CA2972298C - Computerised method and device for interlocking a railway route - Google Patents

Abstract

The invention relates to an interlock switching system suited to a track layout plan including three ends, characterised in that it includes: a. at each end, a so-called origin/destination block (121, 122, 123, 124, 1021, 1022), capable of being mounted in a rack and of controlling all the interlocks related to the clearances as well as the route-end interlocks; b. a so-called switching block (131, 133, 1121, 1122, 1123, 1124), capable of being mounted in a rack and capable of controlling the switching of a point rail and the associated interlocks; c. a functional digital link, connecting the blocks in a computer ring network, said blocks being capable of communicating with one another; and d. a processing and control unit (250) capable of transmitting a command over the functional digital link towards the blocks in order to form a route. The invention also relates to a method for implementing said device.

Description

METHOD AND COMPUTERIZED DEVICE FOR INTERLOCKING
OF A RAILWAY ROUTE
The invention relates to a method and a computerized device for engagement of a rail route. The invention belongs more particularly, But no exclusively, to the field of control and signaling applied to a railway network, for the circulation of trains, metros or trams.
The invention is adaptable to any type of guided transport network, comprising or not rails, such as, for example, a circulation network of a monorail or of a vehicle automatic on tires, and whose routes are determined by the engagement of bifurcation devices, such as switches.
The route of a guided vehicle on a network, for example a train on a network railway, is determined by the engagement of bifurcation devices, such as only needles, and signaling devices, for example, emitting stop signals or permission to pass.
The term engagement designates a maneuver immobilizing a control device.
control in a given configuration, this control member controlling a track device or signaling device, and prohibiting the maneuver of this organ in conditions incompatible with safety. Such engagement also intervenes between the control units implementing terms multiple along a route taken by the guided vehicle, which terms are maintained throughout the passage of the vehicle on this route.
The interlockings must respond to operating and safety requirements defined by standards, broken down from the basic device to the complete system. So these systems are notably defined by safety levels known as SIL, acronym for Safety Integrated Level according to 5 levels of increasing requirements ranging from SILO to 5IL4.
According to the prior art, the interlocks are of the mechanical type, for example for the control, called on the job, of a switch by a lever, the levers controlling the route hands being locked in position by systems purely mechanical or electromechanical, or of the electrical type by the intermediary electromechanical relays, or of the computer type.

2 A shunting post, or signal box, for controlling a route, is specific to a geographical area and organized according to 4 levels:
- a man-machine interface or HMI, this consists, for example, of levers in a mechanical system, buttons and control panels optical in the case of an electrical system or a screen and a keyboard in the case of a computer system;
- the interlocking, this consists, for example, of a table engagement using rods and other devices mechanical connecting the control levers for a purely mechanical system, electromechanical safety relays, connected according to hard-wired logic, to electrical or computer systems, or systems specific computer interlocks;
- the campaign, which notably includes hands and signage;
- an interface between the campaign and the engagement.
The lifespan of such an operating station is about 30 years, or even more.
By following, it is common for several technologies to coexist on the same network, or the evolution of a rail network requires the integration of new technology with a existing technology, while maintaining the required level of security and them device maintenance capabilities.
Electrical control stations remain widespread but do not allow complex route programming without adding a layer software.
Said software layer comprises a memory in which is recorded a list of logic rules that reproduce safe interlocking states of the control devices, and checks the compatibility of the states of these devices with the said rules. Document EP 06 83082 describes such a device.
Such an electrical/computer maneuvering station has the disadvantages of the electrical substations, namely long lengths of cables, substations relay bulky and low modularity, with in addition, the need to adapt the layer software, i.e. to define new rules in the form logical equations, each time the network controlled by this station is modified or upgraded.
These computerized electrical switching stations coexist with purely computer maneuvers, which appear as boxes black

3 optimized for a given configuration.
Document WO 03/070537 describes such a computer operating station.
Thus, these devices of the prior art do not make it possible to carry out easily a evolution of the network, any modification of said network requiring a new setting up and carrying out long and costly validation tests.
Document FR 2 958 248 describes a traffic management device of one train on a railway network, said network being subdivided into a plurality of resources each managing an interlock, said resources not being linked between them. Thus, computer interlocking is achieved by associating way virtual said resources for each route. The demonstration of the security of a such a system is complex because it must take into account the combination of all the logical equations involving each resource individually.
Thus, the security of such a system must be fully demonstrated for each network or for any modification of an existing network.
Document FR 2 739 824 describes a computer system for managing interlockings of a railway network implementing a logic distributed, in which specific virtual finite state machines supporting each element or equipment of the track plan (signal, turnout etc ...), and communicate between it, step by step, through a logical channel. Thus each state machine finished of this prior art device communicates with its supervisors by logical information, including when said supervisors are not selected by route, which slows down data transmission. Once the system setting as a whole, it is compiled and any subsequent modification of the plan of way requires a rebuild of all virtual machines and code computer science corresponding. Finally, this device of the prior art which remains a station of computer operation, requires the unwinding of long lengths of cables.

The invention aims to solve the drawbacks of the prior art and relates to this end an interlocking shunting system adapted to a track plan including 3 ends, which system includes:
has. every end, a so-called origin/destination block, able to be rack-mounted and support all interlocks related to movement authorizations and interlockings in

4 route end;
b. a so-called switch block, capable of being mounted in a rack and of controlling the operation of a needle and the associated interlocks;
vs. a functional digital link, linking the blocks according to a ring computer network, said blocks being able to communicate between them;
d. a processing and control unit capable of transmitting on the link functional digital a command for the blocks in order to constitute an itinerary;
10- each block including - a generic base, hardware and software;
- an application software layer relating to each type of block ;
- a parameterization layer relating to the application.
Thus, whatever the complexity of the track plan, the system object of the invention uses a combination of 2 types of generic physical blocks constructed on a same hardware and software base, connected in a ring network. The safety of system is supported by blocks that meet a SIL4 safety level according to CENELEC standards, in particular the EN 50126, EN 50128 and EN 50129 standards.
Thus, regardless of the complexity of the network, the route is defined by a original block and a destination block, which are carried by the same type of block called origin/destination. The control equations for each type of block are still the same, only their settings change to take the campaign into account.
unit of processing and control whose level of security is SILO is satisfied to send route information, origin block - destination block, programmed by a supervisor, and does not intervene in the safety of interlockings. The functions of blocks are pre-validated so that study times are reduced, the certification of a installation concerns only the integration, i.e. the configuration of each block to adapt it to the countryside and the traffic network environment. The distribution of route planning and interlocking functions, and integration safety functions in blocks, allows the device to be adapted to any kind of existing network or in first installation, from two types of blocks generics.

The interlocking table corresponding to a validation of the route is built of step by step between the blocks, this progression being limited to the blocks concerned by the itinerary which is made possible by the digital link functional according to ring computer network. The blocks carry most of the functions of security

5 of the system and all sharing the same hardware and software base, the safety of this basis only needs to be demonstrated once and only the level of security of the parameterization layer must be demonstrated for the intended application. The state engagement of all the blocks constituting the route is systematically built and checked regardless of the route, both in a simpler way physically, all the blocks being installed, in particular in a rack, in a room at proximity to the interface between engagement and the campaign, either on the job, proximity means (pointers, signals) in one or more cabinets. Maintenance is also simplified, the number of equipment being reduced.
The term on-site designates the conditions for carrying out a stock whose results on the campaign are directly visible to the operator carrying out said action and by extension the location of the means for the implementation of this stock.
Throughout the text, the term campaign refers to all the equipment of signals and controls located on or near the track.
here, such as signs or traffic lights, hands and their detection device maneuver, power cables or presence detection circuits of one vehicle on the lane The invention is advantageously implemented according to the embodiments set out below, which are to be considered individually or according to any technically working combination.
Advantageously, each block has 3 functional states:
- free;
- selected;
- triggered.
These 3 functional states make it possible to activate and release a route what whatever it is, by a sequential passage from one state to another and step by close to the blocks constituting the route. The conditions for passing from a functional state to the other

6 constitute the intrinsic safety of each block.
Advantageously, the activated state of a block comprises:
- an uncontrolled activated functional state;
- a controlled activated functional state.
Thus, the security of the device is further improved. The transition from one state to the other implements conditions relating to the campaign and the control of equipment controlled by said block. It is essentially at this stage that the validation of the state of equipment, and as a result of block parameterization, intervenes in the validation of a itinerary.
According to an advantageous embodiment, the system which is the subject of the invention includes e. a remote monitoring unit;
f. a digital remote monitoring link, separate from the link functional digital, connecting the blocks to said remote monitoring unit.

Thus, the operation of the blocks can be individually controlled from distance, this which makes it possible to quickly locate any malfunction. Connections digital being distinct, remote monitoring can be carried out even in the event of a break in the the link functional digital system and makes it possible in particular to detect such a break.
Advantageously, each block comprises an input/output port for the connection digital of a maintenance tool. Thus, the maintenance of each block is facilitated.
Advantageously, each block comprises:
- an all or nothing input, whose restrictive state is 0 , capable of acquire a binary information relayed by a switching relay;
- an on/off output able to deliver a power supply to a relay of switching or a power supply loop of an equipment Thus the system which is the subject of the invention is capable of being interfaced with a device relay interlock.
According to one embodiment, the system which is the subject of the invention comprises a block comprising a so-called proportional input, adapted to the acquisition of a information of variable value. Said input is, according to variant embodiments, an entrance digital or an analog input capable of receiving a digital signal or analog proportional. Thus, the system which is the subject of the invention is capable of managing interlockings requiring the acquisition of a proportional signal by example, a

7 signal corresponding to the control of the ignition of a signaling lamp.
According to a particular embodiment of the system which is the subject of the invention, adapted to a track plan comprising an oblique crossing, said system comprises a block switch piloting a dummy switch. Thus, the system object of the invention is suitable to the management of the interlockings of a track plan comprising a switchgear way that can be traversed in several ways, but without moving parts.
Advantageously, the blocks of the system which is the subject of the invention comprise means for mounting them in a rack, which mounting means comprise polarizers cooperating with the cabinet and prohibiting the assembly of one type of block at the place of another, in the said cupboard. Thus, said blocks are easily installed in cabinets, in a signal box or on the job, the means of keying ensure the safety of block replacement operations.
The invention also relates to a method for producing a interlocking corresponding to a route and implementing a system according the invention, which method comprises the steps of:
u. to pass a block, called upstream, from the free state to the state selected;
y. transmit said upstream block to the block, called downstream, concerned by the route and immediately following it according to the functional digital link, a selection command.
Thus, the engagement process progresses from block to block, selected by the route, according to the ring network, which makes it possible to reduce, for a itinerary given, the combination of the possible states of each block with respect to this itinerary.
The blocks being linked according to a ring network, the last validation puts in work on destination block and the source block and therefore corresponds to the confirmation of selection of the entire route. Regardless of the number of blocks thus connected by the computer link, depending on the targeted track plan, the operations allowing the interlocking of the route only concern the blocks of this route what allows for faster engagement and release compared to systems of the prior art where the engagement and release information circulate from close on the set of finite state machines constituting the network.
The method that is the subject of the invention is applicable regardless of the type of block upstream and downstream block. According to a particular embodiment, the upstream block is a block

8 origin/destination and steps u) and y) are performed only if said block is in state free and selected as origin or destination of a route.
Alternatively, the upstream block is a needle block and the transition to the state selected is carried out only if said block is in the free state, said passage causing the issuance of a electric needle drive. Thus, the needles are moved in their position corresponding to the route during the selection of this route.
Advantageously, the method that is the subject of the invention comprises, at the end of the steps u) and y), steps consisting of:
w. when all blocks in the route are in the selected state, pass the source block in ON state;
x. transmit to each of the downstream blocks of the route a command engagement.
Thus, the engagement of the route is carried out only after the validation of the selection of the latter, the selection conditions specific to each block having summer carried out individually.
Advantageously, the engagement method that is the subject of the invention implements the switched on unchecked and switched on checked states of the blocks according to this mode embodiment of the system object of the invention, the upstream block passing during of the step w) in the unchecked engaged functional state, and comprises after step x) the steps consisting of:
y. for each block traversed by the route, check the conditions of transition from the uncontrolled on state to the on state checked and if these conditions are verified switch to the ON state control ;
z. for each block traversed by the route, pass to the originating block a information attesting to its passage to the controlled switched-on state .
These stages allow, after the formation of the route at the end of the stage x), ensure compliance of the campaign configuration with regard to the intended route before authorizing any passage on the said route.
Advantageously, when the block is a needle block, the reception of the command of step x) generates, at the level of said block, the transmission of a command immobilization of the needle, then, during step y), the control by said block of

9 position of the needle, the transition to the controlled engaged state of said block not being realized only if the result of this control corresponds to the position of the needle adapted to the route.
Thus, the method and the device which are the subject of the invention combine a creation, a centralized formation and validation of the itinerary, through dialogue between blocks via the functional digital link, the control and safety functions being distributed locally at the scale of each block.
The invention also relates to a method for producing the path of a route by a vehicle on a guidance network between an end original and a destination end, using a device according to one of the modes of realisation of the invention, which method comprises the steps of:
i. define a route by an origin endpoint and an endpoint of destination and transmit said route to the processing unit and control ;
ii. issue by the processing and control unit, a command called creation of route for the attention of the block of origin/destination of the end original;
iii. select the route according to steps u) and y) of the method engagement according to the invention;
iv.
trigger the route according to steps w) and x) of the method engagement according to the invention;
y. check the route according to steps y) and z) of the method engagement according to the invention;
vi. open the signal controlled by the original block and allow passage from vehicle ;
vii. after the passage of the vehicle, destroy the route and bring back the blocks corresponding to the free state.
According to one embodiment, step vii) is initiated by the original block and includes a step of:
wow.
deactivate the interlocking of the route by passing from close to close on the functional digital link of the blocks in the free state to measurement of the crossing of the zones monitored by said blocks.

WO 2015/1016

10 pct/EP2014/079399 According to another embodiment, step vii) is automatically triggered by crossing the route and it includes the steps of :
bvii. detecting the crossing of the route by the vehicle;
cvii. release the original block and transmit to the downstream block a command of 5 deactivation of the closing for the transition to the free state of close closely according to the functional digital link, blocks of the route.
Thus the device and the method which are the subject of the invention are suitable for placing in implementation of transit interlocking and automatic destruction in destination.
The invention is described below according to its embodiments.
favorites, in no way limiting, and with reference to Figures 1 to 11 in which:
- Figure 1 is an example of a provisional service type track plan comprising 4 extremities and two conjugate needles;
- Figure 2 shows an embodiment of the system object of the invention applied to the track section of Figure 1;
- Figure 3 schematically describes the environment of the system object of the invention and the various connections between the constituent elements;
- Figure 4 shows in a front perspective view, an example of production of a block of the system which is the subject of the invention;
- figure 5 gives a schematic example of the inputs-outputs of a block needle for the implementation of the system which is the subject of the invention;
- Figure 6 schematically illustrates an example of the inputs-outputs of a block origin/destination of the system object of the invention;
- Figure 7 is a synopsis of the implementation of the creation of a itinerary according to the process which is the subject of the invention;
- Figure 8 shows a synopsis of the automatic destruction in origin of a itinerary according to an embodiment of the method which is the subject of the invention;
- figure 9 is a synopsis of the automatic destruction at destination of one itinerary according to an embodiment of the method which is the subject of the invention;
- Figure 10 is an example of a double-ended track plan not including no switch whose interlocking management is implemented according to a embodiment of the system object of the invention;

11 - and Figure 11 is an example of a track plan comprising sections to more two ends and without switching whose management of interlockings is implementation according to an embodiment of the system which is the subject of the invention including dummy switches, Figure 11A shows the track plan real, figure 11B the track plan used for the implementation of the system object of the invention.
Figure 1, the system and the method which are the subject of the invention apply to a system signaling for the passage of a guided vehicle, more particularly a train, a tramway or metro, on a section of track comprising an origin and a destination and one or more needles (111, 113). Thus the system and the process objects of the invention constitute a system for interlocking a route comprising or not needle maneuver. According to a simple embodiment, the device and the method objects of the invention apply to a track plan (100) of the type service temporary with 4 ends (101, 102, 103, 104) and two needles (111, 113) conjugated. The device and the method which are the subject of the invention make it possible to distribute the interlocks. To this end, the track section (100) on which the system object of the invention is installed is divided into geographical areas (121, 122, 123, 124, 131, 133). These areas have specific characteristics depending on whether they are linked to a needle, called Zone Ag (131, 133), or at one end, which east end an origin or a destination, called Zone Or/Des (121, 122, 123, 124).
Each area includes specific track equipment. Thus, an Or/Des Zone includes, to minimum, a device for detecting the presence of a vehicle on the lane.
For a railway type use, such a device takes the form of a circuit of the way, said by the CdV suite, or a pedal. A CoV consists of an electrical circuit made between an isolated portion of the rails, which circuit is modified in the presence of the axle of a train on said portion, thus allowing detection of the presence of said train.
A pedal is a mechanical or magnetic sensing device sensitive to the mass of the vehicle passing over said device. Depending on the embodiment, the Or/Des Zone includes additional track equipment such as a signal (1211, 1221, 1231, 1241).
An Ag Zone comprising a switch includes in the field the equipment of the following routes:
- a needle and its maneuvering device,

12 - a device for controlling said needle, - a device for detecting the presence of a vehicle in said needle.
According to the track plan and a particular embodiment of the device object of the invention, an Ag Zone comprises a so-called fictitious needle. Such a fictitious needle is created in the signal box but does not control any device on the ground. She corresponds for example to a real needle but with command only manual, or again to a switch and crossing able to be traversed in several ways but without movable part, such as an oblique crossing.
The dummy needle has the same order status information and engagement than a real needle. It thus makes it possible to translate incompatibilities between routes According to a non-limiting exemplary embodiment, the maneuvering device (1111, 1311) of the needle comprises an electric motor for moving the blades, crew a key switch for the emergency operation. The control of said motor is carried out by means of NS1 type relays for the control of the needle on the right and the needle to the left. The control system aims to verify that the terms of passage of a train over the pointer are well verified, i.e. that said needle is in the target position. These control devices are known from prior art and consist in controlling the sticking, the take-off, the concordance and the locking of needle blades or the end of travel of the movement motor of said blades. These controls are for example reflected by the state of an NS1 type relay. the device presence detection is, according to an exemplary embodiment, a CoV.
NS1 type relays are electromechanical relays conforming to the of safety 5IL4 according to standard EN 50129 suitable for cabinet mounting according to a standard interface.
Figure 2, in order to manage the interlocks corresponding to each of these zones, the system which is the subject of the invention assigns to each of them a device generic command, called block. Thus, according to this exemplary embodiment, a area of needle (Zone Ag) is managed by a needle block (231, 233), said block Ag and a zone of origin or destination (Zone Or/Des) is managed by a block of origin/destination (221, 222, 223, 224), known as the Or/Des block. Said blocks are fit to generate commands intended for the track equipment, and to receive of the

13 information coming from said track equipment of the zone considered.
Thereby, unlike the distributed logic systems of the prior art where each machine virtual finite-state manages track equipment, generic blocks objects of the invention manage a plurality of track equipment in the same area of the track plan.
To this end, each of the blocks comprises:
- a generic base, hardware and software;
- an application software layer relating to each type of block;
- a configuration layer relating to the application Said parameterization layer makes it possible to adapt the block to the types of equipment of track to which it is linked, which it controls and from which it receives information, and to specifics of the track plan. Linking blocks with the campaign is realized in particular to all-or-nothing input-output means, able to be interfaced with some NS1 relay.
The blocks are connected to each other by a ring network (200), called a link Functional Digital, or LNF. A control and processing unit (250), said UCT, is linked to the blocks via the LNF. Thus, the LNF has for functions:
- ensure functional exchanges between the blocks that make up the system ;
- to ensure the functional exchanges between said blocks and the CPU.
According to an exemplary embodiment, the LNF is an Ethernet type network materialized by fiber optic links.
A digital supervision link (210), called LNS, connects a unit (240) of supervision at the CPU. The supervision unit (240) is a human-interface machine which allows a supervisor to operate the system that is the subject of the invention. She present the state track equipment to the line regulator in real time and archives the events. Said supervision unit (240) is equipped with software operating rail and sends commands, via the LNS, to the CPU.
The CPU (250) is the functional interface between the supervisor and the blocks.
She transmits the commands from the supervisor to the blocks and uploads the information from the blocks to the supervisor. The CPU is a computer industrial, advantageously able to be mounted in a rack. Its level of security is SILO, i.e. the lowest security level, because said CPU does not does not constitute a equipment likely to generate a risk with respect to interlocking. The security

14 intrinsic to the system that is the subject of the invention is effectively carried by the blocks, the LNF and the communication protocol between blocks.
According to an exemplary embodiment, the CPU (250):
- receives commands from the supervisor and validates their consistency in terms of syntax and content;
- checks the compatibility of commands from the supervisor and the block availability;
- transmits the commands, in particular for creating a route to the blocks, training the control, authorization and destruction of said itinerary being made by the blocks;
- receives and processes information from blocks such as their states internal functions, the status of inputs/outputs, error messages in order to of transmit them to the supervisor;
- archives the history of events occurring on the network and equipment for possible maintenance;
- manages the lighting of indicators;
- serves as an interface with route control units to foot of work.
Figure 3, the system object of the invention, according to an example embodiment advantageous, includes a functional digital link, linking the CPU (250) to the blocks Or/Des (221) and Ag blocks (231). Said blocks (221, 231) control and receive track equipment information (1211, 1311) via a link (310) said of country. The supervisory unit (240) exchanges information with the CPU
(250) via the LNS (210) and additionally, receives information in origin of the campaign via this same LNS (210). According to this advantageous embodiment, the system which is the subject of the invention comprises a remote monitoring tool (340), connected to blocks (121, 131) via a digital remote monitoring link (300), called LNT. The LNT
(300) connects each block to the remote monitoring tool (340) and allows to convey to this tool (340) the information concerning the state of the main equipment (1211, 1311) interfacing with the blocks, as well as the operating status of the blocks (121, 131).
According to this exemplary embodiment, the Ag blocks (131) and the Or/Des blocks (121) are designed to send this information directly to the remote monitoring, using an LNT (300) link, different from the LNF (200). According to an example of realization, the LNT (300) and the LNF (200) are established on the same support physical, for example a fiber optic network, but using two virtual networks local (VLAN). Advantageously, each block (121, 131) further comprises a connection 5 digital maintenance (not shown) called LNM. According to an example of realization, this digital maintenance link is established with each Ag block or Or/Des block via a USB (Universal Serial Bus) type port on the front of said block.
This connection makes it possible, by means of a specific tool, called the maintenance, to have access to the internal information of said block, in particular for its maintenance or 10 its setting. According to an exemplary embodiment, said tool for maintenance is a laptop.
The function of the remote monitoring tool (340) is to collect information from the blocks (131, 121) in particular the problems or failures that occur present, to take action to resolve them. Said tool (340) of

15 remote monitoring reports alarms to the personnel in charge of the maintenance when an anomaly is detected on one of the elements of the system. At this end, the tool (340) remote monitoring periodically scans the network (300) of remote monitoring. Whether a change of state has occurred on a block, the remote monitoring tool dates and remember this event. Thus, the remote monitoring tool (340) does not emit any command, it collects and timestamps the following information for each network block:
- the events defined by a block state change;
- the state of the block and the value of its internal variables;
- the state of the equipment (1311, 1211) in the field, given by the state of the corresponding inputs/outputs of said block, in particular the inputs-outputs while or nothing.
The support of functions by physical blocks mounted in a rack facilitates greatly the maintenance of the system object of the invention.
Figure 4, according to an exemplary embodiment, each block is presented under the form a module suitable for rack mounting. This has on the rear face (not visible) all input-output connections with the campaign and connections with the NFL
and the LNS. On the front face, said block includes LEDs allowing view status

16 all-or-nothing inputs-outputs, and an interface (410) for example of the type USB, for establish a digital maintenance link between said block and the maintenance.
According to an exemplary embodiment, a block comprises on the front face a first together (420) LEDs indicating the state of the on/off inputs of said block. These entries match information from the campaign that indicates the status of the different track equipment, in particular via relays type NS1.
By way of example, these discrete inputs indicate the state of the inputs relating to the ToS
monitored by the block, and the status of the needle control devices in the case of a block Ag. Another group (430) of LEDs indicates the status of the all or nothing of block. These outputs are directed to NS1 relays which provide the interface control/power with the maneuvering devices of track equipment such as as point motors or signals. Thus, the blocks corresponding to one same section of track being mounted in a cabinet, observation of the front faces of these provides immediate information on the configuration of the interlocks.
In the event of malfunction or failure of a block, it is simply replaced by a block of the same type. In this case, the maintenance link (410) is used to copy the parameters of the replaced block into the block of replacement.
Advantageously, the cabinet includes a keying device cooperating with the block which prohibits the mounting of an Ag block instead of an Or/Des block and vice-poured.
Figures 5 and 6, all blocks include interfaces to connect them in network on the LNF, the LNT and the LNM. These input - output ports are not represented in Figures 5 and 6 for ease of reading.
Figure 5, according to an exemplary embodiment, an Ag block comprises 3 inputs (521) all or nothing corresponding to the detection of a vehicle, for example a train at average of 3 CdV corresponding to the three ends connected by the needle.
According to a example of implementation the information from each CdV is sent to the block, by example via a make contact of an NS1 type interface relay (510), level high, for which the input is supplied with a voltage of 24 volts, corresponding to logic state 1 indicating the absence of occupation of the section monitored by said CV.
Still according to this exemplary embodiment, the block Ag has two inputs (522) all or nothing allowing the control of the blades of the needle for the directions left and right. According to this exemplary embodiment, the control information of position of the blades,

17 left or right, is sent to the block via a make contact of a relay interface NS1 type, the high level, for which the input is powered by a voltage of 24 volts, corresponding to logic state 1 for which the controlled needle is in his respective position (left or right). According to this embodiment, the Ag block has 2 on/off outputs (531) corresponding to the outputs intended for the needle control. According to an exemplary embodiment, the blades of the needle are moved by an electric motor. The command to a position (left or right) is achieved by energizing an NS1 type relay. The duration excitation of the relay varies according to the type of pointer. This period is fixed by means of a block settings. According to this embodiment, the output is in the state logic 1 when needle movement is commanded. These inputs (521, 522) and exits (531) of the Ag Block are hardware and software designed to reach a security level 5IL4. These all-or-nothing inputs/outputs which ensure the interface with the campaign are essential to the operation of the system which is the subject of the invention.
The other features of the system involve exchanges between blocks and are realized through the NFL. Depending on the embodiment and the targeted application, the block Ag understand other on/off inputs/outputs with security level 5IL4 or lower.
As by non-limiting example, the block Ag comprises, for example, an input 5IL4 allowing to manually release an interlock, an input making it possible to condemn the block, or an input allowing manual control by key of the needle.
Figure 6, according to an exemplary embodiment, an Or/Des block comprises 4 inputs (621) of CV. These 4 inputs make it possible to process any track plan whatever either her complexity. A 5th all or nothing input (622) corresponds to a so-called input of pedal of destruction. It corresponds to the output of an electromechanical detector sensitive to passage of a vehicle over a defined area. This entry, when it is activated at logic level 1, which corresponds to the presence of said vehicle, allows of trigger the destruction, or release, of the engaged route. According to this example of realization, the Or/Des block comprises outputs (631, 632, 633, 634) all or nothing for controlling a route origin signal under conditions in consistency with local operating and spacing conditions.
Thus, in the example of a railway application, the on/off outputs from block Gold/Des include:

18 - an output (631) for controlling the green light of the maneuvering signal, produced by energizing an NS1 relay;
- an output (632) for controlling the red light on the turn signal, made by energizing an NS1 relay;
- an output (633) for controlling the yellow light, produced by the excitation of one NS1 relay;
- an output (634) for controlling the eyepiece, produced by the excitement of a NS1 relay;
the light being red when no ignition command for the other lights is activated. The eyepiece is a light signal, usually white and placed in bottom left of the signal, and which is lit when said signal is passable in particular in the case of a walk on sight.
These main inputs and outputs of the Or/Des block are of security level IF L4.
Depending on the intended application, the Or/Des block includes other inputs and outputs all or nothing security level 5IL4 or lower. Advantageously, the Or/Des block includes an input (625) called reverse direction control and an output (635) called reverse engagement. These inputs and outputs (625, 635) allow of manage a zone common to two systems according to the invention, that is to say to two sets of blocks each managing a track section. Thus, several object systems of the invention are advantageously used adjacently to to control very complex track plans, or allow the evolution of the network by the addition of new branches without having to re-demonstrate branch security previous.
According to an exemplary embodiment, the Or/Des blocks and the Ag blocks comprise one or more so-called proportional inputs (541, 641), which allow acquisition of a signal of variable or evolving value. These inputs (541, 641) are kind digital or analog, and allow the acquisition of a signal proportional, by analog example between -5 volts and -F5 volts or a signal proportional of which the level is coded on 8 bits or more. Such proportional inputs allow to include in the route engagement criteria, parameters defined by their value, by way of non-limiting example, such a proportional input allows in particular to control the effective lighting of a green or red light signal.
Returning to Figure 1, the method object of the invention is illustrated according to a

19 example of implementation corresponding to the creation of a route between of them ends (101, 103) of the network implementing the two needles (111, 113) conjugated. According to an exemplary embodiment of the method that is the subject of the invention, the realization of a route, until the authorization of the passage of a vehicle on said route, includes 3 stages:
- route selection;
- the interlocking of the route;
- route control.
These three stages are followed, after or during the passage of the vehicle on said route, a so-called route destruction or freeing stage.
Figure 7, the route is initially defined by the supervisor by means of the tool of monitoring. During a creation step (710) said route is interpreted by the CPU (250) which transmits (711) via LNF selection information to attention of the first block Or/Des (121) of the itinerary, in order to reserve said itinerary. Upon receipt of this selection request, during a selection step (720), said block Or/Des (121) goes from free state to selected state and transmits (721) an order of selection at the downstream block (131) concerned by the route. The passage of the state free in state selected for such an Or/Des block is only performed if said block is actually to free state and occurs in the route as a source block or as a block destination. When the block Ag (131) concerned by the route and downstream a block Gold/Des of origin receives the selection order, the latter passes (725) from the free state to the selected state if no interlocking opposes it, and this selection causes:
- the transmission of an electrical command to the needle commissioned by said Ag block (131);
- the transmission of a command to an adjacent block Ag not traversed by the route but whose needle is to be ordered as protection:
- the transmission of a command to an adjacent Ag block, not traveled by the itinerary but whose needle is to be ordered as a conjugation.
The first command is addressed directly to the needle controlled by said block Ag (131) via one of the outputs (531 FIG. 5) of said block, while the two others Commands are addressed to the respective blocks via the LNF. Then the Ag block (131) emits (721) a selection instruction intended for the downstream block (733) traversed by the route and so on. The last block (123) of the route is always a block Or/Des of destination. When this last block Or/Des (123) is selected (720), the latter sends (722) to the original Or/Des block a notification of the end of selection, this which makes it possible to ensure that all the blocks traversed by the route have indeed summer 5 selected.
On receipt of the notification of end of selection, the block Or/Des (121) original initiates the route engagement process for the formation of said itinerary. the passage from the selected state to the state Triggered by a route not control aims to prohibit any needle control, thus ensuring the continuity and the 10 protection of the route, in front of the traffic of the vehicle which borrows it and during his passage. Upon receipt of the notification of end of selection, the Or/Des block (121) original changes (730) from the state Selected as origin to the On state by a uncontrolled route as origin, and transmits (731) an order engagement to all the downstream blocks (131, 133, 123) traversed by the route. To the receipt of order 15 of engagement, each block passes (735) from the selected state to the switched-on state uncontrolled. This change of state, in the case of an Ag block, allows the lockdown of the needle that said Ag block commands. Receipt of the order (731) of route interlocking results in each block traversed by the route the performance of a step (745) for checking the engagement conditions, and, if said

20 triggering conditions are verified, the block changes to the state switched on controlled and transmits (741) to the originating Or/Des block (121) a changeover notification to the state engaged controlled . Upon receipt of all of these notifications (741) from passage in the controlled state, the original Or/Des block (121) changes (750) to the triggered controlled after having checked the validity of its own conditions engagement and controls the opening of the signal authorizing the passage of the vehicle on the route. the setting of the Or/Des block (121) concerned allows him to define the indication to to present to the signal according to the established route and the occupancy status of the ways.
Figure 8, according to a first exemplary embodiment, called destruction automatique in origin, the attack of the first zone of the route causes the closure (860) of the original signal. After releasing this zone, in the case of a destruction in origin with pedal, route interlocking is deactivated (861) This deactivation causes the transition (865) to the free state of the blocks (131, 133, 123) progressively measure of

21 the release of the CdV of the course by the vehicle. This mode of implementation corresponds to the release of the transit interlock and allows the release of needles as they are released by the vehicle, allowing so streamline traffic.
Figure 9, according to an alternative embodiment, called destruction automatique in destination, the destruction of the route is initiated (960) by the block Gold/Des (123) destination after said vehicle has crossed the whole of the route. By example, when the vehicle is a train, and its passage is detected by via track circuits, this crossing is determined by a sequence occupancy of the CdV between the last transit CdV and the destination CdV
:
- occupation of the last transit CdV, the next CdV being free;
- occupation of the CdV immediately downstream of the last transit CdV of the route, which is actually the destination CV;
- release of the transit CDV.
Thus it is certain that all of the axles of said train, i.e. the train on its entire length, have crossed the last transit CoV. When the function destruction automatic destination is activated, arrival at the destination causes the show (961) by the destination Or/Des block (123) of a destruction command automatic in effective destination at the address of the original Or/Des block. The reception of this command, called token, by the original Or/Des block (121) causes the disabling the Route interlocking function of this block (121) of origin.
Upon receipt of this token, the original Or/Des block (121) changes (965) to the state free under provided that the CdV of entry on the itinerary are free. Then the block Gold/Des (121) origin transmits (962) to the downstream block (131) of the route an instruction to destruction authorized, which block switches (965) to the free state and transmits (962) to the downstream block (133) of the route, an authorized destruction instruction and so on.
This mode of carrying out the process which is the subject of the invention prohibits any modification route to clearance of said route by the vehicle.
Figure 10, according to an example of a specific track plan, this does not include that two ends (1010, 1020) and does not include a needle. For exemple such track plan corresponds to a platform track (1100) of a station. The interlocks relative to such a track plan are to manage the signals at both ends by function of

22 information delivered by the associated CDVs (not shown). In these conditions on system which is the subject of the invention is implemented with two Or/Des blocks (1021, 1022) located at each end of the track. The absence of Ag block on the route corresponding is taken into account in the so-called parameterization layer of the software layer of said Or/Des blocks (1021, 1022).
Figure 11A, according to another example of a particular track plan, said plan of way includes 6 ends (1101, 1102, 1103, 1104, 1105, 1106), signals associates and an oblique crossing where the section between two of the ends (1106, 1103) crosses a another section (1101, 1104) without switching.
Figure 11B, the implementation of the system that is the subject of the invention on such a plane of path is, according to an exemplary embodiment, carried out by means of two needles fictitious, corresponding to the oblique crossing, which fictitious needles are ordered by Ag blocks (1121, 1122). Thus, these blocks Ag (1121, 1122) commanding needles fictitious, cooperate with the blocks Ag (1123, 1124) commanding needles real to allow the interlocking and destruction of routes in complete security. The Ag blocks (1121, 1122) commanding fictitious needles are Ag blocks real who are integrated into the LNF network, but which do not have the entries exits relating to the commands and controls for moving the needle, or of which these functions have been inhibited. Their presence makes it possible to manage incompatibilities of route.
The description above and the examples of embodiment show that the invention achieves intended goals, especially by combining generic blocks configurable, connected by a ring network, it ensures functions of formation and validation of an itinerary as a whole by distributing the functions of control and security at the level of each generic block. Thus, the demonstration of the conformity of an installation made from the device covered by the invention in look at a level of security is greatly facilitated. The blocks being based on a generic architecture, maintenance of the system as a whole and of each block in particular is facilitated. The device object of the invention is suitable for both first installation but also adapts and interfaces with any system existing engagement, in particular electromechanical. Finally the device object of the invention is scalable by integrating new blocks, corresponding to others

23 switches, in the network or by connecting several systems between them.

Claims (15)

24 1.
Interlocking maneuvering system adapted to a track plan comprising 3 ends, including:
- blocks suitable for being mounted in a rack and supporting route interlockings between these ends, each block comprising:
- a generic base, hardware and software;
- an application software layer relating to each type of block;
- a parameterization layer relating to the application;
and 3 functional states:
- free;
- selected;
- triggered;
- a processing and control unit able to issue a command to destination of the blocks in order to constitute a route;
in which, - the blocks consist of:
has. at each end of the route, a so-called origin/destination block, capable at take charge of all the interlocks linked to authorizations of movement and the interlockings of a zone of origin or of destination, at one end of a route, which zone comprises in campaign at least one device for detecting the presence of a vehicle on the track and a signal;
b. a so-called switch block, capable of controlling the operation of a switch and the associated interlockings from track equipment comprising at least :
- said needle and a device for maneuvering it, - a device for controlling said needle, - a device for detecting the presence of a vehicle in said needle;
Date Received/Date Received 2021-07-20 vs. and wherein said blocks are able to communicate with each other by via a functional digital link consisting of a computer ring network;
d. and wherein the processing and control unit transmits on said connection functional digital a command to a first block origin/destination of the route, in order to create a route between ends of the track plan. 2. System according to claim 1, in which the switched-on state of a block understand :
- an uncontrolled activated functional state;
- a controlled activated functional state. 3. System according to claim 1, comprising:
e. a remote monitoring unit;
f. a digital remote monitoring link, separate from the connection functional digital, connecting the blocks to said unit of remote monitoring. 4. System according to claim 1, in which each block comprises a port input/output for a digital connection of a service tool. 5. System according to claim 1, in which each block comprises:
- an all or nothing input whose restrictive state is 0 able to acquire a binary information relayed by a switching relay;
- an on/off output able to deliver a power supply to a relay of switching or an equipment power loop.
Date Received/Date Received 2021-07-20 6. System according to claim 1, adapted to a track plan comprising a oblique crossing, and the blocks of which include a steering switch block a dummy needle. 7. Method for producing an engagement corresponding to a route and implementing a system according to claim 1, comprising, between the blocks corresponding to the route and initiated by the origin/destination block selected as the route origin, the steps of:
u. to pass a block, called upstream, from the free state to the state selected;
v. transmit said upstream block to a block, called downstream, concerned by the route and the immediately following according to the functional digital link, a selection command. 8. Method according to claim 7, in which the upstream block is a block of origin/destination and that steps u) and v) are only carried out if said block is in free state and is selected as origin or destination of the route. 9. Method according to claim 7, in which the upstream block is a block needle and that the passage to the selected state is carried out only if the block is at free state, the transition to the selected state causing the transmission of a command needle electric. 10. Method according to claim 7, comprising, at the end of steps u) and v), the steps consisting of:
w. when all blocks in the route are in the selected state, pass the source block in ON state;
x. transmit to each of the downstream blocks of the route a command engagement.
Date Received/Date Received 2021-07-20 11. Method according to claim 10, in which the blocks of route pass in the unchecked engaged functional state at the end of step x), the process comprising, after step x), the steps consisting in:
y. for each block traveled by the route check conditions of transition from the unchecked on state to the checked on state and if these conditions are verified switch to the controlled switched-on state;
z. for each block traversed by the route, pass to the originating block a information attesting to its passage to the controlled switched-on state. 12. Method according to claim 11, in which the block is a block needle and that the receipt of the command from step x) generates at the level of said block, issuing a command to immobilize the needle, then, during step y), the control by said block of the position of the needle, the transition to state activated controlled of said block being carried out only if the result of this control is the needle position suitable for the route. 13. Method for carrying out the course of a route by a vehicle on a guide network between an origin end and an end of destination, using a system according to claim 1, comprising steps consistent at :
i. define a route by an origin endpoint and an endpoint of destination and transmit said route to the processing unit and control ;
ii. issue, by the processing and control unit, a command called creation of route for the attention of the block of origin/destination of the original end;
iii. selecting the route according to the method of claim 7;
iv. triggering the route according to the method of claim 10;
v. monitoring the route according to the method of claim 11;
Date Received/Date Received 2021-07-20 vi. open the signal controlled by the original block and allow passage from vehicle ;
vii. after the passage of the vehicle, destroy the route and bring back the blocks corresponding to the free state. 14. Process according to claim 13, in which step vii) is initiated by the block of origin and includes a step consisting of:
wow. deactivate the interlocking of the route by the passage, step by step close via the functional digital link, blocks in the free state to measurement of the crossing of the zones monitored by said blocks. 15. Process according to claim 13, in which step vii) is initiated by the block destination and includes the steps of:
bvii. detecting the crossing of the route by the vehicle;
cvii. release the original block and transmit to the downstream block a command to deactivation of the engagement, for the transition to the free state, of step by step according to the functional digital link, blocks of the route.
Date Received/Date Received 2021-07-20