Classifications

• • B—PERFORMING OPERATIONS; TRANSPORTING
  • B61—RAILWAYS
  • B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
  • B61L1/00—Devices along the route controlled by interaction with the vehicle or train
  • B61L1/20—Safety arrangements for preventing or indicating malfunction of the device, e.g. by leakage current, by lightning
• • B—PERFORMING OPERATIONS; TRANSPORTING
  • B61—RAILWAYS
  • B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
  • B61L7/00—Remote control of local operating means for points, signals, or track-mounted scotch-blocks
  • B61L7/06—Remote control of local operating means for points, signals, or track-mounted scotch-blocks using electrical transmission
  • B61L7/08—Circuitry
  • B61L7/10—Circuitry for light signals, e.g. for supervision, back-signalling

Definitions

• This invention relates to a safety device for use with a railway signalling interlock arrangerrent according to the preamble of the attached main claim.
• Safety devices of the kind mentioned in the introduction are known, e. g. from the Swedish patent number 362 041, in which a computer in the interlock arrangement delivers to the safety device two instructions having the same meaning but having different forms.
• Other interlock arrangements are known which contain two computers programmed to deliver two identical instructions to the safety device.
• the interpretation of the instructions for the safety device has originally been carried out by decoders containing relays. When the relays of the decoders were replaced by electronic circuits, it was feared that the degree of safety would decrease unless special measures were taken.
• the safety device according to the invention has the special features which are set out in the characterizing part of the main claim.
• the certainty of a control device which controls the railway operations being set according to the proper instructions is considerably increased by virtue of the fact that relay-contacts with their well recognized isolating ability are used to keep circuits open that are intended to be open, while thyristors with their ability to break current without wear are used to break the current in the circuits which normally causes wear in relay-contacts.
• Figure 2 shows a safety device connected to a railway point machine.
• the safety device 1 in Figure 1 for a railway signalling interlock arrangement is connected to a signal light 2 provided with two signal lamps 2a, 2b for green light and with one signal lamp 2c for red light.
• the safety device 1 comprises three instruction receivers 3a, 3b, 3c, connected to an indication processing means 5 in a central lock unit 6 by means of a digital data communication cable 4.
• Two of the instruction receivers 3a and 3b are each provided with one decoder 7a and 7b respectively for decoding received data words.
• the decoders are each connected to one relay 8a, 8b which are each provided with one normally closed contact 9a, 9b which are shunt connected and connected to the signal lamp 2c for red light.
• the relays are also each provided with one normally open contact 10a, 10b which are series connected and connected to the two signal lamps 2a, 2b for green light, which are connected in parallel.
• the safety device 1 is further provided with a third instruction receiver 3c which comprises a decoder 7c and two switches 20a and 20b connected to the decoder.
• the switches are each connected in one of the circuits for the green lights 2a, 2b.
• the decoders 7a, b, c are made from electronic logic circuits and the switches 20a and 20b are thyristors.
• the safety device is supplied with alternating current for driving the three signal lamps by means of three separate transformers 19a, 19b, 19c.
• the safety device 1 comprises further indication means in the form of voltage sensors 12 in a circuit for the signal lamp 2c for red light and 13 in the common circuit for feeding the signal lamps 2a, 2b for green light. Voltage sensors 14 and 15 are further arranged in each of the circuits for the signal lamps for green light. Indication means in the form of a current sensor 16 are connected in the circuit for the red signal lamp and one current sensor 17, 18 is connected in each of the circuits for the green lamps. Indication signals from the signal means are transmitted by a wire in the cable 4 back to the indication processing means 5 in the central interlock unit 6, although separate wires for this purpose are not shown in Figure 1.
• both instruction receivers 7a, 7b are arranged in a manner known per se each to receive an instruction with the same meaning, i.e. that the signal lamp for red light is to be switched off and at least one of the signal lamps for green light is to be switched on, but the instructions for each of the instruction receivers may be coded in a different manner.
• the decoders of the instruction receivers are arranged to supply current to their respective relay coils 8a, 8b upon receipt of the pre-determined code word to cause the contacts of the relay to switch over.
• the third instruction receivers 3c in the safety device is arranged to receive a third instruction which indicates which kind of setting of a signal light, i.e. if one or two signal lamps for green light is to be switched on.
• the current to the lamps is closed by either or both of the thyristors 19a, 19b which are controlled by the third decoder 7c.
• the result of the operation is reported back to the indicating means 5 at the central interlock unit 6 with the aid of indicators, i.e., the four sensors for voltage 12-15, the three sensors for current 16-18 and the signal contacts 11a, 11b at the relays.
• the computer at the central interlock unit determines by different, independent procedures whether the required change in the setting of signal lamps has been initiated correctly or wrongly. If at least one of the check procedures indicates that the initiated change in setting is wrong, an instruction is immediately delivered to the respective instruction receiver to break its relay contact. The signal light thus reverts to showing red light.
• the safety device 1 and the cooperating central interlock unit 6 are arranged so that the initiated change in setting of signals is inhibited and the return is made to red light after a time duraxion of less than approximately 1/20 seconds. This time duration is so short that the signal lamps for green light do not have time to be illuminated and show any green light; no wrong and dangerous information can thus be shown by the signal lighth ,
• the safety device according to the invention is further arranged in such a manner that a condition for the light signal to show one or two green Lights is that the instruction for showing any green light be received at the safety device approximately 100 times per second. Should instructions to show green light be absent for longer than approximately 1/20 seconds, the relay in at least one of the instruction receivers 3a, 3b opens and the signal reverts to showing red light.
• the safety device is arranged to inhibit the initiated change in setting approximately 1/20 seconds after receiving the instructions to change the setting while the interval between the instructions is only approximately 1/100 seconds and thus significantly shorter is explained by the fact that a number of consecutive instructions - 3 to 5 instructions - are required for the relays of the instruction receivers to reach the closed position.
• the sensors for voltage and current arranged in the safety device allow the proper functioning of the components of the safety device and of the control device connected to it to be checked by special check programs in the computer of the central interlock unit. It will be assumed for example that the signal Light for a time period is set to show one single green light.
• the check program may instruct the instruction receiver 3a to break the current to its relay 7a and instruct the instruction receiver 3c to connect current to both the signal lamps for green light. If then, e.g., the voltage sensor 13 still indicates the presence of a voltage, that must be interpreted as a relay contact 10a of the indicating receiver 3a being stuck in closed position.
• the conclusion may be drawn that the second lamp is suffering from a break of its incandescent filament.
• the special check operation has so short a duration that no change in the lamp signal is visible.
• the check operation is performed only as often as is regarded necessary to give a sufficiently high probability for correct functioning of the components.
• the safety device described is arranged to. provide only two distinct drive signals. In other cases it can be arranged to provide more than two drive signals; one signal may for instance be a flashing signal. In that case the third instruction receiver 3c is provided with more than two thyristors for switching on Lamps to show the signal desired.
• FIG. 2 Another example of a safety device, which is connected to a control device in the form of a point machine, is shown in Figure 2.
• a safety device 31 substantially the same as the one described before is connected to a point machine 32 and provided with three instruction receivers 33a, 33b, 33c. They are, as before, connected by the cable 4 for digital data communication to the indication processing means 5 in the central interlock unit 6.
• the indication receivers are all provided with decoders for the received messages, and in two of the indication receivers 33a, 33b, the decoders are connected to relay coils 38a, 38b which in turn each act on one normally open contact 39a, 39b for. closing the circuit to the point machine 32, and each is provided with one normally closed contact 40a, 40b for indicating the position of the relays.
• the motor 32 of the point machine is a direct current electric motor with an armature 43 and two excitation windings 44A and 44B of which winding 44A is connected in series with the armature during switching of the points to the right and the other winding 44B is connected during switching to the Left.
• a Limit switch 46A breaks the current the motor when switching to the right is completed and a second limit switch 46B breaks the current after switching to the Left.
• the motor of the point machine is supplied with direct current from two separa rectifiers 47A and 47B, i.e., one rectifier for each direction.
• the third indication receiver 33c is arranged with two pairs of switches 48A, 48B connected to the decoder 37c for switching alternating current to the desired winding of the motor of the point machine the current is rectified by the rectifiers 47A, 47B.
• the switches are thyristors in this case.
• the safety device 31 is further provided with sensors, in this case with three voltage sensors 50, 51A and 51B.
• the sensor 50 indicates the voltage after the contacts of the relays of the two first instruction receivers 33a, b, and the other sensors indicate the voltage to each separate excitation winding of the motor after the thyristors of the third instruction receiver 33c.
• the point machine 32 is further provided with two pairs of signal contacts 53A and 538, that are connected to a rectifier 54 and arranged to be closed at the same time as the corresponding Limit switch 46A and 463 respectively when the switching is completed.
• the signal contacts are arranged to deliver a DC-voltage with different polarity in one end position and in the other.
• the signal contacts are connected to a low pass filter 55 in the safety device 31 and the filter in its turn is connected to sensors 5 ⁇ A and 56B for indicating to the central interlock unit 6 the polarity of the signal voltage.
• a relay contact in a test relay 61 is connected in the circuit between the signal contacts 53A, B and the filter 55 to be used for testing of the indicating arrangement proper.
• the sensors 50-52 and 56A, B are connected to the digital communication cable 4, but separate wires for this purpose are not shown in Figure 2.
• the safety device 31 for the point machine 32 is arranged in principle Like the safety device 1 for the signal light, that is to say that the two indicating receivers 33a, 33b decode the instructions received, and when it has been confirmed that the instructions to both the instruction receivers indicate that the point machine is to be switched over, although the instructions may have different forms, the relay contacts 39a, 39b are dosed.
• the third instruction receiver 33c decodes another instruction that determines in which direction the point machine is to start and closes the circuit to the proper excitation winding with the aid of either of the double pole connected thyristors 4SA, 488.
• the central interlock unit is informed, with the aid of the voltage sensors 50-52 and the relay contacts 40a, 40b, which type of switching has been initiated.
• an instruction is sent to at least one of the two instruction receivers 33a, 33b so that at Least one relay brea.kes the circuit to the point machine and inhibits the initiated switching.
• the safety device 31 is also in this case arranged to inhibit the initiate switching Less than 1/20 seconds after receiving instructions to start operation of the point machine, which causes further switching of the point machine to be inhibited before it has actually started its movement.
• the instruction receivers 33a, 33b and 33c are arranged to receive instructions of switching the point machine repeatedly approximately 100 times per second. Should a number of instructions be absent during the switching at least one of the relays 38a, 38b opens and the movement of the point machine is stopped.
• the safety device 31 for the point machines is provided with a relay 61 having a normally closed contact in the circuit from the signal contacts 53A, B of the point machine.
• the contact of the test relay 61 is used to break the signal voltage when the point machine is in an end position and continuously delivers a DC signal voltage.
• the sensors 56A and 56B are capable of distinguishing between the conditions where signal voltage is present and absent.
• Safety devices of the type described can be arranged and connected to devices for the control of railway operations other than the signal lights and point machines described here.

Landscapes

• Engineering & Computer Science (AREA)
• Mechanical Engineering (AREA)
• Automation & Control Theory (AREA)
• Train Traffic Observation, Control, And Security (AREA)
• Safety Devices In Control Systems (AREA)

Priority Applications (2)

Applications Claiming Priority (2)

Publications (1)

Family

ID=20334009

Family Applications (1)

Country Status (11)

Cited By (1)

Families Citing this family (1)

Citations (1)

Family Cites Families (4)

• 1978
  • 1978-02-16 SE SE7801810A patent/SE410421B/sv not_active IP Right Cessation
• 1979
  • 1979-02-01 FI FI790338A patent/FI65403C/sv not_active IP Right Cessation
  • 1979-02-06 FR FR7902992A patent/FR2417423A1/fr active Granted
  • 1979-02-13 CH CH9145/79A patent/CH651510A5/de not_active IP Right Cessation
  • 1979-02-13 WO PCT/SE1979/000029 patent/WO1979000631A1/en unknown
  • 1979-02-13 GB GB8007019A patent/GB2037469B/en not_active Expired
  • 1979-02-13 DE DE792936549A patent/DE2936549A1/de active Granted
  • 1979-02-15 ES ES477732A patent/ES477732A1/es not_active Expired
  • 1979-02-15 NO NO790510A patent/NO143138C/no unknown
  • 1979-02-15 IT IT20222/79A patent/IT1110238B/it active
  • 1979-10-03 DK DK415179A patent/DK148016C/da not_active IP Right Cessation

Patent Citations (1)

Also Published As

Similar Documents

Legal Events