CA2972298A1 - Computerised method and device for interlocking a railway route - Google Patents

Abstract

The invention relates to an interlock switching system suited to a track layout plan including three ends, characterised in that it includes: a. at each end, a so-called origin/destination block (121, 122, 123, 124, 1021, 1022), capable of being mounted in a rack and of controlling all the interlocks related to the clearances as well as the route-end interlocks; b. a so-called switching block (131, 133, 1121, 1122, 1123, 1124), capable of being mounted in a rack and capable of controlling the switching of a point rail and the associated interlocks; c. a functional digital link, connecting the blocks in a computer ring network, said blocks being capable of communicating with one another; and d. a processing and control unit (250) capable of transmitting a command over the functional digital link towards the blocks in order to form a route. The invention also relates to a method for implementing said device.

Description

METHOD AND COMPUTERIZED DEVICE FOR INTERLOCKING
OF A RAILROAD ROUTE
The invention relates to a method and a computerized device for engagement a rail route. The invention belongs more particularly, but no exclusively in the field of control and signaling applied to a railway network, for the movement of trains, subways or trams.
The invention is adaptable to any type of guided transport network, comprising or not rails, such as, for example, a circulation network of a monorail or of a vehicle automatic tires, and whose routes are determined by interlocking bifurcation devices, such as switches.
The route of a guided vehicle on a network, for example a train on a network is determined by the interlocking of bifurcation devices, such as only needles, and signaling devices, for example, emitting stop signals or passage authorization.
The term engagement refers to a maneuver immobilizing an organ of command in a given configuration, this control member controlling a switchgear or signaling device, and prohibiting the maneuver of this organ under conditions incompatible with safety. Such engagement also intervenes between the control bodies implementing terms multiple vehicles along a route taken by the guided vehicle, which terms are maintained throughout the passage of the vehicle on this route.
Interlocking in English must respond to operating and safety requirements defined by standards, since the basic device to the complete system. So, these systems are especially defined by so-called safety levels SIL stands for Safety Integrated Level according to 5 levels of increasing requirements ranging from SILO to 5IL4.
According to the prior art, the interlockings are of the mechanical type, for example for the control, called on the job, of a switch by a lever, the levers commanding the needles of the route being locked in position by systems purely mechanical or electromechanical, or electrical type by intermediate electromechanical relays, or computer type.

2 A maneuvering or switching station for the control of a route is specific to a geographical area and organized according to 4 levels:
a human-machine interface or HMI, which consists, for example, of levers in a mechanical system, buttons and control boards optical in the case of an electrical system or a screen and a keyboard in the case of a computer system;
- engagement, it is constituted, for example, a table interlocking using rods and other devices mechanical connecting control levers for a purely mechanical system, electromechanical safety relays, connected in a wired logic, for electrical or computer systems, or systems specific computer interlocking;
- the campaign, which includes needles and signage;
- an interface between the campaign and the engagement.
The life of such a maneuvering station is about 30 years, see more.
By following, it is common for several technologies to coexist on the same network, or the evolution of a rail network requires the integration of new technology with a existing technology, while maintaining the required level of security and the device maintenance capabilities.
Electric switching stations remain widespread but do not allow a complex programming of itineraries without the addition of a layer software.
Said software layer comprises a memory in which is recorded a list of logical rules that reproduce secure engagement states of the controls, and controls the compatibility of the states of these with said rules. EP 06 83082 discloses such a device.
Such an electrical / computer maneuvering station has the disadvantages of the substations, namely long cable lengths, relay bulky and low modularity, with the addition of the need to adapt the layer software, that is, to define new rules in the form of logical equations, during each modification or evolution of the network controlled by this station.
These computerized electrical workstations coexist with purely computer maneuvers, which look like boxes black

3 optimized for a given configuration.
Document WO 03/070537 describes such a computer maneuvering station.
Thus, these devices of the prior art do not make it possible to achieve easily a evolution of the network, any modification of the network requiring a new parameterization and the realization of long and expensive validation tests.
The document FR 2 958 248 describes a traffic management device.
a train on a railway network, said network being subdivided into a plurality of resources each managing an engagement, said resources not being linked between them. Thus, the computer engagement is achieved by associating way virtual said resources for each route. The demonstration of the security of a such a system is complex because it must take into account the combinatorics of all the logical equations involving each resource individually.
So, the The security of such a system must be fully demonstrated for each network or for any modification of an existing network.
Document FR 2 739 824 describes a computer system for managing interlocks of a railway network implementing a logic distributed, in which specific virtual finite state machines support each element or equipment of the track plan (signal, needle etc ...), and communicate between it, step by step, by a logical channel. So every state machine finished virtual of this device of the prior art communicates with its supervisor by logical information, including when said supervisor is not selected by the route, which slowed down the transmission of data. Once the system parameter as a whole it is compiled and any subsequent modification of the plan of way requires regeneration of all virtual machines and code computer science corresponding. Finally this device of the prior art which remains a post of computer maneuver, requires the unwinding of long cable lengths.

The invention aims to solve the disadvantages of the prior art and relates to this end a system of interlocking maneuver adapted to a plane of way comprising 3 ends, which system comprises:
at. every end, a so-called origin / destination block, suitable for rack mounted and support all the latches related to movement authorizations and interlocking

4 end of route;
b. a so-called switching block, suitable for rack mounting and control the operation of a needle and the associated interlocking;
vs. a functional digital link, connecting the blocks according to a ring-shaped computer network, said blocks being able to communicate between them;
d. a processing and control unit capable of transmitting on the link functional digital a command to the blocks to constitute an itinerary;
10- each block comprising - a generic, hardware and software base;
an application software layer relating to each type of block;
a parameter layer relating to the application.
Thus, whatever the complexity of the track plan, the system object of the invention uses a combination of 2 types of generic physical blocks built on a same hardware and software base, connected in a ring network. The security of system is carried by blocks that meet a SIL4 security level according to CENELEC standards, including the standards EN 50126, EN 50128 and EN 50129.
Thus, whatever the complexity of the network, the route is defined by a original block and a destination block, which are carried by the same type of block said of origin / destination. The control equations for each block type are always the same, only changes their setting to reflect the campaign.
The unit of treatment and control whose security level is SILO is satisfied to send route information, original block - destination block, programmed by a supervisor, and does not intervene in the security of the interlockings. The functions of blocks are prevalidées so that study times are reduced, the certification of a installation only concerns the integration, ie the parameterization of the each block to adapt it to the countryside and the environment of the traffic network. The distribution of route planning and interlocking functions, and integration security functions in blocks, allows the device to be adapted to any type of existing network or first installation, from two types of blocks generic.

The interlocking table corresponding to a validation of the route is built of between the blocks, this progression being limited to the blocks concerned by the route what is made possible by the digital link functional according to a ring computer network. Blocks carry most of the functions of security

5 system and all sharing the same hardware and software base, the security of this basis only needs to be demonstrated once and only the level of security of Parameter layer must be demonstrated for the intended application. The state interlocking all the blocks constituting the route is systematically built and checked regardless of the route, both in a simpler way physically, all the blocks being installed, in particular in rack, in a room with near interface between the engagement and the campaign, either at work, at proximity means (needles, signals) in one or more cabinets. Maintenance is also simplified, the number of equipment being reduced.
The term "labor" refers to the conditions of realization of a action whose result on the campaign is visible directly by the operator realizing said action and by extension the localization of the means for the implementation of this action.
Throughout the text, the term campaign refers to all the equipment of signaling and control on or near the track ci, such as signs or traffic lights, needles and their maneuver, power cables or presence detection circuits a vehicle on the track The invention is advantageously implemented according to the embodiments which are to be considered individually or in any technically operating combination ..
Advantageously, each block has 3 functional states:
- free;
- selected;
- triggered.
These 3 functional states make it possible to activate and release a route what be it, by a sequential passage from one state to another and from close to the blocks constituting the itinerary. The conditions of transition from a functional state to the other

6 constitute the intrinsic safety of each block.
Advantageously, the activated state of a block comprises:
- an operational state that is switched on and off;
- a controlled operational state controlled.
Thus, the security of the device is further improved. The transition from a state to the other implements conditions relating to the campaign and the control of amenities driven by said block. It is essentially at this stage that the validation of the state of equipment, and as a result of the parameterization of the block, intervenes in the validation of a route.
According to an advantageous embodiment, the system which is the subject of the invention includes e. a remote monitoring unit;
f. a digital remote monitoring link, separate from the link digital functional, connecting the blocks to said remote monitoring unit.

Thus, the operation of the blocks is controllable individually to distance, this which allows to quickly locate any malfunction. Connections digital telemonitoring is feasible even in the event of the link digital functional and allows in particular to detect such a break.
Advantageously, each block has an input / output port for the connection digital maintenance tool. Thus, the maintenance of each block is facilitated.
Advantageously, each block comprises:
- an all-or-nothing input, whose restrictive state is 0, suitable for acquire a binary information relayed by a switching relay;
an all or nothing output capable of delivering a power supply to a relay of switching or a power loop of a device Thus the system which is the subject of the invention is able to be interfaced with a device relays.
According to one embodiment, the system which is the subject of the invention comprises a block with a so-called proportional input adapted to the acquisition of a information variable value. The said input is, according to alternative embodiments, an entrance digital or analogue input capable of receiving a digital signal or analog proportional. Thus, the system which is the subject of the invention is capable of managing latches requiring the acquisition of a proportional signal by example, a

7 signal corresponding to the control of the lighting of a signal lamp.
According to a particular embodiment of the system which is the subject of the invention, adapted to a channel plane having an oblique crossing, said system comprises a block referral piloting a fictitious needle. Thus, the system object of the invention is adapted to the interlocking management of a lane plan comprising an apparatus for way can be traveled in many ways, but without moving parts.
Advantageously, the blocks of the system that are the subject of the invention comprise means for their rack mounting which mounting means comprise interlocking with the cabinet and prohibiting the fitting of a type of block to the place of another, in said cabinet. Thus, said blocks are easily installed in cabinets, in a switch-room or on the job, the means of keying ensure the security of block replacement operations.
The invention also relates to a method for producing a interlocking corresponding to a route and implementing a system according to the invention, which method comprises the steps of:
u. passing a block, said upstream, from the free state to the state selected;
there. transmit said upstream block to the block, called downstream, concerned by the route and the following immediately according to the functional digital link, a selection command.
Thus, the engagement process progresses from block to block, selected by the route, according to the ring network, which makes it possible to reduce, for a route given, the combinatorics of the possible states of each block with regard to this route.
The blocks being linked according to a ring network, the last validation puts into work it destination block and the original block and therefore corresponds to the validation of selecting the entire route. Whatever the number of blocks thus connected by the computer link, depending on the intended route plan, the operations allowing only the blocks of this route what allows for faster engagement and release compared to systems of the prior art where the engagement and release information are circulating close on all the finite state machines constituting the network.
The method which is the subject of the invention is applicable whatever the type of block uphill and downstream block. According to a particular embodiment, the upstream block is a block

8 origin / destination and steps u) and y) are only performed if block is in the state free and selected as origin or destination of a route.
Alternatively, the upstream block is a needle block and the transition to the state selected is realized only if said block is in the free state, said passing causing issuing a electric needle control. Thus, the needles are moved in their position corresponding to the route during the selection of this route.
Advantageously, the method which is the subject of the invention comprises at the end of the steps u) and y), steps of:
w. when all blocks in the route are in the selected state, move the original block in the engaged state;
x. transmit to each of the downstream blocks of the route an order latching.
Thus, the interlocking of the route is realized only after the validation of the selection of the latter, the selection conditions specific to each block having summer performed individually.
Advantageously, the engagement method which is the subject of the invention implements the states engaged uncontrolled and controlled controlled blocks according this mode implementation of the system object of the invention, the upstream block passing through of the stage w) in the operational state switched on uncontrolled, and comprises after the step x) the steps of:
there. for each block covered by the route, check the conditions of transition from uncontrolled state to locked state controlled and if these conditions are checked go to the engaged state controlled;
z. for each block traveled by the route, transmit to the source block a information attesting to its transition to the controlled controlled state.
These stages allow, after the formation of the route at the end of the stage x) to ensure that the campaign configuration conforms to the intended route before authorizing any passage on the said route.
Advantageously, when the block is a needle block, the reception of the command of step x) generates at the level of said block, the transmission of a command immobilization of the needle, then, during step y), the control by said block of the

9 position of the needle, the transition to the controlled state of said block not being realized only if the result of this check corresponds to the position of the needle adapted to the route.
Thus, the method and the device which are the subject of the invention combine a creation, a centralized training and validation of the route through dialogue between the blocks via functional digital link, control and security functions being distributed locally at the scale of each block.
The invention also relates to a method for carrying out the path of a route by a vehicle on a guidance network between one end of origin and a destination end, using a device according to one of the modes of realisation of the invention, which method comprises steps of:
i. define a route by an origin end and an end of destination and transmit the said route to the processing and control;
ii. transmit by the processing and control unit, a so-called route creation to the attention of the original block / destination of the end of origin;
iii. select the route according to steps u) and y) of the method interlocking according to the invention;
iv.
turn on the route according to steps w) and x) of the process interlocking according to the invention;
there. control the route according to steps y) and z) of the method latching according to the invention;
vi. open the signal controlled by the original block and allow the passage of vehicle;
vii. after the passage of the vehicle, destroy the route and bring back the blocks corresponding to the free state.
According to one embodiment, step vii) is initiated by the original block and comprises a step of:
AVII.
disable the engagement of the route by the passage of close in close on the functional digital link of the blocks in the free state to measuring the crossing of the areas monitored by said blocks.

WO 2015/1016

10 PCT / EP2014 / 079399 According to another embodiment, step vii) is automatically triggered crossing the route and includes the steps of :
bVII. detect the crossing of the route by the vehicle;
cvii. release the original block and transmit to the downstream block a command of 5 deactivation of the engagement for the transition to the free state of close in the near according to the functional digital link, blocks of the route.
Thus, the device and method that are the subject of the invention are suitable for in implementation of a transit interlock and an automatic destruction in destination.
The invention is explained below according to its embodiments preferred, in no way limiting, and with reference to FIGS. 1 to 11 in which:
FIG. 1 is an example of a temporary service-type track plan having 4 ends and two conjugate needles;
FIG. 2 shows an exemplary embodiment of the object system of the invention applied to the track section of Figure 1;
- Figure 3 schematically describes the environment of the object system of the invention and the various connections between the elements constituting it;
FIG. 4 shows, in a front perspective view, an example of realization of a block of the system object of the invention;
FIG. 5 gives a schematic example of the inputs-outputs of a block needle for the implementation of the system object of the invention;
FIG. 6 schematically illustrates an example of the input-outputs of a block origin / destination of the system object of the invention;
- Figure 7 is a synopsis of the implementation of the creation of a route according to the method which is the subject of the invention;
FIG. 8 represents a synopsis of the automatic destruction in origin of a route according to one embodiment of the method of the invention;
- Figure 9 is a synopsis of automatic destruction at destination a route according to one embodiment of the method of the invention;
FIG. 10 is an example of a two-end track plane comprising no referrals whose interlocking management is implemented according to a embodiment of the system object of the invention;

11 and FIG. 11 is an example of a track plan comprising sections with more two ends and without switch whose interlocking management is implementation according to an embodiment of the system which is the subject of the invention including fictitious switches, Figure 11A shows the track plan real, FIG. 11B the channel plan used for the implementation of the system object of the invention.
Figure 1, the system and method objects of the invention apply to a system signaling system for the passage of a guided vehicle, more particularly a train, a tramway or subway, on a section of track with an origin and a destination as well as one or more needles (111, 113). So the system and the process objects of the invention constitute a system for interlocking a route comprising or not the operation of needles. According to a simple example of embodiment, the device and the method of the invention apply to a track plane (100) of the type service Provisional with 4 ends (101, 102, 103, 104) and two needles (111, 113) conjugated. The device and the method which are the subject of the invention make it possible distribute the interlockings. For this purpose, the track section (100) on which the system object of the invention is installed is divided into geographical areas (121, 122, 123, 124, 131, 133). These areas have specific characteristics depending on whether they are linked a needle, called the Ag Zone (131, 133), or at one end, which east end an origin or a destination, called Zone Gold / Des (121, 122, 123, 124).
Each zone includes specific track equipment. So, a Gold / Des Zone includes, at minimum, a device for detecting the presence of a vehicle on the track.
For a use of rail type, such a device takes the form of a circuit of track, said by the following CdV, or pedal. A VC consists of an electrical circuit realized between an isolated portion of the rails, which circuit is modified in the presence of the axle of a train on said portion, thus enabling detection of the presence of said train.
A pedal is a mechanical or magnetic detection device sensitive to the mass of vehicle passing on said device. According to the embodiment, the Gold Zone / Des includes additional track equipment such as a signal (1211, 1221, 1231, 1241).
An Ag Zone with a switch includes in-country equipment following routes:
a needle and its maneuvering device,

12 a device for controlling said needle, a device for detecting the presence of a vehicle in said needle.
According to the track plan and a particular embodiment of the device object of the invention, an Ag Zone comprises a so-called fictitious needle. Such a fictitious needle is created in the switch station but does not control any device on the ground. She for example corresponds to a real hand but to control only manual, or to a device of way able to be traversed in several ways but without moving part, such as an oblique crossing.
The dummy hand has the same command status information and interlocking than a real needle. It allows to translate incompatibilities between routes According to a nonlimiting exemplary embodiment, the maneuvering device (1111, 1311) of the needle comprises an electric motor for moving the blades, team a key switch for emergency operation. The control of said engine is via NS1 type relays for the control of the right hand and the needle on the left. The control system aims to verify that the conditions of passage of a train on the needle are well verified, that is to say that Needle found in the targeted position. These control devices are known to prior art and consist in controlling the bonding, the take-off, the concordance and the locking needle blades or the end stroke of the motor moving said blades. These For example, the controls are reflected by the state of a type NS1 relay. The device Presence detection is, according to an exemplary embodiment, a VC.
Type NS1 relays are electromechanical relays of 5IL4 safety according to EN 50129 suitable for mounting in a cabinet according to a standard interface.
Figure 2, to manage the interlockings corresponding to each of these zones, the system which is the subject of the invention attributes to each of them a device generic command, called block. Thus, according to this embodiment, a zoned needle (Ag zone) is managed by a needle block (231, 233), said block Ag and a zone of origin or destination (Zone Gold / Des) is managed by a block of origin / destination (221, 222, 223, 224), said block Gold / Des. Said blocks are fit to generate orders for the track equipment, and to receive of the

13 information from said track equipment in the area.
So, unlike distributed logic systems of the prior art where each machine Virtual Finite State manages a track equipment, generic object blocks of the invention manage a plurality of track equipment of the same area of the track plane.
To this end, each of the blocks comprises:
- a generic, hardware and software base;
an application software layer relating to each type of block;
a parameter layer relating to the application Said parameter layer makes it possible to adapt the block to the types of equipment of which he is linked, which he commands and from which he receives information and specificities of the lane plan. Linking blocks with the campaign is conducted particularly to the input-output means all or nothing, able to be interfaced with some NS1 relay.
The blocks are connected to each other by a ring network (200), said link functional digital, or LNF. A control and processing unit (250), called UCT, is linked to the blocks via the LNF. Thus, the NFL
functions:
- to ensure the functional exchanges between the blocks that make up the system;
to ensure functional exchanges between said blocks and the CPU.
According to an exemplary embodiment, the LNF is an Ethernet type network materialized by fiber optic links.
A digital supervision link (210), called LNS, connects a unit (240) of supervision at the CPU. The supervision unit (240) is a human interface machine that allows a supervisor to operate the system object of the invention. She present state equipment from the track to the line controller in real time and archive the events. Said supervisory unit (240) is equipped with software operating railways and sends orders via the LNS to the CPU.
The CPU (250) is the functional interface between the supervisor and the blocks.
She sends commands from the supervisor to the blocks and goes up the information from the blocks to the supervisor. The UCT is a computer industrial, advantageously able to be rack mounted. Its level of security is SILO, which is the lowest level of security, since the said CPU is not is not a equipment likely to generate a risk with respect to the interlockings. The security

14 intrinsic part of the system which is the subject of the invention is actually carried by the blocks, the LNF and the communication protocol between the blocks.
According to an exemplary embodiment, the CPU (250):
- receives orders from the supervisor and validates their consistency in terms of syntax and content;
- checks the compatibility of orders from the supervisor and the block availability;
- transmits commands, including the creation of a route to blocks, training the control, authorization and destruction of the said itinerary being made by the blocks;
- receives and processes information from blocks such as their states internal functionalities, the state of the inputs / outputs, the error messages so of forward them to the supervisor;
- archive the history of events occurring on the network and amenities for possible maintenance;
- manages the lighting of indicators;
- serves as an interface with route control boxes foot lumber.
FIG. 3, the system that is the subject of the invention, according to an exemplary embodiment advantageous, includes a functional digital link, binding the CPU (250) to the blocks Or / Des (221) and Ag blocks (231). Said blocks (221, 231) control and receive information of the track equipment (1211, 1311) via a link (310) said of countryside. The supervisory unit (240) exchanges information with the CPU
(250) via the LNS (210) and additionally receives information in from the campaign via this same LNS (210). According to this advantageous embodiment, the system of the invention comprises a tool (340) for remote monitoring, connected to blocks (121, 131) via a digital remote monitoring link (300), known as LNT. The LNT
(300) connects each block to the remote monitoring tool (340) and allows to convey to this tool (340) information on the status of major equipment (1211, 1311) in interface with the blocks, as well as the operating status of the blocks (121, 131).
According to this exemplary embodiment, the Ag blocks (131) and the Gold / Des blocks (121) are designed to send this information directly to the telemonitoring, using an LNT link (300), different from the LNF (200). According to an example of realization, the LNT (300) and the LNF (200) are established on the same support physical, for example a network of optical fibers, but using two virtual networks local (VLAN). Advantageously, each block (121, 131) further comprises a link 5 digital maintenance (not shown) called LNM. According to an example of realization, this digital maintenance link is established with each Ag block or block Or / Des by a USB type port (Universal Serial Bus) on the front of said block.
This connection allows, via a specific tool, said tool of maintenance, to have access to the internal information of that block, in particular for its maintenance or 10 its setting. According to an exemplary embodiment, said tool for maintenance is a laptop.
The telemonitoring tool (340) has the function of collecting news from the blocks (131, 121) in particular the problems or breakdowns that occur present, to put in place actions to solve them. Said tool (340) of

15 telesurveillance raises alarms to the staff in charge of the maintenance when an anomaly is detected on one of the elements of the system. At this end, the tool (340) periodically polls the network (300) of remote monitoring. Yes a change of state occurred on a block, the remote monitoring tool and memorize this event. Thus, the remote monitoring tool (340) does not emit any command, it collects and realizes the timestamp of the following information for each network block:
the events defined by a change of state of the block;
- the state of the block and the value of its internal variables;
- the condition of the equipment (1311, 1211) in the field, given by the state of corresponding inputs / outputs of said block, including input-output while or nothing.
Function support by physical blocks, rack-mounted facilitates greatly maintenance of the system object of the invention.
4, according to an exemplary embodiment, each block is in the form of form a module suitable for rack mounting. This one has on the back (no visible) all input-output connections with the campaign and the connections with the LNF
and the LNS. In the front face, said block comprises LEDs allowing view status

16 all-or-nothing inputs-outputs, and an interface (410), for example of the type USB, for establish a digital maintenance link between said block and the tool of maintenance.
According to an exemplary embodiment, a block comprises on the front face a first together (420) LEDs indicating the status of all or nothing inputs of said block. These input correspond to information from the campaign that indicates the status of the different track equipment, in particular through type NS1.
As an example, these all-or-nothing inputs indicate the state of the inputs on VCs monitored by the block, and the state of the needle control devices in the case of a Ag block. Another group (430) of LEDs indicates the state of the outputs all or nothing block. These outputs are directed to NS1 relays that provide the interface control / power with the operating elements of the track equipment such as needle motors or signals. Thus, the blocks corresponding to one same section of track being mounted in a cabinet, the observation of the front faces of these immediately informs about the configuration of the interlockings.
In case of malfunction or failure of a block, it is simply replaced by a block of the same type. In this case, the maintenance link (410) allows to copy the parameterization of the replaced block into the block of replacement.
Advantageously, the cabinet comprises a coding device cooperating with the block that prohibits the assembly of a block Ag instead of a block Gold / Des and vice-versa.
Figures 5 and 6, all blocks include interfaces to connect them in network on the NFL, the LNT and the NML. These input-output ports are not represented in Figures 5 and 6 for ease of reading.
FIG. 5, according to an exemplary embodiment, an Ag block comprises 3 inputs (521) all or nothing corresponding to the detection of a vehicle, for example a train to 3 CDVs corresponding to the three ends connected by the needle.
According to one exemplary embodiment the information from each VC is sent to the block, by example via a working contact of an interface relay (510) of type NS1, level high, for which the input is powered by a voltage of 24 volts, corresponding to the logical state 1 indicating the absence of occupation of the section monitored by said VC.
Still according to this exemplary embodiment, the block Ag has two inputs (522) everything or nothing allowing control of the needle blades for directions left and right. According to this embodiment, the control information of position of the blades,

17 left or right, is sent to the block via a working contact of a relay interface of type NS1, the high level, for which the input is fed by a voltage of 24 volts, corresponding to logic state 1 for which the needle is controlled is in his respective position (left or right). According to this embodiment the Ag block has 2 outputs (531) all or nothing corresponding to the outputs intended for the needle control. According to an exemplary embodiment, the blades of the needle are moved through an electric motor. The order to a position (left or right) is achieved by the excitation of a relay type NS1. The duration Relay excitation varies with the type of needle. This duration is fixed by means of a parameterization of the block. According to this embodiment, the output is in the state logic 1 when the movement of the needle is controlled. These entries (521, 522) and exits (531) of the Ag block are designed from a hardware and software point of view for reach a safe level 5IL4. These all-or-nothing inputs / outputs that ensure the interface with the campaign are essential to the operation of the system object of the invention.
The other features of the system involve exchanges between blocks and are conducted via the LNF. According to the embodiment and the intended application, the Ag block comprises other security-level on / off inputs / outputs 5IL4 or lower.
As of non-limiting example, the Ag block comprises, for example, a 5IL4 input allowing to release manually an engagement, an entry allowing to condemn the block, or an entry allowing a manual control by key of the needle.
FIG. 6, according to an exemplary embodiment a block Gold / Des, comprises 4 inputs (621) from CdV. These 4 entries make it possible to treat any plan of way whatever either his complexity. A 5th entry (622) all or nothing corresponds to a so-called input of pedal of destruction. It corresponds to the output of an electromechanical detector sensitive to passing a vehicle over a defined area. This entry, when it is activated at logic level 1, which corresponds to the presence of said vehicle, allows of trigger the destruction, or release, of the initiated route. According to this example of realization, the block Or / Des includes outputs (631, 632, 633, 634) all or nothing to control a route origin signal under conditions in consistency with local operating and spacing conditions.
Thus, in the example of a railway application, all or nothing outputs of Gold / Des block include:

18 an output (631) for controlling the green light of the maneuver signal, carried out by the excitation of a relay NS1;
- an output (632) for the control of the red light at the turn signal, carried out by the excitation of a relay NS1;
- an output (633) for the control of the yellow light, realized by the excitation a relay NS1;
an outlet (634) for controlling the eyecup, made by the excitement of a relay NS1;
the light being red when no ignition command of other lights is activated. The eyepiece is a luminous signal, usually white and placed in lower left of the signal, and which is lit when said signal is passable in particular in the case a walk.
These main entrances and exits of the block Gold / Des are of security level IF L4.
Depending on the intended application, the Gold / Des block includes other inputs and outputs everything or nothing safe level 5IL4 or lower. Advantageously, the block Gold / Des includes an input (625) called a reverse direction control and a so-called output (635) switching in the opposite direction. These inputs and outputs (625, 635) allow of manage a common area with two systems according to the invention, that is to say two sets of blocks each managing a section of track. Thus, several object systems of the invention are advantageously used in an adjacent manner for control very complex route plans, or allow the evolution of the network by the addition of new branches without having to restart branch security earlier.
According to an exemplary embodiment, the Gold / Des blocks and the Ag blocks comprise one or more so-called proportional inputs (541, 641), which allow acquisition a signal of variable or evolutive value. These entries (541, 641) are type digital or analog, and allow the acquisition of a signal proportional, by analog example between -5 volts and -f5 volts or signal proportional the level is encoded on 8 bits or more. Such proportional inputs allow to include in the criteria for entering routes, parameters defined by their value, by way of non-limiting example, such a proportional input allows particular to control the effective lighting of a green or red light signal.
Returning to FIG. 1, the method which is the subject of the invention is illustrated according to a

19 example of implementation corresponding to the realization of a route between two ends (101, 103) of the network using the two needles (111, 113) conjugated. According to an exemplary embodiment of the method which is the subject of the invention, the completion of a route, until the authorization of the passage of a vehicle on said itinerary, includes 3 stages:
- the selection of the route;
- the interlocking of the route;
- control of the route.
These three steps are followed, after or during the passage of the vehicle on said itinerary, of a step called destruction or liberation of the route.
Figure 7, the route is initially defined by the supervisor by means of the tool supervision. During a creation step (710), said route is interpreted by the CPU (250) which transmits (711) via LNF a selection information to attention of the first block Gold / Des (121) of the route, in order to reserve said route. At reception of this selection request, during a selection step (720), said block Or / Des (121) passes from the free state to the selected state and transmits (721) an order of selection at the downstream block (131) concerned by the route. The passage of the state free in the state selected for such a block Gold / Des is realized only if said block is actually to the free state and that it intervenes in the route like block of origin or as a block of destination. When the Ag block (131) concerned with the route and downstream a Gold / Des block of origin receives the order of selection, it passes (725) from the free state to the selected state if no engagement is opposed, and this selection causes:
- the emission of an electric control to the needle commissioned by said Ag block (131);
- the issuance of a command destined for an adjacent block Ag not traveled by the route but whose needle is to be ordered as protection:
- issuing a command to an adjacent Ag block, no traveled by the route but whose needle is to be ordered as a conjugation.
The first order is sent directly to the needle ordered by said Ag block (131) via one of the outputs (531 Figure 5) of said block, while the two others commands are sent to the respective blocks via the LNF. Then the Ag block (131) issues (721) a selection instruction to the downstream block (733) traveled by the route and so on. The last block (123) of the route is always a block Gold / Des of destination. When this last block Gold / Des (123) is selected (720), the latter sends (722) to the original Gold / Des block a notification of end of selection, this which ensures that all blocks traveled by the route have summer 5 selected.
Upon receipt of the notification of completion of selection, the block Gold / Des (121) original initiates the initiation process of the route for the formation of the said route. The change from the selected state to the Enabled state by a non-route control is intended to prohibit any needle control, thus ensuring continuity and 10 protection of the route, in front of the traffic of the vehicle the borrows and during his passage. Upon receipt of the notification of the end of the selection, the block Gold / Des (121) Origin pass (730) of the state Selected as Origin in the Enlocated state by a uncontrolled route as origin, and transmits (731) an order latching to all the blocks (131, 133, 123) along the route. To the receipt of order Each block passes (735) from the selected state to the state engaged uncontrolled. This change of state, in the case of an Ag block, allows the locking of the needle that said Ag block controls. The receipt of the order (731) in each block traversed by the route performing a step (745) of controlling the engagement conditions, and, if said

20 interlock conditions are checked, the block goes to state controlled interlocking and transmits (741) to the original Or / Des (121) block a notification of passage to the state switched on. On receipt of all these notifications (741) from passage in the controlled state, the original Gold / Des (121) block passes (750) to the state triggered checked after verifying the validity of its own conditions interlocking and command the opening of the signal allowing the passage of the vehicle on the route. The setting of the concerned Gold / Des block (121) allows him to define the indication to present signal according to the established route and the occupancy status of the tract.
Figure 8, according to a first embodiment, called destruction automatic in origin, the attack of the first zone of the route causes the closure (860) of the original signal. After the release of this zone, in the case of a destruction in origin with pedal, the route interlock is disabled (861) This deactivation causes the blocks (131, 133, 123) to pass freely (865) as and when measure of

21 the release of the VCs from the route by the vehicle. This mode of implementation corresponds to the release of the transit interlock and allows the release of needles as and when cleared by the vehicle, allowing so to smooth the traffic.
Figure 9, according to an alternative embodiment, called destruction automatic destination, the destruction of the route is initiated (960) by the block Or / Of (123) from destination after the crossing by the said vehicle of all the route. By example, when the vehicle is a train, and its passage is detected by Via track circuits, this crossing is determined by a sequence of the VCs between the last transit VC and the destination VC
:
- occupancy of the last transit VC, the next VC being free;
- occupancy of the VC immediately downstream of the last transit VC of the itinerary, which is actually the destination CV;
- release of the transit VC.
Thus it is certain that all the axles of said train, that is to say the train on all its length, have crossed the last transit VC. When the function destruction automatic destination is activated, arrival at destination causes the issue (961) by the block Or / Des (123) of destination of a destruction command automatically to the actual destination at the address of the original Gold / Des block. The reception of this command, called token, by the original Gold / Des block (121) causes the disabling the Route Enable function of this block (121) original.
Upon receipt of this token, the original Gold / Des (121) block passes (965) to the state free under reserve that the VCs of entry on the route are free. Then the block Gold / Des (121) of origin sends (962) to the block (131) downstream of the route an instruction of destruction allowed, which block passes (965) to the free state and transmits (962) to the downstream block (133) of the route, an authorized destruction instruction, and so on.
This mode of realization of the method object of the invention prohibits any modification route to clearance of said route by the vehicle.
Figure 10, according to an example of a particular lane plan, it does not include than two ends (1010, 1020) and does not include a needle. For exemple such lane plan corresponds to a quay lane (1100) station. Interlocking related to such a channel plan consist in managing the signals at both ends in function of

22 information provided by associated CoPs (not shown). In these conditions on system object of the invention is implemented with two blocks Gold / Des (1021, 1022) located at each end of the track. The absence of Ag block on the route corresponding is taken into account in the so-called parameter layer of the software layer said Gold / Des blocks (1021, 1022).
FIG. 11A, according to another example of a particular lane plan, said plane of way includes 6 ends (1101, 1102, 1103, 1104, 1105, 1106), signals associates and an oblique crossing where the section between two of the ends (1106, 1103) cross a other section (1101, 1104) without switching.
Figure 11B, the implementation of the system object of the invention on such a plan of way is, according to an embodiment, made by means of two needles fictitious, corresponding to the oblique crossing, which fictitious needles are ordered by Ag blocks (1121, 1122). Thus, these Ag blocks (1121, 1122) commanding points fictitious, cooperate with Ag blocks (1123, 1124) ordering needles real to allow interlocking and route deletions in any security. The Ag (1121, 1122) blocks controlling fictitious needles are Ag blocks real who are part of the NFL network but do not have the entries exits relating to the controls and controls for the movement of the needle, or these functions were inhibited. Their presence helps to manage incompatibilities routing.
The description above and the exemplary embodiments show that the invention achieve the desired objectives, in particular by combining generic blocks parameters, connected by a ring network, it ensures functions of training and validation of a route in its entirety by distributing the functions of control and security at the level of each generic block. So, the demonstration of the conformity of an installation made from the device the invention look at a security level is greatly facilitated. Blocks being based on a generic architecture, the maintenance of the device as a whole and of each block in particular is facilitated. The device which is the subject of the invention is adapted to both a first installation but adapts and interfaces with any system interlocking, in particular electromechanical. Finally the device object of the invention is evolutionary by the integration of new blocks, corresponding to others

23 switchgear, in the network or by connecting several systems between them.

Claims (18)

24 1. Interlocking operating system adapted to a track plan comprising 3 ends, characterized in that it comprises:
at. at each end, a block (121, 122, 123, 124, 1021, 1022) said of origin / destination, suitable for rack mounting and to be load all the interlocks related to the authorizations of movement and interlocking at the end of the route;
b. a block (131, 133, 1121, 1122, 1123, 1124) referred to as a switch, suitable for be rack mounted and to control the operation of a needle and the associated interlockings;
vs. a functional digital link, connecting the blocks according to a ring-shaped computer network, said blocks being able to communicate between them ;
d. a processing and control unit (250) capable of transmitting on the functional digital link a command intended for blocks to constitute an itinerary;
- each block comprising - a generic, hardware and software base;
an application software layer relating to each type of block;
a parameter layer relating to the application. The system of claim 1, wherein each block has 3 functional states:
- free;
- selected;
- triggered. The system of claim 2, wherein the engaged state of a block includes:
- an operational state that is switched on and off;
- a controlled operational state controlled. 4. System according to claim 1, comprising:
e. a remote monitoring unit (340);
f. a digital remote monitoring link (300), distinct from the functional digital link (200) connecting the blocks to said unit (340) remote monitoring. The system of claim 1, wherein each block has a input / output port (410) for the digital connection of a maintenance. The system of claim 1, wherein each block comprises:
an input (521, 522, 621, 622) all or nothing whose state restrictive is 0 able to acquire a binary information relayed by a relay of commutation ;
an output (531, 631, 632, 633, 634, 635) all or nothing suitable for issue a power supply to a switching relay or a loop supply of equipment. 7. System according to claim 6, comprising a block comprising a (541, 641), referred to as proportional, adapted to the acquisition of a information of varying value. 8. System according to claim 1, adapted to a track plan comprising an oblique crossing, and which comprises a switching block (1121, 1122) piloting a fictional needle. 9. Interlocking cabinet having blocks of a system according to claim 1, wherein the means for mounting said blocks include keyed cooperating with the cabinet and prohibiting the mounting a block type (121, 122, 123, 124, 1021, 1022) instead another (131, 133, 1121, 1122, 1123, 1124) in said cabinet. 10. A method for performing an engagement corresponding to a route and implementing a system according to claim 2, characterized in that it comprises the steps of:
u. do (720, 725) pass a block, called upstream, from the free state to the state selected;
v. transmitting (721) said upstream block to the block, said downstream, concerned by the route and the following immediately according to the digital link functional, a selection command. The method of claim 10, wherein the upstream block is a block origin / destination and that steps u) and v) (720, 721) are not performed only if said block is in the free state and is selected as the origin or as a destination of a route. The method of claim 10, wherein the upstream block is a block needle and that the passage (725) in the selected state is realized only if the block is in the free state, the transition to the selected state causing the transmission of an electric needle control. 13. The method of claim 10 comprising, after the steps u) and v), the steps of:
w. when all the blocks in the route are in the selected state, passing (730) the origin block in the engaged state;
x. transmit (731) to each of the downstream blocks of the route one interlocking control. 14. The method of claim 13, characterized in that the blocks of the route go to the operational state switched on uncontrolled at the end of step x), and that it comprises, after step x), the steps of:
there. for each block traveled by the route check the conditions of transition from uncontrolled state to locked state controlled and if these conditions are verified pass (745, 750) to controlled switched state;
z. for each block traversed by the route, transmit (731) to block origin information attesting to its transition to the state switched on. The method of claim 14, wherein the block is a block needle and that the receipt of the command of step x) generates at the level of said block, the issuance of a needle immobilization command, and then, at course of step y), the control by said block of the position of the needle, the passage (745) in the controlled controlled state of said block being realized only if the result of this check corresponds to the position of the needle adapted to the route. 16. Method for carrying out the route of a route by a vehicle sure a guide network between an original end and an end of destination, using a system according to claim 3, characterized in that what it comprises of the steps of:
i. define a route by an origin end (121) and a destination end (123) and transmit said route to the unit treatment and control;
ii. transmitting (710), by the processing and control unit (250), a command (711) called route creation for the block (121) origin / destination of the originating end;
iii. selecting the route according to the method of claim 10;
iv. engaging the route according to the method of claim 13;
v. control the route according to the method of claim 14;
vi. open (750) the signal controlled by the original block and allow the passage of the vehicle:
vii. after the passage of the vehicle, destroy (860, 960) the route and bring back the blocks corresponding to the free state. 17. The method of claim 16, wherein step vii) is initiated by the original block and that it comprises a step of:
AVII. deactivate (865) the interlocking of the route by the passage, step by step via the functional digital link, blocks in the free state as the zones supervised by the said blocks. 18. The method of claim 18, wherein step vii) is initiated (960) by the destination block and includes the steps of:

bVII. detect the crossing of the route by the vehicle;
cvii. releasing (965) the original block and transmitting (962) to the downstream block a deactivation control of the interlocking, for the passage (965) in the free state, step by step (962) according to the link functional digital, blocks of the route.