EPA-AA-SDSB-87-05 Technical Report Safety Implications of Onboard Refueling Vapor Recovery Systems June 1987 FINAL REPORT Technical Reports do not necessarily represent final EPA decisions or positions. They are intended to present technical analysis of issues using data which are currently available. The purpose in the release of such reports is to facilitate the exchange of technical information and to inform the public of technical developments which may form the basis for a final EPA decision, position or regulatory action. Standards Development and Support Branch Emission Control Technology Division Office of Mobile Sources Office of Air and Radiation U. S. Environmental Protection Agency ------- EPA-AA-SDSB-87-05 Technical Report Safety Implications of Onboard Refueling Vapor Recovery Systems June 1987 FINAL REPORT Technical Reports do not necessarily represent final EPA decisions or positions. They are intended to present technical analysis of issues using data which are currently available. The purpose in the release of such reports is to facilitate the exchange of technical information and to inform the public of technical developments which may form the basis for a final EPA decision, position or regulatory action. Standards Development and Support Branch Emission Control Technology Division Office of Mobile Sources Office of Air and Radiation U. S. Environmental Protection Agency ------- Table of Contents Section Page I. Executive Summary 3 II. Introduction 7 III. Onboard Control System Description 9 IV. Design Considerations for a Safe System 27 V. In-Use Fuel System Safety 50 VI. Cost and Leadtime Considerations 61 VII. Heavy-Duty Gasoline Vehicle Requirements 74 VIII. Conclusion 95 IX. References 97 ------- -3- I. Executive Summary The purpose of this technical report is to evaluate the safety implications of requiring onboard refueling vapor recovery systems on gasoline-powered passenger cars, light trucks and heavy-duty vehicles. In thaf light, special attention is given to the analysis of the design considerations for a safe onboard system and the other measures necessary to insure that the design considerations incorporated are capable of providing a high level of in-use fuel system integrity. Onboard refueling systems are in many ways similar to present fuel tank evaporative emission systems. The emissions emanate from the same location on the vehicle and the basic technology used to control the two types of emissions is quite similar. Many of the components are analogous, if not essentially identical, and the configuration/layout of the systems on the vehicle is also expected to be about the same. In fact, these two systems and system functions are so similar that many manufacturers will likely combine their onboard refueling and fuel tank evaporative emission systems into one integrated system which can serve both purposes. The fact that these systems are similar and will be integrated has two effects on the safety of onboard systems. First, many of the approaches and techniques used to safely implement evaporative emission control systems can also be applied to insure the safe implementation of an integrated onboard refueling/evaporative emission system. Second, any safety problems related to integrated onboard/evaporative systems should be evaluated incremental to present evaporative systems. Quite simply, there is no need to add a whole new system to the vehicle. Concerns over the potential safety implications of onboard systems have, however, been raised. These concerns can be grouped into four general areas. These include requirements to pass the National Highway Traffic Safety Administration (NHTSA) safety tests, the effects of tampering and system defects, refueling operations, and in-use fuel system safety. Concerns with the design requirements necessary to comply with the NHTSA safety tests focused on the need to integrate an onboard system into a vehicle in a manner which would provide the crashworthiness and rollover protection demanded by Federal Motor Vehicle Safety Standard (FMVSS) 301. EPA's analysis indicates that crashworthiness for the key vapor lines and other system components could be accomplished using many of the same approaches and techniques now applied successfully to evaporative emission systems. Further, the rollover protection now provided for the fuel tank through the use of a limiting orifice can be gained through the application of one of the several rollover valve designs now available. ------- -4- Concerns have also been expressed that canister tampering and component defects could lead to in-use safety problems. While canister tampering is infrequent, the rate can be reduced and the potential safety effects eliminated through proper placement. Manufacturers are expected to consider " the safety implications of tampering when evaluating canister location options on the vehicle as they do now with evaporative control system canisters. While the concern has been expressed that defects in onboard system components could have safety implications, no data or other bases have been found that suggest onboard systems would influence the nature or frequency of such occurrences as compared to those seen on current evaporative emission systems. In fact, given the experience gained by the manufacturers in safely implementing evaporative controls, it is likely that an integrated onboard/evaporative system could be implemented with no more (and perhaps less) problems than present evaporative emissions systems. Concerns over the safety of refueling operations are centered on the potential to overpressurize the fuel system. EPA's analysis finds that use of a liquid seal solves all overpressure problems, and that if a mechanical seal is used a simple pressure relief device can be used to eliminate any overpressure concerns. As discussed in the analysis, a few other less significant potential problems have very straightforward engineering solutions. Finally, while it is clear that onboard-equipped vehicles can be designed to comply with FMVSS 301 requirements, there has been concern expressed that fuel system integrity in-use may decrease by some non-quantifiable amount because FMVSS 301 can't cover all potential accident situations and an onboard system requires modifications and additions to the present evaporative emission system. While no test procedure can cover all potential situations, it does not necessarily follow that system modifications or additions will cause an increase in risk over present systems. Both vehicle and fuel system safety are evaluated as an integral part of the overall design and development process. This involves multiple trade-offs, balances, and compromises with other key design considerations. Given the need to consider all key design criteria, manufacturers accept or manage a certain amount of risk. Since the safety demands of Federal standards such as FMVSS 301 must be incorporated into vehicles/systems, these standards represent the minimum. In many cases the level of safety achieved in-use goes beyond that required by Federal standards, being driven by in-use liability concerns. ------- -5- If a manufacturer perceives that the added risk mentioned above may exist for one or more of its vehicle models, there are ways to respond through direct measures or through keeping the overall risk in-use at acceptable levels through other design flexibilities. EPA's analysis identifies and describes a number of these measures. Manufacturers can make vehicles safer than they are now; an onboard requirement does not increase the amount of risk a manufacturer need incur or accept. Manufacturers are expected to integrate onboard controls into their fuel systems without compromising safety. Further, as part of overall risk management, implementing onboard controls provides the opportunity to improve overall fuel handling and fuel system safety. Refueling spills will be reduced and flammable vapors will be trapped in the canister instead of being vented out the fillpipe near the nozzle operator where inadvertent ignition is possible. Also, installing rollover valves could improve the safety for those vehicles now using external fillpipe vent lines without rollover valves. The positive seal provided by a rollover valve is an improvement over the "controlled leak" rollover protection currently provided by a limiting orifice. In addition, implementing onboard systems could further enhance safety by providing the opportunity to make other safety related fuel systems changes which have been delayed for economic or other reasons (e.g., changing from rear to side fill). Finally, if a manufacturer chooses to use a collapsible fuel bladder to control refueling emissions, this would eliminate all of the potential concerns raised relative to the canister based onboard system, and would provide improvements in safety over the present fuel system. Other key considerations include safety related costs and the leadtime needed to implement onboard controls safely. This analysis estimates that safety costs related to implementing onboard systems will range from $4.50-$9.00 per vehicle. While the cost estimates for the needed hardware, modifications and fuel consumption impacts are reasonably accurate, there is some uncertainty in the development and safety crash testing cost estimates. However, safety related onboard costs are quite insensitive to even large changes in the estimates for development and safety certification. In a general sense, EPA's estimates are supported by the fact that the modifications needed for present vehicles to insure fuel system safety in-use have been acquired relatively inexpensively, and vehicles with evaporative emission systems comply with FMVSS 301 today. Much of the groundwork needed to implement an integrated onboard refueling/evaporative emission control system safely has been completed and many of the same ------- -6- techniques and approaches can be used. The fact that integrated systems will be used means that some costs incurred to implement evaporative emissions systems safely will not reoccur. EPA's analysis has adequately accounted for safety costs in its estimate of the total onboard system cost. Safety costs contribute about 25 percent of the $20 cost estimated for a passenger car onboard system. With regard to leadtime, given the magnitude of the task and past experience with implementing evaporative emission and fuel system integrity standards (FMVSS 301), this analysis indicates that 24 months leadtime is adequate. However, EPA is committed to providing the leadtime needed to implement onboard controls safely and effectively, and is open to considering additional leadtime or a short phase-in of controls to assist manufacturers in dealing with problems on unique vehicle models. Finally, the onboard systems which would be installed on HDGVs are quite similar to those expected for passenger cars and light trucks, even though the safety test requirements are different for HDGVs. With the exception of school buses, the fuel system integrity testing centers more on evaluation of fuel tank integrity than vehicle crash testing. Nevertheless, many of the concerns raised and addressed above regarding onboard safety for lighter-weight vehicles also apply to HDGVs and support the judgment that onboard systems can be applied safely to this class of vehicles within the leadtime laid out above and for a reasonable cost. ------- -7- II. Introduction EPA has received several comments from the Motor Vehicle Manufacturers Association, Automobile Importers of America (and their member companies), and the Insurance Institute for Highway Safety which have expressed various levels of concern about the potential safety implications of onboard vapor recovery systems.[1,2] Also, some preliminary comments regarding onboard safety have been received from NHTSA's technical staff.[3] The American Petroleum Institute (which has independently developed several onboard-equipped vehicles) and the Center for Auto Safety have expressed support for the implementation of onboard vapor recovery systems.[4,5] The purpose of this report is to discuss and analyze the safety related concerns raised regarding onboard vapor recovery systems. Motor vehicle manufacturers face many difficult technical decisions in the design and development of vehicle systems and the integration of these systems into new vehicle models. The difficulty of these decisions often arises from the fact that this design, development and integration process requires the simultaneous consideration of a number of key criteria. One of the most important of these criteria, safety, is normally given a high priority in the design and integration process. However, the process also includes careful and prudent consideration of the trade-offs necessary to deal with other important criteria such as performance, • reliability, cost, styling, and regulatory requirements such as fuel economy and emissions. In each case, manufacturers must find the appropriate balance of all the important criteria. Since the design of emission control systems has the potential to affect the overall safety of vehicles, EPA views safety as a primary concern when evaluating the feasibility of an emission control device. EPA is presently evaluating the use of onboard vapor recovery systems (onboard systems) as a means of controlling refueling emissions. The potential safety implications of such controls require special consideration, because implementing onboard systems will involve some minor modifications of the vehicle fuel system. While safety influences all aspects of vehicle design, fuel system safety and integrity is a key concern in the design and integration process. In evaluating the safety implications of requiring onboard controls, EPA has applied the philosophy that no increase in overall risk should be caused or accepted, beyond that now present with today's fuel/evaporative system. This applies to both compliance with the applicable Federal safety standards ------- -8- and the in-use safety of vehicles equipped with onboard systems. The following analysis will show that straight forward engineering solutions are available for all of the potential safety problems which have been identified, and that while final choices regarding exact system designs lie with the manufacturers, safe fuel system designs are achievable by all. This analysis of onboard safety issues and the associated cost and leadtime generally applies to any canister-based onboard system design. Further, as will be discussed below, this analysis indicates that it is quite possible that overall fuel system safety improvements could accompany the implementation of onboard controls. The importance of evaluating the safety of onboard systems is highlighted by the Clean Air Act (Section 202 (a) (6)) which directs EPA to consult with the Department of Transportation (DOT) before requiring the use of onboard vapor recovery systems. This requirement is intended to insure that all safety issues have been properly identified and addressed. This report will also help to assist in the fulfillment of this requirement. As outlined below, the remainder of this report is divided into five sections. The first section following this introduction (Section III), provides a general description of an onboard system to aid in the understanding of any related safety issues. Section IV summarizes and provides EPA's analysis of the comments received regarding the design of a safe onboard system, and Section V discusses onboard effects on in-use fuel system safety. Section VI discusses the effects safety considerations have on other important factors such as vehicle costs and leadtime. Heavy-duty gasoline-fueled vehicles (HDGV) pose similar yet distinct onboard control system safety issues, and Section VII addresses these similarities and differences. The final section provides conclusions. ------- -9- III. Onboard Control System Description Before considering any safety issues, it is important to have a clear understanding of onboard refueling vapor recovery systems (onboard systems) and how they work. Likewise, before considering the characteristics of the control system, it is important to understand the nature of refueling emissions. The purpose of this section is to provide the reader with both a clear understanding of what refueling emissions are and how onboard systems operate to control these emissions. In many respects, onboard systems are similar to the evaporative emission control systems now in use on most gasoline-powered vehicles. In fact, it has been suggested that onboard systems are more an extension or modification of current evaporative emission systems than the implementation of a new control technology. An explanation of the differences and similarities between the two systems will provide a better understanding of the incremental nature of onboard systems relative to current evaporative systems, and will be useful in assessing the design, cost, and leadtime implications of implementing onboard controls safely, which are to be discussed later in the report. This section will first briefly describe evaporative emissions and how they are currently controlled. Next, refueling emissions will be discussed and similarities between onboard systems and current evaporative emission systems will be presented. The section will end with a discussion of the differences between the two control systems. A. Evaporative Emissions Evaporative emissions emanate from two basic sources: the fuel tank and the fuel metering system (either a carburetor or fuel injectors). Evaporative emissions arising from the fuel tank are primarily "diurnal" emissions while those from the fuel metering system are termed "hot soak" emissions.* This analysis is primarily concerned with fuel tank evaporative or diurnal emissions since these emissions are currently controlled using an approach similar to that envisioned for an onboard system. It should be noted that a small amount of hot soak emissions come from the fuel tank; the fuel tank evaporative control system would handle these as well as the diurnal emissions. ------- -10- Diurnal evaporative emissions consist of gaseous hydrocarbons that are displaced from the tank when fuel in the tank is heated. Fuel heating can result from changes in ambient temperature or during vehicle operation due to the vehicle exhaust system and/or recirculation of fuel heated by the engine. In either case, as fuel in the tank and vapor above the fuel heat up, more of the liquid fuel evaporates, and the vapor itself expands, thus causing hydrocarbon vapor to be released into the atmosphere (unless captured by a control system). Fuel volatility, size of the vapor space, initial tank temperature, and the degree to which the tank is heated can all impact the quantity of hydrocarbons emitted. Diurnal emissions occur on at least a daily basis, and a system designed to control these emissions must be capable of handling repeated evaporative emission loads. Since the early 1970's, most vehicles have come equipped with a control system to limit the amount of diurnal evaporative emissions. The next section discusses the type of control system typically used on today's vehicles. B. Evaporative Emission Control System Figure 1 depicts a fuel tank equipped with an evaporative emission control system.[6] As can be seen from this figure, the control system is relatively simple in design and requires very few components. The purpose of this section is to describe each of the system's components in terms of both physical appearance and function. In order to effectively prevent the escape of fuel tank vapors to the atmosphere, an evaporative control system must perform three basic functions. First, the system must limit the number of exits through which fuel tank vapors might escape. Second, the exit that does allow fuel tank vapors to escape must lead to a container where the vapors can be captured. Third, the system must eventually restore the capacity of the storage container by purging it of the trapped vapors. The discussion below describes how an evaporative emission system performs these three functions. The first function an evaporative emission system must perform is to limit the outlets through which vapors can escape. As can be seen in Figure 1, there are only three openings through which vapors can pass: 1) the fillpipe opening, 2) the external vapor vent line to the fillpipe top (about 1/2" diameter), and 3) the small limiting orifice (approximately 0.050-0.055 inch) in the top of the tank. The fuel tank cap is designed to form a tight seal with the fillneck so that once the cap is secured in place, vapors from the fillpipe opening and the external vent line are trapped within the system. Thus, only one outlet exists through which fuel tank vapors can escape. This single available outlet is the small limiting orifice in the top of the tank. ------- Figure 1 Typical Current Evaporative System PRESSURE/VACUUM RELIEF CAP EXTREMAL VENT LINE -LIMITING ORIFICE NAFLOAT/ROLLOVER I ^ ^—3/8" DIA. 8' LONG VALVE 14 GALLON FUEL TANK PURGE VALVE 3/8" DIA. 1 LITER CARBON CANISTER TO PURGE INDUCTION POINT ------- -12- As the tank undergoes temperature changes, and hydrocarbon vapors are generated, pressure builds up in the tank (as long as the fuel tank cap is secure in place). This pressure build-up is slowly relieved as gas tank vapors eventually force their way through the only available exit: the small limiting orifice in the top of the fuel tank which leads to the vapor storage device (charcoal canister). By limiting the number of vapor escape passages and routing the evaporative hydrocarbons to a single point, the control system has successfully performed the first of its three basic functions. Before discussing the evaporative emission system's second function, it is important to understand why the orifice in the top of the tank is so limited in size. The orifice in the top of the tank is very small in size for three reasons. First, it allows pressure to build up in the tank when vapors are generated. This pressure build-up inhibits further evaporation and creates a pressure differential which eventually leads to hydrocarbon vapor being forced through the limiting orifice. Second, the limiting orifice acts as a liquid/vapor separator. If liquid gasoline were to splash up into the vent line leading to the evaporative emission control storage device (charcoal canister), damage could potentially occur to the storage media (charcoal). However, the orifice in the top of the tank is so small that liquid passes through it at only a very slow rate. Essentially only vapor is allowed to continue to the canister. This point leads to the final reason for limiting the size of the vent orifice to such an extent. Were the vehicle ever to be in a rollover accident, a very little amount of liquid fuel would be able to leak from the tank through such a small orifice. Thus, the limiting orifice is sized large enough to allow for adequate escape of evaporative emissions, but is small enough to permit only a slow leak from the fuel tank in the case of a vehicle rollover and thus provides the protection needed to comply with FMVSS 301. The cost for this is low. However, some manufacturers incorporate an additional valve for added protection; an example is shown in Figure 2.[7] Storing the evaporative hydrocarbons is the second basic function an evaporative emission system must perform. Once the vapors escape from the fuel tank through the small limiting orifice, they proceed through a vent line (usually about l/4"-3/8" inside diameter and made of some type of flexible rubber compound) that leads to a canister containing charcoal. The canister itself is usually made of plastic and is generally a cylindrical or rectangular container. Once inside the canister, the hydrocarbons are adsorbed onto activated charcoal where they are stored temporarily. ------- -13- Figure 2 STANDARD VERSIONS ORIFICE FLOAT SPRING HIGH FLOW FILTERED The tank mounted spring balanced float valve is a low cost unit designed for venting fuel tank vapor to the carbon canister. The device employs a float which remains open under normal conditions. Should the tank level reach a critical height, the float will close the canister vent line. In the event of extreme vehicle attitude or roll-over, the float will close the canister vent line. A filtered tank mounted spring balanced float valve is available that performs the same functions as the above sketches except the tank side of the part is filtered to prevent contaminates from entering the part which might effect float closing of the canister vent line. For high flow applications that require a large volume of vapor venting, such as fuel in- jection applications, a high flow valve has been developed that has more than twice the present flow capacity without loosing other critical performance parameters. FLOAT VALVE Borg-Warner Automotive, Inc. 707 Southside Dr., Oecatur, Illinois 62525 Phone 217/428-4631 437 SKETCH NUMBER ------- -14- The working capacity of the charcoal, the quantity and frequency of the evaporative emissions, and the capability of the system to restore its working capacity all affect the amount of charcoal required. Current passenger car .evaporative emission control systems typically utilize a 0.85-1.5 liter canister.[8] (This size is sufficient for both diurnal and hot soak evaporative emissions.) However, a finite amount of charcoal is used in the canister, so the storage capability of the canister is limited. Once the evaporative hydrocarbons have been adsorbed onto the charcoal in the storage canister, they will remain there until removed. The hydrocarbons must be stripped from the charcoal periodically in order to restore enough working capacity to adequately capture each successive evaporative emission load. While the vehicle is operated, the evaporative emission system performs its third basic function of restoring the storage capability of the charcoal canister. After the vehicle's engine is running, manifold vacuum is used to draw hydrocarbon-free air through the charcoal canister. Hydrocarbons stored in the canister are desorbed into the air stream which flows into the fuel metering system via a flexible rubber purge line of about 3/8" diameter. Once purged, the evaporative hydrocarbons are burned as fuel through normal combustion in the engine. This process "empties" the canister, thereby preparing it for the next evaporative emission load. One aspect of the purge process which needs to be mentioned but will not be explained in great detail is the fact that the canister is not continuously purged during vehicle operation.[8,9] A valve located between the canister and the fuel metering system is opened and closed at opportune times to control the purge process and limit disturbances which affect engine performance and exhaust emissions. To summarize, the current evaporative emission control system performs three basic functions: 1) it limits the exits through which fuel tank vapors can escape; 2) it traps the vapors in a storage device; and 3) it restores the capacity of the storage device to prepare it for the next evaporative emission load. Onboard systems are very similar to evaporative emission control systems because they must also effectively perform the same three basic functions to efficiently control refueling emissions. However, due to differences in the quantity of vapors and the rate of generation of evaporative and refueling emissions, equipping vehicles with onboard systems will require that some minor modifications be made to current fuel and evaporative emission control systems. ------- -15- The next section provides additional detail regarding refueling emissions to help explain the fuel and evaporative system modifications that would be required to equip vehicles with onboard systems. C. Refueling Emissions Three processes contribute to the release of hydrocarbons during a refueling operation. The first two are collectively termed displacement losses, the third spillage. First, the hydrocarbon vapor present in the tank is displaced from the fuel tank by liquid fuel entering through the fillpipe. If the vehicle fuel tank is equipped with an external vapor vent line (as shown in Figure 1), much of the fuel tank vapor escapes via the external vent line which is connected to the top of the fillpipe. However, if no such vapor passage exists, the vapor makes its way out through the fillpipe concurrent to the incoming liquid fuel. Hydrocarbons are also generated and released during refueling as a result of liquid fuel evaporating as it is dispensed into the tank. This second type of displacement loss is caused by the turbulence in the liquid/air interface during the refueling process and is enhanced by the higher volatility of the dispensed fuel relative to the fuel in the tank. A third source of hydrocarbon refueling emissions is the evaporation of any liquid fuel spilled during the refueling operation. Of the three refueling emission sources, the two displacement sources are generally much greater (by far), unless a large spill occurs. Because the bulk of refueling emission emanate from within the fuel system, refueling emissions are in many ways similar to diurnal evaporative emissions. Therefore, it follows that an effective onboard system can be designed which utilizes the same basic technology and approach utilized by current evaporative emission systems. In fact virtually all onboard systems considered by manufacturers in their comments incorporate this approach as do the prototype systems developed to date.[10,11,12,13,14,15] The similarities between onboard and evaporative emission systems are discussed below. D. Onboard Refueling Control Systems 1. Similarities with Evaporative Emission Control Systems In order to control refueling emissions, onboard systems must perform the same three basic functions as described previously for diurnal evaporative emission systems. These include limiting the number of exits through which refueling vapors can escape, storing refueling emissions temporarily in a ------- -16- charcoal canister, and purging the charcoal canister of the stored refueling vapors to restore its capacity prior to the next refueling operation. Because these three functions are so similar to the three functions a diurnal evaporative emission control system must perform and the emissions arise from the same location, extrapolation of known technology leads to the conclusion that an onboard system would use the same approach and similar hardware to that which is currently used to control evaporative emissions. Figures 3 and 4 depict two representative onboard systems and a comparison with Figure l shows that onboard controls are very similar in overall design to current diurnal evaporative emission control systems. However, while onboard systems do use many of the same basic components as evaporative systems, (i.e., charcoal canisters, flexible rubber tubing, purge control valve, etc.), the basic differences between refueling and evaporative emissions require a few additional components, and an enlargement of certain existing hardware is required for the onboard system. These are the key differences between the two systems. Before discussing the component additions and enlargements, an important aspect of the onboard refueling vapor recovery system must be introduced. Since both emissions emanate from the same location, a properly designed onboard system could control both refueling emissions and diurnal evaporative emissions. Thus, if an onboard refueling system were incorporated into a vehicle's fuel system, the current diurnal evaporative emission control system would no longer be needed. This aspect of onboard systems has several implications. First, it reduces the conceived degree of complexity the system adds to the vehicle's fuel system. An entirely new, larger, more complex system would not be needed in addition to that which currently exists. Rather, the current control system would be modified to be somewhat larger with a small increase in the number of components. Second, since onboard systems are basically modified evaporative emission systems, many of the safety design concerns associated with onboard systems have already been addressed in current evaporative emission control system designs. These approaches could also be used in the integrated system. One final effect a "dual function" control system has is it requires less "packaging" space and is less expensive to produce than two separate systems. ------- Figure 3 Integrated Evaporative/Refueling System Nozzle Actuated Valve Front Mounted Canister Mechanical Seal PRESSURE/VACUUM RELIEF CAP MECHANICAL SEAL •NOZZLE ACTUATED ROLLOVER/VENT VALVE " DIA. /z~.,*-y r 5/8" DIA. 3' LONG PURGE \VALVE f( P^l /" ,05" DIA. LIMITING ORIFICE LOAT/ROLLOVER VALVE 3/8" DIA. TO PURGE 3 LITER CARBON CANISTER 14 GALLON FUEL TANK ------- Figure 4 Integrated Evaporative/Refueling System Tank Mounted Valves Rear Mounted Canister J-Tube Seal -PRESSURE/VACUUM RELIEF CAP r NOZZLE ACTUATED ROLLOVER/VENT VALVE ,— 5/8" DIA. I PURGE ^_ r"» ft Q?™ , . *& x./\V\ /8" DIA.^. ^:05" DIA. LIMIT XXA/>^i^ >| — ^^FLOAT/ROLLOVER N^ SJ VALVE L ••-""""1 > /^J-TUBE SEAL DESIGNED SLOW LEAK V _^ T—3/8" DIA ING 5' LONG T0 PURGE CE INDUCTION POINT 3 LITER CARBON CANISTER 14 GALLON FUEL TANK ------- -19- 2. Additions/Modifications to Evaporative Emission Control Systems. The differences between onboard systems and current diurnal evaporative emission control systems can be separated into two broad categories: 1) those related to the sealing of the system, and 2) those related to the magnitude and frequency of the refueling emissions. Because of these differences, onboard systems require several additional components, and several components of the current evaporative system must be increased in size or slightly modified. a. Additions to the Present System Diurnal evaporative emission control systems limit the number of vapor exits by using a fuel tank cap to close off the fillneck. However, during a refueling operation, the fuel tank cap is not in place, and consequently, onboard systems must rely on some other type of sealing mechanism to prevent the escape of vapor through the fillneck opening. Currently, two types of fillneck seals are available for use on onboard systems — liquid and mechanical. Liquid fillneck seals utilize modified fillpipe designs to route incoming gasoline in such a way that a column of gasoline is formed which prohibits the vapors in the fuel tank from escaping to the atmosphere via the fillneck. While this may sound somewhat complicated at first, the concept is fairly easy to understand with the help of a drawing. Several liquid seal configurations have been developed, but one design which has been shown to be particularly attractive from both a design and cost perspective is the "J-tube" (shown in Figure 5).[16] As fuel is dispensed into the fillneck, it is forced to pass through the "U" shaped portion of the fillpipe. A liquid trap is formed in the "U" shaped portion of the fillpipe which prevents vapors from escaping via the fillneck. The "J-tube" extension could be made of metal, plastic or hard rubber. Another type of fillneck seal which has been shown to be effective is the mechanical type seal.[14,15] The mechanical type seal (see Figure 6) is basically an elastomeric device which forms a close connection with the inserted fuel nozzle and thereby eliminates any space in the fillneck opening through which vapor could escape. While both the liquid and mechanical type seals perform the same basic function of limiting the available vapor exits, the liquid type seal is inherently a simpler design. ------- -20- Figure 5 J-Tube Liquid Seal ------- -21- Figure 6 Mechanical Seal FU.RPE MODIFICATIONS ROTARY SEAL ROTARY TRAPDOOR LEAD RESTRJCTCR FILL PIPE MODIFICATIONS ROTARY SEAL ROTAPY SEAL TRAPDOOR SPOUT LEAD FESTFDCTOR ------- -22- If a mechanical type seal were used, excessive pressure could build in the fuel tank if the fuel nozzle automatic shut off mechanism failed, or if for some unusual reason the vapor line leading to the charcoal canister became blocked-. To avoid the possibility of a fuel spitback which could be caused by this overpressure, a simple pressure relief device would be needed. More detail on this device will be provided in Section IV. Therefore, either type of sealing mechanism - liquid or mechanical - can be used to prevent the escape of refueling vapors to the atmosphere via the fillneck. Both sealing approaches have been tested and provide similar control efficiencies.[14,15] b. Modifications to the Present System The differences in the frequency, magnitude, and rate of generation of refueling and diurnal evaporative emissions leads to the need for several modifications to the present evaporative system. Each of these is discussed below. (1) Charcoal Canister Size Generally speaking, on a per event basis, refueling emissions are produced less frequently but are larger in magnitude than diurnal evaporative emissions. Consequently, more hydrocarbon storage capacity (larger charcoal canister) is needed to control refueling emissions than is needed for evaporative emissions. For any given vehicle, the size of the canister needed depends primarily on the fuel tank volume and the refueling emission rate. The refueling emission rate is chiefly a function of the fuel volatility (RVP), dispensed fuel temperature, and the temperature of the fuel in the vehicle's tank prior to refill. For canister design purposes the temperatures and fuel volatility specified in EPA's draft refueling emission test procedure would be used to determine the design emission rate which the canister would need to be able to capture. Canister sizing would then be a function of tank volume, the design emission rate, as well as considerations for safety and deterioration factors to assure an adequate working capacity over the life of the vehicle. The size of the canister needed for an integrated refueling/evaporative control system cannot be stated categorically since there are several other variables which must be considered such as purge rate, charcoal working capacity, and canister geometry. However, on average it is expected that a canister for an integrated refueling/evaporative system would be approximately 3 times as large as the one used for the present evaporative system. [17] ------- -23- While the larger canister does not present any technical problems it may cause packaging problems on a few smaller vehicle models which could lead to canisters being placed in locations other than under the vehicle hood. While virtually all evaporative emission system canisters are now located under the vehicle hood there is nothing inherent in the design of an onboard system which requires that canisters for integrated systems also be located there. In fact, there may be some cost advantage to locating the canister near the fuel tank since the amount of larger vapor lines can be minimized. It is expected that manufacturers would place canisters in a location which provides the optimum mix of safety, cost, and performance characteristics. (2) Refueling Vent Line Modifications Also, in order to accommodate the higher vapor flow rates associated with refueling emissions, a larger vent line between the fuel tank and charcoal canister is needed along with a larger opening in the top of the fuel tank to accommodate the larger vent line. The current vent line to the canister associated with the evaporative system is about 3/8 inch. The vent line with the integrated evaporative/refueling system would be approximately 1/2 - 5/8 inch in diameter.[ 16] The larger vent line (and larger opening in the top of the fuel tank) introduce a few added complexities. Unlike the limiting orifice used in evaporative emission systems, the larger opening required for an onboard system cannot provide liquid/vapor separation or rollover protection. Consequently, additional devices are required on an onboard system to meet these needs. The liquid/vapor separator, examples of which are shown in Figures 7 and 8, is simple in design and purpose.[14,18] It acts to remove gasoline droplets from the vapor stream and returns the liquid to the fuel tank to prevent liquid gasoline from entering the charcoal canister. Many design approaches are available in addition to those shown here. The separator itself may be a distinct component, or its function may be built into another component such as shown later in Figure 21. In terms of rollover protection, several simple devices are available which can prevent fuel spills during an accident, and also provide the benefits of a limiting orifice described above. These will be discussed in more detail in Section IV of this document since rollover and accident protection for the fuel system is primarily a safety issue. Aside from the differences discussed above, onboard and evaporative emission control systems are very similar in design. They both act to direct, trap, and consume hydrocarbon vapor. Onboard systems require only a few additional components, and because they could be integrated into vehicle fuel systems to handle both refueling and evaporative ------- -24- Figure 7 VAPOR-LIQUID SEPARATOR Mounting Holes Float Weight ------- Figure 8 VAPOR OUT .125 TYR ADHESIVE SEAL -.75 .HOSE TYR - VAPOR/LIQUID IN LJQUD/COUKNSATE RETURN UOUD REUEF SLOT T MOUNTINQ TABS (3) 4 AR OPCN CEU. FOAM AR MESH UPPER HOUSIM4 PtAST»C LOWER HOUMNQ PlAbTIC CMCCMFTMMI MATIMM. •MOV. VAPOR - LIQUID SEPARATOR liUtLLlK AttOCIATii. IMC . MD »"«ti/ip/ed>CAtii ------- -26- emissions, overall control system complexity is not increased significantly. Also, because of the integration of the refueling/evaporative emission control functions, it should be apparent that many of the safety concerns associated with onboard systems have already been considered in designs of the present evaporative emission systems. The experience and knowledge gained in implementing safe evaporative emission systems provides a substantial base of information to use in designing and developing safe integrated evaporative/refueling systems. 3. Volatility Effects As was mentioned above, the refueling emission rate is a key factor in the size of the onboard system canister, and the refueling emission rate itself varies with the fuel volatility and the dispensed and fuel tank temperatures. For design purposes, the canister would be sized based on the volatility and temperature specifications prescribed in EPA's refueling emissions test procedure. The parameters prescribed in EPA's procedure are based on near worst case summer season conditions, so the onboard canister would have capacity to achieve control under virtually all summer conditions. However, as average temperatures decrease in the winter, RVP levels increase and dispensed and fuel tank temperatures decrease.[19] The question arises as to whether the onboard canister would have adequate capacity to capture winter emissions with higher RVP fuels. If the capacity is inadequate canister breakthrough may occur and some emissions may be uncontrolled. Previous studies and analyses conducted by EPA and others have shown that the refueling emission rate increases with the fuel volatility (RVP) and fuel tank temperature and decreases with the dispensed fuel temperature.[19] One study (CAPE 9) used volatilities and temperatures typical of winter conditions.[20] Using winter season fuel volatilities and temperatures in the relationship derived from this study yields winter refueling emission rates less than the design load emission rate for the canister dictated by the refueling emissions test procedure. Winter season values (Dec - Feb) range from 5.1 to 5.9 g/gal for the northern states where RVPs are quite high (14-15 psi) while the design load value is 7.25 g/gal. Thus winter emissions would be controlled as well. EPA is presently considering a program to control the volatility level (RVP) of in-use fuels during the summer months (mid-May to mid-September). As part of that program, in-use volatility levels nationwide would be limited to levels about 21.7 percent less than the current ASTM level for that area during the affected months. If that program was enacted, the volatility of the fuel for refueling emissions testing would be ------- -27- set at 9.0 psi RVP, the design load emission rate for the canister could drop to 6.0 g/gal, and onboard canisters could be somewhat smaller. However, as can be seen from comparison with the emission rate figures presented above, winter emissions would still be controlled. \, While not the primary motivator, in-use volatility control may have some attendant safety benefits. Lower RVP fuels generate less vapor and thus could be considered somewhat safer in a general sense. More specifically, lower volatility fuels generate less fuel tank evaporative emissions and thus could reduce fuel tank pressurization problems which occur on some vehicles with damaged or altered evaporative emission systems (e.g. non-standard gas caps) operating under extremely atypical conditions. This pressurization could lead to some fuel/vapor being released from the fillpipe when the gas cap is removed, especially if the fuel tank was relatively full at the time. Lower vapor pressure fuel would reduce the degree of pressurization which could occur under these circumstances and thus reduce or eliminate the spillage which may result. Thus the safety of refueling operations would be improved. IV. Design Considerations for a Safe System As was discussed previously, several commenters have expressed concern regarding the potential safety implications of onboard systems. A review of these comments indicates that these concerns fall into two broad areas: the design of a safe onboard system and effects on in-use fuel system safety. Concerns in the first area will be addressed in this section. The section which follows (Section V) will address the later area of concern. Comments received regarding the design of a safe onboard system fall in three categories: 1) safety test design requirements, 2) safety effects of maintenance, defects, tampering and repairs, and 3) refueling operation safety. EPA's summary and analysis of the comments in each category is presented below. A. Safety Test Design Recruirements 1. Introduction Before analyzing the safety test design requirements it is interesting to look at fuel system safety from an in-use perspective for passenger cars meeting FMVSS 301. Presently, about 1.6 percent of all accidents involve a vehicle rollover of some type and about 0.5 percent of the rollover accidents result in a fire. [21] This results in a fire rate of 0.008 percent. Thus, neither rollover accidents or subsequent fires are common. Similarly, 0.14 percent of all front and rear end ------- -28- collisions lead to a vehicle fire.[21] Although vehicle crash fires are seemingly uncommon, approximately 1600 fatalities result each year from these fires.[22] Thus, from an in-use perspective, vehicle crash fires are unusual but serious events. One of the most effective ways to protect against vehicle crash fires is to restrict fuel leakage during accidents by insuring the overall integrity of the vehicle's fuel system. To insure fuel system integrity during a crash, all currently manufactured passenger cars and light-duty truck's with a Gross Vehicle Weight Rating (GVWR) of 10,000 Ibs or less, must comply with Federal Motor Vehicle Safety Standard (FMVSS) 301.[23] Basically, FMVSS 301 requires a vehicle to restrict fuel leakage to less than one ounce per minute when subjected to a rollover test following front and rear collisions at 30 miles per hour (mph), and side collision(s) at 20 mph. In a rollover test, a vehicle is turned on each of its sides and completely upside down and held in each of these three positions for a period of five minutes. Onboard system designs must take into account and protect against fuel leakage or other fire hazards which could occur in FMVSS 301 testing. Along these lines, two issues exist regarding the design of an onboard system capable of passing FMVSS 301. These include rollover protection and the crashworthiness of key onboard system components and connections. As was discussed previously, onboard systems require the use of a somewhat larger vent line (about l/2"-5/8" diameter as compared to l/4"-3/8" on current vehicles) between the fuel tank and charcoal canister, and a similar sized orifice would exist in the fuel tank. While the external vent line used on many current fuel tanks also requires a 1/2" orifice, manufacturers' onboard system designs may incorporate a rollover protection device to protect against fuel leakage during an FMVSS 301 rollover test even though present designs do not. Also, vehicle crashes present the possibility of direct or indirect damage to fuel system components. In some cases this damage could lead to a fuel leak or increase the potential for a vehicle fire in some other portion of the fuel system. Thus a properly designed onboard system must not compromise the crashworthiness of the system and key components. 2. Rollover Protection A rollover protection device is basically a valve that would close off the refueling vent line whenever the risk of fuel leakage existed. Several rollover protection designs have been proposed by auto manufacturers and other interests which could adequately perform this safety function. Several of these are discussed below. ------- -29- One design which has been proposed by several sources can be termed the nozzle actuated valve. The valve is integral to the fillpipe and is located near the top of the fillpipe, perhaps near the leaded fuel restrictor. During refueling, the valve is opened by the insertion of a fuel nozzle. With the valve open, a clear passage through the vent line is available to allow for the routing of refueling vapors to the charcoal canister. Other than during refueling, the valve remains closed and effectively eliminates the potential for fuel leakage through the refueling vent line during a rollover accident. Figures 9 thorough 15 show five different nozzle actuated valve assemblies capable of performing the rollover protection function.[13,15,18,24] Figures 9 through 13 also demonstrate how nozzle insertion would open the valve to provide a large orifice for the venting of fuel tank vapors during refueling and when the nozzle is removed the vent line would be closed. Also, while a rollover protection device might be necessary, it is interesting to note that many current production passenger car and light truck models (mostly side fill) employ an external vapor vent line of about 1/2" diameter that connects the fuel tank to the top of the fillpipe (see Figure 1). This external vent line is approaching the size needed for a refueling vent line, and yet manufacturers have included these external vent lines without any rollover protection device. As will be discussed below, depending on the design used, a rollover protection system may actually enhance safety over current designs. This analysis has presented several basic rollover valve designs capable of providing the protection required by FMVSS 301 tests. Manufacturers could choose to implement one of these approaches, or could develop another. The approach ultimately selected will be that which provides cost efficient protection, is compatible with the other components of the manufacturers onboard system, and can be integrated effectively into the vehicle design from both safety and operational perspectives. 3. Component/System Crashworthiness The second issue regarding safety test design requirements involves the crashworthiness of the key components of an onboard system. This includes those components most susceptible to damage in an accident (nozzle actuated rollover valve, charcoal canister) and the structural integrity of the vapor line (and connections) which may exist between the top of the fuel tank and the rollover valve. A problem in one of these three areas could cause a vehicle to fail FMVSS 301 tests and must be addressed in proper system design. Each of these concerns is discussed below. ------- Figure 9 SEALED FILLER ftiECIt SYSTEM TANK VENT VALVE ASSEMBLY (DURING NORMAL VEHICLE OPERATION) TO CANISTER - LIQUID STOP SHUT-OFF SEAL LEADED FUEL DEFLECTOR GAS CAP OVERFILL RELIEF VALVE ------- Figure 10 SEALED FILLER NECK SYSTEM TANK VENT VALVE ASSEMBLY (DURING REFUEUNQ EVENT) TO CANISTER - VAPOR FROM TANK LIQUID STOP r- LEADED FUEL DEFLECTOR I to OVERFILL RELIEF VALVE SEAL FUEL NOZZLE ------- Figure 11 LIQUID SEAL SYSTEM TANK VENT VALVE ASSEMBLY (DURING NORMAL VEHICLE OPERATION) TO CANISTER - SHUT-OFF VALVE LEADED FUEL DEFLECTOR GAS CAP I OJ M ------- Figure 12 LIQUID SEAL SYSTEM TANK VENT VALVE ASSEMBLY (DURING REFUELING EVENT) TO CANISTER - VAPOR FROM TANK SHUT OFF VALVE LEADED FUEL DEFLECTOR U) FUEL NOZZLE ------- Figure 13 NOZZLE-ACTUATED REFUELING EMISSIONS VAPOR VENT VALVE Vapor from Vapor/Liquid Separator Vapor to Canister ------- Figure 14 NOTES: I. REMOVE AIL BURRS 4 SHARP EOGti. 2. NYLOU PARTS MAX BE FABRICATE o FROM RAYTIC COMPATIBLE W/OASOUNe A METHANOU. 3. ALL DIMENSION* MOT &HOWN. — .06TY« ALL OVER .04 .19 10 RWET WASHER PLATE R»VET CAM CAM PtM IAMIMATED. CAM FOU-OWEP, CAM FLOAT BALL UPPER VALVC LOWER VALVE. H&N4. Ot*CM»flON S. STtEL. ft. ALUM. 5T. H-H.OH ALUM. MYLOH NYLON NYLON 31 ft 314 REFUELING VAPOR VENT VALVE ASSEMBLY MlitLLtH Afl3QCIATe$. IMC •»lllmOf«. UP SCALE: FOU. | ------- -36- Figure 15 "Toyota Concept" Rubber Seal Valve to Canister from Fuel N, Tank ' Refueling Nozzle to Fuel Tank ------- -37- However, before beginning these discussions, it should be noted that component/system crashworthiness is not at all a new concern. Manufacturers must address these same concerns in the design of the current evaporative emission systems.- Given the similarity of onboard refueling and evaporative controls, and that many systems will be integrated, there should be no new or unique problems in this area. a. Rollover Valve First, the crashworthiness of the rollover protection device is a design consideration for nozzle actuated valves, since they would be located near the exterior shell of the vehicle. Integration of nozzle actuated valves into the overall vehicle design would have to include a consideration of the potential to sustain damage if struck in a collision. However, this design consideration is straightforward, and it is reasonable to expect that manufacturers can and will integrate rollover valves into their fillpipe designs without decreasing the structural integrity of the fillpipe while providing crashworthiness for the valve. For example, it is worth noting that vehicle manufacturers have dealt with similar problems in their designs of fillpipes, external vapor vent lines, and gas caps, and in fact, one would not expect the nozzle actuated rollover valve to be any more susceptible to damage than these components. As was mentioned previously, the 1/2" external vent line lies in this same area on the vehicle, and yet manufacturers have included such vent lines without a rollover protection device. b. Vapor Line Similarly, manufacturers will have to be cognizant of the structural integrity of the vapor line and vapor line connections, if any, between the fuel tank and the rollover valve. These would have to be designed to withstand the stresses which might occur in a crash in order to maintain fuel system integrity. However, there is no significant engineering challenge to accomplishing this objective. The integrity of this portion of the vehicle's vapor line can be assured through use of a vapor line material of proper strength, flexibility, and durability. A number of vapor lines of different material, wall thickness, and construction are currently available. In addition, routing of this portion of vapor line is another design parameter available to manufacturers. As a matter of course, manufacturers are expected to insure that the line is protected from abrasion and normal wear and that it is not in a vulnerable location in the event of a collision. This is considered straightforward given that on integrated systems the refueling vapor line now replaces that used for control of diurnal evaporative ------- -38- emissions. Similar routings would be expected. Vapor line integrity and connections in current vehicles must meet similar requirements, and it is reasonable to expect that similar materials and connecting approaches would be used. Finally with regard to vapor line integrity and connections, it is worth noting that many vehicle models now use a flexible insert between the fillpipe and fuel tank to enhance the fuel system safety in-use (see Figure 16).[15] Similarly, in many vehicle models the external vent line actually incorporates a flexible vapor line which connects the metal portions of the external vent line from the top of the fuel fillpipe and the fuel tank (see Figure 16). These connections are subject to the same performance requirements as would be needed for onboard system vapor lines and in some cases are even more critical and demanding. Evidence is that these have been incorporated safely. The manufacturers' experience with current vehicle evaporative and fuel systems described above demonstrates that vapor line and vapor line connections can be made to withstand the stresses which occur in a vehicle accident. c. Charcoal Canister Concerns regarding the crashworthiness of the charcoal canister center on the possibility that a canister ruptured in an accident could present a fire hazard if an ignition source exists nearby. Even if the rupture of the integrated refueling/ evaporative canister occurred in some cases, the potential hazard should not be overstated. While carbon canisters do contain gasoline vapor, they are strongly adsorbed to active sites within the carbon bed and not easily released to the atmosphere. Thus, even if a canister were crushed and its contents dumped, gasoline vapor would not be present in the atmosphere in sufficient quantity to be flammable. There is no available evidence of "canister fires" in any accidents involving vehicles with evaporative systems. The fact that onboard canisters would be larger and would hold more vapors initially than current evaporative systems makes no difference. While the refueling load to the canister is larger than the evaporative load, after the first few miles of driving the canister would be purged such that the amount of vapor remaining in the canister is essentially the same as that present in current evaporative emission canisters alone.* The * Due to the nature of the charcoal used to trap hydrocarbon vapors, and strict certification test requirements, hydrocarbons would be quickly stripped from the charcoal early in the purge process. Therefore, during most of the operation of the vehicle (90 percent), the charcoal canister does not contain enough hydrocarbon vapor to present any safety risks.[9] ------- Figure 16 BUICK CENTURY FUEL TANK AND FILLPIPE PRODUCTION CONFIGURATION Fuel Sending Unit and Vent Orifice Nozzle Spout 12%" ------- -40- lack of risk from charcoal canisters is supported by a recent submission from Nissan to EPA, stating that no safety problems would be expected with refueling canisters.[25] Thus it could be argued that the hazard, if any, is not significantly different than that now found on present systems. Thus, it is hard to perceive any added risk from the use of a larger charcoal canister. Nevertheless, if a manufacturer believed that the canister posed a potential risk, the risk could be eliminated through placement of the canister in a protected area such as the rear of the engine compartment or in some underbody area as has been suggested by some manufacturers.[12,13] In most cases it is expected that manufacturers would simply place the integrated refueling/evaporative canister where the present canister is now located; in these cases no new design issues really exist. d. Summary In summary, current fuel and evaporative emission systems must meet the same FMVSS 301 requirements and much of the experience gained in designing and building current systems can be directly extrapolated to implementing an onboard system. The analysis presented above leads to the conclusion that straightforward, viable engineering solutions exist to address any potential safety design concerns, and that onboard systems can be incorporated into the vehicle's fuel/evaporative system without compromising fuel system integrity or reducing the vehicle's ability to pass FMVSS 301 requirements. While an onboard system can be designed to provide fuel system integrity both in FMVSS 301 testing and in-use, it is prudent to consider the effects of maintenance, defects, tampering, and repairs on these systems, and means to address any potential problems which may exist. These issues will be addressed next. B. Maintenance, Defects, Tampering and Repairs Even if a system is designed properly and functions safely under "normal" and "extreme" in-use conditions, some question remains as to the potential effects of maintenance, defects, tampering and repairs on onboard system safety. Maintenance is the prescribed actions needed to keep a system operating as designed. Defects involve the improper operation of the system or system components caused by design, manufacturing, or assembly errors. Tampering involves the intentional disablement (partial or total) or removal of the system or a component within the system, and repairs involve restoring or replacing the system or system components because of malfunction or damage. Each of these events and their safety effects are discussed below. ------- -41- 1. Maintenance First, an onboard system is expected to be essentially maintenance free (no scheduled maintenance) as are current evaporative control systems. EPA's emission factor testing has found that non-tampered fuel-injected vehicles generally comply with the evaporative emission standards without maintenance. Furthermore, EPA's requirements for light-duty truck and heavy-duty gasoline vehicle emissions certification do not allow evaporative system maintenance up to 100,000 miles, and a similar requirement is being considered for an onboard system. The technology used here can be used for passenger cars as well. Thus, maintenance will not be necessary for proper functioning of an onboard system over the life of a vehicle. Therefore, lack of prescribed maintenance will not lead to safety problems. 2. Defects Second, with regard to defects, the primary safety related concern deals with the possibility that defects in the operation of one or more components of the onboard system in-use might lead to safety problems for the vehicle. This includes possible problems with components such as the liquid/vapor separator, purge valve, charcoal canister and rollover valve. Since onboard system components such as the liquid/vapor separator, purge valve, and charcoal canister are very similar to those used in evaporative systems, one method to assess the potential safety effects of defects is to review the experience seen with evaporative systems. In an effort to quantify the potential for defect problems regarding onboard systems, three different computer files provided by NHTSA were reviewed for evidence as to defects pertaining to the evaporative emission system which could impact vehicle safety in-use.[26] The files reviewed covered recalls, service bulletin reports, and owner complaints current as of November, 1986 for all three vehicle classes (passenger car, light truck, and heavy-duty gasoline). A review of the recall files revealed only 12 cases that could be even remotely linked to the evaporative emission system out of an estimated 3,000 families which have been certified with evaporative emission systems. Service bulletin reports for dealers added an additional 21 cases for a total of 33 possible problems out of over 3,000 families. None of these were identified as having caused an accident; the vast majority were more emission system performance than safety defects. Finally, a review of the owner complaints indicated only about 100 problems out of over 180 million vehicles sold with evaporative emission controls. In only a few of the owner complaints did safety problems actually occur, and no significant damage was reported. On a percentage basis these potential problems are very small. ------- -42- Two other valuable observations can be drawn from a review of these files. Problems/complaints have diminished with newer model year vehicles with evaporative controls, which demonstrates that gaining experience leads to product improvement. Given the similarity between onboard refueling and evaporative emission controls, and the fact that the two systems will be integrated in most cases, much of this experience will be directly transferable to onboard systems and thus improve in-use performance. Second, the review of the owner complaints files indicated no trends other than those related to improvements in newer model year vehicles; thus no systematic problems in components or systems were evident. Further, it is important to note that the very mechanisms used to generate the files for this survey would actually act to help eliminate any potential in-use safety effects of onboard systems defects. Dealer service bulletin reports are effective in dealing with problems raised at the dealerships, and owner complaints assist the manufacturers and NHTSA in assessing the need to conduct voluntary or mandatory recalls. Finally, to place the potential for defect problems from onboard systems in context, it should be noted that the onboard risk is essentially incremental to that now seen for evaporative systems, since in most cases the refueling and evaporative systems would be integrated. On an incremental basis, the frequency of defects would likely be unaffected. Finally, since a rollover valve could be used on some onboard system designs specifically to enhance safety and they are not used on current vehicles, it is worth discussing the possibility of valve defects. First, it should be noted that defects in these valves should be rare. Manufacturing engineering techniques permit the development and production of highly reliable valves and statistical quality control techniques are available to insure that production valves meet design standards. In fact, if a rollover valve is defective at the vehicle assembly point, the vehicle will probably not be able to accept the fuel provided at the end of the assembly line, and repairs will be needed even before the vehicle leaves the plant. Second, to insure in-use protection, rollover valves must be designed to fail in the closed position. This would be considered "safe" because a closed position valve failure would never cease providing rollover protection and it would effectively block the refueling vent line and make refueling the vehicle extremely difficult. This difficulty would provide incentive for the vehicle operator to identify and repair the failure. If the valve failed during operation of the vehicle, the fuel tank would vent any vapors through the limiting orifice or gas cap to prevent any pressure build up (See Figures 3 and 4). Also, rollover valve failure might be one component of an onboard system which could be incorporated into onboard vehicle diagnostics and thus allow the operator notice of the problem when it occurs and provide an opportunity ------- -43- for repair before the fuel level becomes critical. Fail safe designs would be effective in achieving both protection and repair, and that the other measures discussed above would assist in eliminating or addressing any in-use defects. 3. Tampering A third area of potential safety problems involves the effects of possible system tampering. While several types of tampering occur with evaporative emission systems (see Table 1), past in-use experience with these systems shows that only one type, disconnection and/or removal of the charcoal canister, might be a safety problem for onboard systems. This type of tampering poses a possible safety hazard because during the refueling operation it would lead to a flow of gasoline vapor into the atmosphere at the point where the missing canister had been located. While the gasoline vapor mixture reaching the canister location in this situation would be well above the upper flammability limit, it would briefly be flammable as the vapor dissipates and at the air/vapor transition zones. If a spark or other ignition source were present, the mixture could briefly burn. While this situation is likely to be rare, the possible safety effects of such an occurrence must be considered in the onboard system design. There are several points which need to be made relative to canister tampering. First, this is not unigue to onboard systems - similar potential problems now exist with evaporative emission canisters but a safety concern regarding tampering with evaporative emission system canisters has not surfaced. Second, using current evaporative emission canisters as an indicator, this situation is likely to be rare for integrated onboard refueling/evaporative canisters. As is shown in Table 2, current average canister tampering is only about 3 percent of all vehicles, and similar rate would be expected for integrated refueling/evaporative emissions canisters. Third, if the canister were located in an area which would be difficult to access, tampering could be further discouraged. Further, the potential problem could be reduced through proper placement of the canister in a location distant from any ignition sources. Possible locations include the rear of the engine compartment (as is done with some evaporative canisters) or in some underbody area as has been suggested by some manufacturers for packaging reasons. Placing the canister in an underbody area would also reduce the potential for tampering by making it less accessible to the owner as mentioned above. While canister tampering is infrequent, and means exist to discourage such actions even further, good engineering judgment dictates that canisters not be placed in a location where tampering could create a safety hazard. It is expected that manufacturers will take all reasonable steps necessary to reduce tampering, and that refueling canisters would not be placed in locations where their removal could create a safety risk. ------- -44- Table l Types of Tampering Problems Arid Typical Rates of Occurrence Rate of Problem Occurrence (%) Gas Cap Removed- .. . 1.2% Canister Vacuum Disconnected - 1.7 Cap Removed & Canister Vacuum Disconnected 0.1 Canister Removed 0.3 Non-vacuum Canister Disconnection 0.2 Total Disablements 3.5% Tampering rates calculated from the combined data from the EPA Tampering surveys performed in 1982, 1983 and 1984 (9,142 vehicles). ------- -45- Table 2 .Canister Tampering Survey Results By Year* Passenger Car and Light Truck** -Year 1978 1979 1980 1981 1982 1983 1984 1985 Tampered 3 2 No Report 2 2 5 3 4 Avg * Motor Vehicle Tampering Survey - 1985, US EPA, OAR, QMS, FOSD, November 1986. ** Since HDGVs did not require evaporative controls until 1985, survey data is currently not available for these vehicles. ------- -46- 4. Repairs Finally, repairs of onboard systems may have some safety implications. Since an onboard system is essentially maintenance free, any damage to the system (besides that from defects or tampering) would in most cases result from a vehicle accident. An accident which damages the vehicle's fuel system would be relatively severe and require critical vehicle repairs. Such vehicle repairs, in general, would demand a professional certified mechanic in a licensed facility. These mechanics should be properly trained and have access to current shop manuals to repair and package the fuel system and onboard components correctly to ensure effective and safe performance. They also should be aware of any potential safety hazards of improper installation or omission of onboard system components. Furthermore, these mechanics would normally have no economic incentive for improperly repairing an onboard system or omitting some components since the facility would be compensated for all of the parts and time spent repairing the vehicle. In any repairs of the fuel system with an onboard control system, there is only one critical area with respect to safety. This critical area is the connecting line between the top of the fuel tank and the rollover valve at the top of the fillpipe. An improper installation or connection in this area could result with fuel leakage in the event of a vehicle rollover. This connection, however, is not unique to fuel tanks with onboard systems. It is very similar to the external vapor vent line that appears on many of today's vehicles, and thus incrementally the situation may be no different than on today's vehicles. Thus, repairs of onboard systems should not create any potential safety hazards as compared to present day fuel systems. 5. Summary In summary, component maintenance, defects, tampering, or repairs should not create the potential for in-use safety risks. An onboard system is expected not to require any scheduled maintenance. Thus, any lack of maintenance by the vehicle owner should not introduce safety hazards. There is no evidence to indicate that possible defects in other onboard system components would lead to safety problems. There are very few defects with present evaporative emission systems, and since it is likely that refueling and evaporative emission systems would be integrated, the overall defect rate is likely to be no different than that seen in present vehicles. Further, methods are available to assure that reliable rollover valves are installed in vehicles and to insure rollover protection in the unlikely event of a valve failure. ------- -47- While canister tampering effects must be considered, it should be noted that it presently is uncommon, and this low rate is expected to continue for onboard systems. Also, tampering could actually decrease through judicious canister placement on the vehicle. Nevertheless, prudent design practices dictate that manufacturers not place canisters in a location where tampering could lead to a safety problem, and it is expected that this approach would be followed. Any repairs of an onboard system, besides those resulting from defects or tampering, will probably occur as a consequence of accident damage to the vehicle. Since the damage will most likely be severe, it will require the use of a certified mechanic who is properly trained for such repairs. Further, the only critical area of the onboard system which could impose any safety hazard if improperly repaired are the components and connections between the fuel tank and fillpipe top. Repairs are also critical in this area for current vehicles using external vapor vent lines, so there may be no change in risk over present vehicles. Repairs to an onboard system should not inherently increase the potential for in-use safety risks. An onboard system design must also include consideration of potential effects on the safety of refueling operations. This is discussed in the next section. C. Refueling Operation Safety 1. Fuel Tank Overpressure During Refueling The first potential safety issue involves the possibility of pressure build-up in the fuel tank during the refueling of a vehicle equipped with an onboard system. Whenever a system is designed to be "sealed" from its environment, some forethought must be exercised to evaluate the possibility and consequences of an overpressure within the system. Although an onboard system does not completely seal off a vehicle's fuel tank, it is designed to allow for only one opening, the refueling vapor vent line. If for some unusual reason, the vent line were to become fully or partially blocked or the nozzle automatic shut-off mechanism failed during a full refill, excess pressure could build in the fuel tank. This concern is only associated with an onboard system utilizing a mechanical seal as illustrated in Figure 3. With a liquid seal system (see Figure 4), excess pressure cannot build up in the tank during refueling because fuel would simply flow out the fillneck opening (the same way it currently does) and the nozzle operator could then stop the fuel flow. Liquid seal systems would function in the same manner as current fuel systems. From the nozzle operator's viewpoint, the refueling operation remains the same. ------- -48- If a manufacturer elects the mechanical seal design, he must incorporate a simple pressure relief device capable of relieving fuel tank pressure. In the event of a nozzle failure or vent line blockage, this device would eliminate potential tank overpressurization by opening an "emergency" passage to the atmosphere through which pressurized vapor and any gasoline would spill onto the pavement or some other location noticeable to the nozzle operator. This spillage would make the fuel pump operator aware of the problem and fuel flow could be stopped without causing damage to the fuel system or causing fuel to spitback on to the operator. There have been several different designs suggested for such pressure relief devices. A sample design is shown in Figure 17 which would be incorporated directly into the design of the fillpipe so that the condition would be noticeable by the operator.[18] The operator would then be prompted to repair any problems in order to resume normal refueling actions. (The need for prompt repair would have positive safety and air quality implications.) As was shown in Figure 9, it might also be possible to incorporate the pressure relief function into some other component of the system such as the rollover valve. Any overpressure concerns can be eliminated through a simple pressure relief device such as these. 2. Pre-Refuelinq Overpressure Effects Another potential safety issue raised relating to refueling operations has to do with the "U" bend in the "J-tube" fillneck seal. If the tank vent became blocked, and pressure built up substantially in the tank, upon removal of the fuel cap, the liquid gasoline which was left standing in the "U" bend could be spit back out the fillpipe. This concern can be easily addressed by drilling a small hole in the bottom of the "U" bend (see Figure 4 and 5), which would allow any fuel left standing in the fillpipe subsequent to a refueling event to drain out into the fuel tank. Given the range of fuel dispensing rates seen in-use, this hole can be sized to quickly provide drain capacity and still provide the seal needed during refueling. Furthermore, the hole size can be sized so that no foreign object will block it during a refueling event. By evacuating the column of fuel left standing in the fillpipe, the potential for spitback to occur upon removal of the fuel tank cap would be eliminated. Fillpipes with a "J-tube" seal employing a drain hole have been tested. These tests show that these seals provide refueling emission control efficiencies comparable to those of mechanical seals.[16] ------- l-'iyure 17 BOTTOM VIEW .O* MIN. I TOP VIEW SECT. A-A NOTES: ALL OURIU> AKIO SHARP .01 R MAX OR CHAMBER. ROTA.RV SHAFT SEAL I) A PART. PART NO. rw>. 'Of' UPPCR ROTARY stiArr ieAi_ LOWER RETAINER VITOM STCEL- •ricv. NOZZLE 5CAL/REUEF VAU/E ASSEMBLY »aOCIATH. INC i. MO ------- -50- 3. Summary The analysis presented above demonstrates that simple, straightforward engineering solutions exist for the specific concerns raised by the commenters. In all cases, manufacturers have a number of design options available to address these concerns. V. In-Use Fuel System Safety 1. Summary of Concerns Some concern has been expressed that any time a system increases in size or complexity, the potential for a failure within the system also increases. Applying this line of thinking to vehicle emission control systems, it has been suggested that onboard systems would inherently decrease overall fuel system safety because several components are larger and a few more components are needed than for current evaporative emission systems. In-use vehicles are subject to innumerable accident situations, and some concern exists as to whether or not an increase in component size/number could lead to safety problems. Further, it has been stated that even if a vehicle fuel system is safe enough to pass FMVSS 301, it does not insure that it is free of all safety risks in-use as evidenced by the number of vehicle crash fires that occur each year. It has been argued that vehicles eguipped with an onboard system could pass all FMVSS 301 tests and yet directionally increase risk in-use by some unguantifiable (presumably small) amount. Thus, it follows that because some in-use situations differ from FMVSS 301 tests, onboard systems must not only be designed to be capable of passing Federal safety standards, but these systems must also be designed so as not to increase in-use risk for fuel system related hazards. 2. Analysis of Issues Fundamentally, EPA believes that overall risk in-use should not increase. And, while it is true that FMVSS 301 cannot protect against every conceivable in-use situation, manufacturers are motivated to consider fuel system safety implications for reasons other than insuring that their vehicles pass Federal safety standards. Manufacturers must determine what they consider to be an appropriate level of safety and in-use risk, and then design their vehicles to meet this level. Often this leads to different overall levels of safety in different vehicle models. Before discussing how to address this issue, it is valuable to discuss how safety concerns are integrated into the overall vehicle design and development process. ------- -51- First, safety is an integral part of the design process and is normally not considered incrementally. However, managing risk involves a series of trade-offs, balances, and compromises with other key design criteria. Manufacturers choose not to make their vehicles free of all risk because of other valid design considerations such as performance, styling, weight, cost, and other factors. It is generally accepted that no technological constraints exist which would prevent the production of a nearly "fire-proof" vehicle, and certainly vehicles could be made safer than they currently are as evidenced by numerous "safety car" designs.[27] However, cost and other considerations are valid and they prevent "zero" risk (or a perfectly safe vehicle) from being considered appropriate. One analyst has stated, "It is definitely not reasonable to expect manufacturers to produce 'Sherman Tanks' ... as such vehicles would neither serve the needs of societal safety, mobility, or economy."[28] This same logic and risk management process applies to fuel system safety. Factoring safety into fuel system design is a complicated process that involves numerous tradeoffs and compromises as above. Fuel system designs are not all alike, and fuel system safety considerations vary from one design to another. For example, fuel tank size and location on the vehicle have a substantial impact on a vehicle's safety during a collision. Rear fill tanks are in a more accident prone location than side fill tanks, and are usually located closer to the exterior shell of vehicle. Side fill tanks are generally considered safer than rear fill tanks, and consequently, rear fill fuel tanks are gradually being phased out of vehicle designs. However, it should be noted that this change over has not occurred immediately due to other design considerations such as cost and conflicting interaction with other aspects of the total vehicle design. A similar set of arguments can be made with plastic versus metal fuel tanks. These simple examples demonstrate how risks are managed relative to other considerations. Even current fuel systems could be safer but some risk is accepted. Another interesting example lies in the area of fuel system external plumbing such as emission control vapor lines or external vent lines along the fillpipe. At one time added piping connections similar to the external vapor vent lines that appear on some of today's vehicles were characterized as an unacceptable added safety risk by General Motors.[29] After further testing and design, that same manufacturer incorporates an external vapor vent line into many of its current vehicle's fuel systems. With safety engineering and field testing any potential safety risks associated with these external vent lines has been managed. ------- -52- This particular design change illustrates a very significant aspect of fuel system safety. Even though concern existed over the potential safety aspects of additional fuel system plumbing, the mere fact that these additional lines appear on today's vehicles confirms that safety concerns can be technically addressed if desired. Any perceived in-use risk can be managed. Safety does not have to be an obstacle to fuel system improvements or modifications. The technology to reduce safety risks is currently available, and the degree to which it is utilized depends on how much risk a manufacturer is willing to accept. As illustrated in the discussions above, manufacturers accept or manage varying amounts of risk in order to strike a balance or compromise with all of the important design criteria. Clearly safer vehicles could be made, and the amount of in-use risk reduced. As considerations change, the amount of risk accepted may also change. Often the level of acceptable risk may be more constrained by in-use liability concerns than government safety tests. For example, crash testing results from NHTSA's new car assessment program show that the vehicles' ability to protect its occupants from injury vary by vehicle model.[30] Different vehicle models provide different levels of protection for the head, chest, and femur during barrier crash testing at 35 mph. Some manufacturers chose to incorporate safer designs on some models for liability and perhaps marketability reasons. Similarly, the safety of an onboard system on in-use vehicles will depend on the design decisions made by the manufacturers. Onboard systems would increase the size and number of fuel system emission control components, and some concern has been expressed that the safety of these components in FMVSS 301 testing may not necessarily be indicative of in-use performance. However, adding these systems does not need to affect the level of risk a manufacturer is willing to or can afford to accept. As with any other system change, manufacturers would integrate onboard systems into their vehicles' fuel systems without increasing overall system risk, and clearly, there are no inherent technical constraints prohibiting them from doing so. Further, there is little merit to the assertion that an onboard system must be inherently less safe than an evaporative emission system because it is more "complicated". Adding a few components and enlarging a couple of others presents no risk which cannot be managed to levels now deemed acceptable. As a matter of fact, many of the improvements recently implemented on passenger cars and light trucks have resulted in vehicles/systems which are increased in both safety and complexity. Consider for example advances made in vehicle/engine control systems. Electronic engine controls have increased vehicle engine complexity tremendously over ------- -53- previous systems, yet there is no evidence that these system "complications" have jeopardized safety. In fact, manufacturers are now considering computer controls for other vehicle systems such as the suspension and handling, with the direct purpose of improving vehicle safety.[31] A more complicated system does not imply a less safe one if given proper consideration during design. As discussed in detail earlier, manufacturers have many options available in the design of an onboard system which can manage or eliminate any perceived increase in in-use risk. However, for manufacturers with special concerns regarding in-use safety there are even more design options available. Fail safe, redundant, or breakaway rollover valves could be used. The integrity of the critical portion of vapor line between the fuel tank and rollover valve could be assured through the use of steel braid covered rubber hose in key areas or steel tubing.[32] Both rubber and steel vapor line have been used on past vehicle models. If chafing of this critical portion of vapor line is a concern, the affected areas could be wrapped in a spiral spring for protection. Also, slack could be provided in this critical portion of vapor line to minimize the possibility of separation or rupture in an accident. Improved or additional fittings, adhesives, or clamps could be used to increase the strength of key vapor line connections between the fuel tank and the rollover valve. Concerns related to the charcoal canister can be addressed by using a reinforced canister shell or a protective barrier. While ' these may be somewhat extraordinary, this brief listing demonstrates that further design options are available which if used could improve safety over current vehicles. In summary, manufacturers can manage their in-use risk and can choose to make an onboard system as safe as they deem appropriate. Onboard systems present no safety concerns which cannot be eliminated through proper design, and each manufacturer will develop the fuel system design which represents the best balance for each particular vehicle model, with full consideration of the safety risks and all other key factors. 3. Opportunities for Improvement Implementing onboard controls could actually result in a net improvement in overall fuel system safety. Since manufacturers would need to redesign some aspects of their vehicles' fuel systems to incorporate onboard systems, the opportunity would be provided to reexamine other aspects of fuel system safety as well. Some of the potential fuel system improvements that could result from this reexamination include an acceleration of the transition from rear fill to side fill, integration of the current external vapor vent line inside the fillpipe, better placement of the fuel tank, or even ------- -54- improvement in the fuel tank integrity itself. Also, any number of other minor modifications or improvements in the fuel or emission control systems could be made which could enhance safety and performance and perhaps reduce cost. These include areas such as tank venting, purge valve operation, and eliminating many problems identified through owner complaints and other similar survey measures. Also, it is likely that an onboard refueling control requirement would lead to a decrease in the amount of fuel spilled in-use and thus improve the overall safety of refueling events. In the certification refueling test, vehicles would have to be designed to accommodate a refueling dispensing rate near the high end of the present range of in-use values (8-10 gallons per minute) without any spillage or spitbacks. This is because any fuel spilled during the test is considered as part of the test results. Since one tablespoon of gasoline evaporates to a substantial amount of vapor (about 10 grams), almost any spillage that occurred during the certification test would result in a failure. Thus, the test procedure requirements will insure that manufacturers' fuel system fillpipe designs are capable of handling dispensed fuel at flow rates up to 10 gallons/minute without allowing any spitback. The use of these fillpipe designs are predicted to lead to a reduction in the amount of fuel spilled in-use. This is compared to some current vehicle fillpipe designs which have difficulty accepting fuel at the lower end of the in-use range (8-10 gpm) without spitback. To assure this benefit accrues in the long term, EPA is considering an in-use dispensing rate limit of 10 gallons per minute along with any onboard requirement. Also, from the analysis presented above, it is evident that implementing onboard controls would provide at least three other direct safety benefits over present systems. First, depending on the design used, adding a rollover protection device may improve the safety of present fuel tank systems which use a 1/2" external vent line without rollover protection. Second, adding a rollover valve may enhance the safety for those vehicles which now use a limiting orifice for rollover protection, since a rollover valve will provide a positive seal in lieu of the "controlled leak" approach provided by the limiting orifice. Last of all, it should be noted that refueling vapors are currently vented to an area which poses somewhat of a safety hazard. This is because the potential exists for refueling vapors to ignite inadvertently as they escape from the fillneck opening. However, as onboard controls are phased in, and more and more vehicles route refueling vapors away from the fuel pump operator to a safer point (the charcoal canister) the overall risk involved in refueling a vehicle will be reduced. ------- -55- Finally, to address any special concerns regarding onboard system crashworthiness and to perhaps improve crashworthiness over current vehicles, there is an alternative onboard system design available which manufacturers may elect. As is shown in Figure 18, this system is similar to Figure 4, except all the needed valves (rollover, vent, liquid/vapor separator) are built into the top of the fuel tank, instead of externally. A solenoid activated rollover valve could be used (Figure 19) which is located on top of or inside the fuel tank. [33] This valve would normally be closed except during refueling when it would be electronically opened by a switch located near the opening of the fillpipe. The switch could be activated either by the opening of the door over the fuel cap or removal of the fuel cap itself (see Figure 20). Yet another approach is a mechanical ball valve. This device would normally remain open to provide a clear vapor passage. However, in the event of a rollover accident gravity causes a metal ball to roll into a fitted seat and seal off the vent line. One variation on this design (see Figure 21) would be simple mechanical ball valve built in combination with other needed valves.[15] As is shown in Figure 18, this onboard system design may need a fill limiter to allow for normal refueling operations (i.e., automatic shut-off) and to prevent overfilling the tank during full refills. A sample design is shown in Figure 22.[33] The operation of the fill limiter is quite simple. When the tank is full the float rises in the fill limiter and closes off the refueling vent line. This causes pressure to rise in the tank, subsequently fuel runs up the fillpipe and activates the nozzle automatic shut off mechanism. While incorporation of a fill limiter is quite simple from an engineering perspective, the design would have to incorporate a "soft close" to avoid back pressure "spikes" and possible spills at the end of a full refill. From a safety perspective this alternative is attractive because all the external components are either removed or mounted in a more protected location. The external vent line (Figure 1) can be eliminated and the other system valves and vapor lines are moved away from the vehicle shell to a more protected area within the vehicle body. Also, no vapor line exists between the fuel tank and the rollover valve, so vapor line integrity and connections are less critical. Finally, depending on how high a priority a manufacturer assigns to safety or if significant in-use risk is perceived, a collapsible bladder tank design could be used to meet the onboard requirement. Bladder tanks could lead to a substantial improvement in fuel system safety by providing an additional shell of protection to help reduce fuel spillage in case of an ------- . PRESSURE/VACUUM RELIEF CAP Figure 18 ALTERNATIVE INTEGRATED EVAPORATIVE/REFUELING SYFTEM TANK MOUNTED VALVES REAR MOUNTED CANISTER J-TUBE Sl^AL M1JCI1ANICAL OR SOI.ENOID ACTUATED VENT/ROUOVER VALVE, LIMITING ORIFICE & LIQUID/VAPOR SEPARATOR 5/8" DIA. 3' LONG / ^-J-TUDE SEAL LEAK 3. I tn T PURGE VALVE Jc 3/8" DIA. 5' LONG •jf—txH- TO PURGE INDUCTION POINT ~3 LITER CANISTER 14 GALLON FUEL TANK ------- Figure 19 TO SOLENOID VALA/Ł MO SCHEMATIC OF POTENTIAL ONBOARD VAPOR RECOVERY SYSTEM MUELLER ASSOCIATES. INC. 140I •. CDQCWOOD STMCCT • AlTIMOHC. MAMVtAND 31217 JANUARY at. !••• ------- Figure 20 CAP OOOG. CAP ^ » "i r ~Tn • i * (SAP U1 T |.()Ti:NTIAL MOMKNTAKY SWITCH LOCATIONS MUELLER A630CIATE3. INC. i4o« •. cooewooo STIICCT • AL1IMONC. MAflVLANO 31237 JANUARY 31. !••• ------- -59- Figure 21 COMBINATION VALVE I 1/8 .*• 1.0. WLLOVE* SHUTOFf 1/2" OIA SS BALL OVERFILL SMUTQFF S.S ICSH VW»QR LIQUID SEPARATOR ------- Figure 22 0.050" BY PASS 01 o UALL-IN-CAGE FLOAT VALVE MUELLER ASSOCIATES. INC. 7401 •- fPQlWOOO 4ANUAIIT 9«. '••• ------- -61- accident. Also, a bladder tank could eliminate essentially all of the safety concerns raised regarding control of refueling emissions. This is because a vapor space would not be present in a bladder tank, and without a vapor space,, refueling emissions would not occur. Thus neither a refueling emissions canister, external plumbing, or a rollover valve would be needed. It might even be possible to eliminate the present evaporative system and enhance safety even more. Also, bladders should be an attractive option for those who claim high costs or packaging problems with canister-based onboard systems. EPA is quite interested in collapsible bladder tanks as an option to canister-based onboard systems. This analysis of design and in use safety issues and the associated costs and leadtime is not directly applicable to collapsible bladder tanks. However, EPA plans to further explore the cost and technological feasibility of bladders as well as their safety and emission benefits. In conclusion, the information and rationale presented above refute the assertion that adding an onboard system would directionally increase in-use risk, even if only by some unquantifiable (presumably small) amount. Any perceived risk is manageable, and furthermore, it appears that the net effect of an onboard refueling control requirement could be a potential increase in fuel system safety. As discussed above, and in Section IV there are numerous design alternatives to address the safety concerns raised. To varying degrees all options have the potential to improve the safety of fuel systems in-use. VI. Cost and Leadtime Considerations The comments received regarding onboard vapor recovery systems also addressed the cost and leadtime implications of implementing such controls. More specifically, several of the comments addressed onboard safety costs in some form (usually addressing hardware costs), and several commenters expressed some concern over EPA's leadtime estimate. An analysis of the costs and leadtime necessary to implement onboard controls safely is an integral part of the overall evaluation of the feasibility of this control approach. As was mentioned above, cost is one of the other key considerations which is often balanced carefully against safety concerns, and the costs needed to implement onboard systems safely must be reasonable relative to other safety costs and the overall costs, of onboard systems. Further, the analysis must carefully consider the manufacturer leadtime needed to implement onboard controls on their production vehicles. This includes the time needed to identify, evaluate, and address all safety concerns and to comply with the test requirements prescribed in FMVSS 301. ------- -62- The first portion of this section addresses onboard safety costs; the second discusses leadtime and describes the basis for EPA's leadtime estimate. Some of the cost figures cited in the safety cost analysis are drawn from a broader EPA analysis which develops total onboard system costs in 1984 dollars.[17] A. Safety Costs As is evident from the discussion presented in Section IV, the costs needed to implement onboard controls safely fall in several areas. R&D type costs will be incurred, some new or modified components will be needed which may slightly affect vehicle operating costs, and safety certification testing will be necessary. However before beginning a discussion of these costs, it is valuable to discuss how the FMVSS 301 standards and EPA's evaporative emission control requirements impact onboard safety costs. The control of refueling emissions through an onboard system would not be the first Federal regulation to require an investment to improve fuel system safety. The first fuel system integrity standards (FMVSS 301) were implemented by NHTSA for 1968 vehicles, and since then there have been 2 major additions to these requirements. Each of these new requirements has caused a small cost increase, but each has also led to an improvement in fuel system safety on in-use vehicles. In the mid 1970's, FMVSS 301 was substantially upgraded to extend the coverage of impact types to include rollover events and, rear end and side collisions. A 1983 NHTSA Technical Report describes the nature of the modifications made in response to the upgrading of the standard and estimates the costs incurred by vehicle manufacturers in order to meet the revised standard and provide a higher level of in-use assurance.[21] Table 3 describes modifications that were made to 1977 model year vehicle fuel systems in response to the increased requirements of FMVSS 301. These modifications ranged from minor changes such as the slight revision of mounting bolts or clips to more major ones such as recontouring the fuel tank. Based on information submitted to NHTSA by vehicle manufacturers, the average (sales-weighted) cost increase required to make these modifications was $4.60 per vehicle.* These modifications were also estimated to increase vehicle weight slightly (an average of three pounds per vehicle), which would tend to marginally increase the amount of fuel consumed over the life of the vehicle (about 3 gallons of fuel). When these two- costs are added, NHTSA estimated the total safety cost resulting from the 1977 revisions to FMVSS 301 averaged about $8.50 per vehicle (1982 dollars). A Bureau of Labor Statistics analysis estimated that vehicle costs incurred to meet the 1977 revision to FMVSS 301 were $4.70 and costs to meet the 1976 revision to the standard (added rollover test) cost $2.10.[34,35] ------- -63- Table 3 Summary of Vehicle Modifications in Response to 301-77 Vehicle Components Fuel System Components... Fuel Tank Fuel Gauge Sensor Fuel Lines Fuel Vapor Lines Fuel Pump Modification(s) to • Improve Crashworthiness - Increase gauge, of tank material - Add protective shield - Recontour to minimize c contact/puncture by other adjacent vehicle components. - Strengthen/shield filler neck - Increase strength of solder/weld seams - Strengthen mounting by adding brackets, revising mounting bolts, increasing torque of mounting straps - Strengthen filler cap seal, improve impact resistance - Strengthen mounting - Recontour - Recontour, revise, revise clamps - Provide shield Other Vehicle Components Changed to Improve Fuel System Integrity Rear Floor Pan/Support Rails/Wheel Housing Rear Suspension (Springs, Shock Absorbers) Rear Axle Assembly i Rear Axle Assembly Seat Belt Brackets Engine Mount Power Steering Pump Bracket - Revise, add supports - Change support brackets, revise mounting bolts, revise mounting procedure, and shield - Minor changes in contour of lines, screw heads, mounting clips, recontour vent cover - Revise hinge assembly - Revise anchorage - Slight revision - Slight revision ------- -64- Based on an evaluation of in-use accident information for 1977 and later model year vehicles, NHTSA's 1983 Technical Report also estimated that the upgrading of FMVSS 301 would in the long term annually prevent 400 fatalities, 630 injuries, and 6500 post crash fires. This indicates that FMVSS 301 has been effective in substantially improving many aspects of overall fuel system safety and that these improvements were purchased relatively inexpensively. The second area of interest is the effect of current evaporative emission systems on potential onboard system safety costs. As was described in Section III of the report, an onboard system is in many ways an extrapolation of current evaporative emission control technology and the two systems are quite similar. Many of the control techniques and basic system components used would be similar, and the same system and vehicle assembly approaches could be used. In fact, many manufacturers will likely integrate their refueling and fuel tank evaporative control systems. All current vehicle fuel systems incorporate fairly sophisticated evaporative emission control systems. Since these fuel systems have all been designed to meet the most recent and most stringent version of FMVSS 301 and also provide a high level of in-use safety performance, it follows that a thorough evaluation of the potential safety implications of evaporative control systems has already been conducted. Since onboard systems are basically extensions of evaporative emission systems, clearly many of the safety design considerations associated with onboard systems related to passing FMVSS 301 or providing in-use assurance have already been resolved or at least addressed in evaporative emission system designs. Consequently, much of the "ground work" required to insure onboard safety has already been performed. Therefore, it is important to keep the magnitude of the onboard safety design process in perspective, because clearly much of the safety technology needed for onboard is simply an extension of that which already exists. Remembering the relatively inexpensive and yet effective nature of current fuel system integrity measures and the "incremental" nature of onboard safety in terms of the magnitude of the task and actual cost relative to evaporative systems, it is now possible to describe the components which factor into onboard safety costs. Basically, the integration of safety into a fuel system incorporating an onboard controls involves four types of costs. These four costs are for 1) design and development (R&D), 2) specific hardware, 3) safety testing, and 4) weight penalty (or added fuel consumption). The paragraphs that follow describe how each of the cost components are affected by onboard safety. ------- -65- To begin with, some research and development will have to be performed to safely integrate onboard controls into vehicle fuel systems. EPA has estimated that the total design and development cost required to incorporate onboard systems in vehicle fuel systems is about $112,000 per family" or in the range of $0.35 to $0.55 per vehicle (passenger car and light truck). This cost is for any development effort involved in combining the components of an onboard system with the rest of the vehicle to form a unit that interacts safely and effectively. Because safety is evaluated inherently in the design and development process and yet is only one part of the total effort, only a fraction of the total cost should be directly allocated to safety. Also, because much of the safety related system development work has already been completed it is not unreasonable to expect that onboard safety development costs would only be a small fraction of the total cost in this area. In addition, because of the incremental nature of the onboard system, much of the research and development that went into making evaporative control systems safe can be applied directly to onboard controls. Given that manufacturers are designing an onboard system in the context of many requirements and certain design features serve multiple functions, it is very difficult to isolate the level of expenditures directly attributable to safety. For this analysis it was assumed that about 20 percent of R&D expenditures relate to safety, which translates to about $0.10 per vehicle. However, total onboard cost is quite insensitive to this assumption, even if the safety related development costs were tripled, per vehicle costs would increase by only one percent. The second component of onboard safety costs relates to specific hardware that may be required to insure fuel system safety. EPA has estimated costs for three specific items which have been identified as potential components to be included as part of the onboard system design explicitly for safety reasons. These three items are 1) a rollover valve, 2) a pressure relief mechanism, and 3) fuel system modifications necessary to safely incorporate a rollover valve, pressure relief mechanism, or other onboard hardware. EPA has estimated the cost of a solenoid rollover valve (like the one shown in Figures 19 and 20) to be $4.60. [17] This price included the cost of the valve, an actuator located at the fillcap, and the necessary wiring and connectors. Manufacturers estimate the cost of a valve assembly similar to that described by EPA's cost estimate would be in the range of $5.00 to $6.00. It should be noted that these estimates are for the most complex rollover valve type, and that the cost of a simpler valve assembly such as the fillneck mounted type (see Figures 9-15) is estimated to be more in the $3.00 to $4.00 range. The available information indicates that an appropriate rollover valve cost falls into a range of $3.00 to $6.00. ------- -66- The second safety hardware cost is for a pressure relief mechanism. This mechanism would only be needed for onboard systems incorporating a mechanical fillneck seal, and consequently not all vehicles would require its use. However, for those systems that would require a pressure relief mechanism, EPA has estimated that this device would increase system costs by approximately $0.50. This estimate is based on pressure relief mechanisms currently used in automotive applications which perform the same basic function and are similar in complexity.[36] The final onboard safety hardware cost accounts for any fuel system modifications that would be necessary in order to safely accommodate any onboard control hardware. For example, a vehicle's fuel tank or fillpipe might have to be re-shaped or modified in order to accept a rollover valve. Also, for safety reasons, some slight re-routing of the fuel system's vapor lines may be required. EPA has estimated a total modification cost to be $0.50 per vehicle. Only part of this total cost would be required for safety purposes. However, because safety inherently enters into the decision to make any modifications, it is difficult to access what part of the total modification cost should be allocated to safety; perhaps half or more ($0.25 to $0.30 per vehicle) could be considered as driven by safety related concerns. Summing up the three individual safety hardware costs yields a total estimated figure in the range of $3.25 to $6.80. However, this cost estimate does not include manufacturer overhead and profit. In order to obtain the retail price equivalent cost, these estimates must be multiplied by a markup factor. Presently, a markup factor value of 1.26 appears representative.[37] Therefore, after inclusion of the markup factor, a total retail price equivalent safety-related hardware cost falls within the range of $4.10 to $8.60. The third component of safety costs accounts for any safety crash testing that would be necessary. EPA has estimated the cost of FMVSS 301 crash testing to assure fuel system integrity for onboard systems to be about $34,000 per bodyline/style or about $0.12 per vehicle.[38] This estimate is based on four tests for FMVSS 301 only required per body line/style with two vehicles required for each sequence of four tests. Clearly safety crash test costs are very minimal in the long term and do not pose an obstacle to the adoption of onboard controls. In some cases these costs may be higher but even if total costs were double the estimate, the overall per vehicle cost would rise by less than one percent. Also, costs could be lower if FMVSS 301 test were combined with crash testing required for compliance with other safety standards. ------- -67- The fourth component of safety costs is the estimate of the added fuel consumed over the life of the vehicle due to the increase in vehicle weight resulting from added safety hardware. The amount of weight added to a vehicle for a rollover valve and pressure relief mechanism is very small (0.4 Ibs), and EPA estimates that only about $0.25 in added fuel costs will result from their inclusion into the onboard system.[17] A total onboard safety cost is calculated by summing all four individual component costs. Total capital costs per family average about $56,000. The per vehicle safety-related costs range from $4.50 to $9.00, or about 25 percent of EPA's estimate of the total cost, depending on the type of rollover valve used. One final point needs to be made with regard to these safety cost estimates. To the degree that manufacturers take the opportunity introduced by an onboard requirement to further reduce in-use risk beyond that now accepted with present systems, some additional costs might be involved which have not been identified or quantified. On a fleetwide basis these would be quite small. Also, it should be noted that the added benefits of these measures have not been included either. EPA estimates safety related onboard costs to be $4.50-9.00 per vehicle. While there is some uncertainty in the development cost portion of the estimate, the total range shown here is quite insensitive to any error. These costs are quite similar to those previously incurred by manufacturers to insure fuel system safety. Many of the potential problems related to implementing onboard systems safely have already been considered in the design and development of present evaporative systems. The manufacturers previous experience in implementing evaporative systems safely and the incremental nature of onboard systems reduces costs and the level of potential problems. This analysis demonstrates that high levels of in-use fuel system safety can be achieved at low cost, and there is no need for a manufacturer to "cut corners" on onboard safety to reduce costs. B. Leadtime If EPA were to implement an onboard requirement, it would be necessary to allow a sufficient period of leadtime between the date the rule is promulgated and the model year the systems are to be required on production vehicles. This leadtime is provided so that manufacturers will be able to adequately prepare for the requirement through system design, development, testing, tooling, certification, and safety evaluation. Some of the tasks involved in the preparation process could be worked on simultaneously, while some tasks cannot begin before others are complete. While EPA estimates that none of the ------- -68- individual tasks require more than twelve months to complete, due to the sequential nature of some of the tasks, a leadtime period of approximately 24 months will be required by manufacturers. Figure 23 shows how the individual leadtime components result in a total estimate of 24 months. First, four to six months are included for manufacturers to develop and optimize working prototype systems applicable to all of their different vehicle models. This is not at all unreasonable given the fact that working prototypes already exist and many manufacturers have evaluated these or their own prototype to some degree. Not all manufacturers have developed working prototype onboard systems, but the technology required to develop such systems is readily available and in-depth technical descriptions of such systems have been described in publicly available literature. Four to six months should be adequate time for these manufacturers to develop and evaluate prototype systems. Once the prototype development is complete, initial durability testing of the prototype could be conducted under laboratory conditions. This laboratory testing is not expected to last more than two months. Following laboratory testing, three separate actions can begin simultaneously. These three tasks are: 1) in-vehicle testing, 2) safety optimization, and 3) tooling and prove out of the overall control system through efficiency and durability verification. Similar in-vehicle testing programs have required four to six months for completion. Safety evaluation is the second task which could begin subsequent to the completion of the prototype laboratory testing. Safety evaluation would involve the use of computer crash simulation models and vehicle crash testing (four tests per body line/style) to verify the crashworthiness of the vehicle's modified fuel system. Because this evaluation could begin immediately after the completion of laboratory testing, a full 14 months of leadtime would be available to manufacturers if needed to perform this task. Based on discussions with NHTSA, 6 months is normally enough time to complete a safety evaluation. Therefore, 14 months appears more than adequate to perform the necessary safety optimization and testing for a manufacturer's product line. Tooling could also begin once laboratory testing is complete. Figure 23 shows EPA's estimate that tooling could require as little as 3 months and as much as 12 months depending on the magnitude of the task. Different factors are weighed before a manufacturer commits to various tooling changes. Manufacturers can commit to some tooling changes for onboard controls immediately after the in-vehicle testing (e.g., purge valves), whereas they may choose to wait until after safety analysis before committing to other tooling changes (e.g., rollover valves). However, in an overall sense, 12 months would provide manufacturers with enough time to delay some tooling changes and still complete the task well within the 24-month leadtime. ------- Safety-up to 14 no. Tooling: Niui&-i2no. Mit, j-9 m, Cure, 3-4 HO, llllllllllllllllhli IIIMHIHMMIHIII IIIIHMMMMIIIKI HHHHMMIIHHII Certification 10-12 HO, IMIIIHIMIIIlllt Developnent: Frototuve 3-6 NO, Ub 2 HO, IHelilcle 4-6 no, CTi VO I I I I I I I I I I I I I I I I I I I I I I I I I FEH 4 8 12 Months 16 24 i==ii tchoJuling FIGURE 23 ONBOflRD,LEflDIIME ------- -70- The only other process which requires completion within the 24-month leadtime period is emissions certification. EPA has found from past experience that a manufacturer normally requires between 10 to 12 months to certify its product line.[39] This estimate is based on a 10 month engine family certification schedule which allows time for durability, emission data, fuel economy, and confirmatory testing. Because certification cannot begin prior to the completion of in-vehicle testing, certification is critical path, and EPA estimates a total leadtime period of 24 months will be needed overall. Twenty-four months of leadtime is quite reasonable, especially since most of the fundamental development work is already complete. Onboard system prototypes are presently available, and many aspects of the system's performance have already been tested and proven to be effective. Also, because onboard control technology is incremental in nature to evaporative emission controls, there is no need to design and develop entirely new systems. As a matter of fact, many of the critical onboard design issues have already been incorporated into current fuel system designs with the inclusion of evaporative emission control systems. For example, evaporative emission control systems have already added the following to fuel systems: vapor vent lines, vapor storage device, canister purge capability, and corresponding safety provisions associated with each of these additions. Since much of the development work is already complete, implementing onboard systems should be no more of a problem to vehicle manufacturers than was implementing evaporative emission control systems. EPA's 24-month leadtime estimate is supported by past experience with three previous evaporative emission rulemakings. These rulemakings included the original 1978 6.0 g/test LDV/LDT evaporative emission standard which was implemented with just 12 months of leadtime, the 1981 2.0 g/test LDV/LDT evaporative emission standard which was implemented with 24 months of leadtime, and the 1985 HDGV evaporative standard which was implemented with 24 months of leadtime. In each of these three rulemakings, manufacturers faced leadtime factors identical to the ones that would accompany an onboard requirement, including safety. Since manufacturers were able to safely and effectively integrate evaporative emission controls into their vehicles' fuel systems with 24 months of leadtime, and since the magnitude of the onboard implementation task is similar, this suggests that manufacturers should also be able to safely and effectively integrate onboard into vehicle fuel systems with 24 months of leadtime. As far as safety development and evaluation is concerned, EPA's leadtime estimate is also supported by the past experience of NHTSA in implementing the various versions of ------- -71- FMVSS 301. Table 4 shows the chronological history of FMVSS 301. The original 1968 FMVSS 301 applicable to passenger cars was implemented with less than 12 months of leadtime. When the standard was revised for 1976 model year passenger ears, 17 months of leadtime was provided. For 1977 model year passenger cars, manufacturers had to contend with the most substantial upgrade to the standard, and this was accomplished with only 29 months of leadtime, and only 12 months between new requirements. Also, beginning in the 1977 model year, FMVSS 301 was extended to include light trucks. This extension involved a 29-month leadtime period with further crash requirements in effect 12 months later, thus requiring recertification. Finally, in 1977, FMVSS 301 was extended to include school buses (with a GVWR greater than 10,000 Ibs), and this requirement was implemented with 17 months of leadtime. This experience indicates that 24 months of leadt.ime allows manufacturers sufficient time to factor in safety. Based on the information provided above, 24 months appears to be adequate time to implement onboard controls, with full consideration of all safety concerns. Because safety evaluation can proceed in parallel to three other tasks, more than a year is available for computer simulation and actual safety crash testing. This allows adequate leadtime to properly integrate safety into onboard systems especially since manufacturers can utilize and expand safety technology used in current evaporative emission control systems to develop effective onboard systems. Also, much of the safety development which would be required has already taken place with the identification and resolution of such potential safety issues as rollover protection and fuel tank pressure relief. Consequently, a 24-month leadtime period would provide manufacturers with sufficient opportunity to develop safe and effective onboard systems. While this analysis indicates that the current leadtime estimate of 24 months is reasonable for most if not all vehicle models, EPA is sensitive to manufacturers concerns regarding leadtime requirements. Public comments regarding EPA's 24-month leadtime estimate were submitted as part of comments on EPA's original Gasoline Marketing Study (July 1984).[40] While most cornmenters did not object to the 24-month leadtime estimate presented in the Gasoline Marketing Study, auto manufacturers felt that a 24-month leadtime was insufficient to implement onboard controls. The leadtime periods suggested by these commenters ranged from three to six years. Those commenters suggesting that four or more years would be necessary also suggested that onboard controls should be phased-in gradually as normal vehicle model redesign and turnover occurs. Using this approach, implementing onboard controls would be less burdensome and would allow extra time to deal with implementation or packaging problems on unique vehicles. However, it is worth noting that comments received ------- -72- Table 4 Chronology of FMVSS 301 Requirements Model Year Vehicle Promulgation Requirement Type Date 1968[1] 1976[2] 1977[2] 1977[2] 1978[2] 1977[2] 1978[2] 1977[3] • PC PC PC Class 1 LOT Class 1 LOT Class 2 LOT Class 2 LOT School Buses 2 3 3 3 3 3 3 10 -3-67 -21-74 -21-74 -21-74 -21-74 -21-74 -21-74 -15-75 Effective Date 1 9 9 9 9 9 9 4 -1 -1 -1 -1 -1 -1 -1 -1 -68 -75 -76 -76 -77 -76 -77 -77 Leadtime Time Since (Months) Last Requirements 11 17 7 2/3 yrs. 29 12 mos. 29 41 12 mos. 29 41 12 mos. 17 [1] Motor Vehicle Safety Standard No. 301, Fuel Tanks, Fuel Tank Filler Pipes, and Fuel Tank Connections - Passenger Cars; 32 FR 2416, February 3, 1967, Part 571; S 301-1. [2] Federal Motor Vehicle Safety Standard No. 301, Fuel System Integrity, 39 FR 10588, March 21, 1974. [3] Federal Motor Vehicle Safety Standard No. 301, Fuel System Integrity, 40 FR 48352, October 15 1975. ------- -73- from the manufacturers suggesting the need for a longer leadtime were not supported with any compelling arguments which would substantiate the insufficiency of a 24-month leadtime. While the analysis above indicates that approximately 24 months of leadtime should be sufficient, there are some factors which must be considered but are difficult to factor into the analysis. First, as was mentioned above, some manufacturers have not developed working onboard prototypes due to resource or facility constraints and the possibility exists that these manufacturers will take no definitive action on systems development prior to a final action by EPA. Some have commented that these manufacturers should not be penalized because of this and may require a greater amount of leadtime. Second, vehicles with atypical duty cycles (ambulances, mail trucks, etc.) may require more leadtime to implement onboard controls safely. Vehicles assembled by secondary manufacturers such as recreational vehicles and airport mini-buses could also require more time especially if adding an onboard system requires other vehicle changes. Finally, more leadtime ma'y be necessary because manufacturers may not have the test facility and safety engineering resources to effectively comply with multiple vehicle safety standard requirements concurrently. A similar concern may exist for emissions recertification since manufacturers would in most cases have to recertify virtually all gasoline powered vehicles for exhaust and evaporative emissions in addition to the new refueling requirement. Because of these concerns, more leadtime may be necessary for the implementation of safe onboard control systems. EPA is committed to providing manufacturers the leadtime necessary to implement onboard controls safely and effectively. Consequently, EPA is open to considering the need for more leadtime and/or a short phase-in period for onboard controls. Such a phase-in period would provide manufacturers with additional time to solve any onboard system packaging and testing problems for unique vehicle models. Also, if a manufacturer had unique safety concerns on one or two body lines/styles, this approach would offer a manufacturer more leadtime to properly address them. In addition, it could improve the cost efficiency of controls by allowing manufacturers to forego development of onboard systems for vehicle models scheduled for retirement or permit manufacturers other flexibilities with new models being planned and those now in production. The implementation of other unique control strategies, such as bladder systems, would require more leadtime. It is also important to note that if onboard controls are required, the date of promulgation of the final rule may be such that more than 24-months leadtime is actually available. The model year generally begins in September or October. If the publication of the final rule is much beyond that period, ------- -74- the manufacturers would have the remainder of that model year in addition to the 24 months discussed previously. Therefore, in actuality manufacturers could have substantially more than 24 months, but EPA's analysis indicates that only 24 months is needed. In conclusion, given the magnitude of the task, this analysis indicates that 24 months of leadtime is adequate to allow manufacturers to safely and effectively implement onboard controls. This estimate is supported by EPA's experience with implementing evaporative emission standards and NHTSA's experience with implementing the various versions of FMVSS 301. However, EPA is committed to providing the leadtime necessary to implement onboard controls both safely and effectively. Thus EPA is open to considering more leadtime and/or a short phase-in period or other approaches which are pertinent. Up to this point, this report has addressed onboard safety issues from primarily a passenger car and light truck point of view. It should be noted however that just as evaporative emission control technology was extended to heavy-duty gasoline fueled vehicles (HDGVs), onboard control technology could also be applied to HDGVs. While many of the safety issues discussed thus far would be identical in an HDGV application, some aspects of HDGV onboard safety would be distinct from light-duty issues. The next section in this report has been included to address the similarities and differences between heavy-duty and light-duty onboard safety issues. VII. Heavy-Duty Gasoline Vehicle Requirements Since an EPA onboard refueling control requirement would cover heavy-duty gasoline vehicles (HDGVs), in addition to passenger cars and light trucks, it is important to evaluate any potential HDGV onboard system safety considerations as well as those encountered in light-duty applications. (It is important to note that an onboard requirement will not apply to heavy-duty diesel trucks and buses.) While none of the comments received regarding the safety implications of onboard specifically addressed HDGVs, overall light-duty concerns discussed earlier are expected to apply. However, it is important to note that HDGV fuel system configurations differ somewhat from those found on passenger cars and light trucks, and the fuel system safety requirements also differ. This section of the report identifies distinct HDGV onboard safety issues and discusses the implications these distinctions could have on manufacturers fuel system safety designs. It begins with a brief description of some of the more common HDGV configurations. Following these descriptions, a discussion of the HDGV fuel system safety standards will be presented, and differences between light- and heavy-duty vehicle onboard systems due to fuel system configurations and ------- -75- safety test requirements will be discussed. Next, HDGV onboard safety issues will be introduced and analyzed. Finally, this section will end with a brief segment concerning the effect of HDGV onboard safety on costs and leadtime. Before beginning this analysis one key clarification is needed. FMVSS 301 covers all vehicles with a gross vehicle weight rating (GVWR) of 10,000 Ibs or less (plus school buses over 10,000 Ibs GVWR). For emission control purposes EPA classifies all gasoline-powered vehicles with a GVWR of 8,501 Ibs or more as HDGVs. Out of EPA's HDGV category only 90,000 vehicles (or approximately 25 percent) have a GVWR greater than 10,000 Ibs. Thus most (or approximately 75 percent) of EPA's HDGV class (those vehicles with a GVWR between 8,501 and 10,000 Ibs-Class lib) is covered by the LDT requirements in FMVSS 301. Since the fuel systems on Class lib HDGVs are essentially identical to those on lighter weight LDTs, and FMVSS covers all LDTs up to 10,000 Ibs GVWR, the previous portion of this analysis applies to the Class lib HDGVs. The remainder of this analysis will focus on gasoline-powered vehicles whose GVWR exceeds 10,000 Ibs. This analysis addresses compliance costs with the assumption that HDGV manufacturers will use only certified fuel tanks on their vehicles. Currently, it is the owner's responsibility to purchase and use a certified tank if required by regulation. The current Motor Carrier Safety Regulations exempts a vehicle or driver used entirely within a municipality or commercial zone, although they may voluntarily comply with the regulations. These regulations may be changed in the future to be applicable to all HDGVs and eliminate the aforementioned commercial zone exemption. Therefore, this analysis assumes that all HDGVs will use fuel tanks certified to comply with the regulations discussed below. A. HDGV Fuel System Configurations Just as there are chassis and drivetrain differences between heavy and light-duty vehicles, there are also some differences in their fuel system configurations. Fuel tanks are generally of a heavier construction and are larger in volume; dual fuel tanks are also more common. Fuel tank shapes vary somewhat as does the location of the tanks on the vehicle. Also, it is often the case that the fillpipe is integral with the fuel tank, or has a very limited length as compared to lighter weight vehicles. As a part of a recent contract study, EPA surveyed the characteristics of the fuel/vapor handling systems of HDGVs over 10,000 Ibs GVWR. [41] The key results of the survey portion of that report are summarized in Table 5, which will serve as the basis for the remainder of this discussion. ------- Table 5 Selected Characteristics of Heavy-Duty Gasoline Vehicle Fuel/Vapor Handling Systems by Vehicle Model/Series Model or Manufacturer Series Fuel Tank Shape GM P4T042 Rectangular Fuel Tank Location 30 gal. Mount On Right Hand Frame Number of Canisters Size of Canisters 1500 and 2500 cc Diameter Diameter of Vent of Purge Lines Lines 0.312 in. 0.375 in. P6T042 Rectangular 30 and 60 gal. Mounted on Left Hand Frame 1500 and 2500 cc 0:312 in. 0.375 in. C5D042 C6D042 C7D042 C7D064 Rectangular and Rectangular Step Rectangular and Rectangular Step 20 gal. Mounted Right Hand Frame 50 gal. Step Mounted Right or Left Hand Frame 20 gal. Mounted Right Hand Frame 50 gal. Step Mounted Right or Left Hand Frame Dual 50 gal. Step Mounted Left and Right Hand Frame 1500 and 2500 cc 0.312 in. 0.375 in. 1500 and 2500 cc 0.312 in. 0.375 in. | -j en B6P042 Rectangular 30 gal. Mounted Right Hand Frame 1500 and 2500 cc 0.312 in. 0.375 in. FORD F-Series Rectangular 60 gal. Mounted Right Hand Frame 35 gal. Right Hand Side Frame Mounted 1400 ml. ea. 3/8 in. 3/8 in. B-Series Rectangular C-Series D-Type 30 gal. Right Hand Side Frame Mounted 50 gal. Right Hand Side Frame Mounted 1400 ml. ea. 1400 ml. ea. 3/8 in. 3/8 in. 3/8 in. 3/8 in. ------- -77- First, as can be seen in Table 5, there are only two manufacturers which market HDGVs. Between them they offer only about 10 different chassis models to which any number of different bodies or payloads can be attached (tanks, dumps, cargo boxes, motor homes, school buses, flat beds, etc). The second area of interest is the fuel tanks. Essentially three different tanks shapes are used: standard rectangular, step rectangular, and D-shape. Examples of these tanks are shown in Figure 24. The tank volumes range from 20 gallons to 60 gallons, with an average in the range of 35 to 40 gallons for single tank HDGVs and 75 gallons for dual-tank HDGVs. EPA estimates that about 15 percent of HDGVs use dual tanks, with most of those being in heavier weight trucks (>20,000 Ibs GVWR).[17] Most passenger car and light truck fuel tanks are located under the vehicle body and this is also the case for some HDGV configurations (e.g., school buses). However, on some HDGV configurations, the fuel tanks are mounted on the outer side of the vehicle frame (right or left hand side for single tanks, both sides for dual tanks) and are exposed to the road rather than shielded by the vehicle body. As was alluded to above, most HDGV tanks have only a limited fillpipe length (<8") and some have essentially none at all, with the fuel cap being integral to the tank. Finally, with regard to the HDGV evaporative emission systems two observations are important. (See Figure 25 for an example of a HDGV evaporative system.) First, for the same reasons as described for passenger cars and light trucks, HDGVs use a limiting orifice in the evaporative emission system. Second, the total evaporative emission canister capacity on an HDGV is more than twice the average on passenger cars and LDTs (2.8-4.0 liters). However, on HDGVs diurnal emissions from the fuel tank and hot soak emissions from the fuel metering system are routed to different canisters. Hot soak emissions are somewhat more of a concern on HDGVs because presently most are carbureted rather than fuel injected. To the degree that HDGV engines fuel systems are converted from carbureted to fuel injected as is now projected, concerns over hot soak emissions may diminish and allow the elimination of the second canister on those vehicles.[42,43] With this brief background on HDGV fuel/evaporative systems we turn now to a discussion of the fuel system safety standards which apply to HDGVs over 10,000 Ibs GVWR. B. HDGV Fuel System Safety Standards Fuel system safety regulations differ according to vehicle and fuel system configuration. The Department of Transportation/Office of Motor Carrier Safety (OMCS) has requirements which apply to all HDGVs over 10,000 Ibs GVWR. In addition, school buses must meet the requirements prescribed specifically in FMVSS 301. The OMCS and FMVSS 301 requirements are summarized below. ------- -78- Figure 24 HDGV Fuel Tanks D-Shape Standard Rectangular Step Rectangular ------- Figure 25 TYPICAL HDGV EVAPORATIVE SYSTEM -BALL CHECK VALVE TANK RESTRICIDR ^PRESSURE/VACUUM RELIEF PURGE VALVE L SEALED GAS CAP 3/16" DIA 13' LONG TO PURGE INDUCTION POINT 2.5 LITER CANISTER ^j vo 30 GALLON FUEL TANK ------- -80- 1. Office of Motor Carrier Safety Requirements OMCS safety regulations include both specific design requirements and actual fuel tank safety tests.[44] The design requirements contain rules governing the location, installation, and construction of fuel tanks used on HDGVs. Also, fuel lines, fittings, and fillpipes must conform to certain requirements. The actual testing requirements depend on whether a fuel tank is side-mounted or non-side mounted. To paraphrase the definition, a truck fuel tank is considered side mounted if it extends beyond the outboard side of a front tire positioned in the straight ahead position. This is shown pictorially in Figure 26. Any fuel tank which does not have this characteristic is considered non-side mounted, and in this analysis will be referred to as frame mounted. The testing requirements for frame-mounted tanks will be discussed first. A frame mounted HDGV fuel tank has to be able to pass two fuel tank safety tests. The first of these two tests, the safety venting system test, involves applying an enveloping flame to an inverted fuel tank to insure that the fuel tank's safety venting system activates prior to the tank's internal pressure exceeding fifty pounds per square inch. The second fuel tank safety test is a leakage test which involves filling the tank to capacity and rotating the tank through an angle of 150° in any direction from its normal position to insure that neither the tank nor any fitting leak more than one ounce of fuel per minute in any position the tank assumes during the test. HDGVs with side mounted fuel tanks must pass two other tests which involve dropping the fuel tank to test impact resistance. The first test, termed the drop test, involves dropping a fully loaded (equivalent weight of water) tank from 30 feet onto an unyielding surface, so that it lands squarely on one corner. A second similar test (termed the fillpipe test) requires that a fully loaded tank be dropped from 10 feet onto an unyielding surface, so that it lands squarely on its fillpipe. In neither case, may the tank nor any fitting leak more than one ounce per minute. Based on conversations with the two HDGV manufacturers, the vast majority of HDGV fuel tanks are frame mounted (non-side mounted). No side mounted tanks are offered as standard equipment, and only occasionally one is sold as a special order.[45,46] Thus, this analysis will focus primarily on the safety venting and leakage test requirements which apply to frame mounted tanks. However, the drop tests for side mounted tanks will also be considered. ------- -81- Figure 26 Pictorial Definition of Side-Mounted Fuel Tank. If the tank extends to the left of line A or to the right of line B, then the tank is side-mounted. Lines A and B are tangent to the outer sides of the front tires. ------- -82- 2. School Bus Requirements In addition to the OMCS requirements for frame-mounted tanks, outlined above, school buses are required to meet specific FMVSS 301 standards. However, this coverage does not include all of the test requirements as prescribed for passenger cars and light trucks. FMVSS 301 for school buses over 10,000 GVWR requires an impact with a contoured moving barrier at any speed up to and including 30 mph, at any point and angle. Depending on the design and location of the fuel tank and its protective structure, the "worst case" point and angle of contact is determined for each school bus model, and the contoured moving barrier impacts there. In this test, the fuel system must be designed so as not to leak more than one ounce of fuel per minute.[47] This briefly summarizes the current Federal safety standards applicable to fuel systems on HDGVs over 10,000 GVWR. It is important to note that more safety requirements could be applied to HDGVs over 10,000 GVWR in the future. The Department of California Highway Patrol recently submitted a petition to NHTSA to amend FMVSS 301 to include fuel system integrity testing for heavy-duty vehicles over 10,000 GVWR.[48] With this background information we are now prepared to discuss how the differences in vehicle/fuel system configurations and the Federal safety standards may affect the design of an onboard system for an HDGV relative to the design for passenger cars and light trucks. C. Distinctions in HDGV Onboard Systems Just as the evaporative emission control systems used on HDGVs are very similar to those used on passenger cars and light trucks, it is also expected that an HDGV onboard system would be very similar in design and approach to that conceived for lighter-weight vehicles (a possible HDGV onboard system is shown in Figure 27). However, some minor variations would exist due to differences in HDGV fuel system configurations and the requirements levied by the applicable Federal safety standards. Before beginning a discussion of these minor variations, it is valuable to reiterate a few key points raised previously with regard to the magnitude of the task of implementing onboard controls. First, like passenger cars and light trucks, all HDGVs now incorporate evaporative emission control systems (see Figure 25) and their fuel systems must meet the present Federal fuel system integrity standards (OMCS and NHTSA). Thus, as before with the lighter weight vehicles, the application of onboard systems is best evaluated incrementally to the measures already taken to incorporate evaporative emission controls and meet safety standards. Much of the ground work has already been completed, the needed modifications made and components added. ------- Figure 27 POSSIBLE HDGV INTEGRATED EVAPORATIVE/REFUELING SYSTEM • PRESSURE/VACUUM IEF MECHANICAL OR SOLENOID ACTUATED VENT/ROLLOVER VALVE, LIMITING ORIFICE „& LIQUID/VAPOR SEPERATOR oo SEALED-' GAS CAP MECHANICAL SEAL 5/8" DIA ~13' LONG -3/8" DIA ~ 3* LONG TO PURGE INDUCTION POINT 7.5 LITER CANISTER 30 GALLON HDGV FUEL TANK ------- -84- In many cases no changes to present fuel system safety assurance or evaporative emission control measures will be needed. Second, it is important to note that HDGV onboard refueling and fuel tank evaporative emission control systems will likely be integrated as with lighter weight vehicles. This is quite easy to accomplish on HDGVs, since they now have separate canisters and control systems for fuel tank and fuel metering system evaporative emissions. Thus a whole new system will not be added to control HDGV refueling emissions; instead the refueling and fuel tank evaporative emission control systems will be integrated into one (compare Figure 25 with Figure 27). Thus many of the primary design considerations which applied for the evaluation of onboard systems to passenger cars and light trucks also apply to HDGVs. Remembering the expected similarities between light and heavy-duty vehicle onboard systems and that the factors affecting the implementation are also the same, the expected minor variations in HDGV onboard systems can now be discussed. For sake of presentation, discussion will begin at the fillpipe and follow along the system to the canister. The analysis will assume an integrated onboard refueling/fuel tank evaporative control system as discussed above. To begin with, because the fillpipes on HDGV fuel tanks are either relatively short or integral with the tank, liquid fillneck seals which require an appreciable fill height may not be a practical approach in some configurations. Due to this lack of fill height, HDGV manufacturers might elect to utilize a mechanical seal approach and thus would need to incorporate some type of pressure relief device such as was described previously. HDGV fuel tanks, which are made of steel or aluminum, now use a pressure-vacuum relief valve, and it is conceivable manufacturers will simply modify that valve for this application. However, under the proper backpressure conditions, it might be possible to use a liquid fillneck seal by extending the fillpipe horizontally in the tank as has been demonstrated in a prototype light-duty program.[15] A second potential difference lies in the diameter of the refueling vapor line and related fuel tank vent. From a design perspective, the tank vent and refueling vapor line size (diameter) could be affected by the fuel dispensing rate. As part of the refueling emissions test procedure, EPA is proposing that HDGV fuel systems be designed for refueling at a maximum rate of 10 gallons per minute, the same rate as prescribed for other vehicles.* This 10 gallon per minute Discussions with gasoline marketing interests and nozzle manufacturers indicate that gasoline available to passenger cars, light trucks, and HDGVs (either at retail or private pumps) is normally not dispensed at rates greater than 10 gpm. ------- -85- dispensing rate results in an increase in the current orifice and evaporative vapor line diameter from about 3/8 inch to about 5/8 inch for an HDGV onboard system. However, to minimize spillage during refueling, the OMCS has requirements that any liquid fuel tank over 25 gallons in capacity must be able to accept fuel at a rate of 20 gallons per minute.[49] For an onboard system this requirement could lead to a increase in the diameter of the tank vent outlet and refueling vapor line. It should be noted, however, that while this requirement applies to all heavy-duty liquid fuel tanks (both diesel and gasoline), fundamentally it is aimed more at diesel fuel tanks. It is not uncommon to encounter an in-use diesel fuel dispensing rate of 20 gpm or more to reduce the time needed to fill a diesel tank since these tanks are typically much larger than gasoline tanks and dual diesel tanks are also more common.[50] In-use gasoline dispensing rates on the other hand normally do not exceed 10 gpm. Since in-use gasoline dispensing rates usually do not exceed 10 gpm, and EPA's refueling certification test would involve a 10 gpm maximum dispensing rate, OMCS's requirement in this area may not be needed. EPA has discussed this matter with DOT/OMCS, and they have expressed a willingness to consider changing this requirement to apply only to diesel fuel tanks.[51,52] If this standard is not changed, and a 10 gpm dispensing rate limit is enacted, the only effect would be that the refueling vent orifice/line for these vehicles would be over sized. Nevertheless, because HDGV fuel tanks do not use long fillnecks, fuel dispensing operations would not be as sensitive to higher backpressure as they would be in light-duty. Even if the refueling vent orifice/line were sized for a 10 gallon per minute dispensing rate, fuel could be dispensed at a greater rate without premature shutoffs. Thus it may not be necessary to size the refueling orifice/vent line to match the dispensing rate requirements. However, in optimizing system designs with regard to fuel tank pressure, manufacturers may choose to use a slightly larger refueling vent orifice than seen on light-duty applications. One final manner in which HDGV onboard systems might differ from those on lighter weight vehicles is in the design of the rollover protection device. The solenoid activated rollover valve (Figure 19) or the combination valve (Figure 21) could be applied to HDGV fuel tanks in their present configurations. One manufacturer's fuel tank design now incorporates a ball type check valve similar in principle to the combination valve.[41] Also, the nozzle actuated valves shown in Figures 9-15 could also be used on HDGV fuel tanks which have a fillpipe length of 6 inches or more. However, nozzle actuated valve designs would have to be modified slightly to perform on fuel tanks whose fillneck is essentially integral with the tank. Nonetheless, the basic approach and operation would be the same. ------- -86- Any of the three rollover valve designs mentioned above could be used on HDGV fuel tanks. However the best choice for any tank would depend on the fillpipe length or other trade-offs relative to cost, packaging etc. With proper design and integration any of these valve designs could provide rollover protection in-use. With this background on HDGV fuel system configurations, safety requirements, and HDGV onboard system characteristics, it is now possible to address some of the unique safety concerns related to HDGV onboard. The next segment of this report discusses and addresses potential impacts of HDGV onboard on fuel system safety considerations. D. HDGV Onboard Safety Issues 1. Introduction While none of the comments received regarding the safety implications of onboard controls specifically addressed HDGVs, it is reasonable to expect that overall concerns would be similar because of the expected close resemblance between light and heavy-duty vehicle onboard systems. To avoid repeating much of what has previously been discussed, this segment will primarily focus on unique HDGV onboard safety considerations. The analysis presented in Section IV regarding maintenance, repair, tampering and defects and refueling operation safety apply equally to HDGVs and will not be repeated here. The potential problems are similar and the same basic approach and straightforward engineering solutions can be used. Also, the extensive analysis in Section V regarding in-use fuel system safety also applies to HDGVs. As before, manufacturers are expected to manage risk appropriately; there is no reason that adding an onboard system would directionally increase in-use risk over that now accepted with present HDGV fuel/evaporative emission systems. However, as was discussed above the fuel system configurations and the safety test requirements for HDGV fuel tanks are somewhat different from light-duty, so some discussion of distinct safety test design requirement issues is appropriate. 2. Safety Test Design Requirements As mentioned above, there are two separate areas of safety test design considerations for HDGV fuel systems. The Office of Motor Carrier Safety (OMCS) has fuel system safety regulations which apply to all HDGVs, and NHTSA has additional requirements for school buses. This segment begins with a summary and analysis of safety design considerations related to OMCS requirements. Following this is a discussion of the effects of NHTSA1s crash test requirements. ------- -87- a. OMCS Requirements/Considerations OMCS has established fuel system requirements for HDGVs to insure their structural and in-use integrity. As part of the current requirements, HDGV fuel tanks must be capable of passing the safety venting system and the leakage tests described previously. Currently HDGV fuel tanks employ a ball check valve and pressure vacuum relief valve to pass these two tests. Since the refueling vent orifice would be somewhat larger with an onboard system (5/8") the ball check valve would have to be upgraded to provide the necessary protection. Little or no change to the pressure vacuum relief valve would be needed. For an HDGV onboard system, the protection now supplied by the ball check valve could be supplied by the rollover valve designs described previously. The same three general types of rollover protection devices that were discussed for use in light-duty applications (nozzle actuated, solenoid, and mechanically activated valves) would all be feasible in various heavy-duty applications as well. However, for tanks with little or no fillpipe (<6") the nozzle actuated valve design would probably have to be modified slightly and mounted in the tank instead of on the fillheck. A solenoid or mechanical rollover (ball) valve design could essentially be used as shown earlier. HDGV and light-duty onboard systems would be functionally identical and would be very similar in design and configuration except for canister size and vapor line length. Of course, to meet safety requirements and to provide in use protection, manufacturers will have to consider the structural integrity and the materials used in key system components just as they do now with other components of the fuel/evaporative system. Thus, some components of the HDGV onboard system (notably the rollover valve) may need to be constructed of metal to provide impact resistance and the flammability protection demanded in the safety venting test. Also, with regard to impact resistance, any one optional side-mounted tank model, would be subject to two additional safety tests (drop tests) designed to evaluate the tank's impact resistance. A side-mounted fuel tank would likely utilize a rollover valve mounted integral to or within the tank to insure its integrity during the drop tests. While this would not be difficult to design (many current fuel tanks contain interior components), it would represent an additional design consideration for side-mounted fuel tanks. From an in-use safety perspective, the impact resistance and overall integrity of rollover valves on frame mounted tanks would be enhanced if they were mounted integral or internal to the tank. Thus, this approach would be attractive for all HDGV fuel tanks. ------- -88- In conclusion, the only HDGV onboard safety design feature introduced by the need to meet OMCS safety requirements is the upgrade of the current rollover protection device. All of the rollover protection approaches discussed for light-duty applications (nozzle actuated, solenoid, or mechanically activated valves) could be used to meet this requirement. The design, placement, and construction of the rollover valve on a particular HDGV fuel tank would depend in part on fillpipe configuration, impact resistance concerns, and flammability potential. b. NHTSA Requirements/Considerations In addition to OMCS requirements, all school buses over 10,000 Ibs. GVWR must also meet specific requirements of NHTSA1s FMVSS 301. As described earlier, this involves a single moving contoured barrier test at a maximum of 30 mph and does not include a rollover test. In this test, the barrier impacts the school bus at the most vulnerable location of the fuel tank, and the fuel system must be designed so as not to leak more than one ounce of fuel per minute. As was true of OMCS requirements, an acceptable school bus onboard system is one which does not impair the fuel tank's ability to meet- this requirement. As in the light-duty test, the crashworthiness of all the onboard system components (rollover valve, charcoal canister, critical vapor line and vapor line connections between the top of the fuel tank and the rollover valve) would all be evaluated in the test. Design measures similar to those described for passenger cars and light trucks would have to be taken to assure the integrity of these three key components. The crashworthiness discussion in Section IV-A and the further options discussed in Section V addressed specific safety design approaches for these components which could also be applied to school buses, so this will not be addressed further. As before with light-duty applications, evaporative emission systems provide directly relevant techniques and experience to assist in proper design, and specific engineering measures have been suggested to deal with potential concerns. Furthermore, the in-use safety of onboard refueling controls for HDGVs must be considered. The location of onboard system components, as with the current fuel tank and evaporative emission controls, must minimize any potential safety risks. Much of the HDGVs fuel system damage seen today is caused by foreign objects from the road surfaces. Therefore, critical onboard control system component should be located on the HDGV in a position which will minimize any foreign object damage. ------- -89- In conclusion, HDGV onboard systems do not introduce any new or significant problems to manufacturers' attempts to design safe fuel systems capable of meeting NHTSA and OMCS safety requirements. Straightforward, viable .engineering solutions are available to address all problems that have been identified. Therefore, onboard systems are expected to be integrated into HDGV fuel systems without reducing the system's ability to meet all applicable Federal safety requirements. 3. Summary As was mentioned in the light-duty section of this report, EPA's philosophy in evaluating the safety implications of requiring onboard controls (including those for HDGVs), is that no increase in overall risk should be caused or accepted, beyond that now present with today's fuel/evaporative system. This applies to both compliance with the applicable Federal Safety standards and the in-use safety of vehicles equipped with onboard systems. This portion of the analysis has addressed the safety test design requirements related to implementing HDGV onboard systems, and as was the case for light-duty it concludes that straightforward engineering solutions are available for all of the potential safety problems which have been identified, and safe fuel system designs are achievable by all. E. Cost and Leadtime Considerations EPA has received no comments which directly address specific HDGV onboard safety cost and leadtime implications. However, an analysis of the costs and leadtime necessary to implement HDGV onboard controls safely is an integral part of the overall evaluation of the feasibility of this control approach. The first portion of this section addresses HDGV onboard safety costs; the second discusses HDGV leadtime requirements and describes the basis for EPA's leadtime estimates. Some of the cost figures cited in the safety cost analysis are drawn from a broader EPA analysis which develops total HDGV onboard system costs in 1984 dollars.[17] 1. Safety Costs As was true of light-duty onboard safety costs, the costs needed to implement HDGV onboard controls fall in several areas. R&D type costs will be incurred, some new or modified components will be needed which may slightly affect vehicle operating costs, and safety certification testing will be necessary. However, before beginning a discussion of these costs, it is valuable to discuss how EPA's HDGV evaporative emission control requirements impact onboard safety costs. ------- -90- As was described in the light-duty section of the report, an onboard system (even those for HDGVs) is in many ways an extrapolation of current evaporative emission control technology and the two systems are quite similar. Since onboard systems are basically extensions of evaporative emission systems, clearly many of the safety design considerations associated with onboard systems related to meeting OMCS/NHTSA requirements or providing in-use assurance have already been addressed in evaporative emission system designs. Consequently, much of the ground work required to insure onboard safety has already been performed. It is important to keep the magnitude of the HDGV onboard safety design process in perspective, because much of the safety technology needed is simply an extension of that which already exists. Noting the "incremental" nature of onboard safety in terms of the magnitude of the task and actual cost relative to evaporative systems, it is now possible to describe the components which factor into onboard safety costs. Basically, the integration of safety into a fuel system incorporating an onboard system involves four types of costs. These four costs are for: 1) design and development (R&D), 2) specific hardware, 3) safety testing, and 4) weight penalty (or added fuel consumption). The paragraphs that follow describe how each of the cost components are affected by onboard safety. To begin with, some research and development will have to be performed to safely integrate onboard controls into HDGV fuel systems. EPA has estimated that the total design and development cost required to incorporate onboard systems in HDGV fuel systems is about $34,200 per family or $1.50 per vehicle (over 10,000 Ibs GVWR). This cost is for any development effort involved in combining the components of an onboard system with the rest of the vehicle to form a unit that interacts safely and effectively. Because safety is evaluated inherently in the design and development process and yet is only one part of the total effort, only a fraction of the total cost should be directly allocated to safety. The light-duty cost section explained why this fraction is likely to be small. The same reasoning is also applicable for heavy-duty applications, and therefore it was assumed that about 20 percent of R&D expenditures relate to safety, which translates to about $0.30 per vehicle. The second component of HDGV onboard safety costs relates to specific hardware that may be required to insure fuel system safety. EPA has estimated costs for three specific items which have been identified as potential components to be included as part of the onboard system design explicitly for safety reasons. These three items are 1) a rollover valve, 2) a pressure relief mechanism, and 3) fuel system modifications necessary to safely incorporate a rollover valve, pressure relief mechanism, or other onboard hardware. HDGV rollover ------- -91- valves should not differ in cost from light-duty valves since they would essentially be the same. Therefore, the light-duty estimate of $3.00 to $6.00 will also be used here. The second safety hardware cost is for a pressure relief mechanism. Since this mechanism would be needed for onboard systems incorporating a mechanical fillneck seal, many HDGVs would require its use. EPA's analysis prices this device at $2.50.[13] At this point, this estimate is considered to be very conservative, since the possibility exits that the present pressure relief device can be modified to perform this function. The final onboard safety hardware cost accounts for any fuel system modifications that would be necessary in order to safely accommodate any onboard control hardware. For example, a HDGV fuel tank or fillpipe might have to be re-shaped or modified in order to accept a rollover valve. Also, some slight re-routing of the fuel system's vapor lines may be required. EPA has estimated a total modification cost to be $0.50 per fuel tank. Only part of this total cost would be required for safety purposes. However, because safety inherently enters into the decision to make any modifications, it is difficult to access what part of the total modification cost should be allocated to safety; perhaps half ($0.25 per fuel tank) could be considered as driven by safety related concerns. Summing up the three individual safety hardware costs per fuel tank yields a total estimated figure in the range of $5.75 to $8.75. However, this cost estimate does not include manufacturer overhead and profit. Consequently, in order to obtain the retail price equivalent cost, these estimates must be multiplied by a markup factor. Presently, a markup factor value of 1.27 appears representative.[37] Therefore, after integration of the markup factor, a total retail price equivalent HDGV safety-related hardware cost per fuel tank falls within the range of $7.30 to $11.10. Since 15 percent of HDGVs have dual tanks, the total HDGV safety-related hardware cost range is $8.40 to $12.80 The third component of safety costs is for any safety testing that would be necessary. Unlike light-duty test costs, EPA has not thoroughly investigated HDGV safety test costs. However, safety test costs were estimated in an attempt to determine the approximate magnitude of the per vehicle HDGV safety test cost. Table 6 shows that even when fairly liberal safety test costs are assumed, the resulting cost/vehicle of $0.70 is very minimal in the long term. The fourth component of safety costs is the estimate of the added fuel consumed over the life of the vehicle due to the increase in vehicle weight resulting from added safety hardware. The amount of weight added to vehicle from a ------- -92- Table 6 HDGV Fuel Tank Safety Test Costs Estimate 1. OMCS Requirements: 2 tests per HDGV fuel system configuration (Safety Vent Test and Leakage Test) Conservative Cost/Test Estimate: $2,000 8 HDGV Fuel Tank Configurations Total OMCS Safety Test Cost: $32,000 2. NHTSA Requirements: 1 test per HDGV fuel system configuration (30 mph moving barrier) Conservative Cost/Test Estimate: $30,000 7 School Bus Configurations (7 manufacturers, 1 config./manufacturer) Total NHTSA Safety Test Cost: $210,000 3. Total HDGV Fuel Tank Safety Test Cost: $242,000 4. Cost/Vehicle (Amortized at 10 percent over 5 years of vehicle sales*): $0.70 * Assumed that all bus manufacturers will crash test their vehicles. ** Vehicle sales were estimated at 90,000/year. ------- -93- rollover valve or pressure relief mechanism is very small (0.4 Ibs), and because HDGVs are less sensitive to weight changes than lighter weight vehicles, on average less than $0.30 in added fuel costs will result from their inclusion into the HDGV onboard system.[24] A total onboard safety cost is calculated by summing all four individual component costs. Total safety-related onboard costs per family average about $270,000, and the per vehicle costs range from $9.70 to $14.10 or about 20-25 percent, of the total cost depending on the type of rollover valve used. 2. Leadtime If EPA were to implement an HDGV onboard requirement, it would be necessary to allow manufacturers enough leadtime to adequately prepare for the requirement. The HDGV preparation process would involve the same individual tasks that would enter into the light-duty process: system design, development, testing, tooling, certification, and safety evaluation. Although two of these leadtime tasks (certification and safety evaluation) would involve somewhat different procedures for HDGVs, they will essentially require the same amount of time and would factor into the total process in the same manner as in light-duty. Therefore, it is estimated that 24 months would be the total amount of leadtime required by HDGV manufacturers, and Figure 25 which shows the parallel/sequential progression of the individual leadtime components would be essentially the same for HDGVs. Of the various leadtime components shown in Figure 25, all but two would be essentially the same for HDGVs as they would for light-duty applications. These two are certification and safety evaluation. In both cases, the HDGV processes appear as though they would take less time to complete than their light-duty counterparts because these tasks would be likely to be less difficult to perform. For example, in some cases, durability assessments for certification of HDGVs does not require any actual vehicle testing; bench evaluations can be substituted based on the manufacturers engineering judgment. This could save considerable time. As far as safety evaluation goes, HDGV fuel tank tests performed to meet OMCS requirements would be much simpler to perform than NHTSA's safety crash tests for passenger cars and light trucks. Also, when NHTSA requirements do apply (as in the case of school buses) they only involve a single crash test with no rollover. (This is minor in comparison to tests which involve multiple crashes with rollover.) Therefore, the amount of time allowed for light-duty certification (10-12 months) and safety evaluation (>12 months) should also be sufficient for HDGVs since the heavy-duty processes are less involved. Overall, 24 months of leadtime for HDGV onboard is quite ------- -94- reasonable. This is especially true when one considers the development work already completed and the "incremental" nature of onboard in relation to current evaporative emission systems. EPA's 24-month leadtime estimate is supported by past experience with previous HDGV evaporative emission rulemakings. These rulemakings include the California Air Resources Board original 1978 6.0 g/test HDGV evaporative emission standard which was implemented with just 21 months of leadtime.[53] The stringency of this standard was increased for 1980 model year HDGVs allowing only 2 g/test. [54] While this stricter standard was promulgated with 37 months of leadtime, manufacturers had to meet the 1978 standard first, which effectively limited the leadtime for the 1980 standard to about 24 months. One final evaporative emission standard which was implemented with 24 months of leadtime was EPA's 1985 HDGV standard. In each of these three rulemakings, manufacturers faced leadtime factors identical to the ones that would accompany an onboard requirement, including safety. Since manufacturers were able to safely and effectively integrate evaporative emission controls into their vehicle's fuel systems with 24 months of leadtime, and since the magnitude of the onboard implementation task is similar, manufacturers should also be able to safely and effectively integrate onboard into vehicle fuel systems with 24 months leadtime. As far as safety development and evaluation is concerned, EPA's HDGV leadtime estimate is also supported by the past experience of OMCS and NHTSA in implementing various HDGV fuel system retirements. In 1973, OMCS extended its safety test requirements to include previously unaffected non-side-mounted (frame-mounted) HDGV fuel tanks. This requirement was implemented with just 18 months of leadtime. [ 55] Also in 1977, FMVSS 301 was extended to include school buses, and this requirement was implemented with 17 months of leadtime.[56] This experience indicates that 24 months of leadtime allows manufacturers sufficient time to factor in safety. Based on the information provided above, it appears that 24 months is adequate time to implement HDGV onboard controls, with full consideration of all safety concerns. Because safety evaluation can proceed in parallel to three other tasks, more than a year is available for actual fuel tank safety tests, school bus crash testing, or any desired computer simulation. This allows adequate leadtime to properly integrate safety into HDGV onboard systems especially since manufacturers can utilize and expand safety technology used in current evaporative emission control systems to develop effective onboard systems. Also, much of the safety development which would be required has already taken place with the identification and resolution of such potential safety issues as rollover protection and fuel tank pressure relief. Consequently, a 24-month leadtime period would provide manufacturers with sufficient opportunity to develop safe and effective onboard systems. ------- -95- While the current leadtime estimate of 24 months is reasonable for all vehicle models including HDGVs, EPA is sensitive to manufacturers concerns regarding leadtime requirements. EPA is committed to providing manufacturers the leadtime necessary to implement onboard controls "safely and effectively. Designing safe onboard controls for some unique HDGVs may require more leadtime. Such HDGVs include those with atypical duty cycles, unique fuel tank or body configurations, and those HDGVs from secondary manufacturers. Consequently, EPA would include HDGVs as part of any overall consideration of additional leadtime or a short phase-in period for onboard controls. F. Summary/Conclusion The purpose of this section was to identify and address the potential effect^ onboard controls could have on a HDGV manufacturer's fuel system safety designs. After analyzing the potential safety concerns related to implementing HDGV onboard systems, EPA has found that like passenger cars and light trucks, heavy-duty onboard systems are extensions of current evaporative systems and corresponding safety considerations are similar in nature to those discussed for light-duty applications. While a few unique considerations do exist (in part because of differences in testing requirements, tank designs/locations, structural integrity, size etc.), no increase in overall risk should be caused or accepted, beyond that now present with today's HDGV fuel/evaporative system. This applies to both compliance with the applicable Federal safety standards and the in-use safety of HDGVs equipped with onboard systems. As was the case for light-duty, straightforward engineering solutions are available for all of the potential safety problems which have been identified, and that while final choices regarding exact system designs lie with the manufacturers, safe fuel system designs are achievable by all. EPA estimates that HDGV safety costs contribute about 20-25 percent of the total ^iDGV onboard system cost and should fall within the range of $9.70 to $14.10. With regard to leadtime, this analysis indicates that 24 months appears to provide HDGV manufacturers with adequate time to prepare for the safe and effective implementation of onboard controls, but as before with passenger cars and light trucks the possibility of the need for more leadtime for some vehicle models may exist. VIII. Conclusion EPA has investigated and analyzed each of the potential onboard system safety issues raised by the commenters. After carefully considering all of the potential, impacts an onboard system could have on the overall safety df a vehicle's fuel system, it is concluded that straightforward, reliable, relatively inexpensive engineering solutions exist for each of ------- -96- the potential problems identified. Furthermore, no increase in risk need occur or be accepted because of the presence of an onboard system. Onboard equipped vehicles can be designed to pass FMVSS 301 and provide a level of in-use fuel system integrity equal to or better than that achieved on present vehicles which incorporate evaporative emission control systems. Of course final choices regarding exact onboard system designs lie with the manufacturers, and each manufacturer will choose the approach/system which provides the best balance of cost, safety, and other key factors. EPA would not adopt an onboard requirement unless it was clear that safe fuel system designs were available. This report demonstrates this to be the case. Safe fuel system designs are achievable by all manufacturers. Furthermore, it it is quite possible that overall fuel system improvements could accompany the implementation of onboard controls and lead to a net improvement in the level of fuel system safety on in-use vehicles. For example, collapsible bladder tanks are one design option that could control refueling emissions, reduce evaporative emissions and at the same time improve fuel system safety. Manufacturers can and are expected to design and implement onboard systems in a manner which provides at least the same level of fuel system safety as achieved on present vehicles. In addition, a number of design options and other measures are available with onboard systems, which suggest that fuel system safety in-use can be improved along with the incorporation of onboard control systems. ------- -97- IX. References 1. Letter, Thomas Hanna, MVMA and George Nield, AIA to Lee Thomas, US EPA, December 22, 1986. 2. Letter, Brian O'Neill, IIHS to Lee Thomas, US EPA, September 23, 1986. 3. Letter, Ralph Hitchcock, NHTSA to Charles L. Gray, Jr., US EPA, November 13, 1986. 4. American Petroleum Institute Comments on US EPA Gasoline Marketing Study, November 8, 1984, Docket A-84-07. 5. Letter, Clarence Ditlow, Center for Auto Safety to Lee Thomas, US EPA, March 20, 1987. 6. "Survey of Evaporative Emission Systems Condition of In-Use, High Mileage Automobiles", API Publication 4393, February, 1985. • 7. Borg Warner Control Systems Catalog, February 1986. 8. "Study of Gasoline Volatility and Hydrocarbon Emissions from Motor Vehicles", US EPA, AA-SDSB-85-5, November 1985. 9. "Summary and Analysis of Comments on the Recommended Practice for the Measurement of Refueling Emission", US EPA AA-SDSB-87, March 1987. 10. Letter, T.M. Fisher, General Motors to James B. Weigold, US EPA, November 8, 1984, Docket A-84-07. 11. Ford Motor Company Comments on Evaluation of Air Pollution Regulatory Strategies for the Gasoline Marketing Industry, November 8, 1984, Docket A-84-07. 12. Chrysler Corporation Comments on Evaluation of Air Pollution Regulatory Strategies for the Gasoline Marketing Industry, November 5, 1984, Docket A-84-07. 13. "Toyota Information on Refueling Vapor Recovery", Presentation to US EPA, March 19, 1986. 14. "Onboard Control of Vehicle Refueling Emissions Demonstration of Feasibility", API Publication 4306, October 1978. 15. "Vehicle Onboard Refueling Control", API Publication 4424, March 1986. ------- -98- 16. "Evaluation of the Feasibility of Liquid Fillneck Seals," US EPA AA-SDSB-86-003, December 1986. 17. . Evaluation of Air Pollution Regulatory Strategies for Gasoline Marketing Industry - Response to Public Comments, March 1987. 18. "Onboard Refueling Vapor Recovery Cost Study," Mueller Associates Inc., December 1986. 19. "Refueling Emissions from Uncontrolled Vehicles," EPA-AA-SDSB-85-6, Dale Rothman and Robert Johnson, 1985. 20. "Expansion of Investigation of Passenger Car Refueling Losses," EPA-460/3-76-006, U.S. EPA, OAWM, OMSAPC, ECTD, September 1975. 21. "Evaluation of Federal Motor Vehicle Safety Standard 301-75, Fuel System Integrity: Passenger Cars," DOT HS-806-335, January 1983. 22. Fatal Accident Reporting System, NHTSA, DOT, 1980-1984. 23. Motor Vehicle Safety Standard No. 301-75, Fuel System Integrity: 39 FR 10588, March 21, 1974, PART 571; S 301-75-5.1, 5.2, 5.3, and 40 FR 48352, October 15, 1975, PART 571: S 301-75-5.1, 5.2, 5.3, 5.4. 24. Letter, David E. Martin, GM to Barry Felrice, NHTSA, March 24, 1986. 25. Letter, Hiroyuki Shinbura, Nissan Research and Development to Charles Gray, U.S. EPA, April 14, 1987 26. Note from Bob Williams, NHTSA, to Glenn Passavant, US EPA including 3 computer file printouts, November 13, 1986. 27. "Design of a Fire Proof Vehicle," Chan, C.Y.K./Chi, L.L., California University, Berkeley, Fire Research Group., Report No. UCB-FRG-75-18, July, 1975. 28. "A Perspective on Automobile Crash Fires", SAE 850092, C. Warner, M. James, R. Wooley. 29. "Supplement to General Motors Commentary to the Environmental Protection Agency Relative to Onboard Control of Vehicle Refueling Emissions," June 1978. 30. NHTSA Press Release, June 11, 1987 and NHTSA Fact Sheet on The New Car Assessment Program and a Summary of the New Car Assessment Program Test Results, August 5, 1986. ------- -99- 31. Ann Arbor News, "'Smart' Suspension System Includes Sensors; Computers," Ann Arbor News, Newhouse News Service, March 1, 1987. 32. "Spilled Fuel Ignition Sources and Countermeasures," Johnson, N. , DOT Contract No. HS-4-00872, Report No. 2310-75-118, September, 1975. 33. "Costs of Onboard Vapor Recovery Hardware", Jack Faucett and Mueller Associates, February 1985. 34. "Report on Quality Changes for 1977 Model Passenger Cars" USDL-76-1376, BLS November 1976. 35. "Report on Quality Changes for 1976 Model Passenger Cars," USDL-75-626, BLS November 1975. 36. "Cost Estimations for Emission Control Related Components/Systems and Cost Methodology Description," EPA-460/3-78-002, March 1978. 37. "Update of EPA's Motor Vehicle Emission Control Equipment Retail Price Equivalent Calculation Formula," Jack Faucett Associates for U.S. EPA, September 4, 1985. 38. "Cost of Crash Testing to Assure Fuel System Integrity for Onboard Systems," EPA Memorandum, Robert Johnson to the Record, U.S. EPA, OAR, QMS, ECTD, SDSB, September 2, 1986. 39. "Trap Oxidizer Feasibility Study", U.S. EPA, OANR, OMSAPC, ECTD, SDSB, March 1982. 40. "Characterization of Fuel/Vapor Handling Systems of Heavy-Duty Gasoline Vehicles over 10,000 Pound GVW", Jack Faucett Associates, September 1985. 41. "Evaluation of Air Pollution Regulatory Strategies for the Gasoline Marketing Industry", US EPA, OAR, EPA-450/3-84-012a, July 1984. 42. Memorandum to File, Review of General Motors Heavy Duty Engine/Valued Certification Procedures, Team IV Certification Branch, August 4, 1986. 43. Memorandum to File, Review of Ford HDE Certification Procedures, Team IV Certification Branch, August 5, 1986. 44. 49 CFR Part 393.65 to 393.67. 45. Conversation with Jim Feiten, GM, March 16, 1987. 46. Conversation with Bob Bisaro, Ford, March 16, 1987. ------- -100- 47. Motor Vehicle Safety Standard NO. 301-75, Fuel System Integrity: 40 FR 48352, October 15, 1975, PART 571: s 301-75-5.4 and 41 FR 36026, August 26, 1976, PART 571: S 301-75-5.4 48. Letter, L.M. Short, Department of California Highway Patrol to Diane Steed, National Highway Traffic Safety Administration, May 30, 1986. 49. 49 CFR 393.67 (c)(7)(ii). 50. Based on a AP of 10 psi for Emco Wheaton Model A6000 and OPW Model 7H diesel fuel nozzles. 51. Letter, Charles L. Gray, Jr., US EPA, to Office of Motor Carrier Safety, May 27, 1987. 52. Conversation with Jim Brittell, DOT/OMCS, February 18, 1987. 53. Public Hearing to Consider Amendments to California Fuel Evaporative Emission Test Procedures for 1978 and Subsequent Model Gasoline-Powered Vehicles, Resolution No. 76-15, March 31, 1976. 54. Public Hearing on Proposed Changes to Regulations Regarding Vehicle Evaporative Emission Standards for 1980 and Subsequent Model Motor Vehicles, Resolution No. 76-45, November 23, 1976. 55. OMCS Regulations, Part 393-Parts and Accessories Necessary for Safe Operations (Fuel Systems): 36 FR 15444, August 14, 1971, and 37 FR 4340, March 2, 1972. 56. FMVSS 301, 40 FR 48352, October 15, 1975. *U.S. GOVERNMENT PRINTING OFFICE: 1987 - 744-622 ------- |