Man iSea, Operating Instructions Manual, Page: 23 / 172

Functional safety
21
Read this manual carefully before starting any work!
This is particularly applicable to the chapter “General Safety Instructions”
and the respective safety instructions in the chapters.
3 Functional safety
The system’s behavior in typical operating situations was analyzed as part of a hazard and risk
assessment. The following assumptions and system scopes were taken as a basis:
Assumptions:
S
In a
multi-engine system
, the combustion engine is coupled directly to the shipʼs propeller via a closed
drive train
S
To change the direction of rotation of the ship's propeller, a reverse gearbox is installed, which is
controlled via the “MAN Intelligent Marine Safeguard System”
S
At the system interface, the transmitter (e.g. external drive lever control unit, ...) is responsible for the
content of the transmitted signals. This means that e.g. an external speed setpoint must be secured by
the transmitter control unit
S
Engine stop is permissible if no other controllable system reaction can be guaranteed due to the system
Safety targets
As a result, the following safety targets and associated safety conditions were defined for the system:
S
To prevent of unintentional acceleration, the safety condition was definied in each case the idling /
engine stop of the combustion engine.
S
To prevent of unintentional engagement or failing disengagement of the clutch, the safety condition for
disengaging of the gearbox or stopping of the combustion engine was definied in each case.
S
To prevent of unintentional switching to local driving, the safety condition was definied in each case the
idling / engine stop of the combustion engine. (ONLY for CLASS)
Prerequisite for the implementation of these safety targets is the design of the electrical interfaces by the
shipyard in accordance with the specifications in
S
these operating instructions
S
the interface definition
If the interface specifications are not observed, the safety targets stated for the operation of the “MAN
Intelligent Marine Safeguard System” and the engine electronics cannot be guaranteed