Explosion Prevention by Oxygen Control
Explosion prevention in hydrogen and hydrocarbon plants is usually discussed in terms of fuel detection and ignition control. Operators install hydrocarbon detectors, hydrogen detectors, flame detectors and fire and gas systems to identify releases before they become dangerous. These measures are essential.
But there is another approach that is often more fundamental: remove one of the conditions required for combustion by controlling oxygen.
An explosion requires fuel, oxygen and an ignition source. In refineries, gas plants and hydrogen facilities, the fuel is usually the process itself. Completely eliminating every possible ignition source is also difficult.
That leaves oxygen as a variable that can often be actively controlled. This is the principle behind inertization, nitrogen purging, vessel blanketing and oxygen-based safety interlocks.
Inert does not mean zero oxygen
Industrial inertisation does not normally mean reducing oxygen to absolute zero. The practical objective is to keep oxygen below the concentration at which combustion can be sustained under the relevant process conditions. This is commonly described by the Limiting Oxygen Concentration, or LOC.
The actual limit depends on the fuel, inert gas, temperature, pressure and process composition. It therefore has to be established during the process safety assessment rather than treated as a universal value. The engineering question is not: “Can we eliminate every molecule of oxygen?” It is: “Can we continuously demonstrate that oxygen remains safely below the permitted limit?”
That is where oxygen analysis becomes part of process safety rather than simply process monitoring.
Four practical methods of oxygen control
1. Inertisation
Inertisation replaces air inside vessels, piping and process equipment with a non-reactive gas, usually nitrogen. Typical applications include:
- storage vessels
- reactors
- separators
- compressors
- hydrocarbon piping
- hydrogen systems
- vapour recovery systems.
During start-up, nitrogen is introduced until oxygen has fallen below the required value. Only then is hydrogen or hydrocarbon admitted. During shutdown, the reverse sequence is normally used. Fuel is first displaced with inert gas before the system is opened or exposed to air. This sequencing is particularly important with hydrogen.
The dangerous condition often occurs not during stable operation, but during the transition between: air → nitrogen → hydrogen or: hydrogen → nitrogen → air. Continuous oxygen measurement verifies when each transition has been safely completed.
2. Nitrogen blanketing
Once a vessel has been inerted, a small positive pressure of nitrogen can be maintained above the liquid or process material. This reduces air ingress caused by product withdrawal, temperature changes or minor leakage.
Blanketing is widely used for volatile hydrocarbons and oxygen-sensitive chemicals. But pressure alone does not prove that the atmosphere remains inert. A nitrogen regulator can be operating while air still enters through another route. Pressure shows that nitrogen is being supplied. Oxygen measurement shows whether the protection is actually effective.
3. Purging
Purging deliberately displaces one gas with another. A hydrogen pipeline being commissioned may first be purged with nitrogen to remove air before hydrogen is admitted. A hydrocarbon vessel being prepared for maintenance may be purged in the opposite direction.
Calculated purge volumes and purge times are useful, but they depend on geometry, dead legs, mixing and actual flow conditions. Measured oxygen concentration provides direct confirmation of the atmosphere that has actually been achieved. A timer tells us how long we purged. The analyzer tells us whether it worked.
4. Oxygen alarm and safety shutdown
Continuous oxygen measurement can also be used as an input to the plant control or safety system. A typical philosophy may include:
- Normal condition: oxygen remains well below the approved operating limit.
- High alarm: nitrogen flow is increased and the operator is alerted.
- High-high condition: the process approaches a defined safety threshold and the system initiates a protective action such as feed isolation, compressor trip, valve closure or increased purge.
The oxygen analyzer does not replace the Safety Instrumented System. It provides the process measurement on which the DCS, PLC or SIS can act.
Why oxygen measurement is difficult
Many traditional oxygen analyzers require an extracted sample. In high-pressure hydrogen, natural gas and refinery service, this usually means:
- pressure reduction
- sample tubing
- filters
- valves
- flow control
- conditioning systems
- analyzer panels or shelters.
These systems work, but they add response delay, maintenance and potential leak points. For safety-related measurement, response time matters. There is a significant difference between detecting an oxygen excursion directly in the process and detecting it after the sample has passed through several meters of tubing and a pressure-reduction system.
MOD-1040: direct oxygen measurement in the process
The MOD-1040 Process Oxygen Analyzer was designed to address this problem. It uses optical photoluminescence technology and can be installed directly on a high-pressure process pipeline, avoiding the need for conventional sample extraction in many applications.
According to the current specification, the analyser provides:
- in-situ oxygen measurement
- operation up to 350 bar(g), with higher-pressure options
- T90 response below five seconds
- 4–20 mA outputs
- Modbus RS485 communication
- ATEX/IECEx Zone 1 certification
- SIL-2 safety integrity certification
- optional pressure and temperature compensation.
The practical advantage is straightforward: measure oxygen where the safety question actually exists — inside the process.
Application 1: Green hydrogen production
Electrolysis produces hydrogen and oxygen in the same system, separated by membranes and process design.
Under normal operation, crossover remains low. During start-up, shutdown, low-load operation or abnormal membrane conditions, crossover can increase. Oxygen in the hydrogen stream is therefore more than a purity problem. It can indicate that an oxidiser is entering a fuel stream.
MOD-1040 can be installed on the hydrogen line to provide continuous oxygen measurement and can support:
- start-up verification
- purge confirmation
- crossover monitoring
- abnormal-condition alarms
- controlled trip before compression or storage.
Modcon’s application documentation specifically identifies high-pressure hydrogen as an application where elevated oxygen can create explosive mixtures and where continuous monitoring is important.
The principle is simple: do not allow a hydrogen purity problem to become a compressor safety problem.
Application 2: Hydrogen compression and storage
Air can enter hydrogen equipment following maintenance, valve replacement, compressor opening, pressure cycling or incomplete purging.
Before hydrogen is introduced, the system can be inerted and the oxygen concentration verified. During operation, continuous oxygen analysis provides additional assurance that air has not entered the system.
The MOD-1040 can measure directly on high-pressure lines, reducing the need to depressurise the sample purely for analysis. This also reduces the number of regulators, fittings and sample lines through which hydrogen could potentially leak.
Application 3: Natural gas pipelines and gas processing
Oxygen in natural gas is undesirable both for process quality and safety. Air can enter during maintenance, commissioning, storage operations or through connected systems operating below atmospheric pressure. Continuous oxygen analysis can be used for:
- commissioning verification
- detection of air ingress
- purge confirmation
- operator alarms
- interlock input.
Direct measurement at process pressure is particularly useful in natural gas systems where conventional extractive sampling adds both complexity and delay.
Application 4: Storage tanks and blanketing
Nitrogen blanketing is widely used on tanks containing volatile hydrocarbons and chemicals. The blanket prevents atmospheric air from entering the vapour space as product is withdrawn or temperature changes occur.
However, nitrogen pressure alone is not proof of inert conditions. A faulty regulator, vent, hatch or seal can compromise the atmosphere while pressure still appears normal. Continuous oxygen measurement provides independent confirmation. A rising oxygen concentration can trigger:
- operator alarm
- increased nitrogen flow
- investigation of air ingress
- interruption of transfer
- shutdown before the atmosphere reaches an unsafe condition.
This turns blanketing from an assumption into a measured condition.
Application 5: Reactors and process vessels
Many refinery and chemical processes require an oxygen-free or oxygen-limited atmosphere before feed introduction. In these applications, oxygen measurement can be incorporated into permissive logic: O₂ above the permitted limit → feed cannot start.
Only when the analyzer confirms successful inertisation does the control system allow hydrogen, hydrocarbon or solvent feed. This is more reliable than simply confirming that a nitrogen valve has been open for a specified period.
The valve position tells us what the system attempted to do. The oxygen analyzer tells us what happened.
From monitoring to active prevention
The key value of continuous oxygen analysis is that it verifies whether one leg of the explosion triangle has actually been removed. Without oxygen measurement:
Nitrogen valve open → vessel assumed inert.
With oxygen measurement:
Nitrogen valve open → oxygen measured below the approved safety limit.
That is a much stronger operating basis. For safety-related applications, fast measurement is also important. The MOD-1040 specification gives a T90 response below five seconds, while direct in-situ installation removes much of the sample transport delay associated with extractive analyzers.
Oxygen control still requires proper engineering
Continuous oxygen measurement does not replace the rest of process safety. An inerted system still requires properly designed:
- nitrogen supply
- pressure control
- back-up supply where required
- valves
- alarm and shutdown logic
- hazardous-area equipment
- operating procedures
- maintenance and proof testing.
There is also an important personnel-safety issue. The atmosphere that prevents combustion may also be dangerous to people. Nitrogen inertisation creates oxygen-deficient environments, so explosion prevention inside a vessel must never be confused with safe personnel entry.
MOD-1040: making oxygen a controlled safety variable
The MOD-1040 allows oxygen measurement to move beyond laboratory quality control and become part of the operating and safety architecture of hydrogen and hydrocarbon processes.
Its combination of:
- direct in-situ measurement
- high-pressure capability
- photoluminescence sensing
- rapid response
- hazardous-area certification
- SIL-2 certification
- industrial communication
makes it suitable for inertisation monitoring, purge verification, blanketing control and safety-related oxygen measurement.
The objective is not to claim that one analyser can prevent every explosion. No single instrument can. The objective is more practical: measure the oxidiser continuously, detect loss of inert conditions early and give the control or safety system enough information to act before a combustible atmosphere develops.
For hydrogen, natural gas and hydrocarbon processes, this provides another valuable layer of protection. Sometimes the most effective way to detect an explosive mixture is to prevent it from forming in the first place.
