EP2874859A2

EP2874859A2 - Energy-saving mode for a rail system signalling system

Info

Publication number: EP2874859A2
Application number: EP13763199.0A
Authority: EP
Inventors: Andreas ST PIERRE; Christian Steffens; Matthias SÄUBERLICH
Original assignee: Siemens AG
Current assignee: Siemens Mobility GmbH
Priority date: 2012-09-14
Filing date: 2013-09-05
Publication date: 2015-05-27
Also published as: RU2636993C2; DE102012216382A1; US9720481B2; WO2014040898A2; RU2015113600A; WO2014040898A3; US20150241948A1

Abstract

In order to save energy, it is proposed that parts of a signalling system be switched off, for example, by means of an operating system. The computers to be switched off store data which are relevant to railway safety, preferably on a central storage medium, for example, an NAS hard drive. When they have been reactivated, the computers read the safety-relevant data and operation can continue. This solution also enables computers which work with data relevant to railway safety to be switched to an energy-saving mode without endangering the safety of the railway.

Description

description

Energy saving mode for signal system of a railway system The invention relates to a method for operating a

Railway system, in particular in a power-saving mode and corresponding devices.

It is basically a disadvantage that a computer Sig- nalsystems, such as a signal box, not off the ^¬ and therefore consume energy when they are not needed.

The object of the invention is to avoid the disadvantage of previously-called, and in particular to provide an effec tive ^¬ type of operation of a signal system.

This object is achieved according to the features of the independent claims. Preferred embodiments are disclosed in particular in the dependent claims.

To achieve the object, a method for operating a signal system of a railway system is proposed,

in which the signal system comprises a first computer and at least one second computer,

- in which the first computer causes Siche ^¬ approximately relevant data of the at least one second computer are stored,

- in which causes the first computer that the min ^¬ least passes over a second computer in a Energiesparmo ^¬ mode.

The signal system may include, for example, an interlocking, a line center for train control systems such as a radio block center, a vehicle arrangement of train control systems, etc. This approach makes it possible for the computer in a signal system, such as when they are not needed, at least partially (or fully) are switched off to save energy ^¬ Ener. With the switch-off, data relevant to protection is stored, so that after switching on the computer in relation to these data, the same state can be produced as before the entry into the energy-saving mode.

One training is that

- backup-relevant data of the first computer are stored ge ^¬

- The first computer goes into a power saving mode. One embodiment is that

the first computer is activated based on a wake-up signal,

- The first computer restores its backup-relevant data.

In particular, it is a training that

the first computer causes activation of the at least one second computer,

- The at least one second computer restores its backup-relevant data.

In particular, the first computer can cause the at least one second computer to read in its previously stored security-relevant data or to transmit these to it.

It is also a development that the energy-saving mode comprises a shutdown of the computer, in particular a Ausschal ^¬ th of the computer.

Furthermore, it is a further development that switching off the computer comprises an interruption from a power supply, in particular by means of a controllable switching element is feasible.

Within the scope of an additional development, the controllable switching element can be controlled via a network.

A next development is that the protection ^¬ approximately relevant data of the first computer and / or the security-relevant data of the at least a second computer in each case stored on a shared storage medium or different storage media.

An embodiment is that the storage medium comprises at least one of the following components:

- a hard disk,

a memory card,

- an internal memory,

- an external memory,

a memory accessible via a network connection,

- A networked storage, especially a NAS hard drive.

An alternative embodiment is that the security-relevant data in each case comprise at least one of the following information:

Closures of the railway system or components of the railway system,

- note notes,

- driveability barriers,

- conditions of components of the railway operations,

- print texts requiring acknowledgment,

- states of the first computer,

- States of the at least one second computer.

A next embodiment is that the first computer and the at least one second computer with a (or over the) network, in particular the Ethernet or optical fiber, are connected.

The first and / or the at least one second computer can be connected or coupled to the network via a line or wirelessly.

It is also an embodiment that the sicherheitsrele ^¬-relevant data is stored on at least one component which is connected to the network.

A further development consists in that the first computer and / or the at least one second computer is a secure computer or a secure computer.

For example, access to the computer can be structurally secured and / or the computer may have at least one access control (eg via software), the only au ^¬ ised persons permitted access to the operation of the computer.

An additional embodiment is that the backup ^¬ relevant data are stored with a checksum. The statements concerning the method apply correspondingly to the other categories of claim.

The above object is also achieved by an apparatus for energy-saving operation of a Signalsys- tems of a railway system, wherein the apparatus is so turned ^¬ aligned, that is that veranlassbar

- backup-relevant data of at least one second computer are stored,

- the at least one second computer goes into an energy saving mode. The device may be the "first computer" according to the present embodiments.

Furthermore, the above object is achieved by means of a sig- nalsystems (eg an interlocking) of a railway system comprehensive ^¬ send

a first computer and at least one second computer,

- Wherein the first computer is arranged such that it can be caused by him that

- Backup-relevant data of the at least one second computer are stored and

- The at least one second computer goes into a power saving mode.

The presented solution further comprises a computer program product directly loadable into a memory of a digita ^¬ len computer, comprising program code portions which are suitable to carry out steps of the procedure described herein proceedings.

Furthermore, the above problem is solved by ei ^¬ nes computer-readable storage medium, for example an arbitrary memory comprising solutions of computer-executable Anwei- (eg in the form of program code) that are adapted so that the computer to perform steps of the method described herein.

The above-described characteristics, features and advantages of this invention and the way how they are he ^¬ sufficient become clearer and more fully understood in conjunction with the following schematic description of exemplary embodiments, which are explained in connection with the drawings. For the sake of clarity, identical or equivalent elements may be provided with the same reference numerals. Show it:

1 is a schematic block diagram for operating a

Signaling system, eg signal box, in particular in ei ^¬ nem energy saving mode;

2 shows an anabolic to Fig.l schematic block ^¬ program; 3 shows a schematic flow diagram with steps for

Operation of the signal system.

For example, there is an interlocking in a signal system of a Bahnsys ^¬ tems, for example, at least a first computer (for example even a computer network or a computer network, hereinafter is simplified from the first computer out ^¬ addressed, even if a plurality of first computers can actually be present or the first computer may be distributed or may comprise a plurality of computers), which stores states and / or state transitions of railway components and / or of at least one second computer, for example for reasons of redundancy. Preferably, this computer has an interface to an operating system (eg an operator station).

A computer can comprise a computer system with at least one processor, at least one input / output interface and at least one input unit (eg keyboard, mouse, touchscreen) and at least one output unit (eg display, display panel). The computer can thus be designed, for example, as a workstation with operational software or as an assembly. The computer usually has a connection to a power grid, eg via a power supply unit and / or via an energy store (eg battery). The first computer can be instructed via the operating system to shut down itself or the at least one second computer or put it in an energy storage mode.

Preferably, no further operations are accepted after such an instruction.

Backup-relevant data is stored by the first computer, e.g. on a storage medium.

The security-relevant data can include at least one of the following information:

- closures,

- note notes, driveability barriers,

- States of components of the railway operation (e.g.

Signals, switches),

- print texts requiring acknowledgment,

- states of the first computer,

- States of the at least one second computer.

In principle, the security-relevant data may also include data and information, possibly also programs, which are important for the railway operation or the function of the railway operation.

The storage medium may be an internal or an external storage medium of the first computer. For example, the storage medium may be or include:

- a hard disk,

a memory card,

- an internal memory,

- an external memory,

a memory accessible via a network connection, - A networked storage (NAS: "Network Attached Storage"), eg a NAS hard disk.

Preferably, the first computer has an interface to a network, e.g. an Ethernet interface through which it can access the memory.

Advantageously, the first computer is a "secure" computer, i. a computer, e.g. operated in a secure environment with secure programs. For example, the access to the computer can be structurally secured (eg by arranging the computer in a room for which there is an access control) and / or the computer can have at least one access control (password, chip card, retina scanner) which allows only authorized persons access to the operation of the computer.

An advantageous implementation provides that the safety-cherungsrelevanten data wholly or partly with ei ^¬ ner checksum (also called a "checksum" verification value or code) are provided so that transmission errors (eg before storing or when saving and / or when reading out) can be detected. Basically, the checksum guarantees or increases data integrity during data transmission or storage.

After the storage of the security-relevant data, the first computer causes at least part of the at least one second computer to change to a power-saving mode and / or to shut down. For example, the first computer can instruct at least one of several second computers to switch to the energy-saving mode. It is also possible for the first computer to cause only a part of a second computer to shut down or switch to power-saving mode, with another part of the second computer remaining active and continuing its operation. Optionally, the first computer can cause, after successful entry of the at least one second computer into the power-saving mode or after successful shutdown of the at least one second computer, the power supply to the at least one second computer, for example via a switching element, as a bistable Relay can be executed, interrupt. It should be noted that per switching element one or more computers can be disconnected from or connected to a power grid. In particular, a plurality of switching elements may be provided, for example one per computer. The switching element can be controlled, for example, via a signal from a network: For example, the switching element has a connection to the network (possibly also via a wireless connection), so that its switching state can be controlled via this connection.

For example, the switching element can be designed as a switch-off relay that can be instructed via a network connection to interrupt the power supply. The activation of the shutdown relay may be via a Wake-on-LAN signal, after which the cut-off relay, the current-to ^¬ drove restoring. Basically, this is an alternative or ^addi tional embodiment, that also the first computer goes into a power saving mode. Preferably, this is done - so far ^¬ provided and desired - after the first computer has caused that the at least one second computer goes into the power-saving mode.

Thus, the first computer can shut down itself after saving the security-relevant data existing on it. Optionally, in addition to the first computer, the power supply, e.g. about that (or another)

Switching element to be interrupted. Another option be ^¬ is the fact that the first computer turns off and can be reactivated via a WAKE-ON-LAN signal. This option also applies to the at least one second computer. Thus, efficiently the first and the at least one second computer can be put in an energy-saving state. This is an advantage, for example, if the computer is not needed. In this way, energy consumption can be reduced, for example in the interlocking.

A reactivation of the first computer and / or at least one second computer takes place accordingly: For example, the switching element that produces the power supply for the first computer, are turned on. Alternatively, the first computer can be archived by means of a wake on LAN signal acti ^¬. Then the first computer is started (booting of the first computer).

The first computer can load by operation or automatically (eg by batch mode or macro) the most recently saved ^backup- relevant data, eg from the network ^{hard disk} . The first computer activates the at least one second computer, for example via a WAKE-ON-LAN signal to the at least one second computer, or via an activation of the (at least one) switching element that the

Power supply to the at least one second computer manufactures. The at least one second computer boots up. After booting up, the at least one second computer receives its security-relevant data, for example from the first computer. For example, the first computer may transmit these or the at least one second computer reads the sicherungsre ^¬-relevant data from the first computer or the storage medium, such as the network hard drive, the si ^¬ cherungsrelevanten data with or without a request of the at least a second computer on a , This is particularly advantageous that differed ^¬ Liche can be stored procedure saved by the computer on a mass storage per operation in railway operation security-relevant data. Preferably, the mass storage itself is secured and / or redundant ^¬ leads. Thus, the computer can be turned off or enter a power saving mode by possibly only one re-activation interface (eg via the mentioned WAKE-ON-LAN signal) is active. After restarting the computer, the backup-relevant data is loaded and operation can continue.

Fig.l shows a schematic block diagram for operating ei ^¬ nes signal system, such as interlocking, in particular in a power saving mode.

A computer 101 is connected via a network 105 to a computer 102 and to a computer 103. The two computers 102 and 103 are an example of the "at least one second computer" while the computer 101 is the "first computer" according to the above. A storage medium 104, e.g. a NAS hard drive, is also connected to the network 105. The network 105 is exemplified by an Ethernet, i. a network based on an Ethernet specification or an Ethernet protocol.

Furthermore, the computers 101 to 103 are connected to a power grid 106.

2 shows an anabolic on Fig.l schematic block ^¬ diagram additionally includes switching elements 107 to 109 on ^¬, each also have a connection to the network 105 and thus can be controlled via the network 105th Thus, the switching elements 107 can be switched on or off via the network 105, wherein in the off state each connected via the switching element computer is not connected to the mains 106.

For example, the control of the switching elements 108 and 109 may be performed by the computer 101. The switching element 107 (or the computer 101) can be activated by another computer (not shown in FIG. 1 and FIG. 2).

3 shows a schematic flow diagram with steps for operating the signal system.

In a step 301 the first computer receives an instruc ^¬ solution to activate the energy-saving mode. This can for example be done by another computer, eg by a user input or automatically, eg depending on one

Time and / or expected train traffic.

In step 302, optional (for example, from the first computer) will ensure that no further operations or state change based on the security-relevant data take place more, so that the current state of the si ^¬ cherungsrelevanten data and "frozen" to no further changes to security relevant data can be lost.

In a step 303, the security-relevant data of the at least a second computer on a Speicherme ^¬ dium, such as a NAS hard disk are stored. Optionally, in step 303, the sicherungsrele ^¬ relevant data of the first computer on the same or on a different storage medium is stored.

In a step 304, the first computer causes the at least one second computer to enter the energy-saving mode. For example, the first computer ^{veran ¬} sen, for example by means of a corresponding message on the Network, that the at least one second computer shuts down and / or turns off.

In an optional step 305, the first computer also enters the power saving mode, i. he turns off or is turned off. If the first computer is to be reactivated, this is done e.g. by switching on by means of an operating action via another computer, so that e.g. the first computer starts up via a WAKE-UP-LAN signal and / or is reconnected to the power network 106 via a switching element (see reference numeral 107 in FIG. After the first computer has booted again, the backup-relevant data are restored. In a step 306, the first computer causes the start of the at least one second computer, e.g. by a WAKE-UP-LAN signal or by controlling at least one switching element. The at least one second computer boots up and the backup-relevant data is stored back.

Thereafter, the operation of the signaling system may continue as before (see step 307). Thus, it is especially proposed to save energy

Parts of a signal system, for example by means of an operation off ^¬ switch. Store the disconnected computer for railway operation safety-related data preferably egg ^¬ nem central storage medium, such as a NAS-disk. After their re-activation, the computers read the safety-relevant data and the operation can be continued. This solution makes it possible to put even computers that work with safety-relevant data for railway operation in a power-saving mode, without jeopardizing the safety of rail operations. Although the invention in detail by the at least one shown embodiment illustrated in greater detail and was ^¬ be written, so the invention is not be limited ^¬ and other variations can be derived therefrom by the skilled artisan without departing from the scope of the invention.

Reference sign list

101 computer ("first computer")

102 computers ("second computer")

103 computers ("second computer")

104 storage medium, e.g. NAS hard drive

105 network

106 power grid

107 switching element

108 switching element

109 switching element

301-307 steps of a method for operating a Sig ^¬ nalsystems

Claims

A method of operating a signal system of a railway ^¬ system,

in which the signal system comprises a first computer (101) and at least one second computer (102, 103),

in which the first computer (101) causes backup-relevant data of the at least one second computer (102, 103) to be stored (303),

- Wherein the first computer (101) causes the at least one second computer (102, 103) to go into a power-saving mode (304).

Method according to claim 1,

- are stored in the security-relevant data of the first arithmetic ^¬ listeners (101) (303)

- In which the first computer (101) in an energy ^¬ saving mode transitions (305).

Method according to claim 2,

in which, based on a wake-up signal, the first computer (101) is activated (305),

- in which the first computer (101) stores its back sicherungsre ^¬-relevant data (305).

Method according to one of the preceding claims,

in which the first computer (101) causes activation of the at least one second computer (102, 103) (306),

- wherein the at least one second computer (102, 103) restores its security-relevant data (306).

Method according to one of the preceding claims, in which the energy-saving mode is a shutdown of the computer. in particular switching off the computer.

The method of claim 5, wherein the switching off of the computer (101 to 103) comprises an interruption of a power supply (106), which is feasible by ^¬ particular by means of a controllable switching element (107 to 109).

Method according to Claim 6, in which the controllable switching element (107 to 109) can be activated via a network (105).

Method according to one of the preceding claims, in which the security-relevant data of the first computer (101) and / or the security-relevant data of the at least one second computer (102, 103) are respectively stored on a common storage medium or on different storage media.

The method of claim 8, wherein the storage medium (104) comprises at least one of the following components:

- a hard disk,

a memory card,

- an internal memory,

- an external memory,

a memory accessible via a network connection,

- A networked storage, especially a NAS hard drive.

Method according to one of the preceding claims, in which the security-relevant data in each case comprise at least one of the following information:

Closures of the railway system or components of the railway system, - note notes,

- driveability barriers,

- conditions of components of the railway operations,

- print texts requiring acknowledgment,

- states of the first computer,

- States of the at least one second computer.

Method according to one of the preceding claims, in which the first computer (101) and the at least one second computer (102, 103) are connected to a network (105).

The method of claim 11, wherein the security-relevant data is stored on at least one component (104) connected to the network (105).

Method according to one of the preceding claims, in which the first computer (101) and / or the at least one second computer (102, 103) is a secure computer or a secure computer.

14. The method according to any one of the preceding claims, wherein the security-relevant data are stored with a checksum.

Device (101) for the energy-saving operation of a signaling system of a railway system, wherein the device (101) is set up such that it can be induced

- backup-relevant data of at least one second computer (102, 103) are stored,

- The at least one second computer (102, 103) passes into a power saving mode. gnalsystem a rail system comprising

a first computer (101) and at least one second computer (102, 103),

wherein the first computer (101) is arranged such that it can be caused by him

- Backup-relevant data of the at least one second computer (102, 103) are stored and

- The at least one second computer (102, 103) passes into a power saving mode.