EP2927088B1 - Method for paper-free commissioning of a route point for rail-bound traffic - Google Patents

Method for paper-free commissioning of a route point for rail-bound traffic Download PDF

Info

Publication number
EP2927088B1
EP2927088B1 EP14163390.9A EP14163390A EP2927088B1 EP 2927088 B1 EP2927088 B1 EP 2927088B1 EP 14163390 A EP14163390 A EP 14163390A EP 2927088 B1 EP2927088 B1 EP 2927088B1
Authority
EP
European Patent Office
Prior art keywords
test protocol
check sums
tool
programming tool
programming
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
EP14163390.9A
Other languages
German (de)
French (fr)
Other versions
EP2927088A1 (en
Inventor
Daniel Sigg
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Siemens Schweiz AG
Original Assignee
Siemens Schweiz AG
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Siemens Schweiz AG filed Critical Siemens Schweiz AG
Priority to EP14163390.9A priority Critical patent/EP2927088B1/en
Publication of EP2927088A1 publication Critical patent/EP2927088A1/en
Application granted granted Critical
Publication of EP2927088B1 publication Critical patent/EP2927088B1/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B61—RAILWAYS
    • B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L3/00—Devices along the route for controlling devices on the vehicle or train, e.g. to release brake or to operate a warning signal
    • B61L3/02—Devices along the route for controlling devices on the vehicle or train, e.g. to release brake or to operate a warning signal at selected places along the route, e.g. intermittent control simultaneous mechanical and electrical control
    • B61L3/08—Devices along the route for controlling devices on the vehicle or train, e.g. to release brake or to operate a warning signal at selected places along the route, e.g. intermittent control simultaneous mechanical and electrical control controlling electrically
    • B61L3/12—Devices along the route for controlling devices on the vehicle or train, e.g. to release brake or to operate a warning signal at selected places along the route, e.g. intermittent control simultaneous mechanical and electrical control controlling electrically using magnetic or electrostatic induction; using radio waves
    • B61L3/125—Devices along the route for controlling devices on the vehicle or train, e.g. to release brake or to operate a warning signal at selected places along the route, e.g. intermittent control simultaneous mechanical and electrical control controlling electrically using magnetic or electrostatic induction; using radio waves using short-range radio transmission
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B61—RAILWAYS
    • B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L19/00—Arrangements for interlocking between points and signals by means of a single interlocking device, e.g. central control
    • B61L19/06—Interlocking devices having electrical operation
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B61—RAILWAYS
    • B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L27/00—Central railway traffic control systems; Trackside control; Communication systems specially adapted therefor
    • B61L27/50—Trackside diagnosis or maintenance, e.g. software upgrades
    • B61L27/53—Trackside diagnosis or maintenance, e.g. software upgrades for trackside elements or systems, e.g. trackside supervision of trackside control system conditions
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B61—RAILWAYS
    • B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L27/00—Central railway traffic control systems; Trackside control; Communication systems specially adapted therefor
    • B61L27/60—Testing or simulation

Definitions

  • the present invention relates to a method for paperless commissioning of a control unit, in particular a MiniLEU S11, a LEU S21 and a MSTT signal, for a train protection component, in particular an ETCS balise, a signal, a switch.
  • a control unit in particular a MiniLEU S11, a LEU S21 and a MSTT signal
  • a train protection component in particular an ETCS balise, a signal, a switch.
  • ETCS European Train Control System
  • the corresponding train control units such as ETCS balises, signals, level crossings, axle counters and switches, and their associated control units, such as offered by Siemens AG under the names MiniLEU S11, LEU S21 and MSTT Signal, to be installed in the lines and programmed according to the configuration with the corresponding control data.
  • MiniLEU S11, LEU S21 and MSTT Signal offered by Siemens AG under the names MiniLEU S11, LEU S21 and MSTT Signal
  • the present invention is therefore based on the object of specifying a method for the paperless commissioning of a control unit for a train control component, which facilitates the commissioning of commissioning while at the same time maintaining the required safety level according to SIL4.
  • the control unit is also regarded synonymously as the target system.
  • the commissioning staff is only once again requested, within the scope of the provided second test protocol, to confirm the agreement of the calculated checksums with the encrypted setpoints for the checksums.
  • the first test protocol can be displayed in very simple form on the programming tool, eg "Checksum comparison OKAY".
  • the second test protocol is transmitted from the programming tool to a database and archived in the database.
  • a particularly advantageous embodiment of the present method can be achieved if the encrypted setpoint values for the checksums are transmitted to the programming tool in a non-machine readable and evaluable manner. In this way, it is ensured that the calculated actual checksum is actually determined by the control unit was erroneously output the encoded setpoint values for the checksums as actual values in the programming tool and not via any error whatsoever.
  • This procedure is particularly relevant because the control data and the control units implemented with it must correspond to the highest level of safety in the railway sector, SIL4, although the programming tool used and the software for the configuration of the control unit do not have to fulfill any safety level in the sense of a SIL level.
  • the encrypted setpoint values for the checksums are transmitted in the form of an integrated image.
  • Such images are neither electronically nor readable for the programming tool.
  • the second test protocol in the form of a vector-based page description language, preferably in pdf format, created.
  • the figure shows schematically the procedure of the method for paperless start-up of a waypoint, such as, e.g. a transparent data ETCS balise as Switzerlandbeein Letungsech with its associated control unit 20 - also called target system.
  • a waypoint such as, e.g. a transparent data ETCS balise as Switzerlandbeein Letungsappel with its associated control unit 20 - also called target system.
  • a configuration tool 10 provides examination-relevant data for a programming tool 12.
  • the project planning tool 10 can, for example, a An interlocking system or a control system from which it receives the relevant test-relevant data. Alternatively, however, the project planning tool 10 can also be trained so that the test-relevant data can be generated with this tool.
  • control data 14 for the train control unit also referred to as target system
  • a template 16 for a second test protocol and encrypted set values 18 of checksums for checking the correct loading of the control data 14 onto the control unit 20 are included in the test-relevant data.
  • control unit 20 is programmed by the programming tool 12 with the control data 14 provided by the configuration tool 10.
  • the commissioning staff may be made for the commissioning staff to connect the programming tool 12, wired or wirelessly, to the control unit 20 on site and transmit the data via the corresponding interface.
  • control unit 20 now calculates actual checksums 22 for the programmed control data 14 on the control unit 20 using a key 24 unknown to the programming tool 12. In this way, with the required security level of SIL4, it is ensured that the non-secure programming tool 12 is not in is able to determine the correct actual examination sums 22 themselves.
  • the actual test sums calculated by the control unit 20 (it may also be a single checksum) are then transferred to the programming tool 12.
  • the programming tool 12 assembles a first test protocol 28 by automatically comparing the determined actual checksums 22 with the set values 18 for the checksums.
  • SIL4 is that the programming tool 12, the setpoints 18 never in plain text (in the sense of machine readable and evaluable) has available, but by a predetermined combination of the determined by the control unit 20 IST checksums 22 with the supplied by the configuration tool and with the programming tool 12 not known key 26 encrypted setpoint values 18 for the checksums in the case of a correct programming of the control unit 20 comes to a predefined constant value. The test is completed when this predefined constant value has been reached.
  • a fifth step 5 the calculated checksums 22 and the encrypted checksum setpoints 18 are displayed on the commissioning / review tool 29 programming tool 12. This can also be done, for example, only in the simplified form that the programmer displays "Checksum (s) OK".
  • the setpoint values 18 for the checksums have been supplied by the configuration tool 10 to the programming tool 12 in such a way that the setpoint values 18 can not be read and evaluated directly by machine, but nevertheless can be displayed for the commissioning personnel, e.g. in the form of an integrated picture.
  • the commissioning staff then has to acknowledge this second test protocol, whereby in the present exemplary embodiment there is only an indication of the second test protocol if the correspondence between the calculated checksums 22 and the encrypted set values 18 for the checksums is given.
  • the name 30 of the acknowledging tester is also deposited with reference to the second test protocol.
  • the programming tool 12 creates a second test protocol 32 in the form of a pdf file, with reference to the already transmitted template 16, adding the identity / name 30 of the tester and the calculated checksums 22 and encrypted setpoints 18 for the checksums.
  • a special method is used to ensure that the desired checksum 18 contained in the second test protocol 32 can not be used directly by the non-secure programming tool 12.
  • the set checksum 18 can therefore be provided, for example, as an image that can not be read and evaluated directly by machine.
  • the generation of the pdf file for the second test protocol 32 can therefore be implemented on the programming tool 12 as a separate process that is executed in isolation from the rest of the data processing.
  • the generated second test protocol 32 can optionally also be signed with an electronic signature.
  • the second test protocol 32 is transmitted in this step by the programming tool 12 to a database 36 and archived there.

Landscapes

  • Engineering & Computer Science (AREA)
  • Mechanical Engineering (AREA)
  • Health & Medical Sciences (AREA)
  • Biomedical Technology (AREA)
  • General Health & Medical Sciences (AREA)
  • Train Traffic Observation, Control, And Security (AREA)

Description

Die vorliegende Erfindung betrifft ein Verfahren zur papierlosen Inbetriebnahme einer Steuerungseinheit, insbesondere einer MiniLEU S11, einer LEU S21 und eines MSTT Signal, für eine Zugsicherungskomponente, insbesondere eine ETCS Balise, ein Signal, eine Weiche.The present invention relates to a method for paperless commissioning of a control unit, in particular a MiniLEU S11, a LEU S21 and a MSTT signal, for a train protection component, in particular an ETCS balise, a signal, a switch.

Im Besonderen im Wege der Nach- und Aufrüstung sowie des Neubaus von Eisenbahnstrecken gemäss dem neuen europaweit gültigen Zugsicherungssystem ETCS (European Train Control System) besteht ein hoher Bedarf, die entsprechenden Zugsicherungseinheiten, wie ETCS-Balisen, Signale, Bahnübergänge, Achszähler und Weichen, und ihre zugehörigen Steuerungseinheiten, wie z.B. von der Siemens AG unter den Namen MiniLEU S11, LEU S21 und MSTT Signal angeboten, in den Strecken zu verbauen und gemäss der Projektierung mit den entsprechenden Steuerungsdaten zu programmieren. Bei der nachfolgenden Abnahme dieser Steuerungseinheiten ist ein hoher Sicherheitslevel gemäss SIL4 zu erreichen, damit der Infrastrukturbetreiber von einer entsprechend hohen Zuverlässigkeit und hohen geforderten Sicherheit der abzunehmenden Steuerungseinheiten ausgehen kann.In particular, by retrofitting and upgrading, as well as the construction of new railway lines according to the new Europe-wide existing train control system ETCS (European Train Control System) there is a high demand, the corresponding train control units, such as ETCS balises, signals, level crossings, axle counters and switches, and their associated control units, such as offered by Siemens AG under the names MiniLEU S11, LEU S21 and MSTT Signal, to be installed in the lines and programmed according to the configuration with the corresponding control data. In the subsequent acceptance of these control units, a high level of security in accordance with SIL4 must be achieved, so that the infrastructure manager can assume a correspondingly high level of reliability and a high level of required security for the control units to be accepted.

Der Prozess zur Inbetriebnahme/Abnahme einer gleisseitigen Steuerungseinheit sah es bisher vor, dass das Inbetriebsetzungspersonal ausgedrückte Prüfblätter, auf denen die erwarteten Prüfsummen zur Kontrolle der auf die Steuerungseinheit geladenen Projektierungsdaten vorgedruckt waren, mit hinaus zu dem zugehörigen Streckenpunkt (Streckenpunkt ist dabei die Gesamtheit aus der Steuerungseinheit und der Zugsicherungseinheit) nehmen und nach erfolgreicher Konfiguration der Steuerungseinheit (des Zielgeräts) unterschreiben und dann archivieren musste. Angesichts der Vielzahl von in Betrieb zunehmenden Streckenpunkten und angesichts des dem Wetter mehr oder weniger schutzlos ausgesetzten Inbetriebsetzungspersonal ist es leicht vorstellbar, dass der Einsatz der papiernen Prüfblätter zu Verwechslungen und/oder Verschmutzungen und/oder Aufweichungen durch Schnee/Regen führen konnte.The process for commissioning / acceptance of a track-side control unit has hitherto provided that the commissioning personnel have printed out test sheets on which the expected checksums for checking the configuration data loaded on the control unit were printed, with the corresponding waypoint (waypoint being the totality of the Control unit and the train control unit) and after successful configuration of the control unit (the target device) to sign and then had to archive. Given the multitude of increasing route points in operation and given the weather more or less exposed commissioning personnel, it is easy to imagine that the use of papiernen test sheets could lead to confusion and / or contamination and / or softening by snow / rain.

Weiter wird in der deutschen Patentanmeldung DE 10 2007 006130 A1 ein Balisenprogrammiergerät offenbart, wobei die mittels des Geräts neu eingespeicherten Daten zurückgelesen und verglichen werden. Auch hier ist damit die Abnahme in einer dem Sicherheitslevel SIL4 entsprechenden Weise nicht gelöst.Next is in the German patent application DE 10 2007 006130 A1 discloses a Balisenprogrammiergerät, wherein the data re-stored by means of the device are read back and compared. Here, too, the decrease in a manner corresponding to the security level SIL4 is not solved.

Der vorliegenden Erfindung liegt daher die Aufgabe zugrunde, ein Verfahren zur papierlosen Inbetriebnahme einer Steuerungseinheit für eine Zugsicherungskomponente anzugeben, die dem Inbetriebnahme die Vornahme der Inbetriebnahme erleichert und dabei gleichzeitig den geforderten Sicherheitslevel gemäss SIL4 einhält. Die Steuerungseinheit wird im Sinne dieser Anmeldung auch synonym als Zielsystem angesehen.The present invention is therefore based on the object of specifying a method for the paperless commissioning of a control unit for a train control component, which facilitates the commissioning of commissioning while at the same time maintaining the required safety level according to SIL4. For the purposes of this application, the control unit is also regarded synonymously as the target system.

Diese Aufgabe wird erfindungsgemäss durch ein Verfahren zur papierlosen Inbetriebnahme einer Steuerungseinheit, insbesondere einer MiniLEU S11, einer LEU S21 und eines MSTT Signal, für eine Zugsicherungskomponente, insbesondere eine ETCS Balise, ein Signal, eine Weiche, einen Bahnübergang, einen Achszähler, gelöst, welches die folgenden Schritte umfasst:

  1. a) Bereitstellen von prüfungsrelevanten Daten mittels eines Projektierungswerkzeugs für ein Programmierwerkzeug, wobei die prüfungsrelevanten Daten die Steuerungsdaten für die Zugbeeinflussungseinheit, eine Vorlage für ein zweites Prüfprotokoll und verschlüsselte Sollwerte von Prüfsummen zur Kontrolle des korrekten Ladens der Steuerungsdaten auf die Steuerungseinheit;
  2. b) Programmieren der Steuerungseinheit durch das Programmierwerkzeug mit den vom Projektierungswerkszeug bereitgestellten Steuerungsdaten;
  3. c) Berechnen von Prüfsummen für die programmierten Steuerungsdaten auf der Steuerungseinheit anhand eines dem Programmierwerkzeug unbekannten Schlüssels und Übertragen dieser berechneten Prüfsummen auf das Programmierwerkzeug;
  4. d) Vergleichen der berechneten Prüfsummen mit den verschlüsselten Sollwerten für die Prüfsummen im Rahmen eines ersten Prüfprotokolls zur Bereitstellung eines zweiten Prüfprotokoll auf dem Programmierwerkzeug;
  5. e) Darstellen des Ergebnisses des ersten Prüfprotokoll auf dem Programmierwerkzeug und Quittieren einer Übereinstimmung der berechneten Prüfsummen und des verschlüsselten Sollwerts für die Prüfsummen durch einen Prüfer, und
  6. f) Erstellen des zweiten Prüfprotokolls anhand der vom Projektierungswerkzeug gelieferten Vorlage für das zweite Prüfprotokoll unter Hinzufügen der Identität des Prüfers sowie der berechneten Prüfsummen und der verschlüsselten Sollwerte für die Prüfsummen isoliert auf dem Programmierwerkzeug.
This object is achieved according to the invention by a method for paperless commissioning of a control unit, in particular a MiniLEU S11, a LEU S21 and a MSTT signal, for a train protection component, in particular an ETCS balise, a signal, a switch, a railroad crossing, an axle counter, which the following steps include:
  1. a) providing audit-relevant data by means of a programming tool configuration tool, the audit-relevant data including the train control unit control data, a second test protocol template, and encrypted checksum set values for controlling the correct loading of the control data to the control unit;
  2. b) programming the control unit by the programming tool with the control data provided by the engineering tool;
  3. c) calculating checksums for the programmed control data on the control unit from a key unknown to the programming tool and transferring these calculated checksums to the programming tool;
  4. d) comparing the calculated checksums to the encrypted set values for the checksums as part of a first audit log to provide a second audit log on the programming tool;
  5. e) representing the result of the first test protocol on the programming tool and acknowledging a compliance of the calculated checksums and the encrypted setpoint for the checksums by an examiner, and
  6. f) Creating the second test protocol from the template for the second test protocol provided by the configuration tool, adding the identity of the tester and the calculated checksums and the encrypted checksum setpoints isolated on the programming tool.

Auf diese Weise gelingt es mit diesem Verfahren unter Einsatz des Pragrammiergexäts den Streckenpunkt papierlos in Betrieb nehmen zu können bzw. mit anderen Wort gesprochen seine fehlerfreie Programmierung garantieren zu können. Das Inbetriebsetzungspersonal ist nur noch einmal aufgefordert, im Rahmen des bereitgestellten zweiten Prüfprotokolls die Übereinstimmung der berechneten Prüfsummen mit den verschlüsselten Sollwerten für die Prüfsummen zu quittieren. Das erste Prüfprotokoll kann dabei in sehr einfacher Form auf dem Programmierwerkzeug angezeigt werden, z.B. "Prüfsummenvergleich OKAY".In this way it is possible with this method using the Pragrammierungsxäts the waypoint paperless to put into operation or to speak in other words to guarantee its error-free programming. The commissioning staff is only once again requested, within the scope of the provided second test protocol, to confirm the agreement of the calculated checksums with the encrypted setpoints for the checksums. The first test protocol can be displayed in very simple form on the programming tool, eg "Checksum comparison OKAY".

Zur dauerhaften Speicherung der vorgenommenen korrekten Inbetriebnahme des Streckenpunktes kann es in einer vorteilhaften Ausgestaltung der Erfindung vorgesehen sein, dass das zweite Prüfprotokoll vom Programmierwerkzeug an eine Datenbank übertragen und in der Datenbank archiviert wird.For permanent storage of the correct startup of the route point, it may be provided in an advantageous embodiment of the invention that the second test protocol is transmitted from the programming tool to a database and archived in the database.

Ein besonders vorteilhafte Ausgestaltung des vorliegenden Verfahrens kann erzielt werden, wenn die verschlüsselten Sollwerte für die Prüfsummen in nicht maschinell les- und auswertbarer Weise an das Programmierwerkzeug übertragen werden. Auf diese Weise ist es sichergestellt, dass die berechnete IST-Prüfsumme auch tatsächlich von der Steuerungseinheit ermittelt
wurde und nicht über einen wie auch immer gearteten Fehler irrtümlich die als Vorgabe im Programmierwerkzeug enthaltene verschlüsselten Sollwerte für die Prüfsummen auch als ISTWerte ausgegeben werden. Dieses Vorgehen ist besonders darum relevant, weil die Steuerungsdaten und die damit implementierten Steuerungseinheiten dem höchsten Sicherheitslevel im Eisenbahnbereich, SIL4, entsprechen müssen, wobei das eingesetzte Programmierwerkzeug und die Software für die Konfiguration der Steuerungseinheit aber keinerlei Sicherheitslevel im Sinne eine SIL-Levels erfüllen müssen.A particularly advantageous embodiment of the present method can be achieved if the encrypted setpoint values for the checksums are transmitted to the programming tool in a non-machine readable and evaluable manner. In this way, it is ensured that the calculated actual checksum is actually determined by the control unit
was erroneously output the encoded setpoint values for the checksums as actual values in the programming tool and not via any error whatsoever. This procedure is particularly relevant because the control data and the control units implemented with it must correspond to the highest level of safety in the railway sector, SIL4, although the programming tool used and the software for the configuration of the control unit do not have to fulfill any safety level in the sense of a SIL level.

In einer weiteren vorteilhaften Ausgestaltung dieser Varianten kann es dann vorgesehen sein, dass die verschlüsselten Sollwerte für die Prüfsummen in Form eines eingebundenen Bildes übertragen werden. Derartige Bilder sind für das Programmierwerkzeug elektronisch weder les- noch auswertbar.In a further advantageous embodiment of these variants, it can then be provided that the encrypted setpoint values for the checksums are transmitted in the form of an integrated image. Such images are neither electronically nor readable for the programming tool.

Zur Übermittlung des Prüfprotokolls kann es in vorteilhafter Weise vorgesehen sein, dass das zweite Prüfprotokoll in Form einer vektorbasierten Seitenbeschreibungssprache, vorzugsweise im pdf-Format, erstellt wird.For transmission of the test protocol, it may be provided in an advantageous manner that the second test protocol in the form of a vector-based page description language, preferably in pdf format, created.

Bevorzugte Ausführungsbeispiel der vorliegenden Erfindung werden nachfolgend anhand der Zeichnung näher erläutert. Dabei zeigt die Figur in schematischer Weise den Ablauf des erfindungsgemässen Verfahrens.Preferred embodiments of the present invention will be explained in more detail with reference to the drawing. The figure shows schematically the course of the inventive method.

Die Figur zeigt in schematischer Weise den Ablauf des Verfahrens zur papierlosen Inbetriebnahme eines Streckenpunktes, wie z.B. einer Transparentdaten-ETCS-Balise als Zugbeeinflussungseinheit mit ihrer zugehörigen Steuerungseinheit 20 - auch Zielsystem genannt.The figure shows schematically the procedure of the method for paperless start-up of a waypoint, such as, e.g. a transparent data ETCS balise as Zugbeeinflussungseinheit with its associated control unit 20 - also called target system.

In einem ersten Schritt 1 stellt ein Projektierungswerkzeug 10 prüfungsrelevante Daten für ein Programmierwerkzeug 12 bereit. Das Projektierungswerkzeug 10 kann dabei beispielsweise an ein Stellwerk oder ein Leitsystem ankoppeln, von dem es die entsprechenden prüfungsrelevanten Daten erhält. Alternativ kann aber die Projektierungswerkszeug 10 auch dazu ertüchtigt sein, dass mit diesem Werkzeug die prüfungsrelevanten Daten generiert werden können. Unter den prüfungsrelevanten Daten werden im Sinne der vorliegenden Erfindung Steuerungsdaten 14 für die Zugbeeinflussungseinheit (auch als Zielsystem bezeichnet), eine Vorlage 16 für ein zweites Prüfprotokoll und verschlüsselte Sollwerte 18 von Prüfsummen zur Kontrolle des korrekten Ladens der Steuerungsdaten 14 auf die Steuerungseinheit 20.In a first step 1, a configuration tool 10 provides examination-relevant data for a programming tool 12. The project planning tool 10 can, for example, a An interlocking system or a control system from which it receives the relevant test-relevant data. Alternatively, however, the project planning tool 10 can also be trained so that the test-relevant data can be generated with this tool. In the sense of the present invention, control data 14 for the train control unit (also referred to as target system), a template 16 for a second test protocol and encrypted set values 18 of checksums for checking the correct loading of the control data 14 onto the control unit 20 are included in the test-relevant data.

In einem zweiten Schritt 2 wird die Steuerungseinheit 20 durch das Programmierwerkzeug 12 mit den vom Projektierungswerkzeug 10 bereitgestellten Steuerungsdaten 14 programmiert. Hierzu kann es vorgesehen sein, dass das Inbetriebnahmepersonal das Programmierwerkzeug 12 drahtgestützt oder auch wireless vor Ort an die Steuerungseinheit 20 ankoppelt und die Daten über die entsprechende Schnittstelle überträgt.In a second step 2, the control unit 20 is programmed by the programming tool 12 with the control data 14 provided by the configuration tool 10. For this purpose, provision may be made for the commissioning staff to connect the programming tool 12, wired or wirelessly, to the control unit 20 on site and transmit the data via the corresponding interface.

In einem dritten Schritt berechnet nun die Steuerungseinheit Ist-Prüfsummen 22 für die programmierten Steuerungsdaten 14 auf der Steuerungseinheit 20 anhand eines dem Programmierwerkzeug 12 unbekannten Schlüssels 24. Auf diese Weise ist mit dem geforderten Sicherheitslevel von SIL4 sichergestellt, dass das nicht sichere Programmierwerkzeug 12 nicht in der Lage ist, die korrekten Ist-Prüfungsummen 22 selber zu ermitteln. Die von der Steuerungseinheit 20 berechneten Ist-Prüfungsummen (es kann auch nur eine einzige Prüfsumme sein) werden dann auf das Programmierwerkzeug 12 übertragen.In a third step, the control unit now calculates actual checksums 22 for the programmed control data 14 on the control unit 20 using a key 24 unknown to the programming tool 12. In this way, with the required security level of SIL4, it is ensured that the non-secure programming tool 12 is not in is able to determine the correct actual examination sums 22 themselves. The actual test sums calculated by the control unit 20 (it may also be a single checksum) are then transferred to the programming tool 12.

In einem vierten Schritt 4 stellt das Programmierwerkzeug 12 ein erstes Prüfprotokoll 28 zusammen, indem es die ermittelten Ist-Prüfsummen 22 mit den Sollwerten 18 für die Prüfsummen automatisch vergleicht. Wichtig für die Erreichung des Sicherheitsziels SIL4 ist dabei, dass das Programmierwerkzeug 12 die Sollwerte 18 nie im Klartext (im Sinne von maschinenles- und auswertbar) zur Verfügung hat, sondern durch eine vorgebbare Verknüpfung der von der Steuerungseinheit 20 ermittelten IST-Prüfsummen 22 mit den von dem Projektierungswerkzeug gelieferten und mit einem dem Programmierwerkzeug 12 nicht bekannten Schlüssel 26 verschlüsselten Sollwerte 18 für die Prüfsummen im Falle einer korrekten Programmierung der Steuerungseinheit 20 auf einen vordefinierten konstanten Wert kommt. Die Prüfung ist dann abgeschlossen, wenn dieser vordefinierte konstante Wert erreicht worden ist.In a fourth step 4, the programming tool 12 assembles a first test protocol 28 by automatically comparing the determined actual checksums 22 with the set values 18 for the checksums. Important for achieving the security goal SIL4 is that the programming tool 12, the setpoints 18 never in plain text (in the sense of machine readable and evaluable) has available, but by a predetermined combination of the determined by the control unit 20 IST checksums 22 with the supplied by the configuration tool and with the programming tool 12 not known key 26 encrypted setpoint values 18 for the checksums in the case of a correct programming of the control unit 20 comes to a predefined constant value. The test is completed when this predefined constant value has been reached.

In einem fünften Schritt 5 werden die berechneten Prüfsummen 22 und die verschlüsselten Sollwerte 18 für die Prüfsummen auf dem Programmierwerkzeug 12 für das Inbetriebnahmepersonal/Prüfer 29 angezeigt. Dies kann zum Beispiel auch nur in der vereinfachten Form erfolgen, dass das Programmiergerät anzeigt "Prüfsumme(n) OKAY". Dabei sind die Sollwerte 18 für die Prüfsummen von dem Projektierungswerkzeug 10 so an das Programmierwerkzeug 12 geliefert worden, dass die Sollwerte 18 nicht direkt maschinell les- und auswertbar ist, aber für das Inbetriebnahmepersonal trotzdem dargestellt werden kann, z.B. in Form eines eingebundenen Bildes. Das Inbetriebnahmepersonal hat dieses zweite Prüfprotokoll dann zu quittieren, wobei es im vorliegenden Ausführungsbeispiel überhaupt nur zu einer Anzeige des zweiten Prüfprotokolls kommt, wenn die Übereinstimmung der berechneten Prüfsummen 22 und der verschlüsselten Sollwerte 18 für die Prüfsummen gegeben ist. Im Rahmen dieser Quittierung wird mit Bezug auf das zweite Prüfprotokoll auch der Name 30 des quittierenden Prüfers hinterlegt.In a fifth step 5, the calculated checksums 22 and the encrypted checksum setpoints 18 are displayed on the commissioning / review tool 29 programming tool 12. This can also be done, for example, only in the simplified form that the programmer displays "Checksum (s) OK". The setpoint values 18 for the checksums have been supplied by the configuration tool 10 to the programming tool 12 in such a way that the setpoint values 18 can not be read and evaluated directly by machine, but nevertheless can be displayed for the commissioning personnel, e.g. in the form of an integrated picture. The commissioning staff then has to acknowledge this second test protocol, whereby in the present exemplary embodiment there is only an indication of the second test protocol if the correspondence between the calculated checksums 22 and the encrypted set values 18 for the checksums is given. Within the scope of this acknowledgment, the name 30 of the acknowledging tester is also deposited with reference to the second test protocol.

Mit diesen Angaben erstellt das Programmierwerkzeug 12 in einem sechsten Schritt 67 unter Rückgriff auf die bereits übermittelte Vorlage 16 ein zweites Prüfprotokoll 32 in Form einer pdf-Datei unter Hinzufügen der Identität/Namen 30 des Prüfers sowie der berechneten Prüfsummen 22 und der verschlüsselten Sollwerte 18 für die Prüfsummen. Auch hierbei wird wie schon weiter oben beschrieben ein besonderes Verfahren angewendet, um sicherzustellen, dass die im zweiten Prüfprotokoll 32 enthaltene Soll-Prüfsumme 18 nicht direkt von dem nicht-sicheren Programmierwerkzeug 12 verwendet werden kann. Die Soll-Prüfsumme 18 kann diesbezüglich also beispielsweise als nicht direkt maschinell les- und auswertbares Bild bereitgestellt werden. Die Erzeugung der pdf-Datei für das zweite Prüfprotokoll 32 kann daher auf dem Programmierwerkzeug 12 als eigener Prozess implementiert, der abgeschottet von der übrigen Datenverarbeitung ausgeführt wird.Using this information, in a sixth step 67, the programming tool 12 creates a second test protocol 32 in the form of a pdf file, with reference to the already transmitted template 16, adding the identity / name 30 of the tester and the calculated checksums 22 and encrypted setpoints 18 for the checksums. Here too, as described above, a special method is used to ensure that the desired checksum 18 contained in the second test protocol 32 can not be used directly by the non-secure programming tool 12. The set checksum 18 can therefore be provided, for example, as an image that can not be read and evaluated directly by machine. The generation of the pdf file for the second test protocol 32 can therefore be implemented on the programming tool 12 as a separate process that is executed in isolation from the rest of the data processing.

In einem weiteren Schritt 7 kann das erzeugte zweite Prüfprotokoll 32 optional noch mit einer elektronischen Signatur signiert werden. Wird dies mit einer entsprechenden vertrauenswürdigen PKI-Infrastruktur ausgeführt, wird hiermit dieselbe Verbindlichkeit wie die einer händischen Unterschrift auf Papier erreicht. Ausserdem wird das zweiten Prüfprotokoll 32 in diesem Schritt vom Programmierwerkzeug 12 an eine Datenbank 36 übertragen und dort archiviert.In a further step 7, the generated second test protocol 32 can optionally also be signed with an electronic signature. When this is done with a trusted PKI infrastructure, the same liability as a hand-written paper signature is achieved. In addition, the second test protocol 32 is transmitted in this step by the programming tool 12 to a database 36 and archived there.

Claims (5)

  1. Method for paper-free commissioning of a control unit (20), in particular of a MiniLeu S11, a LEU S21 and a MSTT signal for a train securing component, in particular an ETCS Balise, a signal, a railway switch, comprising the following steps:
    a) providing inquiry relevant data by means of a projecting tool (10) for a programming tool (12), wherein the inquiry relevant data comprise the control data (14) for the train securing unit, a template (16) for a second test protocol (32) and encrypted set points (18) for check sums to control the correct loading of control data (14) on the control unit (20) ;
    b) programming the control unit (20) by means of the programming tool (12) with the control data (14) provided by the projecting tool (10);
    c) calculating actual check sums (22) for the programmed control data (14) on the control unit (20) by means of a key (24), unknown to the programming tool (12), and transferring these calculated check sums (22) to the programming tool (12);
    d) comparing these calculated check sums (22) with the encrypted set points (18) for the check sums within the framework of a first test protocol in order to provide a second test protocol (28) on the programming tool (12) ;
    e) representing the results of the first test protocol on the programming tool (12) and confirming an accordance of the calculated check sums (22) and of the encrypted set points (18) for the check sums by means of an examiner (29), and
    f) generating the second test protocol (32) by means of the template (16), delivered by the projecting tool (19), for the second test protocol (32) by adding the identity (30) of the examiner (29) as well as the calculated check sums (22) and the encrypted set points (18) for the check sums, isolated on the programming tool (12).
  2. Method according to claim 1,
    characterized in that
    the second test protocol (32) is transferred to a data base (36) and archived in that data base (36) by the programming tool (12).
  3. Method according to claim 1 or 2,
    characterized in that
    the encrypted set points (18) for the check sums are transferred in a non-automatically readable and evaluable manner to the programming tools (12).
  4. Method according to claim 3,
    characterized in that
    the encrypted set points (18) for the check sums are transferred in the form of an integrated picture.
  5. Method according to claim 1 to 4,
    characterized in that
    the second test protocol (32) is created in the form of a vector-based page description language, preferably in pdf format.
EP14163390.9A 2014-04-03 2014-04-03 Method for paper-free commissioning of a route point for rail-bound traffic Active EP2927088B1 (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
EP14163390.9A EP2927088B1 (en) 2014-04-03 2014-04-03 Method for paper-free commissioning of a route point for rail-bound traffic

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
EP14163390.9A EP2927088B1 (en) 2014-04-03 2014-04-03 Method for paper-free commissioning of a route point for rail-bound traffic

Publications (2)

Publication Number Publication Date
EP2927088A1 EP2927088A1 (en) 2015-10-07
EP2927088B1 true EP2927088B1 (en) 2017-09-13

Family

ID=50473067

Family Applications (1)

Application Number Title Priority Date Filing Date
EP14163390.9A Active EP2927088B1 (en) 2014-04-03 2014-04-03 Method for paper-free commissioning of a route point for rail-bound traffic

Country Status (1)

Country Link
EP (1) EP2927088B1 (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP3854659A1 (en) 2020-01-22 2021-07-28 Siemens Mobility AG Method for paper-free commissioning of a route point for rail-bound traffic

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107985348B (en) * 2017-10-20 2021-01-26 北京全路通信信号研究设计院集团有限公司 Control method and train operation control system

Family Cites Families (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
ITSV20020056A1 (en) * 2002-11-14 2004-05-15 Alstom Transp Spa DEVICE AND METHOD OF VERIFICATION OF LOGIC SOFTWARE MOTORS TO COMMAND RAILWAY SYSTEMS, IN PARTICULAR OF STATION SYSTEMS
DE102007006130A1 (en) * 2007-02-02 2008-08-07 Siemens Ag Method, mobile operating device and arrangement for transmitting data to a route element of the track-bound traffic

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
None *

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP3854659A1 (en) 2020-01-22 2021-07-28 Siemens Mobility AG Method for paper-free commissioning of a route point for rail-bound traffic

Also Published As

Publication number Publication date
EP2927088A1 (en) 2015-10-07

Similar Documents

Publication Publication Date Title
DE102012217591A1 (en) Method and arrangement for monitoring a track section delimited by two axle counting sensor units
EP2683589B1 (en) Railway control system
EP2121409B1 (en) Method, mobile control unit, and arrangement for the transmission of data to a route element used in guided ground transport
EP3782870A1 (en) Method and route control centre for operating a railway track
WO2016000905A1 (en) Method for operating a rail vehicle
EP2927088B1 (en) Method for paper-free commissioning of a route point for rail-bound traffic
EP3938265A1 (en) Method for determining a track occupancy, and axle counting device
DE102014206741A1 (en) Method and system configuration for the reortening of a rail vehicle
DE102008045050A1 (en) Method for automatic train control in European train control system track, involves using identical procedures for formation of telegrams to control balises for point-like automatic train control and wireless-based automatic train control
EP3795451B1 (en) Method for locating a vehicle on a station provided for the vehicle stopping
DE102012221714A1 (en) Method for fault disclosure in interlocking computer system with control channel, involves comparing pixel data of display with process data of process image of state information of reference system for display-protection
EP2193973B1 (en) Method and device for testing units that influence trains with status data of track signals in relay interlocking systems
EP3854659A1 (en) Method for paper-free commissioning of a route point for rail-bound traffic
DE102012217814A1 (en) Slow driving of a railway line
EP3013666B1 (en) Method for operating a train control system and train control system
DE102014201551A1 (en) Method for error disclosure in a interlocking computer system and interlocking computer system
EP3109127A1 (en) Method for signalling an expansion of a movement authority from a route control station to a positioning body
DE102017212179A1 (en) Correction of a measured position value of a rail-bound vehicle
DE102013209546A1 (en) Method for replacing a first interlocking by a second interlocking
EP2945831B1 (en) Method and apparatus for etcs l1 and/or l2 - train control
WO1998007609A1 (en) Process and device for control and monitoring a traffic control system
EP2117904B1 (en) Method for displaying relevant control status information about components in a manner incorporating all sections
DE102018115759B3 (en) Balisensteuerungsvorrichtung
DE102012212780A1 (en) Operating device for inputting operating commands for controlling a technical system
WO2016016003A2 (en) Method and device for operating a railway safety system

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

AX Request for extension of the european patent

Extension state: BA ME

17P Request for examination filed

Effective date: 20160304

RBV Designated contracting states (corrected)

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

GRAP Despatch of communication of intention to grant a patent

Free format text: ORIGINAL CODE: EPIDOSNIGR1

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: GRANT OF PATENT IS INTENDED

RIC1 Information provided on ipc code assigned before grant

Ipc: B61L 3/12 20060101AFI20170314BHEP

Ipc: B61L 27/00 20060101ALI20170314BHEP

Ipc: B61L 19/06 20060101ALI20170314BHEP

INTG Intention to grant announced

Effective date: 20170413

GRAS Grant fee paid

Free format text: ORIGINAL CODE: EPIDOSNIGR3

GRAA (expected) grant

Free format text: ORIGINAL CODE: 0009210

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE PATENT HAS BEEN GRANTED

AK Designated contracting states

Kind code of ref document: B1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

REG Reference to a national code

Ref country code: GB

Ref legal event code: FG4D

Free format text: NOT ENGLISH

REG Reference to a national code

Ref country code: CH

Ref legal event code: EP

Ref country code: CH

Ref legal event code: NV

Representative=s name: SIEMENS SCHWEIZ AG, CH

REG Reference to a national code

Ref country code: IE

Ref legal event code: FG4D

Free format text: LANGUAGE OF EP DOCUMENT: GERMAN

REG Reference to a national code

Ref country code: AT

Ref legal event code: REF

Ref document number: 927824

Country of ref document: AT

Kind code of ref document: T

Effective date: 20171015

REG Reference to a national code

Ref country code: DE

Ref legal event code: R096

Ref document number: 502014005407

Country of ref document: DE

REG Reference to a national code

Ref country code: NL

Ref legal event code: MP

Effective date: 20170913

REG Reference to a national code

Ref country code: LT

Ref legal event code: MG4D

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20170913

Ref country code: LT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20170913

Ref country code: HR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20170913

Ref country code: NO

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20171213

Ref country code: FI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20170913

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: BG

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20171213

Ref country code: RS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20170913

Ref country code: LV

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20170913

Ref country code: ES

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20170913

Ref country code: GR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20171214

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: NL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20170913

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: PL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20170913

Ref country code: CZ

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20170913

Ref country code: RO

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20170913

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: EE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20170913

Ref country code: IT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20170913

Ref country code: IS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180113

Ref country code: SM

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20170913

Ref country code: SK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20170913

REG Reference to a national code

Ref country code: DE

Ref legal event code: R097

Ref document number: 502014005407

Country of ref document: DE

PLBE No opposition filed within time limit

Free format text: ORIGINAL CODE: 0009261

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: NO OPPOSITION FILED WITHIN TIME LIMIT

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: DK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20170913

26N No opposition filed

Effective date: 20180614

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20170913

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MC

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20170913

Ref country code: SI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20170913

REG Reference to a national code

Ref country code: BE

Ref legal event code: MM

Effective date: 20180430

GBPC Gb: european patent ceased through non-payment of renewal fee

Effective date: 20180403

REG Reference to a national code

Ref country code: IE

Ref legal event code: MM4A

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: LU

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20180403

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: GB

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20180403

Ref country code: BE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20180430

REG Reference to a national code

Ref country code: CH

Ref legal event code: PUE

Owner name: SIEMENS MOBILITY AG, CH

Free format text: FORMER OWNER: SIEMENS SCHWEIZ AG, CH

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: FR

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20180430

Ref country code: IE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20180403

REG Reference to a national code

Ref country code: DE

Ref legal event code: R082

Ref document number: 502014005407

Country of ref document: DE

Representative=s name: MAIER, DANIEL OLIVER, DIPL.-ING. UNIV., DE

Ref country code: DE

Ref legal event code: R081

Ref document number: 502014005407

Country of ref document: DE

Owner name: SIEMENS MOBILITY AG, CH

Free format text: FORMER OWNER: SIEMENS SCHWEIZ AG, ZUERICH, CH

REG Reference to a national code

Ref country code: AT

Ref legal event code: PC

Ref document number: 927824

Country of ref document: AT

Kind code of ref document: T

Owner name: SIEMENS MOBILITY AG, CH

Effective date: 20190612

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: TR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20170913

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: PT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20170913

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MK

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20170913

Ref country code: HU

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT; INVALID AB INITIO

Effective date: 20140403

Ref country code: CY

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20170913

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: AL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20170913

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: CH

Payment date: 20230720

Year of fee payment: 10

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: DE

Payment date: 20240619

Year of fee payment: 11

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: AT

Payment date: 20240311

Year of fee payment: 11