基于STAMP/STPA的LNG船对船过驳系统安全性分析  

A Safety Analysis of LNG Ship-to-ship Transfer System Based on a STAMP/STPA Model

作　　者：朱明昌 黄立文[1,2] 谢澄[1] 石峰[3] 陶可健 ZHU Mingchang;HUANG Liwen;XIE Cheng;SHI Feng;TAO Kejian(School of Navigation,Wuhan University of Technology,Wuhan 430063,China;Hubei Key Laboratory of Inland Shipping Technology,Wuhan University of Technology,Wuhan 430063,China;CNOOC Energy Technology&Services-Oil Production Services Co.,Tianjin 300452,China)

机构地区：[1]武汉理工大学航运学院,武汉430063 [2]武汉理工大学内河航运技术湖北省重点实验室,武汉430063 [3]中海油能源发展股份有限公司采油服务分公司,天津300452

出　　处：《交通信息与安全》2021年第6期44-53,共10页Journal of Transport Information and Safety

基　　金：国家重点研发计划项目(2019YFB1600603)资助。

摘　　要：针对LNG船对船过驳作业具有高危险性和高复杂性的特点,探究在作业过程中其复杂系统部件发生异常交互的安全性问题,基于系统理论和控制理论构建LNG船对船过驳系统的STAMP控制关联模型,将船对船过驳系统拆分为多个层次结构,形成约束控制和反馈,并采用系统理论过程分析STPA方法,识别过驳作业中的系统级事故、系统级危险,以及潜在的不安全控制行为,构建考虑了人工控制器的过驳系统致因场景分析模型,从系统控制缺陷、反馈缺陷和协调缺陷3个方面提出了系统中的22个致因因素。结果表明,LNG过驳系统中潜在致因因素众多,传感器系统失效、控制阀失效和操作员人为因素等是引发多个系统级危险的重要原因,并从致因因素出发提出安全控制措施。该方法应用于具有人、软件、设备等大量交互的船舶过驳动态作业中,不仅克服了仅关注关键部件故障和不能包含系统动态行为的局限性,同时还考虑到系统中未发生故障组件之间的不安全交互相关问题。Given the high risk and complexity of LNG ship-to-ship transfer operations,the safety problem of abnormal interaction of complex system components during operation is studied.A system-theoretic accident model and process(STAMP)control association model of the LNG ship-to-ship transfer system is constructed based on system theory and control theory splitting the ship-to-ship transfer system into multiple hierarchical structures to form constrained control and feedback.The system theoretic process analysis(STPA)method is adopted to identify system-level accidents,system-level hazards,and potential unsafe control behaviors in transfer operations.A causal scenario analysis model considering manual controllers is developed,and 22 causal factors in this system are proposed from system control defect,feedback defect,and coordination defect.The results show many potential causes in the LNG transfer system.Sensor system failure,control valve failure,and operator human factors are important causes of multiple system-level hazards,and safety control measures are proposed from the causal factors.This method is applied to the dynamic operation of ship transfer with a large number of interactions among people,software,and equipment,considering the non-faulty components in the system and overcoming the limitation of focusing on the failure of key components and excluding the dynamic behavior of the system.

关 键 词：交通安全 LNG船 船对船过驳 安全性分析 STAMP模型 STPA分析 

分 类 号：U698.6[交通运输工程—港口、海岸及近海工程]