fire alarm
 Plant Fire alarm
 Local Bay ESD
 Plant ESD
 Loading permissive
 Earthing connection
 Vapor return flow
 KOD level
 Truck Tanker level
 Ramp up and down rate
 Traffic light
 Pump Demand.
 Excess low Flowrate
 High and low Pressure

7.6 TMS to Vibration Monitoring System (VMS) interface

The TMS shall provide interface to VMS for bulk plants pumps where required
in accordance with Section 15.4 of SAES-Z-001.

7.7 TMS to PLC and 3rd Party Packages Interface

The TMS shall provide interface to PLC and Third Party Packages, where
required, in accordance with Section 15.7 of SAES-Z-001.

7.8 TMS to Laboratory Information Management System (LIMS) interface

7.8.1 The TMS shall provide interface to Laboratory Information

Management System (LIMS) via OPC or Modbus communication.

7.8.2 The interface shall be secured from a TMS control network intrusion
standpoint, and any LIMS to TMS write function shall not have impact
on the integrity of the TMS.

Saudi Aramco: Company General Use

Page 23 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

7.9 Interface to Electrical Substation Equipment

7.9.1 This requirements in this section apply to the interface between the TMS
and either a Power Monitoring System, a Substation Automation system,
and to individual motor control centers. These systems are collectively
referred to as ‘Electrical Substation Equipment’ within this standard.

7.9.2 The TMS shall provide interface to PLC and Third Party Packages,
where required, in accordance with Section 15.8 of SAES-Z-001.

7.10 TMS to Enterprise Resource Planning System interface specifications

7.10.1 The TMS shall be configured to process transactions initiated locally

and shall be processed in the same manner as transaction received from
Saudi Aramco Enterprise Resource Planning System.

7.10.2 The TMS-Enterprise Resource Planning System interface shall be

configured based on TMS-Enterprise Resource Planning System
Interface specification, DMZ and Data Diode specification (SAES-T-
566 and SAES-Z-010).

7.11 Interface to Long-term Data Acquisition and Historization System (DAHS)

The TMS shall provide interface to DAHS, where required, in accordance with
Section 15.6 of SAES-Z-001.

8 TMS Components Configuration

8.1 TMS Business Server

8.1.1 TMS business server shall host a single business transactional database
and connect to DMZ with the matching plugin.

8.1.2 The TMS Business Servers (Database Server) shall be designed to be

redundant with no data loss when one server failed. The failover to
standby server shall not require any user intervention. Alarming shall be
displayed when there is an automatic change over from active to standby
server. Database on backup server shall be automatically synchronized
with active server on real time without manual intervention.

8.1.3 TMS Business Server transactions data exchange shall not degrade the
performance of the monitoring and control functions in the process
control system.

8.2 TMS Control Server

Saudi Aramco: Company General Use

©Saudi Aramco 2019. All rights reserved. Page 24 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

8.2.1 The TMS shall be configured for control application as defined in

respective sections of SAES-Z-001.

8.2.2 The TMS shall be configured to provide alarms, alerts and process
event logs as defined SAES-Z-001 Section 12.

8.3 Driver Verification System (DVS)

8.3.1 The TMS shall be configured to verify a truck driver’s identity via eye
scan or biometric technology (fingerprint scanning), card reader or
barcode reader. If card reader or barcode reader technology used then
additional authentication is required such as PIN or password.

8.3.2 The DVS shall be configured to allow manual data entry through an
integrated keypad. Manual Entry shall be controlled by the TMS.

8.3.3 The DVS shall be configured to communicate with the TMS via
TCP/IP Ethernet.

8.3.4 The DVS shall be installed at entry gate, waiting area, loading bays,
and BOL building.

8.3.5 The TMS shall be configured with standard maximum expiration time
(timeout) for entry.

8.3.6 The TMS shall be configured to use of DID as DVS in case of DVS
fails.

8.3.7 The DVS shall be configured to display meaningful messages to driver

to take correct actions.

8.4 Order Information System (OIS)

8.4.1 The OIS shall be configured to verify order information via barcode
scanning technology.

8.4.2 The OIS can be integrated with the DVS.

8.4.3 The OIS shall be configured to allow manual data through an

integrated keypad. Manual entry shall be controlled by the TMS.

8.4.4 The TMS shall be configured to use of DID as OIS in case of OIS fails.

8.5 Truck Identification System (TIS)

8.5.1 The TIS shall be provided at the entry gate, exit gate and
loading/unloading bays.
Saudi Aramco: Company General Use
Page 25 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

8.5.2 The TMS shall be configured to enter a truck number via DID incase
TIS malfunction.

8.5.3 The TIS shall upload the truck information to the TMS System.

8.5.4 The TMS shall authenticate the tanker truck and send a
loading/unloading authorization command to the controller.

8.5.5 Tanker tag and reader shall be configurable to communicate via

wireless technology with sensor (RFID) installed on truck.

8.5.6 TIS tag shall be deactivate if it is tampered or mishandled, also, TIS-

TMS functionality shall be configured to deactivate tanker tag device
manually which is installed on truck if it is tampered or mishandled or
any other purpose.

8.5.7 Communication between the truck tag and the tag reader shall be
encrypted.

8.5.8 The serial number of tanker tag device shall be programmed into the
device which shall be used for identification.

8.5.9 The TMS shall be configured to record the tanker number to the unique
tanker tag ID. This number is used to auto detect the truck.

8.5.10 The TIS tag reader shall be configured to communicate with the TMS
via TCP/IP or serial communications.

8.5.11 TIS shall have good line of sight and shall not interface with adjacent
bay trucks.

8.6 Preset Controller

8.6.1 TMS shall be configured to monitor and control loading/unloading

operations and provide data storage utilizing data from the preset
controller.

8.6.2 The TMS shall be configured to exchange preset controller information

such as driver number, tank truck number, order number,
loading/unloading parameters and process parameter from the Preset
Controller, at each loading/unloading bay. This data shall be used for
driver, tank truck and order verification. Driver messages shall be
displayed on the Preset Controller in meaningful way.

8.6.3 In case of communication failure between TMS and Preset Controller,

the Preset will continue loading/unloading until the completion of the
Saudi Aramco: Company General Use
©Saudi Aramco 2019. All rights reserved. Page 26 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

current batch (running) . TMS shall not allow the loading/unloading of

a new batch from the same bay in auto mode until the communication
reestablish. The bay can allow loading/unloading batches in manual if
Operator selects a bay in Manual. The TMS shall be configured to
upload manually completed orders when communication is re-
established.

8.6.4 The TMS shall be configured to utilize the Preset Controller for the
entry of transaction data as the loading/unloading interface.

8.6.5 Multiple Preset Controllers installed (for different products) in a single

loading bay shall have the ability to work with one TIS.

8.6.6 Preset and TMS shall be configured to upload, display and store the
following Preset Controller data on the TMS as a minimum:
 Configuration
 Alarms and diagnostics messages.
 Keypad entry.
 Ready, operating, or end of operating data available status.
 Automatic or manual mode status.
 All I/O status.
 All driver and operator actions for a particular loading/unloading
order.
 Identification and verification: Driver, Tanker and Order .
 Meter Reading (Liters): Opening, Closing, Indicated Volume
Delivered, Gross Volume Delivered, Gross Standard Volume at
15C Delivered.
 Average Temperature in C
 Density at 15C (kg/m³).
 Average Flow Rate (L/min.).
 Average Meter Factor.
 Total loaded quantity
 Pressure

8.6.7 Preset and TMS shall be configured to download the following

information on the Preset Controller at a minimum:
 Configuration to preset controller.
 Order details along with driver and tanker.
Saudi Aramco: Company General Use
Page 27 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

 Display – operator/driver prompts, text message on preset

controller.
 Driver/order/ tanker transaction data and verification
confirmations.
8.7 Driver Interface Device (DID)

8.7.1 DID shall be configured to communicate to the TMS via point-to-point

serial protocols or via networked interface using TCP/IP.

8.7.2 The TMS shall be configured to sequentially poll the devices to obtain
data.

8.7.3 A device driver shall be installed on the TMS Servers to obtain the
entered driver, tank truck and order numbers from the DID. The TMS
server shall be configured to process and verify these numbers against
a predefined database. If the driver information is not in the database,
the driver will be referred to Sales office or Operator, for assistance.

8.7.4 DID shall be configured in redundant configuration.

8.7.4 DID shall be configured to be use as DID, DVS and OIS incase
operator intend or auxiliary device fails.

8.8 Queue Monitoring

8.8.1 The queue monitoring shall be a minimum 52” size flat LED monitor
with 1920x1080 resolutions at 60 Hz refresh rate.

8.8.2 The queue monitoring shall be mounted on a wall in the truck driver
waiting area with an adjustable bracket.

8.8.3 The TMS shall be configured to permit truck (tanker) in queuing

system only after valid confirmation of order, tanker, driver and
successful truck inspection requirement if it is enabled.

8.8.4 Allocating Bay and queueing sequence shall be based on the calculated
priority using the order/truck priority and arrival time of the truck.

8.8.5 The TMS shall be configured to display the trucks numbers in

sequence of loading/unloading orders based on the queue system
priority. The truck allowed to load first shall be displayed on the top.

8.8.6 The TMS queue monitoring system shall display the operation status of
each bay.

Saudi Aramco: Company General Use

©Saudi Aramco 2019. All rights reserved. Page 28 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

8.8.7 Queue monitoring shall be configurable for multiple pages and page
flip time. This is required if the open orders are more than one page.

8.8.8 Queue monitoring shall display all latest orders along with its status.

8.8.9 Queue monitoring shall display all pending orders on the active screen,
pending orders more than two days shall not be displayed.

8.8.10 The TMS should be configurable to follow the driver queue workflow
as shown in Appendix D and Appendix E.

8.9 Weigh Scale Interface

8.9.1 The TMS shall be configured to interface with weighscale electronics

via Modbus communications.

8.9.2 All order data shall be exchanged with TMS and weigh scale similar to
preset controller exchange method.

8.9.3 Order, Driver and Truck authentication shall be followed to ensure the
safety and reliability similar to preset controller loading operation.

8.10 Bill of Lading

8.10.1 The TMS shall be configured for two Bills of Lading (BOL) printers
in redundant mode at Exit Gate.

8.10.2 The TMS design shall include centralized and redundant BOL printers
with auto switchover capability.

8.10.3 A minimum of two BOL/ delivery receipt printers shall be installed per
BOL building.

8.10.4 The BOL printer installed at Exit gate shall be industrial grade printer
and shall be able to withstand in harsh environment. The printer shall
handle minimum 800 print batches per day.

8.10.5 BOL shall communicate with the TMS device for automatic receipt
printout after verification of the transaction information received
through DID.

8.10.6 If required by the Company, E-BOL technology requirements shall be

implemented. E-BOL is an electronic bill of lading which is sent
through electronically to user either email or SMS format.

8.10.7 In case of drive through BOL technology:

Saudi Aramco: Company General Use

Page 29 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

 BOL printing shall be automatic by detecting and identifying the

loaded truck.

 BOL Cabinets design shall comply with environmental

requirement and suitable for harsh and rough use.

8.11 Terminal Servers

8.11.1 Terminal servers shall be configured to utilize only the active serial
ports connected to the system.

8.11.2 Terminal Servers shall be able to automatically reconnect after

communication is re-established.

8.11.3 Single port Terminal Servers in redundant configuration shall use to all
device interface which has redundant connectivity (two ports in
redundant mode) including loading and unloading preset controllers,
Weigh-scale electronics, Custody pipeline metering and proving
control systems, TIS, OVS, DID etc.

8.11.4 Multi-port serial terminal servers are allowed only for simplex
interfaces where equipment is less critical and does not support
redundant communication.

8.11.5 Terminal servers shall be mounted in a cabinet preferably in the

network cabinet.

8.11. 6 Auxiliary systems shall not be daisy chained while interfacing with
terminal server.

8.12 Custody Pipeline Metering and Proving Control Systems (MSC)

The TMS shall be configured to interface to the MSC via Modbus or OPC
whatever required.

8.13 Automatic Tank Gauging (ATG) Inventory System

8.13.1 ATG inventory calculation shall be an integral part of TMS shall meet
the SAES-Y-301 or the TMS shall be configured to interface to the
ATG via Modbus or OPC to exchange real-time data between them,
whatever required. Preferably, OPC set in TMS as OPC server.

8.13.2 The TMS shall automatically monitor the tanks conditions and to alert
the operation personnel at the control console in case of any deviation
in level, flow, temperature, density, and pressure as well as in case of
unexpected movement, wrong direction, leak, and flow start/stop.
Saudi Aramco: Company General Use
©Saudi Aramco 2019. All rights reserved. Page 30 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

8.13.3 The TMS shall be configured with manual data entry capability for
tanks without an ATG or in case of ATG malfunction. Minimum tank
information entry parameters are as follows:
 Level.
 Temperature measurement.
 Volume.
 Tank contents by type (Product).
 Tank leak detection (detection of unexpected level changes).
 Actual available capacity.
 product density

8.14 Fire Detection and Alarm System

8.14.1 The TMS shall be configured to interface to the Fire Detection and
Alarm system through hardwired signals to the TMS controllers,
Signals definition shall be included in the project specifications.

8.14.2 TMS shall be interfaced to the FACP via Modbus or TCP/IP

communications. All alarms and other status information available in
the FACP shall be configured and displayed in the TMS.

8.15 Firewater System

The TMS shall be configured to monitor the Firewater system through

hardwired signals to the TMS controllers. The minimum signals are as follows:
 Tank level.
 Water suction and discharge pressures.
 Pump Flow.
 Running and fault status indication of the firewater pumps.
 Firewater diesel engine.
 Jockey pump.
8.16 Time Synchronization

The TMS shall configured for time synchronization based on SAES-Z-01. All
TMS subsystems shall configured to synchronize the time with TMS master
clock source and shall not exceed the allowance at any point of time.

Saudi Aramco: Company General Use

Page 31 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

9 Electrical and Environmental Conditions

TMS equipment shall meet the electrical requirement defined in SAES-J-902 and
environmental requirements defined in Section 5 of 23-SAMSS-010.

10 Operation Centers

Bulk Plant operation centers design shall be per SAES-B-014.

Revision Summary
7 July 2015 New Saudi Aramco Engineering Standard.
11 October 2018 Major revision. Editorial and sections rearrangement.
2 May 2019 Editorial revision as part of content confirmation assessment
Summary of Change Form
No. Change Type Technical Change

Paragraph (New,
No. Modification,..)

1 2 New International standards referenced (alignment)

Modification Referenced documents referred into respective

2 All sections.

Modification Documents wording and sections rearranged to

make it consistency. Wording corrected for
3 All more clarity.

modification Title modified to Design of Terminal

Management Systems
4 Title

Saudi Aramco: Company General Use

©Saudi Aramco 2019. All rights reserved. Page 32 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

Appendix A - Typical Product Tank Allocation

Figure 1 - Product Tank Allocation

Saudi Aramco: Company General Use

Page 33 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

Appendix B - Typical Tank Truck Unloading

Figure 2 - Tank Truck Unloading Procedure

Saudi Aramco: Company General Use

©Saudi Aramco 2019. All rights reserved. Page 34 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

B C

Driv er disconnects and

stows unloading hose

Driv er disconnects
ground plug

Can the driv er Can problem

Operators Driv er walks to printer
A Y es unload at a No be f ixed
alerted building
dif f erent bay ? im m ediately ?

Y es

Driv er enters driv er

Tim eout?
No num ber

Y es

Driv er instructed to Transaction

leav e site No com plete

No
Driv er to check all TMS prints
bay closed Fix problem hoses are deliv ery receipt
correctly stowed

Operations print
release note or Driv er retriev es
Are the
deliv ery receipt as Operator instructs deliv ery receipt and
traf f ic lights
appropriate driv er to exit returns to his
on green?
tanker

Security checks
Driv er exits
Release note/
unloading bay
deliv ery receipt

Driver exits site

Figure 3 - Tank Truck Unloading Procedure

Saudi Aramco: Company General Use

Page 35 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

Appendix C - Typical Tank Truck Loading (No Queue)

Tank truck arr ives at D r iver denied access

secur ity gate to site

No

D riv er's ID card D riv er

ex am ined by sec urity adm itted to
pers onnel site?

Y es

H as driv er
Y es got host
order?

No

D riv er parks in v ac ant

park ing space

D riv er driv es to D riv er walks to

appropriate rack operations room

D riv er enters driv er, Operator m ak es

Tank order and tank truck appointm ent/ order if
truck Y es
num bers av ailable
databas e
table

TMS c hec ks driv er,

D riv er Appointm ent/
order tank truck and No
databas e order giv en?
arriv al tim e are v alid
table

Y es Order
databas e D riv er ref erred to
D etails v alid? No
table sales staf f

Y es
Operations print
releas e note or
R eady to start loading Problem BOL as
proc edure
Y es
resolv ed?
No B
appropriate

No

Problem
resolv ed?

D riv er ref erred to

sales staf f

D riv er parks in
v acant park ing C
space

Figure 4 - Tank Truck Loading Procedure (No Queuing System)

Saudi Aramco: Company General Use

©Saudi Aramco 2019. All rights reserved. Page 36 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

D riv er connects
A ground plug to
tank truck

D riv er to interc om
Operators Tank truc k
to operations No
alerted OK?
staf f

Y es

D riv er connects
driv er told to Operator resolv es
No loading and
ex it rack? problem
v apour hos es

Tank TMS downloads

Order quantity to preset
truck
databas e controller
databas e
table
table
Y es

D riv er pres ses

D riv er dis connects
start button on
ground plug
pres et controller

D E F

Figure 5 - Tank Truck Loading Procedure (No Queuing System)

Saudi Aramco: Company General Use

Page 37 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

Figure 6 - Tank Truck Loading Procedure (No Queuing System)

Saudi Aramco: Company General Use

©Saudi Aramco 2019. All rights reserved. Page 38 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

Appendix D - Typical Queue Algorithm

Star t

Enter driv er
D riv er enters driv er
num ber
Y es num ber A
again?

TMS c hec ks that

D riv er the driv er No
databas e num ber is v alid
table

Error! D riv er
Is the driv er num ber
No No
num ber v alid? incorrec t or not
v alid

Y es

Enter order
num ber

TMS c hec ks that Enter order

Order the order Y es num ber
databas e num ber is v alid again?
table

Error! order
Is the order num ber
No Valid order
num ber v alid? incorrec t or not
v alid

Y es

TMS c hec ks that

Enter tank Order
the appointm ent
truck number databas e
tim e is within lim its
table

Y es

TMS c alculates new

Tank TMS c hec ks that Enter tank
Is the driv er appointm ent tim e.
truck the tank truck Y es truck number Y es
late? Tim e = (old tim e) +
databas e num ber is v alid again?
(m inutes late * f )
table

No

Error! tank
Is the tank TMS dis play s
truck number TMS alloc ates new
truck number No appointm ent
incorrec t or appointm ent tim e
v alid? tim e
not v alid

Figure 7 - Waiting Room Data Entry Procedure

Saudi Aramco: Company General Use

Page 39 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

B Fix dev ice

Y es

Problem with Operator enters

Report to Can the
the driv er driv er, tanker,
A Operations (Sales
interf ace
Y es problem be No
order details in the
of f ice) f ixed?
dev ice? TMS

No

Driver with out Order issued/

No
ap pointment rev ised?

Y es Tank
truck
database
table
Operations (Sales
of f ice) rev ise/ m ake Order TMS checks details
order database
table

Driv er
database
table
Operator enters
TMS allocates an
order details in
appointm ent
the TMS

TMS allocates TMS site

TMS allocates an
queue po sition by
appointm ent
ap pointment time.

TMS prints FAN Driver no t allo wed

to load

Figure 8 - Waiting Room Data entry Procedure

Saudi Aramco: Company General Use

©Saudi Aramco 2019. All rights reserved. Page 40 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

Enable
Change
tank
Start tank truck Start
truck
status
loading

Driv er
presses start
Tank truck
No W aiting button on No W aiting
identif ied?
preset
controller

Y es Y es

Look at f irst tank Look at f irst tank

truck in bay truck in bay
queue queue

Look at next tank Look at next tank

truck in bay truck in bay
queue queue

No No

Does
identif ied
End of bay Does status = End of bay
tank truck No No
queue? 'AT BAY '? queue?
m atch the
record

Y es Y es

Set tank truck (t) Set tank truck (t)

status = 'AT BAY ' status = 'LOADING'

Start tank truck (t) Start tank truck (t)

'AT BAY ' tim er 'LOADING' tim er

Y es Y es

Stop tank truck (t) Display Stop tank truck (t)

'QUEUING' tim er status 'AT BAY ' tim er

Enable tank truck

Display status
(t) loading

Alarm . tank
Alarm . tank truck
truck not in bay
not in bay queue
queue

Figure 9 - TMS Queue Management

Saudi Aramco: Company General Use

Page 41 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

Ad d R emo ve
tank tank truck
Start Start
truck to from
queue queue

N um ber of
tank truck s in
bay (n) traf f ic
the queue les s
No W aiting lights switch No W aiting
than the
to green?
m ax im um .
(z < x)?

Y es
Y es

Look at f irs t tank Look at f irs t tank

truck in TMS truck in bay
site queue queue

Look at nex t tank Look at nex t tank

truck in TMS site truck in bay
queue Y es queue

No No

C an the tank
truck be End of TMS D oes status = End of bay
No No
loaded at bay site queue? 'LOAD IN G'? queue?
(n)?

Y es Y es

R es erv e record, add

tank truck (t) to the R es erv e record and
end of bay (n) queue delete f rom bay
and delete f rom site queue
queue

Set tank truck (t) s tatus Stop tank truck (t)

= 'JOIN QU EU E' 'LOAD IN G' tim er Y es

R em ov e one tank
Add one tank truck
truck f rom the
to the queue length.
queue length. Set z
Set z = z + 1
=z-1

Start tank truck (t) D isplay Alarm . tank truck

'QU EU IN G' tim er status not in bay queue

Figure 10 - TMS Queue Management

Saudi Aramco: Company General Use

©Saudi Aramco 2019. All rights reserved. Page 42 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

Y es

Check tank
Tank truck (t)
truck Look at f irst tank End of
Start 'QUEUING' No
'Queu in g' truck in the queue queue?
tim eout?
timeout

Y es

Alarm . Tank
Look at next tank truck
truck 'QUEUING'
tim eout

No

Y es

Check
tank Tank truck (t)
Look at f irst tank End of
truck 'At Start 'AT BAY ' No
truck in the queue queue?
bay' tim eout?
timeout

Y es

Alarm . Tank
Look at next tank
truck 'AT BAY '
truck
tim eout

No

Y es

Check tank
Tank truck (t)
truck Look at f irst tank End of
Start 'LOAD ING' No
'Loadin g' truck in the queue queue?
tim eout?
timeout

Y es

Alarm . Tank
Look at next tank truck
truck 'LOAD ING'
tim eout

No

Figure 11 - TMS Queue Management

Saudi Aramco: Company General Use

Page 43 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

Appendix E - Typical Tank Truck Loading (with Queue)

Tan ker ar rives at D r iver d en ied access

secu r ity g ate to site

No

D riv er's ID card D riv er

ex am ined by sec urity adm itted to
pers onnel site?

Y es

D riv er parks in v ac ant

park ing space

H as driv er
Y es got host
order?

No

D riv er walks to D riv er walks to sales

waiting room room

D riv er enters driv er, Operator m ak es

order and tanker appointm ent/ order if
num bers av ailable
Tanker
databas e
table

TMS c hec ks driv er,

D riv er Appointm ent/
order and tanker are No
databas e order giv en?
v alid
table

Order
databas e
table D riv er, order
and tanker are No
Y es
v alid?

Y es

TMS allocates loading D riv er ref erred to

Problem
bay and queue Y es Operations (Sales
resolv ed?
position of f ice)

No Operations print
D riv er waits until his turn is releas e note or
display ed on the queue BOL as
m onitor appropriate

B C D E

Figure 12 - Tank Truck Loading Procedure (Queuing System)

Saudi Aramco: Company General Use

©Saudi Aramco 2019. All rights reserved. Page 44 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

D riv er c onnects
A Y es ground plug to
tank truck

D riv er enters
tank truck
num ber

TMS v erif ies

Tank tank truck
truck details and
databas e certif ication
table

D riv er to intercom
Operators Tanker
to operations No
alerted OK?
staf f

Y es

Operator D riv er c onnects

driv er told to
No resolv es loading and
ex it bay ?
problem v apour hoses

Y es

Tank TMS downloads

D riv er dis connects Order
truck quantity to pres et
ground plug databas e
databas e controller
table
table

D riv er presses start

button on preset
controller

F G H

Figure 13 - Tank Truck Loading Procedure (Queuing System)

Saudi Aramco: Company General Use

Page 45 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

Figure 14 - Tank Truck Loading Procedure (Queuing System)

Saudi Aramco: Company General Use

©Saudi Aramco 2019. All rights reserved. Page 46 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

B C D F

D riv er park s in D riv er instructed to

D riv er returns to his tank er
v acant parking s pac e return J

D riv er driv es to allocated

loading bay and joins the queue

H as the bay
Y es
been clos ed?

No No

Is the bay
em pty ?

Y es

D riv er park s in bay and enters

driv er num ber at preset

TMS v erif ies c orrect bay and

queue position E

C orrect bay and

Y es No Operators alerted
queue position?

Operator re-assigns bay

Y es

Operator
Is order c orrec t D riv er to intercom to
decides to load Y es
f or ty pe of bay ? operations staf f
any way ?

No

No

D riv er returns to
tank er

Security checks D riv er ex its loading

Driver exits site R elease note/ BOL bay K

Figure 15 - Tank Truck Loading Procedure (Queuing System)

Saudi Aramco: Company General Use

Page 47 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 2 May 2019
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

Appendix F - Typical Pipeline Meter Proving

Start

Prov ing
Is prov ing
operation Operator m us t wait W ait till prov ing is
Y es operation No
already in until it is com plete com plete
com plete?
progress?

Y es

C PMPC S switc hes

No prov er v alv es back to
pipeline operation

C PMPC S calculates and

Operator
records new m eter
sc hedules prov ing
f actors and trans m its to
operation
TMS

H as interf ace W ait f or interf ace Meter f ac tor

point arriv ed at No to arriv e at prov ing historical
prov ing tee tee display

Y es

Operator
Initiate C PMPC S prov ing ac cepts new TMS uploads new
Y es
cy cle f rom TMS m eter f ac tor v ia m eter f ac tor data
TMS

C PMPC S com m ences

prov ing operation
No

Operator request f rom

H as interf ace W ait f or interf ace TMS to C PMPC S to print
point arriv ed at No to arriv e at m eter prov ing report
m anif old? m anif old

Y es

TMS s witc hes m anif old

v alv es to accept new End
product

Figure 16 - Multi-Product Pipeline Meter Proving

Saudi Aramco: Company General Use

©Saudi Aramco 2019. All rights reserved. Page 48 of 49
Document Responsibility: Process Control Standards Committee SAES-Z-008
Issue Date: 11 October 2018
Next Planned Update: 11 October 2021 Design of Terminal Management Systems

Appendix G - Typical Bulk Plant Automation Overview

Page 49 of 49