In industrial environments where combustion processes power critical operations—such as steam generation, thermal processing, and energy production—safety is not optional. It is engineered into every component, every line of code, and every operational step. At the center of this safety ecosystem lies the Burner Management System (BMS).

For companies like Bacon Engineering, which specialize in boiler control systems and industrial combustion safety, the design of a BMS goes far beyond simple control logic. It is a carefully structured, standards-driven, and highly reliable system built to protect personnel, equipment, and production continuity.

Understanding the Role of a Burner Management System

Before diving into design specifics, it’s important to understand what a BMS actually does in an industrial setting.

A Burner Management System is a safety-critical control system responsible for:

• Ensuring safe startup and shutdown of burners
• Verifying proper operating conditions before ignition
• Monitoring flame presence continuously
• Shutting off fuel immediately if unsafe conditions occur

In industrial environments—especially boilers, furnaces, and process heaters—the consequences of failure can be catastrophic. Fuel accumulation, delayed ignition, or flame instability can lead to explosions, equipment damage, or loss of life.

Because of this, a BMS is designed with one overriding principle:

👉 Combustion is only allowed when all safety conditions are proven—and must stop instantly when they are not.

Core Architecture of a Bacon Engineering–Style BMS

A well-designed industrial BMS is not a single device—it is a layered system architecture composed of multiple subsystems working together.

Safety Layer (The Foundation)

At the heart of the system is the safety layer, which includes:

• Safety-rated PLCs or dedicated burner management controllers
• Hardwired interlock circuits
• Redundant safety inputs

This layer has absolute authority over fuel flow. If a safety condition fails, this layer initiates an immediate shutdown regardless of operator commands or other control systems.

In Bacon Engineering–style systems, this layer is designed to meet strict safety standards such as:

• NFPA 85 (boilers)
• NFPA 86 (ovens and furnaces)
• IEC 61511 / ISA 84 (functional safety)

Control Layer (Sequencing and Logic)

Above the safety layer is the control layer, typically implemented using PLC logic.

This layer handles:

• Burner startup sequences
• Purge timing
• Ignition control
• Transition to normal operation

While it executes operational logic, it is always subordinate to the safety layer.

Interface Layer (Operator Interaction)

Operators interact with the system through:

• Human-Machine Interfaces (HMIs)
• SCADA or Distributed Control Systems (DCS)

This layer provides visibility into:

• System status
• Active interlocks
• Alarm conditions
• Manual control options (within safety limits)

A key design principle here is clarity and usability, ensuring operators can quickly understand system conditions and respond appropriately.

Field Device Layer (Real-World Inputs and Outputs)

At the physical level, the BMS interfaces with:

• Flame scanners (UV or IR)
• Fuel shutoff valves
• Air dampers and actuators
• Pressure, temperature, and flow sensors

These devices provide the real-time data the system uses to make safety decisions.

Design Philosophy: Safety First, Always

What distinguishes a Bacon Engineering–type system is not just its components, but its design philosophy.

Fail-Safe Operation

Every element is designed so that failure results in a safe condition.

Examples include:

• Fuel valves that close automatically when power is lost
• Circuits that require positive confirmation of safety rather than assuming it
• Control logic that defaults to shutdown when signals are lost

This ensures that even in the event of equipment failure, the system moves toward safety—not risk.

Redundancy in Critical Systems

Where failure would be dangerous, redundancy is introduced.

This may include:

• Dual pressure switches (high and low limits)
• Multiple airflow verification devices
• Redundant flame detection systems
• Voting logic (e.g., two-out-of-three signal validation)

This approach reduces the likelihood of false readings and increases overall system reliability.

Deterministic Logic

Unlike general automation systems, BMS logic is deterministic and sequential.

This means:

• Every step must be completed and verified before the next begins
• No unsafe parallel actions are allowed
• Timers and conditions are strictly enforced

This structured approach eliminates ambiguity and ensures predictable system behavior.

Control Panel Design and Construction

In most cases, a Bacon Engineering–style BMS is delivered as a custom-built control panel, often meeting UL508A standards.

Key Components Inside the Panel

• PLC or safety PLC hardware
• Input/output modules
• Interposing relays
• Power supplies (often redundant)
• Terminal blocks
• Communication hardware

Design Best Practices

Control panel design emphasizes:

Electrical Separation

High-voltage and low-voltage components are physically separated to prevent interference and improve safety.

Signal Integrity

Shielded wiring is used for sensitive signals like flame detection to avoid electrical noise.

Maintainability

Clear labeling, organized wiring, and accessible components allow technicians to troubleshoot efficiently.

Expandability

Spare I/O points are often included for future system upgrades.

Burner Sequencing: The Heart of the System

The most critical function of a BMS is managing the burner startup and operation sequence.

Typical Sequence of Operation

1. Idle State

The system waits for a start command while verifying that all conditions are safe.

2. Pre-Purge

Airflow is forced through the combustion chamber to remove any residual fuel.

This step is:

• Time-controlled
• Based on combustion chamber volume
• Required by safety standards

3. Pilot Ignition

The system:

• Activates the igniter
• Opens the pilot fuel valve
• Monitors for flame detection

If no flame is detected within a specified time, the system shuts down.

4. Main Flame Establishment

Once the pilot is proven:

• Main fuel valves open
• The burner ignites
• Flame stability is verified

5. Normal Operation

Control is handed off to the combustion control system, which adjusts fuel and air to meet process demand.

6. Shutdown

Shutdown may be:

• Normal (controlled)
• Emergency (immediate fuel cutoff)

Safety Interlocks: Continuous Protection

Throughout operation, the BMS monitors a wide range of safety conditions.

Common Interlocks Include:

• Combustion airflow verification
• Fuel pressure limits
• Valve position confirmation
• Flame presence
• Furnace or boiler pressure
• Emergency stop circuits

These interlocks are implemented using both:

• Hardwired circuits (for immediate response)
• PLC logic (for flexibility and diagnostics)

Flame Detection System Design

Flame detection is one of the most critical aspects of BMS design.

Technologies Used

• Ultraviolet (UV) scanners
• Infrared (IR) scanners
• Flame rods (in some applications)

Design Considerations

• Proper sensor placement for clear flame visibility
• Shielded cabling to prevent signal interference
• Continuous validation of flame signal quality

Response to Flame Failure

If flame is lost:

• Fuel valves close immediately
• The system enters a trip condition
• Restart requires manual intervention

This rapid response prevents dangerous fuel accumulation.

Fuel Train Integration

The BMS directly controls the fuel delivery system, commonly referred to as the fuel train.

Typical Components

• Double block and bleed valves
• Pressure regulators
• Vent valves
• Shutoff valves with position feedback

Safety Design Features

• Valves are designed to fail closed
• Position switches verify valve status
• Leakage prevention is built into the system

Before startup, the system confirms that all valves are in the correct position.

Integration with Combustion Control Systems

A critical distinction in industrial combustion systems is the difference between:

• Burner Management System (BMS)→ Safety
• Combustion Control System (CCS)→ Performance

In a Bacon Engineering–type setup:

• The BMS controls startup, shutdown, and safety trips
• The CCS controls fuel-air ratios during operation

If a safety condition fails, the BMS overrides the CCS instantly.

Human-Machine Interface (HMI) Design

The HMI is where operators interact with the system.

Key Features

• Real-time system status
• Interlock condition display
• Alarm notifications and history
• Manual controls (with safeguards)

Design Priorities

• Clear, intuitive layouts
• Minimal operator confusion
• Rapid access to critical information

A well-designed HMI reduces the risk of human error and improves response time during abnormal conditions.

Testing and Commissioning

No BMS is complete without thorough testing.

Factory Acceptance Testing (FAT)

Before delivery, the system undergoes:

• Simulated input/output testing
• Logic validation
• Safety trip verification

Site Commissioning

Once installed, additional testing includes:

• Field device verification
• Loop checks
• Live burner testing
• Safety shutdown validation

This ensures the system performs correctly in real operating conditions.

Documentation and Compliance

Industrial BMS systems require extensive documentation, including:

• Electrical schematics
• Piping and instrumentation diagrams (P&IDs)
• Cause-and-effect matrices
• I/O lists
• Logic descriptions

These documents are essential for:

• Regulatory compliance
• Maintenance and troubleshooting
• Future system upgrades

Why This Level of Design Matters

In industrial environments, combustion systems operate under extreme conditions:

• High temperatures
• High pressures
• Continuous operation

Failures are not minor inconveniences—they can be catastrophic.

A well-designed BMS:

• Prevents explosions
• Protects expensive equipment
• Ensures worker safety
• Minimizes downtime

Conclusion: Engineering Safety into Every Step

A Bacon Engineering–type Burner Management System represents more than just automation—it is a comprehensive safety solution built on proven engineering principles.

From redundant hardware and fail-safe design to deterministic logic and rigorous testing, every aspect of the system is designed with one goal:

Ensure combustion only occurs when it is safe—and stop it immediately when it is not. In industries where reliability and safety are paramount, this level of design is not just beneficial—it is essential.