EP3599595A1 - Installation de signal lumineux à protection contre une attaque de mât - Google Patents
Installation de signal lumineux à protection contre une attaque de mât Download PDFInfo
- Publication number
- EP3599595A1 EP3599595A1 EP19186892.6A EP19186892A EP3599595A1 EP 3599595 A1 EP3599595 A1 EP 3599595A1 EP 19186892 A EP19186892 A EP 19186892A EP 3599595 A1 EP3599595 A1 EP 3599595A1
- Authority
- EP
- European Patent Office
- Prior art keywords
- signal
- sensor
- control device
- sensor device
- light
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Classifications
-
- G—PHYSICS
- G08—SIGNALLING
- G08G—TRAFFIC CONTROL SYSTEMS
- G08G1/00—Traffic control systems for road vehicles
- G08G1/09—Arrangements for giving variable traffic instructions
- G08G1/095—Traffic lights
-
- G—PHYSICS
- G08—SIGNALLING
- G08G—TRAFFIC CONTROL SYSTEMS
- G08G1/00—Traffic control systems for road vehicles
- G08G1/097—Supervising of traffic control systems, e.g. by giving an alarm if two crossing streets have green light simultaneously
Definitions
- the invention relates to a light signal system, as well as a sensor device and a signal transmitter for use in the light signal system, and a method for protecting a light signal system from a mast attack.
- Traffic light systems such as traffic lights
- traffic lights are used to regulate traffic flows at intersections.
- Extensive operational safety guidelines have been in place for traffic signal systems for many years, but the safety of signal / data transmission of control signals from these systems has only become a focus in recent years. Maintaining data integrity is a key security goal.
- the cabling of the light signal generators which are usually mounted on masts and are connected by cable to a control device for the light signal generators, is disregarded, since these are typically not viewed in the context of an IT security analysis.
- it is easily possible to manipulate correctly connected cables between the light signal transmitters and a control device for example by opening a mounting flap on a traffic light mast. These are typically not specially secured, but can often be opened with a simple tool.
- Electronic monitoring circuits for example fuses or residual current circuit breakers, are known Constantly monitor the current and voltage values of the lamps in the signal transmitters. If the limit values are exceeded or undershot, the input current is interrupted immediately so that the signal can be safely switched off. A defective lamp can be detected if the value is undershot.
- the mast attack described above could only be prevented indirectly by not observing the limit values when the cables were plugged in and therefore switching off the traffic light system. If not all lamp assignments are checked before switching on again, the attack will not be recognized.
- the invention relates to a traffic light system with protection against a mast attack, comprising at least one signal transmitter with at least one signal field and a signal control device for controlling the signal transmitter, wherein At least one sensor device is arranged on each signal field of the signal transmitter, which detects the color of the light emitted by the signal field and transmits a measured color value to the signal control device, the signal control device being designed such that the received color value of the sensor device and the signal field on which the transmitting sensor device are transmitted is arranged to assign and continuously compare with a predetermined target value, and to perform an action in the event of a deviation from the target value.
- a faulty light signal can be reliably identified by comparing the color value of a signal transmitter measured by a sensor device with a target value present for this signal transmitter in the signal control device.
- the signal control device preferably continuously checks whether color values are received by the sensor device. It is thus continuously checked whether, for example, a red signal field really lights up red at the scheduled time.
- cables for signal transmitters for example signal wire for the "red” signal field
- signal wire for the "green” signal field and measurement wire for the assigned sensor devices are exchanged at the same time, an incorrect assignment is nevertheless detected, since the expected red signal is recognized as a green signal and conversely, an expected green signal is detected as a red signal and thus as deviating from the target value.
- the at least one sensor device additionally detects a brightness of the light emitted by the respective signal field and transmits a determined brightness value to the signal control device.
- the signal control device assigns the received brightness value of the sensor device to the signal field on which the sensor device is arranged, and compares this with a specified target value and carries out an action if it deviates from the target value.
- a defective signal field or a defective illuminant of the signal field can thus also be recognized. If the setpoint is exceeded or undershot, the signal control device carries out an action. For example, all signal transmitters connected to a signal control device are switched to a flashing mode or are switched off entirely.
- each sensor device is connected to the signal control device via an electrically conductive measuring wire.
- each of the sensor devices is designed to transmit a sensor identifier of the sensor device together with the color and / or brightness value to the signal control device, and a fixed association between light signal and sensor identifier is set up in the signal control device.
- the color and / or brightness value can be transmitted from a plurality of sensor devices via a single, common wire or line, which is designed, for example, as a bus connection, and can also be assigned to the detecting sensor device ,
- each of the sensor devices is designed to convert the information to be transmitted, including in particular the measured values and the sensor identifier and possibly further data, into digital information and to protect it cryptographically, preferably with a message authentication code or with a digital signature, which is formed depending on the information to be transmitted.
- Information to be transmitted is, in particular, the measured values and optionally the sensor identification and possibly further data.
- This information is preferably converted into digital information.
- the digital information is then transmitted in a cryptographically protected manner in that a message authentication code or a digital signature, which is formed depending on the information to be transmitted, is preferably transmitted together with the information.
- the signal control device can thus check the integrity of the transmitted measured values and the authenticity of the transmitter, that is to say the detecting sensor device. Measured values that are fed in or manipulated by an unauthorized third party can thus be recognized and measures can be taken by the signal control device.
- At least one sensor of the sensor device is arranged between a lamp and an optical element of each signal field.
- a sensor device arranged in this way is advantageously protected against external interference, such as dust, rain, ambient light, etc.
- the color can be determined via a reflection from a colored optical element, such as a diffuser.
- At least one sensor of the sensor device is arranged on the side of an optical element of each signal field facing away from the illuminant.
- the color can be reliably measured by the light transmitted by the optical element.
- the sensor device comprises at least one light guide, which is coupled to the sensor and to the optical element of the signal field, and thus a reliable measurement of the color value and the brightness value with little influence of light from the outside or monochromatic light emitted by a monochromatic illuminant. allows.
- the invention relates to a sensor device for use in a light signal system, comprising at least one sensor, an evaluation unit, and an output unit, wherein the at least one sensor is designed to detect the color and / or brightness of a light emitted by the illuminant of the signal field, the evaluation unit is designed to generate a sensor identifier of the sensor device, and the output unit is designed to transmit the measured color and / or brightness value to the signal control device.
- Such a sensor device independently identifies the measured values provided by it and thus allows the detected color and brightness values to be easily assigned to a signal transmitter on which the sensor device is arranged.
- the sensor device additionally comprises a crypto unit, which is designed to cryptographically protect the information to be transmitted, preferably to generate a message authentication code or a digital signature about the information to be transmitted.
- a crypto unit which is designed to cryptographically protect the information to be transmitted, preferably to generate a message authentication code or a digital signature about the information to be transmitted.
- the evaluation device additionally comprises a counter which provides a unique counter value for each piece of information to be transmitted for transmission.
- the invention relates to a signal generator comprising at least one signal field, at least one sensor device being arranged on each of the at least one signal field, which detects the color and / or the brightness of a light emitted by the illuminant of the signal field and a measured color and / or or provides brightness value.
- sends the signal control device sends a warning message to a monitoring device.
- the respective “unit”, for example evaluation unit or crypto unit, can be implemented in terms of hardware and / or software.
- the respective unit can be designed as a device or as part of a device, for example as a microprocessor.
- the respective unit can be designed as a computer program product, as a function, as a routine, as part of a program code or as an executable object.
- Figure 1 shows a light signal system 10, comprising a signal generator 11 with three signal fields 13, 14, 15 and is usually attached to a mast 19.
- Signal field 13 shows, for example, a red light
- signal field 14 shows, for example, a yellow light
- signal field 15 shows, for example, a green light when the corresponding signal field is activated.
- each signal field 13, 14, 15 comprises an illuminant, for example a halogen lamp or a light-emitting semiconductor diode, also referred to as an LED.
- Each individual signal field 13, 14, 15 is usually connected to a signal control device 12 with a respective signal wire 8, which can also be designed as a pair of wires.
- the signal field is activated or switched on and off via the signal wire 8.
- a sensor device 16, 17, 18 is arranged on each signal field 13, 14, 15 of the signal generator 11 and detects the current color value and optionally also the brightness value of the signal field.
- Each individual sensor device 16, 17, 18 is usually connected to a signal control device 12, each with a measuring wire 9, which can also be designed as a pair of wires. The measured color and / or brightness value of a sensor device is transmitted to the signal control device 12 via a measuring wire 9.
- the signal wires 8 and the measurement wires 9 are usually guided through the masts 19 of the signal transmitter 11 and connected to the signal control device 12, which is usually arranged in the vicinity of the signal transmitter, and transmit analog signals.
- the measured values can also be transmitted as digital signals in the measuring wires 9.
- the measuring wires 9 from the sensor devices 16, 17, 18 can be routed to the signal control device 12 as separate individual wires or lines or combined to form a line bus.
- a manipulation of the signal wires 8 by an unauthorized third party is referred to as a mast attack, since the signal wires 8 are usually accessible to maintenance personnel via a flap in the mast 19 of the signal transmitter 11. If, for example, the signal wires that swap the signal transmitter 13 for red light with the signal wire of the signal transmitter 15 for green light, a dangerous situation can arise due to incorrect entry of road users into an intersection.
- Such manipulation can be recognized by assigning the at least one sensor device 16, 17, 18 to each signal field 13, 14, 15, in that each sensor measures or determines the color and optionally also the brightness of the light emitted outside the signal field.
- a fixed assignment is established in the signal control system 12 between each signal field 13, 14, 15 and the sensor device 16, 17, 18 arranged on the respective signal field 13, 14, 15.
- Table 7 shown in signal control device 12 represents signal generator 11 with the individual signal fields 13, 14, 15, see first column of table 7.
- Column A shows the current setpoint of the corresponding signal field.
- the measured values or a representation of these, indicated here by n, y, are displayed continuously.
- the signal control device 12 continuously checks whether measured values are received or provided by each sensor device 16, 17, 18. Furthermore, the signal control device 12 checks whether the transmitted color and / or brightness value matches the expected light signal in accordance with column A. For this purpose, a check is carried out to determine whether the color and / or brightness value fulfills a target value and is in particular within a predetermined upper and lower limit value. It is thus determined whether, for example, the red signal transmitter 13 is actually lit red in a predetermined brightness interval. If the setpoint values are exceeded or undershot, the signal control device 12 can react with an action in particular, bring the traffic light system into a "safe" state.
- Such an action is, for example, to set the signal field yellow, in this case signal field 14, flashing for all signal transmitters which are connected to the signal control device 12 for a specific intersection. If manipulation has resulted in other colors flashing in this state or no signal fields lighting up, the signal control device 12 can switch off the entire light signal system 10.
- a signal field for example signal field 15
- the sensor 18 will detect this, for example in that the brightness value is below the predetermined target value or the color value does not match the given color value.
- the signal control device 12 uses the missing measured value or a measured value outside the target range to determine that, for example, the signal field 15 does not light up green. In this case, the traffic light system is switched to a safe state, for example all signal fields are switched off.
- the green signal field 15 lights up.
- the sensor device 18 of the green signal field 15 would report a green color value.
- the columns A and B of the assignment table 7 in the signal control device 12 would not match and thus a manipulation would be recognized and a measure taken.
- the sensor device 18 which is assigned to the green signal field 15 would report no or too low brightness and color values, while the sensor 16, which corresponds to the red signal field 13 is assigned, report a green color value or brightness value. Since the sensor device 16 assigned to the red signal field 13 now reports "green” instead of the target value "red", the manipulation by the signal control device 12 is recognized.
- the sensor devices 16, 17, 18 can also only provide information relating to the color value. As a result, the logic in the signal control unit 12 can be reduced to a color comparison and thus simplified.
- this information can also be transmitted via a radio link from the respective sensor device 16, 17, 18 in the signal control device 12.
- Information from several sensor devices, for example all sensor devices 16, 17, 18 of the signal transmitter 11, can also be transmitted via a single common radio connection.
- the signal generator 11 or alternatively the sensor devices 16, 17, 18 and the signal control device 12 must include a radio transmitter.
- Signal generator 11 and signal control device 12 can optionally also comprise a transceiver which enables both the transmission and the reception of radio signals.
- a currently detected measured value is transmitted in a cryptographically protected manner together with the sensor identification of the detecting sensor device.
- This can be done, for example, by forming a message authentication code about the information to be transmitted or a signature of this information, which is transmitted with the information between the sensor device and signal control device 12.
- a message authentication code or a signature is generated with the aid of a secret, such as a cryptographic key, which can only be checked by the signal control device 12 using an associated key. If the protected information was changed, a message authentication code or a digital signature determined in the signal control device 12 does not match the message authentication code or digital signature received with the message.
- FIG. 2 shows a signal generator 20 with a signal field 28 which is attached to a mast 29.
- the signal generator 20 can, for example, be contained in a previously described light signal system.
- the signal field 28 comprises a housing 27 in which a lamp 21, for example a halogen lamp or a light-emitting diode, is arranged.
- An optical element 22 is arranged on the side of the housing 27 opposite the illuminant, which is designed, for example, as a lens or as a diffusing screen.
- the optical element 22 can, for example, additionally be equipped with a mask for displaying symbols.
- a sensor device 26 is therefore to be arranged in such a way that the light emitted by the illuminant through the optical element can be detected or the statement about this light can be made.
- the illuminant 21 emits, for example, single-color, preferably white, light, which is visible from the outside, for example, through a colored lens, as single-color light, for example red, yellow or green.
- a sensor device 26 can be attached to the housing 27, for example.
- a sensor 23 belonging to the sensor device 26 is arranged inside the housing 27, between the illuminant 21 and the optical element 22.
- Such a sensor is suitable in particular for the detection of colored light emitted by the illuminant 21.
- the illuminant 21 optionally emits the color visible to the outside.
- the illuminant 21 emits, for example, single-color, preferably white, light, which for example appears from the outside as a red, yellow or green light, for example through a colored diffusing screen as the optical element 22, the sensor 23 can detect the color by detecting backscattered light from the colored diffusing screen of the outwardly visible light of the signal field 28.
- a sensor 24 of a sensor device 26 can additionally be connected to a light guide 29.
- one end of the light guide 29 is coupled to the sensor 24, the other end is coupled to the optical element 22, so that the light reflected by the optical element 22 without interference from the light emitted directly by the illuminant 21 or from outside the housing the optical element 22 incident light is falsified.
- the light guide 29 can thus also be part of the optical element 22.
- a sensor 25 can also be arranged on the side of the optical element 22 opposite the illuminant 21. Such a sensor, which is connected to the sensor device 26, can in particular directly detect the light transmitted through the optical element 22.
- the sensor device 30 comprises a color sensor 32 and optionally a brightness sensor 31, which measures the brightness of the light emitted by the illuminant 21.
- the sensor device 30 further comprises an evaluation unit 33, which converts the detected color or the detected brightness, for example into a digital signal or assigns a value.
- the evaluation unit 33 is also designed such that an identifier of the sensor device 30 that uniquely identifies the sensor device form. Furthermore, the evaluation unit 33 generates a time stamp or a counter value, which is incremented for each information transmitted, and adds this to the currently determined measured value or measured values.
- the sensor device 30 furthermore comprises a crypto unit 34, which is designed in such a way that the information to be transmitted, that is to say the measured values and the sensor identifier and counter value or time stamp, is encoded.
- the information or data mentioned are provided via an output unit 35 or transmitted to the signal control device 12.
- Figure 4 schematically represents a method for protecting a light signal system 10 from a mast attack.
- a color and / or brightness of the light emitted by each signal field is determined by at least one sensor device 16, 17, 18, which is connected to each signal field of the signal generator is arranged, detected.
- the measured color and / or brightness value is now transmitted to the signal control device 12.
- the respectively received color and / or brightness value of the sensor device is assigned to the signal field on which it is arranged by the signal control device.
- the received measured values are checked by comparing, see method step S4, the received color and / or brightness value with a predetermined target value in the signal control device 12.
- the signal control device 12 If a deviation of the received measured values from the target values is determined by the signal control device 12, an action is carried out in the signal control device 12, in particular an action which leads the light signal system into a circuit which is safe for the traffic flow and the road area to be controlled.
- the signal control device can also send a warning message to a monitoring device, not shown.
- the proposed method can ensure the integrity of the display of the color of the light signal system leading to a traffic light phase.
- Manipulation of the wiring or wiring can be detected by the signal control device and the light signal system can be brought into a safe state.
Landscapes
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Traffic Control Systems (AREA)
- Lock And Its Accessories (AREA)
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
DE102018212585.6A DE102018212585A1 (de) | 2018-07-27 | 2018-07-27 | Lichtsignalanlage mit Schutz vor einem Mastangriff |
Publications (1)
Publication Number | Publication Date |
---|---|
EP3599595A1 true EP3599595A1 (fr) | 2020-01-29 |
Family
ID=67437915
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
EP19186892.6A Pending EP3599595A1 (fr) | 2018-07-27 | 2019-07-18 | Installation de signal lumineux à protection contre une attaque de mât |
Country Status (2)
Country | Link |
---|---|
EP (1) | EP3599595A1 (fr) |
DE (1) | DE102018212585A1 (fr) |
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
EP4016495A1 (fr) * | 2020-12-18 | 2022-06-22 | Siemens Mobility GmbH | Procédé de diagnostic de commande |
Citations (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
EP0974947A1 (fr) * | 1998-07-23 | 2000-01-26 | Siemens Aktiengesellschaft | Appareil de signalisation lumineuse et procédé de contrôle de l'appareil de signalisation |
EP1215641A2 (fr) * | 2000-12-13 | 2002-06-19 | Oy Sabik AB | Appareil de contrôle et de commande d'une installation de feux routiers |
EP1830332A2 (fr) * | 2006-03-04 | 2007-09-05 | Hatton Traffic Management Limited | Système de contrôle de feux de circulation |
KR20130114918A (ko) * | 2012-04-10 | 2013-10-21 | 신상희 | 도로의 볼라드 제어장치 |
CN106530772A (zh) * | 2016-10-14 | 2017-03-22 | 深圳尚桥信息技术有限公司 | 智能交通信号灯及控制系统和应急控制方法 |
Family Cites Families (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US7154403B2 (en) * | 2004-06-30 | 2006-12-26 | General Electric Company | Apparatus and method for monitoring the output of a warning or indicator light |
FR2953624B1 (fr) * | 2009-12-07 | 2012-06-22 | Sormea | Procede de detection de l'etat de signalisation d'un signal lumineux et dispositif de mise en oeuvre de ce procede |
-
2018
- 2018-07-27 DE DE102018212585.6A patent/DE102018212585A1/de not_active Withdrawn
-
2019
- 2019-07-18 EP EP19186892.6A patent/EP3599595A1/fr active Pending
Patent Citations (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
EP0974947A1 (fr) * | 1998-07-23 | 2000-01-26 | Siemens Aktiengesellschaft | Appareil de signalisation lumineuse et procédé de contrôle de l'appareil de signalisation |
EP1215641A2 (fr) * | 2000-12-13 | 2002-06-19 | Oy Sabik AB | Appareil de contrôle et de commande d'une installation de feux routiers |
EP1830332A2 (fr) * | 2006-03-04 | 2007-09-05 | Hatton Traffic Management Limited | Système de contrôle de feux de circulation |
KR20130114918A (ko) * | 2012-04-10 | 2013-10-21 | 신상희 | 도로의 볼라드 제어장치 |
CN106530772A (zh) * | 2016-10-14 | 2017-03-22 | 深圳尚桥信息技术有限公司 | 智能交通信号灯及控制系统和应急控制方法 |
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
EP4016495A1 (fr) * | 2020-12-18 | 2022-06-22 | Siemens Mobility GmbH | Procédé de diagnostic de commande |
Also Published As
Publication number | Publication date |
---|---|
DE102018212585A1 (de) | 2020-01-30 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
EP1870734B1 (fr) | Rideau de lumière opto-électronique avec au moins deux barres de transmission/réception | |
EP1727399A2 (fr) | Dispositif d'éclairage avec mémoire | |
EP0974947B1 (fr) | Appareil de signalisation lumineuse et procédé de contrôle de l'appareil de signalisation | |
EP2695150B1 (fr) | Dispositif de signalisation lumineuse et procédé permettant de déterminer le degré de salissure d'une vitre de fermeture d'un émetteur de signaux | |
EP3365735B1 (fr) | Capteur de sécurité pour surveiller la sécurité d'une installation | |
EP2589264A1 (fr) | Signal lumineux led | |
DE102016109667A1 (de) | Modulationseinrichtung und Beleuchtungseinrichtung | |
DE202022002929U1 (de) | Optisches Überwachungssystem für ein optisches Anzeigeelement | |
EP3599595A1 (fr) | Installation de signal lumineux à protection contre une attaque de mât | |
EP2146551B1 (fr) | Contrôle de lampe à LEDs, en particulier pour la signalisation des chemins de fer | |
DE19627475A1 (de) | Schaltungsanordnung für Signalgeber in Straßenverkehrsanlagen | |
DE102016122370A1 (de) | Not-Befehlsgerät und Sicherheitseinrichtung mit einem Not-Befehlsgerät | |
EP1902437A1 (fr) | Systeme de feux de signalisation, en particulier pour la circulation routiere | |
EP3883836B9 (fr) | Procédé et dispositif de commande et de surveillance d'une unité fonctionnelle | |
DE10208462A1 (de) | Beleuchtungsanordnung | |
DE102015203510B3 (de) | Überspannungsschutzgerät mit einer bauraumoptimierten Zustandsanzeige | |
LU503513B1 (de) | Bedieneinheit und Verfahren zum Bedienen einer Anlage mit einer Bedieneinheit | |
DE10322846B3 (de) | Alarmanlage | |
EP0448134A2 (fr) | Dispositif pour la surveillance optique d'un événement sur un tableau de signalisation | |
DE102021123298A1 (de) | Dynamisches Fluchtwegsystem | |
EP3079135B1 (fr) | Test de fonction pour systemes de signaux | |
DE102019216334A1 (de) | Verfahren und Vorrichtung zur Ansteuerung und zum Betreiben wenigstens einer Rettungszeichenleuchte | |
DE102023125389A1 (de) | Industrieleuchte | |
DE3206082C2 (de) | Fehlersichere Anordnung zur Verknüpfung der Betriebszustandsmeldungen von Signallampen | |
DE102010052080B4 (de) | Haussignalanlage und Verfahren zum Betreiben einer solchen |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PUAI | Public reference made under article 153(3) epc to a published international application that has entered the european phase |
Free format text: ORIGINAL CODE: 0009012 |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: THE APPLICATION HAS BEEN PUBLISHED |
|
AK | Designated contracting states |
Kind code of ref document: A1 Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR |
|
AX | Request for extension of the european patent |
Extension state: BA ME |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: REQUEST FOR EXAMINATION WAS MADE |
|
17P | Request for examination filed |
Effective date: 20200729 |
|
RBV | Designated contracting states (corrected) |
Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: EXAMINATION IS IN PROGRESS |
|
17Q | First examination report despatched |
Effective date: 20210728 |
|
RAP1 | Party data changed (applicant data changed or rights of an application transferred) |
Owner name: YUNEX GMBH |