46 C.F.R. Subpart 62.35—Requirements for Specific Types of Automated Vital Systems
Title 46 - Shipping
(a) Minimum instrumentation, alarms, and safety controls required for specific types of automated vital systems are listed in Table 62.35–50. (b) Automatic propulsion systems, automated electric power management systems, and all associated subsystems and equipment must be capable of meeting load demands from standby to full system rated load, under steady state and maneuvering conditions, without need for manual adjustment or manipulation. (a) Manual propulsion control. All vessels having remote propulsion control from the navigating bridge, an ECC or maneuvering platform, or elsewhere must have a manual alternate propulsion control located at the equipment. Note: Separate local control locations may be provided for each independent propeller. (b) Centralized propulsion control equipment. Navigating bridge, ECC, maneuvering platform, and manual alternate control locations must include— (1) Control of the speed and direction of thrust for each independent propeller controlled; (2) A guarded manually actuated safety trip control (which stops the propelling machinery) for each independent propeller controlled; (3) Shaft speed and thrust direction indicators for each independent propeller controlled; (4) The means to pass propulsion orders required by §113.30–5 and §113.35–3 of this chapter; and (5) The means required by paragraph (d) of this section to achieve control location transfer and independence. (c) Main navigating bridge propulsion control. (1) Navigating bridge remote propulsion control must be performed by a single control device for each independent propeller. Control must include automatic performance of all associated services, and must not permit rate of movement of the control device to overload the propulsion machinery. (2) On vessels propelled by steam turbines, the navigation bridge primary control system must include safety limit controls for high and low boiler water levels and low steam pressure. Actuation of these limits must be alarmed on the navigating bridge and at the maneuvering platform or ECC. (3) On vessels propelled by internal combustion engines, an alarm must annunciate on the navigating bridge and at the maneuvering platform or ECC, if provided, to indicate starting capability less then 50% of that required by §62.35–35(a). If the primary remote control system provides automatic starting, the number of automatic consecutive attempts that fail to produce a start must be limited to reserve 50% of the required starting capability. (d) Control location transfer. Control location transfer must meet sections 41.19.3 and 41.19.4 of the American Bureau of Shipping's “Rules for Building and Classing Steel Vessels.” Manual alternate propulsion control locations must be capable of overriding and operating independent of all remote and automatic control locations. (e) Control system details. (1) Each operator control device must have a detent at the zero thrust position. (2) Propulsion machinery automatic safety trip control operation must only occur when continued operation could result in serious damage, complete breakdown, or explosion of the equipment. Other than the overrides mentioned in §62.25–10(a)(4) and temporary overrides located at the main navigating bridge control location, overrides of these safety trip controls are prohibited. Operation of permitted overrides must be alarmed at the navigating bridge and at the maneuvering platform or ECC, as applicable, and must be guarded against inadvertent operation. (3) Remote propulsion control systems must be failsafe by maintaining the preset (as is) speed and direction of thrust until local manual or alternate manual control is in operation, or the manual safety trip control operates. Failure must activate alarms on the navigating bridge and in the machinery spaces. [CGD 81–030, 53 FR 17838, May 18, 1988; 53 FR 19090, May 26, 1988] (a) Automatic bilge pumps must— (1) Be provided with bilge high level alarms that annunciate in the machinery spaces and at a manned control location and are independent of the pump controls; (2) Be monitored to detect excessive operation in a specified time period; and (3) Meet all applicable pollution control requirements. (b) Remote controls for flooding safety equipment must remain functional under flooding conditions to the extent required for the associated equipment by §56.50–50 and §56.50–95 of this chapter. (c) Remote bilge level sensors, where provided, must be located to detect flooding at an early stage and to provide redundant coverage. (a) All required fire pump remote control locations must include the controls necessary to charge the firemain and— (1) A firemain pressure indicator; or (2) A firemain low pressure alarm. (a) General. (1) All main boilers, regardless of intended mode of operation, must be provided with the automatic safety trip control system(s) of paragraphs (h)(1), (h)(2)(i), (h)(2) (ii), and (i) of this section to prevent unsafe conditions after light off. (2) Manual alternate control of boilers must be located at the boiler front. (3) A fully automatic main boiler must include— (i) Automatic combustion control; (ii) Programing control; (iii) Automatic feedwater control; (iv) Safety controls; and (v) An alarm system. (4) Following system line-up and starting of auxiliaries, fully automatic main boilers must only require the operator to initiate the following sequences: (i) Boiler pre-purge. (ii) Trial for ignition of burners subsequent to successful initial burner light-off. (iii) Normal shutdown. (iv) Manual safety trip control operation. (v) Adjustment of primary control setpoints. (5) All requirements for programing control subsystems and safety control systems must be met when a boiler— (i) Automatically sequences burners; (ii) Is operated from a location remote from the boiler front; or (iii) Is fully automatic. (6) Where light oil pilots are used, the programing control and burner safety trip controls must be provided for the light oil system. Trial for ignition must not exceed 15 seconds and the main burner trial for ignition must not proceed until the pilot flame is proven. (b) Feedwater control. Automatic feedwater control subsystems must sense, at a minimum, boiler water level and steam flow. (c) Combustion control. Automatic combustion control subsystems must provide— (1) An air/fuel ratio which ensures complete combustion and stable flame with the fuel in use, under light off, steady state, and transient conditions; and (2) Stable boiler steam pressure and outlet temperatures under steady state and transient load conditions; and (3) A low fire interlock to prevent high firing rates and superheater damage during boiler warm up. (d) Programing control. The programing control must provide a programed sequence of interlocks for the safe ignition and normal shutdown of the boiler burners. The programing control must prevent ignition if unsafe conditions exist and must include the following minimum sequence of events and interlocks: (1) Prepurge. Boilers must undergo a continuous purge of the combustion chamber and convecting spaces to make sure of a minimum of 5 changes of air. The purge must not be less than 15 seconds in duration, and must occur immediately prior to the trial for ignition of the initial burner of a boiler. All registers and dampers must be open and an air flow of at least 25 percent of the full load volumetric air flow must be proven before the purge period commences. The prepurge must be complete before trial for ignition of the initial burner. Note: A pre-purge is not required immediately after a complete post-purge. (2) Trial for ignition and ignition. (i) Only one burner per boiler is to be in trial for ignition at any time. (ii) Total boiler air flow during light off must be sufficient to prevent pocketing and explosive accumulations of combustible gases. (iii) The burner igniter must be in position and proven energized before admission of fuel to the boiler. The igniter must remain energized until the burner flame is established and stable, or until the trial for ignition period ends. (iv) The trial for ignition period must be as short as practical for the specific installation, but must not exceed 15 seconds. (v) Failure of the burner to ignite during a trial for ignition must automatically actuate the burner safety trip controls. (3) Post-purge. (i) Immediately after normal shutdown of the boiler, an automatic purge of the boiler equal to the volume and duration of the prepurge must occur. (ii) Following boiler safety trip control operation, the air flow to the boiler must not automatically increase. Post purge in such cases must be under manual control. (e) Burner fuel oil valves. Each burner must be provided with a valve that is— (1) Automatically closed by the burner or boiler safety trip control system; and (2) Operated by the programming control or combustion control subsystems, as applicable. (f) Master fuel oil valves. Each boiler must be provided with a master fuel oil valve to stop fuel to the boiler automatically upon actuation by the boiler safety trip control system. (g) Valve closure time. The valves described in paragraphs (e) and (f) of this section must close within 4 seconds of automatic detection of unsafe trip conditions. (h) Burner safety trip control system. (1) Each burner must be provided with at least one flame detector. (2) The burner valve must automatically close when— (i) Loss of burner flame occurs; (ii) Actuated by the boiler safety trip control system; (iii) The burner is not properly seated or in place; or (iv) Trial for ignition fails, if a programing control is provided. (i) Boiler safety trip control system. (1) Each boiler must be provided with a safety trip control system that automatically closes the master and all burner fuel oil valves upon— (i) Boiler low-low water level; (ii) Inadequate boiler air flow to support complete combustion; (iii) Loss of boiler control power; (iv) Manual safety trip operation; or (v) Loss of flame at all burners. (2) The low-low water level safety trip control must account for normal vessel motions and operating transients. [CGD 81–030, 53 FR 17838, May 18, 1988, as amended by USCG–2002–13058, 67 FR 61278, Sept. 30, 2002] (a) The starting system for propulsion engines and ship service generator prime movers required to automatically start must meet sections 34.23.3, 34.37.2, and 34.39 of the American Bureau of Shipping's “Rules for Building and Classing Steel Vessels,” except the sections referenced therein. (a) Level alarms. Where high or low fuel tank level alarms are required, they must be located to allow the operator adequate time to prevent an unsafe condition. (b) Coal fuels. (1) Controls and instrumentation for coal systems require special consideration by the Commandant (G-MSE). (2) Interlocks must be provided to ensure a safe transfer of machinery operation from one fuel to another. (c) Automatic fuel heating. Automatic fuel heating arrangements must meet section 41.78.1 of the American Bureau of Shipping's “Rules for Building and Classing Steel Vessels.” (d) Overflow prevention. Fuel oil day tanks, settlers, and similar fuel oil service tanks that are filled automatically or by remote control must be provided with a high level alarm that annunciates in the machinery spaces and either an automatic safety trip control or an overflow arrangement. [CGD 81–030, 53 FR 17838, May 18, 1988, as amended by CGD 95–072, 60 FR 50463, Sept. 29, 1995; CGD 96–041, 61 FR 50728, Sept. 27, 1996] The minimum instrumentation, alarms, and safety controls required for specific types of systems are listed in Table 62.35–50.
Notes on Table 62.35–50: 1. The monitoring and controls listed in this table are applicable if the system listed is provided or required. References to ABS Table 41.1 apply to the “Operation,” “Display,” “Alarm,” and “Notes” 1 through 12, except the reference to ACCU in Note 11. 2. Safety limit controls must be provided in navigating bridge primary propulsion control systems. See §62.35–5(c). 3. Safety trip controls and alarms must be provided for all main boilers, regardless of mode of operation. See §62.35–20(a). 4. Loss of forced lubrication safety trip controls must be provided, as applicable. 5. Override of overspeed and loss of forced lubrication pressure safety trip controls must not be provided. See §62.35–5(e)(2). 6. Transfer interlocks must be provided. 7. Semiconductor controlled rectifiers must have current limit controls. 8. Interlocks must be provided. See §62.25–5(a). 9. See subparts 113.10, 161.002, and fire protection requirements of the applicable subchapters. The use of thermal detectors alone is subject to special consideration by the Commandant (G-MSE). Flame detectors may only be used in conjunction with smoke or heat detectors. 10. See §62.50–20(b)(1). 11. Alarms and controls must be failsafe. See §62.30–1. 12. Vital auxiliary boilers only. Also see part 63. [CGD 81–030, 53 FR 17838, May 18, 1988; 53 FR 19090, May 26, 1988, as amended by USCG–2000–7790, 65 FR 58461, Sept. 29, 2000]
Title 46: Shipping
PART 62—VITAL SYSTEM AUTOMATION
Subpart 62.35—Requirements for Specific Types of Automated Vital Systems
§ 62.35-1 General.
§ 62.35-5 Remote propulsion control systems.
§ 62.35-10 Flooding safety.
§ 62.35-15 Fire safety.
§ 62.35-20 Oil-fired main boilers.
§ 62.35-35 Internal combustion engine starting systems.
§ 62.35-40 Fuel systems.
§ 62.35-50 Tabulated monitoring and safety control requirements for specific systems.
Table 62.35-50_Minimum System Monitoring and Safety Control Requirements for Specific Systems (Note 1)---------------------------------------------------------------------------------------------------------------- System Service Instrumentation Alarm Safety control Notes----------------------------------------------------------------------------------------------------------------Main (Propulsion) boiler...... (\1\)............ (\1\)............ (\1\)........... ................ (2) Supply casing and ................. Fire............ uptakes. Burner flame..... Status........... Failure......... Burner auto trip (3) Burner seating... ................. Failure......... ......ditto..... (3) Trial for Status........... Failure......... ......ditto..... ignition. Control power.... Available Failure (low)... ......ditto..... (3) (pressure). ................. ................. ................ Manual trip..... (3) Burner valve..... Open/closed...... Low fire Status........... interlock. Program control Status........... interlock.Main (Propulsion steam) (\2\)............ (\2\)............ (\2\)........... ................ (4, 5) turbine. ................. ................. ................ Manual trip.....Main propulsion, diesel....... (\1\)............ (\1\)............ (\1\)........... ................ (4, 5) ................. ................. ................ Manual trip.....Main propulsion, remote ................. ................. Failure......... ......ditto..... control. Auto safety trip ................. Activated....... override. Starting power... Pressure Low............. Limit........... (2) (voltage). Location in Status........... Override........ ................ (6) control. Shaft speed/ (\3\)............ (\3\)........... (\3\)........... direction/pitch. Clutch fluid..... Pressure......... Low.............Main propulsion, electric..... (\4\)............ (\4\)............ (\4\)........... (\4\)........... (7)Main propulsion, shafting..... Stern tube oil ................. Low............. tank level. Line shaft Temperature...... High............ bearing. ................. Forced Low............. lubrication Pressure.Main propulsion, controllable Hydraulic oil.... Pressure......... High, Low....... pitch propeller. ................. Temperature...... High............Generators.................... Ship service..... (\1\)............ (\1\)........... ................. Starting pressure/ Low............. voltage. ................. ................. Tripped......... Emergency........ (\5\)............ (\5\)........... (\5\)........... Turbogenerator... (\1,6\).......... (\1,6\)......... (\6\)........... ................. ................. ................ Manual trip..... Diesel........... (\1,7\).......... (\1,7\)......... (\7\)........... (5) ................. ................. ................ Manual trip.....Auxiliary boiler.............. ................. Run.............. Trip............ ................ (12)Gas turbine................... (\8\)............ (\8\)............ (\8\)........... (\8\)........... (5)Engines and turbines.......... Jacking/turning Engaged.......... ................ ................ (8) gear.Fuel oil...................... (\9\)............ (\9\)............ (\9\)........... Remote/auto fill ................. High............ Auto trip or level. overflow arrangement. Hi. press. ................. High............ leakage level.Bilge......................... Pump remote Run.............. control. Pump auto control Run.............. Excessive operations. Level............ ................. High/location...Machinery space CL.3 W.T. ................. Open/closed...... doors.Fire detection................ Machinery spaces. ................. Space on fire... ................ (9)Fire main..................... ................. Pressure......... Low.............Personnel..................... Deadman.......... ................. Fail to ................ (10) acknowledge.General, control and alarm Power supply..... Available Failure (low)... systems. (pressure). System function.. ................. Failure......... ................ (11) Console air ................. Failure......... conditioning. Built in test Active........... equipment. Sequential Activated........ interlock. Safety control... ................. Activated....... Auto trip/limit. (11)Redundant auxiliary, system, ................. Status........... Auto transfer... power supply.----------------------------------------------------------------------------------------------------------------\1\ See ABS Table 41.1.\2\ See ABS Table 41.1, except Shaft Rollover.\3\ See § 113.37 of this chapter.\4\ See subparts 111.33 and 111.35 of this chapter.\5\ See subparts 112.45 and 112.50 of this chapter.\6\ See § 111.12-1(c) of this chapter.\7\ See § 111.12-1 (b), (c) of this chapter.\8\ See § 58.10-15(g) of this chapter.\9\ See ABS Table 41.1, ``Additional Services.''
