EP3071469B1 - Computerised method and device for interlocking a railway route - Google Patents

Description

The invention relates to a method and a computerized device for engaging a railway route. The invention belongs more particularly, but not exclusively, to the field of control and signaling applied to a rail network, for the movement of trains, subways or trams. The invention is adaptable to any type of guided transport network, with or without rails, such as, for example, a circulation network of a monorail or an automatic vehicle on tires, and whose routes are determined by interlocking bifurcation devices, such as switches.

The route of a guided vehicle on a network, for example a train on a rail network, is determined by the engagement of bifurcation devices, such as needles, and signaling devices, for example, emitting signal signals. stop or passage authorization.

The term "engagement" designates a maneuver immobilizing a control member in a given configuration, this control member controlling a switchgear or a signaling apparatus, and prohibiting the maneuvering of this member under conditions that are incompatible with safety. Such engagement also occurs between the control members implementing multiple conditions along a route taken by the guided vehicle, which conditions are maintained throughout the passage of the vehicle on this route.

The interlocks ( "interlocking" in English) must meet operational and safety requirements defined by standards, declined from the basic device to the complete system. Thus, these systems are defined in particular by safety levels known as "SIL", the acronym for " Safety Integrated Level" according to five levels of increasing requirements ranging from SILO to SIL4.

According to the prior art, the interlockings are of mechanical type, for example for the control, called "on the job", of a switch by a lever, the levers controlling the needles of the route being locked in position by purely mechanical or electromechanical systems, or electrical type via electromechanical relays, or computer type.

• une interface homme-machine ou IHM, celle-ci est constituée, par exemple, de leviers dans un système mécanique, de boutons et de tableaux de contrôle optiques dans le cas d'un système électrique ou d'un écran et d'un clavier dans le cas d'un système informatique ;
• l'enclenchement, celui-ci est constitué, par exemple, d'une table d'enclenchement mettant en oeuvre des tringles et autres dispositifs mécaniques reliant les leviers de commandes pour un système purement mécanique, des relais électromécaniques de sécurité, connectés selon une logique câblée, pour les systèmes électriques ou informatiques, ou encore des systèmes d'enclenchement informatiques spécifiques ;
• la campagne, qui comprend notamment les aiguilles et la signalisation ;
• une interface entre la campagne et l'enclenchement.

A maneuvering station, or switching, for the control of a route, is specific to a geographical area and organized according to 4 levels:

• a human-machine interface or HMI, which consists, for example, of levers in a mechanical system, buttons and optical control boards in the case of an electrical system or a screen and a keyboard in the case of a computer system;
• the engagement, it is constituted, for example, a latching table using rods and other mechanical devices connecting the control levers for a purely mechanical system, electromechanical safety relays, connected according to a logic wired, for electrical or computer systems, or specific computer interlocking systems;
• the campaign, which includes needles and signage;
• an interface between the campaign and the engagement.

The life of such a maneuvering station is about 30 years, see more. As a result, it is common for several technologies to coexist on the same network, or for the evolution of a railway network to require the integration of new technology with existing technology, while maintaining the required level of security and capacity. maintenance of the device.

Electric control stations remain widespread but do not allow complex programming of routes without the addition of a software layer.

Said software layer comprises a memory in which is stored a list of logic rules that reproduce the secure engagement states of the control members, and controls the compatibility of the states of these bodies with said rules. The document EP 06 83082 describes such a device.

Such an electrical / computer maneuvering station has the drawbacks of the substations, namely long cable lengths, bulky relay stations and low modularity, with the additional need to adapt the software layer, that is, that is to say to define new rules in the form of logical equations, at each modification or evolution of the network controlled by this station.

These computerized electrical workstations coexist with purely computer maneuvering stations, which are presented as black boxes optimized for a given configuration.

The document WO 03/070537 describes such a computer maneuvering station.

Thus, these devices of the prior art do not make it possible to easily achieve a network evolution, any modification of said network requiring a new parameterization and the realization of long and expensive validation tests.

The document FR 2 958 248 discloses a device for managing the movement of a train on a railway network, said network being subdivided into a plurality of resources each managing a latch, said resources not being interconnected. Thus, the computer engagement is achieved by virtually associating said resources for each route. The demonstration of the security of such a system is complex because it must take into account the combinatorics of all logical equations involving each resource individually. Thus, the security of such a system must be fully demonstrated for each network or for any modification of an existing network.

The document FR 2 739 824 describes a computer system for managing the interlocking of a railway network implementing a distributed logic, in which specific virtual finite state machines supporting each element or equipment of the channel plane (signal, pointer, etc.), and communicate with each other, step by step, through a logical channel. Thus each virtual finite state machine of this device of the prior art communicates with its supervisor by logical information, including when said supervisor is not selected by the route, which slowed the transmission of data. Once the system is set up as a whole, it is compiled and any subsequent modification of the channel plan requires regeneration of all the virtual machines and the corresponding computer code. Finally, this device of the prior art which remains a computer maneuvering station, requires unrolling long cable lengths.

The document US 2009/0143928 A1 discloses a device and method for engaging a route for reducing the link cables that teaches grouping the generic functions at the signal level according to a route plan.

The invention aims to solve the disadvantages of the prior art with a system according to claim 1, a method according to claim 7 and a method according to claim 13.

1. a. à chaque extrémité, un bloc dit d'origine/destination, apte à être monté en rack et à prendre en charge tous les enclenchements liés aux autorisations de mouvement et les enclenchements en extrémité d'itinéraire ;
2. b. un bloc dit d'aiguillage, apte à être monté en rack et à commander la manoeuvre d'une aiguille et les enclenchements associés ;
3. c. une liaison numérique fonctionnelle, reliant les blocs selon un réseau informatique en anneau, lesdits blocs étant aptes à communiquer entre eux ;
4. d. une unité de traitement et de contrôle apte à émettre sur la liaison numérique fonctionnelle une commande à destination des blocs afin de constituer un itinéraire ;
   • chaque bloc comprenant
     • une base générique, matériel et logiciel ;
     • une couche logiciel applicative relative à chaque type de bloc ;
     • une couche de paramétrage relative à l'application.

To this end, the invention relates to an interlocking actuation system adapted to a track plane comprising three ends, which system comprises:

1. at. at each end, a block of origin / destination, able to be rack mounted and to support all the interlocking related to movement authorizations and interlocking end of route;
2. b. a so-called switching block, able to be mounted in a rack and to control the operation of a needle and the associated interlocking;
3. c. a functional digital link, connecting the blocks in a ring-shaped computer network, said blocks being able to communicate with one another;
4. d. a processing and control unit capable of transmitting on the functional digital link a command to the blocks in order to constitute a route;
   • each block comprising
     • a generic database, hardware and software;
     • an application software layer relating to each type of block;
     • a parameterization layer relating to the application.

Thus, whatever the complexity of the channel plan, the system object of the invention uses a combination of 2 types of generic physical blocks built on the same hardware and software base, connected in a ring network. The security of the system is carried by the blocks that meet an SIL4 safety level according to CENELEC standards, in particular the EN 50126, EN 50128 and EN 50129 standards. Thus, whatever the complexity of the network, the route is defined by an original block and a destination block, which are carried by the same type of block called origin / destination. The control equations of each type of block are always the same, only changes their setting to take into account the campaign. The processing and control unit whose safety level is SIL0 merely sends the route information, origin block - destination block, programmed by a supervisor, and does not intervene in the safety of the interlockings. . The functions of the blocks are prevalidées so that the study times are reduced, the certification of an installation concerns only the integration, that is to say the setting of each block to adapt it to the campaign and to the environment of the traffic network. The distribution of the route planning and interlocking functions, and the integration of security functions into blocks, allows the device to be adapted to any existing network or first installation, from two types of blocks. generic. The interlocking table corresponding to a validation of the route is built step by step between the blocks, this progression being limited to the blocks concerned by the route which is made possible by the functional digital link according to a ring computer network. . The blocks carry most of the security functions of the system and all sharing the same hardware and software base, the security of this database needs to be demonstrated only once and only the security level of the security layer. Parameterization must be demonstrated for the intended application. The interlocking state of all blocks constituting the route is systematically constructed and verified regardless of the route, both physically simpler, all the blocks being installed, including rack, in a local close to the interface between the engagement and the campaign, either "on the job", close to means (needles, signals) in one or more cabinets. Maintenance is also simplified, the number of equipment being reduced.

The term "on the job" refers to the conditions of realization of an action whose result on the campaign is visible directly by the operator carrying out said action and by extension the location of the means for the implementation of this action.

Throughout the text, the term "campaign" refers to all signaling and control equipment on or in the vicinity of the track, such as signs or signal lights, hands and their operating devices, the power cables or the circuits for detecting the presence of a vehicle on the track.

• libre ;
• sélectionné ;
• enclenché.

Each block has 3 functional states:

• free;
• selected;
• engaged.

These 3 functional states can engage and release any route, by a sequential passage from one state to another and closer to the blocks constituting the route. Conditions of transition from one functional state to another constitute the intrinsic safety of each block.

The invention is advantageously implemented according to the embodiments described below which are to be considered individually or in any technically operative combination.

• un état fonctionnel « enclenché non contrôlé » ;
• un état fonctionnel « enclenché contrôlé ».

Advantageously, the activated state of a block comprises:

• a functional state "switched on uncontrolled";
• a "switched on" functional state.

Thus, the security of the device is further improved. The transition from one state to another implements conditions relating to the campaign and the control of the equipment controlled by said block. It is essentially at this stage that the validation of the state of the equipment, and consequently of the parameterization of the block, intervenes in the validation of a route.

• e. une unité de télésurveillance ;
• f. une liaison numérique de télésurveillance, distincte de la liaison numérique fonctionnelle, reliant les blocs à ladite unité de télésurveillance.

According to an advantageous embodiment, the system which is the subject of the invention comprises

• e. a remote monitoring unit;
• f. a digital remote monitoring link, separate from the functional digital link, connecting the blocks to said remote monitoring unit.

Thus, the operation of the blocks is individually controllable remotely, which allows to locate quickly any malfunction. Since the digital links are distinct, remote monitoring is feasible even in the event of a break in the functional digital link and makes it possible in particular to detect such a break.

Advantageously, each block has an input / output port for the digital connection of a maintenance tool. Thus, the maintenance of each block is facilitated.

• une entrée tout ou rien, dont l'état restrictif est « 0 », apte à acquérir une information binaire relayée par un relais de commutation ;
• une sortie tout ou rien apte à délivrer une alimentation à un relais de commutation ou une boucle d'alimentation d'un équipement

Advantageously, each block comprises:

• an all-or-nothing input, whose restrictive state is "0", able to acquire a binary information relayed by a switching relay;
• an all-or-nothing output capable of delivering a power supply to a switching relay or a supply loop of a device

Thus the system object of the invention is able to be interfaced with a relay interlock device.

According to one embodiment, the system which is the subject of the invention comprises a block comprising a so-called proportional input adapted to the acquisition of information of variable value. The said input is, according to alternative embodiments, a digital input or an analog input adapted to receive a proportional digital or analog signal. Thus, the system that is the subject of the invention is capable of managing interlockings requiring the acquisition of a proportional signal, for example a signal corresponding to the control of the lighting of a signal lamp.

According to a particular embodiment of the system which is the subject of the invention, adapted to a channel plane comprising an oblique crossing, said system comprises a switching block controlling a fictitious hand. Thus, the system that is the subject of the invention is suitable for managing the interlocking of a lane plan comprising a lane apparatus that can be traveled in several ways, but without a moving part.

Advantageously, the blocks of the system that are the subject of the invention comprise means for mounting them in a rack which mounting means comprise polarizers cooperating with the cabinet and prohibiting the mounting of one type of block in the place of another, in said wardrobe. Thus, said blocks are easily installed in cabinets, in a switching station or on the job, the keying means ensure the safety of the operations of replacing a block.

• u. faire passer un bloc, dit amont, de l'état libre à l'état sélectionné ;
• v. transmettre dudit bloc amont au bloc, dit aval, concerné par l'itinéraire et le suivant immédiatement selon la liaison numérique fonctionnelle, une commande de sélection.

The invention also relates to a method for carrying out an engagement corresponding to a route and implementing a system according to the invention, which method comprises the steps of:

• u. passing a so-called upstream block from the free state to the selected state;
• v. transmitting said upstream block to the block, said downstream, concerned with the route and the next immediately according to the functional digital link, a selection command.

Thus, the interlocking process progresses from block to block, selected by the route, according to the ring network, which makes it possible to reduce, for a given route, the combinatorics of the possible states of each block with respect to this route. The blocks being linked in a ring network, the last validation implements the destination block and the original block and therefore corresponds to the validation of the selection of the entire route. Whatever the number of blocks thus connected by the computer link, depending on the target route plan, the operations allowing the activation of the route only concern the blocks of this route which allows a quicker engagement and release in comparing systems of the prior art where the latching and release information flows from close on the set of finite state machines constituting the network.

The method of the invention is applicable regardless of the type of upstream block and downstream block. According to a particular embodiment, the upstream block is a block origin / destination and steps u) and v) are performed only if said block is in the free state and is selected as the origin or destination of a route.

Alternatively, the upstream block is a needle block and the transition to the selected state is achieved only if said block is in the free state, said passage causing the emission of an electric needle control. Thus, the hands are moved to their position corresponding to the route during the selection of this route.

• w. lorsque tous les blocs de l'itinéraire sont à l'état sélectionné, passer le bloc origine à l'état enclenché ;
• x. transmettre à chacun des blocs aval de l'itinéraire une commande d'enclenchement.

Advantageously, the method which is the subject of the invention comprises at the end of steps u) and v), steps consisting of:

• w. when all blocks in the route are in the selected state, move the origin block to the on state;
• x. transmitting to each of the downstream blocks of the route an interlocking command.

Thus, the initiation of the route is performed only after the validation of the selection thereof, the selection conditions specific to each block having been made individually.

• y. pour chaque bloc parcouru par l'itinéraire, vérifier les conditions de passage de l'état « enclenché non contrôlé » à l'état « enclenché contrôlé » et si ces conditions sont vérifiées passer à l'état « enclenché contrôlé » ;
• z. pour chaque bloc parcouru par l'itinéraire, transmettre au bloc origine une information attestant de son passage à l'état « enclenché contrôlé ».

Advantageously, the engagement method which is the subject of the invention implements the states "switched on uncontrolled" and "controlled switched on" of the blocks according to this embodiment of the system which is the subject of the invention, the upstream block passing through the step w) in the functional state "switched on uncontrolled", and comprises after step x) the steps of:

• there. for each block traversed by the route, check the conditions of transition from the state "switched on uncontrolled" to the state "activated controlled" and if these conditions are verified pass to the state "activated controlled";
• z. for each block traversed by the route, transmit to the source block information attesting to its transition to the "controlled controlled" state.

These steps make it possible, after the formation of the route at the end of step x), to ensure the conformity of the configuration of the campaign opposite the intended route before authorizing any passage on said route.

Advantageously, when the block is a needle block, the receipt of the command of step x) generates at said block, the issuance of an immobilization command of the needle, and then, during the step y), the control by said block of the position of the needle, the transition to the state "activated controlled" said block being realized if the result of this control corresponds to the position of the needle adapted to the route.

Thus, the method and the device that are the subject of the invention combine a central creation, a training and a validation of the route, by the dialogue between the blocks via the functional digital link, the control and security functions being distributed locally to the network. the scale of each block.

1. i. définir un itinéraire par une extrémité d'origine et une extrémité de destination et transmettre ledit itinéraire à l'unité de traitement et de contrôle ;
2. ii. émettre par l'unité de traitement et de contrôle, une commande dite de création d'itinéraire à l'attention du bloc d'origine/destination de l'extrémité d'origine ;
3. iii. sélectionner l'itinéraire selon les étapes u) et v) du procédé d'enclenchement selon l'invention ;
4. iv. enclencher l'itinéraire selon les étapes w) et x) du procédé d'enclenchement selon l'invention ;
5. v. contrôler l'itinéraire selon les étapes y) et z) du procédé d'enclenchement selon l'invention ;
6. vi. ouvrir le signal commandé par le bloc d'origine et autoriser le passage du véhicule ;
7. vii. après le passage du véhicule, détruire l'itinéraire et ramener les blocs correspondant à l'état libre.

The invention also relates to a method for carrying out the route of a route by a vehicle on a guidance network between an origin end and a destination end, using a device according to one of the embodiments of the invention. invention, which method comprises steps of:

1. i. defining a route by an originating end and a destination end and transmitting said route to the processing and control unit;
2. ii. transmit by the processing and control unit, a so-called route creation command to the attention of the origin / destination block of the origin end;
3. iii. select the route according to steps u) and v) of the engagement method according to the invention;
4. iv. engage the route according to steps w) and x) of the engagement method according to the invention;
5. v. control the route according to steps y) and z) of the engagement method according to the invention;
6. vi. open the signal controlled by the original block and authorize the passage of the vehicle;
7. vii. after the passage of the vehicle, destroy the route and return the blocks corresponding to the free state.

According to one embodiment, step vii) is initiated by the original block and comprises a step of:
AVII. disabling the interlocking of the route by the passage of step by step on the functional digital link of the blocks in the free state as the zones monitored by said blocks are crossed.

• bvii. détecter le franchissement de l'itinéraire par le véhicule ;
• cvii. libérer le bloc d'origine et transmettre au bloc aval une commande de désactivation de l'enclenchement pour le passage à l'état libre de proche en proche selon la liaison numérique fonctionnelle, des blocs de l'itinéraire.

According to another embodiment, step vii) is automatically triggered by crossing the route and comprises the steps of:

• bVII. detect the crossing of the route by the vehicle;
• cvii. releasing the original block and transmitting to the downstream block a command to deactivate the engagement for the passage to the free state step by step along the functional digital link blocks of the route.

Thus, the device and method that are the subject of the invention are suitable for implementing a transit interlock and an automatic destruction at destination.

• la figure 1 est un exemple de plan de voie de type service provisoire comportant 4 extrémités et deux aiguilles conjuguées ;
• la figure 2 montre un exemple de réalisation du système objet de l'invention appliqué à la section de voie de la figure 1 ;
• la figure 3 décrit schématiquement l'environnement du système objet de l'invention et les différentes liaisons entre les éléments le constituant ;
• la figure 4 montre selon une vue en perspective de face, un exemple de réalisation d'un bloc du système objet de l'invention ;
• la figure 5 donne un exemple schématique des entrées-sorties d'un bloc aiguille pour la mise en oeuvre du système objet de l'invention ;
• la figure 6 illustre schématiquement un exemple des entrée-sorties d'un bloc origine/destination du système objet de l'invention ;
• la figure 7 est un synopsis de la mise en oeuvre de la création d'un itinéraire selon le procédé objet de l'invention ;
• la figure 8 représente un synopsis de la destruction automatique en origine d'un itinéraire selon un mode de réalisation du procédé objet de l'invention ;
• la figure 9 est un synopsis de la destruction automatique en destination d'un itinéraire selon un mode de réalisation du procédé objet de l'invention ;
• la figure 10 est un exemple de plan de voie à deux extrémités ne comprenant pas d'aiguillage dont la gestion des enclenchements est mise en oeuvre selon un mode de réalisation du système objet de l'invention ;
• et la figure 11 est un exemple de plan de voie comportant des tronçons à plus de deux extrémités et sans aiguillage dont la gestion des enclenchements est mise en oeuvre selon un mode de réalisation du système objet de l'invention comprenant des aiguillages fictifs, figure 11A représente le plan de voie réel, figure 11B le plan de voie utilisé pour la mise en oeuvre du système objet de l'invention.

The invention is explained below according to its preferred embodiments, which are in no way limiting, and with reference to Figures 1 to 11 in which :

• the figure 1 is an example of a temporary service-type lane plan with 4 ends and two conjugate hands;
• the figure 2 shows an exemplary embodiment of the system object of the invention applied to the track section of the figure 1 ;
• the figure 3 schematically describes the environment of the system object of the invention and the various links between the elements constituting it;
• the figure 4 shows in a front perspective view, an embodiment of a block of the system object of the invention;
• the figure 5 gives a schematic example of the input-output of a needle block for the implementation of the system object of the invention;
• the figure 6 schematically illustrates an example of the input-output of an origin / destination block of the system object of the invention;
• the figure 7 is a synopsis of the implementation of the creation of a route according to the method object of the invention;
• the figure 8 represents a synopsis of the automatic destruction at the origin of a route according to an embodiment of the method which is the subject of the invention;
• the figure 9 is a synopsis of the automatic destruction to a route according to an embodiment of the method object of the invention;
• the figure 10 is an example of a two-end track plan comprising no switch whose interlock management is implemented according to an embodiment of the system object of the invention;
• and the figure 11 is an example of a track plan comprising sections with more than two ends and without switching whose interlock management is implemented according to an embodiment of the system object of the invention comprising fictitious switches, figure 11A represents the actual route plan, Figure 11B the track plan used for the implementation of the system object of the invention.

Figure 1 the system and method of the invention apply to a signaling system for the passage of a guided vehicle, more particularly a train, a tram or a subway, on a section of track having an origin and a destination as well as one or more needles (111, 113). Thus, the system and method that are the subject of the invention constitute a system for interlocking a route with or without the maneuvering of needles. According to a simple exemplary embodiment, the device and the method that are the subject of the invention apply to a temporary service-type track plane (100) comprising four ends (101, 102, 103, 104) and two needles (111, 113) conjugated. The device and the method that are the subject of the invention make it possible to distribute the interlockings. To this end, the track section (100) on which the system object of the invention is installed is divided into geographical areas (121, 122, 123, 124, 131, 133). These zones have specific characteristics depending on whether they are linked to a needle, called "Ag Zone" (131, 133), or at one end, which end is an origin or a destination, called "Gold Zone / Des" (121 , 122, 123, 124). Each zone includes specific track equipment. Thus, a Zone Gold / Des comprises, at least, a device for detecting the presence of a vehicle on the track. For rail-type use, such a device takes the form of a track circuit, hereinafter referred to as "CdV", or a pedal. A VC consists of an electrical circuit formed between an isolated portion of the rails, which circuit is modified in the presence of the axle of a train on said portion, thus allowing the presence of said train to be detected. A pedal is a mechanical or magnetic detection device sensitive to the mass of the vehicle passing on said device. According to the embodiment, the Gold / Des Zone includes additional track equipment such as a signal (1211, 1221, 1231, 1241).

• une aiguille et son dispositif de manoeuvre,
• un dispositif de contrôle de ladite aiguille,
• un dispositif de détection de la présence d'un véhicule dans ladite aiguille.

An Ag Zone with a switch includes the following lane equipment in the field:

• a needle and its maneuvering device,
• a device for controlling said needle,
• a device for detecting the presence of a vehicle in said needle.

According to the track plan and a particular embodiment of the device which is the subject of the invention, an Ag Zone comprises a so-called fictitious needle. Such a dummy needle is created in the switch station but does not control any device in the field. It corresponds for example to a real hand but only manual control, or to a device of way to be traveled in many ways but without moving part, such as an oblique crossing.

The dummy needle has the same control status and engagement information as a real needle. It allows to translate incompatibilities between routes

According to a nonlimiting exemplary embodiment, the device (1111, 1311) for operating the needle comprises an electric motor for moving the blades, equipped with a key switch for the emergency operation. The control of said motor is carried out by means of NS1 type relays for the control of the needle on the right and the needle on the left. The control device aims to verify that the conditions of passage of a train on the needle are well verified, that is to say that said needle is in the target position. These control devices are known from the prior art and consist in controlling the gluing, the takeoff, the concordance and the locking of the needle blades or the end stroke of the displacement motor of said blades. These controls are for example reflected by the state of a type NS1 relay. The presence detection device is, according to an exemplary embodiment, a VC.

Type NS1 relays are electromechanical relays compliant with the SIL4 safety level according to EN 50129, suitable for cabinet mounting according to a standard interface.

Figure 2 , in order to manage the interlockings corresponding to each of these zones, the system object of the invention assigns to each of them a generic control device, called block. Thus, according to this exemplary embodiment, a needle zone (Ag zone) is managed by a needle block (231, 233), called "Ag block", and an area of origin or destination (Gold Zone / Des ) is managed by a block of origin / destination (221, 222, 223, 224), called "block Gold / Des". Said blocks are able to generate commands for track equipment, and to receive information from said track equipment in the area. Thus, unlike distributed logic systems of the prior art where each virtual state machine manages a track equipment, the generic blocks object of the invention manage a plurality of track equipment of the same area of the track plan.

• une base générique, matériel et logiciel ;
• une couche logiciel applicative relative à chaque type de bloc ;
• une couche de paramétrage relative à l'application

For this purpose, each block includes:

• a generic database, hardware and software;
• an application software layer relating to each type of block;
• a parameter layer related to the application

Said parameterization layer makes it possible to adapt the block to the types of track equipment to which it is linked, which it controls and from which it receives information, and to the specificities of the lane plan. The connection of the blocks with the campaign is carried out in particular to the input-output means on or off, able to be interfaced with NS1 relays.

• d'assurer les échanges fonctionnels entre les blocs qui composent le système ;
• d'assurer les échanges fonctionnels entre lesdits blocs et l'UCT.

The blocks are connected to each other by a ring network (200), called functional digital link, or LNF. A control and processing unit (250), called UCT, is linked to the blocks via the LNF. Thus, the functions of the LNF are:

• to ensure functional exchanges between the blocks that make up the system;
• to ensure functional exchanges between said blocks and the CPU.

According to an exemplary embodiment, the LNF is an Ethernet type network embodied by fiber optic links.

A digital supervision link (210), called LNS, links a supervision unit (240) to the CPU. The supervision unit (240) is a human-machine interface that allows a supervisor to operate the system object of the invention. It presents the status of the equipment of the channel to the line controller in real time and archives the events. Said supervisory unit (240) is equipped with railway operating software and sends commands via the LNS to the CPU.

The CPU (250) is the functional interface between the supervisor and the blocks. It transmits the commands from the supervisor to the blocks and sends the information from the blocks to the supervisor. The CPU is an industrial computer, advantageously able to be rack mounted. Its security level is SILO, that is to say the lowest level of security, because said CPU is not an equipment likely to generate a risk vis-à-vis the interlocking. Security intrinsic system object of the invention is effectively carried by the blocks, the LNF and the communication protocol between the blocks.

• reçoit des commandes en provenance du superviseur et valide leur cohérence en termes de syntaxe et de contenu ;
• vérifie la compatibilité des commandes en provenance du superviseur et la disponibilité des blocs ;
• transmet les commandes, notamment de création d'un itinéraire vers les blocs, la formation le contrôle, l'autorisation et la destruction dudit itinéraire étant réalisés par les blocs ;
• reçoit et traite des informations en provenance des blocs tels que leurs états fonctionnels internes, l'état des entrées/sorties, les messages d'erreurs afin de les transmettre vers le superviseur ;
• archive l'historique des événements survenus sur le réseau et les équipements pour une éventuelle maintenance ;
• gère l'allumage d'indicateurs ;
• sert au besoin d'interface avec des boîtiers de commande d'itinéraire à pied d'oeuvre.

According to an exemplary embodiment, the CPU (250):

• receives commands from the supervisor and validates their consistency in terms of syntax and content;
• checks the compatibility of orders from the supervisor and the availability of blocks;
• transmits commands, including creating a route to the blocks, training control, authorization and destruction of said route being made by the blocks;
• receives and processes information from the blocks such as their internal functional states, the state of the inputs / outputs, the error messages in order to transmit them to the supervisor;
• archives the history of events occurring on the network and equipment for possible maintenance;
• manages the lighting of indicators;
• serves as an interface with control boxes for the route.

Figure 3 , the system object of the invention, according to an advantageous embodiment, comprises a functional digital link, linking the CPU (250) to the blocks Or / Des (221) and Ag blocks (231). Said blocks (221, 231) control and receive information from the track equipment (1211, 1311) via a so-called campaign link (310). The supervisory unit (240) exchanges information with the CPU (250) via the LNS (210) and additionally receives information from the campaign via the same LNS (210). According to this advantageous embodiment, the system which is the subject of the invention comprises a remote monitoring tool (340) connected to the blocks (121, 131) via a digital remote monitoring link (300), called LNT. The LNT (300) connects each block to the remote monitoring tool (340) and conveys to this tool (340) the information concerning the status of the main equipment (1211, 1311) interfacing with the blocks, as well as the operating state of the blocks (121, 131). According to this exemplary embodiment, the Ag blocks (131) and the Or / Des blocks (121) are designed to send this information directly to the remote monitoring tool, in using an LNT link (300), different from the LNF (200). According to an exemplary embodiment, the LNT (300) and the LNF (200) are established on the same physical medium, for example an optical fiber network, but using two local virtual networks (VLANs). Advantageously, each block (121, 131) further comprises a maintenance digital link (not shown) called LNM. According to an exemplary embodiment, this digital maintenance link is established with each block Ag or block Gold / Des by a USB type port (" Universal Serial Bus ") on the front of said block. This connection makes it possible, by means of a specific tool, called maintenance tool, to have access to the internal information of said block, in particular for its maintenance or parameterization. According to an exemplary embodiment, said maintenance tool is a laptop.

• les événements définis par un changement d'état du bloc ;
• l'état du bloc et la valeur de ses variables internes ;
• l'état des équipements (1311, 1211) en campagne, donné par l'état des entrées/sorties correspondantes dudit bloc, notamment les entrées-sorties tout ou rien.

The remote monitoring tool (340) has the function of collecting information from the blocks (131, 121) including the problems or faults that arise, in order to implement actions to solve them. The remote monitoring tool (340) sends alarms back to the maintenance personnel when a fault is detected on one of the elements of the system. For this purpose, the remote monitoring tool (340) periodically scans the remote monitoring network (300). If a change of state has occurred on a block, the remote monitoring tool will date and store this event. Thus, the remote monitoring tool (340) does not issue any command, it collects and realizes the timestamp of the following information for each block of the network:

• the events defined by a change of state of the block;
• the state of the block and the value of its internal variables;
• the state of equipment (1311, 1211) in the field, given by the state of the corresponding inputs / outputs of said block, in particular the input-outputs on or off.

The support of functions by physical blocks, rack-mounted greatly facilitates the maintenance of the system object of the invention.

Figure 4 , according to an exemplary embodiment, each block is in the form of a module adapted to rack mounting. It has on the back (not visible) all the input-output connections with the campaign and connections with the LNF and the LNS. In the front face, said block comprises LEDs for visualizing the state on-off inputs-outputs, and an interface (410), for example of the USB type, for establishing a digital maintenance link between said block and the maintenance tool. According to an exemplary embodiment, a block comprises on the front face a first set (420) of LEDs indicating the state of the on / off inputs of said block. These entries correspond to information from the campaign that indicates the status of the different track equipment, including via type NS1 relays. By way of example, these digital inputs indicate the state of the entries relating to the VCs monitored by the block, and the state of the hand control devices in the case of an Ag block. Another group (430) of LEDs, indicates the status of the on / off outputs of the block. These outputs are directed to NS1 relays that perform the command / power interface with the operating devices of track equipment such as needle motors or signals. Thus, the blocks corresponding to the same section of track being mounted in a cabinet, the observation of the front faces thereof immediately informs the configuration of the interlocking.

In case of malfunction or failure of a block, it is simply replaced by a block of the same type. In this case, the maintenance link (410) makes it possible to copy the parameterization of the replaced block into the replacement block. Advantageously, the cabinet comprises a coding device cooperating with the block which prohibits the assembly of a block Ag instead of a block Gold / Des and vice versa.

Figures 5 and 6 , all blocks include interfaces to network them on the LNF, LNT and LNM. These input-output ports are not represented on the Figures 5 and 6 to make it easier to read.

Figure 5 , according to an exemplary embodiment, a block Ag comprises 3 inputs (521) all or nothing corresponding to the detection of a vehicle, for example a train by means of 3 CdV corresponding to the three ends connected by the needle. According to an exemplary embodiment, the information from each VC is sent to the block, for example via a working contact of an NS1 type interface relay (510), the high level, for which the input is powered by a voltage of 24 volts, corresponding to the logic state "1" indicating the absence of occupation of the section monitored by said VC. Still according to this exemplary embodiment, the block Ag comprises two inputs (522) all or nothing allowing the control of the blades of the needle for the left and right directions. According to this exemplary embodiment, the position control information of the blades, left or right, is sent to the block via a working contact of an NS1-type interface relay, the high level, for which the input is powered by a voltage of 24 volts, corresponding to the logic state "1 For which the controlled needle is in its respective position (left or right). According to this embodiment, the block Ag has 2 outputs (531) all or nothing corresponding to the outputs for the control of the needle. According to an exemplary embodiment, the blades of the needle are moved via an electric motor. The control to a position (left or right) is achieved by the excitation of a relay type NS1. The duration of excitation of the relay varies according to the type of needle. This duration is fixed by means of a parameterization of the block. According to this embodiment, the output is in the logic state "1" when the movement of the needle is controlled. These inputs (521, 522) and outputs (531) of the Ag block are designed from a hardware and software point of view to achieve a SIL4 security level. These on / off inputs that provide the interface with the campaign are essential to the operation of the system object of the invention. The other features of the system involve exchanges between blocks and are carried out via the LNF. According to the embodiment and the intended application, the Ag block comprises other SIL4 safe or less on / off inputs / outputs. By way of non-limiting example, the block Ag comprises, for example, an input SIL4 for manually releasing a latch, an input for blocking the block, or an input for manual control by key of the needle.

Figure 6 , according to an exemplary embodiment a block Or / Des, comprises 4 inputs (621) of CdV. These 4 entries make it possible to treat any plan of way whatever its complexity. A 5 ^th entry (622) all or nothing corresponds to a so-called destruction pedal input. It corresponds to the output of an electromechanical detector sensitive to the passage of a vehicle over a defined area. This input, when activated at the logic level "1", which corresponds to the presence of said vehicle, can trigger the destruction, or release, of the route engaged. According to this exemplary embodiment, the block Or / Des comprises outputs (631, 632, 633, 634) all or nothing making it possible to control a signal of origin of the route under conditions consistent with the local operating conditions and spacing.

• une sortie (631) de commande du feu vert du signal de manoeuvre, réalisée par l'excitation d'un relais NS1 ;
• une sortie (632) pour la commande du feu rouge au clignotant, réalisée par l'excitation d'un relais NS1 ;
• une sortie (633) pour la commande du feu jaune, réalisée par l'excitation d'un relais NS1 ;
• une sortie (634) pour la commande de l'oeilleton, réalisée par l'excitation d'un relais NS1 ;

le feu étant au rouge lorsqu'aucune commande d'allumage des autres feux n'est activée. L'oeilleton est un signal lumineux, généralement blanc et placé en bas à gauche du signal, et qui est allumé lorsque ledit signal est franchissable notamment dans le cas d'une marche à vue.Thus, in the example of a railway application, the all or nothing outputs of the Gold / Des block include:

• an output (631) for controlling the green light of the operating signal, produced by the excitation of a relay NS1;
• an output (632) for the control of the red flashing light, performed by the excitation of a relay NS1;
• an output (633) for the control of the yellow light, performed by the excitation of a relay NS1;
• an output (634) for the control of the eyecup, achieved by the excitation of a relay NS1;

the light is red when no other ignition control is activated. The eyepiece is a signal light, usually white and placed at the bottom left of the signal, and which is lit when said signal is passable in particular in the case of a visual procedure.

These main inputs and outputs of the Gold / Des block are at the SIL4 security level. Depending on the intended application, the Gold / Des block includes other SIL4 or lower safe level all-or-nothing inputs and outputs. Advantageously, the block Or / Des comprises an input (625) called "control in opposite direction" and an output (635) called "engagement in the opposite direction". These inputs and outputs (625, 635) make it possible to manage a zone common to two systems according to the invention, that is to say to two sets of blocks each managing a section of track. Thus, several systems that are the subject of the invention are advantageously used adjacently to control very complex path planes, or to allow the network to evolve by the addition of new branches without having to restart the security of the previous branches.

According to an exemplary embodiment, the blocks Or / Des and the blocks Ag comprise one or more so-called proportional inputs (541, 641), which allow the acquisition of a signal of variable or scalable value. These inputs (541, 641) are of digital or analog type, and allow the acquisition of a proportional signal, for example analog between -5 volts and +5 volts or a proportional signal whose level is coded on 8 bits or more. Such proportional inputs make it possible to include in the criteria for switching on routes, parameters defined by their value, by way of non-limiting example, such a proportional input makes it possible in particular to control the effective lighting of a light signal. green or red.

• la sélection de l'itinéraire ;
• l'enclenchement de l'itinéraire ;
• le contrôle de l'itinéraire.

Returning to figure 1 , the method which is the subject of the invention is illustrated according to a implementation example corresponding to the realization of a route between two ends (101, 103) of the network implementing the two needles (111, 113) conjugate. According to an exemplary embodiment of the method of the invention, the realization of a route, until the authorization of the passage of a vehicle on said route, comprises 3 steps:

• the selection of the route;
• the engagement of the route;
• control of the route.

These three steps are followed, after or during the passage of the vehicle on said route, a step called destruction or release of the route.

• l'émission d'une commande électrique à destination de l'aiguille commandée par ledit bloc Ag (131) ;
• l'émission d'une commande à destination d'un bloc Ag adjacent non parcouru par l'itinéraire mais dont l'aiguille est à commander à titre de protection :
• l'émission d'une commande à destination d'un bloc Ag adjacent, non parcouru par l'itinéraire mais dont l'aiguille est à commander à titre de conjugaison.

Figure 7 , the route is initially defined by the supervisor using the supervision tool. During a creation step (710) said route is interpreted by the CPU (250) which transmits (711) via LNF a selection information to the attention of the first block Or / Des (121) of the route , in order to reserve said route. Upon receipt of this selection request, during a selection step (720), said Gold / Des (121) block moves from the "free" state to the selected state and transmits (721) a selection order to the downstream block (131) concerned by the route. The transition from the free state to the state selected for such a block Gold / Des is realized only if said block is actually in the "free" state and that it intervenes in the route like block of origin or as a destination block. When the block Ag (131) concerned by the route and downstream a block Gold / Des origin receives the selection order, it passes (725) from the free state to the selected state if no engagement does not oppose it, and this selection causes:

• issuing an electrical command to the needle controlled by said Ag block (131);
• issuing a command to an adjacent block Ag not traversed by the route but whose needle is to be ordered as protection:
• issuing a command to an adjacent block Ag, not traveled by the route but whose needle is to be controlled as a conjugation.

The first command is sent directly to the needle controlled by said Ag block (131) via one of the outputs (531 figure 5 ) of said block, while the other two commands are addressed to the respective blocks via the LNF. Then the Ag block (131) transmits (721) a selection instruction to the downstream block (733) traversed by the route and so on. The last block (123) of the route is always a destination Gold / Des block. When this last block Gold / Des (123) is selected (720), it sends (722) to the original block Gold / Des a notification of end of selection, which ensures that all the blocks traveled by the route have been selected.

Upon receipt of the notification of completion of selection, the original block Gold / Des (121) initiates the process of engaging the route for the formation of said route. The transition from the "selected" state to the "Enabled by an uncontrolled route" state is intended to prohibit any needle control, thus ensuring the continuity and protection of the route, in front of the vehicle traffic who borrows it and during its passage. On receipt of the end of selection notification, the original Or / Des (121) block passes (730) from the "Selected as Origin" state to the "Enabled by an uncontrolled route as "origin", and transmits (731) an engagement command to all the blocks (131, 133, 123) avals traversed by the route. Upon receipt of the latching command, each block passes (735) from the "selected" state to the "locked uncontrolled" state. This change of state, in the case of an Ag block, allows the locking of the needle that said Ag block controls. The reception of the trip initiation command (731) causes in each block traversed by the route the execution of a step (745) for checking the engagement conditions, and, if said engagement conditions are satisfied. , the block goes into the "controlled on" state and transmits (741) to the original Gold / Des block (121) a notification of transition to the "controlled on" state. Upon receipt of all these notifications (741) of transition to the controlled state, the original block Gold / Des (121) passes (750) to the state "locked checked" after checking the validity of its own conditions of engagement and controls the opening of the signal allowing the passage of the vehicle on the route. The setting of the concerned Or / Des block (121) allows it to define the indication to be presented to the signal according to the established route and the occupation status of the channels.

Figure 8 according to a first exemplary embodiment, said automatic destruction in origin, the attack of the first zone of the route causes the closure (860) of the original signal. After this zone has been released, in the case of an original destruction with pedal, the route interlock is deactivated (861). This deactivation causes the blocks (131, 133, 123) to pass to the free state (865). ) as and when the release of the VCs from the route by the vehicle. This mode of implementation corresponds to the release of the interlocking transit and allows the release of the needles as and their release by the vehicle, thereby smoothing the traffic.

• occupation du dernier CdV de transit, le CdV suivant étant libre ;
• occupation du CdV immédiatement en aval du dernier CdV de transit de l'itinéraire, lequel est en fait le CdV de destination ;
• libération du CdV de transit.

Figure 9 according to an alternative embodiment, said automatic destruction destination, the destruction of the route is initiated (960) by the block Or / Des (123) of destination after the crossing by said vehicle of the whole of the route. For example, when the vehicle is a train, and its passage is detected through track circuits, this crossing is determined by a sequence of VC occupancy between the last transit VC and the destination VC.

• occupancy of the last transit VC, the next VC being free;
• occupancy of the VC immediately downstream of the last transit VC of the route, which is actually the destination VC;
• release of the transit VC.

Thus it is certain that all the axles of said train, that is to say the train over its entire length, have crossed the last VC of transit. When the function "automatic destruction at destination" is activated, the arrival at destination causes the transmission (961) by the destination block Or / Des (123) of an automatic destruction command at its destination to the address of the destination. Gold block / Origin des. The receipt of this command, called token, by the original block Or / Des (121) causes the deactivation of the "Route initiation" function of this block (121) of origin. Upon receipt of this token, the original Gold / Des (121) block passes (965) to the "free" state provided that the incoming VCs on the route are free. Then, the original Or / Des block (121) transmits (962) to the downstream block (131) of the route an authorized destruction instruction, which block passes (965) to the "free" state and transmits (962) downstream block (133) of the route, an authorized destruction instruction and so on. This embodiment of the method that is the subject of the invention prohibits any modification of the route until the said route is cleared by the vehicle.

Figure 10 according to an example of a particular lane plan, it comprises only two ends (1010, 1020) and does not include a needle. For example, such a lane plan corresponds to a platform lane (1100). The interlockings relating to such a channel plan consist in managing the signals at both ends according to the information provided by associated CoPs (not shown). Under these conditions the system object of the invention is implemented with two blocks Gold / Des (1021, 1022) located at each end of the channel. The absence of Ag block on the corresponding route is taken into account in the so-called parameter layer of the software layer of said blocks Gold / Des (1021, 1022).

Figure 11A according to another example of a particular lane plan, said lane plan comprises 6 ends (1101, 1102, 1103, 1104, 1105, 1106), associated signals and an oblique crossing where the section between two of the ends (1106, 1103 ) crosses another section (1101, 1104) without a switch.

Figure 11B , the implementation of the system object of the invention on such a track plan is, according to an exemplary embodiment, carried out by means of two fictitious needles, corresponding to the oblique crossing, which fictitious needles are controlled by Ag blocks ( 1121, 1122). Thus, these Ag blocks (1121, 1122) controlling fictitious needles, cooperate with the Ag blocks (1123, 1124) controlling real needles to enable safe engagement and route destruction. The Ag blocks (1121, 1122) controlling fictitious needles are real Ag blocks that are integrated in the LNF network, but do not have the inputs / outputs relating to the commands and controls for moving the needle, or of which these functions have been inhibited. Their presence helps manage route incompatibilities.

The above description and the exemplary embodiments show that the invention achieves the desired objectives, in particular by combining parameterizable generic blocks connected by a ring network, it makes it possible to provide training and validation functions for a route in its entirety by distributing the control and security functions at the level of each generic block. Thus, the demonstration of the conformity of an installation made from the device of the invention with regard to a security level is greatly facilitated. Since the blocks are based on a generic architecture, the maintenance of the device as a whole and of each block in particular is facilitated. The device object of the invention is adapted both to a first installation but adapts and interfaces with any existing interlocking system, including electromechanical. Finally, the device that is the subject of the invention is evolutionary by the integration of new blocks, corresponding to other switchgear, in the network or by connecting several systems to each other.

Claims (15)

1. Interlock switching system suited to a track layout plan comprising 3 ends, comprising:

   - blocks capable of being mounted in a rack and of controlling the interlocks of the routes between these ends, each block comprising:

   - a generic hardware and software base;

   - an application software layer relative to each type of block;

   - a configuration layer relative to the application; and 3 functional states:

   -- free;

   -- selected;

   -- interlocked.

   - a processing and verification unit (250) capable of transmitting a command to the blocks in order to form a route;

   characterized in that,

   - the blocks consist of:

   a. at each route end, a so-called origin/destination block (121, 122, 123, 124, 1021, 1022), capable of controlling all the interlocks related to the clearances as well as the interlocks of an origin or destination zone, at a route end, which zone comprises, at the trackside, at least one device for detecting the presence of a vehicle on the track and a signal;

   b. a so-called point block (131, 133, 1121, 1122, 1123, 1124), capable of controlling the switching of a point rail and the associated interlocks from track equipment comprising at least:

   - a point rail and the switching device thereof,

   - a verification device for said point rail,

   - a device for detecting the presence of a vehicle at said point rail;

   c. and in that said blocks are capable of communicating with one another over a functional digital link consisting of a computer ring network;

   d. and in that the processing and verification unit transmits a command over said functional digital link to the first origin/destination block of the route in order to create a route between ends of the track layout plan.
2. System according to claim 1, wherein the interlocked state of a block comprises:

   - an "unverified interlocked" functional state;

   - a "verified interlocked" functional state.
3. System according to claim 1, comprising:

   e. a remote monitoring unit (340);

   f. a remote monitoring digital link (300), separate from the functional digital link (200), connecting the blocks to said remote monitoring unit (340).
4. System according to claim 1, wherein each block comprises an input/output port (410) for digital connection to a maintenance tool.
5. System according to claim 1, wherein each block comprises:

   - a logic input (521, 522, 621, 622), the restrictive state whereof is "0", capable of acquiring binary information transmitted by a switching relay;

   - a logic output (531, 631, 632, 633, 634, 635) capable of powering a switching relay or a power supply loop of a piece of equipment.
6. System according to claim 1, suitable for a track layout plan comprising a diamond crossing, and which comprises a point block (1121, 1122) controlling a dummy point rail.
7. Method for producing an interlock corresponding to a route and of implementing a system according to claim 1, characterized in that it comprises, between the blocks corresponding to the route and initiated by the origin/destination block selected as the origin of the route, the steps of:

   u. changing (720, 725) a so-called upstream block from the free state to the selected state;

   v. transmitting (721) from said upstream block to the so-called downstream block concerned by the route and situated immediately thereafter over the functional digital link, a selection command.
8. Method according to claim 7, wherein the upstream block is an origin/destination block and wherein steps u) and v) (720, 721) are only carried out if said block is in the free state and if it is selected as the origin or destination of the route.
9. Method according to claim 7, wherein the upstream block is a point block and wherein the change (725) to the selected state is only carried out if the block is in the free state, whereby the change to the selected state causes the transmission of an electric point command.
10. Method according to claim 7, comprising, after steps u) and v), the steps of:

    w. when all blocks of the route are in the selected state, changing (730) the origin block to the interlocked state;

    x. transmitting (731) an interlock command to each of the downstream blocks of the route.
11. Method according to claim 10, characterized in that the blocks of the route change to the "unverified interlocked" functional state at the end of step x), and in that it comprises, after step x), the steps of:

    y. for each block through which the route passes, checking the conditions for changing from the "unverified interlocked" state to the "verified interlocked" state and if these conditions are met, passing (745, 750) to the "verified interlocked" state;

    z. for each block through which the route passes, transmitting (731), to the origin block, information certifying the passage thereof to the "verified interlocked" state.
12. Method according to claim 11, wherein the block is a point block and wherein receipt of the command in step x) generates, at said block, the transmission of a command for immobilizing the point, then, in step y), the verification, by said block, of the position of the point, whereby the change (745) to the "verified interlocked" state of said block is only carried out if the result of this verification corresponds to the position of the point compatible with the route.
13. Method for producing the path of a route by a vehicle on a guide network between an origin end and a destination end, using a system according to claim 1, characterized in that it comprises steps of:

    i. defining a route by an origin end (121) and a destination end (123) and transmitting said route to the processing and verification unit;

    ii. transmitting (710), by the processing and verification unit (250), a so-called route creation command (711) to the origin/destination block (121) of the origin end;

    iii. selecting the route according to the method of claim 7;

    iv. interlocking the route according to the method of claim 10;

    v. verifying the route according to the method of claim 11;

    vi. opening (750) the signal controlled by the origin block and authorizing passage of the vehicle;

    vii. after passage of the vehicle, erasing (860, 960) the route and bringing the corresponding blocks back to the free state.
14. Method according to claim 13, wherein step vii) is initiated by the origin block and wherein it comprises a step of:
    avii. deactivating (865) the interlocking of the route by progressively changing, step by step via the functional digital link, the blocks to the free state as the zones monitored by said blocks are cleared.
15. Method according to claim 14, wherein step vii) is initiated (960) by the destination block and wherein it comprises the steps of:

    bvii. detecting the clearance of the route by the vehicle;

    cvii. releasing (965) the origin block and transmitting (962), to the downstream block, a command for deactivating the interlock, for the change (965) to the free state, step by step (962) over the functional digital link, of the blocks of the route.

Images