EP3071469A1

EP3071469A1 - Computerised method and device for interlocking a railway route

Info

Publication number: EP3071469A1
Application number: EP14824850.3A
Authority: EP
Inventors: Paul-Louis VULDY; Guy ROCAGEL
Original assignee: Ineo Urban Transportation Solutions SNC
Current assignee: Ineo Urban Transportation Solutions SNC
Priority date: 2013-12-30
Filing date: 2014-12-29
Publication date: 2016-09-28
Anticipated expiration: 2034-12-29
Also published as: CA2972298C; EP3071469B1; WO2015101610A1; CA2972298A1

Abstract

The invention relates to an interlock switching system suited to a track layout plan including three ends, characterised in that it includes: a. at each end, a so-called origin/destination block (121, 122, 123, 124, 1021, 1022), capable of being mounted in a rack and of controlling all the interlocks related to the clearances as well as the route-end interlocks; b. a so-called switching block (131, 133, 1121, 1122, 1123, 1124), capable of being mounted in a rack and capable of controlling the switching of a point rail and the associated interlocks; c. a functional digital link, connecting the blocks in a computer ring network, said blocks being capable of communicating with one another; and d. a processing and control unit (250) capable of transmitting a command over the functional digital link towards the blocks in order to form a route. The invention also relates to a method for implementing said device.

Description

METHOD AND COMPUTERIZED DEVICE FOR INTERLOCKING

OF A RAILROAD ROUTE

The invention relates to a method and a computerized device for engaging a railway route. The invention belongs more particularly, but not exclusively, to the field of control and signaling applied to a rail network, for the movement of trains, subways or trams. The invention is adaptable to any type of guided transport network, with or without rails, such as, for example, a circulation network of a monorail or an automatic vehicle on tires, and whose routes are determined by interlocking bifurcation devices, such as switches.

The route of a guided vehicle on a network, for example a train on a rail network, is determined by the engagement of bifurcation devices, such as needles, and signaling devices, for example, emitting signal signals. stop or passage authorization.

The term "engagement" designates a maneuver immobilizing a control member in a given configuration, this control member driving a switchgear or a signaling apparatus, and prohibiting the maneuvering of this member under conditions that are incompatible with safety. Such engagement also occurs between the control members implementing multiple conditions along a route taken by the guided vehicle, which conditions are maintained throughout the passage of the vehicle on this route.

The interlocking (English) must meet the requirements of operation and safety defined by standards, declined from the basic device to the complete system. Thus, these systems are defined in particular by safety levels known as "SIL", the acronym for "Safety Integrated Level" according to five levels of increasing requirements ranging from SILO to SIL4.

According to the prior art, the interlockings are of mechanical type, for example for the control, called "on the job", of a switch by a lever, the levers controlling the needles of the route being locked in position by purely mechanical or electromechanical systems, or electrical type via electromechanical relays, or computer type. A maneuver station, or switch, for the control of a route, is specific to a geographical area and organized according to 4 levels:

a human-machine interface or HMI, which consists, for example, of levers in a mechanical system, buttons and optical control panels in the case of an electrical system or a screen and a keyboard in the case of a computer system;

- The engagement, it is constituted, for example, an interlocking table implementing rods and other mechanical devices connecting the control levers for a purely mechanical system, electromechanical safety relays, connected according to a wired logic, for electrical or computer systems, or specific computer interlocking systems;

- the campaign, which includes needles and signage;

- an interface between the campaign and the engagement.

The life of such a maneuver station is about 30 years, see more. As a result, it is common for several technologies to coexist on the same network, or for the evolution of a railway network to require the integration of new technology with existing technology, while maintaining the required level of security and capacity. maintenance of the device.

Electrical workstations remain widespread but do not allow complex programming of routes without the addition of a software layer.

Said software layer comprises a memory in which is stored a list of logic rules that reproduce the secure engagement states of the control members, and controls the compatibility of the states of these bodies with said rules. EP 06 83082 discloses such a device.

Such an electrical / computer operation station has the drawbacks of the electrical substations, namely long cable lengths, bulky relay stations and low modularity, with the additional need to adapt the software layer, ie that is to say to define new rules in the form of logical equations, at each modification or evolution of the network controlled by this station.

These computerized electrical workstations coexist with purely computer maneuver stations, which are presented as black boxes optimized for a given configuration.

WO 03/070537 discloses such a computer maneuvering station. Thus, these devices of the prior art do not make it possible to easily achieve a network evolution, any modification of said network requiring a new parameterization and the realization of long and expensive validation tests.

The document FR 2 958 248 describes a device for managing the movement of a train on a railway network, said network being subdivided into a plurality of resources each managing an engagement, said resources not being interconnected. Thus, the computer engagement is achieved by virtually associating said resources for each route. The demonstration of the security of such a system is complex because it must take into account the combinatorics of all logical equations involving each resource individually. Thus, the security of such a system must be fully demonstrated for each network or for any modification of an existing network.

The document FR 2 739 824 describes a computer system for managing the interlocking of a rail network implementing a distributed logic, in which specific virtual finite state machines supporting each element or equipment of the channel plane (signal, needle etc ...), and communicate between it, step by step, through a logical channel. Thus each virtual finite state machine of this device of the prior art communicates with its supervisor by logical information, including when said supervisor is not selected by the route, which slowed the transmission of data. Once the system is set up as a whole, it is compiled and any subsequent modification of the channel plan requires regeneration of all the virtual machines and the corresponding computer code. Finally, this device of the prior art which remains a computer maneuvering station, requires unrolling long cable lengths.

The invention aims at solving the drawbacks of the prior art and for this purpose concerns an interlocking actuation system adapted to a track plan comprising 3 ends, which system comprises:

at. at each end, a block of origin / destination, able to be rack mounted and to support all the interlocks related to the authorizations of movement and the interlockings in end of route;

a so-called switching block, adapted to be mounted in the rack and to control the operation of a needle and the associated interlocking; vs. a functional digital link, connecting the blocks in a ring-shaped computer network, said blocks being able to communicate with one another;

a processing and control unit capable of transmitting on the functional digital link a command to the blocks in order to constitute a route;

each block comprising

a generic database, hardware and software;

an application software layer relating to each type of block;

a parameterization layer relating to the application.

Thus, whatever the complexity of the channel plan, the system object of the invention uses a combination of 2 types of generic physical blocks built on the same hardware and software base, connected in a ring network. The security of the system is carried by the blocks that meet an SIL4 safety level according to CENELEC standards, in particular the EN 50126, EN 50128 and EN 50129 standards. Thus, whatever the complexity of the network, the route is defined by an original block and a destination block, which are carried by the same type of block called origin / destination. The control equations of each type of block are always the same, only changes their setting to take into account the campaign. The processing and control unit whose security level is SILO merely sends the route information, origin block - destination block, programmed by a supervisor, and does not intervene in the safety of the interlockings. . The functions of the blocks are prevalidées so that the study times are reduced, the certification of an installation concerns only the integration, that is to say the setting of each block to adapt it to the campaign and to the environment of the traffic network. The distribution of the route planning and interlocking functions, and the integration of security functions into blocks, allows the device to be adapted to any existing network or first installation, from two types of blocks. generic. The interlocking table corresponding to a validation of the route is built step by step between the blocks, this progression being limited to the blocks concerned by the route which is made possible by the functional digital link according to a ring computer network. . The blocks carry most of the security functions of the system and all sharing the same hardware and software base, the security of this database needs to be demonstrated only once and only the security level of the security layer. Parameterization must be demonstrated for the intended application. The interlocking state of all blocks constituting the route is systematically constructed and verified regardless of the route, both physically simpler, all the blocks being installed, including rack, in a local close to the interface between the engagement and the campaign, either "on the job", close to means (needles, signals) in one or more cabinets. Maintenance is also simplified, the number of equipment being reduced.

The term "on the job" refers to the conditions of realization of an action whose result on the campaign is visible directly by the operator carrying out said action and by extension the location of the means for the implementation of this action.

Throughout the text, the term "campaign" refers to all signaling and control equipment on or in the vicinity of the track, such as signs or signal lights, hands and their operating devices, the power cables or the circuits for detecting the presence of a vehicle on the track

The invention is advantageously implemented according to the embodiments described below which are to be considered individually or in any technically operative combination.

Advantageously, each block has 3 functional states:

- free;

- selected;

- triggered.

These 3 functional states can engage and release any route, by a sequential passage from one state to another and closer to the blocks constituting the route. Conditions of transition from one functional state to another constitute the intrinsic safety of each block.

Advantageously, the activated state of a block comprises:

- a functional state "switched on uncontrolled";

- a "switched on" functional state.

Thus, the security of the device is further improved. The transition from one state to another implements conditions relating to the campaign and the control of the equipment controlled by said block. It is essentially at this stage that the validation of the state of the equipment, and consequently of the parameterization of the block, intervenes in the validation of a route.

According to an advantageous embodiment, the system which is the subject of the invention comprises e. a remote monitoring unit;

f. a digital remote monitoring link, separate from the functional digital link, connecting the blocks to said remote monitoring unit.

Thus, the operation of the blocks is individually controllable remotely, which allows to locate quickly any malfunction. Since the digital links are distinct, remote monitoring is feasible even in the event of a break in the functional digital link and makes it possible in particular to detect such a break.

Advantageously, each block has an input / output port for the digital connection of a maintenance tool. Thus, the maintenance of each block is facilitated.

Advantageously, each block comprises:

an all-or-nothing input whose restrictive state is "0", able to acquire a binary information relayed by a switching relay;

an on-off output capable of delivering a power supply to a switching relay or a supply loop of a device

Thus the system object of the invention is able to be interfaced with a relay interlock device.

According to one embodiment, the system which is the subject of the invention comprises a block comprising a so-called proportional input adapted to the acquisition of information of variable value. The said input is, according to alternative embodiments, a digital input or an analog input adapted to receive a proportional digital or analog signal. Thus, the system that is the subject of the invention is capable of managing interlockings requiring the acquisition of a proportional signal, for example a signal corresponding to the control of the lighting of a signal lamp.

According to a particular embodiment of the system which is the subject of the invention, adapted to a channel plane comprising an oblique crossing, said system comprises a switching block controlling a fictitious hand. Thus, the system that is the subject of the invention is suitable for managing the interlocking of a lane plan comprising a lane apparatus that can be traveled in several ways, but without a moving part.

Advantageously, the blocks of the system that are the subject of the invention comprise means for mounting them in a rack which mounting means comprise polarizers cooperating with the cabinet and prohibiting the mounting of one type of block in the place of another, in said wardrobe. Thus, said blocks are easily installed in cabinets, in a switching station or on the job, the keying means ensure the safety of the operations of replacing a block.

The invention also relates to a method for carrying out an engagement corresponding to a route and implementing a system according to the invention, which method comprises the steps of:

u. passing a so-called upstream block from the free state to the selected state;

v. transmitting said upstream block to the block, said downstream, concerned with the route and the next immediately according to the functional digital link, a selection command.

Thus, the interlocking process progresses from block to block, selected by the route, according to the ring network, which makes it possible to reduce, for a given route, the combinatorics of the possible states of each block with respect to this route. The blocks being linked in a ring network, the last validation implements the destination block and the original block and therefore corresponds to the validation of the selection of the entire route. Whatever the number of blocks thus connected by the computer link, depending on the target route plan, the operations allowing the activation of the route only concern the blocks of this route which allows a quicker engagement and release in comparing systems of the prior art where the latching and release information flows from close on the set of finite state machines constituting the network.

The method of the invention is applicable regardless of the type of upstream block and downstream block. According to a particular embodiment, the upstream block is a block origin / destination and steps u) and v) are performed only if said block is in the free state and is selected as the origin or destination of a route.

Alternatively, the upstream block is a needle block and the transition to the selected state is achieved only if said block is in the free state, said passage causing the emission of an electric needle control. Thus, the hands are moved to their position corresponding to the route during the selection of this route.

Advantageously, the method which is the subject of the invention comprises at the end of steps u) and v), steps consisting of:

w. when all blocks in the route are in the selected state, move the origin block to the on state;

x. transmitting to each of the downstream blocks of the route an interlocking command.

Thus, the initiation of the route is performed only after the validation of the selection thereof, the selection conditions specific to each block having been made individually.

Advantageously, the engagement method according to the invention implements the states "locked uncontrolled" and "controlled controlled" blocks according to this embodiment of the system object of the invention, the upstream block passing during the step w) in the functional state "switched on uncontrolled", and comprises after step x) the steps of:

there. for each block traversed by the route, check the conditions of transition from the state "switched on uncontrolled" to the state "activated controlled" and if these conditions are verified pass to the state "activated controlled";

z. for each block traversed by the route, transmit to the source block information attesting to its transition to the "controlled controlled" state. These steps make it possible, after the formation of the route at the end of step x), to ensure the conformity of the configuration of the campaign opposite the intended route before authorizing any passage on said route.

Advantageously, when the block is a needle block, the receipt of the command of step x) generates at said block, the issuance of an immobilization command of the needle, and then, during the step y), the control by said block of the position of the needle, the transition to the state "activated controlled" said block being realized if the result of this control corresponds to the position of the needle adapted to the route.

Thus, the method and the device that are the subject of the invention combine a central creation, a training and a validation of the route, by the dialogue between the blocks via the functional digital link, the control and security functions being distributed locally to the network. the scale of each block.

The invention also relates to a method for carrying out the route of a route by a vehicle on a guidance network between an origin end and a destination end, using a device according to one of the embodiments of the invention. invention, which method comprises steps of:

i. defining a route by an originating end and a destination end and transmitting said route to the processing and control unit;

ii. transmit by the processing and control unit, a so-called route creation command to the attention of the origin / destination block of the origin end;

iii. select the route according to steps u) and v) of the engagement method according to the invention;

iv. engage the route according to steps w) and x) of the engagement method according to the invention;

v. control the route according to steps y) and z) of the engagement method according to the invention;

vi. open the signal controlled by the original block and authorize the passage of the vehicle;

vii. after the passage of the vehicle, destroy the route and return the blocks corresponding to the free state.

According to one embodiment, step vii) is initiated by the original block and comprises a step of:

AVII. disabling the interlocking of the route by the passage of step by step on the functional digital link of the blocks in the free state as the zones monitored by said blocks are crossed. According to another embodiment, step vii) is automatically triggered by crossing the route and comprises the steps of:

bVII. detect the crossing of the route by the vehicle;

cvii. releasing the original block and transmitting to the downstream block a command to deactivate the engagement for the passage to the free state step by step along the functional digital link blocks of the route.

Thus, the device and method that are the subject of the invention are suitable for implementing a transit interlock and automatic destruction at destination.

The invention is explained below according to its preferred embodiments, in no way limiting, and with reference to FIGS. 1 to 1 1 in which:

FIG. 1 is an example of a provisional service-type track plan comprising four ends and two conjugate hands;

FIG. 2 shows an exemplary embodiment of the system that is the subject of the invention applied to the track section of FIG. 1;

- Figure 3 schematically describes the environment of the system object of the invention and the various connections between the constituent elements;

- Figure 4 shows in a front perspective view, an embodiment of a block of the system object of the invention;

FIG. 5 gives a schematic example of the inputs-outputs of a needle block for the implementation of the system which is the subject of the invention;

FIG. 6 schematically illustrates an example of the input-outputs of an origin / destination block of the system which is the subject of the invention;

FIG. 7 is a synopsis of the implementation of the creation of a route according to the method which is the subject of the invention;

FIG. 8 represents a synopsis of the automatic destruction at origin of a route according to one embodiment of the method which is the subject of the invention;

FIG. 9 is a synopsis of the automatic destruction intended for a route according to one embodiment of the method which is the subject of the invention;

FIG. 10 is an example of a two-ended track plan comprising no switch whose interlock management is implemented according to one embodiment of the system which is the subject of the invention; and FIG. 11 is an example of a track plan comprising sections with more than two ends and without a switch whose interlocking management is implemented according to an embodiment of the system which is the subject of the invention, comprising fictitious switches, Figure 1 1A represents the actual track plane, Figure 1 1 B the track plan used for the implementation of the system object of the invention.

Figure 1, the system and method of the invention apply to a signaling system for the passage of a guided vehicle, more particularly a train, a tram or a subway, on a section of track having an origin and a destination and one or more needles (11 1, 113). Thus, the system and method that are the subject of the invention constitute a system for interlocking a route with or without the maneuvering of hands. According to a simple exemplary embodiment, the device and the method which are the subject of the invention apply to a temporary service-type track (100) having 4 ends (101, 102, 103, 104) and two needles (1 11 , 1 13) conjugated. The device and the method that are the subject of the invention make it possible to distribute the interlockings. To this end, the track section (100) on which the system object of the invention is installed is divided into geographical areas (121, 122, 123, 124, 131, 133). These zones have specific characteristics depending on whether they are linked to a needle, called "Ag Zone" (131, 133), or at one end, which end is an origin or a destination, called "Gold Zone / Des" (121 , 122, 123, 124). Each zone includes specific track equipment. Thus, a Zone Gold / Des comprises, at least, a device for detecting the presence of a vehicle on the track. For rail-type use, such a device takes the form of a track circuit, hereinafter referred to as "CdV", or a pedal. A VC consists of an electrical circuit formed between an isolated portion of the rails, which circuit is modified in the presence of the axle of a train on said portion, thus allowing the presence of said train to be detected. A pedal is a mechanical or magnetic detection device sensitive to the mass of the vehicle passing on said device. According to the embodiment, the Gold / Des Zone comprises additional track equipment such as a signal (121 1, 1221, 1231, 1241).

An Ag Zone with a switch includes the following lane equipment in the field:

a needle and its maneuvering device, a device for controlling said needle,

a device for detecting the presence of a vehicle in said needle. According to the track plan and a particular embodiment of the device which is the subject of the invention, an Ag Zone comprises a so-called fictitious needle. Such a dummy needle is created in the switch station but does not control any device in the field. It corresponds for example to a real hand but only manual control, or to a device of way to be traveled in many ways but without moving part, such as an oblique crossing.

The dummy needle has the same control status and engagement information as a real needle. It allows to translate incompatibilities between routes

According to a nonlimiting exemplary embodiment, the device (11 1 1, 131 1) for the needle comprises an electric motor for moving the blades, equipped with a key switch for the emergency maneuver. The control of said motor is carried out by means of NS1 type relays for the control of the needle on the right and the needle on the left. The control device aims to verify that the conditions of passage of a train on the needle are well verified, that is to say that said needle is in the target position. These control devices are known from the prior art and consist in controlling the gluing, the takeoff, the concordance and the locking of the needle blades or the end stroke of the displacement motor of said blades. These controls are for example reflected by the state of a type NS1 relay. The presence detection device is, according to an exemplary embodiment, a VC.

Type NS1 relays are electromechanical relays compliant with the SIL4 safety level according to EN 50129, suitable for cabinet mounting according to a standard interface.

Figure 2, to manage the interlocking corresponding to each of these areas, the system object of the invention assigns each of them a generic control device, said block. Thus, according to this exemplary embodiment, a needle zone (Ag zone) is managed by a needle block (231, 233), called "Ag block", and an area of origin or destination (Gold Zone / Des ) is managed by a block of origin / destination (221, 222, 223, 224), called "block Gold / Des". Said blocks are able to generate commands for track equipment, and to receive information from said track equipment in the area. Thus, unlike distributed logic systems of the prior art where each virtual state machine manages a track equipment, the generic blocks object of the invention manage a plurality of track equipment of the same area of the track plan.

For this purpose, each block includes:

- a generic, hardware and software base;

an application software layer relating to each type of block;

a parameter layer relating to the application

Said parameterization layer makes it possible to adapt the block to the types of track equipment to which it is linked, which it controls and from which it receives information, and to the specificities of the lane plan. The connection of the blocks with the campaign is carried out in particular to the input-output means on or off, able to be interfaced with NS1 relays.

The blocks are connected to each other by a ring network (200), called functional digital link, or LNF. A control and processing unit (250), called UCT, is linked to the blocks via the LNF. Thus, the functions of the LNF are:

- ensure functional exchanges between the blocks that make up the system;

to ensure functional exchanges between said blocks and the CPU.

According to an exemplary embodiment, the LNF is an Ethernet type network embodied by fiber optic links.

A digital supervision link (210), called LNS, links a supervision unit (240) to the CPU. The supervision unit (240) is a human-machine interface that allows a supervisor to operate the system object of the invention. It presents the status of the equipment of the channel to the line controller in real time and archives the events. Said supervisory unit (240) is equipped with railway operating software and sends commands via the LNS to the CPU.

The CPU (250) is the functional interface between the supervisor and the blocks. It transmits the commands from the supervisor to the blocks and sends the information from the blocks to the supervisor. The CPU is an industrial computer, advantageously able to be rack mounted. Its security level is SILO, that is to say the lowest level of security, because said CPU is not an equipment likely to generate a risk vis-à-vis the interlocking. Security intrinsic system object of the invention is effectively carried by the blocks, the LNF and the communication protocol between the blocks.

According to an exemplary embodiment, the CPU (250):

- receives commands from the supervisor and validates their consistency in terms of syntax and content;

- checks the compatibility of orders from the supervisor and the availability of blocks;

- transmits commands, including creation of a route to the blocks, training control, authorization and destruction of said route being made by the blocks;

receives and processes information from the blocks such as their internal functional states, the status of the inputs / outputs, the error messages in order to transmit them to the supervisor;

- archive the history of events occurring on the network and equipment for possible maintenance;

- manages the lighting of indicators;

- serves as an interface with control boxes on the route.

3, the system which is the subject of the invention, according to an advantageous exemplary embodiment, comprises a functional digital link, linking the CPU (250) to the Gold / Des blocks (221) and to the Ag blocks (231). Said blocks (221, 231) control and receive information from track equipment (121 1, 131 1) via a so-called campaign link (310). The supervisory unit (240) exchanges information with the CPU (250) via the LNS (210) and additionally receives information from the campaign via the same LNS (210). According to this advantageous embodiment, the system which is the subject of the invention comprises a remote monitoring tool (340) connected to the blocks (121, 131) via a digital remote monitoring link (300), called LNT. The LNT (300) connects each block to the remote monitoring tool (340) and conveys to this tool (340) the information concerning the state of the main equipment (121 1, 131 1) interfaced with the blocks, as well as the operating state of the blocks (121, 131). According to this exemplary embodiment, the Ag blocks (131) and the Or / Des blocks (121) are designed to send this information directly to the remote monitoring tool, in using an LNT link (300), different from the LNF (200). According to an exemplary embodiment, the LNT (300) and the LNF (200) are established on the same physical medium, for example an optical fiber network, but using two local virtual networks (VLANs). Advantageously, each block (121, 131) further comprises a maintenance digital link (not shown) called LNM. According to an exemplary embodiment, this digital maintenance link is established with each block Ag or block Gold / Des by a port type USB ("Universal Serial Bus") front of said block. This connection makes it possible, by means of a specific tool, called maintenance tool, to have access to the internal information of said block, in particular for its maintenance or parameterization. According to an exemplary embodiment, said maintenance tool is a laptop.

The remote monitoring tool (340) has the function of collecting information from the blocks (131, 121) including the problems or faults that arise, in order to implement actions to solve them. The remote monitoring tool (340) sends alarms back to the maintenance personnel when a fault is detected on one of the elements of the system. For this purpose, the remote monitoring tool (340) periodically scans the remote monitoring network (300). If a change of state has occurred on a block, the remote monitoring tool will date and store this event. Thus, the remote monitoring tool (340) does not issue any command, it collects and realizes the timestamp of the following information for each block of the network:

the events defined by a change of state of the block;

- the state of the block and the value of its internal variables;

the state of the equipment (131 1, 121 1) in the field, given by the state of the corresponding inputs / outputs of said block, in particular the on / off inputs.

The support of functions by physical blocks, rack-mounted greatly facilitates the maintenance of the system object of the invention.

Figure 4, according to an exemplary embodiment, each block is in the form of a module adapted to rack mounting. It has on the back (not visible) all the input-output connections with the campaign and connections with the LNF and the LNS. In the front face, said block comprises LEDs for visualizing the state on-off inputs-outputs, and an interface (410), for example of the USB type, for establishing a digital maintenance link between said block and the maintenance tool. According to an exemplary embodiment, a block comprises on the front face a first set (420) of LEDs indicating the state of the on / off inputs of said block. These entries correspond to information from the campaign that indicates the status of the different track equipment, including via type NS1 relays. By way of example, these digital inputs indicate the state of the entries relating to the VCs monitored by the block, and the state of the hand control devices in the case of an Ag block. Another group (430) of LEDs, indicates the status of the on / off outputs of the block. These outputs are directed to NS1 relays that perform the command / power interface with the operating devices of track equipment such as needle motors or signals. Thus, the blocks corresponding to the same section of track being mounted in a cabinet, the observation of the front faces thereof immediately informs the configuration of the interlocking.

In case of malfunction or failure of a block, it is simply replaced by a block of the same type. In this case, the maintenance link (410) makes it possible to copy the parameterization of the replaced block into the replacement block. Advantageously, the cabinet comprises a coding device cooperating with the block which prohibits the assembly of a block Ag instead of a block Gold / Des and vice versa.

Figures 5 and 6, all blocks include interfaces for network connection to LNF, LNT and LNM. These input-output ports are not shown in FIGS. 5 and 6 for ease of reading.

FIG. 5, according to an exemplary embodiment, an Ag block comprises 3 on / off inputs (521) corresponding to the detection of a vehicle, for example of a train by means of 3 CdV corresponding to the three ends connected by the needle. . According to an exemplary embodiment, the information from each VC is sent to the block, for example via a working contact of an NS1 type interface relay (510), the high level, for which the input is powered by a voltage of 24 volts, corresponding to the logic state "1" indicating the absence of occupation of the section monitored by said VC. Still according to this exemplary embodiment, the block Ag comprises two inputs (522) all or nothing allowing the control of the blades of the needle for the left and right directions. According to this exemplary embodiment, the position control information of the blades, left or right, is sent to the block via a working contact of an NS1-type interface relay, the high level, for which the input is powered by a voltage of 24 volts, corresponding to the logic state "1 For which the controlled needle is in its respective position (left or right). According to this embodiment, the block Ag has 2 outputs (531) all or nothing corresponding to the outputs for the control of the needle. According to an exemplary embodiment, the blades of the needle are moved via an electric motor. The control to a position (left or right) is achieved by the excitation of a relay type NS1. The duration of excitation of the relay varies according to the type of needle. This duration is fixed by means of a parameterization of the block. According to this embodiment, the output is in the logic state "1" when the movement of the needle is controlled. These inputs (521, 522) and outputs (531) of the Ag block are designed from a hardware and software point of view to achieve a SIL4 security level. These on / off inputs that provide the interface with the campaign are essential to the operation of the system object of the invention. The other features of the system involve exchanges between blocks and are carried out via the LNF. According to the embodiment and the intended application, the Ag block comprises other SIL4 safe or less on / off inputs / outputs. By way of non-limiting example, the block Ag comprises, for example, an input SIL4 for manually releasing a latch, an input for blocking the block, or an input for manual control by key of the needle.

Figure 6, according to an exemplary embodiment a block Gold / Des, comprises 4 entries (621) of CdV. These 4 entries make it possible to treat any plan of way whatever its complexity. A 5 ^th entry (622) all or nothing corresponds to a so-called destruction pedal input. It corresponds to the output of an electromechanical detector sensitive to the passage of a vehicle over a defined area. This input, when activated at the logic level "1", which corresponds to the presence of said vehicle, can trigger the destruction, or release, of the route engaged. According to this exemplary embodiment, the block Or / Des comprises outputs (631, 632, 633, 634) all or nothing making it possible to control a signal of origin of the route under conditions consistent with the local operating conditions and spacing.

Thus, in the example of a railway application, the all or nothing outputs of the Gold / Des block include: an output (631) for controlling the green light of the operating signal, produced by the excitation of a relay NS1;

- An output (632) for the control of the red light flashing, performed by the excitation of a relay NS1;

- An output (633) for controlling the yellow light, achieved by the excitation of a relay NS1;

- An output (634) for the control of the eyecup, performed by the excitation of a relay NS1;

the light is red when no other ignition control is activated. The eyecup is a signal light, usually white and placed at the bottom left of the signal, and which is lit when said signal is passable especially in the case of a visual procedure.

These main inputs and outputs of the Gold / Des block are at the SIL4 security level. Depending on the intended application, the Gold / Des block includes other SIL4 or lower safe level all-or-nothing inputs and outputs. Advantageously, the block Or / Des comprises an input (625) called "control in opposite direction" and an output (635) called "engagement in the opposite direction". These inputs and outputs (625, 635) make it possible to manage a zone common to two systems according to the invention, that is to say to two sets of blocks each managing a section of track. Thus, several systems that are the subject of the invention are advantageously used adjacently to control very complex path planes, or to allow the network to evolve by the addition of new branches without having to restart the security of the previous branches.

According to an exemplary embodiment, the blocks Or / Des and the blocks Ag comprise one or more so-called proportional inputs (541, 641), which allow the acquisition of a signal of variable or scalable value. These inputs (541, 641) are of digital or analog type, and allow the acquisition of a proportional signal, for example analog between -5 volts and +5 volts or a proportional signal whose level is coded on 8 bits or more. Such proportional inputs make it possible to include in the criteria for switching on routes, parameters defined by their value, by way of non-limiting example, such a proportional input makes it possible in particular to control the effective lighting of a light signal. green or red.

Referring back to FIG. 1, the method which is the subject of the invention is illustrated according to a implementation example corresponding to the realization of a route between two ends (101, 103) of the network implementing the two needles (1 11, 1 13) conjugate. According to an exemplary embodiment of the method of the invention, the realization of a route, until the authorization of the passage of a vehicle on said route, comprises 3 steps:

- the selection of the route;

- the interlocking of the route;

- control of the route.

These three steps are followed, after or during the passage of the vehicle on said route, a step called destruction or release of the route.

Figure 7, the route is initially defined by the supervisor using the supervision tool. During a creation step (710) said route is interpreted by the CPU (250) which transmits (71 1) via LNF a selection information to the attention of the first block Or / Des (121) of the route, in order to reserve the said route. Upon receipt of this selection request, during a selection step (720), said Gold / Des (121) block moves from the "free" state to the selected state and transmits (721) a selection order to the downstream block (131) concerned by the route. The transition from the free state to the state selected for such a block Gold / Des is realized only if said block is actually in the "free" state and that it intervenes in the route like block of origin or as a destination block. When the block Ag (131) concerned by the route and downstream a block Gold / Des origin receives the selection order, it passes (725) from the free state to the selected state if no engagement does not oppose it, and this selection causes:

the emission of an electrical command to the needle controlled by said Ag block (131);

- The issuing of an order to an adjacent block Ag not traversed by the route but whose needle is to be ordered as protection:

- The issuance of a command to an adjacent block Ag, not traveled by the route but whose needle is to order as a conjugation.

The first command is sent directly to the needle controlled by said Ag block (131) via one of the outputs (531 FIG. 5) of said block, while the other two commands are addressed to the respective blocks via the LNF. Then the Ag block (131) transmits (721) a selection instruction to the downstream block (733) traversed by the route and so on. The last block (123) of the route is always a destination Gold / Des block. When this last block Gold / Des (123) is selected (720), it sends (722) to the original block Gold / Des a notification of end of selection, which ensures that all the blocks traveled by the route have been selected.

Upon receipt of the notification of completion of selection, the original block Gold / Des (121) initiates the process of engaging the route for the formation of said route. The transition from the "selected" state to the "Enabled by an uncontrolled route" state is intended to prohibit any needle control, thus ensuring the continuity and protection of the route, in front of the vehicle traffic who borrows it and during its passage. On receipt of the end of selection notification, the original Or / Des (121) block passes (730) from the "Selected as Origin" state to the "Enabled by an uncontrolled route as "origin", and transmits (731) an engagement command to all the blocks (131, 133, 123) avals traversed by the route. Upon receipt of the latching command, each block passes (735) from the "selected" state to the "locked uncontrolled" state. This change of state, in the case of an Ag block, allows the locking of the needle that said Ag block controls. The reception of the trip initiation command (731) causes in each block traversed by the route the execution of a step (745) for checking the engagement conditions, and, if said engagement conditions are satisfied. , the block goes into the "controlled on" state and transmits (741) to the original Gold / Des block (121) a notification of transition to the "controlled on" state. Upon receipt of all these notifications (741) of transition to the controlled state, the original block Gold / Des (121) passes (750) to the state "locked checked" after checking the validity of its own conditions of engagement and controls the opening of the signal allowing the passage of the vehicle on the route. The setting of the concerned Or / Des block (121) allows it to define the indication to be presented to the signal according to the established route and the occupation status of the channels.

Figure 8, according to a first embodiment, said automatic destruction in origin, the attack of the first zone of the route causes the closure (860) of the original signal. After this zone has been released, in the case of an original destruction with pedal, the route interlock is deactivated (861). This deactivation causes the blocks (131, 133, 123) to pass to the free state (865). ) as and when the release of the VCs from the route by the vehicle. This mode of implementation corresponds to the release of the transit interlock and allows the release of the needles as and when their release by the vehicle, thereby smoothing the traffic.

9, according to an alternative embodiment, said automatic destruction destination, the destruction of the route is initiated (960) by the block Or / Des (123) of destination after the crossing by said vehicle of the set of the route. For example, when the vehicle is a train, and its passage is detected through track circuits, this crossing is determined by a sequence of VC occupancy between the last transit VC and the destination VC.

- occupancy of the last transit VC, the next VC being free;

- VC occupancy immediately downstream of the last transit VC of the route, which is actually the destination VC;

- release of the transit VC.

Thus it is certain that all the axles of said train, that is to say the train over its entire length, have crossed the last VC of transit. When the function "automatic destruction at destination" is activated, the arrival at destination causes the transmission (961) by the destination block Or / Des (123) of an automatic destruction command at its destination to the address of the destination. Gold block / Origin des. The receipt of this command, called token, by the original block Or / Des (121) causes the deactivation of the "Route initiation" function of this block (121) of origin. Upon receipt of this token, the original Gold / Des (121) block passes (965) to the "free" state provided that the incoming VCs on the route are free. Then, the original Or / Des block (121) transmits (962) to the downstream block (131) of the route an authorized destruction instruction, which block passes (965) to the "free" state and transmits (962) downstream block (133) of the route, an authorized destruction instruction and so on. This embodiment of the method that is the subject of the invention prohibits any modification of the route until the said route is cleared by the vehicle.

Figure 10, according to an example of a particular lane plan, it comprises only two ends (1010, 1020) and does not include a needle. For example, such a lane plan corresponds to a platform lane (1,100). The interlockings relating to such a channel plan consist in managing the signals at both ends according to the information provided by associated CoPs (not shown). Under these conditions, the system that is the subject of the invention is implemented with two Gold / Des blocks (1021, 1022) located at each end of the channel. The absence of Ag block on the corresponding route is taken into account in the so-called parameter layer of the software layer of said blocks Gold / Des (1021, 1022).

11A, according to another example of a particular lane plan, said lane plan comprises 6 ends (1 101, 1 102, 1 103, 1 104, 1 105, 1 106), associated signals and an oblique crossing where the section between two ends (1106, 1 103) intersects another section (1101, 1 104) without switching.

FIG. 11B, the implementation of the system which is the subject of the invention on such a track plan is, according to an exemplary embodiment, carried out by means of two fictitious hands, corresponding to the oblique crossing, which fictitious hands are controlled by Ag blocks (1,121, 1,122). Thus, these Ag blocks (1121, 1122) controlling fictitious needles, cooperate with the Ag blocks (1 123, 1 124) controlling real needles to allow the engagement and the destruction of route safely. The Ag blocks (1 121, 1122) controlling fictitious needles are real Ag blocks that are integrated in the LNF network, but do not have the inputs / outputs relating to the commands and controls for moving the needle, or whose functions have been inhibited. Their presence helps manage route incompatibilities.

The above description and the exemplary embodiments show that the invention achieves the desired objectives, in particular by combining parameterizable generic blocks connected by a ring network, it makes it possible to provide training and validation functions for a route in its entirety by distributing the control and security functions at the level of each generic block. Thus, the demonstration of the conformity of an installation made from the device of the invention with regard to a security level is greatly facilitated. Since the blocks are based on a generic architecture, the maintenance of the device as a whole and of each block in particular is facilitated. The device object of the invention is adapted both to a first installation but adapts and interfaces with any existing interlocking system, including electromechanical. Finally, the device that is the subject of the invention is evolutionary by the integration of new blocks, corresponding to other switchgear, in the network or by connecting several systems to each other.

Claims

1. Interlocking maneuvering system adapted to a track plan comprising 3 ends, characterized in that it comprises:

has. at each end, a block (121, 122, 123, 124, 1021, 1022) called origin/destination, capable of being mounted in a rack and supporting all the interlocks linked to movement authorizations and end interlocks route; b. a so-called switch block (131, 133, 1121, 1122, 1123, 1124), capable of being mounted in a rack and controlling the operation of a switch and the associated engagement;

vs. a functional digital link, connecting the blocks in a ring computer network, said blocks being able to communicate with each other;

d. a processing and control unit (250) capable of transmitting on the functional digital link a command to the blocks in order to constitute a route;

each block comprising

a generic base, hardware and software;

an application software layer relating to each type of block;

- a configuration layer relating to the application.

2. System according to claim 1, in which each block has 3 functional states:

free;

selected;

- triggered.

3. System according to claim 2, in which the engaged state of a block comprises:

a functional state “engaged not controlled”;

a “controlled on” functional state.

System according to claim 1, comprising:

e. a remote monitoring unit (340);

f. a digital remote monitoring link (300), distinct from the functional digital link (200), connecting the blocks to said remote monitoring unit (340).

System according to claim 1, in which each block includes an input/output port (410) for the digital connection of a maintenance tool.

System according to claim 1, in which each block comprises: an all-or-nothing input (521, 522, 621, 622) whose restrictive state is “0” capable of acquiring binary information relayed by a switching relay;

an all-or-nothing output (531, 631, 632, 633,634, 635) capable of delivering power to a switching relay or a power supply loop of equipment.

System according to claim 6, comprising a block comprising an input (541, 641), called proportional, adapted to the acquisition of information of variable value.

System according to claim 1, adapted to a track plan comprising an oblique crossing, and which comprises a switch block (1 121, 1 122) controlling a fictitious switch.

Interlocking cabinet comprising blocks of a system according to claim 1, in which the means for mounting said blocks comprise keyers cooperating with the cabinet and preventing the mounting of a type of block (121, 122, 123, 124 , 1021, 1022) in place of another (131, 133, 1121, 1122, 1123, 1124) in said cabinet.

Method for producing an interlock corresponding to a route and implementing a system according to claim 2, characterized in that it comprises the steps consisting of:

u. make (720, 725) pass a block, called upstream, from the free state to the state selected;

v. transmit (721) from said upstream block to the block, called downstream, concerned by the route and the immediately following one according to the functional digital link, a selection command.

Method according to claim 10, in which the upstream block is an origin/destination block and steps u) and v) (720, 721) are only carried out if said block is in the free state and it is selected as the origin or destination of a route.

Method according to claim 10, in which the upstream block is a needle block and the passage (725) to the selected state is only carried out if the block is in the free state, the passage to the selected state causing issuing an electrical needle command.

Method according to claim 10, comprising, after steps u) and v), the steps consisting of:

w. when all the blocks of the route are in the selected state, switching (730) the original block to the engaged state;

x. transmit (731) to each of the downstream blocks of the route an engagement command.

Method according to claim 13, characterized in that the blocks of the route pass to the “uncontrolled engaged” functional state at the end of step x), and that it comprises, after step x) , the steps consisting of: y. for each block traveled by the route, check the conditions for passing from the “uncontrolled engaged” state to the “controlled engaged” state and if these conditions are verified, move (745, 750) to the “controlled engaged” state. ;

z. for each block traveled by the route, transmit (731) to the original block information attesting to its passage to the state

“controlled engaged”.

15. Method according to claim 14, in which the block is a needle block and that reception of the command from step x) generates at said block the transmission of a command to immobilize the needle, then, during step y), control by said block of the position of the needle, the transition (745) to the “controlled engaged” state of said block being carried out only if the result of this control corresponds to the position of the needle adapted to the route.

Method for carrying out the journey of a route by a vehicle on a guidance network between an origin end and a destination end, using a system according to claim 3, characterized in that it comprises steps consisting of:

i. define a route by an origin end (121) and a destination end (123) and transmit said route to the processing and control unit;

ii. issue (710), by the processing and control unit (250), a command (71 1) called route creation to the attention of the block (121) of origin/destination of the end of origin ;

iii. select the route according to the method of claim 10; iv. initiate the route according to the method of claim 13; v. controlling the route according to the method of claim 14; vi. open (750) the signal controlled by the original unit and authorize the passage of the vehicle:

vii. after the passage of the vehicle, destroy (860, 960) the route and return the corresponding blocks to the free state.

Method according to claim 16, in which step vii) is initiated by the original block and it comprises a step consisting of:

avii. deactivate (865) the initiation of the route by passing, step by step via the functional digital link, blocks in the free state as the zones monitored by said blocks are crossed.

Method according to claim 18, in which step vii) is initiated (960) by the destination block and it comprises the steps consisting of: bvii. detect the vehicle crossing the route;

cvii. release (965) the original block and transmit (962) to the downstream block a command to deactivate the engagement, for the passage (965) to the free state, step by step (962) according to the functional digital link , blocks of the route.