EP3854659A1 - Procédé de mise en service sans papier d'un point de voie pour le trafic ferroviaire - Google Patents

Procédé de mise en service sans papier d'un point de voie pour le trafic ferroviaire Download PDF

Info

Publication number
EP3854659A1
EP3854659A1 EP20153117.5A EP20153117A EP3854659A1 EP 3854659 A1 EP3854659 A1 EP 3854659A1 EP 20153117 A EP20153117 A EP 20153117A EP 3854659 A1 EP3854659 A1 EP 3854659A1
Authority
EP
European Patent Office
Prior art keywords
checksums
test
tool
programming
programming tool
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
EP20153117.5A
Other languages
German (de)
English (en)
Inventor
Claudio MÜLLER
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Siemens Mobility AG
Original Assignee
Siemens Mobility AG
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Siemens Mobility AG filed Critical Siemens Mobility AG
Priority to EP20153117.5A priority Critical patent/EP3854659A1/fr
Publication of EP3854659A1 publication Critical patent/EP3854659A1/fr
Pending legal-status Critical Current

Links

Images

Classifications

    • BPERFORMING OPERATIONS; TRANSPORTING
    • B61RAILWAYS
    • B61LGUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L27/00Central railway traffic control systems; Trackside control; Communication systems specially adapted therefor
    • B61L27/60Testing or simulation
    • BPERFORMING OPERATIONS; TRANSPORTING
    • B61RAILWAYS
    • B61LGUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
    • B61L27/00Central railway traffic control systems; Trackside control; Communication systems specially adapted therefor
    • B61L27/50Trackside diagnosis or maintenance, e.g. software upgrades
    • B61L27/53Trackside diagnosis or maintenance, e.g. software upgrades for trackside elements or systems, e.g. trackside supervision of trackside control system conditions

Definitions

  • the present invention relates to a method for paperless programming and commissioning of a control unit for a train protection component of a railway protection system, such as a MiniLEU S11, a LEU S21 and an MSTT signal for a train protection component, such as an ETCS Eurobalise, an ETCS Euroloop, a signal, a Soft.
  • a control unit for a train protection component of a railway protection system such as a MiniLEU S11, a LEU S21 and an MSTT signal for a train protection component, such as an ETCS Eurobalise, an ETCS Euroloop, a signal, a Soft.
  • ECS European Train Control Systems
  • route components (these are, for example, Eurobalises or Lineside Electronic Units, test reports have been generated in PDF format for around 20 years, printed out on paper and filled out by hand during the commissioning of the components, with checksums as well
  • the name, the date and the signature of the inspector must be entered.
  • the completed form is then scanned into a PDF document as evidence of the work carried out and the paper original is stored, e.g. in the interlocking room of a railway operator.
  • the railway operator's staff is available for maintenance work
  • the same procedure is available by printing out the provided blank test reports in PDF format on paper and using them accordingly.
  • the set of test reports includes two to four test reports (files) per line component, in addition to these test reports and the programmable ones Control data always includes files (e.g. XML or XLSX) with tables which contain the content of the projected ETCS data (configuration, telegrams, etc.) in a readable, testable and electronically processable form for the documentation of the line components.
  • files e.g. XML or XLSX
  • tables which contain the content of the projected ETCS data (configuration, telegrams, etc.) in a readable, testable and electronically processable form for the documentation of the line components.
  • ETCS data configuration, telegrams, etc.
  • the process for commissioning / acceptance of a trackside control unit previously provided that the commissioning staff printed out test sheets on which the expected checksums for checking the project planning data loaded on the control unit were pre-printed to the associated route point (route point is the entirety from the control unit and the train protection unit in / on the track).
  • the commissioning personnel After the control unit (the target device) has been successfully configured and checked on site, the commissioning personnel must sign the completed test sheets and then archive them. In view of the large number of route points and in view of the commissioning personnel, who are more or less exposed to the weather, it is easy to imagine that the use of the paper test sheets could lead to mix-ups and / or soiling and / or softening by snow / rain.
  • This electronic test procedure has the disadvantage that a large number of files are created here too, which have to be kept up-to-date even if the configuration data is changed and thus pose considerable challenges for the infrastructure operator in particular with regard to the management of these files.
  • This large number of files are the PDF test reports for the paper printout, the scanned test reports, the template for the test report in text format, the file with the encrypted checksums, an electronically signed PDF test report, data tables for the control data (which are all relevant in the project planning tool recorded values) etc.
  • the present invention is therefore based on the object of specifying a method for paperless programming and commissioning of control units, which significantly reduces the number of files to be managed per control unit and still - if desired - leaves the control unit open in the old way with a to be able to accept paper test reports.
  • the advantages of the method according to the invention are consequently the combination of information in one file, which up to now had to be stored and managed in different files, with the combination not causing any loss in the area of application (usage processes) of the files.
  • the invention for example, for a Eurobalise in the application for Swiss rail customers, only one PDF file instead of the previous four files and for use in the international environment only two PDF files instead of the previous six files as the starting point for the implementation of the Programming and commissioning can be generated and managed.
  • LEU lineside electronic unit
  • the difference for use in Switzerland is two instead of six files and for the international environment it is four instead of seven files.
  • control data for the train control unit train protection component
  • data tables for the control data which include all relevant values recorded in the project planning tool
  • the data content in readable form and the data check and the documentation can be extracted using publicly accessible methods both from a test report (template) that has not yet been completed and from an electronically completed test report. If this evaluation is carried out on the electronically completed test protocol, the embedded information can also be obtained and it can be proven who checked what, where, and when which data status (checksum) and which data content is involved.
  • a particularly advantageous embodiment of the present method can be achieved if the encrypted setpoint values for the checksums are transmitted to the programming tool in a form that cannot be read and evaluated by machine. This ensures that the calculated ACTUAL checksum was actually determined by the control unit and that the encrypted setpoint values for the checksums contained as a default in the programming tool are not erroneously output as ACTUAL values due to an error of any kind.
  • This procedure is particularly relevant because the control data and the control units implemented with it must correspond to the highest safety level in the railway sector, SIL4, whereby the programming tool and software (project planning tool) used for the configuration of the control unit do not have any safety level in the sense of a SIL level must meet.
  • the figure shows in a schematic way the sequence of the process for the paperless commissioning of a route point, such as an ETCS transparent data balise as a train control unit with its associated control unit 20 - also called the target system.
  • a route point such as an ETCS transparent data balise as a train control unit with its associated control unit 20 - also called the target system.
  • a project planning tool 10 provides test-relevant data for a programming tool 12.
  • the project planning tool 10 can be coupled, for example, to an interlocking or a control system from which it receives the corresponding test-relevant data.
  • the planning tool 10 can also be upgraded so that the test-relevant data can be generated with this tool.
  • the test-relevant data includes control data 14 for the train control unit (also referred to as target system 20), a template 16 for a test protocol (this The template is a PDF file in accordance with ISO 19005-3), encrypted setpoints 18 of checksums for checking the correct loading of the control data 14 onto the control unit 20 or the complete commissioning of the control unit 20 and data tables 19 (which include all relevant values recorded in the planning tool ) Understood.
  • the encrypted setpoint values 18 of the checksums and optionally also the control data 14 and / or the data tables 19 generated by the project planning tool for the control data 14 are entered as metadata in accordance with the Extensible Metadata Platform (XMP) standard in accordance with ISO 16684-1 in the template 16 for the test protocol embedded in an integrated manner, which is to be represented by the arrows 15. ().
  • XMP Extensible Metadata Platform
  • the control unit 20 is programmed by the programming tool 12 with the control data 14 provided by the project planning tool 10.
  • the commissioning personnel couples the programming tool 12 to the control unit 20 in a wired or wireless manner on site and transmits the data via the corresponding interface.
  • the control data 14 for the target system are embedded in the metadata of the template 16 for the test protocol 32 according to arrow 15, this data must first be isolated (extracted) by the programming tool for programming the target system 20.
  • the data tables 19 for the control data 14 are embedded in the metadata of the template 16 for the test protocol 32, this information can be used to display helpful information (for example the name and properties of the control unit 20) on the programming tool 12 Checker 29 can be used.
  • the control unit 20 or the programming tool 12 now calculates the actual checksums 22 for the programmed control data 14 the control unit 20. If the calculation is carried out by the programming tool 12, the information required for the calculation is transmitted from the target system 20 to the programming tool 12.
  • the actual check sums calculated in this way are integrated as metadata into the template for the check protocol 32.
  • a fourth step 4 the programming tool 12 compiles a nominal / actual comparison 28 for the checksums by automatically comparing the calculated actual checksums 22 with the nominal values 18 for the checksums.
  • SIL4 safety goal
  • the programming tool 12 never has the setpoints 18 available in plain text (in the sense of machine-readable and evaluable), but rather through a specifiable (for example, mathematical) link between the ACTUAL checksums 22 and the Setpoint values 18 for the checksums supplied by the project planning tool and encrypted with a key 26 not known to the programming tool 12 come to a predefined constant value in the case of correct programming of the control unit 20. The test is then successfully completed when this predefined constant value has been reached.
  • a fifth step 5 the calculated checksums 22 and the encrypted setpoint values 18 for the checksums are displayed on the programming tool 12 for the commissioning staff and / or a tester 29.
  • This can, for example, only take place in the simplified form that the programming device displays "Checksum (s) OKAY".
  • the setpoints 18 for the checksums can be transferred from the project planning tool 10 to the programming tool 12 in such a way that the setpoints 18 cannot be read and evaluated directly by machine, but can still be displayed for the commissioning staff, e.g. in the form of an integrated image .
  • the target values for the checksums 18 are encrypted and embedded (represented by a key 26) for each target value by the planning tool 10 in the form of a hash checksum (for example with the help of the SHA 512 algorithm according to RFC 6234) , from which the nominal value of the checksum can no longer be determined, there are further advantages. It can thus be ensured that the programming tool 12 cannot incorrectly use the setpoint values of the checksums instead of the actual values for the display or the comparison. In order to carry out the comparison, the programming tool 12 consequently has to calculate hash checksum values using the checksums (represented by a further key 24) from the calculated actual values of the checksums 22 using the same method as was used by the project planning tool 10.
  • the commissioning staff or the tester 29 then has to acknowledge this test comparison, whereby in the present exemplary embodiment the test log is only displayed if the calculated checksums 22 and the encrypted setpoints 18 for the checksums match.
  • the name 30 of the acknowledging tester is also stored in the test report 32 or its template 16.
  • the programming tool 12 creates a final test protocol 32 in a sixth step 6 using the template 16 already transmitted to the programming tool in the form of a PDF file in accordance with ISO 19005-3, embedding the identity / name 30 of the examiner 29 and the calculated checksums 22 in the printable area of the test protocol 32 and additional embedding of this information in the metadata of the test protocol 32 by the programming tool 12.
  • test protocol 32 generated can optionally also be signed with an electronic signature. If this is done with a corresponding, trustworthy PKI infrastructure, the same binding force as that of a manual signature on paper is achieved.
  • test protocol 32 is transferred in this step from the programming tool 12 to a database or corresponding data storage 36 and archived there. All of the data embedded in the test protocol 32 are thus also available for a later electronic evaluation.

Landscapes

  • Engineering & Computer Science (AREA)
  • Mechanical Engineering (AREA)
  • Health & Medical Sciences (AREA)
  • Biomedical Technology (AREA)
  • General Health & Medical Sciences (AREA)
  • Train Traffic Observation, Control, And Security (AREA)
EP20153117.5A 2020-01-22 2020-01-22 Procédé de mise en service sans papier d'un point de voie pour le trafic ferroviaire Pending EP3854659A1 (fr)

Priority Applications (1)

Application Number Priority Date Filing Date Title
EP20153117.5A EP3854659A1 (fr) 2020-01-22 2020-01-22 Procédé de mise en service sans papier d'un point de voie pour le trafic ferroviaire

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
EP20153117.5A EP3854659A1 (fr) 2020-01-22 2020-01-22 Procédé de mise en service sans papier d'un point de voie pour le trafic ferroviaire

Publications (1)

Publication Number Publication Date
EP3854659A1 true EP3854659A1 (fr) 2021-07-28

Family

ID=69187657

Family Applications (1)

Application Number Title Priority Date Filing Date
EP20153117.5A Pending EP3854659A1 (fr) 2020-01-22 2020-01-22 Procédé de mise en service sans papier d'un point de voie pour le trafic ferroviaire

Country Status (1)

Country Link
EP (1) EP3854659A1 (fr)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113792535A (zh) * 2021-11-15 2021-12-14 卡斯柯信号(北京)有限公司 一种室内跑车测试的车载收码表格自动生成方法和装置

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP2927088A1 (fr) * 2014-04-03 2015-10-07 Siemens Schweiz AG Procédé de mise en service dématérialisée d'un point de parcours pour le trafic sur rails
DE212016000195U1 (de) * 2016-07-05 2018-04-26 Obshchestvo S Ogranichennoy Otvetstvennostyu "Rm" Onboard-Medienvorrichtung für Schienenfahrzeuge

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP2927088A1 (fr) * 2014-04-03 2015-10-07 Siemens Schweiz AG Procédé de mise en service dématérialisée d'un point de parcours pour le trafic sur rails
EP2927088B1 (fr) 2014-04-03 2017-09-13 Siemens Schweiz AG Procédé de mise en service dématérialisée d'un point de parcours pour le trafic sur rails
DE212016000195U1 (de) * 2016-07-05 2018-04-26 Obshchestvo S Ogranichennoy Otvetstvennostyu "Rm" Onboard-Medienvorrichtung für Schienenfahrzeuge

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113792535A (zh) * 2021-11-15 2021-12-14 卡斯柯信号(北京)有限公司 一种室内跑车测试的车载收码表格自动生成方法和装置

Similar Documents

Publication Publication Date Title
DE102012217591A1 (de) Verfahren und Anordnung zum Überwachen eines durch zwei Achszähl-Sensoreinheiten begrenzten Streckenabschnitts
EP3854659A1 (fr) Procédé de mise en service sans papier d'un point de voie pour le trafic ferroviaire
DE102008045050A1 (de) Verfahren und Vorrichtung zur Zugbeeinflussung
EP2121409B1 (fr) Procédé, appareil de commande mobile et dispositif permettant de transmettre des données à un élément de parcours de transport guidé
EP2927088B1 (fr) Procédé de mise en service dématérialisée d'un point de parcours pour le trafic sur rails
EP2193973B1 (fr) Procédé et dispositif de contrôle d'unités d'influence de traction avec des données d'état de signaux de trajectoires pour des postes tout relais
DE102018208201A1 (de) Anordnung und Verfahren zum Verändern des Inhalts eines Wurzelzertifikatsspeichers eines technischen Geräts
DE102007019035A1 (de) Verfahren und Prüfgerät zum Überprüfen der Funktionalität eines Streckenpunktes des spurengebundenen Verkehrs sowie Streckenpunkt und Anordnung
DE102012217814A1 (de) Langsamfahrstelle einer Bahnstrecke
DE102016223481A1 (de) Verfahren zum Betreiben eines Eisenbahnsystems sowie Fahrzeug eines Eisenbahnsystems
EP3907119A1 (fr) Procédé de génération d'un protocole de réception relatif à la sécurité d'une machine de maintenance des voies
DE102008012953B4 (de) Überprüfung von Anzeigesystemen in Schienenfahrzeugen
EP0920391A1 (fr) Procede et dispositif de commande et de controle d'une installation de commande de trafic
DE102004056001A1 (de) Vorrichtung zum Handling von Montage- und Prüfanweisungen
DE102020205348A1 (de) Eisenbahnanlage mit Diagnosesystem und Verfahren zu deren Betrieb
EP4087766B1 (fr) Arrangement pour tester les fonctionnalités etcs niveau 2 dans le transport ferroviaire
EP2117904B1 (fr) Procédé d'affichage à chevauchement de sections de données d'état de composants qui sont pertinentes pour la commande
DE102018204904A1 (de) Vorrichtung und Verfahren zur Überwachung eines Objekts im Schienenverkehr
EP3587214B1 (fr) Dispositif de commande de balises
DE102007013282A1 (de) Verfahren zum individuellen Anfertigen und/oder Restaurieren von Knochenstrukturen sowie zum Bereitstellen von individuellen Knochenimplantaten
AT524500B1 (de) Verfahren und System zum Betreiben einer Schienenverkehrsanlage
EP1759953B1 (fr) Connection d'une balise au poste d'aiguillage à relais par la sélection d'un télégramme ETCS
DE102005049217A1 (de) Verfahren und Einrichtung zur Fernsteuerung eines Relais-Stellwerks unter Verwendung von hochverfügbaren Steuerungen
EP4368475A1 (fr) Procédé de remise en service d'un véhicule ferroviaire
EP1220094A1 (fr) Procédure de programmation pour un système redondant à sécurité critique

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE APPLICATION HAS BEEN PUBLISHED

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: REQUEST FOR EXAMINATION WAS MADE

17P Request for examination filed

Effective date: 20211220

RBV Designated contracting states (corrected)

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR