Dynamic Positioning Systems Guide
Dynamic Positioning Systems Guide
The Guide provides optional notations and technical specifics that reflect current industry practice and DP
technologies. The Guide covers ABS requirements for the design and testing of DP systems with the
following new features:
● Enhanced system (EHS) notations to recognize design features beyond current DPS-series notations
and to provide flexibility to owners and operators
● Station keeping performance (SKP) notations to recognize DP capability and to encourage robust
design of the DP system
● Increased level of detail on the technical requirements to help less experienced users
● Details of vessel type specifics to reflect industry need
● Requirements for testing comparable with current industry practice
The Guide is applicable to systems that are installed onboard vessels, offshore installations and facilities. It
is applicable to new constructions.
The November 2019 edition specified that Marine Transmitting Heading Devices (THDs) may be used as
one of the sensors where three vessel heading sensors are required.
The February 2020 edition added requirements for the DP Operations Manual. The associated functional
roles/operations for which the DPS notation is granted (e.g., Anchor Handling, Fire Fighting, Offshore
Support, Diving, Underwater Inspection, etc.) and a description of the functions and equipment involved
with maximum available electrical power to perform the specified vessel combined functions are to be
included in the DP Operations Manual.
The April 2020 edition addresses the application of DP notations and operations to articulated tug barge
combinations.
The March 2021 edition incorporates requirements and guidelines from IMO MSC.1/Circ. 1580, Marine
Technology Society (MTS) Guidelines for Fault Ride Through Capabilities, MTS Guidelines for Cross
Connections, OCIMF Dynamic Positioning Failure Mode Effects Analysis Assurance Framework Risk-
based Guidance (First edition 2020), ABS DC Distribution Systems and ABS Lithium Battery (Energy
Storage Systems) Guides requirements to support DP operations, and DP Operational Guidance (as found
in Appendix 4). Addition of a new optional notation EHS-E is also included.
IMO MSC.1/Circ.1580 (Guidelines for Vessels and Units with Dynamic Positioning (DP) Systems) issued
on 16 June 2017 provides guidelines to the industry and lays out the principles for dynamic positioning
systems. This document provides an update to the previous guidelines in MSC/Circ.645 issued on 6 June
1994.
IMO MSC.1/Circ.1580 is to be applied to vessels and units constructed on or after 9 June 2017. For vessels
and units constructed on or after 1 July 1994 but before 9 June 2017, IMO MSC/Circ.645 may continue to
be applied.
This Guide becomes effective on the first day of the month of publication.
Users are advised to check periodically on the ABS website [Link] to verify that this version of
this Guide is the most current.
CONTENTS
SECTION 1 General................................................................................................12
1 Introduction................................................................................... 12
3 Classification Notation.................................................................. 12
5 Definitions..................................................................................... 13
5.1 General............................................................................ 13
5.3 Equipment and Dynamic Positioning System.................. 14
5.5 Redundancy Design........................................................ 16
5.7 Performance and Operation............................................ 18
7 Documentation..............................................................................19
7.1 Dynamic Positioning System........................................... 19
7.3 Power System..................................................................20
7.5 Thruster System.............................................................. 20
7.7 DP Control System.......................................................... 20
9 Certification...................................................................................21
9.1 Control and Monitoring System Equipment..................... 21
9.3 Components and Subsystems.........................................21
DPS-0 For vessels which are fitted with centralized manual position control and automatic heading
control system to maintain the position and heading (Station Keeping) under the specified maximum
environmental conditions.
DPS-1 For vessels which are fitted with a dynamic positioning system which is capable of automatically
maintaining the position and heading (Station Keeping) of the vessel under specified maximum
environmental conditions having a manual position control system.
DPS-2 For vessels which are fitted with a dynamic positioning system which is capable of automatically
maintaining the position and heading (Station Keeping) of the vessel within a specified operating envelope
under specified maximum environmental conditions during and following any single fault, excluding a loss
of compartment or compartments.
DPS-3 For vessels which are fitted with a dynamic positioning system which is capable of automatically
maintaining the position and heading (Station Keeping) of the vessel within a specified operating envelope
under specified maximum environmental conditions during and following any single fault, including
complete loss of a compartment due to fire or flood.
DPS-1, DPS-2 and DPS-3 classification notations are structured in line with the IMO MSC.1/Circ.1580
“Guidelines for Vessels and Units with Dynamic Positioning (DP) Systems”. DPS-1, DPS-2 and DPS-3
are in line with IMO equipment class of 1, 2 and 3, respectively.
At the Owner’s request, the symbol + for the DPS-series notations may be assigned indicating additional
requirements for station keeping capacity and failure modes for static components of the DP systems.
At the Owner’s request, an enhanced system notation (EHS), e.g., EHS-E and EHS-P, as a supplement
for DPS-series notations, may be assigned. The notation provides the basis for the measurement to enhance
critical components of the DP system, including power system, thruster system, control system and
verification and validation of functionality. The main objective of the enhanced system notation is to
improve reliability, operability and maintainability. Section 8 of this Guide provides details for the
enhanced system notations.
Also, at the Owner’s request, a station keeping performance notation (SKP), as a supplement to the DPS-
series notations may also be assigned to the vessel. The objective of the station keeping performance
notation is to recognize the DP capability and to encourage robust design of DP systems. Section 9 of this
Guide provides details for station keeping performance requirements.
Section 11 of this Guide provides information about other optional notations that may apply to DP systems
such as those for Integrated Software Quality Management (ISQM) and Software System Verification
(SSV).
Note: Some of these definitions are sourced from MTS DP Vessel Design Philosophy Guidelines, 2019 (Draft) and the
text for those definitions are given in italics.
Failure: An occurrence in a component or system that causes one or both of the following:
b) Deterioration of functional capability to such an extent that the safety of the vessel, personnel or
environmental protection is significantly reduced.
Failure Modes and Effects Analysis (FMEA): a systematic analysis of systems and sub-systems to a level
of detail that identifies all potential failure modes down to the appropriate sub-system level, and their
consequences.
FMEA proving trials: the test program for verifying the FMEA.
Industrial Mission: Industrial mission is the primary operational role of the vessel, typically applicable to
MODUs and Project and Construction vessels (e.g., Pipe-lay/Heavy-lift). (Note: by definition the
industrial mission for a Logistic Vessel is to support logistics).
Logistics Vessels: Offshore Support Vessels (OSV) and crew boats transporting, carrying out and
facilitating the logistics competence of cargoes, goods, supplies, crews, loading/unloading, offshore
exploration and production equipment, etc., across the maritime and offshore industries.
Specified Maximum Environmental Conditions: The specified maximum environmental conditions are the
specified wind speed, current and wave height under which the vessel is designed to carry out intended
operations.
Specified Operating Envelope: The specified operating envelope is the area within which the vessel is
required to stay in order to satisfactorily perform the intended operations under the specified maximum
environmental conditions.
Worst Case Failure (WCF): The identified single fault in the DP system resulting in maximum effect on
DP capability as determined through the FMEA study. This worst case failure is to be used in the
consequence analysis.
Worst Case Failure Design Intent (WCFDI): The specified minimum DP system capabilities to be
maintained following the worst case failure. The worst case failure design intent is used as the basis of the
design. This oftentimes refers to the simultaneous failure of multiple thrusters and/or generators.
Static Component: Static components are in particular: cables, pipes, manual valves, etc.
Dynamic Positioning Control Station (DP Control Station): A workstation designated for DP operations,
where necessary information sources, such as indicators, displays, alarm panels, control panels and internal
communication systems are installed, including DP control and independent joystick control operator
stations, required position reference systems’ Human Machine Interface (HMI), manual thruster levers,
mode change systems, thruster emergency stops, and internal communications.
Dynamic Positioning Operation (DP Operation): Use of the DP system to control at least two degrees of
freedom in the horizontal plane automatically.
Dynamic Positioning System (DP System): The complete installation necessary for dynamically
positioning a vessel including, but not limited to, the following subsystems.
i) Power system
ii) Thruster system, and
iii) DP control system
iv) Independent joystick system (when required)
Power System: All components and systems necessary to supply the DP system with power, the power
system includes, but not limited to:
i) Prime movers with necessary auxiliary systems including piping, fuel, cooling, pre-lubrication and
lubrication, hydraulic, pre-heating, and pneumatic systems
ii) Generators
iii) Switchboards
iv) Electrical distribution system (cabling and cable routing) and
v) Power management system if applicable
vi) Power supplies, including uninterruptible power supplies (UPS)
Thruster System: All components and systems necessary to supply the DP system with thrust force and
direction. The thruster system includes:
i) Thrusters with drive units and necessary auxiliary systems including piping, cooling, hydraulic,
and lubrication systems
ii) Main propellers and rudders if these are under the control of the DP system
iii) Thruster control systems
iv) Manual thruster controls
v) Associated cabling and cable routing
DP Control System: All control components and systems, hardware and software necessary to dynamically
position the vessel. The DP control system consists of the following:
Computer System: A system of one or more programmable electronic devices, associated software, and
hardware peripherals and interfaces. Microprocessors, Programmable Logic Controller (PLC), Distributed
Control Systems (DCS), PC or server-based computation systems are examples of computer-based
systems."
Interface: A transfer point (includes physical and logical interfaces) at which information is exchanged.
Examples of interfaces include: input/output interface (for interconnection with sensors and actuators);
communications interface (to enable serial communications/networking with other computers or
peripherals).
Peripheral: A device performing an auxiliary function in the system (e.g., printer, data storage device).
Joystick System: A system with centralized manual position control and manual or automatic heading
control.
Position Reference System: All hardware, software and sensors that supply information and/or corrections
necessary to give position and heading references, including its power supply.
DP Sensor System: A system comprising devices that measure vessel heading (such as gyro compasses),
vessel motions (such as motion reference units), and wind speed and direction.
Consequence Analyzer: A software function which continuously verifies heading and position and issues
an alarm if the vessel (in its current operating mode) in the current weather conditions is not be able to
keep the heading and position in the case that any of the predefined worst-case failures should occur.
Control Mode: Method used for station keeping. Control mode for a DP system may be:
Manual Position Control System: A system with centralized manual position control and automatic
heading control, referred to as a joystick system.
Manual Thruster Control System: A system which provides an individual control lever for each thruster.
Phase back: A method utilized to temporarily reduce power consumption following an event, to stabilize
the power plant and avoid a black-out.
Closed Bus: Closed bus often describes an operational configuration where all or most sections and all or
most switchboards are connected together, that is, the bus-tie breakers between switchboards are closed.
Also called joined bus, tied bus or closed-ring. The term closed bus/ closed bus-ties refers to a
configuration in which the power plant is operated as a common power system. An alternative to closed
bus is open bus, sometimes called split bus or split ring.
Common Cause Failure: In the context of DP system, the term “common cause failure” is used to describe
a failure which causes a malfunction in more than one redundant equipment group. Each redundant group
may malfunction in a different way. For example, an over excitation failure in one generator causes another
to trip on field failure.
Common Mode Failure: A failure that occurs when events are not statistically independent, when one
event causes multiple systems to fail. In terms of DP system, the term “common mode failure” is a subset
of common cause failure in which the redundant elements malfunction in the same way. E.g., a short
circuit fault on a common power distribution system may cause a voltage dip in all redundant equipment
groups which causes all power consumers to malfunction and trip on undervoltage.
Critical Redundancy: Equipment provided to support the worst-case failure design intent.
Cross Connection or Common Point (X Groups): Common points Components or systems that are shared
by more than one independent group or redundant group may be assigned to a common X-Group of
components, these common components or common points between the redundant or independent groups
are fault propagation paths with the potential to defeat the redundancy concept. Cross Connections are
common points introduced to achieve certain objectives, such as providing back up power, transferring
power or data between redundant groups, or facilitating maintenance activities. Such cross connections are
fault propagation paths with the potential to defeat redundancy. Common points and cross connections can
result in fault propagation pathways leading to failures exceeding the worst-case failure design intent if not
adequately mitigated by appropriate compensating provisions. Note that all cross connections are common
points but not all common points are cross connections. The design of compensating provisions should
take this into account.
Compensating Provisions: Compensating provisions are applied to common points and cross connections
to mitigate the effects of fault propagation. They may include protective functions, such as over current
protection and attributes such as fault ride through capability. The effectiveness of compensating
provisions should be validated by testing.
Differentiation: A method to avoid common mode failures by introducing a change in the characteristics of
redundant systems based on the same principle, e.g., use of Inertial Aided Navigation (IAN) on one of the
two redundant GNSS systems.
Diversity: The property of introducing differences into redundant elements to avoid common mode,
common cause failures. Different levels of diversity are possible such as specifying different
manufacturers for redundant GNSS systems. Even greater diversity can be achieved through orthogonality
which requires redundant elements to operate on different principles.
Fail-Safe: The system is to return to a safe state in the case of a failure or malfunction and this should not
result in a loss of position or heading.
Hidden Failure: A failure that is not immediately evident to operations or maintenance personnel, and
which has the potential for failure of equipment to perform on-demand functions, such as protective
functions in the power plant and switchboards, standby equipment, backup power supplies or lack of
capacity or performance.
Independence: A system that can operate without the assistance of central control or other systems or
subsystems. In this Guide it is mainly in reference to main machinery such as generators and thrusters.
Auxiliary and control functions are to be provided in a manner that makes the machinery as independent as
practical to minimize the number of failures that can lead to the loss of more than one main item of
machinery.
Non-critical Redundancy: Equipment provided over and above that required to support the worst case
failure design intent. Its purpose is to improve the reliability and availability of systems.
Physical Separation: With reference to DPS-3 vessels, fire and watertight subdivisions required to support
the worst case failure design intent in respect of DPS-3 failure criteria.
Redundancy: Ability of a component or system to maintain or restore its function, when a single fault has
occurred. Redundancy can be achieved for instance by installation of multiple components, systems or
alternative means of performing a function.
Redundancy Concept: The means by which the worst case failure design intent is achieved. It is to be
documented as part of the preliminary design process.
Redundant Groups (Subsystems): Two or more component groups each of which is capable of individually
and independently performing a specific function.
Segregation: Refers to systems or equipment intended to provide redundancy. Reduces the number of
connections between systems to reduce the risk that failure effects may propagate from one redundant
system to another.
Single Fault: The single fault is an occurrence of the termination of the ability to perform a required
function of a component or a subsystem in the DP system. For vessels with DPS-3 notation, the loss of
any single compartment is also to be considered a single fault.
Single Fault Tolerance: The ability of a system to continue its function, following a single fault, without
unacceptable interruption.
Orthogonality: With reference to redundant systems, the secondary means of providing a function should
be based on completely different principles to reduce the risk of common mode failures. (e.g. Gyros-
spinning mass versus Fiber Optic Gyros (FOG), anemometers (ultrasonic versus mechanical).
Availability: (IEC 191-02-05) The ability of an item to be in a state to perform a required function under
given conditions at a given instant of time or over a given time interval, assuming that the required external
resources are provided. This ability depends on the combined aspects of the reliability performance, the
maintainability performance and the maintenance support performance.
Fault Ride Through: The capability of a vessel’s DP system power plant and control systems (for a closed-
bus operation) to recover from the effects of a fault anywhere on the main and distribution systems (e.g.,
on a main switchboard bus segment or on a major feeder circuit) without significant malfunction before the
bus-tie breaker opens to isolate the faulted side of the system during a "limited" time or voltage drop.
“Limited” time is to be defined by the designer in order to make the system stable. The severe voltage
excursions associated with the operation of over current protection is a very typical example of a condition
which requires ride through capability.
Loss of Position and/or Heading: The vessel’s position and/or heading is outside the limits set for carrying
out the industrial activity in progress.
Maintainability: (IEC 191-02-07): The ability of an item under given conditions of use, to be retained in,
or restored to, a state in which it can perform a required function, when maintenance is performed under
given conditions and using stated procedures and resources within a stated time.
Operability: Service operability performance (IEC 191-19-06): The ability of a service to be successfully
and easily operated by a user.
Resilience: The ability of a system to withstand a failure and to continue operations following failure. It
may include the ability to recover from a failure without suffering significant damage.
Spinning Reserve: The difference between the total power from immediately available sources (such as
running generators, Energy Storage Systems, etc.) and the consumed power.
Station Keeping: Maintenance of a desired position and/or heading or track within the normal excursions
of the control system and inside the limits set for carrying out the DP activity in progress, under the
defined environmental conditions (e.g. wind, waves, current, etc.).
System Flexibility: The ability of a system to adapt to internal or external changes to allow its primary
mission to be satisfied.
Time to Safely Terminate: This time is calculated as the amount of time required in an emergency to
physically free the DP vessel from its operational activity following a DP abort status and allowing it to be
maneuvered clear and to proceed to safety.
7 Documentation
Where one of the classification notations described in Subsection 1/3 is requested, the following plans,
data and documentations are to be submitted for review as applicable. These documentation requirements
are in addition to the requirements for the vessel’s mandatory classification notations. The requirements on
the extent of the documents are given in the related Sections of this Guide. The following symbols are used
in this Section for the type of review of the documents :
R: Documents to be reviewed.
I: Documentation for information and verification for consistency with related review.
9 Certification
Hydraulic and pneumatic piping systems associated with the thruster system are to be subjected to pressure
tests at 1.5 times the relief-device setting using the service fluid in the hydraulic system and dry air or dry
inert gas for pneumatic systems as testing media. The tests are to be carried out in the presence of a
Surveyor.
1 General
The dynamic positioning (DP) system includes subsystems of power supply system, thruster system and
DP control system. Those subsystems and related components are to meet the requirements for the vessel’s
mandatory classification notations.
This section provides general requirements for a DP system with a DPS-series notation. More detailed
requirements for each subsystem are given in Sections 3, 4, 5 and 6 respectively.
Section 8 of this Guide provides the requirements for enhanced system notations (EHS) and Section 9
provides the requirements for station keeping performance notation (SKP).
i) For a vessel with the notation DPS-0, or DPS-1, a loss of position and/or heading (station
keeping) may occur in the event of a single fault.
ii) For a vessel with the notation DPS-2, a loss of position and/or heading (station keeping) will not
occur in the event of a single fault in any active component or system, excluding a loss of
compartment or compartments.
iii) For a vessel with the notation DPS-3, a loss of position and/or heading (station keeping) will not
occur in the event of a single fault in any active or static component or system, including complete
loss of a compartment due to fire or flood.
iv) The redundant components and systems are to be immediately available and with such capacity
that the DP operation can continue for such a period that the work in progress can be terminated
safely.
v) The period for safely terminating a work in progress is to be specified by the Owner.
The selection of the level of DP class notation of the vessel for a particular operation is outside the scope
of this Guide. Some Coastal States impose minimum DP Equipment Class requirements for activities
carried out within their jurisdiction.
The station keeping capability is normally defined and presented by the limiting environmental conditions
under which the vessel can maintain the position and heading, both in intact and post worst-case failure
conditions. The limiting environmental conditions and operational modes for a DP vessel are to be defined
by the Owner.
For the DPS-0 notation, the dynamic positioning system is to have a manual position control
system.
For the DPS-1 notation, the dynamic positioning system is to include an automatic dynamic
positioning system and a manual position control system.
A vessel with DPS-2 or DPS-3 notation is required to have an automatic dynamic positioning
system, manual position control system and to be single fault tolerant.
The single fault tolerance is to be achieved by the design of redundant systems. The station
keeping capability after a single fault is to be achieved by providing control, electric power and
thrust, without reliance on operator intervention.
For DPS-1+, DPS-2+ or DPS-3+ notation, transverse thrust force and yaw moment are not to be
solely dependent on the propellers and rudders. The thruster configuration is to be arranged so that
they can provide transverse force and yaw moment for station keeping.
For the DPS-2 notation, common static components may be accepted in systems which do not
immediately affect position keeping capabilities upon failure (e.g. ventilation, and seawater
systems not directly cooling running machinery). Normally, such static components will not be
considered to fail where adequate protection from damage is demonstrated.
i) Items listed above for DPS-2, and any normally static component is assumed to fail
ii) Any components in any one watertight compartment from flooding
iii) Any components in any one fire subdivision from fire
3.3.2 Consideration of Redundancy (1 March 2021)
i) The redundancy is to have two or more items of equipment or system required to perform
a function so that the redundant unit can take over from the failed unit without
unacceptable interruption of the function.
ii) Redundant components and systems are to be immediately available for use without
needing manual intervention from the operators and with such capacity that the DP
operation can be continued for such a period that the work in progress can be terminated
safely. The transfer of control is to be smooth and within acceptable limitations of the DP
operation(s) for which the vessel is designed. In general, a full stop and restart of the
system does not comply.
iii) Automatic start of equipment may be accepted as contributing to redundancy only if they
can be tested to prove that they can be brought into operation automatically before
position and heading keeping performance is degraded.
iv) The redundancy depends on systems being available in both number and capacity to
produce the required DP capability after worst-case failure. Independence of redundancy
groups is to take into account all technical functions.
v) The redundancy design can consist of two fully redundant power and thruster systems
each capable of maintaining position and heading if the other fails. The design can also
make use of multiple systems each providing partial redundancy such that the vessel can
maintain position with all combinations of independent systems that survive any defined
fault. The redundancy design is to provide suitable combinations of available systems
following any defined fault.
vi) The transfer of failures between redundant subsystems is to be prevented by effective
compensating provisions. Efficacy of compensation provisions is to be demonstrated by
validation testing.
vii) The failure of redundant components or systems is to be revealed by alarms. The
possibility of hidden failures is to be minimized through periodic testing.
3.3.3 Basic Design of Redundancy and Redundancy Concept
Basic design of redundancy and the redundancy concept of the DP system are to be developed at
the early design stage and are to be submitted to ABS for review.
The documentation is to be reviewed during the design process is to confirm if the worst-case
failure design intent is met.
The worst-case failure design intent is to describe the minimum amount of propulsion and control
equipment remaining operational following the worst-case failure, and is to be used as the basis of
the design development.
The DP FMEA is to identify, assess, and address cross connections. Cross connections are to be
addressed by fail-safe designs and conditions, protecting functions, and testing. Tests for identified
cross connections are to be included in the DP FMEA Trials. The FMEA is to identify and analyze
for hidden failures which will result in a loss of redundancy.
i) The term ‘cross connections’ means physical connections between redundant equipment
groups.
ii) Cross connections can also be created by the colocation of equipment supplied from
redundant power distribution systems. In DPS-3 designs, these connections are made by
considering the effects of fire and flooding in a common compartment.
3.3.6 Hidden Failure Monitoring (1 March 2021)
Hidden failure monitoring is to be provided on all devices where the FMEA shows that a hidden
failure will result in a loss of redundancy.
Cables for redundant equipment or systems are not to be routed together through the same compartments.
If not avoidable, cables for redundant systems are to be separated by at least one A-60 barrier. Thus cables
associated with one system could be run in an A-60 class duct with the other system running through the
compartment or both sets of cables routed through separate ducts.
Redundant piping system (i.e., piping for fuel, cooling water, lubrication oil, hydraulic oil, etc.) is not to be
routed together through the same compartments.
If not avoidable, such pipes are to be separated by at least one A-60 barrier. Thus pipe-work associated
with one system could be run in an A-60 class duct with the other system running through the
compartment or both sets of pipe-work routed through separate ducts.
i) A vessel with a DPS-0 or DPS-1 notation is to be able to maintain position and heading under
specified environmental conditions with all thrusters intact.
ii) A vessel with a DPS-2 or DPS-3 notation is to be able to maintain position and heading under
specified environmental conditions during and after any single fault of the DP system.
iii) The station keeping performance assessment is to be carried out for:
i) DP capability plots
j) Thrust utilization under the specified limiting environmental conditions where applicable
TABLE 1
Summary of DP System Requirements for ABS DPS Notations(4) (1 March 2021)
1 2 3 2 + 1 in backup
Position Reference Systems
Control control station
System 2 + 1 in backup See 5/11,
Wind control station 10/3.3, 10/5.5,
1 2 3
MRU(3) 2 + 1 in backup 10/7.3
Sensors: 0 1 3
Vessel control station
1 2 3
Heading (6) 2 + 1 in backup
control station
2 + 1 in separate
UPS 0 1 2 See 3/9
compartment
Backup Control Station for Backup Unit N/A N/A N/A Yes See 5/9.3
Notes:
1 DPS-0 is an ABS system class. It applies to a manual position control system fitted with automatic heading control and
with a free-standing position reference system. DPS-1, DPS-2 and DPS-3 are in line with IMO equipment class 1,
class 2 and class 3, respectively.
2 If all thrusters are direct diesel drive, a power management system is not required.
3 (1 November 2013) If position reference systems are dependent on correction of the measurements for roll and pitch
noise, their associated MRUs are required.
4 For enhanced system (EHS-E, EHS-P, EHS-F and EHS-C), additional information is provided in 8/5 TABLE 1.
5 (1 November 2013) Where “separate compartments” is indicated, the equipment is to be located in separate
compartments arranged to support the worst-case failure design intent in respect of DPS-3 failure criteria.
6 Where three (3) vessel heading sensors are required, one of these may be a THD (Transmitting Heading Device), such
as a GPS-Satellite-Compass. This is to have type approval for compliance with the Performance standards for Marine
Transmitting Heading Devices (THDs), as referenced by SOLAS Chapter V, by a recognized certification agency/
organization.
7 DPS-1+ notation may be assigned for DP system meeting DPS-1 requirements plus 1 stern thruster.
8 DPS-2+ notation may be assigned for DP system meeting DPS-2 requirements plus 2 stern thrusters and redundancy
of static components.
9 DPS-3+ notation may be assigned for DP system meeting DPS-3 requirements plus 2 stern thrusters.
The redundancy concept for the DP system is to be followed through to these systems so that actions or
failures initiated by these systems do not cause consequences that exceed the worst-case failure design
intent. The actions initiated by these systems are to be scaled to the detected threat level and are to be
addressed in the FMEA of the DP system.
The design and operation of ESD and Fire and Gas Safety shutdown systems are to meet the following:
Nuisance alarms, fire and gas safety shut down alarms and non-explosive gas influx related triggers, are
not to result in an automatic shutdown or loss of thrusters.
Default operation of emergency shutdown (ESD) and fire and gas safety shutdown systems are to be in
advisory mode (initiating alarms).
Operating in supervisory mode with the potential of shutting down DP critical equipment due to non-
explosive gas influx related triggers or spurious triggers is to be avoided. Any decision to operate in
supervisory mode is to be based on verification of the systems engineering approach and proving trials to
demonstrate that the system is resilient to shutdowns triggered due to spurious events (e.g., sensor failures,
input output card failures (benign and aggressive failures)).
The effect on the DP system due to any reasonable act of mal-operation is to be considered. This means
that the shutdown systems is treated in the same way as any other part of the vessel’s DP system that meets
the same redundancy requirements and have their failure modes analyzed in the FMEA of the DP system.
In spaces such as thruster rooms and auxiliary machinery spaces, an immediate effect on DP systems due
to a spurious shutdown of ventilation is to be prevented and to be confirmed during FMEA proving trials.
Where possible, the release of the fire suppressant is to only affect one redundant machinery group.
The displays and alarms as specified in 2/7 TABLE 2 are to be provided at DP control stations, as
applicable.
2/7 TABLE 2 provides the summary of minimum basic instrumentation at the main DP control station.
Additional instrumentation may be necessary. The detailed information for displays and alarms for the DP
system’s components and subsystems are given in Sections 3, 4, 5, and 6 respectively.
TABLE 2
Summary of Minimum Instrumentation at DP Control Station
(1 November 2013)
CPP pitch x
Thruster RPM x
Thrust direction x
Thruster Power System
Thruster motor/semiconductor converter coolant leakage x
(See 4/9 & 4/11)
Thruster motor semiconductor converter temperature x
Spinning reserve x
9.1 Communications
Communication is a key management tool during execution. This is to be incorporated in the design phase.
i) At least one means of voice communication is to be provided between each DP control station and
the navigation bridge, the engine control position, any other relevant industrial function control
centers associated with DP and any location required by the vessel’s mandatory classification
notation.
ii) The voice communication system is to be powered by a battery or an uninterruptible power supply
system sufficient to operate the system for at least 30 minutes.
iii) The Communication systems are to be located within easy reach of the DP operator at the DP
control stations.
A system of visual and audible alarms is to be provided at each DP control station, on the navigation
bridge and at the propulsion engine control position or centralized control station, if fitted. The alarms are
to be capable of being manually activated from the DP control stations (including DP back-up control
station, if fitted) to indicate DP operational status. Where such an alert system is not easily included the
means of clear communication of the statuses are to be agreed before commencement of operations.
Section 10 of this Guide provides more detailed information for specific vessel types.
The guidance provided by IMCA M 103 “Guidelines for Design and Operation of Dynamically Positioned
Vessel” and by MTS “DP Vessel Design Philosophy Guideline” can be used for the design of DP alert
system.
The purpose of the FMEA is to indicate whether or not the DP system meets the requirements of the
relevant DP notation and complies with the vessel’s WCFDI.
The DP FMEA is to be performed based on this Guide, IMCA M 166, IMCA M 178, IEC 60812, “DP
Vessel Design Philosophy Guideline” by MTS, Annex 4 of IMO High Speed Craft Code or equivalents.
i) Identify and provide recommendations to eliminate or mitigate the effects of all single faults and
common mode failures in the vessel DP equipment which, if any occurs, would cause total or
partial loss of station keeping capability.
ii) Demonstrate effective redundancy.
iii) Identify potential “hidden” failures with the potential to defeat the DP redundancy concept.
Results of the DP FMEA are to be verified during FMEA proving trials. The DP FMEA test program is to
be developed based on the analysis results, analysis method and assumptions. The relevant test program is
to be provided to ABS for review and approval.
DP FMEA and DP FMEA test programs are to be kept onboard and they are to be updated to cover
subsequent alterations to the DP system hardware or software.
Where parts of the system are identified as non-redundant and where redundancy is not possible, these
parts are to be further studied with consideration given to their reliability and mechanical protection. The
results of this further study are to be submitted for review.
When there are more configurations for the diesel electric plant design to cope with equipment
unavailability (e.g., failures or equipment taken down for maintenance), it is important that all
configurations that are possible to be included in DP operations are analyzed in the vessel’s DP system
FMEA to prove that the DP system remains redundant. Fault tolerance of the configurations is to be made
visible and understood by the crew.
Compensating provisions upon which the redundancy concept depends upon are to be clearly identified.
Analysis is to cover alternate configurations the vessel intends to operate in (due to long term
unavailability of DP related Station Keeping Equipment or equipment rendered unavailable due to
maintenance requirements).
An FMEA worksheet is to be compiled for each equipment failure assessment. Some pertinent aspects to
be included in the worksheets are:
FMEA worksheet examples given in IEC 60812, OCIMF DP FMEA Assurance Information
Paper, Appendix 2 of IMCA M 166 or Appendix 2 of Annex 4 of IMO International Code of Safety for
High-Speed Craft may be used.
The DP FMEA analysis report is to be a self-contained document including, but not limited to the
following:
i) A brief description of the vessel, vessel’s worst-case failure design intent and whether the
analysis has confirmed or disproved it
ii) Definitions of the terms, symbols and abbreviations
iii) Analysis method and assumptions
iv) A description of all the systems associated with the dynamic positioning of the vessel and
a functional block diagram showing their interaction with each other. Such systems would
include the DP electrical or computer control systems, electrical power distribution
system, power generation, fuel systems, lubricating oil systems, cooling systems, backup
control systems, thruster/propulsion/rudder systems (as applicable), all DP pertinent
networks, etc.
v) System diagrams are to be included where appropriate
vi) A description of each physically and functionally independent item and the associated
failure modes
vii) Identification of redundancy groups for each system. This can be provided in tables
and/or color-coded system diagrams and/or other clearly understood methods
viii) Fail safe condition for each redundancy group as applicable
ix) For each system, identification of cross-connections and common points. Each cross-
connection or common point is to be analyzed for propagation with description of the
impact on the redundancy concept. Provisions to compensate or mitigate the effects of the
cross-connection are to be documented, analyzed, and validated by testing
x) A description of the effects of each failure mode alone on other items within the system
and on the overall dynamic positioning system
xi) Identification of all operating modes with a description of different configurations and
settings associated with the operating modes. Failure modes and tests are to incorporate
all operating modes
xii) Analysis findings and recommendations
xiii) Conclusions including worst-case failure and recommended changes
xiv) Recommended FMEA tests
The FMEA analysis report is to be updated after major modifications and is to be kept onboard the
vessel.
i) Purpose of test or failure mode (objective of the test and the attributes that are intended to
be validated by the test, e.g., fault ride through capability test, etc.)
ii) Vessel and equipment setup
iii) Test method
iv) Expected results
v) Observed results
vi) Failure detection
vii) Failure effects
viii) Outstanding or resolved action items
ix) Comments
x) Witness name, signature and date for each test
After completion of DP proving trials, the final version of DP FMEA analysis and DP proving
trial report, including final analysis/conclusions based on actual results from DP testing, are to be
submitted.
Manual is to be kept onboard. It is to be readily accessible at the DP control location and used by the DP
operators as a reference for conducting DP operations.
The DP system Operations Manual is intended to provide guidance for the DP operator about the specific
DP installations and arrangements of the specific vessel. The DP Operations Manual is to include but is
not be limited to the following information.
Note: These elements are to be addressed in the Preventive Maintenance System and vessel specific
familiarization for on board personnel.
“For equipment class 2, the power system is to be divisible into two or more systems so that in the event of
failure of one system at least one other system will remain in operation and provide sufficient power for
station keeping. The power system(s) may be run as one system during operation, but is to be arranged by
bus-tie breakers to separate the systems automatically upon failures which could be transferred from one
system to another, including, but not limited to, overloading and short-circuits.”
For equipment class 3, the power system is to be divisible into two or more systems so that in the event of
failure of one system, at least one other system will remain in operation and provide sufficient power for
station keeping. The divided power system is to be located in different spaces separated by A-60 class
division. Where the power systems are located below the operational waterline, the separations are also to
be watertight. Bus-tie breakers are to be open during equipment class 3 operations unless equivalent
integrity of power operation can be accepted.”
The above criteria from IMO MSC.1/Circ. 1580 are to be followed in the design of the power system for
DPS-2 and DPS-3 systems.
Alternative energy storage systems (e.g. Li-Ion batteries, supercapacitors, and flywheels) may be used as
energy storage sources of power to thrusters as long as all relevant redundancy, independency and
separation requirements for the relevant notation are complied with. For equipment classes 2 and 3, the
available energy from such sources may be included in the consequence analysis function required in
paragraph 5/3.3 below when reliable energy measurements can be provided for the calculations.
When power is shared, power supply to industrial activities and essential ship service loads is not to affect
DP operations.
The post failure remaining power plant is to be able to start any non-running load without the associated
voltage dip causing any running motor to stall or its control equipment to drop out.
Essential services for generators and their prime movers, such as cooling water and fuel oil systems, are to
be arranged such that, with any single fault, sufficient power remains available to supply the essential loads
and to maintain position and heading within the specified post failure operating envelope.
Essential services for generators and their prime movers, such as cooling water and fuel oil systems, are to
be arranged so that, with any single fault in the systems or the loss of any single compartment, sufficient
power remains available to supply the essential loads, the critical operational loads and to maintain
position and heading within the specified post failure operating envelope.
5.1 General
The switchboard is to be arranged for manual and automatic remote controls and be provided with all
necessary alarms, controls and indications to allow local manual control of the power plant.
The distribution system at the main power generation level is to be arranged to reflect the split in the
redundancy concept.
The split in the auxiliary power system is to follow the split in the main power generation system to match
the worst case failure design intent.
Every UPS and battery system is to have a main power supply from an auxiliary system switchboard
appropriate to the split in the redundancy concept and if a backup supply from the emergency switchboard
is provided, loss of the emergency switchboard is not to prevent starting of main generators after a
blackout.
The bus-bar current and power levels are to be monitored as described in 2/7 TABLE 2. An alarm is to be
initiated upon failure of any of the required power supplies.
Spinning reserve, the difference between online generator capacity and consumed power is to be displayed
in the DP control station. The display is to be continuously available and is to be provided for individual
bus sections for split-bus power arrangements.
For DPS-2, a main bus bar system consisting of at least two sections, with at least one bus tie breaker
between any two bus sections, is to be arranged.
For DPS-3, each switchboard room is to be separated by watertight A-60 partitions. A bus tie breaker on
each side of the partition is to be arranged.
Bus ties are to be designed to prevent a fault from propagating from one bus section to another.
When the DP system is designed including the configuration of closed bus tie breaker, this breaker is to be:
i) A circuit breaker capable of breaking the maximum short circuit current in the connected system
ii) Coordinated in relation to generator breakers to avoid total loss of main power (black-out)
Details of the bus-tie breakers and generator breakers, such as protection settings, coordination study
between bus-tie breakers and generator breakers and other related information are to be submitted for
review.
Consideration is to be given to effective intelligent detecting and executing methods featuring ultra-fast
acting actions by the devices, including rapid communication to other protective systems under the
coordination scheme, to prevent and/or mitigate the detected fault being migrating to other parts of the
switchboard.
Bus bar control and protection systems are to be designed to work with both open and closed bus tie
breakers.
Analysis of relevant failure modes with closed bus-tie configurations to be addressed in the FMEA so that
the redundancy of the DP system meets the design intent. For the relevant failure modes, reference is made
to the following:
For DPS-3, in addition to the above requirements, the closed bus design is to include the following:
i) Power management system is to be capable of providing sufficient power for essential operations,
and to prevent loads from starting while there is insufficient generator capacity. Facilities to
disable the automatic functions: stop running generators, or to disconnect generator breakers, bus
tie breakers, or thruster breakers are to be provided to allow manual operation by the DP operator
when necessary.
ii) Consideration is to be given to techniques such as power limiting of heavy consumers, shedding of
non-essential loads and temporary thrust reduction to maintain the availability of power. Total
failure of the power management system is not to produce failure effects exceeding the worst case
failure design intent and to be demonstrated through FMEA.
iii) Power management system is to be supplied with an uninterruptible power supply system (UPS).
iv) A failure in the power management system is to initiate an alarm in the DP control station. When
the power management is disconnected, manual operation of the switchboard, as described in
4-8-3/5.5.4 of the Marine Vessel Rules, is to be provided.
v) Loss of an online generator is not to result in the sustained overloading of the generators
remaining on line. If sufficient power is not available, the power management system in
conjunction with “controls” of consumers is to reduce system load in a coordinated fashion to
restore power balance. The restoration of power balance may be accomplished by load reduction
of specific consumers, load shedding and sectionalization of the electrical network.
vi) The power management control system is not allowed to remove the last online generator. The
remove of the last online generator is to be determined by the DP operator.
vii) When the DP system is designed with a closed bus tie configuration for DPS-2 or DPS-3, the
power management system is to have protective measures implemented in order to provide the
required integrity between the redundancy groups. The power management system is also to be
able to communicate with other alternate protection systems if applicable. Analysis of relevant
failure modes are to be addressed in the FMEA.
viii) For DPS-3 notation, the power management system is to be arranged such that no single fault,
including fire or flood in one compartment, will render all the power management systems
inoperable.
If all thrusters are direct diesel engine driven, a power management system is not required.
Where the electrical distribution systems are provided by a mixture of shaft generators from the main
propulsion shafts and axillary generators, a power management system may be exempt provided other
means of limiting and securing the power to thrusters for DP operations are in place and the main
switchboard is arranged with split bus bar configurations.
Where a group of UPSs shares a common power source from a switchboard, loss of that switchboard is not
to exceed the worst case failure design intent when all UPS batteries in that group are depleted.
Each uninterruptible power supply system is to be capable of supplying power for a minimum of 30
minutes after failure of the main power supply. A fault in any UPS is to initiate an alarm in the DP control
station.
For the DPS-2 or DPS-3 notation, the power supplies of the UPSs for the main DP control system are to
be provided from different sides redundancy groups.
For the DPS-3 notation, the back-up DP control system and its associated reference systems are to be
provided with at least a dedicated UPS. The UPSs are to be located and arranged such that no single fault,
including fire or flood, in one compartment will interrupt the power supplied to the remaining control
system and associated reference sensors.
11.1 General
In general, Lithium type battery systems can be used to power electrical loads such as large power
propulsion and vessel’s loads.
Typical Energy Storage Systems (ESS) can be of the lithium battery or supercapacitor type.
Lithium batteries and/or supercapacitors installations are to comply with the related ABS Guides. See
Table 1 for reference.
TABLE 1
Requirements for ESS
ESS Lithium Batteries ABS Guide for Use of Lithium Batteries in the Marine and Offshore Industries
Super Capacitors ABS Guide for Use of Supercapacitors in the Marine and Offshore Industries
i) The ESS power is to be reserved for use by critical loads and not depleted by others.
ii) When the energy storage and conversion equipment is located downstream of the rectifiers that
feed those loads, it is not to feed a distribution side fault and thus there is to be no change in the
fault characteristics of the power plant. Coordination studies and short circuit test results are to
be validated.
iii) The battery installation is to be distributed so that the concentration of flammable or explosive
materials in any one space are reduced.
iv) Connecting the batteries at the thrusters’ bus level rather than to the main distribution system’s
busbars may require installation of batteries at other more locations.
v) The ESS system is to be sized and selected accordingly to operate and provide its functionality
without damage, effect, or degradation throughout its service life.
Note: The text in italics above (11.3 i. through 11.3 iv.) is sourced from MTS document titled “DP Vessel Design
Philosophy Guidelines, 2019 (Draft)”.
13.1 General
Fault ride through (FRT) capability is to be provided for:
i) Vessels with the DPS-3 and DPS-3+ notations as per 3/5.3 of this Guide.
ii) Vessels with the EHS-E and EHS-P notation as per 8/3.1.1 and 8/3.1.3(e), and 3/5.3 of the ABS
DPS Guide.
iii) Fault ride through (FRT) capability is to be demonstrated first by computer modelling and
simulations as per 13.3.1 below.
iv) Secondly by a physical live test, e.g., a short circuit test (or any other equivalent fault ride through
live test) as per 13.5 below.
v) In general, the power system attributes are to be proven by the combination of the simulation and
testing process to demonstrate the FRT capability. The attributes are listed in 5.2 of the in Marine
Technology Society (MTS) document TECHOP_ODP _09(D), May 2015.
vi) Documentation supporting the computer modeling process and simulation results are to be
provided to ABS for review.
vii) Documentation supporting and demonstrating the physical live tests (e.g., test protocols, tests
setups, methodologies, results, etc.) is to be provided to ABS for review.
viii) Consider risks associated with the test. A risk assessment is to be conducted to identify if the live
test is adequate.
ix) In case the risk associated with a live test is found to be high, virtual test(s) may be considered in
lieu of live test(s), provided the power plant model has been validated through lower risk level live
test(s).
x) Model files developed during the modelling, simulation and validation processes are to be
available to ABS upon request.
xi) Live tests are to be witnessed by the Surveyor.
The fault ride through is the capability of a vessel’s DP system power plant and control systems (for a
closed-bus operation) to recover from the effects of a fault anywhere on the main and distribution systems
(e.g., on a main switchboard bus segment or on a major feeder circuit) with significant malfunction before
the bus-tie breaker opens to isolate the faulted side of the system during a "limited" time or voltage drop.
“Limited” time is to be defined by the designer in order to make the system stable.
Note: In general, common points that span the redundancy groups have the potential to introduce fault propagation
pathways. An example of compensating provisions to address such vulnerabilities is to demonstrate fault ride
through capability of equipment that may be impacted by faults propagating through the common point.
ii) Organizations of this type are also to have the test equipment, software and facilities to
carry out the modelling and simulation work such as Real Time Digital Simulation or
Hardware-in-the Loop testing.
15.1 General
For DP vessels designed with a DC power distribution topology, they are to comply with the ABS Guide
for Direct Current (DC) Power Distribution Systems.
When the main propulsion propellers and rudders are included under DP control, they are considered as
thrusters and all relevant functional requirements of this Guide are to be applied.
When the main steering system is included under DP control, the steering gear is to be designed for
continuous operation.
● Vessel with DPS-0 or DPS-1 notation. The vessel is to have thrusters in number and of capacity
sufficient to maintain position and heading (station keeping) under the specified maximum
environmental conditions.
● Vessel with DPS-1+ notation. Transverse thrust force and yaw moment are not to be based on the
propellers and rudders. The thruster configuration is to be arranged to provide the required transverse
force and yaw moment for station keeping.
● Vessel with DPS-2 or DPS-3 notation. The vessel is to have thrusters in number and of capacity
sufficient to maintain position and heading (station keeping), in the event of any single fault, under the
specified maximum environmental conditions. This includes the failure of one or more thrusters.
● Vessel with DPS-2+ or DPS-3+ notation. The vessel is to have thrusters in number and of capacity
sufficient to maintain position and heading (station keeping), in the event of any single fault, under the
specified maximum environmental conditions. This includes the failure of one or more thrusters.
Transverse force and yaw moment are not to be based on the propellers and rudders. In post-failure
conditions, the combination of propellers and rudders may be accepted as a side thruster for transverse
force for back-up purposes only when the engine is continuously running in minimum RPM with the
propeller pitch at zero during the DP operation.
Thruster installations are to be designed to minimize interference with other thrusters, hull and other
surfaces.
In the calculation of available thrust in the consequence analysis and station keeping capability analysis,
the interference effect between thrusters and other effects that could reduce the available thrust is to be
considered.
A single fault in the thruster system, including pitch, azimuth or speed control, is not to result in
unintended operation of pitch, speed and direction.
A single fault in the thruster system is to be such that the thruster fails to a safe mode so that the vessel’s
position and heading are not affected. Fail to a safe mode could be a failure to zero thrust or motor stop.
9 Thruster Control
Thrusters in DP operation are to provide controllable thrust from zero load to full load in step-less
increments. This can be achieved through control of the propeller pitch or the speed of the propeller, or
other parameters.
For DPS-1, DPS-1+, DPS-2, DPS-2+, DPS-3 and DPS-3+ notations, the DP control system and
manual position control systems (Section 5) are to be provided for the thruster system. In addition, a
manual thruster control system is to be provided. For DPS-0 notation, a manual position control system is
to be provided.
If not practical to provide an individual lever for each thruster, sharing a lever between thrusters may be
acceptable provided that following conditions are satisfied:
i) For DPS-0 and DPS-1, thruster control levers can provide controls of thrust in transverse and
longitudinal directions and resulted yaw moment at same time.
ii) For DPS-2 and DPS-3, thruster control levers can provide controls of thrust in transverse and
longitudinal directions and resulted yaw moment at same time after any single fault. For DPS-3,
single fault also includes a loss of a compartment due to fire or flood.
Any failure in the manual position control system is not to affect the capabilities of the manual thruster
control system to individually control each thruster or related group of thrusters.
Manual thruster control is to be available at all times, also during all failure conditions in the main DP
control system.
A single fault in the manual thruster control system is neither to cause significant increase in thrust output
nor make the thruster rotate.
This emergency stop is to be arranged with separate cables for each thruster.
Electrical cables potentially exposed to hydrocarbon fires in engine rooms and spaces where fuel oil is
contained these cables are to be fire-resistant coated.
An alarm is to be initiated upon loop failure (i.e., broken connections or short-circuit) in the emergency
stop system.
The emergency stop activation buttons are to be placed in a dedicated layout representing the thruster
location and which is consistent with the vessel’s axis and layout, or they may be arranged together with
the corresponding thruster levers if these are arranged in accordance with the physical thruster layout.
Where an accidental operation of the emergency stop buttons can occur, a protective cover is to be
mounted.
Emergency stops for thrusters are to be located within easy reach of the DP operator (DPO) e.g., within the
bridge, at the main DP control station.
Emergency stops for thrusters are to be laid out in a logical manner which reflects the position of the
thruster in the vessel’s hull.
For equipment classes 2 and 3, the thruster emergency stop system is to have loop monitoring.
Alarm systems for leakage, motor overload and high temperature, abnormal pressure are to be audible and
visual and are to be installed on the DP control station. Their occurrence and reset status is to be recorded.
2/7 TABLE 2 summarizes the parameters for monitoring, display and warning.
Notes:
Good engineering practice promotes the concept of maintaining clear segregation between systems intended to provide:
● Control
● Monitoring
● Protection
3 DP Control Station
System components that do not require frequent or immediate operator attention may be installed in
alternative locations.
DP control systems and equipment are to meet the requirements of the ABS Rules for Building and
Classing Marine Vessels Section 4-9-3.
For DPS-3 notation, a backup DP control station is to be provided in a separate compartment located and
arranged such that no single fault, including a fire or flood in one compartment, will render both the main
and backup control system inoperable. This room is to be separated by an A-60 class division from the
main DP control station, and located with easy access from the main DP control station.
The main and backup DP control stations are to be arranged so that the operator does not need to change
position during operation and the operator has a view of the external surrounding area and all activities
relevant to the DP operations. For the backup DP control station, alternatively, a closed-circuit TV (CCTV)
system is acceptable for viewing the external surrounding area.
If a view of the vessel’s exterior limits and the surrounding area is not considered important for the
intended operations, for example, for MODUs, the main activity after damage of the main DP control
station is to cease the drilling operation, the arrangement for viewing the vessel’s exterior may not be
necessary for the DP backup control station.
For the DPS-1 notation, a DP control system and a manual position control system are to be fitted.
Transfer of control between the two systems is to be initiated manually.
For the DPS-2 notation, a DP control system with two DP control computers and a manual position
control system are to be fitted. Transfer between two DP control computers is to be automatic and
bumpless with no loss of position and/or heading.
For DPS-3 notation, a main DP control system with two DP control computers, a backup DP control
system, and a manual position control system are to be fitted. The backup DP control system is to be
located at the backup DP control station. The backup DP control system is to have an automatic position
control mode, and is to be interfaced with a position reference system, motion reference unit (MRU or
equivalent) and a vessel heading sensor which are able to operate independently of the main DP control
system. The transfer between the main DP control system and the backup DP control system is to be
smooth with no loss of position and/or heading. See 5/9.3 for modes of transfer.
In general, each DP computer system is to be isolated from other on-board computer systems and
communications systems for maintaining the integrity of the DP system and command interfaces. This
isolation may be achieved using via hardware and/or software systems and physical separation of cabling
and communication lines. Robustness of the isolation is to be verified by analysis and proven by testing.
Specific safeguards are to be implemented to secure the integrity of the DP computer system and prevent
the connection of unauthorized or unapproved devices or systems.
The selection between operational modes (DP mode/manual position control mode/manual thruster control
and if part of the thruster system, propellers and rudders) is to be provided and easily operated. Indications
of active mode and the operational status of different systems are to be displayed on the control panels.
Indicators and controls are to be arranged in logical groups, and be coordinated with the geometry of the
vessel where applicable.
Indication of the system in charge, and changes in operational mode, is to be clearly provided to the DP
operator. Indications of changes in operational mode is to be visually indicated along with an audible
alarm.
Manual operating levers and other controls are to be placed in close proximity to the DP operator and
intuitive in nature. Means for preventing inadvertent operation of vital or critical controls are to be
considered such as recessed or covered switches and others. Protection of those buttons can be provided by
a two-button arm/fire system, or by placing a passive cover over them.
If an erroneous sequence of operations may lead to a critical situation or damage of equipment, appropriate
interlocks are to be arranged.
Controls and indicators placed in the DP control stations are to be lighted properly to permit use day and
night. Lights for such purposes are to be easily adjustable.
The communication network for the DP control system is to be duplicated and each is to be routed as far
apart from each other as practical for DPS-2, see also 4-9-3/13.1.2 of the Marine Vessel Rules. The
network is to be duplicated and physically separated for DPS-3. The manual position control system is not
to share the same communication network with the DP control system.
DP related networks, including data communication networks, are likely to introduce common points that
span the redundancy groups. Such common points have the potential to introduce fault propagation
pathways which can defeat the redundancy concept. These common points are to be clearly identified in
the DP FMEA and addressed appropriately (e.g., Single Failure Propagation Analysis concluding on the
local effect and global effect, compensating provisions, or mitigating measures and efficacy of same to be
proven by validation testing, etc.).
5 DP Control System
Design is to be robust enough to reject erroneous signals that could affect control of position and/or
heading. If all position reference systems fail the DP control system is to use the internal model to send
control signals.
The transition between the DP control modes is not to lead to a significant change in thrust output.
interfaces, is not to cause the failure of more than one computer system. An alarm is to be initiated if any
computer fails or is not ready to take control.
The DP control system is to perform self-monitoring and automatically transfer DP control after a detected
failure in one control computer. The automatic control transfer from one control computer to another is to
be bumpless with no loss of position and/or heading (station keeping).
The cabling for the DP control computers and the thrusters is to be arranged such that under single fault
conditions it will be possible to control sufficient thrusters capable of providing thrust to control surge,
sway and yaw and to keep the vessel within the specified operating envelope.
An alarm is to be initiated for any failure of a DP control system or a sensor and also for the cases where
the sensor or control system is not activated or on standby. Self-monitoring and comparison between
systems are to be provided and warnings are to be generated upon detection of an unexpected difference in
thruster command, position or heading.
The computer systems described above do not include the backup computer system, thus, an additional DP
control system is to be located in the backup DP control station and transfer of control to it is to be initiated
manually from the backup DP control station.
The backup DP control station is to perform self-monitoring and continuously communicate its status to
the main DP control station. An alarm is to be initiated if the backup DP control station fails or is not ready
to take control.
The backup DP control station is to be ready to operate and maintain the position once it assumes
command. The switch-over of the control to the backup DP control system is to be operated from the
backup DP control station and is to occur via manual transfer when the main DP control station is affected
by failure, fire or explosion.
The cabling for the DP control systems and the thrusters is to be arranged such that under single fault
conditions, including loss of a compartment due to fire or flood, it will remain possible to control sufficient
thrusters to keep the vessel within the specified operating envelope.
Thrusters within the DP control system may also be individually de-selected from DP control to manual
thruster control for service and vessel specific operations.
11.1 General
The Position reference systems are to be in compliance with the relevant requirements for the mandatory
classification notations of the vessel for electrical, mechanical, and hydraulic components and subsystems.
Accuracy and limitations of the position references used are to be adequate for the specific task in which
the vessel is engaged.
(1 November 2013) The design of position reference systems and environment sensors with respect to
power, signal transmission, and interfaces is to follow the system redundancy requirements. Sensors and/or
position reference systems may be shared with other systems provided failure in any of the other systems
cannot cause failure or loss of performance of the DP control system.
11.1.4 Alarms
Alarms for sensor malfunctions are to be included in monitoring of positioning reference systems
and environment sensors. An alarm is to be initiated on detection of a sensor failure, even if the
sensor is in a standby or offline use at the time of failure.
Where user interface computers and displays are required for position reference systems, they are to be
independent of the DP control system. The user interface display is to be placed at the DP control station
and easily readable by the DP operator. Power supply to the position reference systems is to be from the
corresponding UPS connected to its associated sensors (except for notation DPS-0).
Where user interface computers and displays are required for position reference systems at least two of
them are to be independent of the DP control system. The user interface displays are to be placed at the
main DP control station, and they are to be easily readable by the DP operator. UPSs are to be provided for
the power supply of the position reference systems and associated sensors, and they are to be in accordance
with the overall redundancy requirements.
The sensor receivers connected directly to the backup DP control system are in general to be installed in
the same compartment as the backup DP control system. For sensors that cannot be located in the same
compartment as the backup DP control station room (e.g., wind sensor, GPS antenna, taut-wire or hydro
acoustic transducer), redundancy is to be provided as far as possible by separation and physical distance.
The independence between main and backup DP control systems is to be provided. Signal isolation of
position reference system and sensors is to be provided, such that failures cannot propagate from one
system to the other system.
For satellite based systems, interface and necessary equipment for receiving differential correction is to be
installed. Where several position reference systems are required, the DP control computers are to use
signal processing techniques to validate the data received. The reference position of each system is to be
available at the operator's request. Position reference systems that rely on motion reference compensation
are to be provided with a means of selecting available motion reference units for use.
When several systems are combined, the resulting value used in further processing is not to change
suddenly or significantly if one or more systems are selected or deselected. Failures in a positioning
reference system that might affect positioning or redundancy adversely are to initiate an alarm. If a
positioning reference system can stall or in other ways produce corrupt or out of range data, a method is to
be provided to enable rejection of the data and an alarm is to be initiated.
The consequence analysis is to be automatically running at pre-set intervals. The calculation ongoing is to
be displayed. The analyzer is not to be disabled while in DPS-2 or DPS-3 DP operations.
The sampling or filtering of the consequence analysis is to be such that a useful warning can be given in
sufficient time but without initiating numerous nuisance alarms which will bring the credibility of any
warnings into doubt.
When the consequence analyzer predicts a failure mode that would cause a loss of position in the
prevailing weather condition, and alarm is to be initiated and acknowledged by the DP operator.
The display unit is to present a position plot including the location of the vessel relative to the reference
sources. The plot may be vessel relative, or a true motion presentation. For DP control systems designed
with redundancy, there is to be at least two independent position displays. If the display is used for
presentation of warnings or alarms, they are to have priority over other information and they are not to be
inhibited by other data currently being displayed.
The critical DP alarms and displays are to be available in DPS-3 backup DP control station. Non-critical
DP alarms (e.g., grouping of alarms, logging on by authorized crew only to the alarm monitoring system,
etc.) are to be of non-intrusive type announcements for the DP operator, since in a fire or loss of
compartment situations, many failed electrical systems, thrusters and other alarms may be initiated
simultaneously.
A single failure effect analysis for auxiliary systems is to be included in the DP system FMEA. The
following items are to be considered where applicable:
The design of the fuel system is to facilitate isolation of services between DP operation and industrial
functions if applicable.
Actuators for quick closing valves are to be installed on a per engine basis and hence, any remote control
system is to fail safe with respect to station keeping.
Fuel strainers and filters are to be arranged to facilitate changes without taking equipment out of service.
For DPS-3, a minimum of one service tank is to be provided for each redundant group. The service tanks
are to be in separate compartments with A-60 partitions following overall split redundancy concept. The
valves in the crossover facilities, if arranged, are to be located as close as possible to the bulkhead and
operable from both sides.
For twin screw vessels where cooling pumps are engine driven, a duplicate spare pump carried onboard, in
lieu of the standby pump, is acceptable, as long as loss of pump would not exceed the WCFDI.
Engine room sea water cooling systems could be incorporated into the thruster seawater systems provided
the redundancy concept is not violated.
In consideration of the severe consequences arising from the loss of water or gas accumulation, fresh water
cooling systems are to be arranged with full separation between systems providing required redundancy.
For a DPS-2 notation, the pipe can be considered not to fail.
The fail safe condition for valves in the fresh water system is to fail as is. The fail safe condition for
temperature regulating valves is to be fail open.
The display of running pumps is to be provided and an alarm is to be initiated for abnormal stop and/or
change over to a standby pump.
7 Compressed Air
Compressed air systems for DP related functions are to follow the redundancy concept. Compressed air for
starting engines is to be independent to the maximum extent feasible. Control air and starting air may be
taken from the same source provided any pressure drops associated with starting air do not affect the
control function. Loss of air supply to the thrusters is to be alarmed and is to have no effect on thruster
operation.
13 Piping
Crossover pipes are acceptable, except in ventilation ducts, provided the cross over pipes can be closed at
both sides of separating bulkheads. Crossover valves, where fitted between independent systems to
facilitate maintenance, are to be provided with local and remote monitoring to indicate open/closed status.
15 Pneumatic Systems
Pneumatic systems are to be designed according to required redundancy in view of the risk of leakage.
Once completed, the dynamic positioning system is to be subjected to final tests. These tests are to prove
essential features of the DP system and its design redundancy. Objectives of the test are to verify the intent
of the DP vessels redundancy design (worst case failure design intent) and to validate the same by testing.
In order to achieve this objective, attributes of Performance, Protection and Detection on which the
redundancy concept depends upon will need to be validated by testing.
A DP test program is to be developed to contain test procedures and acceptance criteria and identify the
configurations for all DP related systems for test. The DP test program is to include procedures for DP
system performance testing and procedures for FMEA proving trials for DPS-2 and DPS-3, as applicable.
When deemed necessary by the attending Surveyor, additional tests to those specified by the DP test
program may be required.
The DP test program is to be kept onboard the vessel. Any changes to the DP system other than like-for-
like replacement of equipment are to be notified to ABS and included in a revision of the DP test program.
Note: UPSs play a prominent role in the integrity of the DP system and are likely to be present in systems other than the
DPCS UPS's, (e.g., UPS's for control power of switchboard, mission critical UPS's with interfaces to the DP
System etc.).
Note: Fault ride through capability and fault tolerance capability may depend on UPS's. It is important that such
dependencies are clearly identified and reflected in the Failure Modes and Effects Analysis. By-pass and
synchronization functionality, if present is to be comprehensively analyzed and tested to verify that malfunction/
mal-operation does not defeat the redundancy concept.
For a DPS-2 system, the operation of the DP control system and a manual position control system
including automatic transfer of one DP control computer to another upon failure is to be confirmed to be
functioning satisfactorily. Upon failure of the DP control system, it is to be verified that the manual
position control is possible.
For a DPS-3 system, the operation of three DP control computers and a manual position control system
including main DP control system automatic transfer of one DP control computer to another upon failure is
to be confirmed to be functioning satisfactorily. Manual transfer of control is to be verified to be possible
at the backup DP control system located in the back-up control station. Upon failure of the main DP
control system, it is to be verified that the manual position control is possible.
Performance of the position reference systems in DP mode is to be tested for all possible combinations of
position reference systems (PRS), and on each PRS as a single system.
The main DP control system in a DPS-2 or DPS-3 system is to perform self-check routines which are to
automatically changeover to a standby system when critical failure conditions are detected. An alarm is to
be initiated in case of failure.
Change of thruster controls between DP control system, manual position control system and manual
thruster control system is to be tested and to be confirmed functioning satisfactorily.
Any other standby changeovers that are included in the Operations Manual are to be tested.
A means of voice communication between the main DP control station, the engine control position and any
operational control centers associated with DP is to be tested and confirmed to be functioning
satisfactorily.
The FMEA test procedures are to be developed in the FMEA analysis covered in Subsection 2/11 of this
Guide.
The vessel's DP system FMEA is to have analyzed and tested all the configurations that the vessel is
intended to be operated in over its life cycle (e.g., closed bus configurations, and FRT tests). The test
procedures are to be based on the simulation of failures and is to be carried out under as realistic conditions
as practicable.
Validation testing is to be carried out to demonstrate that the common point introduced by the closing of
the bus ties does not provide a fault propagation pathway, and equipment related to DP Station keeping
(including auxiliary systems and supporting systems) demonstrate voltage dip fault ride through capability.
The schedule of these tests is to be designed to demonstrate the level of redundancy established in the
FMEA. Where practicable, the test environment is to reflect the limiting design operating conditions.
Closing out of action items from the FMEA, and proving trials are to be well documented and auditable.
After completion of the DP proving trials, the final version of the DP FMEA and DP proving trial report,
including final analysis/conclusions based on actual results from DP testing, are to be submitted.
The enhanced system notations mainly emphasize the following properties of the DP system:
The notation includes provisions for standby start, closed bus operation and transferable generators. These
are beneficial to the overall environment, operational flexibility and system maintainability
● Enhanced Electrical System (EHS-E): This notation covers the requirements for the electrical and
power management systems that are beyond those for the DPS series notations.
● Enhanced Power and Thruster System ( EHS-P ): This notation covers the requirements for the power
system and thrusters that are beyond those for the DPS-series notations.
● Enhanced Control System: ( EHS-C ): This notation covers the requirements on the DP control
systems including control computers, position reference systems and sensors, which are beyond the
minimum requirements for DPS-series notations.
● Fire and Flood Protection System ( EHS-F ): This notation covers the requirements for fire and flood
protection considering the risk level of the areas. This is a supplement for a DPS-2 system. It is not
necessary for a DPS-3 system, since a DPS-3 system has higher requirement in this regard.
The separate enhanced system notations provide the Owner with the flexibility of selecting an individual
EHS notation or combined EHS notations that best fit the design intent.
To be granted an EHS- series notation, the requirements given in this Section are to be met in addition to
the requirements for DPS-series notations.
For a vessel with a DPS-2 notation, the Enhanced Power and Thruster System Notation (EHS-P), the
Enhanced Control System Notation (EHS-C), Fire and Flood Protection (EHS-F) Notation or any
combination, such as EHS-PC, EHS-PF, EHS-PCF, may be assigned.
For a DPS-3 vessel, EHS-F is not necessary since DPS-3 has a higher fire protection requirement.
The design is to include fault ride through capabilities and functions for automatic quick blackout
recovery.
The design for transferable thrusters and generators is to be fault tolerant and fault resistant, which
means that a single fault is not to cause failure of more than one redundancy group and is not to
cause total black-out.
A strategy for detecting hidden failure that could defeat the DP redundancy concept is to be
developed. The strategy is to include means to effectively test protection systems and standby
redundancy. Such systems are to be designed so that they can be tested on Surveyor’s request.
Generators are to be capable of droop mode operation, with any central communication
infrastructure minimized.
i) Load Sharing. The load sharing system is to be designed so that the system can be tested,
both for correct sharing and consequences of failure. The design is to incorporate the
possibility for testing that critical failures are detected by the control system. The failure
of the power management system is not to result in the failure of the load sharing system
in any load sharing control modes.
● Active (kW) Load Sharing. If a scheme for isochronous load sharing is implemented,
the generator speed controllers are to automatically switch to load sharing in droop
mode upon failure of isochronous load sharing. Means to test the transfer
conveniently are to be provided.
● Reactive (kVAR) Load Sharing. The generators are to be able to operate in voltage
droop mode, without the need for reactive load sharing communication between the
AVRs. If differential compensation between voltage regulators is implemented, the
system is to automatically switch to voltage droop control mode operation if a failure
in the reactive load sharing lines occurs. Means to test the transfer conveniently are to
be provided.
ii) Switchboards. Switchboards are to be protected against potential arc damage either by arc
detection, by insulated bus bars, or by any other means.
iii) Circuit Breakers. A minimum of two bus-tie breakers, one on each side, between
switchboards is to be provided, with monitoring and control contacts from each.
The Power Management System and generator incomer circuit breaker cubicle are to
provide a visible indication of generator breaker status (open/closed). The Power
Management System is to alarm if the status of the circuit breaker feedback differs from
the issued command.
3.1.2(c) Power System Protection (1 March 2021)
System Design. Controls and protection systems are to be designed to facilitate local monitoring,
controllability, fault detection, and acting in a timely manner to prevent fault propagating to other
sections.
A zone or segmented concept is to be implemented with error checking such as bus bar differential
protection or equivalent. The generator protection system is to be designed so that it is possible to
verify protection settings and test black-out recovery. Additionally, alarms and detection systems
are to be capable of being tested after system delivery, and be available for demonstration at the
request of the Surveyor.
EGP is to detect and alarm at least the following anomalies included but not limited to:
All failures identified are to initiate an alarm or trip of the faulty generator as appropriate.
The system is to be designed so that these features can be tested on the request of the
Surveyor.
If a generator is faulty, its circuit breaker is to automatically open and the generator is to
trip. In the event the breaker does not open, this is to be detected and the bus-tie breakers
closest to the generator are to open automatically.
ii) Closed Bus Operation. If a failure is detected and an action is taken which fails to remove
the failure, the protection system is to further isolate the fault by automatically isolating
the affected switchboard.
Bus frequency and voltage is to be monitored for operation within normal limits. If
deviation occurs outside these limits for a pre-determined time interval, tie breakers are to
automatically open, converting to a split bus system. An alarm is to be initiated.
iii) Blackout Prevention System. Power consumers are to include intelligent blackout
prevention that is not dependent on the Power Management System, including:
Each thruster drive control system is to have all the intelligence necessary to start the thruster and
make it ready for DP control. Interlocks are to be provided to prevent a drive resetting itself under
a short circuit condition.
Thruster drives are to be able to start the thruster even when the propeller is turning due to inflow.
Note: Thruster drives could be equipped with dynamic breaking resistors to permit more robust control of the
drives operating point during various fault conditions.
3.1.3(b) Interfaces
Where power management functions are integrated in electrical drives, the interface between the
different power management functions is to be analyzed in the FMEA. Where both the Power
Management System and the local electrical drives can limit and control power to the thrusters,
care is to be taken so they do not interfere with each other and cause a control oscillation between
the two systems.
The criteria and order that equipment is phased back in (drilling equipment or thrusters) is to be
described and added to the Operation Manual and be known to the DP operator and ABS.
Individual thruster drives are to directly sense under frequency in the system and cut back thrust.
The power management system is to be able to start all available generators after a blackout and to
connect them to the electrical network.
effective means. If a pre-magnetizing function is utilized and faults are detected during the pre-
magnetizing sequence, the connection of the specific piece of equipment experiencing a fault is to
be aborted and an alarm is to be sent to the Power Management System.
A dead bus closing facility is to be implemented for overriding the synchronizing function if the
bus is dead.
Two generators are not to be able to connect to the dead bus at the same time.
The unit is to be of the online type as defined in 4-8-3/5.9.1 of the Marine Vessel Rules, that is,
there is to be no transfer time if a power failure occurs. The UPS are to have sufficient capacity to
allow operations to be brought to a safe stop or discontinued with a minimum capacity of 30
minutes as required in Section 3.
Additionally, the generator sets and thruster sets are to be autonomous in the provision of auxiliary
support services and control functions.
Redundancy groups are to be clearly defined and well separated. Divisions are to be appropriately
maintained throughout the design.
Thruster seawater cooling system can follow the group redundancy concept with one duty and one
standby pump. Engine room sea water cooling systems can be incorporated into the thruster
seawater systems provided the redundancy concept (within the same redundancy group) is not
violated. Fresh water cooling system is per thruster. Cooling water for the thruster can also be used
for auxiliary systems for that thruster.
3.2.4 Auxiliaries
Each thruster and generator set is to be autonomous in terms of auxiliary systems that are directly
connected to it so that a single fault in the auxiliary systems is not to result in failure of more than
one thruster/generator set.
Separate fuel oil service tank for each generator is to be provided. These are to be located within
their compartmental redundancy group.
Fuel water content monitoring with remote alarms is to be installed either at the input to the
service tanks or at the output of a purifier, whichever is more practical.
Purification and transfer to the service tanks are to be arranged such that a single fault in the
purification and transfer systems is not to result in failure exceeding the WCFDI. Fixed piping can
be shared between generator/thruster sets in the same redundancy group.
Separate fresh water cooling system for direct cooling of each engine is to be provided. External
sea water or fresh water cooling systems can be on a per redundancy group basis, but in all cases,
are to be arranged such that a single fault in external water cooling systems is not to result in
failure exceeding the WCFDI. External water cooling systems for engine rooms could be
incorporated into thruster external water cooling systems provided the redundancy concept is not
violated.
Compressed air for starting engines is to be arranged such that a failure of one air compressor or
air receiver is not to result in failure of more than one generator set.
For standby units, on which the redundancy depends, the readiness of auxiliary systems is to be
maintained and communicated to the DP-control systems.
Units, which are intended to provide standby redundancy for each other, are not to share auxiliary
systems, control power or starting facilitates.
For DPS-2 vessels, the manual position control system can be replaced with an additional DP
control system (independent of the two DP control computers required by the basic DPS-2
notation). The additional DP control system is to meet all of the requirements for the independent
joystick control system while also providing DP control capabilities. Independence of the
controller, workstation and network is to be maintained.
The data logger is to be able to log the main DP control system and the backup DP control system
or additional DP control system (for DPS-2). The failure of the data logger is not to cause the
failure of the two systems.
The UPSs distribution panel and fuse protection for the DP control systems are to be designed to
isolate and clear faults individually.
One set of position reference systems is to be directly connected to the backup DP control system
or additional DP control system (for DPS-2). The main DP control system is to be able to read the
information from that system and the failure of that position reference system is not to cause the
failure of both DP control systems.
The position reference systems chosen are to reflect the planned operating conditions such as deep
water (normally deeper than 500m), open water or close proximity to other units. In deep water
(deeper than 500m) at least one of the position reference systems is to be an acoustic reference
system.
UPS supplies to position reference systems are to be sourced to prevent multiple sensor loss of the
same sensor types.
3.3.3 DP Sensors
Four Motion Reference Units (MRUs) and four vessel heading sensors are to be implemented,
with at least one based on different operating principles to the others a different manufacturer an
working on different principles..
A minimum of four wind sensors is to be operating with at least one based on a different operating
principle to the others (ultrasonic vs. mechanical).
The high fire risk area is the area defined by 4-8-4/1.11 of the Marine Vessel Rules including:
i) Machinery spaces as defined by 4-7-1/11.15 and 4-7-1/11.7 of the Marine Vessel Rules
ii) Spaces containing fuel treatment equipment and other highly flammable substances
Watertight bulkhead separation is to be in place below the damage waterline for machinery spaces.
The controllers, not located in DP control station, for the main DP control system and backup (or
additional) DP control system are to be located in separate spaces with at least A-0 partitions.
The redundant communication networks for the main DP control system is to be physically
separated with A-0 partitions in general, A-60 in high risk fire space and watertight if below the
damage waterline.
3.5.2(d) Thrusters
Thrusters are to be located in separate watertight compartments with at least A-0 separation,
provided fire risk escalation is low and active fire protection fitted in each compartment.
TABLE 1
Summary of DP System Requirements for EHS Notations (1 March 2021)
Thruster System
MRU
Enhanced Power Enhanced Power A0 between redundant
3 + 1 in backup control
Management (1,3) Management (1,3) groups. Watertight below
station
damage waterline
Notes:
1 Controls and supervision of those functions are to be integrated in the control center with the centralized
control system and are to be communicated with DP controls.
4 (1 November 2013) For DPS-2 vessels, manual position control system can be replaced with an additional DP
control system as per 8/3.3.1(a). DP Data Logger is to be included as per 8/3.3.1(b).
5 Position reference systems are to be based on at least two different design principles. For deep-water
conditions, GPS and Hydro Acoustics may be used.
The included in FMEA. The MTS publication, “DP Operations Guidance”, can be used in the
development of Operations Manual regarding closed bus operation.
The compensating provisions in the DP system's redundancy concept are to be such that the minimum
number of required running generators (i.e. two or more) are to be connected to two or more sections of the
main bus. The minimum number of running generators are to be determined from the unit's DP capability.
The worst-case failure of the configuration is not to result to a blackout.
The total number of running generators is to be determined based on the power requirements, needed
spinning reserve and the ability to phase back other loads.
If bus frequency or voltage is outside of predefined limits the tie breakers are to open and the system is to
run as a split system.
The power system is to automatically subdivide for any failure effect that has the potential to defeat the
redundancy design intent.
Any DP system designed for operation with closed bus ties are also to be capable of being configured and
operated with a defined performance and post failure capability in open bus ties configuration.
The availability of standby start functions is to be monitored at the DP control station and communicated
with the DP control system.
In addition, the following factors are to be considered when using standby start as redundancy:
i) Single fault does not cause total blackout including loss of entire compartment for DPS-3.
ii) A failure in one redundancy group is not to cause failure of any other redundancy groups.
iii) A failure in the system being changed over to is not to cause failure of any other redundancy
groups.
iv) Changeover is not to cause failure of the redundancy group that is being connected to.
v) One standby generator, at a minimum, is to be considered not available when needed.
vi) Redundant components or systems which are providing a standby function are not to share
auxiliary systems or other services with the equipment they are providing standby redundancy for.
For a situation where thrust is to be immediately available (e.g., pipe laying) the redundancy is not to be
based on standby start and changeover.
In addition to the failure modes provided in Subsection 2/11, for EHS-series notations, following failure
modes, where applicable, are also to be considered in FMEA analysis.
i) Operation of protection systems (breakers, bus ties, etc.) related to short circuit
ii) Severe voltage dips associated with short circuit faults in power plant configured as a common
power system
iii) Failure to excess and insufficient fuel
iv) Over and under-excitation
v) Governor and AVR failure modes
vi) Failure modes related to standby start and changeover
vii) Power management failure on load sharing, malfunction, etc.
viii) Phase back thrust and large load
ix) Blackout recovery
The above required analyses are to be supported with extensive verification by testing. The test procedures
are to be based on the simulation of failures and is to be carried out under as realistic conditions as
practicable.
9 Documentation
The documentation required in Subsection 1/7 are to be expended to include the enhanced features where
applicable, such as, but not limit to, following documents,
i) Description of protection design philosophy and protection systems the redundancy concept of DP
system depends on. (R)
ii) Analysis of effects of severe voltage transients on power system stability (R)
iii) Short circuit analysis (R)
iv) Simulation of severe over/under voltage and over/under frequency faults to prove the robustness
of the power plant and its protection scheme for closed bus operation (R)
v) Protection coordination analysis (R)
vi) Documentation of protection settings (R)
vii) Description of automatic blackout recovery (R)
1 General
At the Owner’s request, a station keeping performance notation (SKP), which s supplemental to the DPS-
series notations that may be assigned. The main objective of the station keeping performance notation is to
provide for the consistent assessment of the station keeping performance reflecting the latest technology
and to encourage robust redundancy design of DP systems.
The station keeping performance (SKP) notation can be granted if the analysis has been carried out
according to this Section and the results satisfy the requirements.
Station keeping performance (SKP) may be assigned to each of the DPS-series notations as supplemental
information about the DP system.
There are two levels of station keeping performance notations: SKP and SKP(a,b,c,d,e,f) (refer to the
definitions in 9/1.1 of this Guide).
Notation SKP is for the station keeping assessment for given limiting environmental conditions and the
assessment results meet the requirement of this Guide.
Notation SKP(a,b,c,d,e,f) provides more information other than limiting environmental conditions in
terms of probability that the vessel can remain on station for a given site environment.
1.1 Definition
1.1.1 SKP
SKP is an optional notation as supplemental information about the station keeping performance
for specified limiting environmental conditions, such as wind speed and direction, wave height
and frequency, current speed and direction. In general, the limiting environments are to be applied
to intact (all thrusters running) and damaged (worst case failure) conditions unless the limiting
environmental conditions for post failure cases are also specified. The directions for wind, wave
and current can be different and are to be specified by the Owner.
For example, a 1-year return environment is often used for MODUs as the limiting environment
for DP operations. In that case SKP indicates that the station keeping performance of the vessel
under the 1-year return environmental conditions has been verified through analysis, following
procedures given in this Section.
a The probability that the vessel can remain on station at the selected site f and current speed of e with all
thrusters/rudders in normal operation conditions
b The probability that the vessel can remain on station with the failure of minimum effect single thruster/rudder
at the selected site f and current speed of e
c The probability that the vessel can remain on station with the failure of maximum effect single thruster/rudder
at the selected site f and current speed of e
d The probability that the vessel can remain on station at the selected site f and current speed of e with the
worst case failure condition
For example SKP(95, 95, 85, 75, 2, North Sea) stands for
i) 95% of time the vessel can remain on station with a current speed of 2-kt, North Sea wind
and wave conditions, all thrusters operating,
ii) 95% of time the vessel can remain on station with a current speed of 2-kt, North Sea wind
and wave conditions, with failure of minimum effect single thruster,
iii) 85% of time the vessel can remain on station with a current speed of 2-kt, North Sea wind
and wave conditions, with failure of maximum effect single thruster, and
iv) 75% of time the vessel can remain on station with a current speed of 2-kt, North Sea wind
and wave conditions, with worst case failure condition.
1.1.3 Normal Operation Condition
This is a designed condition for normal operation of a floating unit. The operating condition may
be designed for one specific draft, or more than one operating drafts. If there are more operational
conditions, minimum and maximum operational drafts need to be considered in the DP capability
assessment.
3 Environmental Conditions
The environmental conditions are to be specified by the Owner of the DP vessel. The maximum design
environments are generally to be determined by annual statistics.
3.1 Wind
Wind is treated as a constant in direction and speed. The wind speed is to be specified using one minute
mean at height of 10 meters above water surface. A value of 1.18 could be used to convert hourly mean
wind speed to one minute mean speed.
The wave drift force is to be calculated for irregular sea states which can be described by a wave spectrum.
A wave spectrum depends on geographical areas. The Owner of the DP vessel may specify the most
appropriate wave spectrum determined from metocean data for the intended operating locations.
If a site specific wave spectrum is not available, the JONSWAP wave spectrum can be used for the North
Sea and operating locations with limited fetch area. The JONSWAP wave spectrum can be expressed as:
ag2 4
S ω = exp −β ωp /ω γa
ω5
where
α = 0.0081
β = 5/4
σ = 0 . 07 ifω ≤ ωp
0 . 09 ifω > ωp
For open seas, Bretschneider spectrum can be used and the spectrum is given by:
5ωp4H2
s 4
Sς ω = exp −1 . 25 ωp /ω
16ω5
where
3.5 Current
The current velocity is to include components due to tidal current, storm surge current, and wind driven
current. The Owner of the DP vessel may specify the current speed determined from metocean data for the
intended operating locations.
For a MODU, the current profile needs to be provided for the calculation of current load on risers if
deemed important, especially for those geographic areas where current force can be the governing design
load.
For a SKP(a,b,c,d,e,f) notation for particular locations, for example the Gulf of Mexico, the site specific
information for current speed, non-exceedance probability of wind speed (wave height) and relationship
between wind speed and wave height are to be provided. The site specific environmental conditions are to
be submitted for review.
TABLE 1
Relationship between Wind and Wave (North Sea)
0 0 0 0.0
Note: Significant wave height, peak period and wind speed are based on Table 3 of “Specification for DP Capability
Plot” by IMCA. The probabilities of non exceedance are based on BMT Global wave statistics.
For a MODU, the conditions for operation and standby need to be provided. In general, the 1-year
environmental condition may be used for the operational condition.
5 Analysis Conditions
The worst case failure condition is to be determined from the basic design of redundancy concept.
i) Normal operating condition. If a vessel is designed for operating at different loading conditions,
namely different drafts, these are to be included in the station keeping analysis.
ii) Standby condition where applicable.
11 Available Thrust
For thrusters with controllable pitch propellers as well as with hydraulically driven prime movers, full
power is to be available at any inflow velocity.
Electric drives typically have a certain RPM range in which full power is available. The thruster propeller
is to be selected so that DP operations fall within this range. The selection of the propeller pitch should
consider this range for optimum system efficiency.
If no test results are available for the thrust output of thrusters, Appendix 1 of this Guide provides the
guidelines for determining available thrust, which deals with typical thrusters and installation scenarios for
DP vessels. Those guidelines may be used for preliminary studies.
This interaction effect is to be included in the station keeping performance assessment. The results from
full scale or suitable model test for the thrust-thrust interaction effect are to be used whenever possible. If
no such results are available, Appendix 1 of this Guide can be used as guidelines for the assessment of the
interaction effect on the available thrust.
i) Friction. The flow of the slipstream along the hull will result in the thrust degradation due the
friction of the hull. The degradation is related to the length and breadth of the flow along the hull.
ii) Coanda Effect. When a thruster is oriented in a transverse direction, the output thrust of the
thruster is affected by a so called Coanda effect. The reduction of the thrust is related to the bilge
radius and the length of the flow underneath the hull.
iii) Pontoon Blockage. The blockage of the slipstream due to presence of the pontoon, such as when a
slipstream is orientated toward the pontoon, will affect the thrust output of the thruster. The effect
is related to the distance between the pontoons and the azimuth of the thruster.
iv) Tilted Thruster/Nozzle. A tilted thruster/nozzle can reduce above mentioned thruster-hull
interactions and hence to improve the output of the thrust of the thrusters. This improvement can
be considered in the station keeping performance analysis.
The full scale or model test results for the effects of thruster-hull interactions mentioned above and the
tilted thruster/nozzle are to be used whenever possible. If such results are not available, Appendix 1 of this
Guide can be used as guidelines for the assessment of the interaction effect on the available thrust.
used whenever possible. It such data is not available, Appendix 1 of this Guide can be used as guidelines
for the assessment of the effiency of the tunnel thrusters.
13 Rudder Forces
For vessels with conventional propulsion arrangements, the propeller jet and its interaction with the rudder
can be used to develop transverse forces in the stern of the vessel in lieu of thrusters during dynamic
positioning operations. When this approach is used, the following considerations are to be addressed:
i) Control over propeller thrust from zero to full power is required. This requires the installation of a
controllable pitch propeller for diesel engine driven systems.
ii) Only twin-screw propulsion systems are to be considered for generating transverse rudder forces.
With most rudders (exception: some steerable nozzle designs), the generation of transverse force
simultaneously generates an unwanted force in the ahead direction. This parasitic thrust is to be
compensated by thrust delivered in the astern direction by operating the second propeller (or by
other azimuth thrusters, if available).
iii) The use of conventional rudders for DP yields to very limited side forces. High-performance
rudders or steerable nozzles are preferred for DP applications.
Manufacturer’s test data of full scale or suitable model test for the rudder forces are to be used whenever
possible. If such data is not available, Appendix 2 of this Guide can be used as guidelines for the
assessment of the rudder forces.
15 SKP Calculations
The calculations for SKP are based on the balance of horizontal forces and yaw moment while the vessel
is maintaining both position and heading. Those forces and moment include all forces and yaw moment
resulted from thrusters, wind, waves, current and other external forces where applicable.
Where the vessel has been subject to alteration or addition, which may affect the station keeping
characteristics of the DP system, the SKP is to be recalculated.
iii) Capability calculation for 10-degree interval of headings between 0 to 360 degrees
iv) The SKP numbers are the weighted sum of all heading results.
v) If no heading probabilities are specified, equal probability for all headings can be used.
17 Documentation
Where the DP system is to be supplemented with a station keeping capability notation, the following
information is to be submitted for assignment of a SKP.
Station keeping performance assessment is also to be performed for intact and post worst case
failure conditions.
Satellite and acoustics are two types of position reference systems that are suitable for deep water
operation. The update rate of acoustics and the impact of possible obstructions for the satellite systems are
to be considered when deciding the suitability of the position reference system.
Enhanced DP control system (EHS-C), includes additional requirements for position reference systems
with enhanced availability and reliability, see Section 8 for more information.
Risks associated with technical faults and inadvertent spurious operation after inadvertent operations of the
emergency shutdown system are to be considered. Each vessel is to develop a detailed plan for recovery
and restoration of operation after operation of each level of ESD.
ESD Stations that can enable a total unit shutdown are not to be located in locations which are unmanned
under normal operations except in the backup DP Control Station, if provided. Where ESD stations are
provided at the lifeboat stations or other unmanned locations, the total unit ESD (complete shutdown) is to
be protected from unauthorized personnel or not available at these unmanned locations.
The operational impact of working in suitable water depth is to be considered in terms of required safe
disconnecting time and the feasibility of the equipment and procedures is to be studied.
Planned maintenance is to address all equipment that has an impact on the vessel’s station keeping
capabilities. This is to include indirect components such as generator circuit breakers, bus tie breakers, etc.
Records of planned and unplanned maintenance are to be kept in an auditable format, either hard copy or
appropriate electronic format. These records are to include vendor service records as well as maintenance
performed by vessel personnel. These records are to be kept onboard for the period specified by the Owner,
and they are to be available for review by the Surveyor during periodic surveys of the vessel to maintain
the DPS related notation.
i) Drilling system
ii) Emergency shutdown system
iii) Safe Disconnection of risers
iv) Lower Marine Riser Package (LMRP)
Detailed procedures are to be developed for operating ESD and EDS. Procedures are to highlight criteria
for initiation and consequences. The MODU’s DP operating manual is to clearly identify where this
information can be found if not included in the manual.
The MTS publication “DP Operations Guidance, Part 2, Appendix 1 (DP MODU)” can be followed for the
development of the DP Operations Manual.
When carrying out industrial missions, the availability of the suitable DP mode is to be verified.
Validation testing is to be carried out to demonstrate that the common point introduced by the closing of
the bus ties does not provide a fault propagation pathway and equipment related to DP Station keeping
(including auxiliary systems and supporting systems) demonstrate voltage dip fault ride through capability.
For project/construction DP vessels, redundancy of the relative reference systems is to be considered when
carrying out activities close to other structures and the loss of the relative reference system is to be
included in the FMEA.
Satellite and acoustics are two types of position reference systems that are suitable for deep water
operation. The update rate of acoustics and the impact of possible obstructions on the satellite systems are
to be considered when deciding the suitability of the position reference system.
5.9 FMEA
In addition to the DP system, the Overall Vessel FMEA for a DP project/construction vessel is to take
account of non DP and auxiliary systems, if applicable, that have interfaces with and potential impact on
DP and station keeping.
An Activity Specific Operation Guideline (ASOG) is to be developed for each activity undertaken by the
vessel and be referenced in the DP Operations Manual.
The MTS publication, “DP Operations Guidance, Part 2, Appendix 2 (Project and Construction Vessels)”,
can be followed for the development of the DP Operations Manual.
7 Logistics Vessels
Validation testing is to be carried out to demonstrate that the common point introduced by the closing of
the bus ties does not provide a fault propagation pathway and equipment related to DP Station keeping
(including auxiliary systems and supporting systems) demonstrate voltage dip fault ride through capability.
9.1 General
The requirements of this subsection apply to the application of dynamic positioning notations as offered in
this Guide (refer to Subsection 1/3) for Articulated Tug-Barge (ATB) combinations that comply with
Section 5-3-1 of the Rules for Building and Classing Steel Barges. The requirements of this Guide are to
be applied except as modified herein. The barge and associated towing vessel are considered dependent
upon each other to satisfy the dynamic positioning requirements when the two vessels operate as a
combined unit in DPS mode. To apply the DPS notations as outlined in this Guide, the towing vessel is to
be ABS classed and assigned the Towing Vessel ATB notation and the barge is to be ABS classed and
assigned the ATB notation as per Section 5-3-1 of the Rules for Building and Classing Steel Barges.
Example notations for both the barge and associated towing vessel:
Dynamic positioning systems built and tested in compliance with the requirements in this Guide and
relevant Rules may be assigned with different classification notations depending on the degree of
redundancy built into the system as defined in Subsection 1/3 of this Guide. These notations are not a
requirement for classification of the ATB and are to be assigned only on the specific request of the Owner.
Where dynamic positioning is requested, both the barge and the associated towing vessel as part of the
ATB combination are to receive the same selected DPS notation (refer to Subsection 1/3). In addition to
the notations, the following comments will be maintained in the ABS Record for both the barge and
associated towing vessel in compliance with this Guide:
“Classed to operate in DPS mode as an ATB with the associated barge(s) (Vessel Name(s) and Class
Number(s))”.
● Barge ATB:
“Classed to operate in DPS mode as an ATB with the associated towing vessel(s) (Vessel Name(s) and
Class Number(s))”.
In cases where either the towing vessel or barge request a DPS notation as an independent vessel in
addition to an ATB combination, documentation and testing is to be conducted for both modes of DP
operations. The proposed separate DP modes of operation are to be outlined in the DP Operations Manual
(Subsection (2/13). The above record comments are to reflect the separate independent and dependent ATB
combinations as applicable.
Where changes are made to the ATB combination for dynamic positioning operations, the owner is to
notify ABS. Multiple vessel combinations may be permitted with each combination configuration
approved and recorded.
9.1.1 Documentation
The following documentation is to be submitted in addition to that required in Subsection 1/7 of
this Guide.
9.1.3 Alternatives
Equipment, components, and systems for which there are specific requirements in this Guide, or
its associated references, may incorporate alternative arrangements or comply with the
requirements of alternative recognized standards, in lieu of the requirements in this Guide. This is
subject to such alternative arrangements or standards being determined by ABS as being not less
effective than the overall safety and strength requirements of this Guide or associated references.
Where applicable, requirements may be imposed by ABS in addition to those contained in the
alternative arrangements or standards so that the intent of this Guide is met. In all cases, the
equipment, component or system is subject to design review, survey during construction, tests and
trials, as applicable, by ABS for purposes of verification of its compliance with the alternative
arrangements or standards.
iii) Installation
Cable installations between the barge and associated towing vessel is to meet the cable
installation requirements of 4-8-4/21 of the Rules for Building and Classing Marine
Vessels.
Cables are to be installed and supported so as to avoid chafing and undue stress in the
cable. Cable supports and associated accessories are to be robust and are to be of
materials that are corrosion-resistant or suitably treated to resist corrosion and arranged so
that flexure of the cable from the movements between the towing vessel and the barge is
kept to a minimum. Cable installation and arrangement details between the barge and
associated towing vessel are to be submitted.
Alarm, monitoring and instrumentation for systems fitted on the barge are to be provided on board
the barge in a centralized control room and provided at the main DP control station on board the
associated towing vessel. Instrumentation and controllers associated with the barge machinery are
also to be provided at the main DP control station, as required by this guide (refer to 2/7 Table 2)
and in accordance with Table 1 of this section as applicable.
Where power is supplied to the barge from the associated towing vessel for DP operations, the
alarms, displays, and controls as reflected in Table 1 may be reduced. Items A1-A6, B1-B4, and
D1-D2 are to be maintained at the main DP control station, as applicable.
TABLE 1
Instrumentation and Controllers at the Main DP Control Station
Notes
[A = Alarm; D = Display;
System Monitored/ Controlled Parameter A D C
C = Controller/Actuator]
[x = Applies]
System Monitoring A1 System power supply main and x x Applicable to main and
secondary feeders: failure, status, and secondary power sources
transfer
C2 Generator running x
C4 Current - high x x
Notes
[A = Alarm; D = Display;
System Monitored/ Controlled Parameter A D C
C = Controller/Actuator]
[x = Applies]
D2 UPS fault x
Diesel Lubricating F1 Bearng oil inlet pressure - low x x Automatic shutdown with
Engine oil alarm at low-low
9.2.3 Automation
The control, alarms, and monitoring associated with machinery fitted on the barge and associated
towing vessel are to be accordance with Chapter 4-9 of the Rules for Building and Classing
Marine Vessels, as applicable.
Separate from the DPS FMEA (DPS-2/DPS-3), an overall ATB combination FMEA is to be
conducted where DPS control integration may have an impact on essential services and safety
functions on either the tug or barge. An overall ATB combination FMEA is to be carried out as per
Section 4-9-4 of the Rules for Building and Classing Marine Vessels. The FMEA is to demonstrate
that the integrated system will ‘fail-safe’, and that essential services in operation will not be lost or
degraded.
Risks associated with technical faults and inadvertent operations of the emergency shutdown
system are to be considered. Each vessel is to develop a detailed plan for recovery and restoration
of operation after operation of each level of ESD.
ESD Stations that can enable a total vessel shutdown are not to be located in locations which are
unmanned under normal operations except in the backup DP Control Station, if provided. Where
ESD stations are provided at unmanned locations, the total unit ESD (complete shutdown) is to be
protected from unauthorized personnel or not be available at these unmanned locations.
The articulated coupling systems may allow for vertical movement within the notch without
completely disconnecting the two vessels during cargo transfer operations and station keeping
operations. Consideration may also be given to operational methods and ballasting procedures
proposed as an alternative for limiting the vertical loads imposed by the connection. These
procedures are to be included in the DP operations manual and maintained on both the towing
vessel and barge.
In association with 10/9.3.6 of this Guide, where the barge is issued an unmanned service load
line, the DP Operations Manual is to reflect the barge is to operate with a freeboard not less than
the calculated freeboard as a manned vessel.
The DP operations manual is to be kept onboard both the tug and barge, and they are to be
available for review by the Surveyor during periodic surveys of the vessel to maintain the
associated DPS notation.
Planned maintenance is to address all equipment that has an impact on the vessel’s station keeping
capabilities. This is to include indirect components such as generator circuit breakers, bus-tie
circuit breakers, and other power distribution and control equipment associated with the DPS.
Maintenance is to include regular cleaning, calibration, and testing of equipment as outlined in
manufacturers’ recommendations and industry guidelines.
Records of planned and unplanned maintenance are to be kept in an auditable format, either hard
copy or appropriate electronic format. These records are to include vendor service records as well
as maintenance performed by vessel personnel. These records are to be kept onboard both the tug
and barge, and they are to be available for review by the Surveyor during periodic surveys of the
vessel to maintain the associated DPS notation.
9.3 Barge
9.3.1 Bilge Level Monitoring
Where a machinery space is located below main deck, means to detect excessive rise of bilge
water in the bilges or bilge wells is to be provided and alarmed (refer to 10/ 9.2.2 Table 1). The
arrangements including the number of sensors and locations are to be such that accumulation of
bilge water may be detected at the various angles of barge’s heel and trim.
9.3.4 Lighting
Enclosed spaces associated with DP operations are to be provided with lighting and provided with
backup power supply for a period of at least 90 minutes.
The level of manning required for the tug and barge falls outside the scope of Class and is to be
determined by the Flag Administration.
i) Survival Craft (Refer to 3-5-3/3 of the Rules for Building and Classing Steel Barges)
ii) Personal Life-Saving Appliances (Refer to 3-5-3/9 of the Rules for Building and Classing
Steel Barges)
The level of manning required for the barge and associated towing vessel are outside the scope of
Class and is to be determined by the Flag Administration. Exemptions granted by or instructions
received from the Flag Administration based on the operation distance from shore and number of
persons on board and other emergency procedures will be considered by ABS.
9.4 Surveys
9.4.1 General
The provisions in this Section are requirements for obtaining and maintenance of classification of
DPS notations (Refer to 10/9.1). These requirements are in addition to the provisions noted in
Section 7 of this guide. See the ABS Rules for Survey After Construction (Part 7) for further
detailed requirements.
Both the barge and associated towing vessel are to be connected to demonstrate compliance. In
cases where either the towing vessel or barge request a DPS notation as an independent vessel in
addition to an ATB combination, the independent vessel is to demonstrate compliance in addition
to demonstrating compliance an ATB combination.
The barge and associated towing vessel is to be operated to demonstrate that the automatic and
remote control systems have been maintained properly and are in good working order. The
operational testing is to be carried out to the Surveyor’s satisfaction.
Records of planned and unplanned maintenance are to be kept in an auditable format, either hard
copy orappropriate electronic format. These records are to include vendor service records as well
as maintenance performed by vessel personnel. These records are to be kept onboard for the
period specified by the Owner, and are to be available for review by the Surveyor during periodic
surveys of the vessel to maintain the DPS related notation.
9.4.4 Documentation
The following documents are to be confirmed onboard the barge and associated towing vessel as
applicable:
1 Introduction
Software is one of the essential components in a computer-based DP system that DP vessels heavily rely
on. For DPS-2 and DPS-3 notations, although FMEA and proving sea trial are required for the
verification of the DP control system and DP power management system, the scope of the testing and
verification of the software for the systems are very limited.
The ABS Guide for Integrated Software Quality Management (ISQM) provides criteria for higher level
requirements on the verification of the software.
®
The ABS Guide for Software Systems Verification - ABS CyberSafety Volume 4 (SSV Guide) provides
criteria on the verification of Systems. The criteria provided covers verification of the hardware and logic,
including software.
Compliance with the procedures and criteria given in these Guides may result in the granting of the
optional notations that signify the software functionality for the system.
An Owner interested in seeking these notations can refer to the mentioned two Guides for detailed
requirements. This Section provides a brief introduction about the application of the mentioned Guides for
DP systems.
The ISQM process is applicable to any system that relies on software. The scope of the ISQM varies with
the complexity of the system. It is most beneficial for an integrated system since difficulties can arise in
the interfaces and during the integrations.
The scope of the ISQM for the DP system includes the DP control system, DP power system, thruster
control system and necessary auxiliaries if operated through software.
Upon verification of compliance with the requirements indicated in the Guide, the classification notation
ISQM may be assigned to selected systems.
1 General
This Appendix provides guidelines for the determination of the thrust generated by various types of
thrusters ( A1/3 and A1/11). It also addresses the interactions of thrusters (thruster-thruster, thruster-hull,
thruster-current, A1/5, A1/7 and A1/9) which often result in a reduction of the available thrust.
The available thrust from this Appendix may be used for preliminary studies for the design of the DP
system. Manufacturer’s test data of full scale or suitable model test for the thrust output of thrusters are to
be used whenever possible for further verification.
For open propellers, the following equation can be used to calculate the available bollard pull thrust (the
units of measure are in SI (MKS and US) systems, respectively):
T 0 = K · (P · D)2/3
where
FIGURE 1
Open Propellers
For ducted propellers, the following equation can be used to calculate the available bollard pull thrust:
T 0 = K · (P · D)2/3
where
FIGURE 2
Ducted Propellers
5 Thruster-Thruster Interaction
The reduction of the thrust output due to thruster-thruster interaction may depend on the following
The following paragraphs describe the thrust reductions for two principal identical thruster configurations.
FIGURE 3
Thrusters Configuration in Tandem Condition
The thrust reduction ratio t defined below for the downstream thruster can be calculated as follows:
2
x/D 3
t = T/T0 = 1 − 0 . 75
where
FIGURE 4
Thrust Reduction of the Downstream Thruster in Open Water
FIGURE 5
Thrusters Configuration in Tandem Condition Turning the Upstream Thruster
The thrust reduction ratio t defined below for the downstream thruster considering steering angles of the
upstream thruster can be calculated as follows:
ϕ3
tϕ = t + 1 − t
130/t3 + ϕ3
where
FIGURE 6
Thrust Reduction of the Downstream Thruster Considering Steering Angles
of the Upstream Thruster
The forbidden zones can be calculated using a simple algorithm based on the thruster-thruster interaction
effect presented above. The range of the zones shown in A1/5.5 TABLE 1 depends on the distance between
the thrusters and their diameters, and it could be determined by the following method:
Td
ϕf is the angle which minimizes the value of tϕ · cos ϕ 0o < ϕ < 45o
where
FIGURE 7
Range of Forbidden Zone
TABLE 1
Range of Forbidden Zone for Different x/D
1 30 6 17.8 11 14.2
3 22.8 8 16 13 13.3
4 20.6 9 15.3 14 13
5 19 10 14.7 15 12.6
In A1/5.5 FIGURE 7 and A1/5.5 TABLE 1, x is the distance between the two thrusters and D is thruster
diameter.
7 Thruster-Hull Interaction
This Subsection provides the methods for the calculation of thrust degradation due to thruster-hull
interaction. Consideration of thruster tilt is also provided.
7.1 Friction
Thrust degradation due to hull friction is related to the length and breadth of the downstream flow along
the hull. The graph below can be used for the assessment of the thrust reduction ratio tf due to the hull
friction.
FIGURE 8
Thrust Reduction Ratio due to Hull Friction
where
K = 1 (0.305)
For the tilt angle range from 0 to 8 degrees, the following equation can be applied to determine the
improvement of thrust reduction ratio:
t h = tf · tc · tp + (1 – tf · tc · tp) · C
where
FIGURE 9
Correction Factor, C, as the Function of the Tilt Angle of the Propeller Shaft
9 Thruster-Current Interaction
Current inflow may reduce thrust output of the thrusters and the reduction of the thrust can be calculated
using the graphs or equations given below for ducted or open propellers at current speeds between 0 - 2
m/s.
FIGURE 10
Thrust Ratio for Ducted Propellers
For ducted propellers with current speed ranges from 0 to 2 m/s, the following equation can be applied:
EFC = 1 – (K1/PA)0.25 · K2 · VC
where
FIGURE 11
Thrust Ratio for Open Propellers
For open propellers with current speed in the range from 0 to 2 m/s, the following equation can be applied:
EFC = 1 – (K1/PA)0.28 · K2 · VC
where
K1 = 10 (136, 1.25)
11 Tunnel Thrusters
The available thrust generated by a tunnel thruster is highly affected by the tunnel installation, location,
and the geometry and configuration of the hull. The assessment of the tunnel thruster performance is to be
based on axial flow pump hydrodynamics, not on marine propeller theories. If no data are available, the
available thrust of a tunnel thruster can be estimated according to the following procedure which is based
on axial flow pump theory adapted to the specific conditions of tunnel thrusters.
FIGURE 12
Dimensions of Transverse Tunnel Thrusters (1 November 2013)
T = 3 ρ · π · K · P · ηp · DT 2
TL
where
= P mot · ηTG
= 0.95
= 0.8
TL = 1.65 for tunnels of average length, no grids, hull angle δ = 70 degrees, and conical tunnel entries
FIGURE 13
Tunnel Configuration
R = CF · A · LT/DT
where
CF = coefficient of friction assuming exposed weld seams and minor marine growth on surfaces
= 0.05
A = factor for the increased velocity inside the tunnel due to the thruster gear housing
This applies to tunnels equipped with protective bars (grids) at the openings.
where
FIGURE 14
Protective Bars Cross Section
where
TL = 1 + E + V + R + G + H
11.3.2 Available Thrust (1 November 2013)
For tunnel thrusters, the following equations can be used to calculate the available thrust:
T = 3 ρ · π · K · P · ηp · DT 2
TL
where
= P mot · ηTG
= 0.95
= 0.8
For vessels with conventional propulsion arrangements, the propeller jet and its interaction with the rudder
can be used to develop transverse forces in the stern of the vessel in lieu of thrusters during dynamic
positioning operations.
The following graphs can be used for the estimate of achievable rudder forces in transverse and
longitudinal (ahead) direction for rudder with different nozzle configurations. Manufacturer’s test data of
full scale or suitable model test for the rudder forces are to be used whenever possible for further
verification.
FIGURE 1
High-performance Rudder
FIGURE 2
Steerable Nozzle with Flap
FIGURE 3
Steerable Nozzle with Fixed Fin
FIGURE 4
Conventional Rudder
DPO: DP Operator
KW: Kilowatt
OB: Onboard
3 References
ABS Rules for Building and Classing Mobile Offshore Units (MOU Rules)
ABS Guide for Direct Current (DC) Power Distribution Systems for Marine and Offshore Applications
ABS Guide for Use of Lithium Batteries in the Marine and Offshore Industries (Lithium Battery Guide)
ABS Guide for Use of Supercapacitors in the Marine and Offshore Industries (Supercapacitor Guide)
IMO 2000 HSC Code, International Code of Safety for High-Speed Craft, 2008 Edition
IMO 2009 MODU Code, Code for the Constriction and Equipment of Mobile Offshore Drilling Units,
2020 Edition
IMCA M 103 Rev I, Guidelines for Design and Operation of Dynamically Positioned Vessels, 2007
IMCA M 04/04, Methods of Establishing Safety and Reliability of Dynamic Positioning Systems, 2004
IMCA M 247, Guidance to Identify DP System Components and their Failure Modes
IEC 60812, Analysis techniques for system reliability - Procedure for Failure Mode and Effects Analysis
(FMEA), 2006
MTS, Technical and Operational Guidance (TECHOP) TECHOP_ODP_9_(D) (A Method for The Fault
Ride-Through Capability of DP Vessels with HV Power Plant) May 2015
API RP 2SK, Recommended Practice for Design and Analysis of Stationkeeping Systems for Floating
Structures, 2008
OCIMF, Dynamic Positioning Failure Mode Effects Analysis Assurance Framework Risk-based Guidance,
First edition 2020
1 Introduction
This Appendix provides DP operations guidance for the safe and effective conduct and management of DP
operations. The guidance is based on the DP Operation Guidance by the Marine Technology Society's
(MTS) DP Technical Committee.
Part 1 contains guidance on the management of DP systems for the identified DP themes.
Part 1 of the DP Operation Guidance addresses the DP themes that, if managed effectively, will contribute
to safe and efficient DP operations. Fourteen important DP operation themes have been identified in Part 1.
Part 2 provides operational guidance in detail on the themes identified in Part 1.
The intent of this Appendix is to present the fourteen identified DP themes and brief discussion on the
themes for the safe and efficient DP operations. Users are recommended to peruse DP Operation Guidance
for details. The DP Operation Guidance provides recommended DP documentation that is to be kept on
board and, where feasible, at the shore-based centers of technical management. The list of the recommend
documents is included in the Appendix 4/5 of this Guide.
3 Themes
3.1 DP Class
DP systems have been grouped into three equipment classes in IMO MSC.1/Circ.1580 and IMO MSC Circ
645, namely DP class 1, DP class 2 and DP class 3, based on the level of redundancy of the components
and systems. Selection of DP equipment class is mainly driven by the intended operations of the DP
vessels. For most operations, DP class 2 notations are recommended. For some operations, such as ROV
support, seismic and survey in open water condition, logistics operations, vessels of lower DP equipment
class notations may be used. The fundamental principal of selecting DP class is to be based on a proper
risk assessment of the operations.
3.2 DP FMEA
The DP vessel’s DP FMEA is the most important technical document and is a requirement to obtain DP
class 2 and 3 notations. The development of the FMEA is to be carried out according to the rules/Guides of
the vessel’s Classification Society. The FMEA is also to comply with the IMO Guidelines and achieve the
standards of detail and analysis of industry guidance, such as related publications by IMCA and OCIMF.
Specific attention is drawn to the Dynamic Positioning Failure Mode Effects Analysis Assurance
Framework Risk Based Guidance (First Edition 2020) published by OCIMF.
Key DP personnel, including the vessel Master, DPOs, Engineers and Electricians are to have a detailed
knowledge of the DP FMEA and are to use the information provided to be fully informed about the
capabilities and limitations of the vessel’s DP system.
The results from a DP FMEA, in particular issues related to the vessel’s worst-case failure and significant
single point failures, are to be used in the formulation of operational, emergency response and planning
decisions.
DP Capability Plots may have to be recalculated from time to time during the lifetime of a DP vessel to
account for the changes of the vessel’s conditions, such as changes of onboard equipment and vessel
structures that could affect the environment loads on the vessel or thrust output.
DPOs are to be fully familiar with the limits given in the DP Capability Plots for the fully intact thruster
configuration, for loss of most effective thruster and for worst case failure.
The DP footprint plots are also to be produced on board. The footprint plots are actual measurements of the
vessel’s DP station keeping performance in the actual environmental conditions and thruster configuration
at the time the plot was taken. DP footprint plots obtained in harsh environment conditions, can provide a
better understanding of the vessel’s actual station keeping performance and limitations. The DP Operation
Guidance Part 2 provides details on how to generate DP footprint plots.
Owners/ operators are to consider the advantages using higher numbers of and more reliable position
reference systems for the benefit in operational uptime and improved station keeping performance. The DP
Operation Guidance Part 2 and the MTS DP Committee TECHOP_ODP_14_(D) PRS and DPCS
Handling of PRS (Sept 2017) provides detailed guidance and recommendations on absolute and relative
position reference systems for various operations of DP vessels.
The following control modes are examples relevant to specific DP activities and they are not to be used for
other operations without a detailed understanding of the impacts on station keeping and consequences of a
loss of position:
i) Target Follow: appliable to riser pull in and lifting, ROV support, shuttler offtake, accommodation
support (Note: There are a number of variations on Target Follow and the specificity of the
relative position station keeping demands drives the functional requirements)
ii) Heavy Lift: applicable to lifting
iii) External Force Compensation: applicable to pipelay, riser pull in and lifting,
iv) Weathervane: appliable to shuttle offtake, floating production unit.
The DP Operation Guidance Part 2 provides detailed guidance notes on the listed trails and checklists for
different DP operations.
The manual is to contain sufficiently detailed instruction and guidance to enable the vessel to be operated
safely in DP and safely execute its intended activities. This will include a clear statement on the DP
philosophy for the vessel, the organization, responsibilities and roles of key DP personnel, training, and
competency, watchkeeping and manning, vessel technical data and layout, vessel DP capabilities, operating
limits, operating modes, the planning and preparation of DP operations, DP operating procedures,
emergency procedures, DP incident handling and alert systems and vessel specific trials and checklists that
apply uniquely to the vessel.
The manual is to specifically address operational interfaces between different vendor systems and
equipment to confirm that they are configured and operated properly. This is to include interfaces between
systems and equipment that are not part of the DP system, but which may affect the DP system, such as
Emergency Disconnect Systems (EDS) on MODUs, tensioner systems on Pipe lay vessels, etc.
The vessel specific manual may also contain generic content, such as company policies, procedures and
standing orders.
The manual is to represent the way the vessel is operated in DP. For complicated power systems and/ or
thruster configurations, it may be useful provide the operator with a thruster and generator operating
strategy (TAGOS) to assist in the decision on what generators and thrusters to use for different
circumstances and different equipment availabilities.
The DP Operation Guidance Part 2includes very details guidance on the development of the vessel
specific DP operations manual with four sections (vessel/rig specific):
● Configuration for the Critical Activity Mode (CAM) (Sometimes also referred to as the Safest Mode
of Operation (SMO)) or, where appropriate, the Task Appropriate Mode (TAM).
● Preparation of the Activity Specific Operating Guidelines (ASOG), including onboard discussion with
all relevant stakeholders as part of the pre-project execution/ activity.
● Discussion to be included in pre-project execution readiness checklist.
● Capabilities of the vessel, both intact and residual capability, following Worst Case Failure (WCF).
● Limitations imposed by water depth.
● Consequences of a loss of position and/ or heading.
● Limitations imposed upon operations by residual capability.
● SIMOPS and marine vessel interaction and consequences arising from change of status (Green to
Blue, Yellow or Red).
● The activity being performed and the necessary time to terminate to bring vessel to a safe position
upon the onset of failure.
● Communication and Notification Protocols.
Activities are to include day to day operations, any specific operation relevant to the design of the vessel,
as well as any unique operations the vessel is called upon to perform.
Appropriate measures are to be in place to clearly identify critical tasks/ operational phases of the activity
and to confirm that the vessel is set up in Safest Mode of Operation and operating within post WCF
capability. Where a decision has been made to operate in a TAM a separate ASOG covering TAM is to be
produced.
3.9 Communications
The vessel is to be equipped with the appropriate primary and secondary equipment needed to
communicate between all parties (stakeholders) whilst carrying out the intended task.
Communications in this context include voice, visual (lights/ displays) and audible means (alarms). Means
of communication are not limited to the above but include integrated IT systems using wireless network
technology that combine communications with other features, including AIS and DGNSS.
Operational specific visual and voice communications are to permit pertinent information flows between
the key operating points as well as to and from assets and/ or other vessels that might be affected by the
operation being carried out.
These operating points may be on board the vessel as well as on other facilities involved with the activity.
Communication protocols are to be set up to provide pertinent information regarding intent, current status
of planned as well as unexpected events during the execution of the activity.
Communications are to be considered when detailing the roles and responsibilities of key personnel during
the planning stages for the intended task, ensuring that a common working language and terminology is
used at all times.
Planned maintenance is to address all equipment that has an impact on the vessel’s station keeping
capabilities. This is to include indirect components such as generator circuit breakers, bus tie breakers, etc.
Maintenance is to include regular cleaning, calibration, and testing of equipment as outlined in
manufacturer’s recommendations and industry guidelines.
Records of planned and unplanned maintenance are to be kept in an auditable format, either hard copy or
appropriate electronic format. These records are to include vendor service records as well as maintenance
performed by vessel personnel. These records are to be kept on board for the period specified by the
owner/ operator.
A minimum number of required critical DP spares are to be maintained on board. The critical spare
inventory is to be monitored via a formal inventory program that is closely linked to the planned
maintenance system. This is to assist in getting back to normal operating condition after equipment failure
or DP incident.
3.11 DP Incidents
DP vessels are to be provided with and operate appropriate DP incident reporting, investigation and
closing out procedures. This is to be in accordance with vessel owner or operators’ and, if applicable,
clients’ processes. Documented records are to be kept and be capable of auditing.
Where CAM/SMO, TAM and ASOG are used as tools to manage DP operations a suggested approach is
that, apart from the exceptions in the notes below, any reactive change of DP status from GREEN to
YELLOW or RED is to be regarded as a DP incident, and is to be reported, recorded and investigated.
It is recommended that reactive YELLOW and RED DP incidents are investigated as soon as practicable
after the DP incident and, where relevant, trials are carried out as part of the investigation process.
In the event of the occurrence of a DP incident relating to the vessel’s configuration as described in the DP
FMEA and other documents, it is suggested that the FMEA provider is involved in the incident
investigation. This will facilitate lessons learnt to be implemented into the DP FMEA and proving trials
program.
Note: The TECHOP_GEN_03 “Conducting Effective and Comprehensive DP Incident Investigations” 2017 provides
valuable guidance on the conduct of DP Incident Investigations.
There is to be a clear line of reporting DP related items onboard the DP vessel and between each
department and this is to involve key DP personnel. There is also to be a clear line of reporting between the
DP vessel and the company’s shoreside management. DP related records are to be maintained onboard and,
where appropriate, at the company’s premises.
The recommended onboard documents in Appendix 4/5 of this Guide are to be accessible to key DP
personnel and to other interested parties.
DP vessels, on occasion, carry out activities which may be unique to project requirements. Records of
these activities including pertinent information from Hazards and Risk Identification (HIRAs) are to be
made and kept onboard for future reference, both for training and familiarization processes as well as for
reference in case of similar project requirements in the future.
3.13 Competence
DP vessel owners/ operators are to operate a structured competence assurance program that is applied to all
key DP personnel (including shore-based personnel) with special focus on ensuring vessel and task
specific competence.
● Operational modes
● DP FMEA familiarization
● DP Operations Manual familiarization
● Project/ activity requirements
● Contingency plans, modes and drills
● Comprehension and Adherence to the ASOG/WSOG
DPO certification is only one part of the competency assurance process for DPOs. Such certification is
not to be construed as validation of competency.
Owners / operators are recommended to refer to further formal training programs described in IMCA
M117 “The Training and Experience of Key DP Personnel”, comprising the following main features
for electrical and engineering officers, where appropriate.
● High voltage (HV) training
● Power management system (PMS) training
● Fire and gas detection and emergency shutdowns (ESD) training
● DP control system manufacturer’s maintenance training.
M117 also provides guidance on structured onboard familiarization programs for key DP personnel,
covering the steps to take to achieve, maintain and enhance competency in DP operations.
Owners/ operators may consider implementing the IMCA Competence Assurance & Assessment scheme
(IMCA C002 Rev 1, 2003) which provides detailed programs for achieving and assessing the competency
of key DP personnel, including vessel masters, DPOs, chief engineers and engineers in charge of a watch.
3.14 Manning
Vessels are to comply with the statutory requirements for safe manning. Additionally, for DP operations,
manning is to be in accordance with the following.
DP Bridge Crew
When undertaking critical activities in proximity to surface or sub surface structures, two (2) unlimited
DPOs on the bridge capable of operating the vessel both in DP and manual control. Unlimited DPO with a
minimum of 3-year experience on a vessel engaged in similar operations, at least 6 months of which is to
have been on the subject or sister vessel. Experience level is to be documented and auditable.
Note: Client’s may have specific stipulations on whether the Master could be included or excluded to meet the minimum
DP console/Bridge manning requirement.
Engineers
There are to be sufficient licensed engineers on board for all expected operations.
At least one licensed engineer is to be available at all times, is to be on watch during critical activities and
is to have at least 6 months experience on similar equipment and operations.
The engineer is to be fully cognizant of DP operations, familiar with the vessel’s DP FMEA document and
the effects of failures of equipment relating to the position keeping of the vessel.
If required on board, an electrician is to have appropriate high voltage training/ certification, if applicable
to the vessel. As with vessel engineers, the electrician/ electrical engineer is to have at least 6 months
experience on similar equipment and operations.
The electrician is to be fully cognizant of DP operations, familiar with the vessel’s DP FMEA document
and the effects of failures of equipment relating to the position keeping of the vessel.
5 Recommended DP Documentation
It is recommended that DP vessel owners/ operators are to maintain the documentation listed below. The
documentation version is to be current and kept on board, in addition, where feasible, at the shore-based
centers of technical management. Documents that have been superseded are to be clearly marked and kept
separate from current versions.
xviii) Résumés of all key DP personnel, copies of certification and qualifications, records of DP
watchkeeping hours to be maintained on board. Original DPO certificates and DP Log Books to be
held by the DPOs onboard the vessel.