EP1824721B1 - Method and system for verification of a data transmission unit for control of a travelling object - Google Patents

Abstract

The checking process involves using a data transmission unit (B) with an aerial (A) to transmit information (BT) via a signal path. A receiving device (AP) receives this information. The end coded signals go to a logic control unit (KE) which compares them with a code and can be set in accordance with the operating state of the data transmission unit and/or the signal path.

Description

The present invention relates to a method and a system for checking a data transmission unit for controlling a moving object, in particular a rail-bound vehicle.

In rail-bound traffic, punctual and / or linear data transmission units, such as, for example, balises, transmission loops or leakage cables, are used to transmit information relevant to the operation of the vehicle to the vehicle. This information transmitted to the vehicle includes, for example, a signal term displayed on the next light signal in the direction of travel. Depending on the operating state of the vehicle, such information may also result in compliance with predefined speed profiles, braking profiles or even emergency braking if the safety of this and / or other vehicle and the passengers and / or goods transported with it can not be guaranteed otherwise.

In particular, in the new train control system ETCS / ERTMS (European Train Traffic Management System) used in Europe in the future, the train control information in the ETCS level 1 is called via the air interface A according to punctiform fixed data and / or transparent data transmission units transmitted to the ETCS / ERTMS specification. The information transmitted with these balises is therefore of great importance in the As a result, module level security and data transfer procedures are generally subject to Level SIL 4 security levels (Security Integrity Level according to standards EN50159, EN50126 and EN50129 for secure connections). Thus, in addition to the high level of safety required during operation, high demands are placed on the track acceptance and the modules and system availability as well as their error disclosure.

In the prior art, a configuration of the locations for an arrangement of a transparent balise, ie a balise, which transparently passes through different signal terms; as well as a project planning of the ETCS-Balisentegrams in the laboratory or office. These data are transferred to a trackside control unit for the balise, hereinafter referred to as LEU (Lineside Electronic Unit), or transferred to the message memory of the logic core of the modular control unit via a modular control section, hereinafter referred to as MCP. For the acceptance of the route points, it must now be verified that the beacon also outputs the correct (associated) balise telegram to the air interface (A according to ETCS specification) for each signal concept configured for this route point. For this purpose, it is currently necessary to block the route for reading out the configuration data provided for each signal concept and to manually pick up the transmitted balise telegram at the air interface with a programming and readout device on site. The tapped Balisentelegramm is then processed with a checksum method, such as MD4 / MD5 or CRC32, and the corresponding determined code per signal concept read and recorded. This requires that the signal terms behind each other individually and clearly separated from each other by the signal box or the control center must be put through what must be solved for example via GSM connections from the marshals with the interphone personnel or other wireless connections. This process is problematic all things in tunnels or sections that do not have sufficient coverage with wireless telecommunications services. After this (although sometimes complicated and expensive) recording the codes for the different possible signal terms per waypoint both codes - ie the corresponding signal signal corresponding code output from the interlocking to the control unit, and to the with the programming and Readout code recorded in the office (from the project already carried out). Only then can it be verified whether a LEU or a MSTT may be projecting incorrectly, ie whether the bit content and the assignment of the correct ETCS telegram are correct for each signal concept, and whether the balise functions properly in terms of radio technology.

Also in operation, the defectiveness of this signal chain for the emission of the ETCS telegram is not noticed until the telegram is either not complete or otherwise transmitted as faulty or if the driver of the vehicle notes of itself that the transmitted information does not match the actual am Signal displayed signal concept is plausible. It can therefore take a considerable amount of time until an error of this kind is revealed. This error can then have significant repercussions on the availability of this section of the route, which can result in a non-fatal loss of security and a substantial loss of passenger and / or tonne-kilometers, since the route must indeed be taken out of service until this fault is rectified.

The present invention is therefore based on the object, a method and a system for checking the correct function of a data transmission unit for controlling a moving object, in particular a rail vehicle, specify, with which a considerably simpler Procedure can be achieved as with the previous route inspection and the subsequent operational monitoring for the acceptance and function monitoring of (trackside) data transmission units.

1. a) eine auf das Fahrzeug zu übertragende und über einen Signalweg herangeführte Information mit der Datenübertragungseinheit abgestrahlt wird;
2. b) eine in der Datenübertragungseinheit angeordnete Empfangseinrichtung zum Empfang der zu übertragenden Information vorgesehen wird;
3. c) die mittels der Empfangseinrichtung empfangenen Signale unverändert oder mittels einer Analyseeinrichtung bewertet in Form eines Codes an eine logische Kontrolleinheit übertragen werden;
4. d) die logische Kontrolleinheit die mit der Datenübertragungseinheit abzustrahlende Information und die empfangenen Signale bzw. den Code vergleicht; und
5. e) anhand des Vergleichs der Betriebszustand der Datenübertragungseinheit und/oder des Signalwegs bestimmt wird.

This object is achieved according to the invention in that a method for checking the function of a data transmission unit, which is used for the wireless control of a moving object, in particular a rail vehicle, is provided, in which

1. a) an information to be transmitted to the vehicle and brought up via a signal path is radiated with the data transmission unit;
2. b) a receiving device arranged in the data transmission unit is provided for receiving the information to be transmitted;
3. c) the signals received by the receiving device are transmitted unchanged or evaluated by means of an analysis device in the form of a code to a logical control unit;
4. d) the logical control unit compares the information to be radiated with the data transmission unit and the received signals or the code; and
5. e) is determined based on the comparison of the operating state of the data transmission unit and / or the signal path.

1. a) eine der Datenübertragungseinheit zugeordnete Antenne, mit der eine auf das Fahrzeug zu übertragende und über einen Signalweg herangeführte Information abstrahlbar ist;
2. b) eine der Datenübertragungseinheit zugeordnete Empfangseinrichtung zum Empfang der zu übertragenden Information;
3. c) Datenübertragungsmittel, mit denen die mittels der Empfangseinrichtung empfangenen Signale unverändert oder mittels einer Analyseeinrichtung, insbesondere ein Codierer bzw. Decodierer, bewertet in Form eines Codes an eine logische Kontrolleinheit übertragbar sind;
4. d) die logische Kontrolleinheit so ausgestaltet ist, dass die mit der Datenübertragungseinheit abzustrahlende Information und die empfangenen Signale bzw. den Code vergleichbar sind; und
5. e) dass anhand des Vergleichs der Betriebszustand der Datenübertragungseinheit und/oder des Signalwegs bestimmbar ist.

With regard to the system, this object is achieved according to the invention by a system for checking the function of a data transmission unit for controlling a moving object, in particular a rail-bound vehicle, comprising:

1. a) an antenna assigned to the data transmission unit, with which an information to be transmitted to the vehicle and brought up via a signal path can be emitted;
2. b) a receiving unit associated with the data transmission unit for receiving the information to be transmitted;
3. c) data transmission means with which the signals received by means of the receiving device can be transmitted unchanged or by means of an analysis device, in particular an encoder or decoder, evaluated in the form of a code to a logical control unit;
4. d) the logical control unit is designed such that the information to be radiated with the data transmission unit and the received signals or the code are comparable; and
5. e) that based on the comparison of the operating state of the data transmission unit and / or the signal path can be determined.

In this way, the method and system allow immediate feedback of the transmitted information to verify the information actually sent. The source of this readback information channel is thus generated "onboard" in the data transmission unit by a receive antenna similar to the transmit antenna. It should be noted that the transmission at the data transmission unit can be made active or passive, because, for example, a reflection modulation would be possible. By implementing a bitstream coder in the data transmission unit as the backward information channel (MD4 / MD5, CRC32, etc.), a sufficiently good security of the readback channel can be realized. This allows an automated, cost-effective acceptance of the data transmission unit taking into account the required personal safety and efficiency as well as a qualitative improvement of the system availability and error disclosure can be achieved.

In an expedient embodiment of the invention, the information to be transmitted from a signal box and / or a Control center be discontinued. Accordingly, the logical control unit can be assigned to the interlocking and / or the control center.

A complete test of the signal path can be achieved with SIL 4 level, when the received signals or the code is passed over the signal path in the opposite direction to the direction of the information to be transmitted. For simple decoupling of uplink and downlink signals, the received signals or the code can be transmitted on a different from the information to be transmitted frequency.

In a simple implementation of an embodiment of the invention, the data transmission unit is controlled by a control unit, wherein by means of the control unit, a signal term is converted into a telegram for the data transmission unit and the received signals, preferably already on the data transmission unit, are converted into the code by means of a checksum method.

Advantageous embodiments of the invention are specified in further subclaims.

Figur 1

eine schematische Darstellung eines ersten Systems mit einem Rückpfad für das von einer Balise ausgestrahlte Balisentelegramm;

Figur 2

eine schematische Darstellung eines zweiten Systems mit einem Rückpfad.für das von einer Balise ausgestrahlte Balisentelegramm;

Figur 3

eine schematische Darstellung eines Layouts für die Balise und ein die Balise steuerndes MSTT; und

Figur 4

eine schematische Darstellung der Frequenznutzung für das Balisentelegramm und die Coderücksendung.

The invention will be explained in more detail with reference to the drawing, for example. Showing:

FIG. 1

a schematic representation of a first system with a return path for the radiated from a balise Balisentelegramm;

FIG. 2

a schematic representation of a second system with a Rückpfad.für the radiated from a balise Balisentelegramm;

FIG. 3

a schematic representation of a layout for the Balise and a balise controlling MSTT; and

FIG. 4

a schematic representation of the frequency usage for the Balisentelegramm and the code return.

FIG. 1 shows a schematic representation of a system for train control by means of a balise B and a signal S. Both the balise B and the signal S represent a data signal output by a signal box STW signal concept. In the case of the example according to FIG. 1 takes a track-side control unit, hereinafter referred to as LEU, this signal concept and controls accordingly the display of this signal term on the signal S by a control of the signal term corresponding signal lamps. In addition, via a telegram path TP (also called interface "C") to the balise B a to the signal term associated Balisentelegramm BT is transmitted to the Balise B and there transparent to the air interface (as already mentioned as interface "A" after ETCS / ERTMS defined ) transmitted to a not illustrated here rail vehicle. Because of too FIG. 3 explained in detail, in the Balise B additionally arranged components, the Balise B record this issued to the air interface A Balisentegram BT and send back via a return path RP in the form of a code obtained by a checksum method to the interlocking STW. In this case, a T element T associated with the LEU, which is designed as a bandpass filter and bandpass lock, separates the returned code from the forward-oriented balise telegram BT, so that the code can be sent, for example, directly to the T element T or after transmission via a universal process signal. Interface for data and diagnosis UPS in the interlocking STW can be compared by a control unit KE with the originally transmitted signal term. The logical control unit KE is indicated here by the stick figure and a separate data cable.

Of course, the control unit KE can be implemented fully automatically by software and automatically generate an error telegram if the retransmitted code (for example according to MD4 / MD5, CRC32) does not match the signal concept originally issued by signal box STW. In such a fault case, at least one element in the signal chain from the STW interlocking to the Balise B is not working properly and must be replaced immediately because of the possible safety hazard.

FIG. 2 shows the with FIG. 1 comparable case of a control of the balise B via a modular control element MSTT. This modular control part MSTT works in a similar way to the LEU, but unlike the LEU it is also able to process the code sent via the return path itself and send it back to the STW interlocking.

A schematic construction of an embodiment of the invention shows the balise B and the modular actuator MSTT. The components used are explained on the basis of the signal path. The modular control part MSTT receives a signal term SB from the signal box STW via an ISDN connection. By means of a processor CPU and a universal logic core ULK determines the modular control part MSTT associated with this signal term SB Balisentelegramm BT and feeds this Balisentelegramm BT in the uplink direction via the balisenseitige T-member T to a data transmitter DT, the Balisentelegramm BT by way of FSK (Frequency Shift Keying) modulation modulates to an analog amplifier AV passes. The analog amplifier AV then sends the modulated Balisentegram BT 'via a loop antenna / current loop A to the air interface "A".

This modulated Balisentegram BT 'is now by means of a second on the Balise B arranged antenna (loop), hereinafter called antenna sample AP, received and by means of a coder Coder in one after any Checksum method obtained code converted. This code is also modulated by means of the coder to an analog or digital carrier signal whose frequency differs significantly from the frequency of the data signal of the balancing telegram BT (see. Fig. 4 ), so that the T-member T precludes a retroactivity of this code on the antenna A. The code is then transmitted via the interface "C" and via another T-element T, which is arranged on the modular control part MSTT, back to the modular control part MSTT and transmitted from there again via the ISDN connection in the interlocking STW. In the STW interlocking, the automatable check now takes place as to whether the returned code corresponds to the signal signal SB originally set. It should be noted that the T-gate T can also be omitted in those applications in which the received signal of the Balise B is known and can be recovered by a mathematical correlation function, as is known, for example, from echo cancellation in telecommunications.

FIG. 4 now shows a schematic representation of the frequency in the above signal paths. With FS, the free frequency ranges are listed on which, for example, the code can be returned. Since the code, for example MD5 or CRC32, is only about 32 bits long, only low requirements are placed on the transmission rate of the return path RP, which physically corresponds to the telegram path TP (unlike the telegram path on which the 1024 bit long ETCS - balancing telegram BT has to be transmitted). The signal for the power supply of the Balise B transmits on a frequency of 8.826 kHz. The data signal of the Balisentelegramms C transmits in a range of 232 kHz to about 1.3 MHz. For the returned code therefore remain comfortable areas free frequency spectrum FS.

In this way, the method and the system allow an immediate return of the sent Balisentelegramms BT for checking in the interlocking STW. The source of this readback information channel (return path RP) is thus generated "onboard" in the balise B by a receive antenna AP similar to the transmit antenna A. By implementing a bitstream coder in the balise B as the backward information channel (MD4 / MD5, CRC32, etc.), the security of the return path RP can be realized. Thus, an automatable cost-effective acceptance of the Transparent-Balise B can be achieved taking into account the required personal safety and efficiency as well as a qualitative improvement of the system availability and error disclosure in the Rolling Wheel operated network.

Although the present embodiment resides in the field of rail transport, with the present system and method, basically, any type of communication units can be checked for release and monitored for correct operation in current traffic. By way of example, a route point for driving display cross sections on roads, in particular highways, may be mentioned, in which not only the information controlling the traffic is displayed, but will also be transmitted to the vehicles in the future.

Claims (12)

1. Method for verification of the function of a data transmission unit (B) for control of a travelling object, especially a track-bound vehicle, in which

   a) information (BT) to be transmitted to the vehicle and provided via a signal path (TP) is broadcast using the data transmission unit (B);

   b) a receiver device (AP) disposed in the data transmission unit (B) for receiving the information (BT) to be transmitted is provided;

   c) the signals received by means of the receiver device (AP) are transmitted to a logical control unit (KE) unchanged or in the form of a code after evaluation by an analytical device (Coder);

   d) the logical control unit (KE) compares the information (BT) to be broadcast by the data transmission unit (B) with the received signals or the code; and

   e) on the basis of the comparison the operating state of the data transmission unit (B) and/or of the signal path (TP) is determined.
2. Method according to claim 1,
   characterised in that
   the information (BT) to be transmitted is dispatched from an interlocking (STW) and/or a control centre.
3. Method according to claim 1 or 2,
   characterised in that
   the logical control unit (KE) is provided for the interlocking (STW) and/or the control centre.
4. Method according to one of claims 1 to 3,
   characterised in that
   the received signals or the code are routed via the signal path (TP) in the opposite direction to the direction of the information (BT) to be transmitted.
5. Method according to one of claims 1 to 4,
   characterised in that
   the received signals or the code are transmitted on a frequency differing from the information (BT) to be transmitted.
6. Method according to one of claims 1 to 5,
   characterised in that
   the data transmission unit (B) is controlled by means of a control unit (LEU, MSTT), a signal aspect (SB) being converted into a telegram (BT) for the data transmission unit (B) by means of the control unit (LEU, MSTT) and the received signals being converted into the code by means of a check sum method.
7. System for verification of the function of a data transmission unit (B) for control of a travelling object, especially a track-bound vehicle, comprising:

   a) an antenna (A) provided for the data transmission unit (B), by means of which information (BT) for transmission to the vehicle provided via a signal path (TP) can be broadcast;

   b) a receiver device (AP) provided for the data transmission unit (B) for receiving the information (BT) to be transmitted;

   c) data transmission means (Coder, T), by means of which the signals received by means of the receiver device (AP) can be transmitted to a logical control unit (KE) unchanged or in the form of a code after evaluation by an analytical device;

   d) the logical control unit (KE) is configured such that the information (BT) to be broadcast by the data transmission unit (B) can be compared with the received signals or the code; and

   e) that on the basis of the comparison the operating state of the data transmission unit (B) and/or of the signal path (TP) can be determined.
8. System according to claim 7,
   characterised in that
   an interlocking (STW) and/or a control centre are provided, which send the information (SB) to be transmitted to a control unit (LEU, MSTT) controlling the data transmission unit (B).
9. System according to claim 7 or 8,
   characterised in that
   the logical control unit (KE) is provided for the interlocking (STW) and/or the control centre.
10. System according to one of claims 7 to 9,
    characterised in that
    transmission means (Coder, T) are provided which route the received signals or the code via the signal path (TP) in the opposite direction to the direction of the information (BT) to be transmitted.
11. System according to one of claims 7 to 10,
    characterised in that
    the transmission means transmit the received signals or the code on a frequency differing from the information to be transmitted.
12. System according to one of claims 7 to 11,
    characterised in that
    the data transmission unit (B) is controlled by means of a control unit (LEU, MSTT), a signal aspect (SB) being converted into a telegram (BT) for the data transmission unit (B) by means of the control unit (LEU, MSTT) and the received signals being converted into the code by means of a coder (Coder) disposed in the data transmission unit, preferably in accordance with a check sum method.

Images