Ulstein SX195 Hull 315 U11126: Boatlabs As
Ulstein SX195 Hull 315 U11126: Boatlabs As
Ulstein SX195 Hull 315 U11126: Boatlabs As
U11126
Hull 315
FMEA ANALYSIS
BOATLABS AS
As buildt 26.03.2020 C
Updated after sea trial 18.03.2020 B
Updated after comments from Class 28.02.2020 A
Issue after update of section 5.3 25.02.2020 2
REVISION DATE SIGN REV
TITLE SCALE
DRAWN: ASH 05.02.20
FMEA ANALYSIS NA
APPR.:
FORMAT: A4
YARD NO.: UVE.315
ULSTEIN DRAWING:
N-6067 Ulsteinvik C
NORWAY
Tel. +47 7000 8000 315_101-780-01
Fax. +47 7000 8048
REPLACEMENT:
“This document and all Intellectual Property Right(s) pertaining hereto, whether registered or not, and any and all data, documents and drawings derived herefrom,
is and shall remain the sole Intellectual Property of ULSTEIN. Non-public information contained herein shall be treated as confidential information.
DEP: 281 SHEETS: 1 + 120
This document and/or its content may not be disclosed, amended and/or reproduced (in full or in part) without the express prior written consent from ULSTEIN.
Any conflicts arising from unauthorized use of this document and/or any data, documents and drawings derived herefrom shall be governed by the laws of Norway."
Page 1 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Ulstein Verft AS
NOTE
This document and any attachment(s) are confidential and may be privileged or otherwise protected from disclosure. This document is solely intended for Boatlabs AS
and/ or the company(s) and/ or person(s) stated, and must not be copied, excerpts made from or distributed in any form or shape without proper and/ or written
consent from Boatlabs AS. The content herein and results presented are to be regarded as preliminary and approximate, and no guarantee liabilities are accepted.
If you are not the intended recipient, any reading, use, disclosure, copying or distribution of all or parts of this document or associated attachments is strictly prohibited.
If you are not an intended recipient, please notify Boatlabs immediately, and delete/ obliterate this document and any attachment(s) from your system(s) permanently.
The Boatlabs AS design, brand, all names, logos and trademarks are the property of Boatlabs AS. Copyright 2009 Boatlabs AS. All rights reserved.
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 2 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Distribution of Copies
Copy Number Location
1 Ulstein Verft AS
2 DNV GL
Member
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 3 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
1 SUMMARY
All findings from the FMEA Proving Trial have been closed.
Conclusion
Ulstein B315/ “Windea Jules Verne” is fulfilling the DNV GL Class notation
DYNPOS(AUTR).
1.2.1 DG MODE
The worst single failure for Ulstein B315/ “Windea Jules Verne” is failure/ short-circuit/ loss of
690V Main Switchboard Port or 690V Main Switchboard Starboard.
Loss of 690V Main Switchboard Port will result in loss of Bow Tunnel Thruster 1 and Main
Azimuth Thruster PS.
Loss of 690V Main Switchboard Starboard will result in loss of Bow Tunnel Thruster 2 and
Main Azimuth Thruster SB.
This failure is in line with the Worst-Case Failure Design Intent (WCFDI), and time restraints
for safely aborting operations are within the default minimum requirement of 30 minutes.
When operating in Hybrid Mode (one DG and ESS), the worst single failure for Ulstein B315/
“Windea Jules Verne” is loss of the running DG.
Loss of the running DG will result in ESS having to supply all power needs to thrusters and
vessel “hotel load”, as long as the bus-tie remains closed, and manual intervention for
opening the bus-tie is not considered.
This failure will lead to faster draining the battery remaining capacity and time restraints for
safely aborting operations may be affected but should remain within the estimated time to
safely abort ongoing operations of approximately 10 minutes.
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 4 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 5 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
HVAC system
o AC-1 must be in operation
o AC-3 must be in operation
o Chilled Water System must be in operation
o Fan Coil FC-36 in Bridge Trunk must be in operation
o Fan Coil FC-35 in Instrument Room D-Deck must be in operation
o Fan Coil FC-33 in Instrument Room C-Deck must be in operation
o Fan Coil FC-30 in Engine Control Room running as needed
o Both Fan Coils FC-31 and FC-32 in Switchboard Room running as needed
o Both Fan Coils FC-40 and FC-41 in Bow Thruster Room running as needed
o Both Fan Coils FC-60 and FC-61 in Main Propulsion Room running as needed
o Both Fan Coils FC-50 and FC-51 in Battery Room running as needed
o Engine Room Fan S-40 and Engine Room Fan S-41 must run
o Supply Fan S-30 in Engine Control Room running as needed
o Supply Fan S-31 in Switchboard Room running as needed
o Supply Fan S-34 in Battery Room running as needed
o Supply Fan S-42 in Bow Thruster Room running as needed
o Supply Fan S-60 in Main Propulsion Room running as needed
Note! To achieve DP Capability Level 1 (9,7,8,6) all thrusters and generators must run.
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 6 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
CONTENTS
1 Summary ..................................................................................................... 3
1.1 Status & Conclusion .......................................................................................... 3
1.2 Worst Single Failure .......................................................................................... 3
1.2.1 DG Mode ..................................................................................................... 3
1.2.2 Hybrid Mode................................................................................................. 3
1.3 Setup DP Operation Mode ................................................................................... 4
2 Introduction ................................................................................................ 8
2.1 General ........................................................................................................... 8
2.2 Scope ............................................................................................................. 8
2.3 DP Class Information ......................................................................................... 8
2.4 Objective ....................................................................................................... 10
2.5 Method ......................................................................................................... 10
2.6 Relevant IMCA Guidelines ................................................................................. 10
2.7 FMEA Management .......................................................................................... 11
2.8 DP Operations Manual ...................................................................................... 11
2.9 Vessel Data.................................................................................................... 12
2.10 Vessel Layout ................................................................................................. 14
3 Abbreviations ............................................................................................ 15
4 Power Generation ...................................................................................... 16
4.1 Overview ....................................................................................................... 16
4.2 Main Engines & Generators ............................................................................... 16
4.3 Battery Energy Storage System (BESS) .............................................................. 18
4.4 Emergency Engine & Generator ......................................................................... 21
5 Power System ............................................................................................ 22
5.1 Switchboard Layout ......................................................................................... 22
5.2 Power Distribution System ................................................................................ 23
5.3 690V Main Switchboard .................................................................................... 23
5.4 440V Switchboard ........................................................................................... 29
5.5 230V Switchboard ........................................................................................... 32
5.6 230V Ship UPS System .................................................................................... 35
5.7 440V/ 230V Emergency Switchboard .................................................................. 39
5.8 Distribution Boards.......................................................................................... 41
6 Control System .......................................................................................... 45
6.1 Main Engine Control System ............................................................................. 45
6.2 Generator Control System ................................................................................ 48
6.3 Power Management System .............................................................................. 50
6.4 Integrated Automation System .......................................................................... 53
6.5 Energy Management System (EMS) .................................................................... 55
6.6 Thruster Control System .................................................................................. 57
7 Seawater Cooling System .......................................................................... 61
7.1 SW Cooling System for FW Cooling system PS and SB ........................................... 61
7.2 SW Cooling System for BESS and Fwd Azimuth Thruster ........................................ 64
8 Freshwater Cooling System........................................................................ 66
8.1 FW Cooling System Engines, Generators, Thrusters & Auxiliaries ............................. 66
8.2 FW Cooling System for BESS............................................................................. 71
8.3 FW Cooling System for Fwd Azimuth Thruster ...................................................... 73
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 7 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 8 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
2 INTRODUCTION
2.1 GENERAL
The presented FMEA is prepared by Boatlabs AS on received instruction from Ulstein Verft
AS.
2.2 SCOPE
The scope of work consists of producing an FMEA analysis, FMEA proving trial program and
conduct of the FMEA proving Trial.
After the proving Trial the finding(s) to be reported and verified/ closed before issue of final
FMEA analysis and FMEA proving trial report.
Based on International Maritime Organization (IMO) Guidelines for Vessels and Units with
Dynamic Positioning (DP) Systems, the Classification Societies issue rules for dynamically
positioned ships in relation to IMO equipment Class 1, Class 2 and Class 3.
DYNPOS(AUTR) is characterised and structured in line with IMO Class 2, although additional
requirements to achieve higher availability and robustness will apply.
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 9 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
A synopsis from IMO MSC1/ Circ. 1580 for DP Classes follows below:
2.2 The equipment classes are defined by their worst-case failure modes as follows:
2.2.2 For equipment class 2, a loss of position and/or heading will not occur in the event of a single fault
in any active component or system. Common static components may be accepted in systems which
will not immediately affect position keeping capabilities upon failure (e.g. ventilation and
seawater systems not directly cooling running machinery). Normally such static components will
not be considered to fail where adequate protection from damage is demonstrated to the
satisfaction of the Administration. Single failure criteria include, but are not limited to:
2.2.2.1 any active component or system (generators, thrusters, switchboards, communication
networks, remote-controlled valves, etc.); and
2.2.2.2 any normally static component (cables, pipes, manual valves, etc.) that may immediately
affect position keeping capabilities upon failure or is not properly documented with
respect to protection.
2.3 For equipment classes 2 and 3, a single inadvertent act should be considered as a single fault if such
an act is reasonably probable.
On power systems with closed bus-ties, the IMO Guideline states the following:
3.2.3 For equipment class 2, the power system should be divisible into two or more systems so that, in
the event of failure of one sub-system, at least one other system will remain in operation and
provide sufficient power for station keeping. The power system(s) may be run as one system during
operation, but should be arranged by bus-tie breaker(s) to separate the systems automatically
upon failures which could be transferred from one system to another, including, but not limited to,
overloading and short circuits.
One of the requirements of the IMO Class 2 and 3 guidelines is a system of Online
Consequence Analysis to be incorporated in the DP system.
This function continually performs an analysis of the vessel's ability to maintain its position
and heading after a predefined, worst case failure during operation. Possible consequences
are based on the actual weather conditions, enabled thrusters and power plant status.
If the consequence of the predefined failure is a loss of position, it is reported to the operator
via the DP alarm system. The consequence analysis can operate for different configurations
and give Class 2 or Class 3 alarms and warnings.
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 10 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
2.4 OBJECTIVE
The objective of the FMEA is to investigate activities in this analysis to recognise and
evaluate One Single Failures for all systems related to DP operation. E.g. machinery systems,
thrusters, processes, electrical systems, DP system et cetera and evaluate their effects on
the vessels position keeping performance.
Drawings/ illustrations included in this FMEA analysis does not show the entire systems, but
what is relevant for this FMEA and included to simplify the explanation of the various
systems. It is therefore important that these drawings/ illustrations are seen like that.
2.5 METHOD
In all conditions for the executed studies, the systems with relevance for DP operations have
been evaluated on basis of “Top-Down FMEA Philosophy” where redundancy has been based
on Running Machinery and Active Components.
o IMCA M103 Guidelines for The Design and Operation of Dynamically Positioned
Vessels
o IMCA M109 A Guide to DP-Related Documentation for DP Vessels
o IMCA M113 Guidelines for Vessels with Dynamic Positioning Systems (IMO MSC
Circular 645)
o IMCA M166 Guidance on Failure Modes & Effects Analyses (FMEAs)
o IMCA M182 International Guidelines for The Safe Operation of Dynamically
Positioned Offshore Supply Vessels
o IMCA M206 A Guide to DP Electrical Power and Control Systems
o IMCA M219 Example Specification for a DP FMEA for a New DP Vessel
o 245 IMO Guidelines for Vessels with Dynamic Positioning (DP) Systems (IMO
MSC1/ Circular 1580)
o IMCA M247 Guidance to Identify DP System Components and their Failure Modes
o IMCA M250 Introduction to hybrid battery systems for DP vessels
It must be noted that additional IMCA Guidelines and other publications provides useful
information and must be made available for familiarisation and training as needed.
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 11 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
It may not be necessary to update the FMEA formally on a regular basis, provided that any
changes that are made during the life cycle of the vessel are properly analysed, and the
FMEA is updated following a control management procedure.
The responsibility or ownership of the FMEA should be with the vessel operating company
that is responsible for the safe operation of the vessel. The vessel holds the FMEA, but the
vessel management team ashore owns the FMEA and is the responsible point for changes. It
is not an individual’s responsibility as such, though the vessel superintendent in the office
should be designated the focal point and should have a thorough understanding of the FMEA
management process.
The vessel’s key personnel have the responsibility to make the vessel management team
aware of any deficiencies or inaccuracies in the FMEA as they themselves become aware of
them. The vessel management team is responsible for ensuring that any such deficiencies or
inaccuracies in the FMEA are corrected in a timely matter.
It should cover all the work for which the vessel is designed or likely to be used, and
highlight any limitations of such operations.
The DP Operations Manual must be accompanied by decision support tools such as Activity
Specific Operating Guidelines (ASOG) which means guidelines on the operational,
environmental and equipment performance limits for the location and specific activity.
Further details to the suggested content of the DP Operations Manual, and relevant checklists
can also be found in IMCA Guideline M103 and M109, as well as in the DP Operations
Guidance issued by MTS. Guidance on The Training and Experience of Key DP Personnel is
found in IMCA Guideline M117.
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 12 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Vessel Facts:
Name Windea Jules Verne
Design Ulstein, SX195
Build by Ulstein Verft AS, Norway
Build number Yard No. 315
Year 2020
Flag Gibraltar
Port of Registry Gibraltar
Owner/ Manager Bernhard Schulte Offshore
Length 93,4 m
Breadth 18,0 m
Depth main deck 7,6 m
Design Draught 5,6 m
Energy Storage System One Corvus, Orca ESS - 1600kVA/ 1500kW, 690V/ 60 Hz
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 13 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
The vessel has following sensors, references and control systems:
DP Reference System Three DGNSS (Veripos, LiD5-G)
- Correction signals from IALA and Spot L-band
One LASER (Guidance Marine, Cyscan Mark IV)
One RADAR (Guidance Marine, Rangeguard)
One GANGWAY INTERFACE (Motion interface from Gangway
Control system while “landed”)
IAS Control System Blue CTRL, Blue IAS (Remote PMS Interface)
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 14 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 15 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
3 ABBREVIATIONS
A/ AMP Ampere HMI Human Machine Interface
AC Air Condition HP High Pressure
ACC Accommodation HPR Hydro-Acoustic Positioning Reference System
AFE Active Front End HPU Hydraulic Power Unit
AHU Air Handling Unit HT High Temperature
AI Analogue Input IALA International Association of Lighthouse
AO Analogue Output Authorities
ASOG Activity Specific Operating Guideline IAS Integrated Automation System
AUX Auxiliary IGBT Insulated-gate Bipolar Transistor
AVR Automatic Voltage Regulator IMCA International Marine Contractors Association
AZI Azimuth Thruster IMO International Maritime Organisation
BL Boatlabs AS IO In Out signal
BTT Bow Tunnel Thruster kV kilo Volt
CAMO Critical Activity Mode kVA kilo Volt Ampere
CAN Controller Area Network kW kilo Watt
CAT Customer Acceptance Test LAN Local Area Network
CP Controllable Pitch LO Lube Oil
CPP Controllable Pitch Propeller LP Low Pressure
CPU Central Processing Unit LT Low Temperature
DC Direct Current MCG Motion Compensated Gangway
DG Diesel Generator MCR Maximum Continuous Rating
DGU Deif Generator Unit ME Main Engine
DI Digital Input MRU Motion Reference Unit
DGNSS Differential Global Navigation Satellite System MSWB Main Switchboard
DGPS Differential Global Positioning System NC Normally Closed
DNV GL DNV GL AS NMD The Norwegian Maritime Directorate
DO Digital Output NO Normally Open
DOL Direct Online OS Operator Station
DP Dynamic Positioning PMS Power Management System
DP1 DYNPOS(AUT) or DPS(1) PRS Position Reference System
DP2 DYNPOS(AUTR) or DPS(2) PS Port Side
DP3 DYNPOS(AUTRO) or DPS(3) QCV Quick Closing Valve
DPC Dynamic Positioning Computer or Cabinet RPM Revolution Per Minute
DPO Dynamic Positioning Operator SAT Sea Acceptance Test
DU Display Unit SB Starboard Side
ECR Engine Control Room SOLAS International convention for the Safety-Of-Life-
EMG Emergency Generator At-Sea
ESWB Emergency Switchboard ST Stern Thruster
ER Engine Room SW Sea Water
ERN Environmental Regularity Numbers SWBD Switchboard
ERO Engine Room Operator TAM Task Appropriate Mode
FAT Factory Acceptance Test UPS Uninterruptible Power Source
FC Fan Coil Uvt Under Voltage Trip
FMEA Failure Modes and Effect Analysis V Volt
FO Fuel Oil VAC Volt Alternating Current
FRT Fault Ride Through VDC Volt Direct Current
FW Fresh Water VRS Vertical Reference Sensor
FWD Forward VRU Vertical Reference Unit
GSU Grid Support Unit WCF Worst Case Failure
GPS Global Positioning System WCFDI Worst Case Failure Design Intent
HC Heavy Consumer Y/D Star Delta
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 16 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
4 POWER GENERATION
4.1 OVERVIEW
The vessel is equipped with two main engine rooms and one emergency generator room.
The main engine rooms consist of lower engine room arranged on the Tank Top and the
upper engine room located on Tween Deck. The emergency generator room is located Top of
wheelhouse.
The Engine Control Room and the switchboard room are located on Tween Deck.
Engine 1, 2, 3 and four are of make Caterpillar, type 3512C, with engine speed at 1800 RPM
and maximum continuous rating (MCR) of 1790 bkW.
Engine 1, 2 3 and 4 drives a generator of make AVK, type DSG 86 L1/4W, with output
capacity of 1889 kVA (cosφ 0,9) / 1700 ekW, 690V/ 60Hz.
The generators are named G1, G2, G3 and G4. G1 and G2 is serving Main bus-bar 1 (PS), G3
and G4 is serving Main bus-bar 2 (SB) of the 690V Main Switchboard.
The generator sets are designed to run as automatically controlled power stations, under full
command by the extended Power Management system with surrounding logic, including
Power Management control system and other related systems installed for the Main
Switchboard. The Control systems are described in chapter 6 of this document.
Full manual control is also possible by local control panels by the engines, and mimic in the
Main Switchboard.
All engines can be emergency stopped locally or from the engine control room.
Starting of the engines is performed by using starting air taken from the starting air system.
This system will be further described under chapter 11.
Important Consumers
Table 4.2.1 - Important consumers for the Main Engines and Generators
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 17 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Failure Modes
Table 4.2.2 - Failure Modes of the Main Engines and Generators
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 18 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
The system has an output capacity of 1600 kVA/ 1500 kW (Cosφ 0,9) 690V/ 60 Hz.
The BESS may be connected to 690V Main Switchboard PS through breaker 5Q2, or 690V
Main Switchboard SB through breaker 7Q2.
Breaker interlocks are in place so that only one supply is active at a time.
Start, synchronisation and closing of breakers is handled by the PMS control system, via
remote interface through the integrated automation system.
The auxiliaries for the BESS are supplied via a dedicated change over and distribution
cabinet, called Bess Aux distribution unit.
The Change over and distribution cabinet may be connected to 440V Switchboard PS through
breaker 1Q20 and 230V Switchboard PS through 1Q14, or 440V Switchboard SB through
breaker 4Q20 and 230V Switchboard SB 2Q14.
Breaker interlocks are in place so that only one supply is active at a time.
In case the 690V power supply, the 440V power supply and the 230V power supply is not
selected within the same redundancy group the PMS will initiate an alarm.
The Change over and distribution cabinet supplies 440V for the Battery Room Fan Coils,
Supply Fan, Battery Converter and Battery Packs. In addition, one 230V supply for the
control circuit is installed.
The control power supply for the Bess Aux distribution unit is supplied from 230V UPS 30,
Circ. 116, or 230V UPS 40, Circ. 114.
Breaker interlocks are in place so that only one supply is active at a time.
There is arranged a dual supply for the UPS power supplies, one from each redundancy
group. The dual supply is protected by AC/DC converters and one common diode bridge,
preventing propagation of a fault in one redundancy group to the other.
The BESS consist of one array by five battery packs, with 20 modules per pack. The modules
are connected in series to create a maximum voltage of 1000VDC. The packs are connected
in parallel in the array.
Five battery packs are connected in parallel to give a total of 565 kWh storage capacity.
Each battery cell is protected against high currents. The battery pack is also protected by a
500A fuse and internal contactor to isolate its power.
Further, the BESS delivers 660VAC to the 660/ 690VAC transformer T6.6.
The system has two modes of operation; peak shaving and spinning reserve.
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 19 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Control and monitoring of the BESS system is done by the Energy Management System
(EMS). The EMS will be separately described in chapter 6.5.
Cooling for the BESS is provided through the FW Cooling System, further described in
chapter 8.2.
Emergency stop of the BESS is fitted on the bridge, in ECR and outside Energy Storage
Room.
Important Consumers
Table 4.3.1 - Important consumers for the Battery Energy Storage System (BESS)
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 20 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Failure Modes
Table 4.3.2 - Failure Modes of the Battery Energy Storage System (BESS)
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 21 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
The engine drives an alternator of make Caterpillar, type LC6134B with output capacity of
280 kVA (cosφ 0,8) / 224eKW / 440V/ 60Hz. The emergency generator is named EG and is
serving the 440V/ 230V emergency switchboard located in Emergency generator room.
The emergency engine is fitted with a start battery system, and the start logic is located in
the emergency switchboard. It provides an auto-start in case of a blackout of the 440V
switchboard Port side.
The emergency generator is not considered to be important for DP operations and will not be
considered further.
Important Consumers
None important electrical consumer for Emergency Engine & Generator is found to be
important for DP operation.
Failure Modes
None failure mode in Emergency Engine & Generator is found to be important for DP
operation.
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 22 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
5 POWER SYSTEM
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 23 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
The 690V Switchboards are built for Icw80 kA, Ipk 176 kA with main bus bar dimension
4x10x100mm. The 440V Switchboard is built for Icw 30kA, Ipk 63 kA with main bus bar
dimension 2x10x50mm. The 230V Switchboard is built for Icw 30 kA, Ipk 63 kA with main bus
bar dimension 2x10x30mm. The 440/ 230V Emergency Switchboard is built for Icw 30 kA, Ipk
63 kA with main bus bar dimension 2x10x30mm.
The 690V Main Switchboard, 440V Switchboard and the 230V Switchboard are installed in
Switchboard room located on Tween Deck. The 440/ 230V Emergency Switchboard is
installed in the Emergency Generator room on Wheelhouse top.
The 690V Main Switchboard is configured to operate with CLOSED or OPEN bus-tie in DP
Class 2 operation.
o 690V Main bus-bar PS is for Bow Tunnel Thruster (BTT1), Fwd Azimuth Thruster
(BAZ), Main Azimuth Thruster PS (MP1) and consumers Port
o 690V Main bus-bar SB is for Bow Tunnel Thruster 2 (BTT2), Fwd Azimuth Thruster
(BAZ), Main Azimuth Thruster SB (MP2) and consumers Starboard
The Main Switchboard is configured in such a way that any major fault, e.g. short circuit on
one side of the switchboard will not affect the other bus-segments.
A Short Circuit and Discrimination analysis has been performed by Clean Marine
Switchboards (Doc. No.: P18049-300-013-01), as theoretic proof of the switchboards ability
to handle Closed bus-tie in DP Class 2 operations.
The discrimination analysis shows selectivity between the Main Azimuth Thrusters and any
combination of generators, as well as combination with any generator and ESS, in closed
bus-tie condition. This is achieved by installed overcurrent and short circuit protection units
of type Micrologic 5.0P installed on each of the breakers. In this situation, there is
documented time selectivity between bus-tie and generator/ ESS breaker.
According to data received from Ulstein Design & Solutions the ESS Drive will give a 2,2kA
short circuit contribution in a period of minimum 2 seconds.
When operating with the ESS and either one of the generators there will be two different
short circuit scenarios depending on which bus-bar segment the short circuit occurs.
If a short circuit occurs in the bus-bar segment where the ESS is connected the contribution
from the generator breaker will trip the bus-tie breaker and effectively isolate the faulty side.
If a short circuit occurs in the bus-bar segment where the generator is connected, the ESS
DGU 5 or DGU 6, depending on which side the ESS is connected, will detect fast overcurrent
at 125% for the ESS and trip the bus-tie after a delay of 300ms by UVT circuit tripping.
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 24 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
This means that it will be sufficient to run in DP Class 2 with any one power source connected
on each main bus-bar.
In case of a major short circuit in the 690V Main Switchboard, there are several means to
detect and open the bus-tie. The bus-tie can detect a short circuit/ overcurrent after 300ms,
and the GPU’s can detect fast overcurrent after 200ms.
Installed blackout relays on each bus-bar opens the bus-tie without any delay, when the
voltage falls below 70-35%, with reaction time of approximately than 20ms which will open
the bus-tie by Uvt trip.
The bus-tie itself will need approximately 95ms to open. The voltage will then be restored
and stabilised within a default estimated transient time of maximum of 200ms, also
supported by the generator decrement curve.
The bus-tie breaker will such effectively isolate the affected segment of the Main Switchboard
within 115ms when released from the blackout relays.
The voltage dip fault ride through period is hereby calculated to be 315ms when released by
the short circuit detection relays. For additional safety, the design has considered that all
equipment shall be designed for a minimum ride through period of 500ms.
A ride-through analysis has been performed, for switchboard, drives and essential motor
starters:
o Doc. Philosophy of Ride Though Capability for UVE build 315 Design U11126 Type
SX195 by Ulstein
The main findings in this study is brought forward into this report.
The requirement is that the equipment not belonging to the redundancy group directly
affected by the failure shall ride through the transient period and be immediately available,
without operator intervention, when the system voltage is re-established. For motor starters,
this means that the main contactor shall stay closed during this transient period.
Thruster output power will be limited during a transient period until the fault is cleared, and
thrusters connected to the adjacent bus-bar will be unaffected, and continuously ready for
the DP control system.
A short circuit in one switchboard segment will be isolated before equipment in the other
switchboard segment trips, and the system has been designed to withstand a fault ride-
through (FRT) period, based on voltage drop down to “close to zero” (0V), and rise back up
again above Uvt (70%) within a specified time. Voltage rise will be controlled by each AVR,
to prevent overvoltage.
In case of a major short circuit in the 690V Main Switchboard, the Main Bus-tie breaker 6Q1
will be opened after 115ms and effectively isolate the faulty bus-bar segment.
Short circuit upstream in a generator will be cleared in 400ms, and short circuit downstream
of the thruster breakers will be cleared after 200ms. The study also declares that the supply
breakers for 440V Transformers, essential for the auxiliary systems power supply system,
are dimensioned to withstand maximum inrush current after transient voltage dip, and
ensure disconnection of downstream transformer short circuit after 100ms. Further
downstream faults in sub-distributions are cleared by documented selectivity and
switchboard segregation by means of open bus-ties.
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 25 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
In short, the protective arrangement in the Switchboard is coordinated in four levels:
o Level 1 – Instant opening of bus-tie
o Level 2 – Short circuit, Over current and Differential protection
o Level 3 – Over/ Under voltage
o Level 4 – System stability Reverse power
Fwd Azimuth Thruster is connected to both bus-bar segments through a duel-feed frequency
converter with two sets of Active Front End inverters. Each IGBT inverter will prevent
common source transferrable faults to both bus-bar segments in case of an internal short
circuit in the DC bus-link of the drive by internal fast fuses.
Fwd Azimuth Thruster is also provided with a dedicated distribution board, fed from the
frequency converter drive unit, for auxiliary systems such as FW cooling, lubrication and
hydraulic oil module for steering. This system is provided with 1000ms ride through
capability.
Breakers for generators and thrusters are provided with under-voltage coils with tripping
level of 0.35-0.7 x Un. Time delay is set to 2s for both generators and for thrusters, and 1s
for the main bus-tie breaker.
Protection settings for under-voltage detection and trip are set to 3s at 70% for generator
breakers, and 1s at 85% for the main bus-tie breaker. Protection settings for over-voltage
detection and trip are set to 1,5s at 130% for generator breakers, and 1s at 115% for the
main bus-tie breaker.
Thruster frequency converters with its internal cooling system are built with 1000ms ride
through capability, and an internal UPS to ensure that the drive is kept running. This to
ensure thrusters not belonging to the redundancy group directly affected by the failure are
available after the fault has been isolated. All relevant control systems are supplied from
battery systems and are not affected by a transient voltage dip.
Starters for LO pumps to Bow Tunnel Thruster and steering system for Fwd Azimuth
Thrusters have an internal 24V DC power supply for the starter circuit. The LO pumps
frequency converters for Fwd Azimuth Thrusters have (UN-117) have uninterruptable control
voltage from UPS. LO pumps for the Main Azimuth Thrusters are built with a latching relay in
the control circuit, ensuring running pumps keep running when the power is back to normal
after the transient period.
Frequency converters for the Engine Room fans are set up with “coasting”, and “flying start”,
meaning that the motor will be left spinning in the voltage dip period and then catch the
motor again when the power situation is normal. Control power for fire dampers for engine
room fans are supplied from UPS.
FW LT circulation pumps for Main Engines have start/ stop signal from Engine running.
The DOL starters for FW cooling pumps and SW Cooling pump is fitted with a mechanical
time delayed holding contact in the control loop for at least 2 seconds ensuring running
pumps keep running when the power is back to normal after the transient period. The Chilled
Water pumps are working with a kinetic backup for the frequency converter. The control
voltage for the Chill Water pumps have kinetic backup by a built-in battery.
AC units are provided with mechanical holding contact for start signal, and Chiller units have
internal UPS for control power. Fan coils in Bow Thruster room, Propulsion room and
Switchboard room are provided with manual start switches, and fan coils in Instrument
rooms and Wheelhouse Trunk are equipped with UPS supply to ensure equipment are
unaffected and still running after a blackout or a transient voltage dip.
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 26 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Control systems for equipment important for DP operation are provided with supplies from
Uninterruptible Power Source (UPS). This includes control system for engines, generators,
drives, thrusters, as well as the DP control system itself, and PMS system and IAS.
Hence, the conclusion can be made that the system is designed to ride through a voltage dip
without unintentional disconnection of generators or thrusters.
Normally the switchboard is operated by the PMS control system, via remote interface
through the integrated automation system. The switchboard can also be operated in local
PMS mode, or manually without PMS mode, by means of panels and mimic mounted on each
switchboard panel cubicles.
Closing and opening of the bus-tie breaker in PMS control is by a pulse signal from a
potential free (DO) contact, and there is no signal interlock, meaning that the bus-tie may
receive closing command unintentionally should there be a fault in the “TB ON” signal
interface.
When the switchboard is operated in local, the manual synchro-scope with sync check relay
will enable closing of the bus-tie breaker when bus-bars are in phase. But in case there is a
fault in the sync check relay, it might be possible to close the bus-tie breaker while the bus-
bars are out of phase, should the operator press the “CLOSE BREAKER” prematurely.
A crash sync of the bus-tie will send fault current from one side through the bus-tie breaker,
and be detected and cleared if the peak current is high enough. If the fault current is lower
than the bus-tie breaker trip level, the transient fault current will remain until the generators
are in sync, and be compensated by the PMS speed control.
In Local operation, the fault may in worst case lead to disconnection of a generator breaker
in case of reverse power, or unbalanced active load in the switchboard if no action taken to
clear the fault.
See functional description of Power Management System, or PMS FMEA for description and
relevant failure modes.
Important Consumers
Table 5.3.2 - Important consumers in 690V Main Switchboard
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 27 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Failure Modes
Table 5.3.3 - Failure Modes in 690V Main Switchboard
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 28 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 29 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
440V Port bus-bar is powered from 690V Main bus-bar PS and 440V Starboard bus-bar is
powered from 690V Main bus-bar SB, each via a 690V/ 440V transformer rated at 650 kVA.
When the vessel is in DP operations the 440V bus-tie breaker must be OPEN in DP2.
The bus-tie breaker in 440V Switchboard is normally open, and closing is only possible if one
of the transformer breakers is opened
Important Consumers
Table 5.4.1 - Important consumers in 440V Switchboard
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 30 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 31 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Failure Modes
Table 5.4.2 - Failure Modes in 440V Switchboard
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 32 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
230V Port bus-bar is powered from 440V bus-bar PS and 230V Starboard bus-bar is powered
from 440V bus-bar SB, each via a 440V/ 230V transformer rated at 250 kVA.
When the vessel is in DP operations the 230V bus-tie breaker must be OPEN in DP2.
The bus-tie breaker in 230V Switchboard is normally open, and closing is only possible if one
of the transformer breakers is opened.
The E01 Distribution Board is provided with an automatic changeover of power supply from
main to emergency in case the main supply is lost. Both supplies are monitored with alarms
connected to the IAS. The changeover supply is further based on fall-back mechanism, which
will ensure that the main supply is preferred when available.
Time delay relays will ensure that only one supply is connected at a time. The main supply
release relay is set to 0,2s, and the backup supply release relay is set to 0,5s.
Important Consumers
Table 5.5.1 - Important consumers in 230V Switchboard
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 33 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Failure Modes
Table 5.5.2 - Failure Modes in 230V Switchboard
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 34 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 35 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
o UPS 10 and UPS 20 with distribution boards are located on Bridge Deck
o UPS 30 and UPS 40 with distribution boards are located in Switchboard Room on
Tween Deck
UPS 10 and UPS 30 are arranged as Port systems, while and UPS 20 and UPS 40 are
arranged as Starboard systems.
Each UPS is fitted with an alarm interface connected to the IAS system, provided alarm are
common alarm and auto switch failure.
Each UPS is provided with an automatic changeover of power supply from main to
emergency in case the main supply is lost. Both supplies are monitored with alarms
connected to the IAS. The changeover supply is further based on fall-back mechanism, which
will ensure that the main supply is preferred when available.
Time delay relays will ensure that only one supply is connected at a time. The main supply
release relay is set to 0,2s, and the backup supply release relay is set to 0,5s.
However, in DP Class 2 operations UPS 20 and UPS 40 must always be connected to the Main
supply, and it must be ensured that no power supply alarm is active.
Important Consumers
Table 5.6.1 - Important consumers for the 230V Ship UPS system
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 36 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 37 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Failure Modes
Table 5.6.2 - Failure Modes in 230V Ship UPS system
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 38 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 39 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
The 440V emergency bus-bar is normally powered from 440V switchboard bus-bar 1 (PS),
Breaker 2Q3. This system is therefore considered to be a Port system.
An UPS is provided between the 440V emergency bus-bar and the 230V emergency bus-bar
to provide uninterrupted power supply to 230V emergency consumers, while emergency
generator is starting, in case of blackout on the 440V emergency bus-bar.
The 230V emergency bus-bar is normally supplied from the 440V emergency bus-bar via a
system which consists of 440V/ 400V Transformer T4.5, Emergency UPS and 400V/ 230V
Transformer ET2.3.
A 440V/ 230V transformer EMT is provided to supply the 230V emergency bus-bar in case of
Emergency UPS failure.
In an event of a power loss on the 440V emergency bus-bar, a start signal will be sent to the
emergency generator which will then start up. When the generator voltage has come up, the
generator breaker will close to restore power on the 440V emergency switchboard.
For the purpose of this analysis, the capacity of the emergency generator is not considered,
and the emergency switchboard is seen only as a distribution board.
The E01 Distribution Board is provided with an automatic changeover of power supply from
main to emergency in case the main supply is lost. Both supplies are monitored with alarms
connected to the IAS. The changeover supply is further based on fall-back mechanism, which
will ensure that the main supply is preferred when available.
Time delay relays will ensure that only one supply is connected at a time. The main supply
release relay is set to 0,2s, and the backup supply release relay is set to 0,5s.
Important Consumers
Table 5.7.1 - Important consumers for the 440V/ 230V Emergency Switchboard
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 40 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Failure Modes
Table 5.7.2 - Failure Modes in 440V/ 230V Emergency Switchboard
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 41 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Only the distribution boards important and relevant for DP operations are considered and
mentioned in this analysis.
The distribution boards are supplied from the following bus-bar systems:
Table 5.8.1 - Distribution boards
Important Consumers
Important consumers in distribution boards will be treated under the respective systems and
chapters.
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 42 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Failure Modes
Table 5.8.2 - Failure Modes in Distribution Boards
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 43 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Loss of 230V Emergency Distribution Alarm will be activated No loss of position keeping
Board E01 No loss of thrusters or generators ability
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 44 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Distribution Boards Summary (assessment)
No electrical or technical failure in the Distribution boards will exceed the defined worst-case
failure design intent for DYNPOS(AUTR).
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 45 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
6 CONTROL SYSTEM
In this section the control systems for following components related to DP operations will be
described.
The Engines are equipped with ADEM III. The ADEM system handles all strategic functionality
such as engine start, stop, and speed control and engine safety.
The control system comprises the following major control/ monitoring categories:
Engine operation and control is normally handled by the PMS system. In addition, each
engine has installed a local control panel.
The control system for each engine has redundant power supplies from the vessel’s 230V
Distribution System and the 230V UPS system through the respective engine’s control
cabinet. The supplies are galvanically isolated by AC/DC converters.
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 46 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Important Consumers
Table 6.1.1 - Important consumers for Main Engine Control System
Failure Modes
Table 6.1.2 - Failure Modes of the Main Engine Control System
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 47 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 48 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
A Deif MDR-2 differential guard is installed to provide protection for differential current and
short circuit in the generator and on the connection between the generator and MSWB. The
differential guard will disconnect the generator breaker and enable generator de-excitation
causing voltage to drop.
Synchronising of the generators to the Main Switchboard can be executed by lamp synchro-
scope for manual operation. Check Sync Relay allows generator breaker to close when bus-
bar and generator are in phase. Automatic (PMS) synchronizing is handled by the engine
interface modules, Deif SCM 4.1.
In case of blackout on the main bus, blackout close commands can be issued to bypass the
synchronizers.
For overcurrent and short circuit protection Micrologic 5.0P units are installed in the
generator breakers. There are red lamps which will illuminate if the breaker trips at a fault.
An input to the PMS from the breaker protection unit will give alarm. Over current and short-
circuit protection unit can be reset on the breaker. Overload and reverse power re handled by
the PMS.
Each generator breaker is provided with an under-voltage coil with adjustable trip delay, in
case of blackout on the main bus-bar the generator breaker will automatically open.
Supply of control voltage for Generator Auxiliary systems in Main Switchboard is through an
internal supply from the generators and an external power supply from the vessels UPS’s.
The two independent power supplies to each generator is isolated by a diode bridge.
Important Consumers
Table 6.2.1 - Important consumers for Generator Control System
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 49 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Failure Modes
Table 6.2.2 - Failure Modes of the Generator Control System
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 50 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
The plant is configured as a Double Master System, to make it possible to split the system
into two independent PMS parts controlled by the Master DGU’s (DGU-2 and DGU-3).
For this Double Master solution all automatic functions can continue on the “healthy” bus-bar
after separating the bus-bar electrically by means of the bus-tie breaker.
There is one Display Unit (DU) for each DGU. For DU 2, DU 3, DU 5 and DU 6, an Additional
Operator Panel (AOP’s) are arranged for plant mode selection, plant status information and
local control functions.
The internal communication between the DGU’s is carried out by ARC-network. This includes
the symmetrical load sharing functionality.
The Display Units are slave units of the DGU, meaning that all settings remain active even if
the control panel should break down.
o Plant modes:
o Semi-Auto (PMS assisted mode)
o Automatic 1 (min. 1 DG connected)
o Automatic 2 (min. 2 DG connected)
o Automatic 3 (min. 3 DG connected)
o Automatic 4 (min. 4 DG connected)
o Information messages at the DU (Display Unit) for the operator in case of un-allowed
change of plant modes
o User-programmable start/ stop priority
o Load dependent start/stop based on power available calculation.
o Common black-out detection and subsequently black-out start of one or two
generator sets.
o Supervision of bus-tie breaker position
o Alarm logging
o Fast Dynamic Load share deviation protection:
o Blackout prevention in case of governor or AVR failures.
o Active and reactive load share deviation alarms.
o Selective trip of TB / GB in case of defective Governor / engine, by measuring
frequency and active load deviation. Preventing reverse power and over load
situations.
o Selective trip of TB / GB in case of defective AVR / generator, by measuring
voltage and reactive load deviation. Preventing over and under voltage
situations on the bus-bar.
o The alarm can select the faulty genset without any additional measuring
required.
o Analogue load limitation signal to dual feed thruster drives (Fwd Azimuth Thruster)
o Analogue load limitation signal to AMC Gangway
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 51 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Common functions are carried out by each DGU:
o Local Mode, GSU connected to the grid without any control from PMS. Power
setpoint adjusted local on GSU drive.
o Idle Mode, GSU connected to the grid without any active grid support function, no
export/import of power.
o Grid Support Mode, GSU connected to the grid in grid support function.
Export / import of power depending on, moving average Total Consumed Power
Important Consumers
Table 6.3.1 - Important consumers for Power Management System
Failure Modes
Table 6.3.2 - Failure Modes of the Power Management System
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 52 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 53 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
A PMS Control Cabinet PS and a PMS Control Cabinet SB communicates against the Deif
Delomatic system DGU2 and DGU3 for PMS interface and remote control. The PMS Control
cabinets are installed in the switchboard room.
The IAS system consists of Controllers, IO Controllers, Network Switches, Operator Stations
(OS), as well as Extension Alarm System (EAS) panels and buzzers.
o Alarm monitoring
o Power Management functionality
o Operation of engine room ventilation fans
o Operation of FO Pumps
o Operation of SW and FW pumps
o Tank sounding
o Operation of cargo valves
o Operation of cargo pumps
o Trending
The internal communication between component in the IAS system is based on dual
redundant ethernet network. Each system component is connected to both rings via separate
network switches.
The IAS operator stations are located in Engine Control Room, and on Bridge. The operator
stations are used for monitoring of signals, displaying of alarms and remote manual control
of equipment.
IAS EAS panels are installed in selected cabins, public area and bridge locations. EAS panels
are used to display ship alarms, dead man alarms and engineer calls.
Important Consumers
Table 6.4.1 - Important consumers for Integrated Automation System
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 54 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Failure Modes
Table 6.4.2 - Failure Modes of the Integrated Automation System
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 55 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
The BESS can be operated and monitored from the PMS operator stations or the EMS display.
The EMS system are controlled by the PMS by hardwired and Ethernet interface.
The EMS sends common alarm and measurements to the Alarm System (IAS).
In addition to this the EMS have control and interfaces to the followings systems:
o Offline Stop
• Operating condition where the GSU is disconnected from grid and stopped.
o Offline Running
• Operating condition where the GSU is disconnected from grid and running,
ready for closing main circuit breaker.
o Online
• A neutral operating condition where the GSU is connected to grid but without
energy flow to/from battery. When PMS is in AUTO and Mode Online request
command is given the sequence for starting and connection is performed
automatically.
o Grid support
• A mode where EMS calculates the power reference setpoint for the GSU when
performing load peak shaving. The PMS will be able to use a part of the GSU’s
power capacity added to the total power capacity for the power plant during
normal operation. Since the battery converter will operate in grid forming mode,
the fast response in case of loss of power generation capacity by diesel engines,
without any mode change will give “instant” replacement of power by the Grid
Support Unit. EMS will identify the “alone on grid” condition which allow the
battery converter to work with extended power setting, increasing the delivered
power to the grid to a level between 1300 and 1500kW dependent on SoC and
load demand. To activate the mode from the PMS must be set to “Auto” to
secure the automatic activation of standby genset control by PMS during this
mode and “all packs connected” status is identified by EMS.
o Charge
• A mode where the battery will be charged by a selected constant C-rate by EMS
until upper voltage limit by BC is reached.
o Discharge
• A mode where the battery will be discharge by a selected constant C-rate by
EMS until lower voltage limit by BC is reached or SoC cut-off level is reached by
BMS.
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 56 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
At least the following parameters is monitored and presented at local HMI panel, but the
detailed extent of monitoring is adapted to the battery manufacturers instruction which also
have additional signals and statuses as mandatory requirements for each pack.
The EMS has dual power supply from 230V UPS PS and SB, each via a 230V AC/ 24V DC
converter to a Diode redundancy module (Puls, YRM2.DIODE).
Each of the supplies is galvanic isolated trough AC/DC converters. A short circuit current will
be limited by the AC/DC converters and redundancy module capacity, this ensuring a failure
on the consumer side will not be transferred upstream, or from one redundancy group to the
other.
Important Consumers
Table 6.5.1 - Important consumers in Energy Management System
Failure Modes
Table 6.5.2 - Failure Modes in Energy Management System
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 57 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
The Helicon-X3 remote control system is microprocessor based. Following main functions are
included:
o Speed control, allowing accurate and reliable control of the motor speed (RPM)
o Direction control, allowing accurate and reliable control of the thrust direction
o Follow-up backup control from control lever
The thruster control systems are powered from the vessels 230V and 230V UPS system. The
I/O cabinets (UN-10) in Bow thruster room and propulsion room are internally powered from
the main control cabinets (UN-1) in instrument room.
All thrusters can be individually controlled from Fwd Bridge console and Starboard Wing
console.
Operation of the system can be performed through the graphical interface (Viewcon). The
Viewcon screen-console consists of a 10.4” LCD colour display with touch-screen interface
and built-in display computer.
Important functions which can be performed through the Viewcon interface panel are:
The control lever contains potentiometers and electronics for I/O's and control, both for
normal and backup system. The display in the control lever base shows set command
(direction) from the lever.
Each of the supplies is galvanic isolated trough DC/DC converters and AC/DC converters. A
short circuit current will be limited by the DC/DC and AC/DC converters capacity, this
ensuring a failure on the consumer side will not be transferred from one redundancy group to
the other.
Important Consumers
Table 6.6.1 - Important consumers for Thruster Control System
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 58 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Failure Modes
Table 6.6.2 - Failure Modes of the Thruster Control System
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 59 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 60 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Illustration of Thruster Control System
Figure 6.6.1
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 61 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Each system is equipped with a central cooler and a frequency-controlled SW cooling pump.
The circuits are protected by pressure indication alarms connected to the IAS.
One common backup pump with valves and crossovers pipes between the systems are
arranged. For correct configuration of the SW Cooling system, these valves (721V117 &
721V1118) must be normally closed during DP operation.
In addition, there is installed a branch off SW Cooling system for a Heat Exchanger, serving
cooling to the Chilled Water System. The branch of system is served by the SW Backup Pump
circuit. The SW Backup cooling Pump is powered by a changeover cabinet, with manual
changeover solution.
The Central cooler for FW Cooling System PS provides cooling for Main Engine 1, Main Engine
2, Main Azimuth Thruster PS, Bow Tunnel Thruster 1 and Water Chiller unit 1.
The Central cooler for FW cooling System SB provides cooling for Main Engine 3, Main Engine
4, Main Azimuth Thruster SB, Bow Tunnel Thruster 2 and Water Chiller unit 2.
The Sea Chest and Crossover Duct arrangement are common for these systems. A low
suction sea chest with duct arrangement on Port side of the vessel, and one high suction sea
chest with duct arrangement on Starboard side of the vessel.
Even unlikely to occur, caution must be shown to prevent total loss of cooling from SW
Cooling System. Potential scenario of seaweed intrusion, growth and accumulation of air
must be considered in a Sea Water Cooled system.
Air for blowing of sea chests and SW pumps are taken from the Working Air system.
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 62 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Important Consumers
Table 7.1.1 - Important consumers for the SW Cooling System for FW Cooling system PS and
SB
Failure Modes
Table 7.1.2 - Failure Modes of the SW Cooling System for FW Cooling System PS and SB
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 63 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Illustration of the SW Cooling System for FW Cooling System PS and SB
Figure 7.1
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 64 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
The circuits are protected by pressure indication alarms connected to the IAS.
The Central cooler for BESS provides cooling for the FW Cooling for the BESS.
The Central cooler for the Fwd Azimuth Thruster provides cooling for the FW Cooling for the
Fwd Azimuth Thruster.
The Sea Chest and Crossover Duct arrangement are common for these systems. A low
suction sea chest with duct arrangement on Port side of the vessel, and one high suction sea
chest with duct arrangement on Starboard side of the vessel.
Even unlikely to occur, caution must be shown to prevent total loss of cooling from SW
Cooling System. Potential scenario of seaweed intrusion, growth and accumulation of air
must be considered in a Sea Water Cooled system.
Air for blowing of sea chests and SW pumps are taken from the Working Air system.
Important Consumers
Table 7.2.1 - Important consumers for the SW Cooling System for BESS and Fwd Azimuth
Thruster
Failure Modes
Table 7.2.2 - Failure Modes of the SW Cooling System for BESS and Fwd Azimuth Thruster
SW Cooling System for BESS and Fwd Azimuth Thruster Summary (assessment)
No electrical or technical failure in the SW Cooling System for BESS and Fwd Azimuth
Thruster will exceed the defined worst-case failure design intent for DYNPOS(AUTR).
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 65 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Illustration of the SW Cooling System for BESS and Fwd Azimuth Thruster
Figure 7.2
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 66 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
There are arranged a total of four FW cooling systems for this vessel.
FW Cooling system PS and SB are both provided with one central cooler as well as an internal
cooling system each.
A three-way thermostatic valve is arranged at each cooler for controlling the temperature in
the circuits. The valves have internal sensing and are set to predefined values.
Each cooling systems have one main FW cooling pump, providing circulation to respective
system, as well as the Main Engines HT circuits. The FW cooling pumps is equipped with
pressure alarms connected to the IAS.
PS and SB system share a FW Backup Cooling Pump. The FW Backup Cooling Pump can be
powered from both redundancy groups and are operated by a manual changeover solution.
There are arranged crossover valves for the backup pump. These valves (722V2104,
722V2108, 722V2208 and 722V2204) must be normally closed during DP operation.
FW Cooling system PS provides cooling for Main Engine 1 and 2, Main Azimuth Thruster PS,
Bow Tunnel Thruster 1 and Water Chiller Unit 1.
In addition, PS system serve to Hydraulic unit for container securing system, HPU for Motion
Compensated Gangway (MCG) and crane, and Cooling aggregate 1. These are not relevant
for DP operation.
FW Cooling system SB provides cooling for Main Engine 3 and 4, Main Azimuth Thruster SB,
Bow Tunnel Thruster 2 and Water Chiller Unit 2.
In addition, SB system serves Provision Cooling aggregate 2, not relevant for DP.
The Main Engines each have a HT expansion tank. Main engine 1 and 2 share a LT expansion
tank, and main engine 3 and 4 share a LT expansion tank. Alarms will indicate if the FW
levels become low.
The FW cooling for Main Engines consists of a high temperature (HT) and a low temperature
(LT) circuit. The HT-circuit is cooling the jackets, cylinder block, turbo charger and lube oil.
The LT-circuit are cooling the charge air, generator, fuel oil and aftercooler.
The HT circuits are equipped with its own FW cooler. In addition, main engine 1 and 4 are
equipped with a de-aerator connected to the HT circuit.
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 67 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
The temperature in all main engines HT and LT circuits is controlled by an engine internal
three-way thermostatic valve with internal sensing and are set to a predefined value.
Each engine is equipped with one built-on HT Circulation pump and one built-on LT
Circulation pump. In addition, there is one electrical driven LT circulation pump and LT
booster pump for each engine.
The LT pump provides cooling for the generator, as well as the Fuel Oil Heat Exchanger.
Important Consumers
Table 8.1.1 - Important consumers for the FW Cooling System Engines, Generators,
Thrusters & Auxiliaries are as follows
Failure Modes
Table 8.1.2 - Failure Modes of the FW Cooling System Engines, Generators, Thrusters &
Auxiliaries are as follows
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 68 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 69 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Illustration of the FW Cooling System PS – Main Engines & Generators
Figure 8.1.1 – FW Cooling Main Engines & Generators PS
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 70 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Illustration of the FW Cooling System SB – Main Engines & Generators
Figure 8.1.3 – FW Cooling Main Engines & Generators SB
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 71 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Cooling for the FW Cooling System for BESS are served from SW cooling system, described
further in chapter 7.2
A three-way thermostatic valve is arranged for controlling the temperature in the circuit. The
valve have internal sensing and are set to predefined values.
The system is equipped with one FW cooling pump for circulation. The FW cooling pump is
equipped with pressure alarms connected to the IAS.
The system is equipped with both pressure and temperature sensors, connected to the IAS.
There is arranged one Expansion tank for the system. The Expansion tank is protected by low
level alarm.
Important Consumers
Table 8.2.1 - Important consumers for the FW Cooling System for BESS
Failure Modes
Table 8.2.2 - Failure Modes of the FW Cooling System for BESS
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 72 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Illustration of the FW Cooling System for BESS
Figure 8.2 – FW Cooling system for BESS
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 73 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Cooling for the FW Cooling System for Fwd Azimuth Thruster are served from SW cooling
system, described further in chapter 7.2.
A three-way thermostatic valve is arranged for controlling the temperature in the circuit. The
valve has internal sensing and are set to predefined values.
The system is equipped with one FW cooling pump for circulation. The FW cooling pump is
equipped with pressure alarms connected to the IAS.
The system is equipped with both pressure and temperature sensors, connected to the IAS.
There is arranged one Expansion tank for the system. The Expansion tank is protected by low
level alarm.
Important Consumers
Table 8.3.1 - Important consumers for the FW Cooling System for Fwd Azimuth Thruster
Failure Modes
Table 8.3.2 - Failure Modes of the FW Cooling System for Fwd Azimuth Thruster
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 74 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Illustration of the FW Cooling System for Fwd Azimuth Thruster
Figure 8.3 – FW Cooling system for Fwd Azimuth Thruster
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 75 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Regularly testing of tanks for microbiological contamination, chemical treating when needed,
regular procedures for sludging of the fuel oil tanks, as well as treating the system as a fully
split configuration as far as possible is highly recommended.
FO service tank 1 (Tank 273) is serving Main engine 1 and Main engine 2, and FO service
tank 2 (Tank 274) is serving Main Engine 3 and Main Engine 4. There is arranged one settling
tank for each of the two fuel oil systems.
The supplies from the Fuel Oil Service Tanks are served by Remote Operated quick closing
valves, both from the FO Settling Tanks and the FO Service Tanks. From the FO Service
Tanks the Main Engine 1 is served by (700V1131), Main Engine 2 is served by (700V1132),
Main Engine 3 is served by (700V1509) and Main Engine 4 is served by (700V1510). The
Remote Operated valves (700V1127, 700V1128, 700V155 and 700V1504) from the FO
Settling tanks must be normally closed during DP 2 operations.
Crossover pipes with vales are arranged between service tanks, and for the main engines
Port and Starboard. To avoid cross contamination these valves (700V1523, 700V1503,
700V1142, 700V1141, 700V1166, 700V1543) must be normally closed during DP 2
operation.
Each main engine is provided with a duplex pre-filter, two engine driven FO pumps and a FO
filter after the engine driven pumps. Excess fuel oil is cooled down by a FO cooler and
returned to service tanks.
Overflow from FO settling tank 1 and FO settling tank 2 is directed to FO drain tank (Tank
275). Overflow flow from FO service tank 1 is directed to FO settling tank 1 and overflow
from FO service tank 2 is directed to FO settling tank 2.
FO service tanks, FO settling tanks is arranged above tank top and located in Starboard side
of the vessel hull.
FO settling tanks are protected by high and low-level alarms. FO settling tanks are also
equipped with level control high and level control low for auto start/ stop of transfer pumps.
FO service tanks are protected with high and low-level alarms.
FO service tank 1 supplies fuel oil to the emergency generator FO tank via a supply pump.
Overflow from emergency generator FO tank are returned to FO drain tank.
The vessel is fitted with one Hot Water Boiler, with one single supply line connected to both
FO service tanks, and in addition with a single return line connected to both FO service tanks.
As supply valves and return valves are not interlocked it carried a risk of cross contamination
if operated incorrectly.
Filling of fuel oil to the system is handled by two FO transfer pumps on two filling lines.
There is arranged a crossover pipe with valve between the two filling lines.
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 76 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
FO transfer pump no. 1 may provide filling to FO settling tank 1 and FO service tank 1. FO
transfer pump no. 2 may provide filling to FO settling tank 2 and FO service tank 2.
However, due to risk of dirty oil contamination from storage tanks, filling should only be
performed to the settling tank and cleaned by the separator before transfer to the service
tank. This means that filling valves (700V1119 and 700V1518) for FO service tank 1 and 2
must be in normally closed position.
Separation of fuel oil is performed by one FO separator and one FO supply pump for each
system. The FO separators can separate fuel oil from the settling tank or the service tank
and return clean fuel oil to either of the tanks. It is important that fuel oil service tanks are
filled up in due time before entering DP operations. FO separation must only be performed
from the settling tank to each service tank at a time during DP operation.
There is arranged crossover pipes with valves between the systems. For correct configuration
of the FO separator system, these valves (700V1173, 700V1174, 700V1140) must be
normally closed during DP operation.
Remote operation and quick closing of the valves in the Fuel Oil system is performed by the
Main Engine Control System. Each Main Engine is supplied by its own Remote operated quick
closing valve from the dedicated FO Service Tanks, therefore a failure in one valve will not
affect the other redundancy group.
The illustration drawing of the Fuel oil system on figure 9.1 illustrates the FO system for main
engines.
Important Consumers
None important electrical consumer for FO System Main Engines is found to be important for
DP operation.
Failure Modes
Table 9.1.2 - Failure Modes of the FO System Engines
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 77 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Illustration of the FO System Engines
Figure 9.1
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 78 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Each main engine has its own sump, engine driven lube oil main pump and electric driven
pre-lubricating pump.
Both pumps have suction from the lube oil sump and effluence lube oil through temperature-
controlled circuit with an oil cooler and duplex-filter.
For filling of lube oil to engines, one lube oil storage tank and a LO Transfer Pump is
arranged to a common LO manifold, where there are individual filling lines to each main
engine.
The LO Storage tank for main engines are protected by a high-level alarm and level indicator.
All filling valves are to be normally closed to prevent dirty oil contamination.
Important Consumers
None important electrical consumer for LO System Main Engines is found to be important for
DP operation.
Failure Modes
Table 10.1.2 - Failure Modes of the LO System Main Engines/ Generators
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 79 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Illustration of the Lube Oil System Engines
Figure 10.1
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 80 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
The LO storage tank are protected by a high-level alarm and level indicator.
The Bow Tunnel Thruster use hydraulic oil for lubrication and cooling. A pressurized gravity
tank provides oil to the hydraulic oil unit. The hydraulic oil unit consists of an electric pump,
duplex filter and valves. A seal oil tank provides oil to the thruster seal.
Alarms will indicate if the pressure is too high or low in the hydraulic unit.
Gravity tank and seal oil tank is protected with a low-level alarm and a high-level alarm. In
addition, the gravity tank has a high-temperature alarm.
The Fwd Azimuth Thrusters are equipped with two hydraulic oil units, hydraulic oil tank,
gravity tank and seal oil tank.
One hydraulic oil unit is used for steering, lift/ lower and locking system and the other is
used for lubrication. Both hydraulic oil units consist of an electric pump, duplex filter and
valves.
The hydraulic oil circuit is protected with high and low-level alarms, as well as high-
temperature alarm.
Gravity tank and seal oil tank is protected with a high and low-level alarm. In addition, the
seal oil tank has a low-pressure alarm.
Air to the gravity tanks are supplied from the compressed air system described in chapter 11.
The air is supplied through “none return valves”, pressure loss in the compressed air system
will not drain the pressure in the tank
Cooling to the systems is provided through external coolers connected to the FW system,
described in chapter 8.
Important Consumers
Table 10.2.1 - Important consumers for the Lube Oil System Thrusters
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 81 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Failure Modes
Table 10.2.2 - Failure Modes of the Lube Oil System Thrusters
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 82 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Illustration of the Lube Oil system Bow Tunnel Thrusters
Figure 10.2.1
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 83 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Illustration of the Lube Oil system Fwd Azimuth Thruster
Figure 10.2.2
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 84 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
The storage tank is protected with high-level alarm and level indicator, for filling there are
arranged a dedicated LO pump.
Each thruster is equipped with one Lubrication Unit and one Gravity Tank. The gravity tank is
protected with a low-level alarm.
The oil in the gravity tanks maintains the internal static pressure against water for the
propeller shaft and steering tube seal cavities. If any of these seals starts leaking the oil level
in the gravity tank drops which indicates the crew that there may be something wrong with
the seals. Failure of air supply to gravity tanks can After long time lead to sea water intrusion
and damage the thrusters, tanks are fitted with low level alarm.
Air to the gravity tanks are supplied from the compressed air system described in chapter 11.
The air is supplied through “none return valves”, pressure loss in the compressed air system
will not drain the pressure in the tank.
Cooling to the systems is provided through external coolers connected to the FW system,
described in chapter 8.
Important Consumers
Table 10.3.1 - Important consumers for the Lube Oil System Main Azimuth Thrusters
Failure Modes
Table 10.3.2 - Failure Modes of the LO System Main Azimuth Thrusters
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 85 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
LO System Main Azimuth Thrusters Summary (assessment)
No electrical or technical failure in the LO System Main Azimuth Thrusters will exceed the
defined worst-case failure design intent for DYNPOS(AUTR).
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 86 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Illustration of the Lube Oil system Main Azimuth Thrusters
Figure 10.3.1
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 87 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
The working air system is not critical for DP operation it will not be further described in this
analysis.
The starting air system is arranged as a common system, where both starting air
compressors is serving both starting air receivers. Each starting air receiver has a capacity of
500 litres.
The starting air system is arranged as a common system and may be lost on one single
failure, as the system is not configured to operate fully split.
The compressors will automatically start/ stop on low/ high starting air pressure.
There is arranged a common supply line from both of the starting air receivers to non-DP
relevant consumers such as emergency closing SW inlets, cross flooding valves, window
washers and typhoons.
There is also arranged a common supply line from both of the starting air receivers to the
instrument air system via a pressure reduction panel which reduces the air pressure from 30
to 7,5 bar and an air drier element. An instrument air receiver of 60 litres is arranged after
the air driers.
The instrument air system provides air for the gravity tanks for thrusters, as well as non-DP
relevant consumers such as Main Azimuth Thruster shaft brake, ballast treatment, anti-
heeling system, consumption system, separators and remote operated valves.
The starting air/ instrument air system is protected by low pressure alarms connected to the
IAS.
There is also a backup line from the working air system to the instrument air system and a
backup line from the starting air system to the working air system. The pressure in working
air system is 7 bar, so normally the starting air will supply instrument air system.
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 88 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Important Consumers
Table 11.1.1 - Important consumers for the Starting Air/ Instrument Air System
Failure Modes
Table 11.1.2 - Failure Modes of the Starting Air/ Instrument Air System
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 89 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Illustration of the Starting Air/ Instrument Air System
Figure 11.1
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 90 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
12 HVAC SYSTEM
Illustration of the HVAC System
Figure 12.1
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 91 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
12.1 OVERVIEW
The vessel is equipped with supply fans, exhaust fans and AC cooling units/ fan coils located
over the various areas.
The illustration of the HVAC system on figure 12.1 shows the contents important for DP
operation.
Bridge Trunk, Instrument Room D-deck and Instrument Room C-deck has temperature
sensors connected to IAS. Alarm will be given when temperature reaches 50 °C. This limit is
to be verified sufficient during the vessel commissioning phase. Switchboard Room has also
temperature sensor with alarm connected to IAS.
Watch rounds and watch handover must verify correct system setup.
AC-1 is located in the AC Room on B-deck and supplies air for Engine Control room.
AC-3 is located Top of wheelhouse and supplies air for bridge deck.
All Air handling units gets cooling from Chilled Water System, described in chapter 11.4.
Important Consumers
Table 12.2.1 - Important consumers for the Air Condition System
Failure Modes
Table 12.2.2 - Failure Modes of the Air Condition System
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 92 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 93 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Important Consumers
Table 12.3.1 - Important consumers for the Ventilation Fan System
Failure Modes
Table 12.3.2 - Failure Modes of the Ventilation Fan System
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 94 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 95 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
The Chilled Water system gets cooling from FW Cooling Thrusters & Misc. Equipment,
described in chapter 8.1.
The Chilled Water system is arranged as a common system may be lost on a single failure, as
the system is not configured to operate fully split.
Two electrically driven pumps are arranged for circulation in the Chilled Water system.
One pump is in operation and the other pump is in standby. The system is equipped with a
low-pressure alarm.
Important Consumers
Table 12.4.1 - Important consumers for the Chilled Water System
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 96 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Failure Modes
Table 12.4.2 - Failure Modes of the Chilled Water System
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 97 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 98 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Illustration of the Chilled Water System
Figure 12.4
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 99 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
13 THRUSTER SYSTEM
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 100 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
THRUSTER CONFIGURATION
Bow Tunnel Thruster 1 (Thr. 1)
TRANSVERSE THRUST FWD Bow Tunnel Thruster 2 (Thr. 2)
Fwd Azimuth Thruster (Thr. 3)
Main Azimuth Thruster PS (Thr. 4)
TRANSVERSE THRUST AFT
Main Azimuth Thruster SB (Thr. 5)
Fwd Azimuth Thruster (Thr. 3)
LONGITUDINAL THRUST Main Azimuth Thruster PS (Thr. 4)
Main Azimuth Thruster SB (Thr. 5)
Redundancy is required for transverse thrust fwd and for longitudinal thrust after one single
failure.
The electrical drive motors are rated at 1500 kW with shaft speed at 0-1799 RPM.
The Bow Tunnel Thruster 1 is supplied with power from 690V Main Switchboard Port breaker
3Q2.
The Bow Tunnel Thruster 2 is supplied with power from 690V Main Switchboard Starboard
breaker 9Q2.
Each thruster is equipped with a hydraulic power unit for lubrication of the thruster.
Important Consumers
Table 13.3.1 - Important consumers for the Bow Tunnel Thrusters are as follows
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 101 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Failure Modes
Table 13.3.2 - Failure Modes of the Bow Tunnel Thrusters
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 102 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
The electrical motor is rated at 1500kW with shaft speed 0-1799 RPM.
Fwd Azimuth Thruster is supplied with power from 690V Main Switchboard Port breaker 5Q1
and 690V Main Switchboard Starboard breaker 7Q1 via a dual feed frequency converter. The
power supply and protection are further described in chapter 5.3.
The dual feed for the Fwd Azimuth Thruster supplies the Active Front End drives for the
inverter, and in addition supplies a Static Frequency Converter (SFC) for the auxiliary
systems for the thruster. In case of a failure in the power supply for SFC for the auxiliary
systems for the thruster, the thruster will stop down the whole Fwd Azimuth Thruster.
If a case of a failure in either of the 690V Main Switchboards, the affected AFE will stop and
the IGBT breaker will open. The other AFE will take all consumed load running standalone,
and the thruster and auxiliary systems will continue in normal operation without any load
reduction.
The Fwd Azimuth Thruster drive has 440V supply from each redundancy group for Drive
Control, Cooling Pumps and Pre-charge. Only one supply is active at a time, and the drive
may change the supply in case one is lost by means of internal contactors. Internal faults in
the 440V auxiliary supply distribution will be cleared by internal fuses, or supply breakers. In
terms of transferrable faults in the drive, there has been considered to be no risk of
undetectable faults in the changeover supply arrangement.
The thruster control system for Fwd Azimuth Thruster is equipped with a dual power supply,
one from each redundancy group. Each supply is galvanic isolated trough AC/DC, and DC/DC
converters. A short circuit will be limited by the converter’s capacity, and cleared by internal
fuses, ensuring a failure on the consumer side will not be transferred from one redundancy
group to the other.
The thrusters are equipped with a hydraulic power unit which controls the rotation of the
thruster, lubricates the thruster, and supplies pressure to the lift/ lowering cylinders.
The retraction system is provided with proximity sensors for upper- and lower-cylinder
position and locking bolt indication. Only proximity sensors for cylinder in lower position and
locking bolt lower position are considered in this analysis. If feedback from either of these
two sensors are lost when the Fwd Azimuth Thruster are running and in in DP command, the
thruster will be lost from DP, RPM will go to lever command and azimuth will go to retraction
position.
Important Consumers
Table 13.4.1 - Important consumers for the Fwd Azimuth Thruster
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 103 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Failure Modes
Table 13.4.2 - Failure Modes of the Fwd Azimuth Thruster
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 104 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 105 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
The electrical motors are rated at 1500 kW with shaft speed 0-1200 RPM.
Main Azimuth Thruster PS is supplied with power from 690V Main Switchboard Port breaker
3Q1.
Main Azimuth Thruster SB is supplied with power from 690V Main Switchboard Starboard
breaker 9Q1.
Each thruster is equipped with a lubrication unit with two lubrication pumps. One pump is
running when the thruster is running, and the other is in standby mode.
Important Consumers
Table 13.5.1 - Important consumers for the Main Azimuth Thrusters
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 106 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Failure Modes
Table 13.5.2 - Failure Modes of the Main Azimuth Thrusters
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 107 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Each thruster has a separate push button and the wiring is independent for each thruster to
the Main Switchboard.
The circuit configuration is by one closed loop with two resistors, one resistor 1k Ω is
connected in series with the pushbutton and one resistor of 10k Ω in parallel with the
pushbutton.
Power supply to the emergency stop circuits are supplied internally from the Main
Switchboard.
The wiring is loop monitored, and if a wire break or short circuit occurs an alarm will be
activated in vessels IAS alarm system, but the thruster unit will not stop.
Failure Modes
Table 13.6 - Failure Modes of the Emergency Stop System for Thrusters
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 108 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
14 DP CONTROL SYSTEM
14.1 GENERAL
The computerised DP system is used for automatic position and heading control of the
vessel. The system controls the vessel with use of data from the vessel’s position references
and environmental sensor system.
Deviations from the desired heading and/ or position are automatically detected and
appropriate adjustments are made by the system.
Set points for heading and position are specified by the operator and are then processed by
the DP control system to provide signals to the vessel thrusters. The DP control system
always allocates optimum thrust to whichever propeller units are in use.
The DP control system also provides a manual joystick control which may be used for joystick
control alone or for combined manual/ auto control.
A mode selector system is installed in three control stations Fwd Bridge console, PS Wing
console, and SB Wing DP station. The system changes between Manual, DP and Joystick
mode. The system ensures safe mode transfer between each mode.
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 109 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Block Diagram Topology of DP Control System
Figure 14.1.2
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 110 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Illustration of DP Control System
Figure 14.1.3
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 111 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Redundancy Principle
Table 14.1 – Redundancy Principle for DP Control System
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 112 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
The redundant Icon DP 2 system is based on a triple controller solution with a redundant dual
fibre-optic network. Interface to sensors and position reference systems, power system and
thruster system are split into logical groups based on class requirements and system
segregation.
The connected nodes do not need special functionality to handle network redundancy. With
the DP system integrity preserved, the DP network is separated from networks of other
applications.
In the control system, the redundancy is implemented by having three controller computers
working in parallel by voting principle.
The required reliability is achieved by the implemented diagnostics system that monitors all
input signals to the system. All critical results that are computed, such as position estimate,
are also checked between the computers.
In the triple redundant system, there is an automatic change-over to the other computer if a
critical software or hardware error occurs.
The triple redundant DP controllers are located in DP Main Control Cabinet. All logic with
respect to safety control and monitoring is located in the controllers. The controller
compromises of controller DP-A with IO-A, controller DP-B with IO-B and controller DP-C with
IO-C.
Joysticks on OS stations are shared with the independent joystick system, internally the
joysticks are electrically divided into two independent systems, one for DP and one for
independent joystick.
14.4 NETWORK
There is an internal redundant fibre optic network (ring) in the main control cabinet for the
triple controllers. In addition, there are separate Dual Ethernet networks for each Controller,
see table 14.1 for details.
In case of failure in one of the fibre network, the other fibre network will handle all
communication and an alarm will be activated.
If both Controller networks to an Operation Station fail, the command can be transferred to
the other Operation Station.
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 113 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
A total of three MMS switches is installed on board; one in Fwd Bridge console, PS Wing
console, and SB Wing DP station.
The MMS system itself is used as a signalling device for enabling mode changes. The actual
mode switching is a result of signal communication between DP, Joystick and each of the
thruster cabinets. The communication protocol is based on the existing Ethernet
communication interface.
When a mode is selected, hardwire signals are sent to either the DP system or the
independent joystick system, depending on the mode selected. The DP or joystick system
then send request to the thruster control cabinets through Ethernet communication. The DP
or joystick system constantly keep sending the request signal, if communication is lost the
affected thruster(s) are released to manual command.
“Release to manual” signals are hardwired to each thruster cabinets. The “Release to
manual” is used as a fast disconnection will cause the separate thruster control systems to
be enabled and all thrusters will be controllable by the manual handles.
The “Release to manual” buttons consists of NO contacts to each thruster cabinet. Contact
failure will in worst case trip one thruster to manual or prevent release from the selected
mode. However, the failure will not affect any of the other control positions or available
modes.
The joystick system enables manual combined manoeuvring of the vessel and consists of
following main components:
One 230V main supply (L02, Circ. 124) and one 230V backup supply (E01, Circ. 116) is
arranged for the joystick system.
Gyro 1 provides heading signal for the joystick system. Loss of the gyro signal will lead to
loss of the heading reference for the joystick system.
DGNSS 1 provides surge and sway speed to the joystick system. The speed is only used to
inform the operator.
An alarm will come up and let the operator switch to either manual control in case of any
failure.
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 114 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 115 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
14.8 DP SENSORS
The vessel is fitted with following DP Sensors:
Illustration of DP Sensors
Figure 14.8
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 116 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Each of the supplies is galvanic isolated trough AC/DC or DC/DC converters. A short circuit
current will be limited by the AC/DC converters capacity, this ensuring a failure on the
consumer side will not be transferred from one redundancy group to the other. Same
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 117 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
arrangement is done for the independent joystick system, there one AC/DC converter on
main supply and one DC/DC converter on the backup supplies provide galvanic isolation and
limits the short circuit.
Important Consumers
Table 14.9.1 - Important consumers for the DP Control System
Failure Modes
Table 14.9.2 - Failure Modes of the DP Control System
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 118 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 119 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
15 SAFETY SYSTEMS
The system consists of emergency stop panels on various locations and one emergency stop
relay cabinet.
Each main engine can be emergency stopped locally and from ECR, the wirings are loop
monitored with alarm connected to IAS.
Emergency stop systems for thrusters are separately described in section 13.6.
Emergency stops
Table 15.1.1 – Emergency Stops
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no
Page 120 of 120
Ulstein B315/ “Windea Jules Verne” – Failure Modes & Effect Analysis
BL.2019.F427.10.R04
Important Consumers
Table 15.1.2 - Important consumers for the Emergency Stop System
Failure Modes
Table 15.1.3 - Failure Modes of the Emergency Stop System
- END OF DOCUMENT -
BOATLABS AS
Phone: +47 483 20 888
Email: post@boatlabs.no
Member Web: www.boatlabs.no