What Is Intrinsic Safety?
Intrinsic safety is a protection method for electrical equipment in explosive atmospheres. Rather than containing an explosion, it prevents one by limiting electrical energy so low that no spark or hot surface can ignite the surrounding gas. It is one of the most important concepts in oil and gas instrumentation. This guide explains how intrinsic safety works and where it is used.
Intrinsic Safety in one line: Intrinsic safety (IS) is a protection technique that prevents ignition in a hazardous area by limiting the electrical and thermal energy available in a circuit to a level too low to ignite the surrounding flammable gas, vapor, or dust under both normal and fault conditions.
How Intrinsic Safety Prevents Ignition
For an ignition to occur you need fuel, oxygen, and a source of energy such as a spark or hot surface. Explosion-proof enclosures and pressurization work by containing or excluding one of those. Intrinsic safety takes a different approach: it removes the energy. By restricting voltage and current so the maximum energy a circuit can release, even if a wire shorts or opens, stays below the ignition energy of the gas, a spark simply cannot carry enough energy to light off. Because the protection is inherent in the low energy, IS is the preferred method for low-power field instruments.
The energy limiting is done by a barrier at the boundary between the safe area and the hazardous area. A Zener barrier uses Zener diodes and a fuse to clamp voltage and limit current, referenced to a high-integrity ground. A galvanic isolator does the same but with transformer or opto isolation, removing the strict grounding requirement. Everything on the hazardous-area side, the field wiring and the instrument, must be a certified intrinsically safe apparatus and installed so its stored energy in cable capacitance and inductance stays within the barrier's limits.
Intrinsic Safety in Oil and Gas Instrumentation
Upstream and midstream sites are full of classified areas around wellheads, separators, tanks, and compressors where flammable gas may be present. Low-power devices in those zones, pressure and level transmitters, temperature sensors, and gas detectors, are commonly protected by intrinsic safety because it lets technicians work on live circuits and avoids heavy explosion-proof enclosures for small instruments. IS is often the only practical method for the simple 4-20 mA loops and digital signals that dominate field measurement.
A key advantage is maintenance: because the circuit can never store enough energy to ignite gas, an IS loop can be connected, disconnected, and calibrated live without a hot-work permit, which saves considerable time in the field. The transmitters on those IS loops still report the same 4-20 mA or digital values, so once they reach the PLC or RTU on the safe side of the barrier, a SCADA platform such as Merobix reads them exactly like any other instrument. The intrinsic safety is transparent to the data; it protects the wiring, not the number.
Entity Parameters: How an IS Loop Is Proven Safe
Every certified IS device carries entity parameters, and loop approval is an arithmetic exercise in comparing them. The barrier or isolator states the maximum it can deliver into the field: open-circuit voltage Uo, short-circuit current Io, and power Po, plus the most capacitance Co and inductance Lo it may safely see connected. The field device states the maximum it can safely receive - Ui, Ii, Pi - and the energy storage it adds, Ci and Li. The wiring between them contributes capacitance and inductance per unit length, taken from the cable manufacturer's data.
The loop passes when every comparison goes the right way: Uo not exceeding Ui, Io not exceeding Ii, Po not exceeding Pi, and the stored energy summing correctly - Ci plus the cable capacitance staying at or below Co, and Li plus the cable inductance at or below Lo. As a symbolic example: with a barrier rated Co and a transmitter contributing Ci, the allowable cable capacitance is Co minus Ci; divide that by the cable's capacitance per meter and you have the maximum cable run for that pairing. Substitute your actual certified values and the same arithmetic gives the real limit. The comparison must be documented, which is what the loop's control drawing or descriptive system document is for.
Protection Levels: ia, ib, and ic
IS comes in graded levels defined by fault tolerance. Level ia remains safe with two independent faults applied and is the level accepted in Zone 0, where an explosive atmosphere is present continuously or for long periods. Level ib remains safe with one fault and is accepted in Zone 1. Level ic is assessed for normal operation and serves Zone 2, where the atmosphere appears only abnormally and briefly. North American sites using the division system see the same idea expressed differently, with IS apparatus approved for the division and gas group of the location.
| Level | Fault tolerance | Accepted in |
|---|---|---|
| ia | Safe with two independent faults | Zone 0 |
| ib | Safe with one fault | Zone 1 |
| ic | Safe in normal operation | Zone 2 |
Field Discipline That Keeps IS Valid
An IS loop is only as safe as its installation stays. Light blue is the conventional identification color for IS wiring and terminals, and IS conductors are segregated from non-IS circuits in separate cables, ducts, or partitioned trays so a fault cannot couple higher energy into the protected loop. Substituting a device, lengthening a cable, or landing a spare conductor incorrectly can silently violate the entity comparison, which is why every change goes back through the control drawing rather than being judged safe by eye.
Contrast this maintenance model with an explosion-proof enclosure, where safety depends on flame-path surfaces and every cover bolt, and live work means killing power or gas-testing first. The IS loop trades that for paperwork: keep the documentation current, inspect per the site's schedule, and the live-work advantage holds. The barrier itself needs attention too - a Zener barrier that has taken a fault may have opened its fuse and simply gone dead, and its high-integrity ground connection needs periodic verification per site procedures.
Frequently Asked Questions
What is the difference between intrinsic safety and explosion proof?
Explosion-proof (flameproof) enclosures contain an internal explosion so it cannot spread to the surrounding atmosphere. Intrinsic safety instead prevents an explosion by limiting circuit energy below the ignition threshold. IS suits low-power instruments and allows live work; explosion-proof suits higher-power devices that cannot be energy-limited.
What is an intrinsic safety barrier?
An IS barrier sits between the safe area and the hazardous area and limits the voltage and current that can reach the field. A Zener barrier clamps voltage with diodes and a fuse and requires a solid ground; a galvanic isolator provides the same limiting with electrical isolation and no dedicated ground reference. Both keep the field circuit's energy below ignition levels.
Can you work on an intrinsically safe circuit while it is live?
Yes, that is a main benefit of intrinsic safety. Because the circuit can never release enough energy to ignite the classified atmosphere, IS-rated loops can be connected, disconnected, and calibrated live without a hot-work permit, provided the whole loop remains within its certified parameters. This makes routine instrument maintenance much faster.
What happens if you exceed the cable length on an IS loop?
The cable's distributed capacitance and inductance are part of the loop's stored energy. Exceed the length supported by the entity comparison and the energy the loop could release under fault goes beyond what the certification proved safe - the loop may still work perfectly, but the safety case no longer holds. That is why cable changes must be re-verified against the barrier's Co and Lo values, not just tested for signal.
Do intrinsically safe circuits need special glands and enclosures?
IS field devices generally avoid the heavy flameproof glands and enclosures of flameproof equipment - an ordinary enclosure that meets the environmental need is usually acceptable, because the circuit cannot ignite the atmosphere in the first place. What IS installations do require is identification (light blue is the convention) and segregation from non-IS wiring, so higher-energy circuits cannot contact or couple into the protected loop. The site's hazardous-area procedures govern the specifics.
Automation services
Need help turning this into a working system?
Merobix integrates SCADA, programs Allen-Bradley and Siemens PLCs, and designs and fabricates industrial control panels.
Meeting requests are reviewed before confirmation.