The analysis of failure and reliability factors of impressed current cathodic protection (ICCP) design toward underwater line of warship (Case study in kri kcr-40 type)

Corrosion at the bottom of a ship’s water line can result in personnel and material safety risks. There are 2 (two) ways to protect against corrosion, they are passive protection (by painting) and active protection (by cathodic protection method). In the KRI with KCR-40 type, the design of the bottom line of the ship’s waterline protection has been carried out with ICCP, but the value of its failure risk and reliability is unknown, both functional and designs, so that the design of the tool cannot be used maximally. This research aimed to determine the factors of failure and reliability value of the design-based ICCP (Reliability by Design) with the FTA and FMEA approach, the FTA aimed to identify the risks that contribute to the failure. The main factors causing failure in the design of ICCP tools occur in the component of Steel potential indicator and rectifier indicator with a failure mode not pointing to the correct number, this will result in corrosion control which is expected to be uncontrolled properly and correctly due to incorrect data input. After analyzing the FTA, the reliability value was 33%. Mitigation of tool components that have a high level of risk among other things in the indicator of steel potential and rectifier indicators: the first was to redesign the laying of some components of the tool compilers to pay attention to the circulating circulation in the box so that the tool works more optimally, the second was to carry out periodic control while the device was operating, and third was to ensure that the electrical power used was stable so there were no problems with the ICCP device while the ICCP device was operating.


Introduction
T here is a common problem in the readiness of the Main Defense Equipment of Weapon System (Alutsista) of Navy Indonesia Armed Forces which is often faced with one of them, it is Corrosion. Corrosion on KRI occurs in underwater ship buildings which are exposed to sea water conditions. Corrosion at the bottom of a ship's water line can result in personnel and material safety risks. There are 2 (two) ways to protect against corrosion, they are passive protection (by painting) and active protection (by cathodic protection method). In the KRI with KCR-40 type, the design of the bottom line of the ship's waterline protection has been carried out with ICCP, but the value of its failure risk and reliability is unknown, both functional and designs, so that the design of the tool cannot be used maximally.
This research aimed to determine the factors of failure and reliability value of the design-based ICCP (Reliability by Design) with the FTA and FMEA approach, the FTA aimed to identify the risks that contribute to the failure. This method was carried out with a top down approach, which began with the assumption of failure or loss from a top event then detailed the causes of a top event to a root cause, whereas FMEA was a tool used to analyze the reliability of a system and the causes of its failure, by providing basic information about the system reliability prediction, design, and process.
This research was expected to be used as a reference in planning the development of a forced current method protection system (ICCP). This research was limited to several aspects, it was testing the function of the ICCP in a static state, the analysis used was limited to failure factors and nonparametric reliability calculations.
There were several previous researches as supporting research, namely FTA and FMEA models are used as a risk analysis method in safety system [1]. The paper presents about FMEA and Fishbone diagrams for possible failures that occur in the engine [2]. FTA and FMEA as a model for evaluating failures or important parts of the system [3]. FTA and FMEA as a model for analyzing the reliability of BPRS field connection configurations [4]. FTA and FMEA as a model to identify the potential impact of failures in the Requirements Phase [5]. HAZOP and FTA to provide risk analysis in the chemical industry [6]. FTA and FMEA as a model to improve quality in the cleaning process [7]. FTA and FMEA as a method for identifying critical function level failures in metal printing additive manufacturing systems [8]. FTA and FMEA as a method to improve the quality of large industrial products at the end consumer level [9]. FTA and FMEA as a method to identify modes, components, and sub-systems of critical failures in CNC systems [10]. FTA and FMEA as a method for analyzing failure modes and effects on power plant boilers.
The systematically of the paper is organized as follows. Section 2 presents the theory of Fault Tree Analysis (FTA), Failure Mode Effect Analysis (FMEA), Corrosion, Reliability, Flowchart of research. Section 3 and Section 4 explain the result and discussion of research. Section 5 describes conclusion of the research.

Corrosion
Corrosion can generally be defined as a deterioration in the quality or destruction of a metal by reacting with its environment [11]. Reactions in this corrosion produce metal oxides, metal sulfides or other reaction products. Corrosion is divided into two according to the type of reaction, they are chemical corrosion or dry corrosion and electrochemical corrosion or wet corrosion [12]. Dry or chemical corrosion is a process of corrosion that occurs through pure chemical reactions without electrolytes, usually occurring at high temperatures without the presence of water vapor. Electrochemical corrosion or wet corrosion occurs when the reaction takes place in an electrolyte and there is a transfer of electrons between the materials concerned, this reaction is what happens a lot in the corrosion process [13].
Corrosion process also occurs due to the tendency of a metal to turn into a more stable state through an oxidation reaction, where the oxidation tendency of a metal varies depending on the reduction potential. Basically the process of corrosion is the dissolution of metals by the reaction of metal surfaces with chemicals contained in the metal environment. If the metal is exposed to seawater or freshwater medium which has a pH close to neutral then the metal will spontaneously oxidize according to the reaction [11]: Cathodic reactions that occur in this condition are [14]: Because chloride, nitrate and other anion ions are not involved in this reaction, the whole reaction can be written as follows: The resulting Fe(OH) 2 compound will settle to the metal surface to form a layer. The formed layer is porous so that oxygen can diffuse into the layer, which in turn oxidation process will take place slowly. Fe(OH) 2 is a compound that is less stable in the presence of oxygen, the compound Fe(OH) 2 will further oxidize to form a more stable iron oxidation or also called iron rust [11].
There are four main elements that must be fulfilled so that corrosion can occur, if one of them disappears, then corrosion cannot occur. The four elements, among others [

Impressed current cathodic protection (ICCP) method
In planning the cathodic protection system with the ICCP method on ships, there are some things that are absolutely considered so that planning can be carried out on target, it is minimizing the occurrence of corrosion on the surface of the protected ship, including [15]: 1. The condition of the protected environmental structure; 2. Operational environmental conditions; 3. Equipment used.
The purpose of this ICCP is to minimize the corrosion or corrosion that occurs in metals immersed in water. Corrosion protection in open hulls and hidden areas such as sea-chests are generally carried out at a certain level except when making special installation plans [16]. Protection of the hull by the ICCP method, which is a method of protection by providing electrons to the hull with the help of an external source of electric current. The electrons given to the material come from permanent anodes made of metal [17].
The basic principle of the ICCP system is to provide more negative potential, so that the metal will move into the immune zone. The difference between the corrosion zone and the immune zone is based solely on definition, but in reality even though the metal is in the immune zone, corrosion continues at a slower rate [18]. The more negative potential given will slow down the anodic reaction, conversely the cathodic reaction will be faster, as a result the metal will become more cathodic [19]. Hexagonal tiling under small cell complex is given in Figure 1.

Reliability and probability of underwater ship building
Mode of failure in underwater ship hull, among others, is the loss of service capability (loss of serviceability), loss of human function either partially or as a whole. The consequences of a failure vary greatly, including the decline in service life, increased maintenance costs, user costs, the impact on the environment and this will all be seen clearly that some consequences cannot be compared and cannot be evaluated in monetary terms [20].
In underwater hull, a vital failure criterion is the loss of structural strength which influences the reduction in underwater hull plate thickness [21]. The thickness reduction of the underwater ship hull one of which comes from corrosion. One of the influencing factors is the corrosion attack on the outside of the hull plate (external corrosion) which is in direct contact with the sea water environment.

Fault tree analysis (FTA) method
Fault Tree Analysis is an analytical tool that graphically translates combinations of errors that cause system failure. This technique is useful to describe and assess events in the system [22]. This Fault Tree Analysis method is effective in finding the core problem because it ensures that an undesirable event or loss caused does not originate at a single point of failure. Fault Tree Analysis identifies the relationship between causal factors and is displayed in the form of an error tree that involves a simple logic gate. There are 5 stages to carry out analysis with Fault Tree Analysis (FTA), which are as follows [23]: 1. Define the problem and boundary conditions of a system under review; 2. A depiction of the Fault Tree graphic model; 3. Finding the minimum cut set from the Fault Tree analysis; 4. Perform a qualitative analysis of the Fault Tree; 5. Perform a quantitative analysis of the Fault Tree.
Logic gate describes the conditions that trigger failure, both single and a set of various conditions. The construction of fault tree analysis includes logic gates, AND gates and OR gates. Each failure that occurs can be described in a form of the failure analysis tree by transferring or moving failure components into symbolic (Logic Transfer Components) and Fault Tree Analysis forms [24]. The symbols in the Fault Tree Analysis used in describing an event are presented in Table 1.

Failure mode effect analysis (FMEA) method
Failure Mode and Effect Analysis (FMEA) is a systematic approach that applies a labeling method to help the thought process used by engineers to identify potential failure modes and their effects [25]. FMEA is a technique of evaluating the reliability of a system to determine the effects of the failure of the system. Failures are classified according to the impact they have on the success of a system's mission. The purpose of FMEA is to take action to minimize failure, starting with the highest consequences.
There are five types of FMEA that can be applied in a manufacturing industry, they are: 1. Systems, focusing on functions [26]. System globally; 2. Design, focusing on product design; 3. Process, focusing on the production and assembly processes; 4. Service, focusing on service functions; 5. Software, focusing on software functions.
In the FMEA research conducted to see the risks that may occur in the maintenance operations and operational activities of the company. There are a number of things that help determine the interference, including [25]: In determining this occurrence can be determined how much disruption can cause a failure in maintenance operations and plant operations.

Severity.
In determining the level of damage (severity), it can be determined how serious the damage is resulting from the failure of the process in terms of maintenance operations and plant operations. 3. Detection rate.
In determining the level of detection it can be determined how the failure can be known before it occurs. The detection rate can also be influenced by the number of controls that govern the process netting. The more controls and procedures that govern the netting system for handling maintenance operations and plant operations, it is expected that the detection rate of failure can be even higher.

Risk Priority Number (RPN).
This value is a product of the results of the multiplication of severity, incidence, and detection rates. RPN determines the priority of failure. RPN has no value or meaning. This value is used to rank potential process failures. The RPN value can be shown by the following equation:

A protected structure
In designing this forced current cathodic protection system, the structure to be protected is the hull below the waterline KRI Terapang -658. Following are the data on the KRI Terapang -658 hull: The Indonesian warship KCR 40 type is given in Figure 2. The last stage of the output stage is evaluating the calculated data by providing conclusions and suggestions as well as solutions to proposed improvements, which are expected to reduce the level of defects so that the quality of future products is more optimal.

Flowchart
The flowchart of this research is given in Figure 3.

Severity determination
The severity of the effects caused by failure in each ICCP tool trial process (Table 2). Sensor Ag-Ag/Cl Broken Cannot provide data input of Corrosion protection limit 2 The highest component severity value is transformers with a value of 9, a value of 9 indicates the effect of "danger with signs" and the event criteria "Very High Failure that can frustrate the system and endanger the machine operator, in the presence of signs of previous damage". The failure mode on the transformer is "burning" with the potential failure effect "the ICCP device is not working". Followed by other component severity values including microcontroller and indicator with each value of 8, fan with a value of 7, and the lowest value with a value of 2 it is Ag -Ag / Cl sensor.

Determination of Rating Detection
The level of occurrence of how often the effects of these failures appear in each ICCP tool trial process. The result of occurrence scores for failure in ICCP is given in Table 3. The highest component occurrence value is steel potential indicator and rectifier indicator with value 5 with failure mode "not pointing to the correct number" and the cause of potential failure "temperature in the heat box and voltage is up and down". A value of 5 indicates a probability of failure at the "Medium" level with a probability of failure of 4 per 600 hours, and a percentage of 0.83%. Followed by the occurrence of other components including fans with a value of 4, Transformer with a value of 2, and the lowest value with a value of 1 it is the microcontroller and Ag -Ag / Cl sensor. The result of detection scores for failure in ICCP is discussed in Table 4. The highest component detection value is steel potential indicator and rectifier indicator with value of 6 with failure mode "not pointing to the correct number" and the cause of potential failure "temperature in the box is hot and voltage is up and down". A value of 6 indicates a detection rate of "Low" with the statement "Low the possibility of design controls will find a potential cause of mechanical damage or a cause of subsequent failure". Other component detection values include fans with a value of 4, Transformer with a value of 2, and the lowest value with a value of 1 it is the microcontroller and the Ag-Ag/Cl sensor.

Determination of risk priority number (RPN) value
After determining the rating of Severity, Occurance, and Detection, the next step is to calculate the Risk Priority Number (RPN) value. Failure modes which later have the highest RPN values will be viewed using the Fault Tree Analysis method so that the root of the problem is known and corrective action can be taken. The result of risk priority number (RPN) scores for failure in ICCP is given in Table 5 and the risk map of risk priority number (RPN) for ICCP is given in Figure 4.
The highest RPN value occurs in the component "Steel potential indicator and rectifier indicator" with a value of 240, followed by the RPN value of the "fan" component with a value of 112, the RPN value of the "transformer" component with a value of 36, the RPN value of the "microcontroller" component with a value  a. Steel potential indicator and rectifier indicator: In this component the potential failure mode that occurs is "not pointing to the correct number" and the cause of the potential failure is "Temperature in the box is hot and the Voltage is Up and Down" then the actions that must be taken include: (a) Redesigning the laying of some components of the tool compilers to pay attention to the circulation of the freezing in the box, so that the tool works more optimally. (b) Controlling is carried out periodically while the tool is operating. (c) Ensuring that the electrical power used is stable so that there are no problems with the ICCP device during the ICCP device.
In this component the potential failure mode that occurs is "the motor is on fire" and the cause of the potential failure is "poor quality of wire and motor windings" then the actions that must be taken include: (a) Making sure to use a fan with a good quality motor winding. (b) Having control Periodically and scheduled while the tool is operating.
For parts that are at medium value, the risk value must be minimized, components that are at medium value, they are "Transformer" and "Microcontroller", steps are carried out for components that are in the yellow zone or are of moderate value among other things: a. Transformer.
In this component, the potential failure mode that occurs is "burning" and the cause of the potential failure is "The quality of the wire coil and transformer core is poor and the temperature in the box is hot", so actions that should be taken to reduce the risk value include: (a) Using a transformer that is coiled and the core of the transformer is in good quality in accordance with the requirements of the tool specifications. (b) Making sure the cooling fans are always in good condition if you need to install a backup fan with a parallel system automatically so that the temperature in the box is maintained.
b. Microcontroller. In this component the potential failure mode that occurs is "error" and the cause of the potential failure is "Main power source is in trouble (voltage is up and down)", then the actions that should be taken to minimize the value of risk include: Implementing controls on the main electric power source scheduled to ensure a stable supply of electricity.

Analysis of FTA
After the results of calculations with the FMEA method are known to be the highest RPN value of each failure mode, then the next step will look for the root causes of the failure mode in order to find the next stage of improvement recommendations. In determining the root of the problem, the Fault Tree Analysis (FTA) method is used.
From the previous step in the FMEA method obtained two failure modes that have high RPN values, it is in the "Steel potential indicator and rectifier indicator" section and the "Fan" component with failure mode in the steel potential indicator and rectifier indicator "cannot show the correct number" while on the fan with the fan motor failure mode on fire. Then the next step is to define the top event component that has a high RPN value by creating an error tree/FTA. The influence of the auxiliary parameter on the local velocity distribution with the property = 0.2 is given in Figure 5. b. Quantitative Analysis of FTA. From the results of this analysis, the probability of occurrence of each basic event can be searched with data of some damage as much as 7 events during the ICCP tool experiment, so that the probability of each event is (Table 6): The probability of a top event with the Boolean algebraic approach "direct manual approach" is as follows: = P(P 1 ) + P(P 2 ) + P(P 3 ) + P(P 4 ) − P(P 1 ∪ P 2 ) − P(P 1 ∪ P 3 ) − P(P 1 ∪ P 4 ) − P(P 2 ∪ P 3 ) −P(P 2 ∪ P 4 ) − P(P 3 ∪ P 4 ) + P(P 1 ∪ P 2 ∪ P 3 ∪ For the probability value of the occurrence of the top event or the possibility of failure in the steel potential indicator and the rectifier indicator "that is equal to 0.67 or 67% during the trial period, while for the reliability value of the Top event is R = 1 − P f −→ 1 − 0, 67 = 0, 33 atau 33%.

Discussion
From the ICCP tool test results showed that there were several problems at the initial stage of the trial, with a total of 7 problems, then using the FMEA method to identify the problem, from the initial identification conducted there were 5 components to be assessed and calculated the risk value. The 5 components included: Microcontroller, Voltage and Ampere Indicator, Fan, Transformer, and Ag-Ag/Cl Sensor.
The next FMEA step is determining the rating/weighting of Severity, occurrence, and Detection failure mode, determining the rating/weighting is through an interview with the tool designer. From the results of data processing the determination of SOD rating obtained RPN results with the highest value, it is the component of "steel potential indicator and rectifier indicator" and the "fan" component. Furthermore, based on the value (Occurrence) and severity of the effect (Severity) that has been weighted, it is necessary to know the risks that must be minimized by using the Risk Map matrix, from risk mapping components that have the highest value/are in the red zone carried out several mitigations. After mitigating the components in the red zone, data processing is continued using the FTA method.
In the FTA method the two components that have a high value are mapped to a failure tree to find out the basic event of the problem. Data processing by the FTA method is done qualitatively and quantitatively, if the data qualitatively produce a minimum cut set of the top events of the two components that have high RPN values. From the results of FMEA and FTA analyzes that have been obtained, the results of data processing according to the purpose of this research were known to be "factors causing failure and reliability of the design of ICCP tool designs" and "mitigation of the tool compiler components that have a high level of risk".

Conclusion
Based on the results of the research that has been carried out, it can be concluded that: a. The main factors causing failure in the design of ICCP tools occur in the component of "Steel potential indicator and rectifier indicator" with a failure mode "not pointing to the correct number", this will result in corrosion control which is expected to be uncontrolled properly and correctly due to incorrect data input. After analyzing the FTA, the reliability value was 33%. b. Mitigation of tool components that have a high level of risk among other things in the "Indicator of steel potential and rectifier indicators": the first was to redesign the laying of some components of the tool compilers to pay attention to the circulating circulation in the box so that the tool works more optimally, the second was to carry out periodic control while the device was operating, and third was to ensure that the electrical power used was stable so there were no problems with the ICCP device while the ICCP device was operating.