Classifications

• • B—PERFORMING OPERATIONS; TRANSPORTING
  • B61—RAILWAYS
  • B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
  • B61L27/00—Central railway traffic control systems; Trackside control; Communication systems specially adapted therefor
  • B61L27/20—Trackside control of safe travel of vehicle or train, e.g. braking curve calculation

Definitions

• Control system for the control and / or monitoring of objects
• the present invention relates to a guidance system for the control and / or monitoring of objects operating on a traffic network subdivided into a number of network cells.
• the invention relates to a guidance system for controlling and / or monitoring rail vehicles running on a railway network divided into regional areas.
• railway networks are still subject to the national sovereignty of the state on which this railway network is located.
• Several regionally effective control centers - hereafter referred to more generally as network cells - are provided for the control of train traffic on such a national railway network. These network cells therefore control the train traffic on their respective assigned geographical areas.
• network cells therefore control the train traffic on their respective assigned geographical areas.
• a data exchange between the individual network cells is restricted to the exchange of train numbers at the boundaries between two adjacent network cells.
• the individual systems running on the network cells are proprietary and therefore the respective operating software can differ from network cell to network cell.
• trains are controlled by means of a cell software executed on a cell computer system, that is to say the control technology programs executed on the computer network of the cell, by setting routes and optimizing and optimizing the train runs. For example, if there is an update to the cell software, changes in the railroad regulations can be made and / or in the configuration data, for example due to changes in the track topology, implemented in the network cell and taken over into the operationally active operation.
• the present invention is therefore based on the object to provide a control system of the type mentioned that is constructed in terms of its architecture and task distribution so that the parent control and / or monitoring of the circulating on the network objects is possible.
• this object is achieved by a control system for the control and / or monitoring of objects that run on a traffic network subdivided into a number of network cells, in particular a control system for a regional network subdivided rail network, comprising the following components: a) each network cell, a cell routing system, the associated by means of a cell computer system of the respective network cell and the traffic substantially within this network cell influencing and / or monitoring Umsysteme such.
• a control system for the control and / or monitoring of objects that run on a traffic network subdivided into a number of network cells in particular a control system for a regional network subdivided rail network, comprising the following components: a) each network cell, a cell routing system, the associated by means of a cell computer system of the respective network cell and the traffic substantially within this network cell influencing and / or monitoring Umsysteme such.
• the cell computer system receives and / or outputs data via interfaces; b) a network-wide effective control center with operator stations that edit data received by the cell computer systems via the interfaces by means of a control center computer system and / or output data via the interfaces to the cell computer systems; c) wherein for an overall computer system comprising the cell computer systems and the central computer system, a five-layered logical structure with an interface layer, a working layer, a presentation layer, a merging layer and a display layer is provided; where cl) the interface layer is a logical component of the respective cell computer systems and receives data from the peripheral systems and routes to the working layer and / or receives data from the working layer and outputs it to the peripheral systems, c2) the working layer is a logical component of the respective cell computer systems and of the C3) the presentation layer is a logical component of the respective cell computer systems and processes data obtained from the working layer for the display layer
• Presentation layers of the cell computer systems received data and processed to display a unified data image for the display layer and / or dissolves data received from the display layer in terms of their membership in the number of network cells and and c5) the display layer is a logical component of the control center computer system and represents data obtained from the merging layer at the operator stations and / or outputs data obtained at the operator stations to the merging layer.
• control system provides the network-wide control and / or monitoring of the circulating objects as well as the necessary peripheral systems for determining their traffic route.
• the separation of the tasks of information processing for the control center and display 1 in the control center allows complete encapsulation of this representation process of the configuration and the
• the architecture therefore also allows the process control operation of each network cell for itself if the data connection to the control center and its workstations should be interrupted.
• external systems can also exchange data with the control system in that the merging layer can additionally comprise an interface via which data can be output to other surrounding systems in a manner similar to the display layer and / or via the data of further peripheral systems. Similar to data obtained from the display layer, the corresponding further treatment can be obtained.
• Such external systems may be, for example, passenger and / or customer information systems that, for example, evaluate train data that differs from the timetable for display by the passenger and / or customer.
• these can also be external systems acting directly on the productive process, such as maintenance systems, which, for example, cause the control system to temporarily unavailable a traffic route in this way Report maintenance or failure of critical systems.
• Unification layer an aggregator is provided, which is configured the same for all operator stations and on an operator's computer, which is part of the Leitstellenrechnersysteins, executable. This procedure allows the software to be used for the
• Aggregator constructed uniformly and in units with a clear interface and definable, but possible limited interaction is executed.
• the last-mentioned feature makes it possible to work on different tasks in the control center at different workstations, without having to directly exchange data between the operator stations at the level of the operator stations.
• the aggregator may include a selection logic with which specifically specifiable data groups and / or data derived from specially specifiable peripheral systems can be selected for their processing at the operator stations.
• the data group may relate, for example, exclusively to the group of train number data or the data on unoccupied track sections and the like.
• the specifiable peripheral systems can be any type of components that are relevant in the traffic process for the control and monitoring, such as interlockings, switches, signals, axle counter, track vacancy and so on.
• Unification layer and / or the working layer exchanges this network data.
• the operator stations access the association layer assigned to them on this global data.
• the single network cell can access this global data directly from within its working layer.
• Typical global data is, for example, the entire network topology data and data that clarifies how data from individual network cells should be related, e.g. B. Cross track field tables.
• data connections are also from the working layer for the purpose of
• Cross-communication between network cells provided.
• QK Cross-communication
• train number data can be exchanged between adjacent network cells when a train changes from one network cell to another network cell.
• this cross-communication can be advantageous if, for example, a connection to a particular network cell, but to fulfill a higher-level task and data from other network cells are needed.
• the interface layer may contain a Data dispatcher can be provided, which is configurable for the assignment of the data received from the peripheral systems to different cell molecules within a network cell.
• Figure 1 is a schematic view of the architecture of a control system for a railway network
• Figure 2 is a detailed schematic view of
• Figure 3 is a detailed schematic view of the railway system management system architecture with a global data database and external system attachment
• Figure 4 is a schematic representation of the logical distribution of computer systems within the
• FIG 1 shows a schematic view of the architecture of a control system, hereinafter referred to as network NW, for a railway network. So today is the example
• a network workstation AP1 to AP3 can communicate with a plurality of network cells NWZ, each of which is responsible for a geographical area.
• the workstation APl to Apn summarizes the information from the configuration of the individual network cells NWZ and generates an overall view for the user.
• the network cells NWZ become for the user a single large system of the network NW.
• the system is transparent to the user, so that the overall system, which consists of several smaller subsystems, behaves in exactly the same way as a single, large-scale control system across the entire rail network.
• the individual workstations can be operated the whole network with different releases of the NW the hardware, network software. Software or data However, the workstations must be replaced. have installed at least the first release of the network software.
• the individual network cells NWZ and the workplaces AP1 to AP3 of the network NW can be operated with different operating systems and operating system versions.
• the network NW therefore gives the user the impression that there is only one network control system for the entire rail network. For a part of the control system functions, this can be realized via the integration of the information on the workstation AP1 to AP3.
• the network cells exchange information with one another by way of a cross-communication QK. Examples include the control system tasks train number administrator (ZV), train control (ZL) and overfill prevention (UeV).
• ZV train number administrator
• ZL train control
• UeV overfill prevention
• Display Layer converts the work objects BO and their states into a user-friendly representation, such as a magnifying glass image.
• the display layer VL comprises the entire user interface, which is primarily used at the workplaces AP1 to AP3 for visual display for the user interface
• Dispatcher FdI, Fd2 and temporarily also for the examiner P is brought.
• other peripherals such as printers, storage media and multimedia devices are included in this interface.
• Today's VL according to the prior art includes the Presentations logic as well as the actual View logic.
• the presentation logic is deliberately strongly dependent on the control system configuration data of the individual network cells NWZ and therefore also remains new in the network cell NWZ.
• the Workplace APl no longer contained to AP3 in the new novel network NW but that this presentation layer PL are in these jobs APl to AP3 a so-called "thin client”.
• the software for the network NW has therefore a "thin client tt
• the structure ie the presentation which converts the work objects BO into a view for the user, already takes place in the network cell NWZ
• the presentation layer PL prepares the information for the display layer VL This preparation depends on the display layer VL for j Eden
• the merging layer AL adds the information from the individual network cells NWZ into a whole by means of an aggregator AG and sends them to the view client VC in the display layer VL, which is now logically no longer located within a network cell NWZ but the workstations AP1 to AP3 served.
• the information from the View Client VC to the network cell NWZ, which are issued by the workstation APl to AP3 recordable by the Dispatcher FdI and Fd2 and the inspector P are divided by the aggregator AG in the unification layer AL and forwarded to the corresponding network cells NWZ ,
• presentation logic converts the current state of interlocking elements (switches, tracks, etc.) into a geometric representation of a magnifying glass image.
• the merging layer AL adds the individual geometric representations from the individual network cells NWZ to a comprehensive one geometric representation together, which is displayed in the display layer VL the user as an overview image.
• the display layer VL does not require any configuration data for this task.
• the merging layer AL has only the information how the individual geometric representations are combined to form a comprehensive geometric representation.
• the configuration data can be clearly assigned to a network cell NWZ. From which network cells NWZ and in what way the information for the display come, is completely encapsulated by the union layer AL against the display layer VL and thus can be unified. Any knowledge of the display layer VL via the topology of the network cells NWZ behind the merging layer AL and its servers is therefore not necessary for the display layer VL. Due to this architecture of the network NW, therefore, the surfaces of the display layer VL and the presentation layer PL are strictly separated. The actual display (view) is thus separated from the display logic (presentation). The view client VC no longer needs display logic (presentation) and thus has no dependencies on the configuration data of the various network cells NWZ.
• the display logic is realized by a display server MXVS in the network cell NWZ.
• the MXVS display server completely processes the view for the View Client VC. So that the View Client VC can communicate with several servers, the Aggregator AG is provided between the View Client VC and the MXVS display server. The View Client VC only communicates with the Aggregator AG via the Aggregator AG corresponding display servers MXVS of multiple network cells NWZ.
• the display server MXVS prepares the information as needed for a View Client VC. From a display server MXVS exists one instance per View Client VC and network cell NWZ.
• the server of the View Client VC is stateful, i. his state is dependent on the workstation APl to AP3, for which he prepares the data.
• the MXVS display server is therefore a rebuilt task of the prior art single control systems known in the prior art and mentioned above.
• the access point AP provides a general interface to the network NW with respect to a function, such as train data and train numbers.
• the access point AP is therefore largely stateless in the context of a client, i. its state is independent of the workstations connected to it APL to AP3, and stores per client primarily what information this wishes.
• the access point AP can thus be part of the display logic
• Presentation take over. It thus provides access to a defined set of information which is not specifically prepared for a workstation AP1 to AP3.
• the View Client VC which is logically located in the display layer, exists once per user session.
• the display server MXVS exists once per user session and network cell NWZ and prepares the information for the corresponding user.
• the aggregator AG exists individually for each user session, since different information must be assembled for each view client VC.
• the access point AP exists once. per network cell NWZ, and thereby in two redundant instances to increase the availability.
• the architecture is designed so that they do not have to worry about the division on network cells NWZ, so that allows the division into network cells NWZ to change without the external system is affected. Furthermore, in the external systems, which work with only one network cell NWZ, no cross-cell logic must be installed so that they can work with several network cells NWZ.
• the network NW includes this in the form of
• Aggregators AG already has the logic to merge data from different network cells NWZ. This logic is also used accordingly for the connection of external cell systems ES, which can be coupled to the aggregator AG via a separate interface SA, which may also include an application adapter. Furthermore, the network NW provides cross-cell interfaces SA.
• the interfaces SA to the external systems ES are defined by means of general services.
• a service is a defined interface through which a set of information is exchanged bi-directionally between the external 'systems and the network NW. This ensures that the same service can be used by various external systems.
• An example is a train number service via which all train number advances are sent to interested external systems or train number operations are accepted by the external systems.
• the interface is connected via a proxy server.
• Figure 3 shows the management of various global data GD in the network NW.
• NW the network NW.
• Network cell software may be confused.
• changes are saved to old statuses, which makes it possible to go back to an old state in the event of a mishandling of an administrator.
• the global configuration data can be created offline and then imported into the global data GD. Therefore, to allow for soft migration as well as non-disruptive update, various levels of global configuration data are available which result in different cell configurations, i. to different versions of the cell software incl. the data required for this fit.
• Each network cell NWZ has its own
• Ethernet LAN Connected to the Ethernet are cell servers, cell-local workplaces L, cell-local printers, terminal servers, ISDN routers to the ILOK and external systems. On this. Ethernet LAN uses IP, DECnet, and LAT as protocols. This set of components, logically within one. Network cell NWZ are arranged forms a cell computer system Z-RS A 7 Z-RS B. The workstations AP1 to AP3 and printers at a control center location LT and in the regional control center RCC are each connected to one or more Ethernet LANs. On this workstation LAN only IP is used, so no DECnet and no LAT. This set of components, logically assigned to the control center location, forms a LT-RS control station computer system.
• a cell-local workstation L is configured to operate only with the corresponding network cell NWZ and is used as the last fall-back element in the event of a failure of the network NW. This workstation L is therefore configured so that it can be used as a cell-local workstation L.
• a plurality of cell LANs and normally a workstation LAN can be present at a control center location LT.
• the RCC has one or more workstation LANs.
• the individual sites are connected to an IP network.
• the routers, which are available at each site, are redundantly equipped to compensate for failures of such components immediately.
• the thus formed IP network with all LANs together is a network NW closed according to the railway standard EN50159-1. This requirement makes it possible that the data traffic between the individual network cell NWZ and the control center LT and other components arranged within the network NW need not be encrypted.
• the network NW also offers interfaces SA for external systems ES. These interfaces SA are realized by an interface server. If the external systems ES are located within the closed network NW, they can access the interface server directly. On the other hand, if the external systems ES are outside the closed network NW, this is not possible without further ado.
• Intrusion of safety-critical messages Basically, any intrusion of safety-critical messages into the closed network NW is prevented, which could trigger safety-critical functions in the network NW.
• Safety-critical messages can arise either through communication errors or through an already compromised external system ES.
• an additional interface proxy server is provided, which enables communication with the interface server from an insecure network.
• the interface server is connected to the closed network NW and offers the cross-cell interfaces as universally valid services.
• Trusted external systems ES located within the closed network NW can directly access the interface server.
• the interface proxy server is connected to the insecure network. This offers the services of the interface server as a proxy, i. It looks like the interface server to the outside, but only forwards the messages to the interface server.
• the Proxy Server interface only offers a well-defined subset of the interfaces of the interface server.
• Interface Subset includes only the components that may be used by potentially untrusted external systems.
• the interfaces include server and the
• Interfaces Proxy Server each two network cards.
• a network card connects the interface server with the closed network NW or the interfaces proxy server with the insecure network.
• the other network card connects the interface server and the interface proxy server via a separate Ethernet LAN.
• the external system ES is connected to the interface proxy server via a firewall. This firewall only releases the absolutely necessary communication services, and only allows connections to known computers. However, if the problem arises that the external system ES can not work directly with the interfaces offered by the network NW, another adapter is created. This adapter is realized on the external system ES.
• a message filter is used between the interface proxy and the actual interface. This message filter understands the meaning of the messages, leaving only messages classified as non-hazardous.
• Each server sends an audit job with a unique transaction ID to its partner.
• the recipient of the test job determines unique checksums from the program and configuration files of the message filter.
• the calculated checksums are sent back together with the received transaction ID to the sender of the inspection order.
• the transmitter of the test order also calculates unique checksums on the program and
• the transmitter compares the self-calculated checksums with the received checksums.
• the test cycles are controlled independently of each other on the interface proxy server and the interface server and repeated regularly.
• a Discovery Disclosure Timer started, which is restarted under the following conditions:
• the self-calculated checksums must be identical to the received checksums.
• at least one audit job must • have been received from the other server.
• the test cycles are repeated several times in the period of the exposure disclosure timer. If the Disclosure Timer runs on a server, it will be logged and the server will shut down immediately. This allows then the other server's cycles not successfully complete, and 'will be his failure Epiphany timer and turn off at the end.
• the servers can not be restarted automatically, but must be manually restarted.
• the network NW or its architecture described above for a network-wide railway control system and the various logical groupings and methods for secure data exchange implemented within the architecture, in particular with external systems ES arranged outside the secure network NW, can also be used in the fields of telecommunications ' Use network control technology in energy distribution and in road and air traffic as well as in all more complex ' processes for controlling the overall process.

Landscapes

• Engineering & Computer Science (AREA)
• Mechanical Engineering (AREA)
• Data Exchanges In Wide-Area Networks (AREA)
• Burglar Alarm Systems (AREA)

Priority Applications (1)

Applications Claiming Priority (3)

Publications (2)

Family

ID=34933511

Family Applications (2)

Family Applications Before (1)

Country Status (4)

Families Citing this family (3)

• 2005
  • 2005-01-31 EP EP05001889A patent/EP1686036A1/fr not_active Withdrawn
  • 2005-11-04 DE DE502005006723T patent/DE502005006723D1/de active Active
  • 2005-11-04 WO PCT/EP2005/011827 patent/WO2006081849A1/fr active Application Filing
  • 2005-11-04 AT AT05800660T patent/ATE423715T1/de active
  • 2005-11-04 EP EP05800660A patent/EP1843929B1/fr active Active

Non-Patent Citations (1)

Also Published As

Similar Documents

Legal Events