{"id":48229,"date":"2026-02-02T20:51:16","date_gmt":"2026-02-02T20:51:16","guid":{"rendered":"https:\/\/maritimehub.co.uk\/?p=48229"},"modified":"2026-02-02T20:57:21","modified_gmt":"2026-02-02T20:57:21","slug":"relay-protection-on-ships","status":"publish","type":"post","link":"https:\/\/maritimehub.co.uk\/relay-protection-on-ships\/","title":{"rendered":"Relay Protection on Ships"},"content":{"rendered":"\n

This is a drop-in replacement<\/strong> for the earlier version.<\/p>\n\n\n\n

\n\n\n\n

\u26a1 Relay Protection on Ships<\/h1>\n\n\n\n

Functions, Settings, and When \u201cCorrect\u201d Trips Kill Ships<\/h2>\n\n\n\n
\"https:\/\/download.schneider-electric.com\/files?default_image=DefaultProductImage.png&p_Doc_Ref=PowerLogicP3_Image&p_File_Type=rendition_369_jpg\"\/<\/figure>\n\n\n\n
\"https:\/\/m.media-amazon.com\/images\/I\/61IJte47a0L._AC_UF894%2C1000_QL80_.jpg\"\/<\/figure>\n\n\n\n
\"https:\/\/npr.brightspotcdn.com\/dims4\/default\/993f962\/2147483647\/strip\/true\/crop\/7004x4672%2B0%2B0\/resize\/880x587%21\/quality\/90\/?url=http%3A%2F%2Fnpr-brightspot.s3.amazonaws.com%2F03%2F39%2F2ba9fa054d3687ac63b6e1b80eef%2Fap24090704588050.jpg\"\/<\/figure>\n\n\n\n

4<\/p>\n\n\n\n

\n\n\n\n

Introduction \u2014 Relays don\u2019t protect equipment, they decide outcomes<\/h2>\n\n\n\n

Relay protection on ships is often taught as a technical subject: functions, ANSI numbers, curves, settings. In reality, relay protection is a decision-making system<\/strong>.<\/p>\n\n\n\n

Every relay setting answers one question:<\/p>\n\n\n\n

\n

What do we sacrifice first when something goes wrong?<\/em><\/p>\n<\/blockquote>\n\n\n\n

If the answer is \u201cthe ship\u201d, the philosophy is wrong \u2014 even if the relay operates exactly as designed.<\/p>\n\n\n\n

\n\n\n\n

What relay protection is actually for on ships<\/h2>\n\n\n\n

On land, protection philosophy prioritises:<\/p>\n\n\n\n

    \n
  • asset protection<\/li>\n\n\n\n
  • fire containment<\/li>\n\n\n\n
  • restart later<\/li>\n<\/ul>\n\n\n\n

    At sea, the priorities invert:<\/p>\n\n\n\n

      \n
    1. Preserve propulsion and steering<\/strong><\/li>\n\n\n\n
    2. Contain the fault locally<\/strong><\/li>\n\n\n\n
    3. Protect people<\/strong><\/li>\n\n\n\n
    4. Protect equipment<\/li>\n<\/ol>\n\n\n\n

      A relay that trips \u201ccorrectly\u201d but causes a total blackout during manoeuvring has failed its maritime purpose<\/strong>.<\/p>\n\n\n\n

      \n\n\n\n

      Core protection functions \u2014 and what they really do at sea<\/h2>\n\n\n\n

      50 \/ 51 \u2014 Overcurrent (Instantaneous \/ Time-Delayed)<\/h3>\n\n\n\n

      These are the backbone of shipboard protection.<\/p>\n\n\n\n

        \n
      • 50 (Instantaneous)<\/strong>
        Clears high-energy faults quickly. Limits arc flash and fire.<\/li>\n\n\n\n
      • 51 (Time-delayed)<\/strong>
        Allows discrimination \u2014 but at the cost of time and energy release<\/em>.<\/li>\n<\/ul>\n\n\n\n

        On ships, excessive delay increases:<\/p>\n\n\n\n

          \n
        • arc energy<\/li>\n\n\n\n
        • fire risk<\/li>\n\n\n\n
        • switchboard destruction<\/li>\n\n\n\n
        • blackout probability<\/li>\n<\/ul>\n\n\n\n
          \n\n\n\n

          64 \u2014 Earth Fault \/ Insulation Monitoring<\/h3>\n\n\n\n

          Most ships operate ungrounded (IT) systems<\/strong>.<\/p>\n\n\n\n

          An earth fault:<\/p>\n\n\n\n

            \n
          • does not immediately trip<\/li>\n\n\n\n
          • is an early warning<\/strong><\/li>\n\n\n\n
          • is often ignored<\/li>\n<\/ul>\n\n\n\n

            This is dangerous. Many catastrophic phase-to-phase faults start as unresolved earth faults<\/strong>.<\/p>\n\n\n\n

            \n\n\n\n

            27 \/ 59 \u2014 Under \/ Over-Voltage<\/h3>\n\n\n\n

            These protect:<\/p>\n\n\n\n

              \n
            • motors from stall damage<\/li>\n\n\n\n
            • control systems from collapse<\/li>\n\n\n\n
            • PMS logic from instability<\/li>\n<\/ul>\n\n\n\n

              Disabling undervoltage trips to \u201cride through\u201d disturbances has repeatedly led to complete system collapse<\/strong> instead.<\/p>\n\n\n\n

              \n\n\n\n

              81 \u2014 Under \/ Over-Frequency<\/h3>\n\n\n\n

              Frequency protection prevents:<\/p>\n\n\n\n

                \n
              • generator pole slip<\/li>\n\n\n\n
              • mechanical stress<\/li>\n\n\n\n
              • loss of synchronism<\/li>\n<\/ul>\n\n\n\n

                During load changes or fault recovery, frequency behaviour is often the first sign the system is failing<\/strong>.<\/p>\n\n\n\n

                \n\n\n\n

                87 \u2014 Differential Protection<\/h3>\n\n\n\n

                Applied to:<\/p>\n\n\n\n

                  \n
                • generators<\/li>\n\n\n\n
                • transformers<\/li>\n\n\n\n
                • bus sections (where fitted)<\/li>\n<\/ul>\n\n\n\n

                  Differential protection is fast and selective \u2014 but only if CT ratios, polarity, and wiring are correct<\/em>. Incorrect commissioning has caused both:<\/p>\n\n\n\n

                    \n
                  • false trips<\/li>\n\n\n\n
                  • total non-operation during internal faults<\/li>\n<\/ul>\n\n\n\n
                    \n\n\n\n

                    \ud83d\udd27 Regulatory framework (non-negotiable)<\/h2>\n\n\n\n

                    SOLAS Chapter II-1, Regulation 45<\/h3>\n\n\n\n
                    \n

                    \u201cElectrical installations shall be arranged so as to minimize the risk of fire and electric shock.\u201d<\/p>\n<\/blockquote>\n\n\n\n

                    This regulation underpins all protection philosophy onboard ships<\/strong>.<\/p>\n\n\n\n

                    \n\n\n\n

                    IEC 60092-401 \/ 402<\/h3>\n\n\n\n

                    Require:<\/p>\n\n\n\n

                      \n
                    • protection against overload and short-circuit<\/li>\n\n\n\n
                    • coordination appropriate to system behaviour<\/li>\n\n\n\n
                    • arrangements that limit fire and shock risk<\/li>\n<\/ul>\n\n\n\n
                      \n\n\n\n

                      IACS E11 (Class Rules)<\/h3>\n\n\n\n

                      Class societies expect:<\/p>\n\n\n\n

                        \n
                      • a documented protection philosophy<\/strong><\/li>\n\n\n\n
                      • relay settings aligned with system studies<\/li>\n\n\n\n
                      • evidence of testing and review after modification<\/li>\n<\/ul>\n\n\n\n

                        Undocumented relay changes are routinely raised as Class deficiencies<\/strong>.<\/p>\n\n\n\n

                        \n\n\n\n

                        \ud83d\udd3b Real-World Case: MV Dali<\/em> \u2014 Blackout, Protection, and the Baltimore Bridge Collapse (2024)<\/h2>\n\n\n\n
                        \"https:\/\/www.lloydslist.com\/-\/media\/lloyds-list\/images\/casualty\/2024-new-pictures\/baltimore-bridge-dali-folder\/baltimore-bridge-dali-accident.png?rev=f5732b9412294527810df88a97295e8d\"\/<\/figure>\n\n\n\n
                        \"https:\/\/images.openai.com\/static-rsc-3\/rpeTyqpzmg8nqn4VHbxXzR5xSgVCgWy8hL8kghcWzkeX7eQpg3AWjQ0kip8I64ckl_Snagqvth86t4WHLefXxGanPVfbuogf9eOM9FBMmDU?purpose=fullsize\"\/<\/figure>\n\n\n\n
                        \"https:\/\/res.cloudinary.com\/graham-media-group\/image\/upload\/f_auto\/q_auto\/c_thumb%2Cw_700\/v1\/media\/gmg\/AWESJT4BEJG43CFHEYR43MWRTE.jpg?_a=DATAg1eAZAA0\"\/<\/figure>\n\n\n\n

                        On 26 March 2024<\/strong>, the Singapore-flagged container vessel MV Dali<\/strong> suffered a total electrical blackout<\/strong> while departing the Port of Baltimore.<\/p>\n\n\n\n

                        With propulsion and steering lost, the vessel struck the Francis Scott Key Bridge<\/strong>, causing its catastrophic collapse.
                        Six construction workers were killed.<\/p>\n\n\n\n

                        This was not a navigation error.
                        It was a power system failure with no effective recovery window<\/strong>.<\/p>\n\n\n\n

                        \n\n\n\n

                        Why this is a relay-protection lesson<\/h3>\n\n\n\n

                        While the full investigation is ongoing, the incident highlights the central danger of shipboard protection philosophy:<\/p>\n\n\n\n

                          \n
                        • A fault occurred<\/li>\n\n\n\n
                        • Electrical power was lost<\/li>\n\n\n\n
                        • Redundancy did not preserve propulsion<\/li>\n\n\n\n
                        • Recovery time exceeded the available stopping distance<\/li>\n<\/ul>\n\n\n\n

                          From a protection perspective, the critical questions are:<\/p>\n\n\n\n

                            \n
                          • Why was the fault not isolated while maintaining partial power<\/strong>?<\/li>\n\n\n\n
                          • Why did protection and PMS behaviour permit a total blackout<\/strong>?<\/li>\n\n\n\n
                          • Were settings optimised for equipment protection rather than ship control<\/strong>?<\/li>\n<\/ul>\n\n\n\n

                            The relays may have operated \u201ccorrectly\u201d.
                            The system outcome was catastrophic<\/strong>.<\/p>\n\n\n\n

                            \n\n\n\n

                            \ud83d\udd3b Real-World Case: Generator Damage After Delayed Overcurrent Trip<\/h2>\n\n\n\n

                            In a separate, well-documented incident on a multipurpose vessel, a stator fault developed in a running generator.<\/p>\n\n\n\n

                            Investigation found:<\/p>\n\n\n\n

                              \n
                            • overcurrent relay time-delayed for \u201cselectivity\u201d<\/li>\n\n\n\n
                            • fault energy sustained too long<\/li>\n\n\n\n
                            • severe thermal and mechanical damage to the generator<\/li>\n<\/ul>\n\n\n\n

                              The relay operated exactly as set.<\/p>\n\n\n\n

                              The generator was destroyed \u2014 and the vessel lost generating capacity for weeks.<\/p>\n\n\n\n

                              This incident reinforces the same truth as MV Dali<\/em>:<\/p>\n\n\n\n

                              \n

                              Protection that waits too long trades equipment damage for system survival \u2014 and sometimes loses both.<\/p>\n<\/blockquote>\n\n\n\n

                              \n\n\n\n

                              Where relay philosophy fails onboard ships<\/h2>\n\n\n\n

                              Common failure patterns include:<\/p>\n\n\n\n

                                \n
                              • Inherited settings<\/strong> copied from sister vessels<\/li>\n\n\n\n
                              • Over-selective coordination<\/strong> that extends fault duration<\/li>\n\n\n\n
                              • Earth fault alarms ignored<\/strong> because \u201cnothing trips\u201d<\/li>\n\n\n\n
                              • PMS logic fighting protection logic<\/strong><\/li>\n\n\n\n
                              • Settings adjusted after incidents without system review<\/strong><\/li>\n<\/ul>\n\n\n\n

                                Protection that is not periodically reviewed becomes historical fiction<\/strong>.<\/p>\n\n\n\n

                                \n\n\n\n

                                How professional ETOs think about relays<\/h2>\n\n\n\n

                                Instead of asking:<\/p>\n\n\n\n

                                  \n
                                • \u201cWill this trip?\u201d<\/li>\n<\/ul>\n\n\n\n

                                  They ask:<\/p>\n\n\n\n

                                    \n
                                  • Where is the ship when it trips?<\/em><\/li>\n\n\n\n
                                  • What remains powered afterwards?<\/em><\/li>\n\n\n\n
                                  • How much time do we have before impact, grounding, or loss of control?<\/em><\/li>\n<\/ul>\n\n\n\n

                                    Relays are not technical abstractions.
                                    They are risk governors<\/strong>.<\/p>\n\n\n\n

                                    \n\n\n\n

                                    Knowledge to Carry Forward<\/h2>\n\n\n\n

                                    Relay protection on ships is not about protecting copper \u2014 it is about preserving control while time still exists<\/strong>.<\/p>\n\n\n\n

                                    Every delay, curve, and pickup setting must be judged against one question:<\/p>\n\n\n\n

                                    \n

                                    If this operates now \u2014 what does the ship lose next?<\/em><\/p>\n<\/blockquote>\n\n\n\n

                                    When protection philosophy allows:<\/p>\n\n\n\n

                                      \n
                                    • total blackout,<\/li>\n\n\n\n
                                    • slow recovery,<\/li>\n\n\n\n
                                    • or cascading trips,<\/li>\n<\/ul>\n\n\n\n

                                      the electrical system itself becomes the hazard.<\/p>\n\n\n\n

                                      \n\n\n\n

                                      Tags<\/h2>\n\n\n\n

                                      ETO, Relay Protection, Marine Blackout, Generator Protection, MV Dali, Protection Philosophy, SOLAS II-1, IEC 60092, Ship Electrical Failures, Accident Case Study<\/p>\n","protected":false},"excerpt":{"rendered":"

                                      This is a drop-in replacement for the earlier version. \u26a1 Relay Protection on Ships Functions, Settings, and When \u201cCorrect\u201d Trips Kill Ships 4 Introduction \u2014 Relays don\u2019t protect equipment, they decide outcomes Relay protection on ships is often taught as a technical subject: functions, ANSI numbers, curves, settings. In reality, relay protection is a decision-making […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"fifu_image_url":"","fifu_image_alt":"","c2c-post-author-ip":"","footnotes":""},"categories":[9,1],"tags":[],"class_list":["post-48229","post","type-post","status-publish","format-standard","hentry","category-electrical","category-latest"],"acf":[],"_links":{"self":[{"href":"https:\/\/maritimehub.co.uk\/?rest_route=\/wp\/v2\/posts\/48229","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/maritimehub.co.uk\/?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/maritimehub.co.uk\/?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/maritimehub.co.uk\/?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/maritimehub.co.uk\/?rest_route=%2Fwp%2Fv2%2Fcomments&post=48229"}],"version-history":[{"count":2,"href":"https:\/\/maritimehub.co.uk\/?rest_route=\/wp\/v2\/posts\/48229\/revisions"}],"predecessor-version":[{"id":48234,"href":"https:\/\/maritimehub.co.uk\/?rest_route=\/wp\/v2\/posts\/48229\/revisions\/48234"}],"wp:attachment":[{"href":"https:\/\/maritimehub.co.uk\/?rest_route=%2Fwp%2Fv2%2Fmedia&parent=48229"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/maritimehub.co.uk\/?rest_route=%2Fwp%2Fv2%2Fcategories&post=48229"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/maritimehub.co.uk\/?rest_route=%2Fwp%2Fv2%2Ftags&post=48229"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}