FR3052732A1 - METHOD FOR MANAGING A RAIL SAFETY SYSTEM AND RAIL SECURITY SYSTEM USING SUCH A METHOD - Google Patents

Abstract

The invention relates to a method for managing a rail safety system (1) comprising a central computer (2) and one or more devices (3) for securing predetermined zones (5) of a track (7). , said method comprising steps of a) detecting, with the one or more security devices (3), an event on a predefined area (5) of a channel (7), b) in case of occurrence of an event on the predefined zone (5), triggering, by means of the security device (3) having detected the event, the transmission of a signal to the central computer (2) and the passage of this device ( 3) in an activated configuration, c) secure the predefined zone (5) on which the event occurs, by means of the central computer (2), d) when the event ends, switch the device (3) ) in a disabled configuration and return the predefined zone (5) to a normal configuration ale. This method comprises at least one of the following additional steps consisting of e) for at least one device (3) for setting security, enable or disable the consideration by the central computer (2) of the event detection by this safety device (3), f) for at least one safety device (3), when this device (3) is put back into the deactivated configuration, before the normal configuration of the predefined zone (5) is restored to normal configuration (5) concerned by the event detected by this device (3), allow the normal configuration of this zone (5).

Description

The invention relates to a method for managing a railway safety system, as well as to a railway safety system implementing such a method. process.

The railways and public transport networks are equipped with security systems that make it possible, for example, to detect intrusions or to allow the interruption of traffic for the maintenance of the tracks or surrounding equipment. Rail security systems include a central computer and pre-defined channel safety devices, which can be used, for example, to detect an intrusion and transmit a signal to the central computer to interrupt the traffic. or, when actuated by maintenance agents, for example by a button or a key, to signal the presence of personnel on the tracks and stop the traffic.

When work on a lane is complete, disabling the associated haul-off device by an operator performing the job re-authorizes traffic to the zone. However, this deactivation of the security device does not necessarily mean that the traffic can be immediately re-authorized in this zone. Indeed some control procedures in the technical room or control room may be necessary before allowing the trains to circulate again.

In addition, in the event that a security device fails and unwantedly triggers the interruption of the traffic on a zone, the zone can be returned to the traffic only after intervention on the faulty device, which causes a problem of availability of the security system and the affected lane area. It is these drawbacks that the invention intends to remedy more particularly by proposing a new management method of a rail safety system and a new rail safety system, making it possible to more effectively manage the activations of the placing devices. in security and system availability. To this end, the invention relates to a method for managing a railway safety system comprising a central computer and one or more devices for securing predefined zones of a lane, this method comprising the steps of: - a ) detecting, with the one or more safety devices, an event on a predefined area of a channel; - b) in case of occurrence of an event on the predefined area, trigger, by means of the safety device which detected the event, the transmission of a signal to the central computer and the passage of this device in an activated configuration; - c) secure the predefined area on which the event occurs, by means of the central computer; - d) when the event ends, switch the trip device to a disabled configuration and return the preset zone to a normal configuration.

This method is characterized in that it comprises at least one of the following additional steps consisting of: e) for at least one security device, enabling or disabling the central processing of the event detection by this safety device; f) for at least one security device, when this device is put back into the deactivated configuration, prior to the normal configuration of the predefined zone concerned by the event detected by this device, allow the normal configuration of this device to be reset to normal. zoned.

Thanks to the invention, when an intervention is performed on an area, at the end of it, the authorization of the deactivation of the securing of the zone makes it possible to ensure that the restoration of the traffic is carried out without human or material risk. Likewise, the possibility of deactivating the consideration of a safety device makes it possible to avoid malfunctions related to the failure of a safety device.

According to advantageous but non-obligatory aspects of the invention, such a method can incorporate one or more of the following characteristics, taken in any technically permissible combination: the central computer receives from at least one device for making information about the physical state of this device. - When a security device is faulty, in step e), the consideration by the central computer of the event detection by the security device is disabled. - The management method comprises a step of repairing the faulty device and then reactivate the consideration by the central computer of the event detection by this device. - In step f), if the authorization for normal configuration of the zone is not obtained, the central computer does not take into account a deactivation of the trip device. The invention also relates to a railway safety system which comprises a central computer and one or more devices for securing predefined zones of a track, the safety device or devices being adapted to: - detect an event on a predefined area of a lane; - in case of occurrence of an event on the predefined area, transmit a signal to the central computer and go into an activated configuration; the central computer being adapted to secure the predefined zone on which the event occurs and, when the event is terminated and the security device which detected the event goes back to the deactivated configuration, reset the predefined area in a normal configuration.

This system is characterized in that it comprises, for at least one security device, first means adapted to activate and deactivate the taking into account by the central computer of the event detection by this setting device. security, and / or second means adapted for, following the transition to deactivated configuration of this device, previously allow the return to normal configuration of the area concerned by the event detected by this device.

According to an advantageous aspect, the first and second means are provided in the form of controls of the central computer operable by an operator from a supervision interface. The invention will be better understood and other advantages thereof will emerge more clearly in the light of the following description of a method for managing a railway safety system and a rail safety system in accordance with its principle, given by way of non-limiting example with reference to the appended FIG. 1 representing a railway safety system and a management method in accordance with the invention.

Figure 1 shows a rail safety system 1, comprising a central computer 2 and one or more devices for securing predefined areas of a path. Only one of these devices is represented with the reference 3. The device 3 is installed in an area 5 in which passes a railway line 7.

The device 3 comprises a detector 30 for detecting an event occurring on the zone 5 and requiring the security of the zone. This event can be, for example, the intrusion of an outsider on the track 7, or the arrival of intervention personnel coming to carry out maintenance operations on the channel 7. The detector 30 can include systems including detection of movements or door openings, or be equipped with an activation device such as a key or a button operable by a field agent, which triggers the detection of an event. In the case of the detection of an event, the device 3 sends a signal to the computer 2 and goes into an activated configuration, which means that an event is in progress on the zone 5 and that the zone 5 should be put in security as the event does not end, that is to say as long as the device 3 is not reset in configuration, for example by a field agent, or goes back to configuration disabled by nature itself of the device. For example, an open door sensor activates when the door opens but goes back to the disabled configuration when the door closes.

When the central computer 2 receives an event detection signal from the device 3 or from another device, the zone 5 on which the event occurs is made safe by the central computer 2. This consists in interrupting the traffic 5, for example by directing a train to another lane, or by stopping a train at a previous station in the case, for example, of a metro, or, if that is not possible, by prohibiting access to the zone by closing an access signal to the zone or cutting off the power supply. When the event ends, the security device 3 is placed in a deactivated configuration and the zone 5 is returned to a normal configuration in which the rail traffic on this zone is allowed.

The system 1 also comprises a control and monitoring interface for monitoring the operating parameters of the central computer 2. This interface is commonly called "Automatic Train Supervision" (ATS) and is designated by the reference ATS in FIG. The ATS interface allows an operator to supervise the movement of trains over a network and the operation of the security system 1.

According to the invention, the system 1 comprises means for activating or deactivating the taking into account, by the central computer 2, of the event detection by the security device 3. These means are preferably formed by a control of the central computer operable by an operator. This command is represented in FIG. 1 by the "inhibition" block operable from the ATS interface. Thus, this command makes it possible, if necessary, to force the central computer 2 not to take into account signals coming from the device 3, for example in the case where it turns out that the device 3, or the detector 30 , is defective and that its eventual triggering of signal sending or setting in activated configuration are the result of a detection error or a problem of operation. For this purpose, the central computer 2 receives from the security device 3 information on the physical state of this device. This may be, for example, maintenance information (over temperature, defect of an acquisition card) sent by the device 3 to the central computer 2, or visual inspections carried out on site.

When a security device 3 is defective, an operator supervising the system 1 via the ATS interface has the possibility of determining whether the failure requires the deactivation of the account by the central computer 2 of the signals of this device . In this case, it actuates the inhibition command, for example by means of a button on a control panel, not shown, incorporating the functions of the ATS interface. The signals of the device 3 are then no longer taken into account by the central computer 2.

The faulty safety device 3 is then repaired. Once this repair is done and the information on the functioning of the device 3 repaired is satisfactory, the operator can reactivate the taking into account of the signals of this device 3 by the central computer 2. This possibility of inhibiting the operation of a safety device 3 makes it possible to avoid false alarms and to make zone 5 inaccessible even though there is no indication that this zone should be made safe.

The system 1 also comprises means adapted for, following the passage in deactivated configuration of a security device 3, previously allow the delivery of the area 5 concerned by this device 3 in normal configuration. This means that if an event takes place in zone 5, and device 3 is switched to the activated configuration, when the event ends and device 3 is turned off, before the deactivation of device 3 is actually when the central computer 2 and the zone 5 are returned to normal operation, the authorization for normal re-establishment of zone 5 is requested. The operator supervising the operation of the system 1 via the ATS interface has only the power, by a command available at the ATS interface, to issue this authorization and to ensure that the device 3 is actually set to disabled configuration and zone 5 recirculated. This command, designated "authorization" in Figure 1, can be provided in the form of a button accessible at the ATS interface.

The "authorization" command implies that the central computer 2 does not take into account a deactivated setting of the device 3 if the authorization to deactivate the trip of zone 5 has not been obtained. In the case of a device 3 such as an open door sensor which is automatically deactivated when the door is closed, it is possible that a person is still present on a path to which the door gives access. An external authorization action is therefore necessary in this case.

In the example, each of the "inhibition" and "authorization" commands is implemented for the device 3. However, only one of these two commands can be implemented. The "muting" and / or "authorization" commands are implemented for at least one of the security devices connected to the central computer 2. It may be envisaged that the set of security devices are managed. by the two commands, or that only some are managed by one of them, or that some of them are managed by either of them, depending on the characteristics of these safety devices.

The "muting" and "authorization" commands are advantageously safe commands programmed safely in the ATS interface software. Indeed, these commands must not be unleashed by the security system 1. In other words, these commands can preferably be triggered only on action of a natural person after security checks.

FIG. 1 represents, in the central computer 2, an example of operation of a management method of the security system 1. In normal operation of the system 1, the latter is in a state 0, in which the zone 5 is in normal situation, that is to say not safe, the trains can circulate there. No event is detected and no security device 3 is therefore in activated configuration. If an event occurs, the device 3 goes into activated configuration. If the "inhibition" command corresponding to this device 3 is not engaged, the activation of the device 3 is taken into account by the central computer 2 and the system goes to the state 1, in which the zone 5 is secured. . Traffic is interrupted and field agents can go to the scene to perform an intervention. If, at this moment, an operator activates the "inhibition" command at the ATS interface, the activated configuration of the device 3 is no longer taken into account by the central computer 2 and the system 1 returns to its state 0. Zone 5 is therefore more secure and returns to its normal situation.

When the system 1 is in its state 1, if the safety device 3 is put back into the deactivated configuration and the "inhibition" command is not engaged, the system 1 goes into a state 2, in which the device 3 is in the disabled configuration but the central computer 2 waits for the authorization of the operator to take into account this deactivation. Zone 5 remains secure until authorization is obtained. If the "authorization" command is triggered, the deactivated setting of the device 3 is taken into account by the central computer 2 and the system 1 returns to its state 0. The zone 5 is returned to traffic. It is the same, from state 2, if the operator activates the command "inhibition". In this case, the deactivated setting of the device 3 is not taken into account by the central computer 2, and the system 1 returns to the 0 state, because the disregard of the configuration of the device 3 involves the surrender of zone 5 in normal situation.

Claims (7)

A method of managing a railway safety system (1) comprising: - a central computer (2); - one or more devices (3) for securing zones (5) predefined of a channel (7), this method comprising the steps of: - a) detecting, with the device (s) (3) setting security, an event on a predefined area (5) of a channel (7); - b) in case of occurrence of an event on the predefined zone (5), triggering, by means of the security device (3) having detected the event, the transmission of a signal to the central computer ( 2) and the passage of this device (3) in an activated configuration; - c) securing the predefined zone (5) on which the event occurs, by means of the central computer (2); - d) when the event ends, switch the security device (3) in a deactivated configuration and return the predefined zone (5) to a normal configuration; this method being characterized in that it comprises at least one of the following additional steps consisting of: e) for at least one device (3) for making security, enable or disable the consideration by the central computer (2) the detection of events by this device (3) for security; f) for at least one security device (3), when this device (3) is returned to the deactivated configuration, prior to the normal configuration of the predefined zone (5) concerned by the event detected by this device (3), allow the normal configuration of this zone (5). 2. Management method according to claim 1, characterized in that the central computer (2) receives from at least one device (3) for securing information on the physical state of the device (3). 3. Management method according to claim 2, characterized in that when a device (3) for security fails, in step e), the consideration by the central computer (2) of the detection events by this device (3) for security is deactivated. 4. Management method according to claim 3, characterized in that it comprises a step of repairing the device (3) failed then to activate again the consideration by the central computer (2) of the detection of events by this device (3). 5. Management method according to one of the preceding claims, characterized in that in step f), if the authorization to normal configuration of the zone (5) is not obtained, the central computer (2) does not take into account a deactivation of the device (3) for securing. 6. A railway safety system (1) comprising a central computer (2) and one or more devices (3) for securing predetermined zones (5) of a track (7), the one or more devices (3) of safe being adapted to: - detect an event on a predefined area (5) of a channel (7); - if an event occurs on the predefined area (5), transmit a signal to the central computer (2) and switch to an activated configuration; the central computer (2) being adapted to secure the predefined zone (5) on which the event occurs and, when the event ends and the security device (3) which detected the event once again in the deactivated configuration, resetting the predefined zone (5) in a normal configuration, characterized in that it comprises, for at least one device (3) of security, first means adapted to activate and deactivate the the central computer (2) takes account of the detection of events by this device (3) for securing, and / or second means adapted for, following the transition to deactivated configuration of this device (3), first allow the normal configuration of the zone (5) concerned by the event detected by this device (3). 7. System according to claim 6, characterized in that the first and second means are provided in the form of commands (inhibition, authorization) of the central computer (2) operable by an operator from a supervision interface ( TTY).