Health check for control networks
As the complexity of on-board control systems and networks increases, so naturallydoes the potential for operational disruption. DNV and owner CMM are developinga concept for testing the integrity of these often safety-critical systems.
In the summer of 2016, DNV teamed up with Innovative Greek owner Consolidated Marine Management (CMM) for a test on the health of a controland communication network on board seagoing vessels. The pilot project, conducted on one of CMM’s state-of-the-art chemical tankers, investigated exactly what it takes to undertake a successful test of a vessel’s communication and control systemsin order to strengthen their overall robustnessand resilience.
Any state-of-the-art vessel carries a multitude of IT and OT (operational technology) devices that are not only interconnected and communicate with each other but, more often than not, are also in near constant contact with the world beyond the ship, for example the internet, vendor offices and company headquarters.
Tracking down network issues
To give an example, on a cruise vessel the IT systems encompass all the hotel, entertainment and guest systems and servers, convenience features, wireless networks, television, telephony and all the supporting infrastructure, while the OT – or marine– domain covers the integrated bridge, navigational equipment, HVAC, power and engine management systems, to name but a few.
“On-board communication networks have become the ‘nervous system’ of vessels’ integrated machinery,” says Dr Mate J. Csorba, Principal Specialist, Marine Cybernetics Advisory, DNV – Maritime. “A growing share of disruptions and downtime in offshore operations can now be traced back to problems with networked equipment. Currently these are usually tackled by ad hoc troubleshooting, which makes the testing and verification of these increasingly complexand often safety-critical systems ever more important.”
The purpose of a network health test is to evaluate the performance and integrity of a communication system at a given point of time, (i. e. snapshotting), but most importantly to detect any failures present, including but not limited to capacity problems, failing communication devices and misconfigurations that can lead to off-hire. Control system communications on board vessels are very often made up of the same buildingblocks as land-based industrial controlsystems. However, some of the operational requirements are specific to the maritime environment and these need to be taken into account.
In the event that any issues are revealed, specific mitigating actions help to increase the overall robustness and resilience of the communication and control systems on board the vessel. If such an action is not possible, this is still very beneficial as those responsible for the system become fully aware of the real condition of the systems.
Comprehensive health assessment
The overall aim, therefore, is to obtain the capability to examine if there are any intermittent errors, and predict future failures such as any emerging network degradation, existing capacity or configuration problems, or other threats to the availability and integrity of the control system network being tested.
“We believe that with advanced technologybased assessments, our customers can reap significant savings. Having a comprehensive overview of the ‘health‘ of the network on board will allow owners to schedule preventive measures at convenient times, enable better maintenance planning and perhaps even result in an extended lifespan of ageingassets,” says Csorba.
The pilot project on board CMM’s vessel consisted of 46 tests covering Ethernet-based networks (control systems and auxiliary systems), CAN-busconnectivity (sensors and the alarm system) and a selection of DNV class rules addressing on-board communication networks. In practice this translated into a focus on the alarm monitoring system, the ballast water treatment system, the main engine shaft power and performance monitoring system, the main engine control and monitoring system, andauxiliary networks.
The testing was conducted mainly from the engine control room, the cargo control room andthe bridge. Active stress tests were used to verify whether the communication network is robust enough under specific failure scenarios, while passive measurements were employed to find indicationsof any potential problems and deviations from a system’s installation documentation.
Important first step
“CMM’s vessel is new with modern IT equipmentboth in software and hardware, built in 2015, and it proved to be in very good condition,” comments Nikolaos Kakalis,DNV Manager for R&D and Advisory Services South East Europe and Middle East. “The results did not indicate any discrepancies, and as such were considered as an initial snapshot of the health of the vessel’s communication systems. This ‘healthy’ snapshot can be used to quickly identify any changes or deviations and to aid troubleshooting if any issues are encountered with individual systemsin the future,” says Kakalis.
“This was an important first step, and we are very grateful for CMM’s excellent cooperation in this test, ”says Csorba. “Looking ahead in developing such concepts further, it is possible that we will be able to move to more extensive data collection by automatedon-board sensors, which report on system health between port stay and enable remote access procedures which could allow us to do system testsfrom shore in more or less real time.”
“For us at DNV, Greece is our third home market, after Germany and Norway,” says Nikolaos Kakalis. “And we are glad to introduce and co-develop advanced technology-based services with the Greek shipping community that will help our customers manage their risks in practice.”