EP3549841B1 - Zugverkehrssteuerungssystem und verfahren zum durchführen von sicherheitskritischen bahnbetriebsprozessen in einem zugverkehrssteuerungssystem - Google Patents

Zugverkehrssteuerungssystem und verfahren zum durchführen von sicherheitskritischen bahnbetriebsprozessen in einem zugverkehrssteuerungssystem Download PDF

Info

Publication number
EP3549841B1
EP3549841B1 EP18166202.4A EP18166202A EP3549841B1 EP 3549841 B1 EP3549841 B1 EP 3549841B1 EP 18166202 A EP18166202 A EP 18166202A EP 3549841 B1 EP3549841 B1 EP 3549841B1
Authority
EP
European Patent Office
Prior art keywords
control system
route
command
rtcs
train control
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
EP18166202.4A
Other languages
English (en)
French (fr)
Other versions
EP3549841A1 (de
Inventor
Michael Schäfer
Klaus Michael SCHULDES
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Thales Management and Services Deutschland GmbH
Original Assignee
Thales Management and Services Deutschland GmbH
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority to HRP20220807TT priority Critical patent/HRP20220807T1/hr
Application filed by Thales Management and Services Deutschland GmbH filed Critical Thales Management and Services Deutschland GmbH
Priority to PL18166202.4T priority patent/PL3549841T3/pl
Priority to SI201830695T priority patent/SI3549841T1/sl
Priority to RS20220543A priority patent/RS63288B1/sr
Priority to EP18166202.4A priority patent/EP3549841B1/de
Priority to PT181662024T priority patent/PT3549841T/pt
Priority to DK18166202.4T priority patent/DK3549841T3/da
Priority to HUE18166202A priority patent/HUE059124T2/hu
Priority to ES18166202T priority patent/ES2919925T3/es
Priority to LTEP18166202.4T priority patent/LT3549841T/lt
Priority to RS20220616A priority patent/RS63339B9/sr
Priority to PT181772179T priority patent/PT3549842T/pt
Priority to ES18177217T priority patent/ES2923182T3/es
Priority to DK18177217.9T priority patent/DK3549842T5/da
Priority to PL18177217.9T priority patent/PL3549842T3/pl
Priority to HRP20220827TT priority patent/HRP20220827T1/hr
Priority to SI201830714T priority patent/SI3549842T1/sl
Priority to HUE18177217A priority patent/HUE059058T3/hu
Priority to EP18177217.9A priority patent/EP3549842B9/de
Priority to LTEP18177217.9T priority patent/LT3549842T/lt
Priority to KR1020207031789A priority patent/KR102536023B1/ko
Priority to PCT/EP2019/058618 priority patent/WO2019193145A1/en
Priority to AU2019249938A priority patent/AU2019249938B2/en
Publication of EP3549841A1 publication Critical patent/EP3549841A1/de
Priority to SA520420235A priority patent/SA520420235B1/ar
Application granted granted Critical
Publication of EP3549841B1 publication Critical patent/EP3549841B1/de
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B61—RAILWAYS
    • B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L19/00—Arrangements for interlocking between points and signals by means of a single interlocking device, e.g. central control
    • B61L19/06—Interlocking devices having electrical operation
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B61—RAILWAYS
    • B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L21/00—Station blocking between signal boxes in one yard
    • B61L21/06—Vehicle-on-line indication; Monitoring locking and release of the route
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B61—RAILWAYS
    • B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L27/00—Central railway traffic control systems; Trackside control; Communication systems specially adapted therefor
    • B61L27/30—Trackside multiple control systems, e.g. switch-over between different systems
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B61—RAILWAYS
    • B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L19/00—Arrangements for interlocking between points and signals by means of a single interlocking device, e.g. central control
    • B61L19/06—Interlocking devices having electrical operation
    • B61L2019/065—Interlocking devices having electrical operation with electronic means

Definitions

  • the invention concerns a train traffic control system comprising a traffic management system for executing safety critical operations, a route and train control system, and a command and status adapter, wherein the train traffic control system is adapted to exchange information and commands between the traffic management system and the route and train control system via the command and status adapter, and wherein the command and status adapter comprises software components for carrying out functions with basic integrity, wherein the traffic control system further comprises at least one software component for carrying out a function for controlling safety critical operations.
  • the invention also concerns a method for carrying out safety critical operations within a train traffic control system.
  • Route and train control systems are adapted to manage safely the routes and movement-authorities in the railway network for running trains and to control protect and protect trains from running to fast or beyond their end of movement-authority.
  • Route and train control systems can comprise an interlocking system, a radio-block-center or a similar system.
  • the different route and train control systems which have to be controlled by the remote operator, transmit status information to the traffic management system in form of specific protocols.
  • the command and status adapter (COST-adapter) converts the specific protocols to generic protocols and provides the status of the route and train control system for further processing by the traffic management system in a normalized form. Additionally it converts operational commands to the specific format of a specific route and train control system.
  • the traffic management system comprises a human machine interface for operating the route and train control system by a human operator.
  • the route and train control system receives commands from the traffic management system concerning regular operation as well as concerning safety critical operations for supervision of an approval procedure.
  • Safety critical operations are carried out in special operational situations or in case of disturbances by using the route and train control system.
  • safety critical operations are instructed by the operator while bypassing elements of the route and train control system (e.g. the radio block center or the interlocking system).
  • Safety critical operations are operator actions, e.g. safety critical route clearing, safety critical point change, etc., i.e. the operator can circumvent a safe setting of the system.
  • COST-adapter are therefore developed based on fail-safe computer systems (for example as the SAM or SCM on basis of the Thales proprietary TAS-PLF System). Yet, this results in high hardware costs for this dedicated computer and also in high costs for software development, integration and test, because all these components have to developed according a high Safety Integrity Level (typically SIL4) according the standard EN 50128 [4].
  • SIL4 Safety Integrity Level
  • [5] discloses an interlocking computer system as well as a method for error disclosure when displaying information concerning auxiliary controls (Hilfsbedienungen).
  • the system comprises an operating channel with SIL 0 and a reference channel with a higher SIL level.
  • the operating channel is used to send auxiliary operation instructions to the ESTW interlocking.
  • the reference channel provides the display backup.
  • a data link exists between the operating channel and the reference system, via which element specifics of the elements relevant for operation can be requested and transmitted.
  • the reference system reads a relevant image section from the display and uses it to form a checksum, which is compared with a checksum from process status data from the operating channel. This allows the operating channel to have a SIL level of 0.
  • [6] concerns monitoring of the execution of regular operations by the control system. [6] teaches how to ensure that regular operations are performed correctly as long as no exceptional situation occurs, such as a malfunction of a monitoring device.
  • the function for controlling safety critical operations is outsourced from the command and status adapter (COST-adapter).
  • COST-adapter the safety related functions (function for controlling safety critical operations) are functional separated from the functions with basic integrity and can (but don't have to be installed in separate locations.
  • the COST-adapter is developed according SILO, which is much cheaper compared to the high safety level COST-adapter known from the state of the art.
  • the function for controlling safety critical operations is integrated in the route and train control system. No further computer is required. This makes this embodiment especially cost effective. Yet an additional function has to be integrated in all route and train control systems, which are to be managed by the traffic management system.
  • system further comprises a controller, which is separated from the command and status adapter (COST), wherein the function for controlling safety critical operations is integrated in the controller.
  • COST command and status adapter
  • the controller is adapted to control safety critical operations. No further functions have to be integrated in the route and train control system. Thus, command and status adapter of foreign companies can be used.
  • the traffic control system comprises route and train control systems of different types, e.g. electronic interlocking systems and relay based interlocking systems or interlocking systems produced by different companies.
  • the software components for carrying out functions with basic integrity for the different types of route and train control system are provided within one (the same) computer. Due to the low safety level, which is required for the command and status adapter of the present invention, only little power is required for operating the command and status adapter. Thus, several functions with basic integrity for the different types of route and train control system can be supplied with power by the same computer.
  • the controller is adapted to control safety critical operations for all types of route and train control systems of the traffic control system.
  • At least one of the functions with basic integrity is integrated in the traffic management system.
  • the according software components can be integrated in an operator workstation.
  • the traffic management system then comprises at least parts of the COST-adapter. In case all functions with basic integrity are integrated in the traffic management system, no separate computer is required for the command and status adapter.
  • the command and status adapter comprises a decrypter. This allows transmission of encrypted messages comprising information concerning safety critical operations via the command and status adapter, thereby ensuring that the command and status adapter cannot modify the message unintendedly.
  • the decryptor is preferably arranged at the output side.
  • decryption of the messages can be carried out within the route and train control system.
  • Encryption of the messages can be carried out within the controller (if applicable).
  • the controller comprises an encryptor.
  • the functions with basic integrity comprise the function of adaption of regular operations and/or the function of adaption a status of the route and train control system, and/or the function of converting protocols to be transmitted between the route and train control system, and the traffic management system.
  • the invention also concerns a method for carrying out safety critical operations within a train traffic control system comprising a traffic management system a route and train control system, and a command and status adapter, the method comprising the steps of claim 10.
  • safety critical operations are controlled outside the command and status adapter, i.e. in a dedicated component for carrying out a function for controlling safety critical operations.
  • the messages are transmitted via the command and status adapter. Only one interface is required at the route and train control system.
  • the safety critical operations are controlled within the route and train control system.
  • the safety critical operations are controlled within a controller, which is separated from the command and status adapter.
  • the inventive architectural principle of separation of basic integrity components (SILO) and safety related components (SIL>0) enables cost effective control of different types of route and train control systems.
  • Fig. 1 shows an architecture of a traffic control system for executing safety critical operations according to the state of the art.
  • a route and train control system RTCS is connected with a traffic management system TMS. Between traffic management system TMS and route and train control system TRCS status information and commands are exchanged. Since traffic management system TMS and route and train control system RTCS in general are not compatible concerning type of executable protocols, a command and status adapter COST' is provided which comprises functions for conversion of protocols, adaption of regular operations, adaption of status of the route and train control system RTCS and controlling safety critical operations. The command and status adapter COST'. In order to ensure the required safety the command and status adapter COST has to be developed on a high safety level (SIL>0).
  • SIL high safety level
  • the function for controlling safety critical operations is separated/outsourced from the command and status adapter COST and is provided separately.
  • safety related functions and functions with basic integrity are separated.
  • the command and status adapter COST does not comprise safety related functions, but only comprises functions with basic integrity, and is thus developed on a lower safety level SILO.
  • Fig. 2a shows the architecture of a first embodiment of the inventive traffic control system with a modified command and status adapter COST.
  • the command and status adapter COST according to the invention comprises software components in order to carry out the function of adaption of regular operations of the route and train control system, the function of adaption of a status of the route and train control system to the internal data model of the traffic control system, and the function of converting protocols of information/commands to be sent from the traffic management system TMS to the route and train control system RTCS from a generic protocol to a specific protocol and converting protocols of information to be sent from the route and train control system RTCS to the traffic management system TMS from a specific protocol to a generic protocol respectively.
  • the function for controlling safety critical operations is integrated in the route and train control system RTCS (instead of the command and status adapter COST'). I.e. the software components that controls the safety critical operation is transferred to the RTCS.
  • the remaining functionality of the command and status adapter COST is not safety related anymore. So, the command and status adapter COST is developed according SILO, which reduces the cost drastically compared to the command and status adapter COST' known from the state of the art.
  • Fig. 2b shows an according architecture for a traffic control system comprising multiple types of route and train control systems RTCS (type 1,..., type n). Only one command and status adapter COST is required which comprises the required software components (functions for adaption of regular operation, adaption of status and for conversion of protocols) for a multitude of types, preferably for all types of route and train control systems RTCS, which are connected to the respective traffic management system TMS.
  • COST command and status adapter
  • This first embodiment is particularly interesting for route and train control systems RTCS which are built by the same manufacturer as the other components of the traffic control system.
  • a second embodiment of the inventive traffic control system is preferable.
  • an additional computer controller CTRL
  • the software component that controls the safety critical operation is integrated in the controller CTRL.
  • the controller CTRL is connected to the traffic management system TMS for exchanging commands/information in form of generic protocols.
  • the procedure for exchanging information between controller CTRL and the traffic management system TMS checks that the correct safety critical operation will be executed. The result of this check, i.e.
  • the correct safety critical operation is then sent from the controller CTRL through the command and status adapter COST to the route and train control system RTCS, typically in an encrypted format, so that an unintended modification by the command and status adapter COST (that is implemented only with SILO) can be detected by the route and train control system RTCS.
  • SILO System for Lucent Reliable and Low Latency
  • Fig. 3b shows an according architecture for a traffic control system comprising multiple types of route and train control systems RTCS (type 1,..., type n).
  • RTCS route and train control systems
  • COST command and status adapter
  • a multitude of types preferably for all types of route and train control systems RTCS, which are connected to the respective traffic management system TMS.
  • controller CTRL comprising the software component for controlling safety critical operations is required for the multitude of route and train control systems RTCS.
  • the remaining functionalities inside the command and status adapter COST are adapted to only transmit the messages concerning the safety critical operation (instead of transmitting and processing).
  • the command and status adapter COST according to the invention works like a "transparent channel”. Otherwise, the function "Control safety critical operation” could not detect any misbehavior with the required safety integrity.

Landscapes

  • Engineering & Computer Science (AREA)
  • Mechanical Engineering (AREA)
  • Train Traffic Observation, Control, And Security (AREA)

Claims (13)

  1. Zugverkehrssteuerungssystem, das Folgendes umfasst:
    ein Verkehrsleitsystem (TMS) zum Ausführen regulärer Betriebsabläufe, wobei das Verkehrssteuerungssystem zum Prüfen der Zulässigkeit für die regulären Betriebsabläufe zu jeder Zeit adaptiert ist,
    ein Strecken- und Zugsteuerungssystem (route and train control system - RTCS), und
    einen Befehls- und Statusadapter (COST),
    wobei das Zugverkehrssteuerungssystem dazu eingerichtet ist, Informationen und Befehle zwischen dem Verkehrsleitsystem (TMS) und dem Strecken- und Zugsteuerungssystem (RTCS) über den Befehls- und Statusadapter (COST) auszutauschen,
    wobei der Befehls- und Statusadapter (COST) Softwarekomponenten zum Durchführen von Funktionen mit Basis-Integrität umfasst,
    wobei das Verkehrsleitsystem (TMS) eine Mensch-Maschine-Schnittstelle zum Betreiben des Strecken- und Zugsteuerungssystems durch einen menschlichen Bediener umfasst,
    wobei das Verkehrsleitsystem (TMS) zum Ausführen sicherheitskritischer Betriebsabläufe ausgebildet ist, die eine sichere Einstellung des Strecken- und Zugsteuerungssystems (RTCS) umgehen,
    wobei das Verkehrsleitsystem (TMS) dazu ausgebildet ist, Anweisungen zu den sicherheitskritischen Betriebsabläufen zu empfangen, die von dem Bediener angewiesen werden, während Elemente des Strecken- und Zugsteuerungssystems (RTCS) übergangen werden,
    wobei das Verkehrssteuerungssystem ferner wenigstens eine Softwarekomponente zum Durchführen einer Funktion zum Steuern der sicherheitskritischen Betriebsabläufe umfasst,
    wobei die Funktion zum Steuern der sicherheitskritischen Betriebsabläufe aus dem Befehls- und Statusadapter (COST) ausgelagert ist und der Befehls- und Statusadapter (COST) das Sicherheitsniveau SILO aufweist.
  2. Verkehrssteuerungssystem nach Anspruch 1, dadurch gekennzeichnet, dass eine Funktion zum Steuern sicherheitskritischer Betriebsabläufe in das Strecken- und Zugsteuerungssystem (RTCS) integriert ist.
  3. Zugsteuerungssystem nach Anspruch 1, dadurch gekennzeichnet, dass das System ferner eine Steuerung (CTRL) umfasst, die von dem Befehls- und Statusadapter (COST) getrennt ist, wobei die Funktion zum Steuern sicherheitskritischer Betriebsabläufe in die Steuerung (CTRL) integriert ist.
  4. Verkehrssteuerungssystem nach einem der vorhergehenden Ansprüche, dadurch gekennzeichnet, dass das Verkehrssteuerungssystem Strecken- und Zugsteuerungssysteme verschiedener Arten (1, .., n) umfasst.
  5. Verkehrssteuerungssystem nach Anspruch 4, dadurch gekennzeichnet, dass die Softwarekomponenten zum Durchführen von Funktionen mit Basis-Integrität für die verschiedenen Arten (1, .. , n) des Strecken- und Zugsteuerungssystems (RTCS) innerhalb eines Computers bereitgestellt sind.
  6. Verkehrssteuerungssystem nach Anspruch 3 und einem der Ansprüche 4 oder 5, dadurch gekennzeichnet, dass die Steuerung adaptiert ist, um sicherheitskritische Betriebsabläufe für alle Arten (1, .. , n) von Strecken- und Zugsteuerungssystemen (RTCS) des Verkehrssteuerungssystems zu steuern.
  7. Verkehrssteuerungssystem nach einem der vorhergehenden Ansprüche, dadurch gekennzeichnet, dass wenigstens eine der Funktionen mit Basis-Integrität in das Verkehrsleitsystem (TMS) integriert ist.
  8. Verkehrssteuerungssystem nach einem der vorhergehenden Ansprüche, dadurch gekennzeichnet, dass der Befehls- und Statusadapter (COST) einen Entschlüsseler umfasst.
  9. Verkehrssteuerungssystem nach einem der vorhergehenden Ansprüche, dadurch gekennzeichnet, dass die Funktionen mit Basis-Integrität die Funktion von Anpassung von regulären Betriebsabläufen und/oder die Funktion von Anpassung eines Status des Strecken- und Zugsteuerungssystems (RTCS) und/oder die Funktion der Konvertierung von Protokollen, die zwischen dem Strecken- und Zugsteuerungssystem (RTCS) und dem Verkehrsleitsystem (TMS) übertragen werden sollen, umfassen.
  10. Verfahren zum Durchführen regulärer Betriebsabläufe und sicherheitskritischer Betriebsabläufe innerhalb eines Zugverkehrsteuerungssystems, das Folgendes umfasst:
    ein Verkehrsleitsystem (TMS) zum Ausführen regulärer Betriebsabläufe,
    ein Strecken- und Zugsteuerungssystem (RTCS), und
    einen Befehls- und Statusadapter (COST), der Softwarekomponenten zum Durchführen von Funktionen mit Basis-Integrität umfasst und das Sicherheitsniveau SILO aufweist, wobei Informationen und Befehle zwischen dem Verkehrsleitsystem (TMS) und dem Strecken- und Zugsteuerungssystem (RTCS) über den Befehls- und Statusadapter (COST) übertragen werden,
    wobei das Verkehrsleitsystem (TMS) eine Mensch-Maschine-Schnittstelle zum Betreiben des Strecken- und Zugsteuerungssystems durch einen menschlichen Bediener umfasst:
    wobei das Verkehrssteuerungssystem ferner wenigstens eine Softwarekomponente zum Durchführen einer Funktion zum Steuern der sicherheitskritischen Betriebsabläufe umfasst, wobei das Verkehrssteuerungssystem zum Prüfen der Zulässigkeit der regulären Betriebsabläufe zu jeder Zeit eingerichtet ist,
    wobei die sicherheitskritischen Betriebsabläufe durch das Verkehrsleitsystem (TMS) ausgeführt werden, eine sichere Einstellung des Strecken- und Zugsteuerungssystems (RTCS) umgehen und außerhalb des Befehls- und Statusadapters (COST) gesteuert werden, und
    wobei das Verkehrsleitsystem (TMS) Anweisungen zu den sicherheitskritischen Betriebsabläufe empfängt, die durch einen Bediener angewiesen werden, während Elemente des Strecken- und Zugsteuerungssystems (RTCS) übergangen werden.
  11. Verfahren nach Anspruch 10, dadurch gekennzeichnet, dass die Nachrichten über den Befehls- und Statusadapter (COST) übertragen werden.
  12. Verfahren nach Anspruch 10 oder 11, dadurch gekennzeichnet, dass die sicherheitskritischen Betriebsabläufe innerhalb des Strecken- und Zugsteuerungssystems (RTCS) gesteuert werden.
  13. Verfahren nach Anspruch 10 oder 11, dadurch gekennzeichnet, dass die sicherheitskritischen Betriebsabläufe innerhalb einer Steuerung (CTRL) gesteuert werden, die von dem Befehls- und Statusadapter (COST) getrennt ist.
EP18166202.4A 2018-04-06 2018-04-06 Zugverkehrssteuerungssystem und verfahren zum durchführen von sicherheitskritischen bahnbetriebsprozessen in einem zugverkehrssteuerungssystem Active EP3549841B1 (de)

Priority Applications (24)

Application Number Priority Date Filing Date Title
PL18166202.4T PL3549841T3 (pl) 2018-04-06 2018-04-06 System sterowania ruchem pociągów i sposób wykonywania operacji o kluczowym znaczeniu dla bezpieczeństwa w systemie sterowania ruchem pociągów
SI201830695T SI3549841T1 (sl) 2018-04-06 2018-04-06 Sistem za vodenje železniškega prometa in postopek za izvajanje varnostno kritičnih operacij znotraj sistema za vodenje železniškega prometa
RS20220543A RS63288B1 (sr) 2018-04-06 2018-04-06 Sistem za kontrolu železničkog saobraćaja i postupak za izvođenje bezbednosnih kritičnih operacija unutar sistema za kontrolu železničkog saobraćaja
EP18166202.4A EP3549841B1 (de) 2018-04-06 2018-04-06 Zugverkehrssteuerungssystem und verfahren zum durchführen von sicherheitskritischen bahnbetriebsprozessen in einem zugverkehrssteuerungssystem
PT181662024T PT3549841T (pt) 2018-04-06 2018-04-06 Sistema de controlo do tráfego ferroviário e método para realizar operações críticas de segurança num sistema de controlo do tráfego ferroviário
DK18166202.4T DK3549841T3 (da) 2018-04-06 2018-04-06 Togtrafikstyringssystem og fremgangsmåde til udførelse af sikkerhedskritiske operationer i et togtrafikstyringssystem
HUE18166202A HUE059124T2 (hu) 2018-04-06 2018-04-06 Vonatforgalom irányító rendszer és eljárás biztonság szempontjából kritikus mûveletek végrehajtására egy vonatforgalom irányító rendszerben
ES18166202T ES2919925T3 (es) 2018-04-06 2018-04-06 Sistema de control de tráfico de trenes y método para llevar a cabo operaciones críticas para la seguridad dentro de un sistema de control de tráfico de trenes
LTEP18166202.4T LT3549841T (lt) 2018-04-06 2018-04-06 Traukinių eismo reguliavimo sistema ir svarbių saugos požiūriu operacijų vykdymo traukinių eismo reguliavimo sistemoje būdas
HRP20220807TT HRP20220807T1 (hr) 2018-04-06 2018-04-06 Sustav kontrole prometa vlakova i postupak za izvođenje radova kritičnih za sigurnost unutar sustava kontrole prometa vlakova
LTEP18177217.9T LT3549842T (lt) 2018-04-06 2018-06-12 Traukinių eismo reguliavimo sistema ir maršrutų bei traukinių eismo reguliavimo sistemos būsenos indikacijos saugaus rodymo būdas
ES18177217T ES2923182T3 (es) 2018-04-06 2018-06-12 Sistema de control de tráfico de tren y método para visualizar con seguridad una indicación de estado de una ruta y sistema de control de tren
RS20220616A RS63339B9 (sr) 2018-04-06 2018-06-12 Sistem za kontrolu železničkog saobraćaja i postupak za bezbedno prikazivanje pokazatelja stanja sistema za kontrolu rute i voza
PL18177217.9T PL3549842T3 (pl) 2018-04-06 2018-06-12 System sterowania ruchem pociągów i sposób bezpiecznego wyświetlania wskazania stanu systemu sterowania trasami i pociągami
HRP20220827TT HRP20220827T1 (hr) 2018-04-06 2018-06-12 Sustav za upravljanje željezničkim prometom i postupak prikazivanja indikacije sigurnog stanja sustava za upravljanje vlakovima
SI201830714T SI3549842T1 (sl) 2018-04-06 2018-06-12 Sistem za nadzor železniškega prometa in način za varno prikazovanje stanja proge in nadzorni sistem vlakov
HUE18177217A HUE059058T3 (hu) 2018-04-06 2018-06-12 Vasúti forgalomirányító rendszer és eljárás egy vágányút- és vonatbefolyásoló rendszer állapotjelzésének biztonságos megjelenítésére
EP18177217.9A EP3549842B9 (de) 2018-04-06 2018-06-12 Zugverkehrsleitsystem und verfahren zur sicheren anzeige einer zustandsanzeige einer strecke und zugverkehrsleitsystem
PT181772179T PT3549842T (pt) 2018-04-06 2018-06-12 Sistema de controlo do tráfego ferroviário e método para visualização segura de uma indicação de estado de um sistema de controlo ferroviário e de itinerários
DK18177217.9T DK3549842T5 (da) 2018-04-06 2018-06-12 Togtrafikstyringssystem og fremgangsmåde til sikker visning af en tilstandsindikation af et rute- og togstyringssystem
KR1020207031789A KR102536023B1 (ko) 2018-04-06 2019-04-05 열차 운행 제어 시스템 및 열차 운행 제어 시스템 내에서 필수 안전 작동을 수행하는 방법
PCT/EP2019/058618 WO2019193145A1 (en) 2018-04-06 2019-04-05 Train traffic control system and method for carrying out safety critical operations within a train traffic control system
AU2019249938A AU2019249938B2 (en) 2018-04-06 2019-04-05 Train traffic control system and method for carrying out safety critical operations within a train traffic control system
SA520420235A SA520420235B1 (ar) 2018-04-06 2020-09-28 نظام تحكم في حركة قطار وطريقة لتنفيذ عمليات سلامة حرجة

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
EP18166202.4A EP3549841B1 (de) 2018-04-06 2018-04-06 Zugverkehrssteuerungssystem und verfahren zum durchführen von sicherheitskritischen bahnbetriebsprozessen in einem zugverkehrssteuerungssystem

Publications (2)

Publication Number Publication Date
EP3549841A1 EP3549841A1 (de) 2019-10-09
EP3549841B1 true EP3549841B1 (de) 2022-06-01

Family

ID=61913042

Family Applications (1)

Application Number Title Priority Date Filing Date
EP18166202.4A Active EP3549841B1 (de) 2018-04-06 2018-04-06 Zugverkehrssteuerungssystem und verfahren zum durchführen von sicherheitskritischen bahnbetriebsprozessen in einem zugverkehrssteuerungssystem

Country Status (10)

Country Link
EP (1) EP3549841B1 (de)
DK (1) DK3549841T3 (de)
ES (1) ES2919925T3 (de)
HR (1) HRP20220807T1 (de)
HU (1) HUE059124T2 (de)
LT (1) LT3549841T (de)
PL (1) PL3549841T3 (de)
PT (2) PT3549841T (de)
RS (1) RS63288B1 (de)
SI (1) SI3549841T1 (de)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110888151A (zh) * 2019-12-26 2020-03-17 卡斯柯信号(北京)有限公司 导航定位系统的测试方法及装置

Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE102012221714A1 (de) * 2012-11-28 2014-05-28 Siemens Aktiengesellschaft Verfahren zur Fehleroffenbarung bei einem Stellwerksrechnersystem und Stellwerksrechnersystem

Family Cites Families (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2006051355A1 (en) * 2004-11-15 2006-05-18 Abb As A control system, a method to operate a control system, a computer data signal and a graphical user interface for rail-borne vehicles
US8328143B2 (en) * 2008-01-17 2012-12-11 Lockheed Martin Corporation Method for isolation of vital functions in a centralized train control system
PL2879008T3 (pl) * 2013-11-28 2018-11-30 Thales Management & Services Deutschland Gmbh Sposób obsługiwania krytycznego dla bezpieczeństwa polecenia w sieci komputerowej
NO2696690T3 (de) * 2014-01-29 2018-03-03

Patent Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE102012221714A1 (de) * 2012-11-28 2014-05-28 Siemens Aktiengesellschaft Verfahren zur Fehleroffenbarung bei einem Stellwerksrechnersystem und Stellwerksrechnersystem

Also Published As

Publication number Publication date
PL3549841T3 (pl) 2022-07-25
DK3549841T3 (da) 2022-06-27
PT3549841T (pt) 2022-06-29
HRP20220807T1 (hr) 2022-09-30
ES2919925T3 (es) 2022-07-29
EP3549841A1 (de) 2019-10-09
SI3549841T1 (sl) 2022-08-31
HUE059124T2 (hu) 2022-10-28
PT3549842T (pt) 2022-07-20
LT3549841T (lt) 2022-07-11
RS63288B1 (sr) 2022-06-30

Similar Documents

Publication Publication Date Title
CN100540379C (zh) 电子连锁系统以及实验装置和实验方法
EP1038752A1 (de) Stellwerkanlage für Eisenbahnen
JP2003502981A (ja) 安全関連オートメーション・バス・システム
CN108473273B (zh) 电梯数据通信布置
CN102025582A (zh) 用于控制安全关键的过程的控制系统
EP3473524B1 (de) Zugverbindungsvorrichtung, zug mit der zugverbindungsvorrichtung, zuggruppe mit dem zug und verfahren zum koppeln zweier züge der zuggruppe
CN100576790C (zh) 安全处理信息的单一信号传输
EP3549841B1 (de) Zugverkehrssteuerungssystem und verfahren zum durchführen von sicherheitskritischen bahnbetriebsprozessen in einem zugverkehrssteuerungssystem
Neil On board train control and monitoring systems
JP2009286600A (ja) 遠隔監視システムの制御プログラム書替え方法
CN102037419B (zh) 控制系统、控制计算机以及用于运行控制系统的方法
AU2019249938B2 (en) Train traffic control system and method for carrying out safety critical operations within a train traffic control system
AU2006289136A1 (en) System architecture for controlling and monitoring components of a railway safety installation
JP4102306B2 (ja) 安全性の要求される鉄道運転プロセスの制御方法およびこの方法を実施するための装置
US20230182787A1 (en) Railway system with diagnostic system and method for operating same
US10676106B2 (en) Train control system integration into locomotives having distributed power
DK2804798T3 (en) A method for controlling, securing and / or monitor the rail-traffic and operations management
JP4570371B2 (ja) Ｃｔｃシステムの動作検証方法
KR100772128B1 (ko) 열차자동제어 지상장치의 속도제한 원격제어시스템.
CN108829015A (zh) 一种铁路信号领域的通用输入输出安全平台及方法
WO2017208421A1 (ja) 電子連動システム
KR102624433B1 (ko) 전동차 출입문용 통합형 출입문 제어장치
KR101879583B1 (ko) 철도 궤도 정보 전송 시스템
EP4393789A1 (de) Überwachungssystem zur überwachung eines oder mehrerer arbeitsbereiche innerhalb eines gleises
JP4972192B2 (ja) 鉄道信号システム及び鉄道信号制御用の電子連動システム

Legal Events

Date Code Title Description
REG Reference to a national code

Ref country code: HR

Ref legal event code: TUEP

Ref document number: P20220807T

Country of ref document: HR

PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: REQUEST FOR EXAMINATION WAS MADE

17P Request for examination filed

Effective date: 20190815

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

AX Request for extension of the european patent

Extension state: BA ME

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: EXAMINATION IS IN PROGRESS

17Q First examination report despatched

Effective date: 20200515

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: EXAMINATION IS IN PROGRESS

GRAP Despatch of communication of intention to grant a patent

Free format text: ORIGINAL CODE: EPIDOSNIGR1

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: GRANT OF PATENT IS INTENDED

INTG Intention to grant announced

Effective date: 20211020

GRAJ Information related to disapproval of communication of intention to grant by the applicant or resumption of examination proceedings by the epo deleted

Free format text: ORIGINAL CODE: EPIDOSDIGR1

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: EXAMINATION IS IN PROGRESS

GRAP Despatch of communication of intention to grant a patent

Free format text: ORIGINAL CODE: EPIDOSNIGR1

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: GRANT OF PATENT IS INTENDED

INTC Intention to grant announced (deleted)
INTG Intention to grant announced

Effective date: 20211206

GRAS Grant fee paid

Free format text: ORIGINAL CODE: EPIDOSNIGR3

GRAA (expected) grant

Free format text: ORIGINAL CODE: 0009210

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE PATENT HAS BEEN GRANTED

AK Designated contracting states

Kind code of ref document: B1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

REG Reference to a national code

Ref country code: GB

Ref legal event code: FG4D

REG Reference to a national code

Ref country code: AT

Ref legal event code: REF

Ref document number: 1495208

Country of ref document: AT

Kind code of ref document: T

Effective date: 20220615

Ref country code: CH

Ref legal event code: EP

REG Reference to a national code

Ref country code: RO

Ref legal event code: EPE

REG Reference to a national code

Ref country code: IE

Ref legal event code: FG4D

Ref country code: FI

Ref legal event code: FGE

REG Reference to a national code

Ref country code: DE

Ref legal event code: R096

Ref document number: 602018036095

Country of ref document: DE

REG Reference to a national code

Ref country code: DK

Ref legal event code: T3

Effective date: 20220621

REG Reference to a national code

Ref country code: PT

Ref legal event code: SC4A

Ref document number: 3549841

Country of ref document: PT

Date of ref document: 20220629

Kind code of ref document: T

Free format text: AVAILABILITY OF NATIONAL TRANSLATION

Effective date: 20220623

REG Reference to a national code

Ref country code: NL

Ref legal event code: FP

REG Reference to a national code

Ref country code: SE

Ref legal event code: TRGR

REG Reference to a national code

Ref country code: ES

Ref legal event code: FG2A

Ref document number: 2919925

Country of ref document: ES

Kind code of ref document: T3

Effective date: 20220729

REG Reference to a national code

Ref country code: EE

Ref legal event code: FG4A

Ref document number: E022415

Country of ref document: EE

Effective date: 20220629

REG Reference to a national code

Ref country code: GR

Ref legal event code: EP

Ref document number: 20220401292

Country of ref document: GR

Effective date: 20220808

REG Reference to a national code

Ref country code: NO

Ref legal event code: T2

Effective date: 20220601

REG Reference to a national code

Ref country code: HR

Ref legal event code: T1PR

Ref document number: P20220807

Country of ref document: HR

REG Reference to a national code

Ref country code: HU

Ref legal event code: AG4A

Ref document number: E059124

Country of ref document: HU

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SM

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20220601

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20221001

REG Reference to a national code

Ref country code: DE

Ref legal event code: R097

Ref document number: 602018036095

Country of ref document: DE

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: AL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20220601

PLBE No opposition filed within time limit

Free format text: ORIGINAL CODE: 0009261

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: NO OPPOSITION FILED WITHIN TIME LIMIT

REG Reference to a national code

Ref country code: HR

Ref legal event code: ODRP

Ref document number: P20220807

Country of ref document: HR

Payment date: 20230329

Year of fee payment: 6

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: CZ

Payment date: 20230329

Year of fee payment: 6

26N No opposition filed

Effective date: 20230302

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: RS

Payment date: 20230329

Year of fee payment: 6

Ref country code: PT

Payment date: 20230321

Year of fee payment: 6

Ref country code: HR

Payment date: 20230329

Year of fee payment: 6

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: NO

Payment date: 20230412

Year of fee payment: 6

Ref country code: ES

Payment date: 20230512

Year of fee payment: 6

Ref country code: DK

Payment date: 20230414

Year of fee payment: 6

Ref country code: DE

Payment date: 20230331

Year of fee payment: 6

Ref country code: CH

Payment date: 20230502

Year of fee payment: 6

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: SI

Payment date: 20230324

Year of fee payment: 6

Ref country code: HU

Payment date: 20230405

Year of fee payment: 6

Ref country code: FI

Payment date: 20230411

Year of fee payment: 6

Ref country code: AT

Payment date: 20230327

Year of fee payment: 6

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MC

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20220601

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MC

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20220601

REG Reference to a national code

Ref country code: IE

Ref legal event code: MM4A

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: MK

Payment date: 20230324

Year of fee payment: 6

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: GR

Payment date: 20240327

Year of fee payment: 7

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: LT

Payment date: 20240318

Year of fee payment: 7

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20230406

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: NL

Payment date: 20240326

Year of fee payment: 7

Ref country code: LU

Payment date: 20240327

Year of fee payment: 7

REG Reference to a national code

Ref country code: HR

Ref legal event code: ODRP

Ref document number: P20220807

Country of ref document: HR

Payment date: 20240402

Year of fee payment: 7

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20230406

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: RO

Payment date: 20240329

Year of fee payment: 7

Ref country code: EE

Payment date: 20240322

Year of fee payment: 7

Ref country code: BG

Payment date: 20240327

Year of fee payment: 7

Ref country code: GB

Payment date: 20240314

Year of fee payment: 7

Ref country code: SK

Payment date: 20240326

Year of fee payment: 7

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: TR

Payment date: 20240320

Year of fee payment: 7

Ref country code: SE

Payment date: 20240326

Year of fee payment: 7

Ref country code: PL

Payment date: 20240328

Year of fee payment: 7

Ref country code: LV

Payment date: 20240320

Year of fee payment: 7

Ref country code: IT

Payment date: 20240326

Year of fee payment: 7

Ref country code: FR

Payment date: 20240321

Year of fee payment: 7

Ref country code: BE

Payment date: 20240319

Year of fee payment: 7

REG Reference to a national code

Ref country code: AT

Ref legal event code: UEP

Ref document number: 1495208

Country of ref document: AT

Kind code of ref document: T

Effective date: 20220601