The engine protecting system (EPS) is designed to monitor the ship’s main engine performance and speed, then control the engine protection functions, such as shutdown and slowdown, if the engine’s monitored operations exceed defined limits. The protecting system provides the following control and monitoring facilities:

Control of:

•    Emergency stop

•    Engine shutdown

•    Engine slowdown

Monitoring of:

•    Engine speed

•    Engine overspeed

•    Engine shutdown sensors

•    Engine slowdown sensors

•    RPM detectors

•    Emergency stop pushbuttons

•    Emergency stop (auto-stop) solenoid valve

Emergency Shutdown

This function is independent of the engine control system and is available at any time regardless of the control position of the main engine. Visual and audible alarms are issued in the event of a shutdown. When a detector for any of the emergency shutdown parameters detects an abnormality, it energises the emergency shutdown solenoid valve and issues the emergency shutdown signal to the governor which shuts off fuel to the engine. The emergency shutdown parameters are indicated in the table opposite.

It is possible to cancel a shutdown if the SHUT DOWN CANCEL pushbutton is pressed within the specified time period. If the SHUT DOWN CANCEL pushbutton is not pressed the shutdown proceeds and cannot be stopped.

Resetting  of the emergency  shutdown  is undertaken  after the fault causing the shutdown has been corrected. Resetting can take place at the following locations.

•    The  Bridge  Control  Console  by  moving  the  main  telegraph manoeuvring transmitter to the STOP position.

•    Engine Control Room Console by moving the speed control dial to the STOP position.

•    Engine Side Manoeuvring Stand by moving the fuel regulating control to the STOP position.

The shutdown cause indicator in the LCD panel will remain illuminated after the cause has been corrected until the CAUSE RESET pushbutton is pressed at the LCD panel.

Slowdown and Shutdown Functions

Item	Slowdown	Shutdown
LO inlet temperature high	60C
Piston cooling oil outlet temperature high	75C
Piston cooling oil outlet no flow	*
Piston cooling oil inlet pressure low	0.1MPa
Main LO inlet pressure low	0.1MPa	0.08MPa
Camshaft LO pressure low	0.1MPa
Turbocharger LO inlet pressure		0.06MPa
Exhaust valve driving gear LO pressure low	0.15MPa
Main LO inlet temperature high	60C
Piston cooling outlet temperature high	75C
Main bearing outlet LO temperature deviation	+/-7C
Bearing LO outlet temperature high	70C
Bearing shell temperature high	70C
Thrust bearing segment temperature high	75C	85C
Camshaft LO inlet temperature high	60C
Fresh water cooling inlet manifold pressure low	0.12MPa
Fresh water cooling outlet/cylinder temperature high	90oC
Fresh water cooling pressure differential in/out	+/-0.01MPa
Scavenge air box fire detector	90C
Exhaust gas outlet/cylinder temperature high	450C
Exhaust     gas     outlet/cylinder     temperature (deviation)	+/-50C
Oil mist in crankcase	*
Engine overspeed		*114

Emergency Slowdown

This function is independent of the engine control system and is available at any time under bridge and engine control room control. Visual and audible alarms are issued in the event of a slowdown. Slowdown parameters are given in the table opposite.

Except  for  the  high  crankcase  oil  mist  a slowdown  may  be  cancelled  by pressing  the SLOW  DOWN  CANCEL  pushbutton  within  a specified  time period. If the SLOW DOWN CANCEL pushbutton is not pressed within that time period the slowdown becomes active. In the event of high crankcase oil mist triggering a slowdown this may be cancelled by pressing the OIL MIST SLOW DOWN CANCEL pushbutton within the specified time period.

When a detector for any of the slowdown parameters detects an abnormality the engine reaction differs depending upon the current operating speed.

If the engine operating  speed is higher than the slowdown  speed level the slowdown  signal is sent to the governor to reduce the engine speed to the slowdown level.

If the engine  operating  speed is lower than the slowdown  speed level the slowdown signal is not sent to the governor and the engine speed remains the same.

A slowdown can be reset after the cause of the slowdown has been corrected, resetting taking place at the following locations.

•    The  Bridge  Control  Console  by  moving  the  main  telegraph manoeuvring transmitter to the position below SLOW.

•    Engine Control Room Console by moving the speed control dial to the corresponding position below the slowdown level.

The slowdown cause indicator in the LCD panel will remain illuminated after the cause has been corrected until the CAUSE RESET pushbutton is pressed at the LCD panel.

Crash Astern under Control Room Manoeuvring

The crash astern operation can be carried out when the engine is turning in the ahead direction at a speed higher than the normal speed at which reversing of the engine is possible using the control system. In order to prevent a misfire the scavenge air pressure fuel limiter in the governor is cancelled for about 30 seconds. The crash astern procedure is carried out by moving the telegraph receiver knob to the astern position and moving the speed control dial to the START position.

Cancelling of the Fuel Limiter

This function is available under bridge control or engine control room control. The scavenge air pressure fuel limiter is cancelled in the following situations.

•    When a repeat start or crash astern is carried out from the bridge control console.

•    When the SCAV. LIMIT. CUT OUT pushbutton in the LCD panel is pressed.

•    When  a crash  astern  is  carried  out  from  the  engine  control room.

In each of the above cases a signal for cancelling the scavenge air pressure fuel limiter is sent to the governor.

Fuel Cam Abnormal Alarm

If the position of any of the roller guides for the fuel pump cams does not correspond with the position for the ordered rotating direction of the engine a ‘Fuel Cam Abnormal’ alarm is activated on the bridge and in the engine control room if the condition exists for more than 5 seconds.

The situation must be investigated immediately, and the cause of the abnormality corrected.

System Malfunction

A ‘System Failure’ alarm is activated on the bridge and an ‘EPS System Malfunction’ alarm is activated in the engine control room in the event of any of the following abnormalities.

• No.1 rpm pickup abnormal.
• No.2 rpm pickup abnormal.
• RDU abnormal.
• Solenoid valve abnormal. This may be a short or broken circuit in the emergency shutdown solenoid valve.
• Sensor abnormality. This may be an abnormality in the detectors for emergency shutdown or slowdown.
  After the cause of the system malfunction has been corrected the alarm is reset by pressing the CAUSE RESET pushbutton in the LCD panel.

Critical Speed Alarm

If the engine runs in the critical speed zone for more than 5 seconds (variable) the ‘Critical Speed’ alarm is activated.

Note: Operation of each of the slowdown and shutdown systems should be tested annually. Checking should be done at a time when normal operation of the ship will not be endangered. Checking is normally done by simulating slowdown and shutdown conditions rather than actually instigating them.