Documente Academic
Documente Profesional
Documente Cultură
(KFDD)
Common System
Project: 99999
Loctation:
www.kongsberg.com
Document history
References
No Doc No Description
1 1122333 System Topology IAS
2 Alarm and Instrument List Machinery
3 Alarm and Instrument List Cargo
Copyright
The information contained in this document remains the sole property of Kongsberg Maritime AS. No
part of this document may be copied or reproduced in any form or by any means, and the information
contained within it is not to be communicated to a third party, without the prior written consent of
Kongsberg Maritime AS.
Disclaimer
Kongsberg Maritime AS endeavours to ensure that all information in this document is correct and fairly
stated, but does not accept liability for any errors or omissions.
www.kongsberg.com
Table of contents
1 Introduction ......................................................................................................... 13
1.1 Purpose .................................................................................................................. 13
3 System overview................................................................................................... 15
3.1 The Integrated Automation System ....................................................................... 15
www.kongsberg.com
6 Apendix 1 ). .......................................................................................................... 58
www.kongsberg.com
10.1.6 User Interface .......................................................................................... 74
www.kongsberg.com
15 Command Control System.................................................................................. 91
15.1 Main Features ........................................................................................................ 91
15.2 Command Groups .................................................................................................. 91
15.3 OS Groups ............................................................................................................. 91
15.3.1 OS Groups in Command of a Group ....................................................... 92
15.3.2 Privileges ................................................................................................. 92
15.3.3 Alarm Conditions .................................................................................... 92
15.4 Obtain, Lose and Transfer Command ................................................................... 92
15.5 Configuration Set-up OS and Command Groups .................................................. 93
www.kongsberg.com
17.9 Alarm Groups ...................................................................................................... 107
17.9.1 Purpose .................................................................................................. 107
17.9.1.1 Terminology .......................................................................................... 107
17.9.1.2 Group types and intended use ............................................................... 107
17.9.1.3 First up................................................................................................... 107
17.9.1.4 Group ..................................................................................................... 108
17.9.1.5 Logical ................................................................................................... 108
17.9.1.6 Aggregated ............................................................................................ 108
17.9.1.7 The Verification Process ....................................................................... 108
www.kongsberg.com
20.1.4 Report Management .............................................................................. 121
20.1.5 Displaying Reports ................................................................................ 121
20.1.6 Report Print-out ..................................................................................... 121
20.1.7 Report Storage ....................................................................................... 121
20.1.8 Report Types ......................................................................................... 121
20.2 Configuration Set-up ........................................................................................... 122
www.kongsberg.com
Definitions / Abbreviations
Function Module
The function module is the main building block of the control application residing on the RCU. A
function module is a self-contained software automation object. Function modules represent either:
Process devices, process control functions or system functions.
Function modules are connected to each other and to field signals to make up a software model of the
controlled process. Within a scan, function module algorithms are executed in a strict order.
Users can interact with function modules in many ways. The function module provides dialogs for
operation, parameterization and mode selection.
The environment for function module execution is the RCU on which the function module instance is
configured. However, both the RCU mode and the function module mode may affect the execution of a
function module.
Under normal processing, the function module algorithm is executed cyclically according to the RCU
scan task. Within a single scan, the function module (in sequence):
A function module communicates with other function modules and the I/O system via input / output
terminals.
www.kongsberg.com
Control Function
A control function is a software cluster consisting of one or more function modules and designed to
represent part of- or a complete system. A control function communicates with other control functions
and the I/O system via input / output terminals.
Systems can be two or three pumps in a duty / standby configuration, a complete diesel engine interface, a
complete VSD interface, etc.
Terminal
A terminal is the communication channels towards other function modules and the I/O system.
Terminals are used to transfer operational values between function modules and between the function
modules and the VMS environment.
The digital and analogue input and output terminals may be configured with alarm, numerical
value representation, bar graphs, as part of trend pages, reports, etc. The process terminals are a
“data highway” between function modules to exchange large amount of pre-defined sets of
operational values.
Each type of function modules has a set of terminals.
Terminal Connection
A terminal connection is two function modules, connected together, to enable exchange of data between
these function modules.
www.kongsberg.com
Scan Task
The scan task is a cyclic RCU task that runs the algorithms of a number of function modules in a defined
sequence. Two scan tasks are normally defined for control purposes:
Abbreviations
ACK Acknowledge
AI Analogue Input
AO Analogue Output
DB Database
DG Diesel Generator
DI Digital Input
DO Digital Output
ER Engine Room
FO Fuel oil
HS History Station
HT High Temperature
www.kongsberg.com
HV High voltage (6.6 kV systems)
IG Inert Gas
IP Internet Protocol
KM Kongsberg Maritime
LO Lubrication oil
MV Main Vaporizer
OS Operator Station
SG Steering Gear
SW Sea water
www.kongsberg.com
1 Introduction
1.1 Purpose
This Kongsberg Functional Design Document describes the basic components and functionality of the
Kongsberg Maritime Integrated Control System ICS as to be delivered.
www.kongsberg.com
2 Software package
KONGSBERG vessel control system K-Chief 700 has the following software package installed:
www.kongsberg.com
3 System overview
The integrated automation system (IAS) communicates by means of redundant high speed network.
Compared to conventional stand alone controllers and alarm panels the Integrated Automation System
concept offers several advantages such as:
No main computer
Eliminates conventional hard-wired consoles / mimics and reduces control room area requirements
Fuel optimising by integration of dynamic positioning, thruster control and power management
systems
©Kongsberg Maritime Page 15 of 122
www.kongsberg.com
Simple operation due to
Purpose-built keyboard
Flexibility due to
Process simulation
www.kongsberg.com
4 Project Specific Configuration
4.1 Configuration Set-up Operator Stations (OS)
Table showing operator stations details:
www.kongsberg.com
OS Name Location OS Type Flat Screen Extras
K-Chief-OS-41 ECR MP7900 23” Event printer: No
(172.23.101.41) Alarm kit: No
Keyboard: Yes
Sycon and Profibus: No
Version Contol: No
Dual Power: Yes
K-Chief-OS-42 ECR MP7900 23” Event printer: No
(172.23.101.42) Alarm kit: No
Keyboard: Yes
Sycon and Profibus: No
Version Contol: No
Dual Power: Yes
CAN Bus: Yes
K-Chief-OS-43 ECR MP7900 23” Event printer: No
(172.23.101.43) Alarm kit: No
Keyboard: Yes
Sycon and Profibus: No
Version Contol: No
Dual Power: Yes
CAN Bus: Yes
K-Chief-OS-44 ECR MP7900 23” Event printer: Yes
(172.23.101.44) Alarm kit: No
Keyboard: Yes
Sycon and Profibus: No
Version Contol: No
Dual Power: Yes
K-Chief-OS-51 CBC MP7900 23” Event printer: No
(172.23.101.51) Alarm kit: No
Keyboard: Yes
Sycon and Profibus: No
Version Contol: No
Dual Power: Yes
www.kongsberg.com
4.1.1 Storage / Load Source of the RCU
Table showing operator stations configured to be RCU servers for PS/IO configuration files:
Different filters are made, and can be configured, to print only selected items.
www.kongsberg.com
Net printers can prints all types of views on requests. Also screen dumps are possible.
HP Color LaserJet
Enterprise CP4025dn.
www.kongsberg.com
4.2 Configuration Set-up Field Station (RCU)
This table defines the main lines in the distribution of signals in the different process cabinets.
Signal distribution.
FS-31 PS 400 – R1 EER PCU 31 - HD1 Comp Mtr, LD1 Comp Mtr, BowThr
/131 Mtr. 1C Tk N2 vlv and IS/IBS temp, 3C Tk
N2 vlv and IS/IBS temp, Deck Machinery,
IGG
FS-32 PS 400 – R1 EER PCU 32 - Ballast, FO, MDO,
/132
FS-34 PS 400 – R1 EER PCU 34 - HD2 Comp Mtr, LD2 Comp Mtr Cargo,
/134 Cargo Machinery
FS-44 PS 240C – R1 E/R 4th Deck PCU 44 - No 2,3 and 4 Boiler W circ. PP.DG 1 & 2,
/144 FO System, Main prop. winding temp.
www.kongsberg.com
Field Cabinet Type Location PCU: Distributed Systems:
Station
Name
FS-46 PS 240C – R1 E/R Floor Deck PCU 46 - Boiler circ pump,err bilge pump, sludge
/146 pump, No1 Main prop. winding temp.
PS 400-R1: Cabinet for 400 number of IO, Redundant processor and power supply.
PS 240-R1: Cabinet for 240 number of IO, Redundant processor and power supply.
1. Spare I/O: RCU should run with a spare time of 45%+ and memory > 60%. RIO
modules/Field stations should have a spare IO-capacity of 20%.
2. Power: All power supplies are redundant.
3. 120 VAC: There are two 120 VAC sources of power running in redundant mode, with
alarms
4. CPU and I/O have the same Power supply. I/O is galvanic divided.
www.kongsberg.com
4.3 Configuration Set-up Network Distribution Unit
(NDU)
Table showing net distribution details:
1. Max. network load should not exceed 40% under most extreme circumstances.
2. On operator stations in IAS there is a Net Status Page. The network is continuously monitored
and system alarms will come up in alarm line.
www.kongsberg.com
5 Configuration Set-up MIMIC (Image Tree)
Operator Panel
Definition of IAS keyboard layout.
Keyboard Layout:
GAS N2
CARGO CTS IGG GCU ESD
MANAG .
www.kongsberg.com
5.2 Configuration Set-up Users and Groups
5.2.1 Login and access system
When login into the K-Chief 700 operator stations a user name and password must be entered in order to
access the system. Each user is member of a user group, where access rights and user privilege is defined.
System Administrators
Kongsberg Administrators
www.kongsberg.com
The following access rights and security levels are defined for the different user groups:
User Groups
www.kongsberg.com
User Groups
image grid.
OSKEvent_SelectFilter A user needs this permission in X X X
order to select a filter.
OSKEvent_UserLockFilter A user needs this permission in X
order to change a filter.
TS_Configure Create Time series with limited X X
life span.
TimeSystem_SetTime Needed to be allowed to change X X
system time.
TimeSystem_SetTimeZone Needed to be allowed to change X X X
time zone.
VersionControl_RestoreImportPCU Restore and import files from X
the PCU configuration archive.
VersionControl_ViewConfigurationEvents Permission to view configuration X X X
events dialog.
WatchCall_Configure Permission to change attributes X X
and qualifications of officers.
WatchCall_ManagePanels Permission to add and delete X
panels, and allocate panels to
officers.
WatchCall_Operate Permission to operate the watch X X X
call system
Global_PCU IO_BasicOperation Basic operations on IO system X
for loop checking purposes
IO_ExtendedOperation Extended operations on IO for X
parameter change purpose
IO_Operation Operations on IO system that X
do not affect process control.
IO_Service Service operations on IO X
system that may affect process
control.
PCU_Backup Permission to backup PCU. X X
PCU_SetPCUConfigurationMode Permission to set PCU X X
configuration mode.
PCU_TogglePCUModes Permission to toggle between X
the different exceptional modes
in the PCU Operation dialog.
Redundancy_OverruleObjects Permission to overrule error X X
objects.
Redundancy_SwitchMaster Permission to switch Master X X
PCU in the Redundant Stations
dialog.
www.kongsberg.com
User Groups
(**) “TS Configure” enables creation of time series which “Expire on time” (i.e. limited life time).
Creation of permanent time series requires “RCU Configuration” mode enabled.
www.kongsberg.com
5.3 Images & Command Groups
Table shows relations between buttons / images / command groups.
www.kongsberg.com
5.4 Configuration Set-up OS and Command Groups
5 Cargo
6 Bilge
7 Fire&Gas
8 ESDS
9 System
10 FirePumps
11 CTS
12 N2 Generator
13 HDCompHeat
14 FO Transfer
15 GasHandling
16 IGGenerator
17 GCU
18 Navigation
The operator stations will be defined in operator station groups. Several operator station groups can be
defined and these operator station groups will be set up with command control rights. This system will be
set up with the following operator station groups:
www.kongsberg.com
The following OS Groups are configured:
www.kongsberg.com
Table showing relations between OS Groups and Command Groups:
D – Default: An OS group will automatically try to take a default command group at start up, that is,
when the first OS in an OS group starts.
T – Take: An OS group can take the command over a command group, which is not under command of
any other OS groups. The command group must be acquirable.
A – Acquirable: The OS group must have this privilege for the command group in order to obtain the
command of it.
O – Display Command Groups: The Command Group will be displayed in the command control
overview dialog box.
www.kongsberg.com
Id: Identifier for the Command Groups, only for internal usage.
Shared: The Command Group can be under command of several OS groups simultaneously.
When a command transfer is done, this will be indicated on all operator stations in the ‘Message
Manager’ box.
www.kongsberg.com
5.5 System vs Watch Call / Command Group /
Alarm Panel Group
Table showing the System versus Watch Call, Command Group and Alarm Panel Group:
www.kongsberg.com
System WC Command Group Alarm Panel Group
Fire Fire & Gas Fire & Gas Fire & Gas
www.kongsberg.com
5.5.1 Watch Call Groups
4 Fire&Gas *(4)
5 System *(5,100,110)
7 Repeat alarm
8 Unit Fail
*1= Machinery
*2= Cargo
*3= Navigation
*4= Fire&Gas
*8= ESDS
*16= GCU
www.kongsberg.com
Master / Slave pairs:
Process Station Master PCU Slave PCU
FS 31 31 131
FS 32 32 132
FS 33 33 133
FS 34 34 134
FS 35 35 135
FS 41 41 141
FS 42 42 142
FS 43 43 143
FS 44 44 144
FS 45 45 145
FS 46 46 146
FS 41 47 Single
FS 41 48 Single
FS 42 49 Single
FS 42 50 Single
FS 51 51 Single
FS 52 52 Single
FS 71 71 171
www.kongsberg.com
5.6 PS description
The figure below show connection between KM - ABB switchboard, KM - ABB propulsion motor and
KM - Wärtsilä generator engine.
IAS Net B
IAS Net A
ProfiBus ProfiBus
HW HW
ABB ABB
PM 1 PM 2
HW HW
WECS WECS
(MGE1) Wärtsila¨ Wärtsila¨ (MGE3)
UCP 1 TCP TCP UCP 3
PLC PLC
HW HW
WECS WECS
(MGE2) Wärtsila¨ Wärtsila¨ (MGE4)
TCP TCP
UCP 2 UCP 4
PLC PLC
LV 1 RIO LV 1 RIO
SBBus SBBus
FS42-2(LM2) FS43-2(LM1)
www.kongsberg.com
5.7 Event System
Two of the operator stations will be set up as event servers: OS-34 and OS-41.
The other operator stations will be set up as viewers, refer the table.
OS Servers OS Viewers
HS-98 OS-42, OS-43, OS-44, OS-31, OS-32, OS-33, OS-34 and OS-35
www.kongsberg.com
5.8 Configuration History
Changes and configuration in module parameters will be stored in a database at operator station set up to
run the “Configuration Store” application. Configuration history can however be retrieved from any OS.
All save and backup of the RCU-files will be saved with a revision number. Old versions of the RCU-file
can be retrieved or checked towards an older or newer version.
OS-31 OS-31 is setup with the MS Visual Source Safe software for version
control of the RCU-files.
www.kongsberg.com
5.9 History Station
History station is integrated in HS-98.
Reports:
The report system has possibilities for the following types of reports:
Daily report
This report uses dynamic process variables from the process station. It can be printed either cyclic or on
request.
Historic reports
This report uses data from history station. By specifying a certain time window data from time series can
be called and several mathematics functions can be used.
- Period sum
- Period middle
- Period min
- Period max
Hour count reports.
This report is used to show running hours on equipment. It accumulates the running hours.
www.kongsberg.com
OS Name Location Report Name Report Type
KM-OS All Locations. All Cyclic and Interactive reports
www.kongsberg.com
5.12 Alarm extension system
The Alarm Extension system will alarm the engineer on duty in case of any monitored parameter exceeds
its set value, as monitored by the alarm & monitoring system. There are eight categories of alarms:
For each category the alarms will be routed to the engineer on duty.
I.e. cargo alarms will be routed to the cargo engineer on duty when the alarm extension system
for cargo is activated.
www.kongsberg.com
19 watch call panels are provided in the following locations:
www.kongsberg.com
Table 7-26 Watch call Panel
www.kongsberg.com
All duty/cabin panels can be selected in one of the following duties and will receive alarms in accordance
with duty selection:
1. Engine
2. Cargo
3. Multiple (Engine/Cargo)
4. Navigation
6. Multiple (Cargo/Navigation)
1. Alarm Extension – This is a group alarm status and on-duty officer indication facility with built-in
on-duty acceptance, fault indication and test facilities.
2. Officer Call – This is an individual and general calling facility for officers that can be
activated from selected vessel control locations.
The main functions of the WBU are to indicate engine room alarms on the bridge, to indicate and accept
the transfer of machine watch responsibility to and from the bridge.
The main functions of the WCU are to indicate alarms with buzzer and light in the cabins and the public
quarters of the engineer on duty while in bridge control.
www.kongsberg.com
The ‘Watch Call’ system is communicating with the operator stations located in ECR by a CAN Bus
Interface. Two operator stations are required and will work in a master/slave configuration, i.e. the
‘Watch Call’ system will be operating with only one operator station up running at the time. The ‘Watch
Call’ system can be managed from two different managing groups:
1. ECR Manager
2. CCR Manager
From the operator stations in ECR, duty engineer can be selected for ECR and the watch responsibility
can be requested transferred to and from bridge. From the operator stations in CCR duty officer for CCR
can be selected. Selecting/Changing duty officer must be done when watch responsibility is in ECR.
The ‘Alarm Extension panels’ will be set up to belong to a unit group. Three different main unit groups
are available:
1. Bridge Group
2. Officer Group
3. Public Group
For the officer group several groups can be defined, i.e. ‘OfficerGroup1’, ‘OfficerGroup2,
‘OfficerGroup3, and up to ‘OfficerGroup8’. The panels belonging to officer groups are defined as duty
panels while panels belonging to the public group are defined for installation in public quarters.
The officer groups will be set up with a ‘Duty Officer Qualification’, which defines the type of alarms the
panel will subscribe to. Two different types of ‘Duty Officer Qualification’ are available:
1. Machinery
2. Cargo
3. Navigation
The alarm groups defined in the system will be set up to belong to either machinery or cargo. When an
alarm is triggered in the system the ‘Alarm Extension Panel Interface’ application will read the alarm
group, check which group it is belonging to (engine or cargo) and then route the alarm to the correct duty
panel(s), to all public panels and the bridge panel if in bridge watch.
www.kongsberg.com
5.13.2 Panel Operation
1. Alarm acknowledge during wheelhouse watch mode
Initially alarm will sound on bridge panel, on duty engineer panel and on public panels.
Pressing the “Sound Off” button on a public panel will turn off the sound only on the panel
operated. Alarm indicator will continue to flicker until alarm is acknowledged, and then change to
a steady light. Indicator will be turned off when alarm condition is no longer present.
Pressing the “Sound Off” button on the bridge panel will turn off the sound only on bridge panel.
Alarm indicator will continue to flicker until alarm is acknowledged, and then change to a steady
light. Indicator will be turned off when alarm condition is no longer present.
Pressing the “Sound Off” button on the duty engineer panel will turn off the sound on duty panel
and public panels (Bridge panel must be silenced separately). Alarm indicator will continue to
flicker until alarm is acknowledged, and then change to a steady light. Indicator will be turned off
when alarm condition is no longer present.
Operating the “Ack” function on OS in ECR (for machinery alarms) or the OS in CCR (for cargo
alarms), will silence all panels and give a steady alarm indication. Indicators will be turned off
when alarm condition is no longer present.
Extension panels will only show alarm status. No sound device will be set off. For cabin panels
and bridge panel, it is selectable whether alarm status should be shown or not when no people are
on duty. This must be selected from the watch call interface on the operator station.
3. Duty engineer/officer selection
To transfer machinery responsibility to bridge (bridge watch mode), the operator must first select
a duty engineer on duty from software panel on VDU. The duty lamp is activated on all panels.
Then the “Bridge watch” button is selected and buzzer/lamp is activated at bridge panel. Pressing
the “Bridge watch” button on bridge panel will accept the watch transfer and a lamp indicator will
indicate bridge watch mode. A transfer from bridge to ECR must be initiated from ECR;
buzzer/lamp is activated at bridge panel. Upon acceptance from bridge, watch responsibility is
transferred to ECR.
If a duty engineer is selected from software panel on VDU, without transferring the watch
responsibility to the bridge (Harbour mode), alarms will be routed to duty engineer panel as well
as public panels. Repeat alarms and Personal alarms will be activated as normal during this
condition.
4. Engineer/Officer call from ECR/CCR
Two types of call functions are supported, “Call Duty” or “Call all”.
The “Call Duty” operation will activate buzzer/lamps on the designated duty engineer panel and
on public panels. The “Call Duty” button will not work unless a duty engineer is selected.
Acknowledging the call on the designated duty engineer panel will silence all panels.
Acknowledging the call on a public panel will silence that specific panel only. Indicator lamps
will continue to flicker on all panels.
The “Call all” function is more of an emergency operation. Pressing the “Call all” button will
activate buzzer/lamp on all panels. Acknowledging the call on one engineer/officer panel will
silence that specific panel only. Acknowledging the call on a public panel will silence that
specific panel only.
www.kongsberg.com
5. Duty Engineer/Officer call from Wheelhouse
Operating the “Call Duty” from bridge panel will activate buzzer/lamp on the selected duty
engineer panel and on public panels. Again, the “Call Duty” function requires that an
engineer/officer actually has been set on duty.
Acknowledge functions are the same as calls initiated fro ECR/CCR.
6. Repeat Alarm
Repeat alarm will be triggered when an active watch call group alarm has not been acknowledged
from an operator station within a predefined time. This predefined time is normally set to three
minutes (LIMIT 1 - adjustable). Repeat alarm one will be given at bridge panel, duty
engineer/officer panel and at public panels. If again, the engineer on duty fails to acknowledge
the alarm within “Repeat Alarm two limit”, normally three minutes(LIMIT 2 – adjustable) all
engineers with the qualification will be announced at bridge panel, duty engineer/officer panel
and at public panels.
www.kongsberg.com
Panel Overview
Watch Bridge Unit:
A1 – Chief/eng
A2 – 2st./Eng
A3 – 3rd1-2/Junior./Eng
A4 – ETO
A5 – Captain
A6 – Chief/off
A7 – 2nd./Off
A8 – Cargo Eng ok
B1 – Mach.
B2 – Cargo
B3 – Nav.
B5 – System
B6 – Patrol Man
©Kongsberg Maritime Page 50 of 122
www.kongsberg.com
Watch Cabin Unit for ECR:
A1 – Chief/eng
A2 – 2st./Eng
A3 – 3rd1-2/Junior./Eng
A4 – ETO
A5 – Captain
A6 – Chief/off
A7 – 2nd./Off
A8 – Cargo Eng
B1 – Mach.
B2 – Cargo
B3 – Nav.
B5 – System
B6 – Patrol Man
www.kongsberg.com
Watch Cabin Unit for CCR:
A1 – Chief/eng
A2 – 2st./Eng
A3 – 3rd1-2/Junior./Eng
A4 – ETO
A5 – Captain
A6 – Chief/off
A7 – 2nd./Off
A8 – Cargo Eng
B1 – Mach.
B2 – Cargo
B3 – Nav.
B5 – System
B6 – Patrol Man
www.kongsberg.com
Watch Cabin Unit for Navigation:
A1 – Chief/eng
A2 – 2st./Eng
A3 – 3rd1-2/Junior./Eng
A4 – ETO
A5 – Captain
A6 – Chief/off
A7 – 2nd./Off
A8 – Cargo Eng
B1 – Mach.
B2 – Cargo
B3 – Nav.
B4 – Fire & Gas
B5 – System
B6 – Patrol Man
©Kongsberg Maritime Page 53 of 122
www.kongsberg.com
Watch Cabin Unit for Public:
A1 – Chief/eng
A2 – 2st./Eng
A3 – 3rd1-2/Junior./Eng
A4 – ETO
A5 – Captain
A6 – Chief/off
A7 – 2nd./Off
A8 – Cargo Eng
B1 – Mach.
B2 – Cargo
B3 – Nav.
B4 – Fire & Gas
B5 – System
B6 – Patrol Man
www.kongsberg.com
5.14 Engine Patrol Man System
The system can be activated from one of the activation panels located in entrance to the engine room or
automatically from the alarm extension system when a machinery alarm is activated.
The reset interval period is set to 15 minutes. Pre warning alarm will be activated 3 minutes before dead
man alarm is set.
www.kongsberg.com
Machinery
Alarm when
System ON
Bridge Watch
ON
NO
NO
Timer>15 min?
YES
NO
NO
Timer>18 min?
YES
Activate Patrol
Man alarm
Activate Extention
Alarm system
www.kongsberg.com
If the system is switched off before the pre-warning or patrolman alarm is initiated, the sequence will
terminate and switch off the system on lamp.
Keeping the on/reset button for more than 10 seconds can perform lamp test.
Reset can also be performed from one of the engine control room operator stations by using the dedicated
push button on the Patrol Man mimic.
www.kongsberg.com
6 (Appendix 1 ).
Colour table
8 K-Chief 700
K-Chief 700 is the control and monitoring system by Kongsberg Maritime. The system has a large range
of applications within the fields of offshore industry, on-shore chemical industry, safety systems and
vessel control systems.
A good comprehension of the basic principles in AIM makes it easier to use the system efficiently. The
intention of this section is to provide this background. It starts with a description of the AIM environment
and continues with a closer look at the role of each station type and the way they communicate.
Compared to conventional stand alone controllers and alarm panels the Kongsberg ICMS concept offers
several advantages such as:
www.kongsberg.com
Increased safety due to
www.kongsberg.com
8.1 AIM Environment
The plant
AIM 2000
User Interface
Historical data
Process Logic
Data import / export
Field Interface
Other
systems
The field
The collection of equipment, instruments and actuators that make the processes, is designated 'the field'.
The signal interface between the field devices and AIM is designated the field interface, which is part of
the AIM system. Beside the field interface, data can be exchanged with other systems that comply with
certain data access standards.
The process logic handles signals from both the field interface and the user interface. It processes the
information according to the configured logic and provides response to either interface. The process logic
is a configuration of standard AIM function modules that build up the required functionality for the plant.
The user interface allows the user to operate and configure the process logic.
AIM is capable of logging historical data. The historical data can be used for trending, reports or data
analysis.
As the AIM network is crucial for all communication between the stations, it is made dual redundant.
In addition to the AIM network, OSs and HSs may be connected to an administrative data network,
providing a connection interface for other systems and devices.
www.kongsberg.com
AIM 2000 – Simplified block diagram
Adm. Network
(Network C)
OS OS OS HS
AIM Network
(Networks A and B)
FS FS FS
AIM has a distributed database: Each RCU keeps the program, configuration and data that are associated
with the process area it controls. Both the program and the configuration that run on a RCU are to be
backed up to an OS for permanent storage.
www.kongsberg.com
Storage of RCU program files and configuration data.
The OS platform consists of:
Network setup can limit which RCU are visible for the OS
Membership in OS groups controls which process areas can be controlled from the OS
Access control controls which functionality is available for the user. (See Ch. 7)
8.3 Communication
A common approach to AIM communication is to distinguish the following areas:
The AIM network is an Ethernet based LAN providing data communication between all connected
stations. The AIM network is dual redundant. That means that every station is connected in two identical
networks, net A and net B. The communication path is intact as long as at least one of the networks is
operational.
As any LAN, the AIM network can be designed and implemented in many ways. Normally the AIM
applies a network topology with hubs. A possible topology is shown on the next page.
www.kongsberg.com
Event External Network
printer systems printer
Adm. Network
(Network C)
Note: The C-Net is normally located inside the NDUs
OS OS OS HS OS OS for Network B.
AIM Network
(Networks A and B)
FS
NDU NDU NDU NDU NDU NDU
A1 B1/ A2 B2 A3 B3 / RCU
C1 C3
AIM Network
(Networks A and B)
FS FS FS FS FS FS FS FS
The basic considerations for segregating traffic in the AIM network are:
Fault isolation
Network load control.
Field Communication
Discrete AIM IO
Serial lines
Industrial standard compatible field bus.
Discrete IO provides separate channels assigned to signals through AIM IO configuration. Dependent on
the signal type, analogue, digital or pulse train, appropriate RIO400 cards are used to implement the
interface. Basically two types of RIO400 units are used:
www.kongsberg.com
Galvanic isolation between the instrument loop and the IO channel
Facilities for signal loop powering from either within the AIM system or the field
Grounding.
The RIO420 units provide conversion between data signal, on the RCU process bus side, and instrument
signal, on the field side.
AIM discrete IO
Signal loop
BUS
RCU
HUB
* Field device
1A
1A
Field device
RIO420
Field device
X2 Red.
Update
R-Bus
BUS *
RCU HUB
1B 1B
RIO420 Field device
Profibus is an industrial standard field bus. Profibus and Profibus DP slaves are fully AIM compatible.
The Profibus transmission line is connected to the Profibus communication port of the RCU via a RS-485
splitter card or a DP/DP-Coupler. The RCU acts as Profibus
©Kongsberg Maritime Page 64 of 122
www.kongsberg.com
master.
AIM Profibus interface
RS-485
RCU Splitter Field device
Drop
cable card Slave 3
RS-485
RCU Splitter Field device Field device Field device
Drop
cable card Slave 3 Slave 4 Slave n
OLM
DP/DP- Optic
RCU
Drop Coupler Drop Link Field device Field device Field device
cable cable Slave 3 Slave 4 Slave n
Module
The C-Network network is on all OS and HS Stations. On C-Network are all kind printers connected. The
C-Network can also be connected to a Router and firewall so a connection to the “vessel own” network
can be established.
AIM uses several industry standard interfaces for export and import of data:
ODBC is used for export of historical time series and event data. Specific ODBC drivers and
DSN are included in the OSK installation that is part of the AIM system installation. ODBC
exported data are used by the AIM Report System.
TCP/IP can be used to export ASCII streams of time series data directly from the HS as they
are received from the RCU. This mechanism is used in customer adapted applications for
post-processing of AIM data.
www.kongsberg.com
8.4 Using K-Chief 700
8.4.1 Starting and Stopping K-Chief 700
The way an AIM system is started depends on the situation. The most extensive situation is start up after
Cold Start. Less drastic situations are the start up and stopping of single stations. There is no general
procedure for starting up an AIM system. The exact way an AIM system deploys is a matter of
configuration. However, the main principles are reflected in the following.
After Cold Start, at least one OS which serves the RCUs configuration files must be started and all RCUs
booted. If at least one of the serving OSs are running, the RCUs start loading their program and
configuration files. Normally, several OSs are set to serve the RCU´s program and configuration files,
making the order of start-up less significant. You can observe the deployment of the system from the
Equipment image on an OS. It should not take more than 30 min(Normally less than 15 min) before all
OS and RCU are on-line.
Should the serving OS malfunction, while an RCU is loading, the RCU will reboot and find another
server, until it has succeeded.
Stopping the system is done by turning off the power to RCU and exiting AIM from each OS/removing
both power supplies from OS.
Start up sequence in steps from the point power supply to RCU, NDUs and OS has been established:
Dependent on the user group they belong to, users can enter special configuration modes. The intention of
the configuration mode is to prevent the user from accidentally changing a configuration; therefore a
configuration mode must be entered before changing a configuration.
www.kongsberg.com
8.4.3 Users Guide/ F1 Help function.
The User Guide for the Advanced Integrated Multifunction (AIM) system is the essential
reference for personnel involved in operation and configuration of the AIM system. It is
presumed that the reader has participated in the AIM training program.
Structure:
As a general rule, the information in each section is organized in three main parts:
Information retrieval:
This User Guide provides several ways to locate the information you are looking for.
The most usual way is to use the search tab to find the topic you need, and then use the Locate button to
find its place in the contents structure.
Context-sensitive help is available for all dialog boxes. Use the F1 button on the keyboard to
display help for the active dialog box.
Terms and abbreviations are explained in the glossary section of the User Guide. In addition,
these terms and abbreviations are identified in the text and appear in the same way as hyperlinks.
Pointing to the link for an explained term invokes the following ToolTip: Click the term for a
definition of the term in a pop-up window.
No Help screens for help screens identifying permissives, trips, sequences of operation, faults
and other information.
www.kongsberg.com
9 Operator Stations
9.1 Main Features
The OS provides an operator interface to the plant, including process animation, alarm lists, trends, report
system etc. It is a user interface provider for the communication between the user and the RCUs and HSs.
It also provides the user interface to the access control system and the command control system.
The OS provides a storage/load source of the RCU system- and configuration files and user interface to
access to the entire AIM configuration.
The OS user interface provides functionality for normal operation and configuration of your application.
To achieve this, the OS provides several mechanisms.
9.2 Logging On
When logging on to the K-CHIEF Operator Stations, a user name and password must be entered in order
to access the system. Each user is member of a user group, where access rights and user privileges are
defined. For details about Users, User Groups and the Access System, refer to section 14 Access Control
System. After power up, Operator will be logged on as default.
The OS may also have an operator panel connected, which is based on a standard keyboard and then tailor
made to the operator.
©Kongsberg Maritime Page 68 of 122
www.kongsberg.com
9.7 Tag Mark Indication
The purpose with the “tag mark” is to give the operator a clear indication of the mode status of the AIM
software function module controlling the different field devices. The “tag mark” will also be used for
alarm indication in case a ‘Failure’ signal is included for the controlled device. Also timeout and
inconsistency alarm will be indicated by the “tag mark” (typically for pumps and valves). Below you will
see the different “tag mark” indications, the meaning of them and typically software function modules
they will appear together with. “Tag mark” indications used two times will be with different colours.
www.kongsberg.com
9.8 Configuration Set-Up OS’s
Refer to chapter 4.1 Configuration Set-up Operator Stations (OS) for Project specific configuration.
Refer to chapter 4.1 Configuration Set-up Operator Stations (OS) for Project specific configuration.
www.kongsberg.com
10 History Station
There is one history stations onboard, one Rapid database (K-Chief-HS99) for long term storage.
HS98
Time series data
from function Time series
modules database
configured on
PCUs
The Time series database receives time series data from the function modules that are configured on the
RCUs. The time series that come from the RCUs are primary or secondary time series. The stored time
series are utilized by other AIM applications like Trend images and reports. The time series database has
an Open Database Connectivity (ODBC) interface. A separate export function is also incorporated in the
HS.
www.kongsberg.com
The Alarm and Event database receives event data from the event server. Alarms and events are
generated by the function modules running on the RCUs, or by the surrounding system. These alarms and
events are stored in the database and are subsequently utilized by Event images, where they are displayed
as alarms and messages. The alarms and events database also has an ODBC interface.
Data
Logger
DMZ
OPC DA/AE
client
Router
DB
AIM Network
(Networks A and B)
FS FS FS
www.kongsberg.com
10.1.3 K-Chief-HS Storage
The Time series data, sent from the RCU to the HS-APPL for storage, are transferred to the Rapid
database by the Storage Server.
Data Logger
Data Abstraction Layer.
Adm. Network
(Network C)
Rapid
Data Logger
HS39/ 3000 Storage
(OPC DA client)
Server
AAI
(Archive Interface)
Data Abstraction
HS-APPL Layer
(Message parsing)
DB
(objectivity)
AIM Network
(Networks A and B)
FS FS FS
Time series data is stored in bursts, 100 values once every 10 seconds for 10 Hz data. (configurable). Data
that occurs during a store is queued and stored immediately.
The HS is able to receive these amounts of data from the AIM system and transfers them to the Rapid
Database without data loss. This happens when the only applications running are the Rapid Server and
the HS, when both the RCUs and the Rapid system are set up with zero hysteresis.
This project has included storage of all System I/O into the Rapid Database for Trending and Reports.
www.kongsberg.com
AIM 2000 K-Chief-HS39 – Retrieve
Adm. Network
(Network C)
Rapid
AIM Network
(Networks A and B)
Note! The Rapid database is used for storage of Time series only. The alarms
and events are stored in a separate database(SQL Server 2005)
www.kongsberg.com
11 Field Stations
11.1 Main Features
The Field Stations houses Remote Controlling Units (RCUs) and the Remote I/O units (RIOs). The RCUs
are performing the control of the instrumentation field. The communication with the field is performed by
the RIO400 system, which is a distributed part of the RCU system.
OS OS HS
NtPS
AIM Network
(Networks A and B)
RCU RCU FS
FS FS
The field
The RCUs themselves provide no permanent storage of programs and data. On a specific RCU start-up,
all its programs and data are loaded from its RCU servers. These servers are configured on one or more
OSs. The OS may be housed in an operator console, or it may be a stand-alone PC.
Note! RCUs controlling machinery used for DP purpose will be with flash
memory and hence can be started up without loading their program from
and configuration from the OSs.
The NtPS’, which are simulated RCUs with limited functionality, are also configured on OSs.
Time series, which essentially are time-stamped process variable values, are generated on RCUs (and
other external sources). Provided that a time series is configured to be stored permanently, it is stored in
the HS time series database only.
www.kongsberg.com
11.2 Modes of Operation
RCUs can operate in different modes:
Mode Description
Passive The RCU is in standby mode where the configured modules don't take active part
in the process control.
Simulation The RCU is running in simulation mode. The function modules are isolated from
algorithm the IO system, but input data will be obtained from an alternative source to allow
simulation.
Alternative The function module input terminal values are taken from module output
terminal input terminals instead of from the IO terminals (provided that both types’ connections
exist).
11.4 IO System
The AIM IO system provides the communication interface for exchange of IO signals between the field
devices and the RCU. The AIM supports several IO solutions.
The AIM IO system supports the following IO solutions; SP-Bus with Kongsberg proprietary
communication protocol and a serial bus solution; Profibus standard.
www.kongsberg.com
AIM discrete IO
Signal loop
BUS
RCU
HUB
* Field device
1A
1A
Field device
RIO420
Field device
X2 Red.
Update
R-Bus
BUS *
RCU HUB
1B 1B
RIO420 Field device
Drop
cable
RS-485
Splitter Field device Field device Field device
card Slave 3 Slave 4 Slave n
Table 11-3 A simplified functional block diagram illustrates the general principles of the
IO system.
The common blocks in the IO system functional block diagram are:
www.kongsberg.com
AIM
IO block IO driver
module
IO block: Provide connection and conditioning of the IO signals. The IO block is responsible for
conversion between IO raw value on the driver side and the engineering value on the module side.
IO drivers: Responsible for the communication with the field device. The IO driver provides conversion
between field value and IO raw value.
The RCU with Kongsberg proprietary software is used for control and management of the field devices
via discrete IO and serial lines. Discrete IO provides separate channels assigned to signals through AIM
IO configuration. Dependent on the signal type, analogue, digital or pulse train, appropriate RIO400 units
are used to implement the interface.
Using the AIM SP-Bus system makes it easy for the user to configure and to control the input and output
process devices and signals of the plant.
www.kongsberg.com
Its great speed, covering distance and data handling capabilities make it ideal for many process control
and data intensive applications. Profibus is a polling network, meaning that its assigned master,
periodically requests the status of each node. This ensures that each device on the network is updated
consistently and reliable.
FS Type Explanation
FS-400C-R1 Cabinet for approximately 400 IO signals. Contains double remote controller
units (RCU) that provides redundancy in computer processing and bus
communication with the remote I/O devices and may house up to 12 RIO400
units, each up to 32 IO channels.
FS-240C Cabinet for approximately 240 IO signals. Contains a single remote controller
unit (RCU) and may house up to 8 RIO400 units, each up to 32 IO channels.
FS-240-R1 Cabinet for approximately 240 IO signals. May house up to 8 RIO400 units, each
up to 32 IO channels.
www.kongsberg.com
12 Network Distribution Units
12.1 Main Features
Internally, AIM communicates via the AIM network.
The AIM network is an Ethernet based LAN providing data communication between all connected
stations. The AIM network is dual redundant. That means that every station is connected in two identical
networks, net A and net B. The communication path is intact as long as at least one of the networks is
operational.
12.2 Topology
As any LAN, the AIM network can be designed and implemented in many ways. Normally the AIM
applies a network topology with hubs. A possible topology is shown below.
Adm. Network
(Network C)
Note: The C-Net is normally located inside the NDUs
OS OS OS HS OS OS for Network B.
AIM Network
(Networks A and B)
FS
NDU NDU NDU NDU NDU NDU
A1 B1/ A2 B2 A3 B3 / RCU
C1 C3
AIM Network
(Networks A and B)
FS FS FS FS FS FS FS FS
Fault isolation
Network load control.
www.kongsberg.com
12.3 Configuration Set-up
Table showing types of net distribution units delivered:
www.kongsberg.com
13 Images and Navigation
13.1 Main Features
Information and user interaction means are presented to the user via images. An image has a name and
contents. An image belongs to any of the image types defined in the system, for details about image types
refer to section 13.2 Image Types.
Images may be stand-alone objects that are configured to be displayed in the navigator and/or be targets
of hotspots. Images may also be configured as image decorations, which are contained in other images of
Process, Flow or Generic types.
In OS Configuration mode, existing images may be deleted and new images may be created (this doesn't
apply to the PBUS IO image).
Note! Except for the PBUS IO image, no image comprises any module- or IO
configuration. Thus, editing, deleting or saving of images doesn't affect
these types of configurations.
www.kongsberg.com
Image Type Description
Can hold hotspot: No
Can hold decoration: No
Exist as decoration: Yes
System Status A list type image showing status of the stations in the system.
Can hold hotspot: No
Can hold decoration: No
Exist as decoration: No
PBUS IO A persistent image showing the IO racks configuration and -setup for a selected
RCU.
Can hold hotspot: No
Can hold decoration: No
Exist as decoration: No
Generic This image type supports hotspots and decorations.
Can hold hotspot: Yes
Can hold decoration: Yes
Exist as decoration: No
Web An image type that displays web sites/pages.
Can hold hotspot: No
Can hold decoration: No
Exist as decoration: Yes
www.kongsberg.com
13.3.1 Primary Image Window
The primary image window is mandatory in any application. Some basic functionality is only available in
this window. These are:
To avoid recurrence, a floating image window cannot contain any other floating image windows.
Restrictions
Floating image windows, popups or dialog boxes cannot be moved outside its image window.
www.kongsberg.com
13.3.4 Navigation between Image Windows
Moving your cursor to another image window shifts the focus to that image window.
The Navigator provides a context menu for the selected image, which lets you select the
image window that you want the image to be displayed in.
In Flow, Process and Generic images, you can configure hotspots, which display images and
popups in other image windows.
www.kongsberg.com
13.4.1 Navigator
Parent Image -
Child Images
Parent Image -
Child Images
Parent Image -
Child Images
Child Images
13.4.3 Hotspots
Images of Generic, Flow and Process types may contain hotspots. In general, when a hotspot is clicked, a
function is executed. However, in most cases, the function will display a specific image. Thus, usually the
hotspot provides a shortcut to another image.
www.kongsberg.com
14 Access Control System
The access system provides the built-in user account 'Administrator' that is member of the built-in user
group 'System'. Neither can be deleted.
All users use the access system as they log on and off.
All configuration tasks, such as adding, editing or deleting user accounts and user groups are the
responsibility of the system administrator.
Flow Chart
Log On
Log on to user account with correct
password
User G User J User M
Identification Not ok
User H User K User N
Ok
User Group
User I User L User O Link the user to the user group which it
belongs to
www.kongsberg.com
14.2 User Rights
A security object controls the access to specific functions. A user group is associated with a number of
user rights. The table below lists all the user rights that are available in AIM and the capability of each of
the user rights is defined.
www.kongsberg.com
Security Object Description / Capability
OSKOS_Configure Needed to be allowed to set the OS in configure mode.
OSKOS_DisableLogOff Will disable the logoff button in the change user dialog.
OSKOS_Exit User without this permission cannot exit the OS.
OSKOS_Test Needed to be allowed to set the OS in test mode.
OSKTrend_UserDefined Users without this permission cannot create and edit User Defined
Trend images.
OskAccess_ConfigureGates Needed to add, modify and remove gates and witch permissions the
control.
OskAccess_ConfigureOSes Needed to modify the local access control setting for each OS.
OskAccess_ConfigurePermissi Needed to add, modify and remove permissions.
ons
OskAccess_ConfigureUsergrou Needed to add, modify and remove usergroups and their relationships
ps to gates.
OskAccess_ConfigureUsers Needed to add, modify and remove users and their relationships to
usergroups.
OskAccess_ObserveConfigurati Needed to inspect the access control configuration.
on
OskEvent_AckProcessAlarm A user needs this permission in order to ack a process alarm.
OskEvent_AckSystemAlarm A user needs this permission in order to ack a system alarm.
OskEvent_ChangeFilter A user needs this permission in order to change an Alarm filter.
OskEvent_Configure A user needs this permission in order to configure the event mage
grid.
OskEvent_SelectFilter A user needs this permission in order to select a filter.
OskEvent_UserLockFilter A user needs this permission in order to change a filter.
PCU_Backup Permission to backup PCU
PCU_SetPCUConfigurationMo Permission to set PCU configuration mode
de
PCU_TogglePCUModes Permission to toggle between the different exceptional modes in the
PCU Operation dialog.
Redundancy_OverruleObjects Permission to overrule error objects.
Redundancy_SwitchMaster Permission to switch master PCU in the Redundant Stations dialog.
TS_Configure Create timeseries with limited life span
TimeSystem_SetTime Needed to be allowed to change system time.
TimeSystem_SetTimeZone Needed to be allowed to change timezone.
VersionControl_RestoreImport Restore and import files from PCU configuration archive
PCU
VersionControl_ViewConfigur Permission to view configuration events dialog.
ationEvents
www.kongsberg.com
14.3 Configuration Set-up Users
Refer to chapter 5.2 Configuration Set-up Users and Groups for Project specific configuration.
Passwords are by default the same as the User name. This can be changed by members of
“Administrators”, Additional Users and User Groups can be added (refer to the K-CHIEF operator
manual).
Numbers like PIN codes are recommended as passwords, to avoid the use of regular keyboards for login.
With a number the normal operator panels can be used.
www.kongsberg.com
15 Command Control System
15.1 Main Features
The command control system provides mechanisms to manage and distribute responsibility between OS'
on a plant. If concurrent operations are forbidden, command control ensures that concurrent operations
don't take place.
Using command control assumes that the following are defined clearly:
OS OS OS OS OS OS OS OS
An exclusive command group can only be under command of one OS group at a time
A shared command group can be under command of several OS groups simultaneously.
15.3 OS Groups
Each OS group contains one or more OSs, whereas each OS can only be member of a single OS group.
www.kongsberg.com
15.3.1 OS Groups in Command of a Group
An OS group can be in command of a command group, this means:
15.3.2 Privileges
For each command group, an OS group can have the following privileges:
The command group is acquirable. The OS group must have this privilege for the command
group in order to obtain the command of it
In addition the command group can be in default. This means that the OS group tries to
obtain command at start up.
If the command group is exclusive, the OS group may have the privilege to take the command forced.
This means that the OS group can obtain command without any accept from the OS group, which
currently is in command of the command group.
If access control is enabled, the user who currently is logged on must also have sufficient user rights.
The table below describes the various ways the command control can be obtained, lost and transferred:
Command Description
Control
Take at start- An OS group will automatically try to take a default command group at start up, that is, when the
up first OS in an OS group starts.
Take An OS group can take the command over a command group, which is not under command of any
other OS groups. The command group must be acquirable.
Take shared An OS group can always take the command over a shared command group, if it is acquirable.
Request An OS group can request the command over an exclusive command group, if it is acquirable. The
command is transferred, if the OS group currently in command accepts the request.
www.kongsberg.com
Command Description
Control
Take forced Instead of waiting for a request to be accepted, the requesting OS group can take the command
forced. To take command forced, the OS group needs the corresponding privilege.
Give An OS group in command over a command group can give the command to another OS group,
which can acquire it. The command is transferred, if the receiving OS group accepts to receive.
Give up to An OS group can give up the command over a command group to none only if there is as least one
none other OS group in command.
Auto receive When the last OS in an OS group stops, and if it is the only OS group in command of a command
group, all other OS groups, which can acquire the command group, will automatically receive the
command. The first OS group, which accepts to receive, will obtain the command.
Refer to chapter 5.4 Configuration Set-up OS and Command Groups for Project specific configuration.
www.kongsberg.com
16 Version Control System
This is normally installed in the Master Configuration OS located in ECR, CCR or Bridge.
RCU
configuration
archive Configuration
event
database(s)
Version
OS31 OS32 OS33
control
system
AIM network
RCU31
All operator stations (OSs) can, however, utilize functionality provided by the version control system as
follows:
OSs with enabled version control system can initiate both backup and restore of the RCU
configurations
©Kongsberg Maritime Page 94 of 122
www.kongsberg.com
OSs with no enabled version control system can only initiate backup.
The RCU configuration archive contains all previous backups of the RCU configuration files (.ps, .io
etc.). The RCU servers, which are housed in the OSs, contain only the last backup of the RCU
configuration files.
The RCUs contain information on the events concerning the RCU configuration changes. These events
are also copied to the configuration event database (DB) as they occur, and can be viewed by the user.
The import function lets you import RCU configuration files from external sources.
In the table below, all events, which are registered by the version control system, is defined in the column
to the left. For each type of event, the logged legal actions are defined in the column to the right.
Event Actions
Add and remove Function module created
function module Function module removed
Change in module Scan task changed
general data Scan multiplicity changed
Trig module changed
Command group changed
Alarm panel group changed
Tag name changed
Visibility level changed
Position changed
Change in function Disable alarm mode changed
module status Disable input mode changed
Disable output mode changed
Passive mode changed
Simulation Algorithm mode changed
Alternative Terminal Input mode changed
Change in specific Parameter changed
parameter values
www.kongsberg.com
Event Actions
Time-series Time-series created
configuration Time-series deleted
Time-series changed
Alarm Alarm created
configuration Alarm deleted
Alarm changed
Connection Connection created
configuration Connection deleted
Connection changed
IO configuration Slot changed
Address changed
Task changed
Card deleted
IO interface IO connection created
(Profibus) IO connection deleted
Change of RCU RCU mode changed
mode
Backup of RCU Backup succeeded
Distribution succeeded
Restore of RCU RCU configuration files restored
Boot of RCU Started
www.kongsberg.com
16.4 Version Control Backup
The version control system stores all backups of the RCU configuration files in the RCU configuration
archive. When the version control system is not enabled, only the last backup is saved (on the RCUs
fileservers).
RCU
configuration
archive Configuration
event
database(s)
Version
OS31 OS32 OS33
control
system
AIM network
RCU31
1. One of the OSs initiates a backup of the RCU31 configuration files. A comment may be
added, to be used in step (5).
2. The system tells the OS31, which runs the version control, the names of the OSs that are
fileservers for the RCU31.
3. OS31 then distributes the RCU31 configuration files to these fileservers in sequence, thus
storing the RCU configuration changes on a permanent basis. (Existing RCU
configuration information is overwritten.)
4. All distributed RCU configuration files are also stored in the RCU configuration archive
under a new label (version id) and with the additional comment inserted by the operator
in step (1).
5. Information on the backup event is sent to the configuration event database and can be
viewed by the user.
On a later point of time the user can restore the appropriate version from the RCU configuration archive.
www.kongsberg.com
16.5 Version Control Restore
A backup of the RCU configuration files, which is stored in the RCU configuration archive, can be
restored to the appropriate RCU. The restore must be initiated by an OS with enabled version control
system.
RCU Configuration
configuration event
archive database(s)
OS32 OS33
Manual
restart of
RCU by
operator
Version
OS31 RCU31
control
system
Refer to the figure above. The restore of the version controlled RCU configuration files is performed as
described in the following:
1. OS31 initiates a restore by selecting a version of a given RCU (in this case RCU31) by
getting the information from the RCU configuration archive.
2. OS31 distributes the RCU configuration files to the OSs that are fileservers for RCU31.
While doing this, messages are sent to the RCU containing the progress value.
3. An operator message is broadcasted to all OSs of the configuration telling that RCU31 is
restored with version X, and needs to be restarted.
4. RCU31 is then manually restarted by the user. During the boot-process RCU31 reads the
restored RCU configuration files from one of its fileservers.
www.kongsberg.com
16.7 User Interface
16.7.1 Availability
The Version control function is available in all image types.
Refer to chapter 4.1 Configuration Set-up Operator Stations (OS) for Project specific configuration.
www.kongsberg.com
17 Event System
The event system handles the notification of system and process alarms as well as messages.
Events
Alarms
System
Process
Messages
System
Process
Operator
Configuration
The Event Server in AIM maintains lists of the newest alarms while the state of all alarms in the system is
kept by the RCU. In the different event views both dynamic and static presentations can be
generated. Furthermore, the user can control the selection of what is displayed in the event views by
means of 'filters'. System defined filters are associated with each list, but you can specify filters that suit
specific needs. There is one list for each client connected to the event server.
Alarm line
Event image
Event popup
Event decoration
Audible alarm - a summary alarm indication
©Kongsberg Maritime Page 100 of 122
www.kongsberg.com
Alarm indication by means of colour coding and flashing effect in the graphic presentation of
modules in flow and process images.
www.kongsberg.com
State of Condition Description
Void Indicating that the alarm condition does not exist, only shown in historical lists.
Active Indicating that the alarm condition is present.
Normal Indicating that the alarm condition is no longer present.
Active and
un-ack’ed
Normal and
ack’ed or void
www.kongsberg.com
High process values As long as the terminal value is at
least equal to the limit but does not
High Scale
High Scale limit reach the next limit, the
HighHigh corresponding alarm state is active.
HighHigh limit
High
E.g. On a scale from 0 to 100, the
Alarm limits
High limit
Low limit is set to 15 and the
Normal / Void
Low limit
LowLow limit is set to 5. A Low
Low alarm is activated as 15 terminal
LowLow limit value > 5.
LowLow
Low Scale limit
Low Scale
An analogue alarm is in 'normal' or 'void' state as long as the terminal value remains within
the High and Low alarm limits. In other words, the alarm is not active.
The alarm becomes active when the terminal has reached the High or Low alarm limits but is
within the HighHigh or LowLow alarm limits.
When the terminal value has reached the HighHigh or LowLow alarm limits but is within the
HighScale or Low Scale, a new limit is passed.
The highest alarm limit is reached when the terminal value equals or exceeds the Scale High
or ScaleLow limits.
Major changes are alarm state changes defined by the following rules:
S/N Description
1 The alarm state changes from void to active.
2 The state of an acknowledged alarm increases to a worse alarm state.
3 The state of an unacknowledged alarm increases to a worse alarm state than
reported earlier since the alarm became unacknowledged (only relevant for
analogue alarms).
4 The state of an acknowledged alarm changes polarity, for example from High to
Low.
5 An unacknowledged alarm changes from suppressed to not suppress.
www.kongsberg.com
1. An acknowledged alarm changes its suppression state
2. An un-acknowledged alarm becomes acknowledged.
All other changes are minor changes.
The rules are illustrated below. The arrows indicate major changes and the number refers to which of the
above rules is applied. Other crossings of the process value with an alarm limit, illustrate points of minor
changes. The acknowledging of the alarm is a value change.
Changes to the acknowledge state, and other changes to the alarm state, are minor changes.
Process values
High Scale 3
HighHigh 3 2
High 1
Time
Low 4
LowLow
Low Scale
Unacknowledged Acknowledged
All changes are reported, but major changes imply that the alarm timestamp is updated. Consequently, the
alarm is moved to the top of the alarm list, thus calling for more attention from the operator.
www.kongsberg.com
Low Priority Alarms High Priority Alarms Critical Priority Alarms
Normally Alarms for auxiliary and Alarms that will lead to Fire and Gas alarms and
used for machinery systems which shutdown of main ESD.
will not lead to shutdown machinery systems and System alarms.
of main machinery other alarms of high
systems. severity.
System alarms. System alarms.
L=Low Priority
H=Low Priority
www.kongsberg.com
17.8.1 Acknowledgement Authority
The authority to acknowledge alarms is built on commando control and access system configuration:
An OS can only acknowledge those process alarms that are originated by the function
modules controlled by that OS. This authority is exclusive: Process alarm cannot be
acknowledged from an OS that does not control the source function module (Which command
group the module belongs to).
An OS can acknowledge system alarms originated by itself or by controlled RCU. A RCU is
controlled by the OS when it contains a function module under a command group that is
controlled by the OS in question.
An OS can acknowledge system alarms for not-controlled RCU (if the Global/Event
System/Privileges configuration parameter 'Ack Extended' is set to 'TRUE' in the system
configuration database).
Using the ACK option in the context menu of the dynamic and static alarm list and the last
alarm line.
Using the ACK button in the event image or event dialog toolbar.
Using the ACK key on dedicated AIM operator panels.
The effect of these actions depends on whether unacknowledged alarms are selected:
When one or several unacknowledged alarms are selected, the acknowledge action applies to
selected alarms only.
When no selection is made, the acknowledge action depends on the settings of the SysConf
Global/Event System/EventView parameter 'AckAllVisibleIfNoneSelected':
If 'AckAllVisibleIfNoneSelected' is ‘TRUE’, all unacknowledged alarms in the current
alarm page are acknowledged.
If 'AckAllVisibleIfNoneSelected' is ‘FALSE’, none of the unacknowledged alarms are
acknowledged.
We can also set a time limit when shelving the alarm. After the time limit, the alarm will appear on the
alarm list again.
www.kongsberg.com
As opposed to disabling alarms which only disables alarm for 10 minutes, shelving alarms can be done
for a longer timespan. Will also be reset if alarm condition is reset.
17.9.1 Purpose
This document is a guideline for offline configuration of alarm groups in the K-Chief 700 system. The
purpose of alarm group definitions is to suppress alarms based on defined conditions.
17.9.1.1 Terminology
In this document alarm suppression will have the following features in K-Chief 700:
Annunciation is turned off (no sound and no entrance in alarm list with default filter)
A suppressed alarm will enter the log with acknowledged state
In the Process view presentation, the alarm is shown as suppressed (Suppress colour, normally
Cyan)
Only process alarms can be suppressed. System alarm must be handled by other means, when
possible (e.g. IO alarms can be suppressed in certain cases by settings in the IO drivers)
First up
Group
Logical
Aggregated
The next subsections contain a brief description of the functionality for the different groups.
The groups normally used are Logical or First up. For a Logical group, a condition for alarm suppression
must be specified. This condition can be a logical expression based on a set of terminal states and io
signal states, see further description in the following sections.
17.9.1.3 First up
In a first up group, only the first member entering active state will be alarmed to the operator, and all
other alarms entering active state will be suppressed. The suppression is active as long as there are active
alarms in the group. If the first alarm goes to normal state and it is acknowledged, the next active alarm
will be shown. This will continue until all alarms are in normal state and acknowledged.
First up group are intended to be used in situations where a set of alarms will cause the same action. This
is typically used for shutdown levels and equipment protection trips.
www.kongsberg.com
17.9.1.4 Group
All members in a group alarm are suppressed. When a member in the group is entering active state a
common alarm is raised. When all alarms are in normal state, the common group alarm is also in normal
state.
The group alarm is typically used where the operator shall be warned about a situation that has occurred,
but does not need any details. The reason for the individual alarms is for presentation in detailed pictures,
for fault finding and/or maintenance purpose.
17.9.1.5 Logical
Logical alarm groups will suppress the member alarms in the group as long as the logical expression is
true (reset when false). Using several such groups for the same set of alarms is used to form context based
suppression, e.g. different logical expressions may suppress the same set of alarms.
The logical groups are normally used for process/utility systems which have different contexts (e.g.
stopped, running, shut down, maintenance etc.)
Since all alarm members in the group are suppressed, it is important that there are other unsuppressed
alarms to inform the operator of the situation.
17.9.1.6 Aggregated
Aggregated alarm group is the only group that does not suppress any alarms; it generates a new alarm
when all member alarms in the group are in active state. The alarm goes to normal state when at least one
of the member alarms is back in normal state.
This type of alarm group is used when the state of a number of basic alarms together describe the state of
a process system or sub-system more precisely than a single alarm.
The verification of the final result will be done by KM, first in a test environment.
www.kongsberg.com
For a final test, the alarm suppression setup must be included in the onboard system, and sufficient test
cases prepared.
The main items of the proposed process are described in a simple flowchart below.
www.kongsberg.com
KM Yard/Owner
responsibility responsibility
Alarm
group list
Verify
alarm Correction Update alarm
group list proposals suppression
group list
Updated
Alarm
group list
Verification completed
Onboard
test
Final alarm
suppression
test report
www.kongsberg.com
18 Time Series System
The time series system allows you to define and retrieve historical time series of logged process values
for use in reports and Trend images.
Beside time series definition, data storage is an important aspect of the time series system: While short-
term time series can be stored on the RCU, long-term time series require the storage capacity of a HS.
Data stored in time series are in turn input for trends and reports.
The time series system description covers the following main topics:
Time series
Transformations
TS definition
TS definition
Primary Secondary
Data source
time-series time-series
www.kongsberg.com
Permanent time series: In principle, a permanent time series is not limited in time, but the
number of data elements it can contain is limited. That means that new data elements are
added and old ones are purged as time progresses.
time
Data element
Time-series
Series length
According to the data manipulation they perform, time series are classified as:
Primary time series storing raw data: i.e. they fetch data and store them without further
manipulation. Only one primary time series per variable can exist on a single station (RCU or
HS).
Secondary time series applying mathematical transformations to a set of data elements stored
in another time series. The secondary time series contains the result of the transformation.
Short term time series, covering minutes or hours, can be stored on the RCU that owns the module
providing the data input.
www.kongsberg.com
18.3.2 RCU Resident Data Sources
The most obvious data source for time series is a RCU resident module variable. Any module terminal
and those module parameters that are exported for logging - i.e. module parameters of the data type
LOGVAR can act as input for primary time series on the RCU.
The definition of time series that take input from a module variable are always stored on the RCU.
www.kongsberg.com
18.4 Time Series Categories
RCU HS
TS definition
TS definition
TS definition
TS definition
TS definition
TS definition
Primary Secondary
time-series time-series
TS definition TS definition
External
APA
application
ODBC
External
application
www.kongsberg.com
HS primary time series.
Note! Secondary time series are created through continuous calculation. This
makes it possible to create a 24 hours average based on a primary time
series which is far shorter than 24 hours. The required length of the
primary series is 15 second.
www.kongsberg.com
18.5 Time Series Definition
A user's possibility to look up, create and manipulate time series definitions is determined by the
combination of the following conditions:
Whether the actual OS is in command of the command group to which the module belongs
Whether the user is a member of a user group that includes the TSConfigure security object
Whether the OS runs in PCU configuration mode.
www.kongsberg.com
19 Trend System
The Trend system is used for presentation of trends. It uses split window mechanisms to create and
present one or several trends as separate panes in a trend image. Each trend may contain one or several
trend curves.
The AIM Trend System contains functions for controlling the displaying, creation and appearance of
trends.
19.1 Trends
A trend is a presentation of one or several trend curves in a scaled axis system. You can both configure
the trend with its contents and operate on the displayed trend by using a dedicated trend context menu.
This context menu applies to the trend from which it was launched (this is significant when two or more
trends are displayed simultaneously).
Trend Image, which fills the main view area and may comprise several trends contained in
separate panes. You can add, split or merge trend panes by using splitter window techniques.
Trend Popup, which comprise a single trend in a re-sizeable popup window. The popup
remains displayed irrespective of the view selected and can be positioned anywhere within the
main view area.
Both trend presentations have a context menu that you can use to control their appearance.
Time Trend, which shows the development of single process values with the progress of time.
XY Trend, which shows the correlation between two process values within a defined time
span.
Current value subscription, which is a subscription of a process variable, i.e. the current
value of module terminal or a 'logable' parameter.
RCU time series, which is a time series stored on a RCU.
HS time series, which is a time series stored on a HS.
Trend curves with a current value subscription as the only data source will initially be empty.
A trend curve will normally display data merged from several sources simultaneously. The part of the
curve read from the HS will be displayed as a dashed line until the reading is complete.
www.kongsberg.com
19.1.4 Dynamic and Static Modes
There are two types of trend presentation modes:
Dynamic mode. When a trend is launched, it is by default displayed in dynamic mode. The
process value history is read from a RCU or a HS (if time series has been defined) and new
values are automatically appended to the trend curves as they are produced.
Static mode. The operator may choose to enter the static mode to be able to inspect the
process value history more carefully. In this mode, new values will not be appended to the
curves and the display will be frozen. If all curves in the trend have support from time series
stored on a HS, the operator may now inspect the process value history by navigating along
the time axis.
More trends can be added by user with access right to configure time series and making trend image
views.
www.kongsberg.com
20 Report System
The report system lets you design and generate reports. It provides report management, including report
scheduling, storage, printing and mailing.
This section contains the conceptual description of the report system. To fully understand all of the report
system, you should have a good understanding of:
Time-series
Event system
Operator
Clock
Event
Monitor
Export
Version
control
system
AIM Event ODBC Prepared Report
database Report
archive
Customer
specific ODBC
data source
Time limits
The main purpose of the AIM report system is to generate reports where the data is:
www.kongsberg.com
must be stored under the base path for prepared reports, defined in the Configure Report Manager dialog
box.
Prepared reports run on the OS, may prompt the user for a time span, adapting the report definition
accordingly, before producing a 'generated report': i.e. a report that contains data.
Generated reports can be displayed, printed and stored in a file in different formats. The path for storage
of generated reports is defined in the Configure Report Manager dialog box.
A prepared report is created online from one of the report templates that follow with the report system.
When applying a template, it is sufficient to assign appropriate values to the report parameters in the
prepared report.
Report templates are designed offline using the Crystal Report Designer, a commercial third party
product. The result of a report designed using the Crystal Reports system, is an .rpt file. Moving the .rpt
files to the appropriate path in the OS file structure, makes them available as report template. The base
path for storage of report templates is defined in the Configure Report Manager dialog box.
Interactively by the user: I.e. you select a prepared report and run it. The result is a 'generated'
report containing data fetched from the data source, and presented in a separate window on
the OS.
Scheduled by the OS according to the schedule parameter settings of a report job. I.e. the
system clock triggers a prepared report to be run. A scheduled report is stored in the report
archive, but not displayed, automatically.
Process event-triggered reports: A configured AIM function module trig_rep can trigger a
defined report job. The generated report is not displayed automatically.
www.kongsberg.com
20.1.4 Report Management
Report archive
Printed report
Scheduled
By event
Depending on how the report generation was initiated, reports can be stored, displayed, printed, exported
or mailed.
Printing of displayed reports can be initiated from the appropriate control in the report window.
Scheduled report may be configured to print the report upon generation.
Daily Reports
www.kongsberg.com
This report uses data from the history station. By specifying a certain time window data
from time series can be called and several mathematics functions can be used.
Hour Count Report
This report is used to show the accumulated running hours on rotating equipment.
Interactive Reports
This report uses dynamic process variables from the RCUs. It can be printed either cyclic
or on request.
www.kongsberg.com