EP2193973A2 - Method and device for testing units that influence trains with status data of track signals in relay interlocking systems - Google Patents

Abstract

The method involves adjusting a test set according to a testing task, deleting an associated relay set of a track signal, and initiating the test set. A driving concept is simulated at the test set based on a test report, and consistency at a train control unit is tested. Driving concepts of a signal function are tested till safety-relevant driving concepts are tested. The test set is compared to the relay set, and a determination is made to check whether the converted relay set is in active position. The track signal is released for resuming use of the relay set in a normal operating method. An independent claim is also included for a device for testing train control units with status data of track signals in relay interlocking systems.

Description

The present invention relates to a method and a device for the complete testing of train control units with status data of track signals at relay interlockings.

With the introduction of a new train control technology, such as ETCS, depending on the associated level of the procedure, it is necessary to tap the light signals of the security system for displaying the driving authorization for the preceding section of the network in the route network and to supply the message processing to the new train control technology to be provided.

These drive authorization signals, which are mostly red / orange / green - signaling systems with 3 aspects, sometimes additionally have an indication of speed limits for the next section which deviate from the line speed.

As rail networks are now very heavily used and pushed to their limits, the full testing of backup systems for roadside acceptance after installing a new train control technology prior to their use is a difficult undertaking. The test adapted to the safety level of the newly introduced function must be carried out according to criteria which comply with the guidelines of the approval authorities.

This requires that all states are set to be observed by the driver functional elements of the interlocking in the outdoor area, as a rule, the signals are their correct and complete To check and log compliance to the newly installed train control technology.

Specifically, this usually means that all the signal terms of a signal must be set and the correctness of the output on the ETCS Balise must be checked by means of telegram reception and verification of the transmitted content.

The task of the test is particularly difficult at relay interlockings, since these are designed as state machines and thus have no data interfaces, via which individual functional elements outside the driving-path setting process can be influenced by means of a diagnostic computer.

One of the general difficulties is that by means of the setting of routes it is sometimes possible only with great effort or not at all a setting of certain driving terms on a specific signal. This situation exists, among other things, in the fallback of the signaling in the event of a malfunction, here the induction of the respective disturbances is required to initiate the effects.

In addition, the entire spectrum of signal types to be tested includes the main signals, pre-signals, block and coverage signals. In the following, however, only the signal is spoken by way of example, preferably a main signal.

In order to be able to check these driving terms, different routes must therefore be set (sometimes across the entire track system of a station), which is usually no longer feasible feasible with the current density of train traffic.

The previous exemplary solution is described on the basis of track-plan relay interlockings, such as the DOMINO 67 of the applicant, which is widely used in Switzerland in use.

The operators of relay interlockings usually do not allow intervention for a functional influence, but they do not generally prohibit. As a result, according to a known procedure for carrying out tests in the relay interlocking in a system unit, that is, the relay set associated with a signal, all safety relays involved in the function are brought by hand to the required position and locked mechanically by means of a wedge in the attracting position. With the forcibly assumed position of the signal to be tested associated safety relay of the desired signal concept is enforced.

Keystrokes are mechanical interventions on safety relays, which can cause damage to the relay unintentionally and unrecognized. This can have serious security implications.

A second approach is to set the highest driving concept and, as a result, all lower-level driving concepts are formed by pushing away or by pressing on energized relays.

Wedging and pulling down are procedures without a uniform technical basis and therefore harbor dangers. Such procedures require a high level of expertise as well as accurate guidance and strict logging. However, due to the intricate nature of the procedure, there is the difficulty of ensuring the regression capability of the tests.

• Manipulation am "falschen" Relais. Dieser Erstfehler kann mit einem zweiten unabhängigen Fehler zu einer Gefährdung führen (Mehrfehlerfall)
• Mechanische Beschädigung durch das Verkeilen oder Abdrücken der Relais
• Nach dem Beenden der Prüfung verkeiltes Relais nicht befreien
• Bei Ausfahrsignal wird Block angeschaltet, was zu betriebshemmenden Zuständen kann und indirekt Risiken bewirken kann.

In general, it should be noted that manual interventions in the relay set may result in the following dangers or obstacles:

• Manipulation on the "wrong" relay. This first error can lead to a danger with a second independent error (multi-error case)
• Mechanical damage due to wedging or forcing the relays
• After completing the test, do not release the wedged relay
• When the exit signal block is turned on, which can to operating conditions and can cause indirect risks.

A method and an apparatus is proposed which does not require any interventions on the safety relays of the system units of the relay sets.

1. 1. Der Zentralverschluss mit seiner Relaissatzüberwachung, welcher das gesamte Stellwerk sicherheitstechnisch kontrolliert (sozusagen die Achillesferse der Sicherheit).
2. 2. Die Spurplantechnik mit der Fähigkeit, dass die spezifischen Relais(steuer)sätze der Aussenanlageelemente diejenigen Eigenschaften besitzen, welche sie befähigen, bei der Fahrstrasseneinstellung die Gleisbelegung (Stellen und Auflösung) zu verwalten. Die Relais(steuer)sätze sind selbst Zustandsautomaten und somit deterministisch.

There are two functional areas in the track plan relay interlocking important, which have a decisive influence on a new solution for the tests.

1. 1. The central lock with its relay set monitoring, which controls the entire interlocking safety-related (so to speak, the Achilles heel of safety).
2. 2. The track planning technique with the ability that the specific relay (control) sets of outdoor equipment elements have the characteristics that enable them to manage the track occupancy (locations and resolution) in the course setting. The relay (control) sets are themselves state machines and thus deterministic.

In the basic function, however, a check set optimized for the signal type is used in a more uniform manner instead of the signal relay set.
This test set has the properties for controlling the signals in the outdoor system.
However, it does not have functions for setting a route, but for setting the main signal under test (destination). As a result, the advance of a train in the range of the respective signal to be tested from signaltechnischer- as well as from the demand for Prüfer-personal protection - not possible. Dangers from an approaching train no longer exist.

The driving terms to be tested are simulated by means of the test record. The input in the test record can be carried out manually or an interface to a test computer is possible via which the test procedure can be systemized.
However, the test set connects the loop of the central lock in the interlocking, so that the function of the interlocking is not impaired overall.

A route with a destination test object can therefore only be set again when the test set has been exchanged for the corresponding relay set of the signal.

The procedure in individual steps when testing a signal with its additionally installed ETCS train protection devices is preferably shown.

• 1. (Relais)-Prüfsatz entsprechend der Aufgabe einstellen (Grundstellung)
• 2. Betreffenden Relaissatz des betreffenden Signals entfernen
• 3. Prüfsatz einsetzen
• 4. Gemäss Prüfprotokoll den erstmöglichen Fahrbegriff am Prüfsatz simulieren
• 5. Prüfung der Übereinstimmung in der Aussenanlage bezüglich Telegramminhalt
• 6. Die weiteren Fahrbegriffe der Signalfunktion des Standortes gemäss Punkt 3 und 4 prüfen
• 7. Nach Beenden der Prüfung den Prüfsatz gegen entsprechenden Relaissatz zurücktauschen
• 8. Prüfen, ob HALT-Rückmelder aktiv ist, das heisst, der Satz ist in Grundstellung
• 9. Signalfreigabe an Fahrdienstleiter für die Nutzung im Betriebsablauf

Determine train positions in the track system with the driver's service and set the start time procedure

• 1. Set (relay) test set according to the task (basic position)
• 2. Remove the relevant relay set of the relevant signal
• 3. Insert test set
• 4. According to the test report, simulate the first possible driving concept on the test set
• 5. Checking the conformity in the outdoor installation regarding telegram content
• 6. Check the further driving terms of the signal function of the location according to points 3 and 4
• 7. After completing the test, swap the test set for the corresponding relay set
• 8. Check if HALT-feedback is active, ie the set is in basic position
• 9. Signal release to dispatcher for use in operation

The inventive step is that a new method and a device is set, which eliminates the disadvantages of the wedging method in terms of personal safety and regression, and in particular error-prone by manual manual handling sophisticated.

Claims (2)

Method for testing train control units with status data of track signals at relay interlockings, comprising the steps: a) stop a test set according to the test task (basic position); b) remove the associated relay set of the relevant path signal and insert the test set; c) simulate a first possible driving term on the test record in accordance with a test protocol; d) checking compliance with the train control unit in the outdoor facility with respect to the content of the telegram reflecting the driving concept; e) checking the further driving terms of the signal function of the location according to c) and d) until all safety-relevant driving terms have been checked; f) exchanging the test set for the corresponding relay set after completion of the test; g) check if HALT-feedback is active, that is, the relayed relay set is in the home position, and h) releasing the path signal to resume its use in normal operation. Device for testing train control units with status data of track signals at relay interlockings, comprising: a) stop a test set according to a test task (basic position); b) remove the associated relay set of the relevant path signal and insert the test set; c) simulate a first possible driving term on the test record in accordance with a test protocol; d) checking compliance with the train control unit in the outdoor facility with respect to the content of the telegram reflecting the driving concept; e) checking the further driving terms of the signal function of the location according to c) and d) until all safety-relevant driving terms have been checked; f) exchanging the test set for the corresponding relay set after completion of the test; g) check if HALT-feedback is active, that is, the relayed relay set is in the home position, and h) releasing the path signal to resume its use in normal operation.