DE1946522A1 - Control procedure for an automatic control center of a railway system - Google Patents

Description

STANDARD ELEKTRIK LORENZ AG 1946522

7 Stuttgart-Zuffenhausen
Hellmuth-Hirth-Str. 42

W.Schmitz-P.Sammet 1-1

Control procedure for an automatic control center of a railway system.

The invention relates to a load sharing control method Mix two computers for an automatic control center of a railway system. The tasks of such a control center can be divided into the following groups Route control of trains, dispatching, shunting and statistics and archiving. "To accomplish these tasks special facilities are required for communication between the computers and the facilities to be controlled in reporting and command direction. The Calculator take responsibility for security.

To the monthly magazine: Cybernetics and electronics at the Eisenbahnen, Mara 1967, pages i45 to 149 is an on at ζ with de "i ntal" The Union Railroad control their operations with a Hi ^ ri'HimasohLne "known. The one described in this article Control of a railway system by an Elechner is on “Limited to some narrow areas. At many points the Human intervention in the control by the computer. In particular karin the calculator only for very small subtasks assume responsibility for safety in driving penalty control » msri.

The object of the invention is to secure the driving operation further automatic control by computer. That oteuer method according to the invention is characterized in that

May 27, 1969

109821/0755

W.Schmitz-F.Sammet 1-1

that each computer is assigned a sub-area to be processed primarily by it as the executing computer, that for each Key command a first command telegram is issued by the executing computer that the executing computer gives the other Calculator, an encouragement to check the situation in The track network and the feasibility of the command telegram issued by it transmitted that the checking computer only if the test result is positive, the transmission of a second, corresponding command telegram and that both command telegrams be checked for consistency and errors. That Control method according to the invention ensures a smooth operating sequence even when journeys are not scheduled and enables extensive rationalization. The one for surveillance purposes The employed person is relieved of any routine work. When performing routine work fall all the necessary data for the operational control centers from the computers at. .

A more detailed design of the tax procedure according to the. Invention «. dun = ·; provides that, in the case of route commands, only the presence of element blockages (e.g. disturbed points, variable track blocks if the loading gauge is exceeded, conditional track closure in the event of rotten warning) is checked, while the rest of the safety must be guaranteed by the relevant interlocking. In sbelling processes with responsibility for security, e.g. when setting a substitute signal, both computers replace interlocking security. The checking computer switches on the associated remote control lines, which otherwise only the executing Computer queries, the checking computer checks on the basis of the states of the determined during a transmission cycle affected interlocking the existence of conditions that occur during the respective control process, e.g. the setting of a replacement signal, could impair operational safety. Will

109821/0750

W, Sehmitz-F. Collect 1-1

Such conditions are not found, so the checking computer will initiate the issuance of the second command telegram, if conditions affecting operational safety are determined, the issuance of the corresponding second command telegram refused. In the latter "case, it receives the supervising person receives a message from the computer,

An essential development of the control method according to the invention lies in the fact that the computer results and the interlocking information directly without intermediate storage on the remote control or Ferjamelde devices act »

In a further embodiment of the control method according to the invention, pulls the executing computer when it detects a discrepancy in the election result an Aelas £ eter from the target axle number the checking sixes £ u der Check added .. Both computers then monitor the presumably faulty one Axle counter and the next axle counter driven by the train in question, if the subsequent axle counter counts the target number again and the presumably faulty axle counter remains with a number not equal to 0, then from initiates the AehSZahlergrmdstellung the checking computer *

The merlcmale already given and other notices rens according to the invention are below in igussmmpnhang © it # © ffl in the Embodiment of a district control center shown in the drawing lines explained.

Fig. 1 shows a system overview,

Fig. 2 shows a block image of the computer center

3 shows a device overview of the control method naeto of the invention involved series »

Fig. 4 shows in a block diagram of the godfather flight "in the method according to the invention,

FIG. 5 illustrates the responsibility for the control process in a diagram.

Fig. 6 shows an example of the implementation of the rjm for the initiation of single-occupant operation.

BAD OFUQIHAL

W.Schmitz-F.Sammet 1-1

Pig.7 shows an exemplary embodiment for switching from Additional message lines for single-computer operation.

Fig. 8 shows the structure of a remote control telegram.

9 shows a block diagram of the creation of a Message telegram.

Fig.Io shows the evaluation of a command telegram.

11 shows an embodiment of a remote control command receiver in a signal box.

FIG. 12 shows an overview of an automation district, on the basis of which some exemplary embodiments of control processes explained.

The system overview according to Fig.l shows the automation area AB and a break-in location EB. From the computer center Data centers are to monitor and control all train movements in an automation district AB. Burglary trains must be sent by the FDL dispatcher at the break-in location EB using teletype machines FS can be reported directly to the computer center RZ. Should irregularities occur in train operations the system independently selects the actions required for the respective operating case according to certain rules. To the The most common operating irregularities must be the non-closing of routes and incorrect track occupancy are counted.

If routes do not enter, the same actions must be used by the computer center RZ (e.g. repeated Adjustment attempts, other route, shunting route, individual element position, substitute signal, etc.), as they are today by the dispatcher be initiated.

Incorrect track assignments must be based on axle counting information recognized, localized and taken into account. The computer center RZ must upon receipt of a shunting route request taking into account the respective operational situation the

109821/0750 - / -

W.Schmitz-P.Sammet 1-1

Check the request and, if the decision is positive, the shunting route setting order to the signal box StW. In the event of a negative decision by the computer center RZ, notification of the Shunting personnel.

The dispatcher DI in the head office must be informed by the computer system RZ aids (disposition proposals, situation overview, selective train query, etc.) are made available to it allow him to make a decision in cases in which the computer has reached the limits of its extended disposition capabilities hold true.

All processes that the computers process are archived over a certain period of time and can be specifically called up.

The information required for the automation district about Turnouts, main signals, main blocking signals, shunting signals, track sections etc. are taken from the general plans of the railway administration.

The transmission of messages between the computer center RZ and the branch offices (remote control and command center, Train numbering system ZNA, teletyping machines FS) is made with the help made by booth connections. These leased lines can e.g. consist of alternating current telegraphy channels designed for different walking speeds.

The automation district is divided into two sub-districts, each of which is processed by a computer system. The tasks of the two computer systems are completely identical and, as already indicated, can be subdivided as follows: train tracking, route control for trains, dispatching, route control for shunting movements and data acquisition for operations control centers. Beyond the scope of the aforementioned tasks, the computer center assumes responsibility for security and the implementation of emergency operation in the event of a computer system failure.

109821/0750 ^{- /} ~

Train tracking

The prerequisite for train tracking in accordance with the timetable is that the timetable is stored on a memory that random access is allowed. The teletyping machines in the train break-ins are used to record the train and if necessary, place data for the trains breaking into the automation area and so enter the computer center reported via teletype channels. Train data is understood to be information about the train number and possibly the number of axles and the type of traction (Electric locomotive, Ε railcar or other) and weight. Location data is understood to be information about the station designation and track designation.

On the basis of this input data for each train, the computer center keeps track all trains located in the automation district with the help of track diagram elements that are set automatically at the signal box be tapped. The computer center thus continuously leads in their main memories and peripheral large storage units the current status of all track diagram elements in the district.

By comparing the actual operation with the stored target operation (Timetable, train station driving regulations), taking into account certain tolerable deviations, the regular schedule operation or non-regular operation defined. Scheduled regular operation means that the train - with certain time deviations - will arrive at the time specified in the target timetable corresponding place in the district. If a train schedule deviates from the target time (non-regular operation), the affected station staff informed of the expected time deviation. This notification will take place around the time at which the scheduled train would have reached the respective station. In addition, the actual / target pressure deviation is checked carried out, but only serves for over-> " guarding of the train locations, which are set by the commands of the computer

109821/0750

W.Schmitz-F.Sammet 1-1

have been defined. To locate faulty track occupancy - caused by an axle counter - on the free route automatic train end detection is provided.

The transmission of axle counting information is necessary for the connection detection required by the remote control reporting devices with subsequent processing in the computer center. The target number of axles of a train entered with the train break message is continuously compared with the axle count messages of the individual routes while driving in the automation area. If a discrepancy is found that is not specified in the target timetable, the axle reporting information is the the next, and possibly the next but one route that the train is traveling on, and if it matches the originally specified target axle number a special auxiliary clearance reporting program bumped into the head office.

For information, the dispatcher DI has three teletyping machines available for each computer system, a position recorder, a clerk and a special clerk. The situation clerk prints the location of the trains in the stations and on the open route on a form paper provided with a basic grid, differentiated according to the direction of pull. Messages are sent between the dispatcher DS and the computers via the operator or exchanged vice versa. The special writer is used for printing larger amounts of data, essentially archiving and storage data printouts.

Route control

Track control for trains is understood to mean that in the computer system Routes for the trains are determined with the help of rules and appropriate commands are sent to the via remote control devices Signal box StW are sent. The commands to the signal box

10 9 8 2 1/0750

W, Schmitz-F.Sammet 1-1

keys are transmitted in encrypted form with a telegram, this is referred to below as a key command or, for short, as a key. It can be used in the route control Differentiate between three operating states: setting of routes according to the station ferry order, deviation of those to be set Set the route from the station timetable and individual element, no route set possible.

Thanks to the current and seamless train tracking, the location of each train as well as the track occupancy in the stations are the caused by a maneuvering movement are known. Based on this stored and continuously updated track map For each route to be set, it can be checked whether it is proceeding in accordance with the station timetable or whether it is necessary to dispose of the computer.

-The aforementioned functional sequences are related to the actual The arrival time of the train at the respective location is carried out with a lead time in the computer. This lead time is Train and location-specific and takes into account the positioning time of the route, the train speed and the route conditions. In many cases it will happen that e.g. due to a maneuvering run that was not completed in time or another In the event of an irregularity or disruption in operation, the route provided for in the station order cannot be used can. The computer has to use the disposition programs Select another route that is favorable for this case. A corresponding message is sent to the station staff sent to notify travelers.

A setting of individual elements will always have to be used if it is not possible to carry out the intended operation Keep the route position. This is where the computer center In addition to the responsibility for the smooth operation, the responsibility for the safety of the operational

109871/07 5 0

W. Schmitz-F.Sammet 1-1

sequence is also taken over. By this Pall control yourself the two computers mutually and make a decision together.

ÜLnponler

The dispatcher in the computer center RZ has to do routine work relieved. This is all the more important, the larger the automation area is. Routine acts also become up to a certain limit the scheduling counted. The tasks of scheduling were already discussed in the previous section indicated. The typical course of a disposition is shown using an assumed example:

The Pahrstrasse specified in the station order can be due to a track occupancy are not provided. All possible alternative routes cross the main track in the opposite direction. The computer system compares the data of the train for which the Pahrstrasse is to be provided with the stored data Station data. The train length is determined from the number of axles from the train data entered at the break-in point and the type of traction and train number taken. The comparison with the station data shows a certain number of possible Routes, one of which is selected from a priority scheme (priority e.g. according to energy consumption or number of the turnouts used are permanently stored in the computer). After a decision has been made in favor of a certain road, the effect will be examined for the current operating situation. The trains located there are determined for the adjacent lines and stations. A priority assigned to each train according to the type of train allows the computer, taking into account the expected time deviations from the target timetable, the decision for to independently meet the further operational processes.

109821/0750

W.Schmitz-P.Sammet 1-1

Route control for maneuvering movements

As already indicated, the ferry route control counts for Shunting movements with the tasks to be dealt with by the Reehner headquarters. In contrast to the Zugfahrwegr control, the timely triggering of which by the computer itself is carried out (train tracking, target timetable, station schedule) the shunting route comes from outside, by the shunting staff in the train station. The process is roughly as follows: From the marshalling staff to the local train station the desired shunting route is set using the remote control units of the Computer requested. The computer checks the request for compatibility with the current and expected operating situation prevailing during the maneuvering process and gives the command to the shunting staff either in the case of a positive decision or the reason for refusal in the case of a negative decision. The expected duration of the maneuvering process is taken from fixed data stored in the computer based on gained from experience.

Data acquisition for operations control centers

Archiving and statistics are particularly considered here. All processes are carried out over a period of a few hours archived in which the computers are connected to their environment. This includes all remote control items, all Train number telegrams, all write messages. Retrospectively An archive extract can be requested for up to about 2 hours. The statistics are essentially a list of train kilometers, which is created individually for each train category.

109821/0750

W.Schmitz-F.Sammet- 1-1

Pig.2 gives an overview of the devices arranged in the computer center in the exemplary embodiment. According to The division into two sub-districts means that most of the devices are duplicated. The Steuerreehner StR are core memories with a Capacity of 24,576 words of twelve bits each. To every tax calculator includes a paper tape reader (not shown), a paper tape dancer and an input / output console. The tax calculator processes only the information that it receives from a line computer LR or gives it to him. The task of Line handling, such as receiving and sending, is to the line computer LR delegates. In addition to the central control for monitoring and controlling the data flow and execution the program instructions contained in the main memory a control computer parts of a data channel yet to be explained and, above all, various operating devices. The controls On the one hand there are switches, keys and indicator lights on the computer itself, on the other hand a special typing machine e.g. for input and output of programs, both Together, the programmer, operator and maintenance staff communicate with the computer.

The data channel is used to transfer information from and to the peripheral devices. In the present case, a data multiplexor is used DMP, a disk storage PS and the line computer LR connected. If necessary, additional disk storage can also be used PS and magnetic tape storage can be connected.

The one between the line computer LR and the data multiplexor Connection control integrated into the DMP allows the transmission of up to approx. 220,000 words of twelve bits per second. The line computer LR collects and distributes all messages sent via the connected lines.

> will

exchangers The LR line computer has in addition to the tax calculator StR also mentioned the connection unit

1098? I / 0750

W.Schmitz-F.Sammet 1-1

for the line multiplexor LMP. It essentially consists of an input / output register for information from and to the line multiplexor LMP. All remote control, teletype, train number and clock cycle channels are available via the line multiplexor LMP of the respective sub-district with the associated Computer connected. The connection units of the line multiplexor LMP are designed to take over all channels if the other computer fails.

The two computers are connected to one another via a connecting line VLTG, which is also connected via the line multiplexor LMP of the two computers is performed.

For recording and decrypting all information (remote control, Telex, train number information, clock cycle) the lines are scanned at regular intervals.

The computer continuously monitors the potential of these lines and prepares the bit, character and message information as a result of the statuses queried several times in one pulse step in memory. It is therefore possible to dispense with line-specific accumulators. Although The individual lines are also queried one after the other, as they can because of the much lower transmission speed all are operated simultaneously (known time division multiplex method).

A method very similar to scanning is used to deliver the information. At the beginning of each bit the bit status is transmitted to a single-bit buffer at the output of the multiplexor. This one-bit buffer gives the information to the line or to the transmission device. The different transmission speeds are supported by a quartz-stabilized time generator taken into account, the pulse sequence of which is the basis for the scanning of the line information forms.

109821/0750

W.Schmitz-P.Sammet 1-1

All output channels of both computers are via a switching device UFK for command lines led to the command lines to be able to connect to each of the two computers if necessary.

Operating programs

After a system overview with reference to FIGS. 1 and 2 or a block diagram of the computer center is given the most important operating programs for the control method according to the invention will now be briefly explained will.

The most important tasks of the computer are to follow the train movements in the automation area, to determine Deviations from the plan, the offering of route commands to the interlockings, according to the specified plan in the case of regular traffic, in the other case with the interposition of a scheduling program and possibly a dispatcher, suitable documents are made available for this purpose. The program parts required for this are very closely interrelated interlocked, but are described separately in terms of function in the following in order to obtain a better overview.

Train tracking

With the help of the train tracking programs, the computer is constantly aware of the current locations of all monitored trains Sub-district informifetb. The most important task of train tracking is therefore the detection and storage of changes in location. There is also a check for location and time deviations compared to the setpoints.

The following lists can be used for these tasks:

1. Train time list> First of all, it contains the timetable data of the monitored trains and is in the course of the pursuit

109821/0750 ^

W.Schmitz-F.Sammet 1-1

always> kept up to date.

2. Track section list contains it for each track section the train located there, as well as the adjacent track sections, if they pass through established routes are directly connected.

Furthermore, the entire timetable as well as the geography of the track diagram must be saved on the plate.

A new train to be included in the surveillance is indicated by a Train intrusion detection identified via telex or train number system. This allows the train's schedule data to be included in the Train time list to be included. In addition, the train number in the track section list for the reported intrusion track section registered.

The further train tracking only needs the messages Remote control. Above all, the messages about the position of the points, main signal setting and track section clearing are evaluated. The message "Main signal in progress" indicates that a train route has been set. Leave the associated track sections determine yourself from the geography with the help of the saved switch position, and the corresponding entries in the track section lists are made, and a check is carried out to ensure that it matches the route command that has been issued.

The occupancy message of a track section indicates that the train is just arriving. The list of track sections first becomes the track section connected by the route position and from this the train number entered there is now also entered for the new track section and the train time list is updated. At this Opportunity, time deviations are also determined and possibly

109821/0750 V-

W.Schmitz-F.Saimnet 1-1

tuell delay reports issued.

Leaving a track section is only accepted when the old track section is free, the new one is occupied and the Main signal is reported in stop.

Special program branches allow the tracking of train movements also in the event of disturbances, e.g. if the main signal is disturbed, the train tracking programs must also ensure that at the right moment the outputs are made available to the train number system.

End-of-train detection

Monitoring the end of the train with the help of axle counters is necessary in order to restore the basic position of the To be able to carry out the axle counter. The position of an axle counter is continuously transferred with the remote control cycle. In the basic position, the value zero is always reported. While a train is entering the axle counter section any intermediate positions are transmitted until the train has completely entered the section. Thenceforth the maximum value, namely the total number of axles of the train, is transferred for a while until the train leaves this number is reduced and remains at zero after a few intermediate positions. With the start of the countdown the computer recognizes that it has received the maximum value so far and assigns it to the measured number of axles train concerned too.

The target number of axles and the last measured axle count values are entered in the train time list for each train. Now gives way a new axle count from these numbers, whereby the AbhiB-cut remains occupied, it cannot be said at first whether there is a counting error or whether wagons have been lost. First

109821/0750

W.Sehmitz-F.Sammet 1-1

if the target number of axles is counted again in the next and possibly a further axle counter subdivision, it can be assumed with certainty that there was a counting error. In this case, the basic position of the axle counter caused by issuing commands with responsibility for security. In all cases where there may be doubts as to the facts of the matter, an issue with information on the course of events and the condition will be issued provided to the dispatcher. He can then initiate the basic position on his own responsibility or a initiate further review.

Train route selection

Every time a route has been set for a train is, the computer must already prepare the setting of the next route for this train. The planned route -; -

This can be found in the train time list. Also will checked whether there is a plan deviation that prevents or delays the setting of the planned route. If present the scheduling program must be switched on in the event of such a deviation. As a result, the route setting

“Orders prepared and the tent of issue fixed. This information is included in an action list that arranges all planned processes. Dependent on this action list is checked by the clock, and the messages stored there are sent at the right time issued.

Disposition

A track occupancy plan, which is built from the timetable, is used for scheduling. There is also a list of routes in which the monitored trains are sorted according to the routes they have traveled on. Finally, there is one

- / - 109821/0750

W.Schmitz-F.Sammet-1 + 1

Replacement track list available, in which all possible replacement tracks for each track are listed. For each Track .are the characteristic properties, "the length, Presence of a platform, overhead contact line, etc. available.

If an irregularity is found, this is a disposition requires (e.g. track occupancy, track closure), the actual scheduling program runs. The possible Replacement tracks are first checked for their physical suitability (comparison with train length, etc.). The remaining ones after that Tracks become uninterested in their availability. The trains already monitored that are on the relevant Drive route, are determined from the route list and with the help of the train time list to their exact time and track position checked. The track occupancy plan shows whether there are any other trains that were investigated during the time in question Want to drive on tracks.

If a track is not free for the entire time required, the resulting delay will be for the train to be dispatched or established for those who have to wait because of it. Together With the train priority and possibly a general track priority number, each track is assigned a value in this way assigned.

The tracks are finally in the order of their value Checked for the actual availability, i.e. with the help of the route element list it is determined whether ita « gend-an element of the route is hostile to another existing route that is unlikely to be in the questionable time is resolved. In this way, the best path for the train under the given circumstances is determined. Arises through this selection for any of the trains involved

109821/0750

- 18 W.Schraitz-F.Sammet 1-1

an additional delay or if no physically suitable track can be found at all is the result of the Dispatch issued to the dispatcher. He can then enter a confirmation or a notification of change.

Security responsibility

The provision of individual elements for which the security monitoring the signal box is bypassed, requires particularly careful control in order to rule out any error. That's why the responsibility for such commands is not assumed by ■ one computer alone, but rather the wide computer is switched on in a controlling manner and, if necessary, the person has to intervene to control it.

The basic idea is that the executing computer system has to issue several commands (keys) in order to create a To initiate a reaction. Each of these commands must be started by an external reason (e.g. by the other computer) be set. Because the program parts for this are not inevitably follow one another, but have to be initiated independently of one another, if the computer program runs off only one condition is always set which is not sufficient for the signal box to carry out a To initiate commands.

In practice, this process takes place as follows: The computer 1 determines the need for a Einaelelement (e.g. substitute signal). The computer I sends a corresponding command telegram to the relevant interlocking. It then asks the computer 2 to check the situation, and remembers the process. The computer 2 now evaluates the Reporting line of the interlocking concerned incoming information and checks whether there are any objections to the setting are present. At this point, the person can also

109821/0750

W.Schmitz-F.Sammet 1-1

be switched on by giving it a printout from the computer 2 the condition of the affected interlocking elements is made available, with the request for his consent to communicate. Now the computer 2 gives the appropriate in the correct order and at the correct time interval Individual commands to the computer 1. The computer 1 checks again whether it has made the request for such outputs and only then sends the second command telegram for the Konwrando to the signal box.

Overall monitoring

All events that take up the computer time must be sorted according to priorities and processed in this order. For these purposes, framework programs are required for the two computers, which the various program parts in Let them work together in the correct chronological order, initiate the associated input / output programs, and exchange data control between the computers and allow the handling of queues, which by simultaneously arriving Messages, simultaneous requests to the disk and similar operations is necessary.

The block circuit biaa according to Fig. shows everyone on the tax procedure according to the invention involved devices. All elements of the track diagram in the Aufeomeitlslerungsgebiet are via remote control reporting and command devices between the interlockings and the computer systems I and II monitored or controlled. As transmission devices facilities are used that allow information to be exchanged between the control center and several remote control devices to be exchanged in the interlockings on existing twin cores using frequency division multiplexing. The transmission speed has been limited to 2oo Bd in order to keep the influence of interference information on the transmission channels within limits.

109821/0750

W. Schmitz-F.Sammet 1-1

The main component of the system is an electronic remote control system. In addition to the remote control system, AC telegraphic devices are used for the transmission of remote control messages of the type WT 100 / FM 240 and FM 480 are used. That’s what it’s about equipment that meets the recommendations of the CCITT for AC Telegraph systems with frequency modulation. For the transmission of telex messages as well as for the special Messages from the existing ZNA train numbering system are used by WT 100 / FM 120 devices.

The system also includes dial-in devices that provide train number information Submit to the existing train number system ZNA. The computer system forms the one for the train number system ZNA required messages. The information becomes the The respective interlockings are transmitted with the help of WT 100 / FM 120 devices and the message is dialed directly into the corresponding display memory in the interlocking. In addition, for all trains, that come into the area of the automated route that is already in the train number system ZNA for the corresponding direction assigned information in serial coding form adopted by the computer systems.

The system is roughly divided into facilities in the signal boxes of the automation sub-district AB I and the automation sub-district AB II and in the computer center RZ. On the one hand there are devices in the interlockings for recording and sending messages to the computer center, on the other hand, devices for receiving and distributing commands from the Reohner headquarters. The devices are via adaptation devices connected to the relay groups of the interlocking system. When recording reporting information, it is essentially repeater relays, which are always used where no potential-free contact is available. In the A distinction must be made between the distribution of command information between a decoding and level adjustment device

109821/0750 /

W.Schmitz-F.Sammet 1-1

and a key switching device.

In the computer center RZ, the serially coded information of the messages and commands in both computer systems R I and R II offered directly at the entrances or tapped at the exits. This means that in addition to the facilities for the transmission and an adaptation no other devices besides the computer systems for receiving or sending the Messages require are oh.

So there is a complete remote control system for an interlocking from the transmitting and receiving device in the signal box »adaptation devices to the signal box, transmission devices for the transmission of messages between the Reohner control center and the signal box and level adjustment between transmission devices and computer system in the headquarters. The one between the computer center and the interlockings exchanged messages are summarized in telegrams in chronological order transfer. Because the transfer volume in. Command direction is much smaller than in message direction, can supply several interlockings with just one transmission channel will. This results in a transmission channel and thus line-saving system. The differentiated by addresses Telegrams address the individual interlockings combined in a channel using time division multiplexing. Every signal box are assigned to two addresses. In the reporting direction is for each connection At least one transmission channel of its own is provided between the interlocking and the control center.

In the interlockings of the automation sub-districts AB I and AB II there are signaling devices ME, which for a transmission speed of loo Bd or 2oo Bd »with different address expansion are laid out. There are also command devices KE available that are set up for a transmission speed of loo Bd. Each reporting device has an adaptation A2 to the relay group of the interlocking or to the axle counting circuits.

10982W075Q

W. Schmitz-F.Sämmet 1-1

The adaptation of the command devices to the relays of the signal boxes will be discussed later in connection with FIG. 10 explained. Finally, there are also the adaptations A1 of the transmission facilities to the computer systems in the headquarters. The facilities mentioned in the computer center RZ and in the automation sub-districts AB I and AB II are connected to one another via different transmission facilities.

The remote control is preferably a fully electronic system. Only the output memory of the receiving station and the address decoding in the transmitting station contain relays, because at this interface between remote control and connected system of universal usability because of potential-free contacts are advantageous.

Devices from the WT 100 series are used throughout the system, that work with frequency modulation methods. There are devices with a step speed of 200 and 100 Bd for the transmission of remote control telegrams, devices with 50 Bd walking speed for the transmission of telex and train numbering information used.

Each transmission channel is in the computer center RZ and in the interlocking with a transmitting device WT-S or a receiving device WT-E equipped. The only exception to this are the command channels, where e.g. for each four interlockings only one WT transmitter in the computer center RZ is available. In addition, the devices * required for setting up WT lines, such as amplifiers, equalizers and line transformers, are required usif · * is used, but for the sake of clarity are not shown in the HLookeehaltbild.

The adaptations Al of the Ufearferagungseinriohtungen to the computer systems in the head office tsisterseheiden sioh for adaptations for ,. WT receiver (reporting direction) and WT transmitter (command direction 5.

109821/0750 - /

W.Schmitz-F.Samet 1-1

The information output of each WT message recipient is over two similar adaptations connected to the line multiplexors of the two computer systems I and II. Through this the process of taking over the entire reporting information in emergency operation, which will be explained later, is enabled.

The adaptations A1, also called adaptations, are used essentially the level conversion and are designed in such a way that repercussions of the disturbed computer system over the adjustments on the working computer system are excluded.

The information input of each WT command transmitter is via the Relay-built switching device connected to the adaptation present on each of the two line multiplexors. Here too the adjustments are essentially used to convert the level between the computer output level and the input level of the WT transmitter.

In the computer center RZ, the dispatcher DI has the command telex KPS and the teleprinter LPS are available, which have to be adapted to one of the computers or the Umschal ^ facility connected to US. The switching device US is also connected via speech path controls SPRST and speech memory SPRSP Directional switches RWV with amplifiers connected via the speech connection between the dispatcher DI or the speech memory SPRSP and the interlockings can be established.

Between the decoding devices DEK of the command direction and the interlockings StW are inserted key switchover TU, which allows a switch between computer control and manual control allow. Another device is attached to the decoding device DEK SCH for a barrier closing request and a distributor control VTST for the loudspeaker systems connected. The arrows with the letters K or M indicate the command direction or the message direction. For shunting traffic For example, point keypads PT that are not explained in more detail here can be provided.

- / - 109821/0750

W.Schmitz-F.Sammet 1-1

The Fig.4 gives an overview of the data flow in the Control method according to the invention. Line inquiries and commands are sent via the line computer LR. The FP timetable and the geography of the station GEO are available to the control computer StR in a large memory. The current data from the line query are entered into the control computer StR via a telegram decryption TE. The data determined with the control computer StR leave the control computer StR via a device TZ for sending telegrams > samaenstellung or lead to the statistics STAT or to the archiving ARCH. The control computer StR handles train tracking, dispatching and route control.

. The Fig.5 serves to explain the assumption of security responsibility by the control computer StR I ntiä StR II. The control computer StR I controls and monitors the automation sub-district AB I, the SteuererrBchner StR II monitors and controls the automation sub-district AB II. In the drawing is the time Sequence of operations shown by circled ordinal numbers. The following explains the operations in this order.

1. The control computer StR I determines that in the automation sub-district AB I an individual element, e.g. a substitute signal, is to be provided.

2. The computer I sends a corresponding command telegram to the relevant interlocking.

3. The computer I requests the computer system II, the location in the to be controlled automation sub-district AB I, and notes this process.

4. The computer II now evaluates the data via the message line of the person concerned Signal box coming information.

5. The computer II checks whether there are any objections to the setting process.

V- 109821/0750

W.Schmitz-F.Sammet 1-1

6. At this point, the person can also be switched on by giving him a printout of the from the computer II State of the affected interlocking elements is made available.

7. In this case, the computer II gives the person a request to communicate his consent to the actuation process.

8. The computer II then gives corresponding individual items in the correct order and at the correct time interval to the computer I for transmission to the signal box.

9. The computer I checks whether it has made the request for such outputs itself.

Io. Only then does the computer I send the second command telegram for the corresponding command to the signal box.

Computer circuit

Computer switching means that the tasks for the two sub-districts are distributed over two computers in normal operation must be taken over by only one computer.

Normally, the two computers only work on their own sub-district, i.e. they share the work that arises. If one computer fails, the other has to take over all the work. To prepare and carry out this switching process a number of special programs are required.

The fixed data (track diagram, timetable, etc.) must be permanently stored in both computer systems for both sub-districts. The most important of the variable data are exchanged between the computer systems, so that no manual data is used when switching Inputs will be required. This includes above all

- / - 109821/0750

6 W.Sohmitz-F.Sammet 1-1

Train movements (driving on and leaving a track section), Route positions as well as beginning and end of telex messages. In addition, control information is continuously exchanged.

The reasons for a computer switchover can be:

1. failure of a computer,

2. preventive maintenance of a computer.

The scheduler is not in control of the failure of one of the two computers, i.e. or must expect it at all times. He can Mitigate the likelihood of failure through preventive maintenance. Preventive maintenance is always making sense during times of low activity, 25.B. at night through test programs made so that the additional work of the dispatcher caused by the switchover is kept within limits.

If, for example, computer system I fails, this is done by the computer system II also recognized that no messages or only incorrect messages are transmitted from the computer I. The calculator II immediately sends a message to the operator and connects to the input lines of the failed computer. This process can be carried out by the program, since all input lines are constantly connected to both computer systems and the program decides which lines are queried in each case. After a transmission cycle

- · the computer system II has a complete

Get an image of the condition of the track and could also do that Work District I. However, the output lines are only switched by the operator after he is aware of the need has convinced by a corresponding telex entry then the full processing including the expenditure is started. Furthermore, the dispatcher must have certain Read in program parts which only then allow the transfer of safety

V- 109821/0750

_ 27-

W.Schmitz-F.Sammet 1-1 ^

enable a computer to take responsibility for responsibility.

The Fig.6 illustrates which command lines from a Computer switching are affected. This includes the FSRZ line to the teleprinter in the computer center, the lines FSEB for the telex in the peripheral zone, the FSTK lines for remote control in the command direction, the ZNA lines for the train number system and the SPR-ST lines for the control of the voice system. In addition, the line bundle SML for controlling the additional reporting lines is switched over.

The switchover of the partial over adaptations Al to the computer systems RS I, RS II connected lines is effected by switches ARS I or ARS II, which are activated in the event of failure of the corresponding Computer system are operated.

7 illustrates the switching of the message lines. Normally the computer system RS I receives both the reporting information of the reporting line bundle ML I and the reporting information of the reporting line bundle ML II, however the computer RS I only evaluates the information from the message line bundle ML I. The same applies to the computer system RS II with regard to the reporting line bundle ML II.

Each computer system kKumi via a common additional line Z optionally with one of the message lines of the -α-ι «α message line bundle get connected. A corresponding command is used for this of the computer system to a changeover code converter IiKW, who decodes this command information and closes the corresponding switch to the desired message line. In the Additional line Z are also still switches. Inserted that either by one of the switches ARS I or ARS II in the event of failure of a computer are closed, or the assumption of security responsibility in the case already described above

109821/0750

W.Schmitz-F.Sammet 1-1

getting closed. If one computer fails, the additional message line to the other computer is also switched over, thus a takeover of security responsibility is made possible by a computer.

If the dispatcher wants to switch off a computer system of his own accord (e.g. for preventive maintenance), in addition to the actions which are necessary in the event of a system failure, an additional message is sent to the host system that remains in operation indicating the intention to switch.

After the system switchover, all Locations of assembly lines, track closures and trains with excess loading gauge can be printed out. In addition, he can use all the routes provided for a small area around the location of a train with excess loading capacity can be printed out. He may compare the expression for the location of the crews (track closures) with that from other sources of information information available to determine any discrepancies.

If necessary, he compares the printout of the location of a train that has exceeded its loading capacity with the location overview.

First entry and restart

When the system is put into operation, a large number of data must be entered once, which is later only insignificant Scope can be changed, as well as all data relating to the track diagram, as well as the information required to decrypt the messages. There are special programs for this required, which, however, because of their one-time use

109821/0750

W.Schmitz-P.Sammet 1-1

can be constructed in a simple manner.

Have both computer systems been shut down and will be back switched on, special restart programs provide a connection to the actual operating situation restored. All current train locations must be entered via telex. The condition of the track is continuously transmitted anyway by the cyclical remote control process, so that the computer systems hler essentially just have to synchronize.

Is a malfunction that resulted in the failure of a * Rianhner, fixed, or if the preventive maintenance of a computer system has been completed, this computer system must be switched on again turn around. The dispatcher sends a message to the computer system that is not in operation to terminate all reporting channels of the assigned sub-district to be scanned. In addition, special restart programs are started with this message, which allow the system, which has been switched off until then, to work on the real-time processing of the processes and actions again to participate. A prerequisite is that aiii fixed data that have changed in the time of the switching operation, through which dispatchers are added (dismantling work, track closures, Special trains etc.). If urgent trains with excess loading dimensions have been processed, these must also Data, route, track closures, etc., wbenfalle from the dispatcher to be added. If real-time processing has been achieved by the computer system to be connected, the dispatcher a corresponding notification is given. As a result, the dispatcher manually switches the command channels of the corresponding sub-district from the operating computer system to the system to be connected. Normal operation is then again manufactured.

109821/0750

W. Schmitz-F.Sammet 1-1
Message structure

The information is in the embodiment between the interlockings and the computer center with $ e 1? Information bit is transmitted in messages (telegrams). A telegram consists of a total of Jl bits. The structure of the telegram is from Pig. 8 and is briefly described below.

Bit 1 is a start bit STB, which together with bit 31 always results in a synchronization edge, since bit 1 takes on the binary value 1 and bit 31 takes on the value zero.

Bits 2 to 5 are function bits that are used to indicate themselves tells what kind of information the telegram contains, for example contact open or closed, encrypted digit information (Axle counter, commands, shunting request) etc. in cases where not all function bits are required by the system * two of these bits can be used to expand the address (four possibilities).

Bit 5 is a check bit with which the other function bits FKB are checked for parity.

Bit 6 to il are address bits ADB which indicate the IJ Information bit from a total of 64 possible groups of 15 bits, that can be transmitted by the system, it is this message. With extended address (see bits 2 to 5) a total of 256 χ 15 bits can be transmitted. The address in a telegram - indicates the origin of the 15 information bits have unö enables the correct assignment and Evaluation of the transmitted information by the computer center or by the receiving device in the interlocking «,

V-109821/0750

W.Schmitz-F.Saramet-1-1

Bits 12 to 24 form the information bits IPB of the telegram.

Bit 25 to 5o are redundancy bits RDB which are used to identify Transmission errors are used.

Bit J) I is a space bit ZRB, see explanation of bit 1.

In the case of cyclical transmission, the telegrams are in the order of the address valency. All addresses are taken into account once in a cycle. At only for Partly developed systems with a low address requirement (small interlockings) will only have this small number of addresses queried for information, so that correspondingly shorter cycles result.

Failure safety

The remote control has due to the 6 redundancy bits RDB per message, which are added to the remaining 25 bits, and the formation rule used for their generation great failure safety.

A cyclic code is used that detects the following types of errors:

- all double errors,

- any odd number of errors (single, triple, fttöffach etc.),

- all bundled errors up to a length of 6 bits,

- any combination of two bundled errors with a length of 2 bits,

- 97% of the bundled errors with a length of 7 bits,

- 98.5 # of bundled errors with a length greater than 7 bit.

V-

109821/0750

- 32 W.Schmitz-F.Sammet 1-1

Since at least four bits of a message must be corrupted in order not to recognize the error under certain circumstances, the remote control has so the Hamming distance 4.

Assuming a transmission channel with very poor transmission properties and a transmission ^{error probability of 10 J} , the probability that an error will not be detected is about 5 x 10 ". With cyclical transmission with 200 Bd, a transmission error occurs on average once every ten years on each line not recognized.

Reporting device

The task of the signaling device is to identify the two possible electrical Query the states of each connected input (contact open / closed). The information obtained from it are compiled into telegrams and sent out. As already described, there are 13 information bits in each contained in a telegram. In the exemplary embodiment, of the possible 64 or 256 addresses, a maximum of approx. 40 addresses are used.

To the computer center a realistic and permanent To convey a regenerable image of the track image element information is continuously available in blocks of 13 bits each Information requested according to ascending address numbers. When reaching the for the respective interlocking With the highest address number, the scanning process starts again at address zero. With a planned maximum expansion 520 information bits can be transmitted to 40 addresses. The average access time, calculated from the scanning and walking speed, in this case is approx. 3.15 seconds at 200 Bd. This means that with the above address expansion all messages with an average delay of

V-109821 / D75Q

W.Schmitz-F.Sammet 1-1

3-15 seconds can be received in the computer center.

If the 40 different addresses are reduced to a lower number, the average access time is reduced to the same extent. If the information volume of a channel drops to below 260 information bits corresponding to 20 addresses, so because of the associated better utilization of the existing twin cores with 100 Bd walking speed worked.

Three different types of reporting information are used in the transferred in the present case:

1.In / out information of the contacts,

2. Digit information of the axle counting circuits, 5 · shunting route request information.

All elements of the district must be queried and the information states be transmitted. Each element is assigned a certain number of information bits corresponding to the number of assigned to contacts to be queried. The information is transmitted uncoded within the 15 information bits. In one Telegram can also be the on / off state of IJ Contacts are transferred. This type of information transfer requires the major part of the available number of addresses.

The axle counting circuits used on the free route are continuously queried by the remote control system. The information is adopted in its binary coded form and as encrypted Transfer number. The information from an axle counting circuit (9 bit correspond to 512 possibilities).

109821/0750

W.Schmitz-F.Sammet 1-1

The maneuvering process requires a device in order to receive the shunting route information triggered by the local maneuvering personnel to adapt to the inputs of the remote control system. This facility is not explained in detail. the interface is designed so that the shunting route requirements are tapped in coded form on potential-free contacts can. When using binary coding, there are over 8OOO different combinations corresponding to the 13 information bits or shunting route requirements, a 'number that far exceeds the combinations actually required for shunting route information lies.

The process of telegram formation and the keying of the 13 information bit groups is briefly explained with reference to FIG. 9, which shows the structure essentially above the dashed line of the remote control transmitter.

A quartz-controlled clock generator TG generates a basic clock, which corresponds to the pulse repetition rate of the messages to be sent. A position counter PZ is incremented from this circular cycle, which can assume 31 different positions and which indicates to the MST message control at which binary position the sender is in the message.

In positions 1 to 5 of the position counter PZ, the control system excites MST to a function scanner FKA, a start bit, three function bits and a parity bit in series to a redundancy bit generator To send RBG. The function scanner FKA fulfills this task together with the function coding which defines the Function code generated depending on the position of an address counter ADZ. In position 6 to 11 of the position counter PZ it excites the control MST an address scanner ADA, the position of the six-digit address counter ADZ serially to the redundancy bit generator Transfer RBG. In position 12 to 24 of the posi-

109821/0750

W.Schmitz-F.Sammet 1-1

tion counter PZ causes the control MST to shift the 15 information bits out of a shift register in series SR in the redundancy bit generator RBG. The prerequisite for shifting out, however, is that the shift register SR via a gate, the number of which corresponds to the position of the address counter ADZ, and via an isolating circuit TR was able to query the status of 15 input lines in parallel for galvanic isolation.

The bits transmitted to the redundancy bit generator RBG in positions 1 to 24 'of the position counter PZ pass through there a bit pattern generator, which generates six check bits depending on the information in the bits passing through. In position 25 up to 50 of the position counter PZ, these six bits are used as redundancy bits Via a VfT adaptation to the alternating current telegraph transmitter WTS, also known as WT transmitter for short, is transmitted, as was bits 1 to 24 before. Then it moves into position of the position counter PZ, the MST controller sends a space bit via the function scanner FKA. from In position 51 the position counter PZ jumps back to position and advances the address counter ADZ by one step.

The messages arrive from the WT transmitter WTS via the transmission link Ü, the WT receiver WTE and an adaptation Al to the line computer LR in the computer center.

Command facility

The task of the command facility is to manage those of the computer center information that is formed and transmitted to the signal boxes with the aid of the alternating current telegraph equipment to receive and forward. All the functions that the dispatcher of a remote control center trigger today can, transmitted and decrypted in the receiving device. The telegrams compiled by the central computer correspond to in their structure with regard to the number of bit groups and

100821/0750 - / -

W.Schmit ζ-F.Sammet 1-1

Number of bits in the individual groups full of the telegram structure the reporting direction.

The information part contains the command telegrams coded information. This means that all the buttons on the local table can be used with one and the same Address can be transmitted in chronological order. The connected computer system is thus able to the processes "press the button" and "release the button", as they are carried out by humans today, directly in coded form to the receiving device of the remote control in the signal boxes to send.

Each receiving device in the interlocking only needs to be designed for two different addresses. That The key information is always sent to an interlocking immediately one after the other in the order 1. Press " Button n ", 2." press button m ". After a certain response time, which mainly results from the running switching functions in the relay groups of the interlocking - becomes the command given "release all pressed keys". In response to this command, the computer center can now use the next two-key combination activate.

This process, which only requires two different addresses for each interlocking receiving device, makes it possible to E.g. up to four interlockings corresponding to a total of eight addresses through a command channel (same transmission frequency) remote control. At a transmission speed of 100 Bd, which is used throughout for the command facility,

10 9 8 21/0750 _0AD OFHGWAL

- 37 - W.Schmitz-F.Sammet 1-1

this corresponds to a time interval of a maximum of 2.5 seconds in which each interlocking can be addressed. This time corresponds roughly to today's "button press time" in the interlocking.

The receiving device receives the 13 information bits for the respective addresses output to the interlockings in blocks, i.e. all 13 bits are shared; on the exit switched through. Purely the two information groups in two decoding devices are provided for each interlocking,> the binary encrypted key information in (1 of n) - converts information. The output of this code converter is connected to key relays, the number of required Relay corresponds exactly to the number of buttons on the table. Each of these button relays has contacts that correspond exactly to the key contacts of the respective keys in the table.

Either the information the vertical table keys (local control) or the information the above-mentioned button relays are switched through to the interlocking groups.

The process of receiving telegrams and switching information through is explained below with reference to Pig.Io. The Fig.Io shows essentially below the dashed line the construction of a remote control command receiver.

A message received from the WT receiver WTE in the interlocking is passed on to the command receiver and throws a quartz-controlled clock generator with the leading edge of the start pulse TG on. The message is passed from the clock TG via a test circuit PSG into a shift register SR, which is a whole Can hold a 31-bit message.

The test circuit PSG contains a bit pattern generator that works according to the same basic mathematical rules as the Bit pattern generator in the redundancy bit generator of the sending station.

10 9 8 21/0750 - / -

W.Schmitz-F.Sammet 1-1

Similar to sending a message in the redundancy bit generator of the transmitting stations are all incoming bits in the receiving station from the bit pattern generator of the test circuit PSG used to generate a bit pattern. If the message has been received correctly, this pattern must be a have a certain form, for each redundancy bit received the bit pattern generator is queried as to whether the generated pattern matches the target pattern. At the moment when through the redundancy bit pattern comparison is determined that a correct message is in the shift register SR, the corresponding Contents of the shift register SR in a function decoder FDK, an address memory ASP and an information memory ISP taken over and the reception of a new message can begin.

With the help of address decoding, one of the addresses is stored in the address memory ASP corresponding gate Tl, T2 .... opened and the information is transferred in parallel from the information memory ISP to the relay output memory RAS. In the output memory The information is available to RAS in the form of open or closed contacts for further evaluation.

Command decoding

FIG. 11 shows in detail that shown as a block in FIG Decoder DEK. The first remote control telegram from the controlling computer is sent to address ADR 1. To the test by the testing computer, the second remote control telegram relating to the same setting process is sent to the Address ADR 2 sent. The binary coded information reaches two groups of inputs of a comparator SEE. The comparator VGL compares both pieces of information and gives it to a code converter KDW if two groups of output lines match. One of the

V-109321/0750

W.Schmitz-F.Sammet 1-1

formation can also be given in inverted form to increase security. The code converter KDW converts the binary Coded information is converted into individual markings on its output lines, e.g. to the TTR button relay in the interlocking are connected.

With such a structure of the decoder, the entire information processing and transmission up to the signal box secured.

The following is related to the sequence of control operations explained with FIG. 12 using an example of a train journey.

A train with the number D 127 is to travel to stations E, A, B, C, D one after the other. AjB and C belong to the automation district AB, while E and D are in the edge zone and with dispatchers are occupied, which provide the routes in a conventional manner ^ but also a telex connection to the computer center to have.

The dispatcher in E reports the break-in of the train, i.e. he informs the computer system I that there is a train in the direction of A wants to leave, This message is sent via telex and contains the train number to identify the Train, e.g .:

: ze dl27 +

ze means "train break-in", dl27 the train number, with the help of which the computer system takes the routes to be set from a stored timetable. The message is communicated by the computer system I to the computer system II. Both systems now draw the train's timetable for monitoring approach:

109821 / Π750

W.Schmitz-F.Sammet 1-1

EA, 1, 19-46
A, 3

3,

A-B, 1, 19.49

B, 1, I9.52

B-c, i, 19:52

C, 2, I9.55

C-Dj 1, 19.56 (will be added to the train schedule)

After the break-in report, the computer system I will respond to the occupancy report of the first monitored track 1 on route E-A according to the timetable. This message received via the remote control is transmitted, gives more precise information about the timing of the train. From this time and from the timetable The travel time to be determined by the train to location A, taking into account a lead time, is used to calculate when the next one Road, namely the entry road into station A, must be provided. With further processing for this Zug is then waited until this time is reached, which is determined by comparison with the internal clock. That Computer system I now initiates the setting of the route from track 1 of route E-A to track J5 of station A leads. All track elements belonging to the route (switches, signals, track sections) are derived from the geography of the track diagram etc.) as well as the keys to be pressed. Each track element is identified by an individual number. These numbers are now compared with the entries in a blacklist, where all blocked elements are recorded are. These blocking notes can be entered from the outside by the operating personnel (e.g. during construction work on the tracks) or be created and entered through internal processing in the computer (e.g. for substitute signal runs, Exceeding the loading capacity, etc.). Is one of the required route elements blocked, a disposition program must search for an alternative route, which can then be followed by the same procedure as described here.

109821 / Π7Β0

W.Sehmitz-F.Sammet 1-1

If no obstructive blocking notice is found, computer system I can use half of the command telegrams to be sent provide and send a request to the computer system II, in turn to check the situation and the rest Prepare telegrams. The requested route (i.e. entry of track 1 section E-A to platform 3 of station A) specified, and computer system II can check for blocking notes in the same way as before computer system I.

In each interlocking two telegram addresses are provided for the command telegrams, for the interlocking in A e.g. 03 and 04. He both buttons (start and destination buttons of the route) should in this case in the information part of the telegrams by the combinations 01306 or 02415 (in octal Representation) are encrypted.

The following telegrams are required for the route command:

Start button: SI with address 03 and information OI3O6

SII with address 04 and information 01306

Destination key: ZI with address 03 and information 02415

ZII with address 04 and information 02415

Deletion telegrams: LI with address 03 and information 00000

LII with. Address 04 and information 00000

The telegrams SI, ZI and LI are generated by the computer system I and made available for output. The telegrams SII, ZII and LII are generated by the computer system II and transmitted to the computer system I. Computer system I sends the telegrams e.g. in in the order SI, SII, ZII, ZI as well as with a time shift of e.g. 2.5 seconds (signal box response time) LI, LII.

109821/0750

W.Schmitz-F.Sammet 1-1

The telegrams are transmitted to the interlocking in A via the remote control. After the arrival of SI, the information 01306 is switched to one input of the comparator via the address OJ. As soon as SII arrives, the same information is sent via address 04 to the second input of the comparator, which, after checking for compliance, passes it on to the code converter, which then sets the corresponding key relay. The same process is then repeated for the second key. Two buttons of the interlocking are marked and the route is set after a certain interlocking response time. The two marked buttons must then be "released" again after a short time (approx. 2.5 seconds), which is caused by the two delete telegrams. Both of these have the function "release all keys" independently of one another, so that even in the event of an error, a single correctly received delete telegram is sufficient. After setting the route, the signaling direction of the remote control is communicated from Stellx \ ^r Erk to computer system I about the position of the signal. The position of the individual elements of the route is also transferred; However, these are usually only required for control purposes. The signal travel message, on the other hand, is the acknowledgment for the executed control command.

When the train continues, the price-occupied messages are then displayed the track elements and the stop message of the signal from the computer system I evaluated and thus the movements of the train tracked.

The next route for this train is the exit from platform 3 of station A onto the platform of line A-B. If the train stops at station A, this is done with a fixed lead time to the departure time, otherwise the positioning time determined according to the same rules as for entry. Also initiating, checking and executing the actuation process xvird carried out in a corresponding manner.

109821/0750.

It should now be assumed that the signal is not moving (e.g. because of a signal disturbance). The computer system I waits for a specified time within which the message should have arrived and then takes action the same measures that the dispatcher would have tried at the table, namely initially repeated attempts then individual setting of the route elements (shunting routes, individual switches, etc.) and finally Setting the substitute signal. The repeated attempts are processed in the same way as the first attempt. After that, the. Computer system I the cause of the failure, i.e. the disturbed route element, based on the signal box avoidance determined. In the present case, all elements with the exception of the main signal must have reached their correct position.

When setting the substitute signal, the security level of the Signal box bypassed. It must therefore from both computer systems it is checked whether all elements of the route are in the correct position and free and that there is no other route, which could come into conflict with the route to be set. The routes provided are both computer systems known because they both contributed to the setting. However, the current location of the elements is only available to the computer system I known because the computer system II receives the messages from the Signal box in A normally does not query. There is therefore a request from computer system I to computer system II, to check the elements required for the route, in other words, computer system II should determine whether any Reasons against setting the substitute signal (which should belong to the main signal Pl) speak for this route. Computer system II then switches to the input line in order to query the incoming information (possibly also can multiple lines). After one transmission cycle, all Messages received once. Computer system II determines from its geography that the switch WIl lies behind Pl. That

-A 1098 / Μ / Π750

W.Schmitz-F.Säumet- 1-1

Message image shows that they are free and locked in the minus position is. Behind it, according to geography, is the track of the A-B line and the track section is according to the reporting picture free. According to geography, the plus side of the turnout W12 is on the plus side of the turnout WIl, and this must be in order to secure the flank protection of the Pahrstrasse, in the minus position which is actually the case according to the message screen. This means that all the elements required for the route are in the correct position, and they are blocked in both computer systems, i.e. the elements in the route, namely switch WIl and Track 1, will be added to the blacklist and will be absolutely blocked, the flank protection switch W12 will also be entered in the blacklist, but receives the additional note "blocked in minus position", i.e. other routes are allowed use them, but their location must not be changed.

In the same way it is checked whether at the other end of the target track section. namely at the head of the station in B, from the last covering signal in the opposite direction, a route from an earlier one Actuating process exists (from now on, no hostile routes will be set because of the blocking notices). For this test, the computer system II must connect to the signaling line of the interlocking in B.

If these tests are positive, the adjustment process is carried out as for a normal route. In this case a start button and a group button must be operated, the associated telegrams should be SI, SII, GI and GII. It will then again from the computer system II the telegrams SII, GII and LII transmitted to the computer system I, and this adds SI, GI and LI and sends all telegrams e.g. in the order SI, SII, G II, GI and with a time interval LI and LII to the interlocking.

V-10 9871/07 50

W.Schmitz-F.Sammet 1-1

The lock entries can be deleted as soon as the
Train has reached the destination of the journey, ie as soon as the track is occupied. The computer system II must therefore up to
query the corresponding message line to receive this message.

In the same way, the two computer systems determine the further routes for the train through station B.
and placed in station C. Before setting the exit in C, a telex message must also be sent to the dispatcher at station D so that he can
prepares for the arrival of the train and then routes the train in a conventional manner.

7 claims,

Io sheet drawings, 12 figs.

109821/0750

Claims (1)

ι Ij control procedure with load sharing between two computers for an automatic control center of a railway system, characterized in that each computer a sub-district to be processed primarily by him as the executing computer is assigned that for each command a first command telegram is issued by the executing computer that the executing computer gives the other Computer a request to check the location in The track network and the feasibility of the command telegram issued by it transmitted that the checking computer only initiates the transmission of a second, matching command telegram if the test result is positive, and that both command telegrams are checked for agreement and errors before the command is executed will. 2. Control method according to claim 1, characterized in that in the case of route commands, only the presence of element closures (e.g. disturbed points, variable track closures if the loading gauge is exceeded, conditional track closures in the event of rotten warning) is checked, while the rest of the safety must be guaranteed by the interlocking concerned. J. Control method according to claim 1, characterized in that to set a substitute signal or for other control processes with security responsibility, both computers replace interlocking security, that the checking computer connects to the associated remote control message lines, which otherwise only the executing computer queries and that the checking computers due to the 10.98 21/07 50 W.Schmi-tz-F.Sammet 1-1 cycle determined states of the interlocking concerned checks the existence of conditions which, when the substitute signal is set or when the other setting processes are performed, the Could impair operational safety. 4. Control method according to claim 1, characterized in that when any simple control command is entered into a computer, the other computer only cooperates in the context of checking the command telegram created by the executing computer, while requirements for safety commands must be entered on both computers. 5. Control method according to claim 4, characterized in that the emergency stopping of a signal is effected by inputting it to a computer. 6. Control method according to claim 1 to claim 5, characterized in that if a computer fails to switch to control by a computer, all command lines of the failing computer are switched to the computer that is still in operation and that the computer that is still in operation due to this switchover or other measures (e.g. due to the lack of test requirements) take control of the entire district. 7- Control method according to claim 6, characterized in that to switch to single-computer operation without failure of a computer and to switch back to two-computer operation, corresponding instructions are given to the computer (s). 109821/0750