EP2731849B1 - Calculateur de poste d'aiguillage - Google Patents

Calculateur de poste d'aiguillage Download PDF

Info

Publication number
EP2731849B1
EP2731849B1 EP12758784.8A EP12758784A EP2731849B1 EP 2731849 B1 EP2731849 B1 EP 2731849B1 EP 12758784 A EP12758784 A EP 12758784A EP 2731849 B1 EP2731849 B1 EP 2731849B1
Authority
EP
European Patent Office
Prior art keywords
railway
signals
virtual
control
signal box
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
EP12758784.8A
Other languages
German (de)
English (en)
Other versions
EP2731849A1 (fr
Inventor
Thomas BOTH
Matthias Holzmüller
Jürgen REUPKE
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Siemens AG
Original Assignee
Siemens AG
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Siemens AG filed Critical Siemens AG
Publication of EP2731849A1 publication Critical patent/EP2731849A1/fr
Application granted granted Critical
Publication of EP2731849B1 publication Critical patent/EP2731849B1/fr
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B61—RAILWAYS
    • B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L19/00—Arrangements for interlocking between points and signals by means of a single interlocking device, e.g. central control
    • B61L19/06—Interlocking devices having electrical operation
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B61—RAILWAYS
    • B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L27/00—Central railway traffic control systems; Trackside control; Communication systems specially adapted therefor
    • B61L27/50—Trackside diagnosis or maintenance, e.g. software upgrades
    • B61L27/53—Trackside diagnosis or maintenance, e.g. software upgrades for trackside elements or systems, e.g. trackside supervision of trackside control system conditions
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B61—RAILWAYS
    • B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L27/00—Central railway traffic control systems; Trackside control; Communication systems specially adapted therefor
    • B61L27/60—Testing or simulation

Definitions

  • the invention relates to a method for monitoring the operation of an interlocking computer, which executes a control program for controlling railway components of a real railway system, wherein the control program evaluates alarm signals of the railway components of the real railway system and generates control signals for the controlled railway components of the real railway system.
  • Interlocking computers are offered by Siemens AG, for example, in signal boxes of the SICAS S7 product line.
  • the invention has for its object to provide a method for monitoring the operation of a signal box computer, which can be particularly simple to perform, but still provides a very high reliability in detecting errors.
  • the invention provides that the control program controls an expanded railway system, which includes the railway components of the real railway system and additionally at least one virtual railway component, in the interlocking computer signaling signals of at least one virtual railway component are entered, the control program the reporting signals in the context of the control of the extended railway system processed due to the reporting signals On the output side of the interlocking computer generated output signals are checked for correctness and an error signal is generated when the control program provides erroneous output signals and / or output signals late.
  • the control program controls an expanded railway system, which includes the railway components of the real railway system and additionally at least one virtual railway component, in the interlocking computer signaling signals of at least one virtual railway component are entered, the control program the reporting signals in the context of the control of the extended railway system processed due to the reporting signals On the output side of the interlocking computer generated output signals are checked for correctness and an error signal is generated when the control program provides erroneous output signals and / or output signals late.
  • a significant advantage of the method according to the invention is the fact that this can be performed in parallel during normal operation of the interlocking computer, without the control of the real railway components of the real railway system would be affected.
  • the inventive idea is that the interlocking computer continuously processed or monitored an extended railway system, both the real railroad components of the real actually to be monitored railway system as well as virtual (ie non-real or fictitious) railway components of a virtual (ie non-real or fictitious) railway system.
  • the signaling signals for the at least one virtual railway component are input with an external monitoring device, which is connected via an interface with the interlocking computer, and checks the output signals generated on the output side of the interlocking computer with the monitoring device for correctness due to the alarm signals become.
  • the spatial arrangement of the external monitoring device is arbitrary:
  • the external monitoring device can be located directly in the vicinity of the signal box computer, so for example in the signal box itself; Alternatively, however, it is also possible to position the external monitoring device in another location, for example in a central control center, and to control the monitoring remotely.
  • the test data or the message signals of the virtual Railway components via a communication link, for example via radio, transmitted over the Internet or other communication methods to the interlocking computer.
  • the time span is monitored, which requires the interlocking computer (and thus the control program) to process the alarm signals, and an error signal is generated when the reaction time of the interlocking computer reaches or exceeds a predetermined time maximum duration.
  • the operation of the interlocking computer is monitored not only with regard to the work results out, but also with regard to the required processing time. For a correct and safe control of the real railway system, it is namely necessary that reactions to incoming signal signals of real railway components take place within predetermined periods of time. Due to the additional monitoring of the reaction time of the control program or the signal box computer whose operation can therefore be checked very reliable.
  • the reaction time of the control program or of the interlocking computer can be monitored particularly simply and thus advantageously if control commands are implemented in the control program at predetermined program locations, which in each case generate a control signal when executed.
  • the monitoring of the occurrence of the control signals can be particularly simple and thus advantageous to perform, for example, with the aforementioned external monitoring device when the control signals are sent from the interlocking computer to the external monitoring device.
  • an error signal is generated when the time interval between successive control signals reaches a predetermined maximum time control signal interval or exceeds.
  • This embodiment of the method is based on the assumption that in a correct operation of the interlocking computer, the predetermined program locations are processed within the provided time intervals and accordingly corresponding control signals are generated. If this is not the case, ie if the control signal distance becomes too large, an error is assumed and a corresponding error signal is generated.
  • the railway components may, for example, be free-reporting devices, points and / or signals. Accordingly, it is considered advantageous if the at least one virtual railway component is a virtual component of the outside installation, in particular a virtual diverter, a virtual free-field device or a virtual signaling device, and signaling signals of such a virtual railway component are entered into the interlocking computer.
  • the invention also relates to an interlocking computer in which a control program for controlling railway components of a real railway system is stored, wherein the control program provides the evaluation of input data or signal signals of the real railway system and the generation of control signals for the controlled railway components of the real railway system.
  • control program provides for the control of an extended railway installation, which comprises the real railway installation and additionally at least one virtual railway component
  • the interlocking computer permits the input of signaling signals of the at least one virtual railway component
  • the control program is suitable To process signaling signals in the context of the control of the extended railway system and to generate output signals on the output side as a function of the applied message signals.
  • the invention also relates to a monitoring device for monitoring a signal box computer.
  • a monitoring device for monitoring a signal box computer.
  • the monitoring device has an interface which allows a connection to the interlocking computer, and in the monitoring device, a monitoring program is stored, which can enter test data as reporting signals of at least one virtual railway component in the interlocking computer and the based on the message signals on the output side of the interlocking computer generated output signals can check for accuracy.
  • an interlocking computer 5 which includes a computing device 10 and a memory 20.
  • a control program 30 is stored, with which an extended railway system can be controlled.
  • the extended railway system is described by a topology data set TD, which is also stored in the memory 20.
  • the topology dataset TD comprises a first partial dataset TDr which describes a real railway installation 40 which is to be controlled by the interlocking computer 5.
  • the real railway installation 40 is formed by real railway components RK1, RK2,..., RKp, which are connected to railway component connections A1, A2,..., Ap of the interlocking computer 5.
  • the real railway components RK1, RK2,..., RKp are, for example, real components of the outdoor installation, in particular a real switch, a real free-field device or a real signal device.
  • the topology dataset TD also includes a second dataset TDv in which a virtual railroad facility is defined.
  • the virtual railway system comprises one or more virtual railway components whose operation is simulated or simulated by an external monitoring device 50.
  • the virtual railway components are, for example, virtual components of the outside installation, in particular a virtual diverter, a virtual free-field device or a virtual signaling device.
  • the external monitoring device 50 has a computing device 60, a memory 70 and an interface 80.
  • a monitoring program 90 is stored, which determines the operation of the computing device 60 and thus the operation of the monitoring device 50.
  • test data T are stored in the memory 70, which are read out of the memory 70 by the computing device 60 and fed via the interface 80 into the interlocking computer 5 as report signals of the virtual railway components of the virtual railway system.
  • the message signals are in the FIG. 1 denoted by the reference symbols Mp + 1, Mp + 2, ..., Mn.
  • the interlocking computer 5 For feeding the message signals Mp + 1, Mp + 2, ..., Mn, the interlocking computer 5 has railway component connections, which in the FIG. 1 are denoted by the reference symbols Ap + 1, Ap + 2, ..., An.
  • the railway component connections Ap + 1 to An are identical to the railway component terminals A1 to Ap in terms of the processing of the signals applied to the input side; this means that, instead of virtual railway components, real railway components of the real railway system 40 could be connected to these railway component connections.
  • the signaling signals applied to the railway component connections Ap + 1, Ap + 2,..., An are thus treated as if they were signaling signals of a real railway installation.
  • the interlocking computer 5 or the computing device 10 applies to the input signal applied to the control program 30 and controls with this the train formed from the real railway system 40 and the virtual railway system extended railway system.
  • the output signals Sp + 1, Sp + 2, ..., Sn of the interlocking computer 5 arrive via the interface 80 to the computing device 60, which outputs the output signals with the reference data RAD which are stored in the memory 70.
  • the reference output data RAD describes the output signals which the monitoring device 50 expects in response to the entered test data T or in response to the transmitted message signals Mp + 1, Mp + 2,..., Mn when the interlocking computer 5 is operating correctly: Voices from the Signaling computer 5 coming output signals Sp + 1, Sp + 2, ..., Sn match with the reference output data RAD, then the computing device 60 determines that the interlocking computer 5 correctly responds to the input test data and performs the control of the virtual railway system correctly. On the other hand, if the output signals Sp + 1, Sp + 2,..., Sn differ in content from the reference output data RAD, then the monitoring device 50 will generate an error signal F with which an error of the interlocking computer 50 is signaled.
  • the feeding of various test data T can be done regularly or irregularly to check the correct operation of the interlocking computer 5 regularly or irregularly.
  • the reference output data RAD are already determined and stored in the memory 70 for the test data T.
  • Such an embodiment shows the FIG. 2 ,
  • FIG. 2 One sees an interlocking computer 5 and an external monitoring device 50, with which the interlocking computer 5 can be monitored.
  • the memory 70 instead of reference output data RAD a reference control program 30 ', whose operation corresponds to the control program 30 of the interlocking computer 5.
  • the second partial data set TDv which describes the virtual railway system or components of the virtual railway system.
  • the monitoring device 50 and the computing device 60 read the test data T from the memory 70 and transmit as Meldesignals Mp + 1, Mp + 2, ..., Mn to the interlocking computer 5, as related with the FIG. 1 has already been explained.
  • the output signals Ap + 1, Ap + 2,..., An generated by the interlocking computer 5 in response to the fed-in message signals reach the computing device 60 via the interface 80, which executes the reference control program 30 'in parallel and to the test data T or applies the notification signals Mp + 1, Mp + 2, ..., Mn and forms reference output data RAD 'by means of the reference control program 30' itself.
  • the monitoring program 90 of the monitoring device 50 compares the output signals Ap + 1, Ap + 2,..., An supplied by the interlocking computer 5 with the corresponding reference output data RAD ', which have been formed by the reference control program 30'. If the reference output data RAD 'agree with the output signals supplied by the interlocking computer 5, the interlocking computer 5 operates correctly. On the other hand, if the data differs, the monitoring device 50 will generate an error signal F with which an error of the interlocking computer 5 is signaled.
  • shut off device can be turned off in the presence of the error signal F, the power supply of the interlocking computer 5 to disable this completely and safely.
  • the interlocking computer 5 can no longer generate output signals for controlling the real railway components RK1, RK2,..., RKp.
  • FIG. 3 shows an embodiment of an arrangement with an interlocking computer 5 and a monitoring device 50, in which the data bus 100 of the interlocking computer 5, a control signal terminal K5 of the interlocking computer 5 is connected.
  • the data bus 100 connects the control signal terminal K5 to the computing device 10 and allows a connection to the monitoring device 50.
  • Control commands 30 are implemented in the control program 30 of the interlocking computer 5 at predetermined program points, which generate a control signal KS when executed.
  • the control signals KS arrive via the data bus 100 and the control signal connection K5 from the interlocking computer 5 to the monitoring device 50 and the computing device 60.
  • the monitoring program 90 of the monitoring device 50 is designed such that it monitors the input of the control signals KS and generates an error signal F, if the time interval between successive control signals KS reaches or exceeds a predetermined maximum time control signal interval.
  • the computing device 60 assumes that with a correct operation of the interlocking computer 5 regularly control signals KS are generated, so that a regular input of control signals KS is an indication of a correct operation of the interlocking computer 5. On the other hand, if control signals are missing or are not generated in time, this is an indication that the computing device 10 is working incorrectly and has to be switched off.
  • the monitoring program 90 of the monitoring device 50 is also configured such that it contains predetermined program modules monitored in the control program 30 of the interlocking computer 5.
  • the monitoring program 90 assumes that when feeding predetermined test data T or the corresponding message signals into the interlocking computer 5 predetermined program modules of the control program 30 must be called, the execution of each of which will cause a predetermined number of control signals KS.
  • the monitoring program 90 is configured in such a way that it counts the number of control signals KS sent to the control signal connection K5 for the respective program modules and generates an error signal F if, after execution of a predetermined program module, the program module provided and stored in a control signal data set KSD of the memory 70 for the respective program module stored number of control signals KS is reached.
  • the monitoring program 90 assumes that a correct execution of the predetermined program module imperatively requires the execution of the predetermined program locations in the control program 30, so that the corresponding control signals and the correspondingly provided number of control signals must be generated. If this is not the case, then this is a sign for an incorrect functioning of the interlocking computer 5, which is accordingly preferably switched off.

Landscapes

  • Engineering & Computer Science (AREA)
  • Mechanical Engineering (AREA)
  • Health & Medical Sciences (AREA)
  • Biomedical Technology (AREA)
  • General Health & Medical Sciences (AREA)
  • Train Traffic Observation, Control, And Security (AREA)
  • Safety Devices In Control Systems (AREA)
  • Electric Propulsion And Braking For Vehicles (AREA)
  • Small-Scale Networks (AREA)
  • Testing And Monitoring For Control Systems (AREA)

Claims (10)

  1. Procédé de contrôle de la façon de fonctionner d'un ordinateur ( 5 ) de poste d'aiguillage, qui exécute un programme ( 30 ) de commande pour commander des composants ( RK1 à RKp ) de voie ferrée d'une installation ( 40 ) réelle de réseau de chemin de fer, le programme ( 30 ) de commande exploitant des signaux d'avertissement des composants de voie ferrée de l'installation ( 40 ) réelle du réseau de chemins de fer et produisant des signaux de commande des composants de voie ferrée à commander de l'installation réelle du réseau de chemin de fer,
    caractérisé en ce que
    - le programme ( 30 ) de commande commande une installation élargie du réseau de chemins de fer, qui comprend les composants ( RK1 à RKp ) de voie ferrée de l'installation ( 40 ) réelle du réseau de chemins de fer et en outre au moins un composant virtuel de voie ferrée,
    - on entre dans l'ordinateur ( 5 ) de poste d'aiguillage des signaux ( Mp+1 à Mn ) d'avertissement du au moins un composant virtuel de voie ferrée,
    - le programme ( 30 ) de commande traite des signaux ( Mp+1 à Mn ) d'avertissement dans le cadre de la commande de l'installation élargie du réseau de chemin de fer,
    - on contrôle l'exactitude des signaux ( Sp+1 à Sn ) de sortie produits par l'ordinateur du poste d'aiguillage du côté de la sortie sur la base des signaux ( Mp+1 à Mn ) d'avertissement et
    - on produit un signal ( F ) d'erreur si le programme ( 30 ) de commande fournit des signaux de sortie défectueux et/ou des signaux de sortie retardés.
  2. Procédé suivant la revendication 1,
    caractérisé en ce que
    - on entre les signaux ( Mp+1 à Mn ) d'avertissement pour le au moins un composant virtuel de voie ferrée par un appareil ( 50 ) extérieur de contrôle qui est relié à l'ordinateur ( 5 ) du poste d'aiguillage par une interface ( 80 ) et
    - on contrôle par l'appareil ( 50 ) de contrôle, l'exactitude des signaux ( Sp+1 à Sn ) de sortie produits par l'ordinateur ( 5 ) du code d'aiguillage, du côté de la sortie sur la base des signaux ( Mp+1 à Mn ) d'avertissement.
  3. Procédé suivant l'une des revendications précédentes,
    caractérisé en ce que
    - on contrôle la durée dont l'ordinateur ( 5 ) du poste d'aiguillage a besoin pour traiter les signaux ( Mp+1 à Mn ) d'avertissement et
    - on produit un signal ( R ) d'erreur si le temps de réaction de l'ordinateur ( 5 ) du poste d'aiguillage atteint ou dépasse une durée maximum de temps donnée à l'avance.
  4. Procédé suivant l'une des revendications précédentes,
    caractérisé en ce que
    - dans le programme ( 30 ) de commande, sont mise en oeuvre en des positions données à l'avance du programme des instructions de contrôle qui, à l'exécution, produisent respectivement un signal ( KS ) de contrôle.
  5. Procédé suivant la revendication 4,
    caractérisé en ce que
    - on produit un signal ( F ) d'erreur si la distance dans le temps entre des signaux ( KS ) de contrôle successifs atteint ou dépasse une distance dans le temps maximum donnée à l'avance entre les signaux de contrôle.
  6. Procédé suivant la revendication 4 ou 5,
    caractérisé en ce que
    - on produit un signal ( F ) d'erreur si, après exécution d'un module donné à l'avance du programme, on est passé en dessous du nombre de signaux ( KS ) de contrôle prévu pour ce module de programme.
  7. Procédé suivant l'une des revendications précédentes,
    caractérisé en ce que
    - le au moins un composant virtuel de voie ferrée est un composant virtuel de l'installation extérieure, notamment un aiguillage virtuel, un dispositif de dégagement de voie virtuelle ou un dispositif de signalisation virtuelle et
    - on entre dans l'ordinateur ( 5 ) du poste d'aiguillage des signaux ( Mp+1 à Mn ) d'avertissement d'un composant virtuel de ce genre de voie ferrée.
  8. Procédé suivant l'une des revendications précédentes,
    caractérisé en ce que
    en présence d'un signal ( F ) d'erreur, on arrête l'ordinateur ( 5 ) du poste d'aiguillage et/ou une interface de communication de l'ordinateur du poste d'aiguillage.
  9. Ordinateur ( 5 ) de poste d'aiguillage, dans lequel est mémorisé un programme ( 30 ) de commande de composants ( RK1 à RKp ) de voie ferrée d'une installation ( 40 ) réelle de réseau de chemins de fer, le programme ( 30 ) de commande prévoyant l'exploitation de signaux d'avertissement de l'installation ( 40 ) réelle de réseau de chemins de fer et la production de signaux de commande des composants de voie ferrée à commander de l'installation réelle du réseau de chemins de fer,
    caractérisé en ce que
    - le programme ( 30 ) de commande prévoit la commande d'une installation élargie de réseau de chemins de fer qui comprend l'installation ( 40 ) réelle du réseau de chemins de fer et en outre au moins un composant virtuel de voie ferrée,
    l'ordinateur ( 5 ) du poste d'aiguillage autorise l'entrée de signaux ( Mp+1 à Mn ) d'avertissement du au moins un composant virtuel de voie ferrée, et
    - le programme ( 30 ) de commande est propre à traiter les signaux ( Mp+1 à Mn ) d'avertissement dans le cadre de la commande de l'installation élargie du réseau de chemins de fer et à produire des signaux ( Sp+1 à Sn ) de sortie du côté de la sortie en fonction des signaux d'avertissement appliqués.
  10. Appareil ( 50 ) de contrôle d'un ordinateur ( 5 ) de poste d'aiguillage suivant la revendication 9,
    caractérisé en ce que
    - l'appareil ( 50 ) de contrôle a une interface ( 80 ) qui rend possible une connexion à une ou à plusieurs connexions ( Ap+1 à An ) de composants de voie ferrée de l'ordinateur ( 5 ) du poste d'aiguillage et
    - dans l'appareil ( 50 ) de contrôle est mémorisé un programme ( 90 ) de contrôle, qui peut entrer dans l'ordinateur ( 5 ) du poste d'aiguillage des données ( T ) de test, comme signaux ( Mp+1 à Mn ) d'avertissement du au moins un composant virtuel de voie ferrée et qui peut, sur la base des signaux ( Mp+1 à Mn ) d'avertissement, contrôler l'exactitude de signaux ( Mp+1 à Sn ) produits par l'ordinateur ( 5 ) du poste d'aiguillage du côté de la sortie.
EP12758784.8A 2011-08-24 2012-08-16 Calculateur de poste d'aiguillage Active EP2731849B1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
DE102011081477A DE102011081477A1 (de) 2011-08-24 2011-08-24 Stellwerksrechner
PCT/EP2012/065983 WO2013026759A1 (fr) 2011-08-24 2012-08-16 Calculateur de poste d'aiguillage

Publications (2)

Publication Number Publication Date
EP2731849A1 EP2731849A1 (fr) 2014-05-21
EP2731849B1 true EP2731849B1 (fr) 2015-09-30

Family

ID=46845700

Family Applications (1)

Application Number Title Priority Date Filing Date
EP12758784.8A Active EP2731849B1 (fr) 2011-08-24 2012-08-16 Calculateur de poste d'aiguillage

Country Status (4)

Country Link
EP (1) EP2731849B1 (fr)
CN (1) CN103781691B (fr)
DE (1) DE102011081477A1 (fr)
WO (1) WO2013026759A1 (fr)

Families Citing this family (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
NL2012356B1 (nl) * 2013-03-04 2016-07-15 Volkerrail Nederland Bv Buitendienstneming van een stuk spoorweg met behoud van onderscheid naar herkomst in de bij de treindienstregeling aankomende datastroom.
EP3381768B1 (fr) * 2015-11-25 2020-07-15 Coordem Transport Tech. Co., Ltd. Procédé et système de commande de branchement ferroviaire
EP3312073B1 (fr) * 2016-10-21 2023-08-23 Schweizerische Bundesbahnen SBB Procédé de contrôle d'un système ferroviaire et système ferroviaire
DE102017208490A1 (de) * 2017-05-19 2018-11-22 Siemens Aktiengesellschaft Verfahren zum Betreiben einer Gleisanlage sowie Stellwerk für eine Gleisanlage
CN107914735A (zh) * 2017-11-01 2018-04-17 北京市轨道交通建设管理有限公司 一种列车进路办理方法及计算机联锁系统
EP3546314A1 (fr) * 2018-03-28 2019-10-02 Siemens Aktiengesellschaft Procédé et dispositif d'identification de défaillances pour un système technique
CN109094611B (zh) * 2018-09-30 2020-12-08 湖南中车时代通信信号有限公司 一种提高仿真系统应答器报文发送精度的装置及方法
CN111055892B (zh) * 2019-12-26 2021-11-30 中国铁道科学研究院集团有限公司通信信号研究所 一种基于阈值延时处理的铁路信号采集信息容错方法

Family Cites Families (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6032905A (en) * 1998-08-14 2000-03-07 Union Switch & Signal, Inc. System for distributed automatic train supervision and control
CN2666767Y (zh) * 2003-12-30 2004-12-29 郝迎吉 铁路调度自动监督装置
KR100620059B1 (ko) * 2004-07-09 2006-09-08 한국철도기술연구원 전자연동장치의 자동시험장치 및 그 제어방법
JP4563212B2 (ja) * 2005-02-22 2010-10-13 株式会社日立製作所 電子連動システム及び試験装置と試験方法
US7711511B2 (en) * 2005-06-30 2010-05-04 Ultra-Tech Enterprises, Inc. Method and apparatus for automatically testing a railroad interlocking
EP2193973B1 (fr) * 2008-12-04 2013-01-30 Siemens Schweiz AG Procédé et dispositif de contrôle d'unités d'influence de traction avec des données d'état de signaux de trajectoires pour des postes tout relais
CN102092407B (zh) * 2010-12-09 2013-01-23 北京全路通信信号研究设计院有限公司 一种ctcs-3级列控系统的在线监测系统

Also Published As

Publication number Publication date
CN103781691B (zh) 2016-08-24
WO2013026759A1 (fr) 2013-02-28
CN103781691A (zh) 2014-05-07
DE102011081477A1 (de) 2013-02-28
EP2731849A1 (fr) 2014-05-21

Similar Documents

Publication Publication Date Title
EP2731849B1 (fr) Calculateur de poste d'aiguillage
DE60309928T2 (de) Verfahren zur erhöhung der sicherheitsintegritätsstufe eines kontrollsystems
EP2504740B1 (fr) Module de sécurité pour un appareil d'automatisation
EP2504739B1 (fr) Système de commande pour commander des processus critiques sur le plan de la sécurité et des processus non critiques sur le plan de la sécurité
EP1297394B1 (fr) Systeme de commande redondant avec calculateur pilote, et unite peripherique pour un tel systeme de commande
DE102012215343A1 (de) Verfahren zum Durchführen einer Sicherheitsfunktion eines Fahrzeugs und System zum Durchführen des Verfahrens
DE102007032805A1 (de) Verfahren und Systemarchitektur zur sicheren einkanaligen Kommunikation zum Steuern eines sicherheitskritischen Bahnbetriebsprozesses
DE102017109886A1 (de) Steuerungssystem zum Steuern von sicherheitskritischen und nichtsicherheitskritischen Prozessen mit Master-Slave-Funktionalität
DE102013017951A1 (de) Elektronische Steuervorrichtung und Verfahren zum Überprüfen einer Rücksetzfunktion
EP3557598A1 (fr) Commutateur de sécurité
EP2418580B1 (fr) Procédé destiné au fonctionnement d'un réseau et réseau
EP1197418B1 (fr) Pocédé de commande pour un processus à sécurité critique dans le service ferroviaire et dispositif pour mettre en oeuvre ce procédé
EP4034448A1 (fr) Procédé de surveillance de fonctionnements d'une balise et appareil de lecture approprié à cet effet
WO2023052333A1 (fr) Procédé d'activation d'une pluralité de portes dans un véhicule
DE102004051130A1 (de) Verfahren und Automatisierungssystem zum Bedienen und/oder Beobachten mindestens eines Feldgerätes
WO2013037675A2 (fr) Système de commande
EP1776617B1 (fr) Procede de surveillance de position fiable
EP3565752B1 (fr) Commutation entre contrôleurs d'éléments pendant le fonctionnement d'une voie de chemin de fer
EP2849986B1 (fr) Procédé et système pour commander une installation technique
WO2003047937A1 (fr) Procede de commande d'un processus d'exploitation ferroviaire critique et dispositif destine a la mise en oeuvre de ce procede
WO2011113405A1 (fr) Groupement d'appareils de commande
EP4088375B1 (fr) Module de sécurité pour commande d'entraînement sûre d'un système d'entraînement dans un système d'automatisation, système d'entraînement et système d'automatisation
EP1168853A2 (fr) Méthode de contrôle de fonctions et de réparation externes d'appareils tv, vidéo et/ou hifi, et dispositif associé
EP1176508B1 (fr) Dispositif visant la surveillance du bon fonctionnement de composants exécutant la même action ou des actions correspondantes dans un système électrique
EP2950174A1 (fr) Méthode et appareil pour surveiller en toute sécurité l'état de deux dispositifs

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

17P Request for examination filed

Effective date: 20140211

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

DAX Request for extension of the european patent (deleted)
GRAJ Information related to disapproval of communication of intention to grant by the applicant or resumption of examination proceedings by the epo deleted

Free format text: ORIGINAL CODE: EPIDOSDIGR1

GRAP Despatch of communication of intention to grant a patent

Free format text: ORIGINAL CODE: EPIDOSNIGR1

GRAP Despatch of communication of intention to grant a patent

Free format text: ORIGINAL CODE: EPIDOSNIGR1

INTG Intention to grant announced

Effective date: 20150423

GRAS Grant fee paid

Free format text: ORIGINAL CODE: EPIDOSNIGR3

GRAA (expected) grant

Free format text: ORIGINAL CODE: 0009210

AK Designated contracting states

Kind code of ref document: B1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

REG Reference to a national code

Ref country code: CH

Ref legal event code: EP

Ref country code: GB

Ref legal event code: FG4D

Free format text: NOT ENGLISH

REG Reference to a national code

Ref country code: AT

Ref legal event code: REF

Ref document number: 752201

Country of ref document: AT

Kind code of ref document: T

Effective date: 20151015

REG Reference to a national code

Ref country code: IE

Ref legal event code: FG4D

Free format text: LANGUAGE OF EP DOCUMENT: GERMAN

REG Reference to a national code

Ref country code: CH

Ref legal event code: NV

Representative=s name: SIEMENS SCHWEIZ AG, CH

REG Reference to a national code

Ref country code: DE

Ref legal event code: R096

Ref document number: 502012004780

Country of ref document: DE

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: FI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20150930

Ref country code: NO

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20151230

Ref country code: LV

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20150930

Ref country code: LT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20150930

Ref country code: GR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20151231

REG Reference to a national code

Ref country code: NL

Ref legal event code: MP

Effective date: 20150930

REG Reference to a national code

Ref country code: LT

Ref legal event code: MG4D

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20150930

Ref country code: RS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20150930

Ref country code: HR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20150930

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20160130

Ref country code: EE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20150930

Ref country code: CZ

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20150930

Ref country code: ES

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20150930

Ref country code: IT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20150930

Ref country code: SK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20150930

Ref country code: NL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20150930

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: PT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20160201

Ref country code: RO

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20150930

Ref country code: PL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20150930

REG Reference to a national code

Ref country code: DE

Ref legal event code: R097

Ref document number: 502012004780

Country of ref document: DE

PLBE No opposition filed within time limit

Free format text: ORIGINAL CODE: 0009261

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: NO OPPOSITION FILED WITHIN TIME LIMIT

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: DK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20150930

26N No opposition filed

Effective date: 20160701

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20150930

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: BE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20160831

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MC

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20150930

GBPC Gb: european patent ceased through non-payment of renewal fee

Effective date: 20160816

REG Reference to a national code

Ref country code: FR

Ref legal event code: ST

Effective date: 20170428

REG Reference to a national code

Ref country code: IE

Ref legal event code: MM4A

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20160816

Ref country code: GB

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20160816

Ref country code: FR

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20160831

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: LU

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20160816

REG Reference to a national code

Ref country code: CH

Ref legal event code: PCOW

Free format text: NEW ADDRESS: WERNER-VON-SIEMENS-STRASSE 1, 80333 MUENCHEN (DE)

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: CY

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20150930

Ref country code: HU

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT; INVALID AB INITIO

Effective date: 20120816

Ref country code: SM

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20150930

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20150930

Ref country code: MT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20150930

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: BG

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20150930

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: AL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20150930

Ref country code: TR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20150930

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: AT

Payment date: 20180705

Year of fee payment: 7

REG Reference to a national code

Ref country code: DE

Ref legal event code: R081

Ref document number: 502012004780

Country of ref document: DE

Owner name: SIEMENS MOBILITY GMBH, DE

Free format text: FORMER OWNER: SIEMENS AKTIENGESELLSCHAFT, 80333 MUENCHEN, DE

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: CH

Payment date: 20181107

Year of fee payment: 7

REG Reference to a national code

Ref country code: AT

Ref legal event code: MM01

Ref document number: 752201

Country of ref document: AT

Kind code of ref document: T

Effective date: 20190816

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: AT

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20190816

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: CH

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20190831

Ref country code: LI

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20190831

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: DE

Payment date: 20231019

Year of fee payment: 12