This annex is in force for equipment installed before 1 January 2011. For
equipment installed on or after 1 January 2011 MSC.252(83) is applicable
1 SCOPE
1.1 The purpose of an integrated navigation system (INS) is to provide
'added value' to the functions and information needed by the officer in charge of
the navigational watch (OOW) to plan, monitor or control the progress of the
ship.
1.2 The INS supports mode and situation awareness.
1.3 The INS supports safety of navigation by evaluating inputs from several
independent and different sensors, combining them to provide information giving
timely warnings of potential dangers and degradation of integrity of this
information. Integrity monitoring is an intrinsic function of the INS.
1.4 The INS aims to ensure that, by taking human factors into consideration, the
workload is kept within the capacity of the OOW in order to enhance safe and
expeditious navigation and to complement the mariner's capabilities, while at the
same time to compensate for their limitations.
1.5 The function of passage execution in an Integrated Bridge System (lBS), as
defined by the Organizationfootnote, may be performed by an INS.
2 APPLICATION
2.1 These performance standards are applicable to any combination of
navigational aids that provides functions beyond the general intent defined in the
respective performance standards adopted by the Organization for individual
equipment.
2.2 The purpose of these performance standards is to support the proper and safe
integration of navigational equipment and information.
2.3 These performance standards define three categories of INS:
-
.1 INS(A) for systems that provide the minimum functional
requirements of the INS including a consistent common reference system;
-
.2 INS(B) for systems that, in addition to the functional
requirements of INS(A), provide the information needed for decision support
in avoiding hazards; and
-
.3 INS(C) for systems that, in addition to the functional
requirements of INS(B), provide the automatic control functions of heading,
track or speed.
3 DEFINITIONS
- For the purpose of these standards the following definitions apply.
3.1 Automatic control system - A control system that may include
a heading, track or speed control system.
3.2 Consistent common reference system - A sub-system of an INS
for acquisition, processing, storage and distribution of data and information
providing identical and obligatory reference to sub-systems within an INS.
3.3 Integrated navigation system - An INS is a combination of
systems that are interconnected to increase safe and efficient navigation by
suitably qualified personnel.
3.4 Integrity - Ability of the system to provide the user with information
within the specified accuracy in a timely, complete and unambiguous manner, and
alarms and indications within a specified time when the system should be used with
caution or not at all.
3.5 Multifunction display - A single visual display unit that can present,
either simultaneously or through a series of selectable pages, information from more
than one operation of a system.
3.6 Sensor - A navigational aid, with or without its own display and control
as appropriate, automatically providing information to the INS.
4 OPERATIONAL REQUIREMENTS
4.1 Functionality
General
4.1.1 In addition to meeting the relevant requirements of resolution A.694(17)footnote, the INS should comply with the requirements of these
performance standards.
4.1.2 Each part of the INS should comply with all applicable requirements adopted by
the Organization, including the requirements of these performance standards. Parts
executing multiple operations should meet the requirements specified for each
individual function they can control, monitor or perform.
4.1.3 When functions of equipment connected to the INS provide facilities in addition
to these performance standards, the operation and, as far as is reasonably
practicable, the malfunction of such additional facilities should not degrade the
performance of the INS below the requirements of these standards.
4.1.4 A failure of one part should not affect other parts except for those functions
directly dependent upon the information from the defective part.
Basic functions
4.1.5 An INS should combine, process and evaluate data from all sensors in use. The
integrity of data from different sensors should be evaluated prior to
distribution.
4.1.6 An INS should ensure that the different types of information are distributed to
the relevant parts of the system, applying a ‘consistent common reference system’
for all types of information.
4.1.7 The INS(A) should as a minimum provide the information of position, speed,
heading and time, each clearly marked with an indication of integrity.
4.1.8 The INS(B) should be able to automatically, continually and graphically
indicate the ship's position, speed and heading and, where available, depth in
relation to the planned route as well as to known and detected hazards.
4.1.9 The INS(C) should, in addition, provide means to automatically control heading,
track or speed and monitor the performance and status of these controls.
Integrity monitoring
4.1.10 The integrity of information should be verified by comparison of the data
derived independently from two or more sources if available.
4.1.11 The integrity should be verified before essential information is displayed or
used. Information with doubtful integrity should be clearly marked by the INS and
should not be used for automatic control systems.
Data exchange
4.1.12 Stand-alone equipment for which performance standards adopted by the
Organization exist, when connected to the INS, should comply with the applicable
international standardsfootnote for data exchange and interfacing.
4.1.13 Data latency should be consistent with the data requirements of the individual
parts.
4.1.14 The integrity of data exchange within the INS should be ensured.
4.1.15 A failure of data exchange should not affect any independent
functionality.
Integration
4.1.16 The INS should provide functional integration meeting the following
requirements:
-
.1 where a display or control is presented on a multifunction display unit
then these should be redundantly available; and
-
.2 validityfootnote of the data should be provided for each part
to be integrated.
Configuration control
4.1.17 It should be possible to display the complete system configuration, the
available configuration and the configuration in use.
4.2 Information and accuracy
Display of information
4.2.1 The INS should be able to display the information available in accordance with
paragraphs 4.1.7, 4.1.8 and 4.1.9 as applicable.
4.2.2 The INS should be capable of displaying output data available from the
sensors.
4.2.3 The information should be displayed together with the indication of its source
(sensor data, result of calculation or manual input), unit of measurement and
status, including mode (see sub-section Integrity monitoring).
Accuracy
4.2.4 As a minimum, the accuracy of information should meet the requirements of the
resolutionsfootnote adopted by the Organization. Additionally the INS
should not degrade the accuracy of the data provided by the sensors.
4.3 Malfunctions, alarms and indications
Fail safe operation
4.3.1 The system's automatic response to malfunctions should result in the safest of
any other configuration accompanied by clear indications and alarms.
Reversionary mode
4.3.2 The INS should allow simple and effective operator action to override or
by-pass any automated functions. The INS should resume automatic functions only
after an appropriate message and intended operator action, considering all necessary
starting conditions.
Alarm management
4.3.3 An alarm management system should be provided.
4.3.4 The INS alarm management system, as a minimum, should comply with the
requirements of the Organization.footnote
4.3.5 The number of alarms should be kept as low as possible by providing indications
for information of lower importance.
4.3.6 Alarms should be displayed so that the alarm reason and the resulting
functional restrictions can be easily understood. Indications should be
self-explanatory.
5 ERGONOMIC CRITERIA
5.1 Cognitive ergonomics
5.1 1 Integrated display and control functions should adopt a consistent human
machine interface (HMI) philosophy and implementation.
5.1.2 The HMI should be so designed that the provided information is clearly
understood using a consistent presentation style.
5.1.3 The HMI should be so designed that the requested manual inputs can be easily
executed.
5.1.4 For manual inputs that may cause unintended results, the INS should request
confirmation before acceptance, thus providing a plausibility check.
5.2 Physical ergonomics
Controls and displays
5.2.1 Particular consideration should be given to:
-
- symbols;
-
- controls; and
-
- layout.
Operational controls
5.2.2 The INS should be designed and implemented so that the OOW easily operates
basic functions from work stations.
Presentation of information
5.2.3 Continuously displayed information should be optimised and should include
position, speed, heading and time. Supplementary information should be readily
accessible.
6 DESIGN AND INSTALLATION
General
6.1 The INS should meet the relevant requirements of resolution A.694(17) and appropriate international standardsfootnote.
Failure analysis
6.2 A failure analysisfootnote should be performed and documented for the installed
configuration of the INS which includes all parts connected to or integrated into
the system, including devices for manual override of automatic functions and their
locations on the bridge.
Installation requirements
6.3 The INS should be installed so that it can meet the requirements of the relevant
International Standardsfootnote.
Power supply requirements
6.4. Power supply requirements applying to parts of the INS as a result of other IMO
requirements should remain applicable.
6.5 The INS should be supplied:
-
.1 from both the main and the emergency source of electrical
power with automated changeover through a local distribution board with
provision to preclude inadvertent shutdown; and
-
.2 from a transitional source of electrical power for a duration
of not less than 45 s.
Power interruptions and shutdown
6.6 After a power interruption full functionality of the INS should be available
after recovery of all subsystems. The INS should not increase the recovery time of
individual subsystem functions after power restoration.
6.7 If subjected to a power interruption the INS should, upon restoration of power,
maintain the configuration in use and continue automated operation, as far as
practicable. Safety related automatic functions, should only be restored upon
confirmation by the operator.
7 INTERFACING
-
Interfacing to, and from, the INS should comply with
international standardsfootnote, as appropriate.
8 FALL-BACK ARRANGEMENTS
8.1 The INS should, after a failure, support the availability of essential
information through the use of appropriate fallback arrangements.
8.2 Normal operation, after use of a fall-back arrangement, should only be restored
upon confirmation by the operator.