EP3102475B1 - Spare ressource for the faulty channel of a rail vehicle - Google Patents

Spare ressource for the faulty channel of a rail vehicle Download PDF

Info

Publication number
EP3102475B1
EP3102475B1 EP15715176.2A EP15715176A EP3102475B1 EP 3102475 B1 EP3102475 B1 EP 3102475B1 EP 15715176 A EP15715176 A EP 15715176A EP 3102475 B1 EP3102475 B1 EP 3102475B1
Authority
EP
European Patent Office
Prior art keywords
computer
channel
channels
computers
rail vehicle
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Not-in-force
Application number
EP15715176.2A
Other languages
German (de)
French (fr)
Other versions
EP3102475A1 (en
Inventor
Martin Lottermoser
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Siemens Mobility GmbH
Original Assignee
Siemens Mobility GmbH
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Siemens Mobility GmbH filed Critical Siemens Mobility GmbH
Publication of EP3102475A1 publication Critical patent/EP3102475A1/en
Application granted granted Critical
Publication of EP3102475B1 publication Critical patent/EP3102475B1/en
Not-in-force legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • BPERFORMING OPERATIONS; TRANSPORTING
    • B61RAILWAYS
    • B61LGUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L15/00Indicators provided on the vehicle or train for signalling purposes
    • B61L15/0063Multiple on-board control systems, e.g. "2 out of 3"-systems
    • BPERFORMING OPERATIONS; TRANSPORTING
    • B61RAILWAYS
    • B61LGUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L15/00Indicators provided on the vehicle or train for signalling purposes
    • B61L15/0081On-board diagnosis or maintenance
    • BPERFORMING OPERATIONS; TRANSPORTING
    • B61RAILWAYS
    • B61LGUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L27/00Central railway traffic control systems; Trackside control; Communication systems specially adapted therefor
    • B61L27/30Trackside multiple control systems, e.g. switch-over between different systems
    • B61L27/33Backup systems, e.g. switching when failures occur
    • BPERFORMING OPERATIONS; TRANSPORTING
    • B61RAILWAYS
    • B61LGUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L15/00Indicators provided on the vehicle or train for signalling purposes
    • B61L15/0018Communication with or on the vehicle or train
    • B61L15/0027Radio-based, e.g. using GSM-R
    • BPERFORMING OPERATIONS; TRANSPORTING
    • B61RAILWAYS
    • B61LGUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L15/00Indicators provided on the vehicle or train for signalling purposes
    • B61L15/0018Communication with or on the vehicle or train
    • B61L15/0036Conductor-based, e.g. using CAN-Bus, train-line or optical fibres
    • BPERFORMING OPERATIONS; TRANSPORTING
    • B61RAILWAYS
    • B61LGUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L27/00Central railway traffic control systems; Trackside control; Communication systems specially adapted therefor
    • B61L27/30Trackside multiple control systems, e.g. switch-over between different systems

Definitions

  • the invention relates to a method for providing a replacement resource for a defective computer channel of a rail vehicle, a corresponding device and a corresponding rail vehicle.
  • DE 103 19 904 A1 relates to a communication system for rail vehicles.
  • US 2013/0261842 A1 relates to a configuration control for rail vehicles.
  • multi-channel computer cores also referred to as computers
  • monitoring involves an exchange of synchronization information as well as a comparison of output data.
  • the computer channels operate synchronously, so that a deviation between computer channels or between the provided by the computer channels results, can be determined.
  • 2-of-3 system also referred to as 2v3 system
  • three computer channels are used so that a failure of a single computer channel can be tolerated: it can be determined by means of a majority decision regarding the results provided by the computer channels, which the three computer channels is defective.
  • the two remaining computer channels which still provide the same results, then still represent a redundant functional system that meets the safety requirements specified in railway technology.
  • 2v2 systems are less expensive than 2v3 systems, but if one of the two computer channels fails, manual on-site intervention is required, for example by maintenance personnel. In particular, it may be necessary to replace the failed computer channel or the computer with both computer channels. Until the intervention of the vehicle computer and thus the rail vehicle can be used only to a limited extent (for example, at a greatly reduced speed), which can lead to significant operational restrictions.
  • the object of the invention is to avoid the above-mentioned disadvantages and in particular to provide an efficient solution to provide a redundant resource for a computer of a rail vehicle flexible.
  • the replacement resource can be implemented both in hardware and in software. A combination of hardware and software is possible.
  • An advantage of the solution presented here is that the availability e.g. of a 2v2 system to the level of a 2v3 system without requiring each system (e.g., each computer) to require a third computer channel. This reduces effort and costs for each computer.
  • a rail vehicle (also referred to as "train”) has at least one car, wherein the car may be a traction vehicle, a travel car, a freight car or a combination of such compartments or functions.
  • the traction unit has a driver's cab (also referred to as an operator station) and can be designed with or without drive.
  • the traction vehicle may in particular be a locomotive.
  • the rail vehicle may be a metro train (e.g., suburban or underground) at least partially underground in tunnels.
  • the rail vehicle may be a vehicle driver or a driverless rail vehicle.
  • the traction unit may have an emergency operating console, which is arranged, for example, in the passenger compartment behind a closable flap.
  • the spare resource is a spare computer channel which is connected to the computer via a network.
  • the network may be an Ethernet.
  • a communication link is used, which allows a fast and secure data transmission.
  • the spare resource is a computing resource in a computer or a computer channel which is connected to the computer via a network.
  • the replacement resource is a resource in another computer of the rail vehicle.
  • the communication link has a wired and / or wireless connection.
  • control computer causes a reset of the at least one computer channel, so that the computer channel performs so-called switch-on.
  • the old memory content e.g., previously communicated to the control computer
  • a still active or remaining computer channel can continue to be used if it passes the test.
  • control computer could send a command to the at least one computer channel and check the response delivered by the at least one computer channel.
  • the command may be, for example, the request to perform an operation, e.g. an arithmetic operation, act. On the basis of this check, the control computer can determine which computer channel is defective and which computer channel is still functional.
  • the mechanism employed here may be e.g. depend on a given level of security, i. a probability of a safety-threatening misconduct.
  • control computer is executed externally to the computer.
  • control computer is not part of the rail vehicle.
  • control computer can also be located in the rail vehicle.
  • a next embodiment is that the control computer has the replacement resource.
  • the replacement resource is performed separately to the rail vehicle and separately to the control computer, wherein the replacement resource has a communication connection to the control computer.
  • the replacement resource may have a direct communication link to the control computer, or e.g. be coupled via the network with the control computer.
  • a further development consists in that the replacement resource is arranged in the rail vehicle or separately from the rail vehicle.
  • the processing unit is designed separately from the rail vehicle, wherein the Connection to the processing unit comprises a wired and / or wireless connection.
  • the processing unit mentioned here may in particular be embodied as a processor unit and / or an at least partially hard-wired or logical circuit arrangement, which is set up, for example, in such a way that the method can be carried out as described herein.
  • Said processing unit may be or include any type of processor or computer or computer with correspondingly necessary peripherals (memory, input / output interfaces, input / output devices, etc.).
  • the processing unit may be part of a control unit of the rail vehicle.
  • a failed computer channel with a computer channel (referred to here as a replacement computer channel) at least partially (in particular completely) to replace, with the failed computer channel and the replacement computer channel are connected to each other via a communication link.
  • the replacement computer channel can be a resource which can be provided in hardware and / or software and which can be connected or attached via the communication connection.
  • the failed computer channel can be part of a computer with multiple computer channels.
  • the computer is a computer that is used in a web component, e.g. used in a rail vehicle.
  • the failed computer channel is one of several computer channels of a computer, wherein the multiple computer channels are designed to be redundant.
  • the redundant computer channels may operate synchronously, and the results provided synchronously by the computer channels may be e.g. be checked at predetermined times. It is also possible that different computer channels perform similar or identical operations, which should each produce the same results. As soon as a deviation in the results is determined, the failure of at least one of the computer channels can be deduced.
  • the replacement computer channel is part of another computer, the other computer is connected to the computer in which the failed computer channel is implemented via the communication link.
  • the communication connection may be, for example, an Ethernet connection or include such.
  • the communication connection can be wired and / or wireless. Also combinations of a wired and a wireless connection as a communication connection are possible.
  • the approach is particularly advantageous if a multiplicity of identical or almost identical computer channels are present in different computers, which are interconnected, for example, via a network.
  • the failure of a computer channel in a computer can thus be compensated for via a computer channel of another computer (i.e., the spare computer channel) to which the communication link exists.
  • the replacement computer channel takes over all or part of the functions of the failed computer channel. Also, it is an option that such a replacement computer channel be used for a predetermined period of time (e.g., temporarily), for example, until the defective hardware can be replaced.
  • the replacement computer channel can be held by a computer in the network.
  • a computer may provide one or more computer channels for potential failures. If a computer channel fails in a 2v2 system, a functional 2v2 system can be restored by means of such a replacement computer channel.
  • a replacement computer channel may be implemented in hardware and / or software.
  • resources are provided on a hardware unit for the replacement computer channel, which takes over the function of the failed computer channel partially or completely (co-).
  • Such a resource can also be kept in the form of software.
  • the replacement computer channel is preferably supplied with necessary data (eg RAM contents) before it can take over the function of the failed computer channel.
  • necessary data eg RAM contents
  • the same or similar mechanisms can be used as in the addition of a third computer channel to two already running computer channels.
  • a defective computer channel can be determined in a 2v2 system using the replacement computer channel and / or a separately executed control computer.
  • the replacement computer channel and / or the control computer evaluates information provided by the two computer channels of the 2v2 system and, as a result, determines which of the two computer channels of the 2v2 system is defective.
  • a central office can be provided, with which a communication connection exists (at least temporarily). This judgment may be made by a replacement computer channel or by the central office (e.g., in the form of the control computer).
  • the control computer may e.g. assess the functionality of the computer channels of the 2v2 system and, as a result, initialize the replacement computer channel.
  • the control computer and the replacement computer channel can be implemented on a common hardware or on a distributed hardware.
  • Such distributed hardware may also be provided over a communication link, e.g. be connected via a network.
  • the computer channel found to be defective could be switched off by the control computer or switched inactive.
  • control computer could be designed by the standards of railway technology as safe.
  • the communication connection is also preferably made using a secure communication protocol, e.g. a protocol (such as UDP, IP or Ethernet) that complies with the EN 50159 standard.
  • a protocol such as UDP, IP or Ethernet
  • Fig.1 shows a schematic diagram with two computers 101 and 102, each representing a 2v2 system and can be arranged in a rail vehicle.
  • the computers 101 and 102 may be arranged in different cars of the same rail vehicle.
  • Each of the computers 101 and 102 here has two computer channels.
  • the computers 101 and 102 are interconnected via a network 103. Furthermore, with network 103 and thus with the two computers 101 and 102, a control computer 104 is connected, which has a replacement computer channel 105.
  • the control computer 104 can determine which of the two computer channels is defective and provide the replacement computer channel 105 for this purpose.
  • the computers 101 and 102 of the rail vehicle are again redundantly equipped with two functioning computer channels and the operation of the rail vehicle can be continued.
  • the replacement computer channel 105 is part of the control computer 104.
  • the replacement computer channel 105 may be executable separate hardware of the control computer 104 or on the hardware of the control computer 104 (e.g., in the form of software).
  • a replacement computer channel 106 could be maintained, which has a direct communication link 107 with the control computer 104 and is administered by the latter to take over the function of the failed computer channel.
  • the spare computer channel 106 is coupled to the network 103 and could also connect to the control computer through this coupling (e.g., instead of the direct communication link 107).
  • the replacement computer channel 106 could be part of a computer that provides resources for multiple replacement computer channels, which may be activated by the control computer 104 to take over functions of failed or defective computer channels.
  • a computer channel is used as a replacement computer channel, which can be omitted temporarily. If, for example, the computers 101 and 102 each have two computer channels and, for example, one of them falls in the rail vehicle two computer channels in the computer 101, so the function of the failed computer channel could be at least partially (or completely) of one (or both) computer channels of the computer 102 mitübernommen. As described, the administration can take place via the control computer 104, which instead of the replacement computer channel 105 or the replacement computer channel 106 sets the resources of the computer channels of the computer 102 accordingly.
  • This scenario may be advantageous if, for example, the computer 102 is only partially needed in a certain operating mode and / or if the computer 102 has sufficient computing resources that the functionality of the defective computer channel can be taken over without any loss of its own functionality.
  • Another advantage could be that the communication link between two computers of the same rail vehicle has a higher performance than a communication link to a spare computer channel 105 or 106 outside the rail vehicle.
  • An advantage of the solution presented here is that the availability of a 2v2 system can be raised to the level of a 2v3 system without requiring each system (e.g., each computer) to have a third computer channel. This reduces effort and costs for each computer.
  • Fig.2 shows an exemplary flowchart illustrating the use of another computer channel that is connected via the communication link.
  • a step 201 two computer channels of a 2v2 system diverge, ie there are different results in the two computer channels, which should actually deliver the same results in the case of proper operation. In this case, it is initially not clear which of the two computer channels is defective.
  • the two computer channels (or only one of the two computer channels, because the other can no longer perform transmission due to a hardware failure) transfer their RAM contents (or portions of their RAM contents) to the control computer, checking their functionality, and requesting them Success of the control computer a replacement computer channel.
  • control computer decides, e.g. by triggering a reset at the at least one remaining computer channel and / or by performing a test with the at least one remaining computer channel, which of the two computer channels is functional, initializes the replacement computer channel with the data of the functional computer channel and provides the contact between the functional computer channel and the replacement computer channel.

Landscapes

  • Engineering & Computer Science (AREA)
  • Mechanical Engineering (AREA)
  • Health & Medical Sciences (AREA)
  • Biomedical Technology (AREA)
  • General Health & Medical Sciences (AREA)
  • Hardware Redundancy (AREA)
  • Electric Propulsion And Braking For Vehicles (AREA)
  • Train Traffic Observation, Control, And Security (AREA)
  • Safety Devices In Control Systems (AREA)

Description

Die Erfindung betrifft ein Verfahren zur Bereitstellung einer Ersatz-Ressource für einen defekten Rechnerkanal eines Schienenfahrzeugs, eine entsprechende Vorrichtung sowie ein entsprechendes Schienenfahrzeug.The invention relates to a method for providing a replacement resource for a defective computer channel of a rail vehicle, a corresponding device and a corresponding rail vehicle.

DE 103 19 904 A1 betrifft ein Kommunikationssystem für Schienenfahrzeuge. DE 103 19 904 A1 relates to a communication system for rail vehicles.

US 2013/0261842 A1 betrifft eine Konfigurationssteuerung für Schienenfahrzeuge. US 2013/0261842 A1 relates to a configuration control for rail vehicles.

In Stellwerks- und (Schienen-)Fahrzeug-Computern für signaltechnisch sichere Steuerungen werden mehrkanalige Rechnerkerne (auch bezeichnet als Computer) eingesetzt, bei denen sich die Rechnerkanäle gegenseitig überwachen. Insbesondere erfolgen bei einer solchen Überwachung ein Austausch von Synchronisierungsinformationen sowie ein Vergleich ausgegebener Daten. Damit arbeiten die Rechnerkanäle synchron, so dass eine Abweichung zwischen Rechnerkanälen bzw. zwischen den von den Rechnerkanälen bereitgestellten Ergebnissen, feststellbar ist.In interlocking and (rail) vehicle computers for signal-safe controls multi-channel computer cores (also referred to as computers) are used, in which monitor the computer channels each other. In particular, such monitoring involves an exchange of synchronization information as well as a comparison of output data. Thus, the computer channels operate synchronously, so that a deviation between computer channels or between the provided by the computer channels results, can be determined.

In einem sogenannten 2-von-3-System (auch bezeichnet als 2v3-System) werden drei Rechnerkanäle eingesetzt, so dass ein Ausfall eines einzelnen Rechnerkanals toleriert werden kann: so kann mittels einer Mehrheitsentscheidung betreffend die von den Rechnerkanälen bereitgestellten Ergebnisse festgestellt werden, welcher der drei Rechnerkanäle defekt ist. Die beiden verbleibenden Rechnerkanäle, die noch die gleichen Ergebnisse liefern, stellen dann immer noch ein redundantes funktionales System dar, das in der Bahntechnik vorgegebenen Sicherheitsanforderungen entspricht. Insbesondere kann mit zwei von drei funktionierenden Rechnerkanälen der Betrieb eines Schienenfahrzeugs fortgesetzt werden.In a so-called 2-of-3 system (also referred to as 2v3 system) three computer channels are used so that a failure of a single computer channel can be tolerated: it can be determined by means of a majority decision regarding the results provided by the computer channels, which the three computer channels is defective. The two remaining computer channels, which still provide the same results, then still represent a redundant functional system that meets the safety requirements specified in railway technology. In particular, can with two of three working computer channels the operation of a rail vehicle to be continued.

In einem sogenannten 2-von-2-System (auch bezeichnet als 2v2-System) gibt es 2 Rechnerkanäle, wobei jede Abweichung zwischen den Rechnerkanälen zu einer sicherungstechnischen Stilllegung (einer sogenannten "Sicherheitsabschaltung") des gesamten Fahrzeug-Computers führt. Bei einer Abweichung zwischen den von den beiden Rechnerkanälen produzierten Ergebnissen kann nicht mittels einer Mehrheitsentscheidung wie bei dem 2v3-System festgestellt werden, welcher der beiden Rechnerkanäle die richtigen Ergebnisse produziert bzw. welcher defekt ist.In a so-called 2-of-2 system (also referred to as 2v2 system) there are 2 computer channels, with each deviation between the computer channels to a security-technical shutdown (a so-called "safety shutdown") of entire vehicle computer leads. In case of a deviation between the results produced by the two computer channels, it can not be determined by means of a majority decision as in the 2v3 system which of the two computer channels produces the correct results or which one is defective.

2v2-Systeme sind weniger aufwändig als 2v3-Systeme, aber bei Ausfall eines der beiden Rechnerkanäle ist ein manueller Eingriff vor Ort erforderlich, beispielsweise durch Wartungspersonal. Insbesondere kann es nötig sein, den ausgefallenen Rechnerkanal oder den Computer mit beiden Rechnerkanälen auszutauschen. Bis zu dem Eingriff sind der Fahrzeug-Computer und damit das Schienenfahrzeug nur in eingeschränktem Umfang (z.B. mit stark reduzierter Geschwindigkeit) einsetzbar, was zu erheblichen betrieblichen Einschränkungen führen kann.2v2 systems are less expensive than 2v3 systems, but if one of the two computer channels fails, manual on-site intervention is required, for example by maintenance personnel. In particular, it may be necessary to replace the failed computer channel or the computer with both computer channels. Until the intervention of the vehicle computer and thus the rail vehicle can be used only to a limited extent (for example, at a greatly reduced speed), which can lead to significant operational restrictions.

Die Aufgabe der Erfindung besteht darin, die vorstehend genannten Nachteile zu vermeiden und insbesondere eine effiziente Lösung anzugeben, eine redundante Ressource für einen Computer eines Schienenfahrzeugs flexibel bereitzustellen.The object of the invention is to avoid the above-mentioned disadvantages and in particular to provide an efficient solution to provide a redundant resource for a computer of a rail vehicle flexible.

Diese Aufgabe wird gemäß den Merkmalen der unabhängigen Ansprüche gelöst. Bevorzugte Ausführungsformen sind insbesondere den abhängigen Ansprüchen entnehmbar.This object is achieved according to the features of the independent claims. Preferred embodiments are in particular the dependent claims.

Zur Lösung der Aufgabe wird ein Verfahren vorgeschlagen gemäß den Merkmalen des Anspruchs 1.To solve the problem, a method is proposed according to the features of claim 1.

Weiterhin wird die Aufgabe gelöst gemäß einem Schienenfahrzeug mit den Merkmalen des Anspruchs 2.Furthermore, the object is achieved according to a rail vehicle with the features of claim 2.

Die Ersatz-Ressource kann sowohl in Hardware als auch in Software ausgeführt sein. Auch eine Kombination von Hard- und Software ist möglich.The replacement resource can be implemented both in hardware and in software. A combination of hardware and software is possible.

Ein Vorteil der hier vorgestellten Lösung besteht darin, dass die Verfügbarkeit z.B. eines 2v2-Systems auf das Niveau eines 2v3-Systems gehoben werden kann, ohne dass hierfür jedes System (z.B. jeder Computer) einen dritten Rechnerkanal benötigen würde. Hierdurch reduzieren sich Aufwand und Kosten für die einzelnen Computer.An advantage of the solution presented here is that the availability e.g. of a 2v2 system to the level of a 2v3 system without requiring each system (e.g., each computer) to require a third computer channel. This reduces effort and costs for each computer.

Hierbei sei angemerkt, dass ein Schienenfahrzeug (auch bezeichnet als "Zug") mindestens einen Wagen aufweist, wobei der Wagen ein Triebfahrzeug, ein Reisewagen, ein Güterwagen oder eine Kombination aus derartigen Abteilen oder Funktionen sein kann. Das Triebfahrzeug weist eine Führerkabine (auch bezeichnet als Bedienplatz) auf und kann mit oder ohne Antrieb ausgeführt sein. Das Triebfahrzeug kann insbesondere eine Lokomotive sein. Insbesondere kann es sich bei dem Schienenfahrzeug um eine Metrostadtbahn (z.B. S- oder U-Bahn) handeln, die zumindest teilweise unterirdisch in Tunneln fährt. Insbesondere kann das Schienenfahrzeug ein mit einem Fahrzeugführer besetztes oder ein führerloses Schienenfahrzeug sein. Im fahrerlosen Betrieb kann das Triebfahrzeug ein Notbedienpult aufweisen, das beispielsweise im Fahrgastraum hinter einer verschließbaren Klappe angeordnet ist.It should be noted that a rail vehicle (also referred to as "train") has at least one car, wherein the car may be a traction vehicle, a travel car, a freight car or a combination of such compartments or functions. The traction unit has a driver's cab (also referred to as an operator station) and can be designed with or without drive. The traction vehicle may in particular be a locomotive. In particular, the rail vehicle may be a metro train (e.g., suburban or underground) at least partially underground in tunnels. In particular, the rail vehicle may be a vehicle driver or a driverless rail vehicle. In driverless operation, the traction unit may have an emergency operating console, which is arranged, for example, in the passenger compartment behind a closable flap.

Gemäß der Erfindung ist die Ersatz-Ressource ein Ersatz-Rechnerkanal, der über ein Netzwerk mit dem Computer verbunden ist.According to the invention, the spare resource is a spare computer channel which is connected to the computer via a network.

Beispielsweise kann das Netzwerk ein Ethernet sein. Vorzugsweise wird eine Kommunikationsverbindung eingesetzt, die eine schnelle und gesicherte Datenübertragung ermöglicht.For example, the network may be an Ethernet. Preferably, a communication link is used, which allows a fast and secure data transmission.

Gemäß der Erfindung ist die Ersatz-Ressource eine Rechenressource in einem Computer oder einem Rechnerkanal, der über ein Netzwerk mit dem Computer verbunden ist.According to the invention, the spare resource is a computing resource in a computer or a computer channel which is connected to the computer via a network.

Insbesondere ist es eine Weiterbildung, dass die Ersatz-Ressource eine Ressource in einem weiteren Computer des Schienenfahrzeugs ist.In particular, it is a development that the replacement resource is a resource in another computer of the rail vehicle.

Auch ist es eine Weiterbildung, dass die Kommunikationsverbindung eine drahtgebundene und/oder eine drahtlose Verbindung aufweist.It is also a development that the communication link has a wired and / or wireless connection.

Gemäß der Erfindung wird festgestellt, welcher von mindestens zwei Rechnerkanälen des Computers defekt ist,

  • indem die mindestens zwei Rechnerkanäle zumindest einen Teil ihres Speicherinhalts an einen Steuerrechner übermitteln,
  • indem der Steuerrechner anhand der übermittelten Speicherinhalte bestimmt, welcher der Rechnerkanäle defekt ist.
According to the invention, it is determined which of at least two computer channels of the computer is defective,
  • in that the at least two computer channels transmit at least part of their memory contents to a control computer,
  • in that the control computer determines which of the computer channels is defective on the basis of the transferred memory contents.

Auch ist es eine Möglichkeit, dass der Steuerrechner einen Reset des mindestens einen Rechnerkanals veranlasst, damit der Rechnerkanal sogenannte Einschaltprüfungen durchführt. Nach erfolgreicher Durchführung der Einschaltprüfungen könnte der alte Speicherinhalt (der z.B. zuvor an den Steuerrechner übermittelt wurde) wieder an den Rechnerkanal übertragen und die Arbeit von diesem fortgesetzt werden.It is also a possibility that the control computer causes a reset of the at least one computer channel, so that the computer channel performs so-called switch-on. Upon successful completion of the power-on checks, the old memory content (e.g., previously communicated to the control computer) could be transferred back to the computer channel and work continued therefrom.

Eine nächste Weiterbildung besteht darin, dass für den defekten Rechnerkanal die Ersatz-Ressource bereitgestellt wird,

  • indem der Steuerrechner die Ersatz-Ressource anhand des übermittelten Speicherinhalts des nicht defekten Rechnerkanals initialisiert und
  • indem der Steuerrechner einen Kontakt zwischen der Ersatz-Ressource und dem nicht defekten Rechnerkanal herstellt.
A next development is that the replacement resource is provided for the defective computer channel,
  • in that the control computer initializes the replacement resource on the basis of the transferred memory contents of the non-defective computer channel and
  • in that the control computer establishes contact between the replacement resource and the non-defective computer channel.

Auch ist es eine Weiterbildung, dass festgestellt wird, welcher von mindestens zwei Rechnerkanälen des Computers defekt ist, indem ein Steuerrechner mittels mindestens einer Prüfung bestimmt, welcher der Rechnerkanäle defekt ist.It is also a development that is determined which of at least two computer channels of the computer is defective is determined by a control computer by means of at least one test, which of the computer channels is defective.

Beispielsweise kann ein noch aktiver oder verbleibender Rechnerkanal weiter genutzt werden, wenn er die Prüfung besteht.For example, a still active or remaining computer channel can continue to be used if it passes the test.

So könnte der Steuerrechner einen Befehl an den mindestens einen Rechnerkanal schicken und die von dem mindestens einen Rechnerkanal gelieferte Antwort überprüfen. Bei dem Befehl kann es sich beispielsweise um die Aufforderung zur Durchführung einer Operation, z.B. einer Rechenoperation, handeln. Anhand dieser Prüfung kann der Steuerrechner bestimmen, welcher Rechnerkanal defekt und welcher Rechnerkanal noch funktionsfähig ist.Thus, the control computer could send a command to the at least one computer channel and check the response delivered by the at least one computer channel. The command may be, for example, the request to perform an operation, e.g. an arithmetic operation, act. On the basis of this check, the control computer can determine which computer channel is defective and which computer channel is still functional.

Der hierbei eingesetzte Mechanismus kann z.B. von einem vorgegebenen Sicherheitsniveau abhängen, d.h. von einer Wahrscheinlichkeit eines die Sicherheit gefährdenden Fehlverhaltens.The mechanism employed here may be e.g. depend on a given level of security, i. a probability of a safety-threatening misconduct.

Eine Ausgestaltung ist es, dass der Steuerrechner extern zu dem Computer ausgeführt ist.An embodiment is that the control computer is executed externally to the computer.

Eine alternative Ausführungsform besteht darin, dass der Steuerrechner nicht Teil des Schienenfahrzeugs ist.An alternative embodiment is that the control computer is not part of the rail vehicle.

Optional kann der Steuerrechner auch in dem Schienenfahrzeug verortet sein.Optionally, the control computer can also be located in the rail vehicle.

Eine nächste Ausgestaltung ist es, dass der Steuerrechner die Ersatz-Ressource aufweist.A next embodiment is that the control computer has the replacement resource.

Auch ist es eine Ausgestaltung, dass die Ersatz-Ressource separat zu dem Schienenfahrzeug und separat zu dem Steuerrechner ausgeführt ist, wobei die Ersatz-Ressource eine Kommunikationsverbindung zu dem Steuerrechner aufweist.It is also an embodiment that the replacement resource is performed separately to the rail vehicle and separately to the control computer, wherein the replacement resource has a communication connection to the control computer.

Die Ersatz-Ressource kann eine direkte Kommunikationsverbindung zu dem Steuerrechner aufweisen oder z.B. über das Netzwerk mit dem Steuerrechner gekoppelt sein.The replacement resource may have a direct communication link to the control computer, or e.g. be coupled via the network with the control computer.

Die Ausführungen betreffend das Verfahren gelten für die anderen Anspruchskategorien entsprechend.The statements concerning the method apply correspondingly to the other categories of claim.

Eine Weiterbildung besteht darin, dass die Ersatz-Ressource in dem Schienenfahrzeug oder separat zu dem Schienenfahrzeug angeordnet ist.A further development consists in that the replacement resource is arranged in the rail vehicle or separately from the rail vehicle.

Auch ist es eine Weiterbildung, dass die Verarbeitungseinheit separat zu dem Schienenfahrzeug ausgeführt ist, wobei die Verbindung zu der Verarbeitungseinheit eine drahtgebundene und/oder eine drahtlose Verbindung umfasst.It is also a development that the processing unit is designed separately from the rail vehicle, wherein the Connection to the processing unit comprises a wired and / or wireless connection.

Die hier genannte Verarbeitungseinheit kann insbesondere als eine Prozessoreinheit und/oder eine zumindest teilweise festverdrahtete oder logische Schaltungsanordnung ausgeführt sein, die beispielsweise derart eingerichtet ist, dass das Verfahren wie hierin beschrieben durchführbar ist. Besagte Verarbeitungseinheit kann jede Art von Prozessor oder Rechner oder Computer mit entsprechend notwendiger Peripherie (Speicher, Input/Output-Schnittstellen, Ein-Ausgabe-Geräte, etc.) sein oder umfassen. Die Verarbeitungseinheit kann Teil einer Steuereinheit des Schienenfahrzeugs sein.The processing unit mentioned here may in particular be embodied as a processor unit and / or an at least partially hard-wired or logical circuit arrangement, which is set up, for example, in such a way that the method can be carried out as described herein. Said processing unit may be or include any type of processor or computer or computer with correspondingly necessary peripherals (memory, input / output interfaces, input / output devices, etc.). The processing unit may be part of a control unit of the rail vehicle.

Die oben beschriebenen Eigenschaften, Merkmale und Vorteile dieser Erfindung sowie die Art und Weise, wie diese erreicht werden, werden klarer und deutlicher verständlich im Zusammenhang mit der folgenden schematischen Beschreibung von Ausführungsbeispielen, die im Zusammenhang mit den Zeichnungen näher erläutert werden. Dabei können zur Übersichtlichkeit gleiche oder gleichwirkende Elemente mit gleichen Bezugszeichen versehen sein.The above-described characteristics, features, and advantages of this invention, as well as the manner in which they will be achieved, will become clearer and more clearly understood in connection with the following schematic description of exemplary embodiments which will be described in detail in conjunction with the drawings. In this case, the same or equivalent elements may be provided with the same reference numerals for clarity.

Es zeigen:

Fig.1
ein schematisches Diagramm mit zwei Computern, die jeweils ein 2v2-System darstellen und in einem Schienenfahrzeug angeordnet sein können, wobei bei einem Ausfall eines der Rechnerkanäle der Computer von einem Steuerrechner ein Ersatz-Rechnerkanal bzw. eine entsprechende Ressource bereitgestellt wird;
Fig.2
ein beispielhaftes Ablaufdiagramm, das die Nutzung eines weiteren Rechnerkanals, der über die Kommunikationsverbindung angebunden wird, veranschaulicht.
Show it:
Fig.1
a schematic diagram with two computers, each representing a 2v2 system and can be arranged in a rail vehicle, wherein in case of failure of one of the computer channels of the computer from a control computer, a replacement computer channel or a corresponding resource is provided;
Fig.2
an exemplary flowchart illustrating the use of another computer channel that is connected via the communication link.

Es wird vorgeschlagen, einen ausgefallenen Rechnerkanal mit einem Rechnerkanal (hier bezeichnet als Ersatz-Rechnerkanal) zumindest teilweise (insbesondere vollständig) zu ersetzen, wobei der ausgefallene Rechnerkanal und der Ersatz-Rechnerkanal über eine Kommunikationsverbindung miteinander verbunden sind. Bei dem Ersatz-Rechnerkanal kann es sich um eine in Hardware und/oder Software bereitstellbare Ressource handeln, die über die Kommunikationsverbindung angebunden bzw. anbindbar ist.It is proposed that a failed computer channel with a computer channel (referred to here as a replacement computer channel) at least partially (in particular completely) to replace, with the failed computer channel and the replacement computer channel are connected to each other via a communication link. The replacement computer channel can be a resource which can be provided in hardware and / or software and which can be connected or attached via the communication connection.

Der ausgefallene Rechnerkanal kann Teil eines Computers mit mehreren Rechnerkanälen sein. Der Computer ist insbesondere ein Computer, der in einer Bahnkomponente, z.B. in einem Schienenfahrzeug eingesetzt ist.The failed computer channel can be part of a computer with multiple computer channels. In particular, the computer is a computer that is used in a web component, e.g. used in a rail vehicle.

Der ausgefallene Rechnerkanal ist einer von mehreren Rechnerkanälen eines Computers, wobei die mehreren Rechnerkanäle redundant ausgelegt sind. Die redundant ausgelegten Rechnerkanäle können beispielsweise synchron arbeiten und die synchron von den Rechnerkanälen bereitgestellten Ergebnisse können z.B. zu vorgegebenen Zeitpunkten überprüft werden. Auch ist es möglich, dass unterschiedliche Rechnerkanäle ähnliche oder gleiche Operationen ausführen, die jeweils die gleichen Ergebnisse produzieren sollten. Sobald eine Abweichung in den Ergebnissen festgestellt wird, kann auf den Ausfall zumindest eines der Rechnerkanäle rückgeschlossen werden.The failed computer channel is one of several computer channels of a computer, wherein the multiple computer channels are designed to be redundant. For example, the redundant computer channels may operate synchronously, and the results provided synchronously by the computer channels may be e.g. be checked at predetermined times. It is also possible that different computer channels perform similar or identical operations, which should each produce the same results. As soon as a deviation in the results is determined, the failure of at least one of the computer channels can be deduced.

Der Ersatz-Rechnerkanal ist Teil eines weiteren Computers, wobei der weitere Computer mit dem Computer, in dem der ausgefallene Rechnerkanal implementiert ist, über die Kommunikationsverbindung verbunden ist.The replacement computer channel is part of another computer, the other computer is connected to the computer in which the failed computer channel is implemented via the communication link.

Die Kommunikationsverbindung kann z.B. eine Ethernet-Verbindung sein oder eine solche umfassen. Die Kommunikationsverbindung kann drahtgebunden und/oder drahtlos ausgeführt sein. Auch sind Kombinationen von einer drahtgebundenen und einer drahtlosen Verbindung als Kommunikationsverbindung möglich.The communication connection may be, for example, an Ethernet connection or include such. The communication connection can be wired and / or wireless. Also combinations of a wired and a wireless connection as a communication connection are possible.

Der Ansatz ist insbesondere von Vorteil, wenn eine Vielzahl gleicher oder nahezu gleicher Rechnerkanäle in verschiedenen Computern vorhanden ist, die beispielsweise über ein Netzwerk miteinander verbunden sind. Der Ausfall eines Rechnerkanals in einem Computer kann somit über einen Rechnerkanal eines anderen Computers (d.h. den Ersatz-Rechnerkanal), zu dem die Kommunikationsverbindung besteht, kompensiert werden.The approach is particularly advantageous if a multiplicity of identical or almost identical computer channels are present in different computers, which are interconnected, for example, via a network. The failure of a computer channel in a computer can thus be compensated for via a computer channel of another computer (i.e., the spare computer channel) to which the communication link exists.

Insbesondere ist es möglich, dass der Ersatz-Rechnerkanal alle oder einen Teil der Funktionen des ausgefallenen Rechnerkanals übernimmt. Auch ist es eine Option, dass ein solcher Ersatz-Rechnerkanal für eine vorgegebene Zeitdauer (z.B. vorübergehend) genutzt wird, beispielsweise bis die defekte Hardware ersetzt werden kann.In particular, it is possible that the replacement computer channel takes over all or part of the functions of the failed computer channel. Also, it is an option that such a replacement computer channel be used for a predetermined period of time (e.g., temporarily), for example, until the defective hardware can be replaced.

Auch kann der Ersatz-Rechnerkanal von einem Computer im Netzwerk vorgehalten werden. Ein solcher Computer kann einen oder mehrere Rechnerkanäle für potenzielle Ausfälle vorsehen. Fällt in einem 2v2-System ein Rechnerkanal aus, kann mittels eines solchen Ersatz-Rechnerkanals wieder ein funktionsfähiges 2v2-System hergestellt werden.Also, the replacement computer channel can be held by a computer in the network. Such a computer may provide one or more computer channels for potential failures. If a computer channel fails in a 2v2 system, a functional 2v2 system can be restored by means of such a replacement computer channel.

Ein Ersatz-Rechnerkanal kann in Hardware und/oder Software realisiert sein. Insbesondere ist es möglich, dass für den Ersatz-Rechnerkanal Ressourcen auf einer Hardware-Einheit bereitgestellt werden, die die Funktion des ausgefallenen Rechnerkanals teilweise oder vollständig (mit-)übernimmt. Eine solche Ressource kann auch in Form von Software bereitgehalten werden.A replacement computer channel may be implemented in hardware and / or software. In particular, it is possible that resources are provided on a hardware unit for the replacement computer channel, which takes over the function of the failed computer channel partially or completely (co-). Such a resource can also be kept in the form of software.

Der Ersatz-Rechnerkanal wird vorzugsweise mit notwendigen Daten versorgt (z.B. RAM-Inhalten), bevor er die Funktion des ausgefallenen Rechnerkanals übernehmen kann. Hierbei können gleiche oder ähnliche Mechanismen verwendet werden wie bei dem Hinzufügen eines dritten Rechnerkanals zu zwei bereits laufenden Rechnerkanälen.The replacement computer channel is preferably supplied with necessary data (eg RAM contents) before it can take over the function of the failed computer channel. Here, the same or similar mechanisms can be used as in the addition of a third computer channel to two already running computer channels.

Beispielsweise kann ein defekter Rechnerkanal in einem 2v2-System bestimmt werden mithilfe des Ersatz-Rechnerkanals und/oder eines separat ausgeführten Steuerrechners. Hierfür bewertet der Ersatz-Rechnerkanal und/oder der Steuerrechner Informationen, die von den beiden Rechnerkanälen des 2v2-Systems bereitgestellt werden, und infolgedessen bestimmt, welcher der beiden Rechnerkanäle des 2v2-Systems defekt ist.For example, a defective computer channel can be determined in a 2v2 system using the replacement computer channel and / or a separately executed control computer. For this purpose, the replacement computer channel and / or the control computer evaluates information provided by the two computer channels of the 2v2 system and, as a result, determines which of the two computer channels of the 2v2 system is defective.

Vorzugsweise kann für eine solche Beurteilung von Rechnerkanälen eine Zentralstelle vorgesehen sein, mit der eine Kommunikationsverbindung (zumindest zeitweise) besteht. Diese Beurteilung kann von einem Ersatz-Rechnerkanal oder von der Zentralstelle (z.B. in Form des Steuerrechners) durchgeführt werden. Der Steuerrechner kann z.B. die Funktionsfähigkeit der Rechnerkanäle des 2v2-Systems beurteilen und infolgedessen die Initialisierung des Ersatz-Rechnerkanals durchführen. Insbesondere können der Steuerrechner und der Ersatz-Rechnerkanal auf einer gemeinsamen Hardware oder auf einer verteilten Hardware implementiert sein. Eine solche verteilte Hardware kann ebenfalls über eine Kommunikationsverbindung, z.B. über ein Netzwerk, gekoppelt sein. Auch könnte der für defekt befundene Rechnerkanal von dem Steuerrechner abgeschaltet oder inaktiv geschaltet werden.Preferably, for such an evaluation of computer channels, a central office can be provided, with which a communication connection exists (at least temporarily). This judgment may be made by a replacement computer channel or by the central office (e.g., in the form of the control computer). The control computer may e.g. assess the functionality of the computer channels of the 2v2 system and, as a result, initialize the replacement computer channel. In particular, the control computer and the replacement computer channel can be implemented on a common hardware or on a distributed hardware. Such distributed hardware may also be provided over a communication link, e.g. be connected via a network. Also, the computer channel found to be defective could be switched off by the control computer or switched inactive.

Ein solcher Steuerrechner könnte nach Maßstäben der Bahntechnik als sicher ausgelegt sein. Auch die Kommunikationsverbindung erfolgt vorzugsweise unter Ausnutzung eines sicheren Kommunikationsprotokolls, z.B. eines Protokolls (z.B. über UDP, IP oder Ethernet), das die Norm EN 50159 erfüllt.Such a control computer could be designed by the standards of railway technology as safe. The communication connection is also preferably made using a secure communication protocol, e.g. a protocol (such as UDP, IP or Ethernet) that complies with the EN 50159 standard.

Fig.1 zeigt ein schematisches Diagramm mit zwei Computern 101 und 102, die jeweils ein 2v2-System darstellen und in einem Schienenfahrzeug angeordnet sein können. Insbesondere können die Computer 101 und 102 in verschiedenen Wagen des gleichen Schienenfahrzeugs angeordnet sein. Jeder der Computer 101 und 102 weist hier zwei Rechnerkanäle auf. Fig.1 shows a schematic diagram with two computers 101 and 102, each representing a 2v2 system and can be arranged in a rail vehicle. In particular, the computers 101 and 102 may be arranged in different cars of the same rail vehicle. Each of the computers 101 and 102 here has two computer channels.

Die Computer 101 und 102 sind über ein Netzwerk 103 miteinander verbunden. Weiterhin ist mit Netzwerk 103 und somit mit den beiden Computern 101 und 102 ein Steuerrechner 104 verbunden, der einen Ersatz-Rechnerkanal 105 aufweist.The computers 101 and 102 are interconnected via a network 103. Furthermore, with network 103 and thus with the two computers 101 and 102, a control computer 104 is connected, which has a replacement computer channel 105.

Fällt einer der Rechnerkanäle in einem der Computer 101 oder 102 aus, kann der Steuerrechner 104 bestimmen, welcher der beiden Rechnerkanäle defekt ist und hierfür den Ersatz-Rechnerkanal 105 bereitstellen. Damit sind die Computer 101 und 102 des Schienenfahrzeugs wieder redundant mit zwei funktionierenden Rechnerkanälen ausgestattet und der Betrieb des Schienenfahrzeugs kann fortgesetzt werden.If one of the computer channels in one of the computers 101 or 102 fails, the control computer 104 can determine which of the two computer channels is defective and provide the replacement computer channel 105 for this purpose. Thus, the computers 101 and 102 of the rail vehicle are again redundantly equipped with two functioning computer channels and the operation of the rail vehicle can be continued.

Der Ersatz-Rechnerkanal 105 ist Teil des Steuerrechners 104. Beispielhaft kann der Ersatz-Rechnerkanal 105 eine separate Hardware des Steuerrechners 104 oder auf der Hardware des Steuerrechners 104 (z.B. in Form von Software) ablauffähig sein.The replacement computer channel 105 is part of the control computer 104. By way of example, the replacement computer channel 105 may be executable separate hardware of the control computer 104 or on the hardware of the control computer 104 (e.g., in the form of software).

Optional (oder zusätzlich) könnte ein Ersatz-Rechnerkanal 106 vorgehalten werden, der eine direkte Kommunikationsverbindung 107 mit dem Steuerrechner 104 aufweist und von diesem administriert wird zur Übernahme der Funktion des ausgefallenen Rechnerkanals. Der Ersatz-Rechnerkanal 106 ist an das Netzwerk 103 gekoppelt und könnte auch über diese Kopplung (z.B. anstatt der direkten Kommunikationsverbindung 107) mit dem Steuerrechner in Verbindung treten. Weiterhin könnte der Ersatz-Rechnerkanal 106 Teil eines Computers sein, der Ressourcen für mehrere Ersatz-Rechnerkanäle bereitstellt, die ggf. von dem Steuerrechner 104 zur Übernahme von Funktionen ausgefallener oder defekter Rechnerkanäle aktiviert werden.Optionally (or additionally), a replacement computer channel 106 could be maintained, which has a direct communication link 107 with the control computer 104 and is administered by the latter to take over the function of the failed computer channel. The spare computer channel 106 is coupled to the network 103 and could also connect to the control computer through this coupling (e.g., instead of the direct communication link 107). Furthermore, the replacement computer channel 106 could be part of a computer that provides resources for multiple replacement computer channels, which may be activated by the control computer 104 to take over functions of failed or defective computer channels.

Eine weitere Option besteht darin, dass als Ersatz-Rechnerkanal ein Rechnerkanal genutzt wird, auf den vorübergehend verzichtet werden kann. Sind beispielsweise in dem Schienenfahrzeug die Computer 101 und 102 mit jeweils zwei Rechnerkanälen vorhanden und fällt beispielsweise einer der beiden Rechnerkanäle in dem Computer 101 aus, so könnte die Funktion des ausgefallenen Rechnerkanals zumindest teilweise (oder vollständig) von einem (oder beiden) Rechnerkanälen des Computers 102 mitübernommen werden. Die Administration kann wie beschrieben über den Steuerrechner 104 erfolgen, der anstatt des Ersatz-Rechnerkanals 105 oder des Ersatz-Rechnerkanals 106 die Ressourcen der Rechnerkanäle des Computers 102 entsprechend einstellt. Dieses Szenario mag vorteilhaft sein, wenn z.B. der Computer 102 in einem bestimmten Betriebsmodus nur eingeschränkt benötigt wird und/oder wenn der Computer 102 über ausreichend rechnertechnische Ressourcen verfügt, dass die Funktionalität des defekten Rechnerkanals ohne Einbuße der eigenen Funktionalität mitübernommen werden kann. Ein weiterer Vorteil könnte darin bestehen, dass die Kommunikationsverbindung zwischen zwei Computern des gleichen Schienenfahrzeugs eine höhere Performanz aufweist als eine Kommunikationsverbindung zu einem Ersatz-Rechnerkanal 105 oder 106 außerhalb des Schienenfahrzeugs.Another option is that a computer channel is used as a replacement computer channel, which can be omitted temporarily. If, for example, the computers 101 and 102 each have two computer channels and, for example, one of them falls in the rail vehicle two computer channels in the computer 101, so the function of the failed computer channel could be at least partially (or completely) of one (or both) computer channels of the computer 102 mitübernommen. As described, the administration can take place via the control computer 104, which instead of the replacement computer channel 105 or the replacement computer channel 106 sets the resources of the computer channels of the computer 102 accordingly. This scenario may be advantageous if, for example, the computer 102 is only partially needed in a certain operating mode and / or if the computer 102 has sufficient computing resources that the functionality of the defective computer channel can be taken over without any loss of its own functionality. Another advantage could be that the communication link between two computers of the same rail vehicle has a higher performance than a communication link to a spare computer channel 105 or 106 outside the rail vehicle.

Ein Vorteil der hier vorgestellten Lösung besteht darin, dass die Verfügbarkeit eines 2v2-Systems auf das Niveau eines 2v3-Systems gehoben werden kann, ohne dass hierfür jedes System (z.B. jeder Computer) einen dritten Rechnerkanal benötigen würde. Hierdurch reduzieren sich Aufwand und Kosten für die einzelnen Computer.An advantage of the solution presented here is that the availability of a 2v2 system can be raised to the level of a 2v3 system without requiring each system (e.g., each computer) to have a third computer channel. This reduces effort and costs for each computer.

Fig.2 zeigt ein beispielhaftes Ablaufdiagramm, das die Nutzung eines weiteren Rechnerkanals, der über die Kommunikationsverbindung angebunden wird, veranschaulicht. Fig.2 shows an exemplary flowchart illustrating the use of another computer channel that is connected via the communication link.

In einem Schritt 201 laufen zwei Rechnerkanäle eines 2v2-System auseinander, d.h. es ergeben sich unterschiedliche Ergebnisse in den beiden Rechnerkanälen, die eigentlich im Falle des ordnungsgemäßen Betriebs gleiche Ergebnisse liefern sollten. Hierbei ist zunächst nicht erkennbar, welcher der beiden Rechnerkanäle defekt ist.In a step 201, two computer channels of a 2v2 system diverge, ie there are different results in the two computer channels, which should actually deliver the same results in the case of proper operation. In this case, it is initially not clear which of the two computer channels is defective.

In einem Schritt 202 übertragen die beiden Rechnerkanäle (oder nur einer der beiden Rechnerkanäle, weil der andere aufgrund eines Hardwarefehlers keine Übertragung mehr durchführen kann) ihre RAM-Inhalte (oder Teile ihres RAM-Inhalts) an den Steuerrechner, überprüfen ihre Funktionsfähigkeit und beantragen bei Erfolg von dem Steuerrechner einen Ersatz-Rechnerkanal.In a step 202, the two computer channels (or only one of the two computer channels, because the other can no longer perform transmission due to a hardware failure) transfer their RAM contents (or portions of their RAM contents) to the control computer, checking their functionality, and requesting them Success of the control computer a replacement computer channel.

In einem Schritt 203 entscheidet der Steuerrechner, z.B. durch Auslösung eines Resets bei dem mindestens einen verbleibenden Rechnerkanal und/oder durch Durchführung einer Prüfung mit dem mindestens einen verbleibenden Rechnerkanal, welcher der beiden Rechnerkanäle funktionsfähig ist, initialisiert den Ersatz-Rechnerkanal mit den Daten des funktionsfähigen Rechnerkanals und stellt den Kontakt zwischen dem funktionsfähigen Rechnerkanal und dem Ersatz-Rechnerkanal her.In a step 203, the control computer decides, e.g. by triggering a reset at the at least one remaining computer channel and / or by performing a test with the at least one remaining computer channel, which of the two computer channels is functional, initializes the replacement computer channel with the data of the functional computer channel and provides the contact between the functional computer channel and the replacement computer channel.

Bei Ausfall eines der beiden Rechnerkanäle wird beispielsweise der von dem Ausfall nicht betroffene Rechnerkanal den Steuerrechner kontaktieren und es wird ein Ersatz-Rechnerkanal für diesen Rechnerkanal bereitgestellt.If one of the two computer channels fails, for example, the computer channel not affected by the failure will contact the control computer and a replacement computer channel for this computer channel is made available.

Obwohl die Erfindung im Detail durch das mindestens eine gezeigte Ausführungsbeispiel näher illustriert und beschrieben wurde, so ist die Erfindung nicht darauf eingeschränkt und andere Variationen können vom Fachmann hieraus abgeleitet werden, ohne den Schutzumfang der Ansprüche zu verlassen.While the invention has been further illustrated and described in detail by the at least one embodiment shown, the invention is not so limited and other variations can be derived therefrom by those skilled in the art without departing from the scope of the claims.

Claims (2)

  1. Method for providing a spare computer channel (105, 106) for a faulty computer channel of a rail vehicle,
    - wherein the rail vehicle has two computers (101, 102), which represent a redundant 2-by-2 system in each case,
    - wherein each of the computers (101, 102) has two computer channels,
    - wherein the two computers (101, 102) are interconnected via a network (103), wherein a control computer (104) is connected to the network, and thus to the two computers (101, 102), and has the spare computer channel (105),
    - in which the control computer (104) connected to the computers (101) via the network (103) ascertains which of the two computer channels of one of the computers (101) is faulty,
    - by the two computer channels transmitting at least some of their memory content to the control computer (104),
    - by the control computer (104) determining which of the computer channels is faulty on the basis of the transmitted memory content,
    - in which the control computer (104) provides the spare computer channel (105, 106) for the faulty computer channel via the network (103),
    - so that the computer (101, 102) with the faulty computer channel is once again redundantly equipped with two functioning computer channels.
  2. Rail vehicle, which has two computers (101, 102), which represent a redundant 2-by-2 system in each case,
    - wherein each computer is configured such that it has two computer channels,
    - wherein the two computers (101, 102) are interconnected via a network (103), wherein a control computer (104) is connected to the network (103), and thus to the two computers (101, 102), and has a spare computer channel (105),
    - wherein the control computer (104) is configured such that it is able to ascertain, with the existing network connection (103) with the computers (101, 102), which of the two computer channels of one of the computers (101) is faulty,
    - by the two computer channels transmitting at least some of their memory content to the control computer (104),
    - by the control computer (104) determining which of the computer channels is faulty on the basis of the transmitted memory content,
    - in which the control computer (104) is further configured so as to provide a spare computer channel (105, 106) for the faulty computer channel via the network (103),
    - so that the computer (101, 102) with the faulty computer channel is once again redundantly equipped with two functioning computer channels.
EP15715176.2A 2014-03-31 2015-03-18 Spare ressource for the faulty channel of a rail vehicle Not-in-force EP3102475B1 (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
DE102014206078.8A DE102014206078A1 (en) 2014-03-31 2014-03-31 Replacement resource for a defective computer channel of a rail vehicle
PCT/EP2015/055606 WO2015150070A1 (en) 2014-03-31 2015-03-18 Replacement resource for a defective computer channel of a rail vehicle

Publications (2)

Publication Number Publication Date
EP3102475A1 EP3102475A1 (en) 2016-12-14
EP3102475B1 true EP3102475B1 (en) 2019-08-07

Family

ID=52823601

Family Applications (1)

Application Number Title Priority Date Filing Date
EP15715176.2A Not-in-force EP3102475B1 (en) 2014-03-31 2015-03-18 Spare ressource for the faulty channel of a rail vehicle

Country Status (5)

Country Link
EP (1) EP3102475B1 (en)
DE (1) DE102014206078A1 (en)
ES (1) ES2754178T3 (en)
HU (1) HUE046712T2 (en)
WO (1) WO2015150070A1 (en)

Families Citing this family (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107187465B (en) * 2017-06-09 2020-06-02 湖南中车时代通信信号有限公司 ATO system architecture of unit-level hot standby redundancy
DE102017214992A1 (en) * 2017-08-28 2019-02-28 Siemens Aktiengesellschaft Signal-technically safe system
DE102020204095A1 (en) * 2020-03-30 2021-09-30 Siemens Mobility GmbH Method and system for data management in a means of transport
CN111516728A (en) * 2020-05-08 2020-08-11 湖南中车时代通信信号有限公司 Vehicle-mounted control system of train
CN112550382B (en) * 2020-12-17 2022-08-23 卡斯柯信号有限公司 Method for realizing redundancy switching of wireless communication channel for ground equipment
CN116055315B (en) * 2023-03-31 2023-06-02 北京全路通信信号研究设计院集团有限公司 MVB communication configuration method, device, equipment and storage medium

Family Cites Families (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE3742118A1 (en) * 1987-12-11 1989-06-22 Siemens Ag Data transmission device with secure signalling
DE19833867C5 (en) * 1998-07-28 2006-10-12 Alcatel Method for secure single-channel transmission of data between the computer nodes of a computer network and computer network and computer node
DE10319904B4 (en) * 2003-04-29 2007-04-05 Siemens Ag communication system
US8645010B2 (en) * 2009-10-22 2014-02-04 General Electric Company System and method for locomotive inter-consist equipment sparing and redundancy
US9956974B2 (en) * 2004-07-23 2018-05-01 General Electric Company Vehicle consist configuration control
US20110046859A1 (en) * 2006-02-22 2011-02-24 Knorr-Bremse Systeme Fuer Nutzfahrzeuge Gmbh Transmission actuator device and method of operating the transmission actuator device
US20100256843A1 (en) * 2009-04-02 2010-10-07 Lookheed Martin Corporation System for Vital Brake Interface with Real-Time Integrity Monitoring

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
None *

Also Published As

Publication number Publication date
DE102014206078A1 (en) 2015-10-01
HUE046712T2 (en) 2020-03-30
ES2754178T3 (en) 2020-04-16
WO2015150070A1 (en) 2015-10-08
EP3102475A1 (en) 2016-12-14

Similar Documents

Publication Publication Date Title
EP3102475B1 (en) Spare ressource for the faulty channel of a rail vehicle
DE3208573C2 (en) 2 out of 3 selection device for a 3 computer system
DE102013020177A1 (en) Motor car, has sensor systems actuated by main control unit in nominal operating mode, and replacement control unit controlling sensor systems if mistake arises in main control unit in emergency operation state
EP2874857B1 (en) Operating a rail vehicle by means of an etcs device, railvehicle and apparatus
EP2555959B1 (en) Method and device for determining the train length of a plurality of coupled railway traction vehicles
DE60305998T2 (en) An apparatus, gateway, and method for loading information between aircraft on-board equipment and off-board charging equipment
DE2701925C3 (en) Vehicle control with two on-board computers
EP3046817B1 (en) Rail vehicle combination
DE102017208888A1 (en) Method for safely carrying out a batch baptism
DE102018220605B4 (en) Motor vehicle network and method for operating a motor vehicle network
EP2133255B1 (en) Rail vehicle control with two different data transmission systems
EP2978654B1 (en) Method for replacing a first signal box with a second signal box
DE602004007130T2 (en) ERROR IDENTIFICATION AND SUPPRESSION IN A TDMA-BASED NETWORK NODE
DE102015218906B4 (en) Method for operating a data transmission system and data transmission system
WO2021233675A1 (en) Vehicle control system with interface between data processing paths
EP1843929B1 (en) Control system for controlling and/or monitoring an object
WO2018158039A1 (en) Switchover between element controllers in railway operation
DE102017203220A1 (en) Switching between element controllers in railway operation
WO2018162161A1 (en) Method and devices for the transfer of information without feedback
DE102006042131B4 (en) computer system
DE102017217447A1 (en) Method and arrangement for carrying out a driving operation of track-guided vehicles in a route network structured in sections
WO2016016003A2 (en) Method and device for operating a railway safety system
DE102022204795A1 (en) Method and system for the automated determination of the train integrity of a train set
EP3026771B1 (en) Electrical energy distributor
DE102023200912A1 (en) Device for controlling a traffic system, adjustable element of a traffic system, traffic system

Legal Events

Date Code Title Description
STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE INTERNATIONAL PUBLICATION HAS BEEN MADE

PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: REQUEST FOR EXAMINATION WAS MADE

17P Request for examination filed

Effective date: 20160909

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

AX Request for extension of the european patent

Extension state: BA ME

DAV Request for validation of the european patent (deleted)
DAX Request for extension of the european patent (deleted)
RAP1 Party data changed (applicant data changed or rights of an application transferred)

Owner name: SIEMENS AKTIENGESELLSCHAFT

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: EXAMINATION IS IN PROGRESS

17Q First examination report despatched

Effective date: 20180108

RAP1 Party data changed (applicant data changed or rights of an application transferred)

Owner name: SIEMENS MOBILITY GMBH

GRAP Despatch of communication of intention to grant a patent

Free format text: ORIGINAL CODE: EPIDOSNIGR1

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: GRANT OF PATENT IS INTENDED

INTG Intention to grant announced

Effective date: 20190403

GRAS Grant fee paid

Free format text: ORIGINAL CODE: EPIDOSNIGR3

GRAA (expected) grant

Free format text: ORIGINAL CODE: 0009210

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE PATENT HAS BEEN GRANTED

AK Designated contracting states

Kind code of ref document: B1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

REG Reference to a national code

Ref country code: GB

Ref legal event code: FG4D

Free format text: NOT ENGLISH

REG Reference to a national code

Ref country code: CH

Ref legal event code: EP

Ref country code: AT

Ref legal event code: REF

Ref document number: 1163404

Country of ref document: AT

Kind code of ref document: T

Effective date: 20190815

REG Reference to a national code

Ref country code: DE

Ref legal event code: R096

Ref document number: 502015009891

Country of ref document: DE

REG Reference to a national code

Ref country code: IE

Ref legal event code: FG4D

Free format text: LANGUAGE OF EP DOCUMENT: GERMAN

REG Reference to a national code

Ref country code: CH

Ref legal event code: NV

Representative=s name: SIEMENS SCHWEIZ AG, CH

REG Reference to a national code

Ref country code: NO

Ref legal event code: T2

Effective date: 20190807

REG Reference to a national code

Ref country code: NL

Ref legal event code: MP

Effective date: 20190807

REG Reference to a national code

Ref country code: LT

Ref legal event code: MG4D

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: HR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190807

Ref country code: NL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190807

Ref country code: LT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190807

Ref country code: BG

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20191107

Ref country code: FI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190807

Ref country code: PT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20191209

Ref country code: SE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190807

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20191207

Ref country code: RS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190807

Ref country code: LV

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190807

Ref country code: GR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20191108

Ref country code: AL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190807

REG Reference to a national code

Ref country code: HU

Ref legal event code: AG4A

Ref document number: E046712

Country of ref document: HU

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: TR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190807

REG Reference to a national code

Ref country code: ES

Ref legal event code: FG2A

Ref document number: 2754178

Country of ref document: ES

Kind code of ref document: T3

Effective date: 20200416

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: DK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190807

Ref country code: PL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190807

Ref country code: EE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190807

Ref country code: IT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190807

Ref country code: RO

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190807

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200224

Ref country code: CZ

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190807

Ref country code: SK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190807

Ref country code: SM

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190807

REG Reference to a national code

Ref country code: DE

Ref legal event code: R097

Ref document number: 502015009891

Country of ref document: DE

PLBE No opposition filed within time limit

Free format text: ORIGINAL CODE: 0009261

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: NO OPPOSITION FILED WITHIN TIME LIMIT

PG2D Information on lapse in contracting state deleted

Ref country code: IS

26N No opposition filed

Effective date: 20200603

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190807

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MC

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190807

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: LU

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20200318

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20200318

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: FR

Payment date: 20210315

Year of fee payment: 7

Ref country code: NO

Payment date: 20210304

Year of fee payment: 7

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: AT

Payment date: 20210208

Year of fee payment: 7

Ref country code: BE

Payment date: 20210319

Year of fee payment: 7

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: DE

Payment date: 20210519

Year of fee payment: 7

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: GB

Payment date: 20210406

Year of fee payment: 7

Ref country code: HU

Payment date: 20210516

Year of fee payment: 7

Ref country code: CH

Payment date: 20210602

Year of fee payment: 7

Ref country code: ES

Payment date: 20210615

Year of fee payment: 7

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190807

Ref country code: CY

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190807

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190807

REG Reference to a national code

Ref country code: DE

Ref legal event code: R119

Ref document number: 502015009891

Country of ref document: DE

REG Reference to a national code

Ref country code: NO

Ref legal event code: MMEP

REG Reference to a national code

Ref country code: CH

Ref legal event code: PL

REG Reference to a national code

Ref country code: AT

Ref legal event code: MM01

Ref document number: 1163404

Country of ref document: AT

Kind code of ref document: T

Effective date: 20220318

GBPC Gb: european patent ceased through non-payment of renewal fee

Effective date: 20220318

REG Reference to a national code

Ref country code: BE

Ref legal event code: MM

Effective date: 20220331

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: NO

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20220331

Ref country code: LI

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20220331

Ref country code: HU

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20220319

Ref country code: GB

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20220318

Ref country code: FR

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20220331

Ref country code: DE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20221001

Ref country code: CH

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20220331

Ref country code: AT

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20220318

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: BE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20220331

REG Reference to a national code

Ref country code: ES

Ref legal event code: FD2A

Effective date: 20230504

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: ES

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20220319