WO2017021932A1

WO2017021932A1 - An improved control network for safety systems such as traffic gates

Info

Publication number: WO2017021932A1
Application number: PCT/IB2016/054736
Authority: WO
Inventors: Aarti KHOSLA; Sanjeev KHOSLA
Original assignee: Khosla Aarti; Khosla Sanjeev
Priority date: 2015-08-06
Filing date: 2016-08-05
Publication date: 2017-02-09

Abstract

The present invention relates to improved control network safety system with for gates such as level crossing gates (railroad crossing gates) and such other applications and discloses a stand-alone system with one or more driven load/unit and with remote and/or local detection, wherein, the said system also provides another configuration with remote monitoring and/or control of the level crossing activity at the station, which then becomes the second location in the network, the said system providing improvement in reliability, availability, maintainability and also reducing costs thereby increasing energy efficiency and savings.

Description

AN IMPROVED CONTROL NETWORK FOR SAFETY SYSTEMS SUCH AS TRAFFIC GATES

FIELD OF THE INVENTION

The present invention relates to improved control network and safety system for gates such as level crossing gates (railroad crossing gates) and discloses a stand-alone system with one or more driven load/unit and with remote and/or local detection. The system comprises at least one detector sub unit such as a camera of suitable range and view angle to work as an Electronic Eye, thus obviating the need for mechanical or wired interface with the rail track, a power source, intelligence to identify objects intended to be identified, system ability to exercise control as per requirement of the application and generate at least one alarm. The system of the present invention also provides another configuration with remote monitoring and/or control of the level crossing activity at the station, which then becomes the other location in the network. This can be extended to more locations. The system of the present invention provides improvement in reliability, availability, maintainability and also reduces costs thereby increasing energy efficiency and savings.

BACKGROUND OF THE INVENTION

Accidents at level crossing gates (hereinafter referred to as "LC gates") or railroad crossing gates are common phenomenon in railways, particularly, Indian Railways. There is even greater concern for unmanned LC gates.

The railways, particularly, Indian Railways have been wanting a light and sound based warning system for the more than 35,000 level crossing (LC) gates which includes nearly 23,000 unmanned LC gates. Though there are warning signs and boards the unmanned LC gates do not have any kind of signalling or alarm system for people who cross LC gates. Various types of automatic equipment(s) are being tried at the unmanned LC gates.

In present systems for level crossing at railroads, the focus on functional requirements to ease human life has adequately progressed. Further, the use of nanotechnology integrated circuits have packaged the systems into smaller sizes with higher functionality, thus improving their user friendliness and popularity and adoption. However, this increases the situations and possibilities where the malfunctioning may compromise the safety requirements and thus lead to new types of unsafe conditions. in conventional systems for detecting the presence of an oncoming train moving towards a level crossing for controlling the level crossing gate system, a voltage between rails in an electrically isolated section is provided, and the conductive wheels of the train passing over the section allows the current to pass whic is used to generate a signal for the level crossing gate system. While the reliability of such train presence detection systems is not very high, the potential danger to human life by the failure of such systems makes it of paramount importance to provide a system which is as reliable as possible.

In U.S. Patent No. 4,179,744, a system for analysing performance of electric traction motor powered railway locomotives is described in which the magnetic fields of electrical operating components of the electric traction motor powered vehicles are sensed. The results of the sensing are used for performance and maintenance evaluation purposes. While the speed of the train is obtained from the measurements, the system described measures the movement and operation of electrical operating components without providing useful information on the movement of vehicles containing no electrical operating components. However, in case the locomotives at the front of the train is absent or turned off, detection of electrical operating components cannot be used as a reliable means for detecting the presence of a train moving towards a level crossing.

in U.S. Pat. No. 4,283,031 a magnetic sensor for detecting the movement of a wheel of a rail car is described in which the speed and the direction of the rolling wheel can be determined. Tine wheel movement measurements from various sensors on each side of the level crossing are used to control the level crossing gate system. The wheel movement sensor disclosed in this Patent is an active device mounted in close proximity to the moving wheel and is mounted above ground. By providing the sensor above ground and in a predetermined position adjacent the moving wheels of the train, the sensor is both exposed to the elements and exposed to risk of damage either by the train itself or by vandalism.. The wheel sensor disclosed in this Patent is not suitable for mounting at or below ground level.

EP10174679A2 discloses level crossing system (1) that will be used at the level crossings where the highways and railways intersect, ensuring that the traffic flow on the highway is cut off for a period that is equal to the time determined on the basis of the speed of the train (T), while at the same time the image of the level crossing is instantaneously recorded and relayed to the trains (T) within the range by means of wireless communication. However, this suffers on following accounts:

- requires the human interface of the driver in the Locomotive;

driver has no control over the closing of the Highway;

if the highway is not cut-off to the approaching train coming in at a speed accident is imminent as an alert driver may not be able to stop the train due to its long braking distance.

EP2857277 discloses the backed-up programmable control block (CB) of the level crossing safeguarding equipment (LCSE) is connected through the backed-up data transfer (DT) to remote intelligent peripherals (IP), which are located near the railway lines (RL) in the site designated for the safeguarding of the level crossings (LC), and which are partially or fully backed up, while the backed-up programmable control block (CB), backed up data transfer (DT) and remote intelligent peripherals (IP) are powered from a backed-up power source (PS) through backed-up power lines (PL).

The above invention is merely describing the relayout of level crossing equipment with back-ups to broaden the domain of interconnection. Nothing is disclosed or claimed on how system integrity levels can be improved. It still suffers on complexity of multiplicity of distributed controls, fault management complexity and the safety hazards which can be removed by keeping the system simple and straight to the terms of reference.

WO/2014/059487 discloses a supplementary warning systems (100) for a level crossing adapted for activation by a train comprises wheel sensing devices (112, 114, 116, 118), a module (110) for communicating signals from the wheel sensing devices (112, 114, 116, 118) to a level crossing controller (130) adapted to communicate with the wheel sensing devices (112, 114, 116, 118). Two pairs of wheel sensing devices (112, 114, 116, 118) configured as strike-in and strike-out heads in respect of the level crossing. The level crossing controller (130) comprises: a battery; a solar panel; a programmable logic controller (PLC) for controlling operation of active warning devices positioned at or near the level crossing dependent upon signals received by the PLC from the wheel sensing devices; and a power control module for charging the battery and controlling power to components of the level crossing controller. The solar panel and the battery provide all power to the level crossing controller (130).

The above invention suffers from the possibility of pilferage of remote equipment, it adds remote maintenance, and is dependent on mechanical interface. Integrity level of various functions is not disclosed or claimed

Indian Patent Application No. 1054/MUM/2010 discloses an interlocking system for controlling gates for traffic crossing at crossing junctions of railway tracks, said system comprising voltage feeding means adapted to feed voltage to a portion of a railway track spaced apart from said gate; current feeding means adapted to feed current to said portion of railway track; voltage sensing means adapted to sense voltages at continuous discrete instances of time, thereby sensing the change in voltage on said portion of railway track; current sensing means adapted to sense currents at continuous discrete instances of time, thereby sensing the change in current on said portion of railway track; first computing means adapted to compute resistance and rate of change of resistance on said portion of track based on said sensed voltage, said sensed rate of change of voltage, said sensed current, and said sensed rate of change of current; second computing means adapted to compute velocity of an approaching train with respect to sensed data at said portion of the track, based on rate of change of resistance; third computation means adapted to compute distance of train from the gate, based on said computed speed and said computed rate of change of resistance; first storage means adapted to store a preset value of resistance and a preset value of rate of change of resistance; first comparator means adapted to compare said computed resistance with said preset resistance and said computed rate of change of resistance with said preset rate of change of resistance; second storage means adapted to store preset safe distance from said gate and preset safe velocity; second comparator means adapted to compare said computed distance with said preset distance and said computed velocity with said preset velocity; and controller means adapted to control actuation of said gate based on said first comparator means and said second comparator means. An interlocking method for controlling gates for traffic crossing at crossing junctions of railway tracks by using the said system.

This invention suffers on account of voltage leakages, connections, mechanical aberrations. It adds remote maintenance, and is dependent on mechanical interface. Integrity level of various functions is not disclosed or claimed.

Indian Patent Application No. 315/CHE/2011 discloses a system that ensures that the number of accidents and death will be nullified after the installation of this system. This project can be installed for manned and unmanned level crossings too. The additional feature of this proposed system is that the indication will be sent to the control room whenever two trains are passing on the same track.

Indian Patent Application No. 5304/DELNP/2007 discloses a level railway crossing (1) extending over one or more tracks (2, 3), which railway crossing includes a traffic surface (4) that can be driven over, and which is formed by cover elements (6, 7). Cover elements (6) arranged between the rails (10, 11) of the respective track rest only on the rails and self-supportingly bridge the space (12) between these rails (10, 11). Cover elements (7) outwardly adjoining the rails (10, 11) of the respective track (2, 3) rest with their rail-side rim (9) on the respective rail (10, 11), and at their side (13) which faces away from this rail, they rest on bases (14). In the region of the railway crossing (1), the rails (10, 11) are mounted on and fastened to supporting beams (15, 16; 15a, 15b, 16a, 16b) arranged along the rails to extend underneath the former and lying on a substructure (19). Externally of the railway crossing (1), the rails (10, 11) are mounted on transverse sleepers (20).

Indian Patent No. 228444 discloses a level crossing warning system for use with a railway level crossing gate. The system has a gate side assembly located on one side of the gate. An audio and/or visual warning means are connected to the gate side assembly to provide a signal to indicate the presence of a rolling stock. A motorized road barrier assembly is connected to the gate side assembly to stop road users from crossing over when a train is approaching the gate. A data communication interface is connected to the gate side assembly to transmit the signals relating to the working status of the system. A remote end assembly is located on each track on either side thereof for detecting a rolling stock when present on the railway track. A direction finder circuit for determining the direction of a rolling stock. A switching circuit is connected to an output terminal of a timer circuit connected to direction finder circuit for activating the warning means. An encoder circuit is connected to the output terminals of the direction finder circuit for providing cyclic repeating date frames. A power source for supply of power to remote end assembly, the gate side assembly consists of receiver for receiving signal from a shift keying circuit of the remote end assembly. A differentiator cum switching driver circuit and logic circuit is connected to the counter that produces a pulse train representing a system in healthy conditions and fed to said driver circuit and a second pulse train which pulsates when the system does not detect a train approaching the gate. The pulse train is also fed to the driver circuit or a third pulse train, which pulsates if the system does detect a train approaching the gate. The pulse train is also fed to the driver circuit. The audio and/or visual warning means are connected to the counter, the motorized road barrier assembly and data communication interface circuit is connected to the counter and a power source for energizing the gate side assembly.

The above disclosed documents merely describe the relayout of level crossing equipment with mechanical interfaces and distributed maintenance requirements. Nothing is disclosed or claimed on how system integrity levels can be improved. It still suffers on complexity of multiplicity of distributed controls, fault management complexity and the safety hazards which can be removed by keeping the system simple and straight to the terms of reference.

However, there is a need for cost effective and reliable, sustainable system at such locations. Alternate solution to the problem is provision of underpass or an overpass which is a very expensive and time consuming mechanism and hence not feasible for a developing country like India in view of the large network of the Indian Railways (still expanding) and inadequate budgetary support.

With this background some systems have been developed, however these have not yet been adopted due to various limitations provided below: For detection of the incoming train 2km away from the crossing, detectors are required to be placed on the railway track which become an additional element of reliability, maintenance and are theft prone. Such detectors require wired communication to the gate which makes them very expensive and theft prone.

Use of GPS/ Satellite support to detect the exact location of the incoming train to be at or within a specified distance for instance 2km from the LC gate to generate the alarm at the LC gate. However, this has third party dependence and is affected by weather conditions. Besides this, such a support system has logistics problems related to the GPS/ Satellite device to be provided on each and every locomotive passing the Level Crossing.

Use of load cells to detect a load of two tonnes or above as a train. However, the design of the load cell is not fit for this application due to heavy load. Furthermore, the vibrations caused by the train result in disturbance of the load cell. Such a system also requires underground wiring for the entire stretch and has safety issues related to theft.

Use of any other type of detectors on track to detect well in advance the coming train(s) requires laying of cables upto the LC gates to perform the detection and such cables are prone to theft and cost far more than the warning system at the gate, make them economically unviable.

Use of RFID (radio frequency identification device) or any other on board mechanism has logistics problem of incorporating such a device on every locomotive passing through the LC gate. Furthermore, such a device requires placement of detectors at specific distance from the LC gate for instance 2km to first detect the incoming train to initiate the warning and then detect when the train when it has passes off to stop the warning. Such detection may be communicated through a wired system or wireless system. If wired system is used it has its own problems and if wireless is used it requires continuous power and dependence on its related mechanisms.

Furthermore, despite the warning signals people/pedestrians cross over the LC gate which further increases casualties/accidents. Thus, there is a need for a system which can also detect such violation by people/pedestrians and generate alarms, control safety functions. In cases it is important to generate an alarm at the station and/or the train to cause preventive action. None of the systems offered till date for manned or unmanned LC gates has offered a solution to this problem with the integrity as stated in this invention. Further, there is not enough interface with the control room/station or safety management to ensure that all unsafe conditions are avoided and human interface is minimised or overridden to affect the safety.

The present invention upgrades the integrity levels in such systems., by having multiple sub units networked within a stand-alone configuration at a location, wherein one or more locations are able to upgrade their integrity levels for one or more functions to provide the safety with respect to terms of reference as may be defined for the application with such improved control network having the functional control intelligence, thereby improving the reliability, safety, availability and efficiency.

Accordingly the present invention is illustrated to provide a cost effective safety system for gates, particularly Level Crossing (LC) gates at railroads. The system of the present invention in one embodiment is a standalone system with remote and/or local detection using an electronic eye and is described herein below in detail.

OBJECTS OF THE PRESENT INVENTION

It is an object of the present invention to provide a safety system for gates particularly LC gates in standalone local network with one or more driven load/unit/sub units and with remote and/or local detection using an Electronic Eye.

Another object of the present invention is to provide a safety system for LC gates comprising at least a long range camera, a local power source, intelligence to identify objects and generate at least one alarm as per defined requirements for high level of integrity for system operation monitoring. Another objective of the present invention is to provide a safety system which provides improvement in reliability, availability, maintainability and also reduces costs thereby increasing energy efficiency and savings.

Another objective of the present invention is to monitor a remote unit and provide its status with high confidence level with respect to the terms of reference that it is or not as per the defined condition.

Another objective of the present invention is to logically integrate the units, sub- units and/or functions of the safety system in a sequence which improves the safety of operation in line with the objects of the invention and terms of reference thereby also reducing the need of the components and materials used.

Another objective of the present invention is to provide a distinct domain of the driven unit power supply and that of the feedback to proving unit.

Another objective of the present invention is to provide a distinct domain to monitoring and control functions.

Another objective of the present invention is to network more than one location such as stated above, each location with sub units as per the functionality requirements of the location, with intra location control and/or monitoring.

SUMMARY OF THE PRESENT INVENTION

The present invention relates to safety systems for gates, particularly, illustrated for LC gates with one or more driven load/unit; and Electronic Eye comprising at least one camera with night vision and/or thermal vision for fail safe detection of distant and nearby objects compared with defined video condition, said system comprising: at least one power source, connected to at least one supply unit optionally with at least one proving unit on one side of at least one connecting medium; at least one output unit connected to at least one driven unit connected to the other side of said at least one connecting medium; the system requiring at least one monitored and/or control function with at least one term of reference; said function being in different domain from at least one monitored, one or any unit of the system, in a standalone location unit/sub unit network, the said standalone configuration optionally being networked for monitoring and/or control with at least one more location, each location having its sub units as per the functionality of the location.

One of the main embodiment of the present invention relates to an improved control network safety system comprising electronically controlled network with high level of functional integrity at one or more location, using one or more improved control system/s with segregation of the domains of various functions critical to operation integrity, remote monitoring and control, using the received function information proven or otherwise to further prove the function at the receiving location with the functional identification to the receiving location, and having an intelligent response mechanism to control the needs at the location and/or other location, entire operation being online and/or periodically reciprocated/ hand shaken/monitored, with transporting of one or more proven, monitored function/s through a medium to unit/sub units,

the said control/safety system comprising:

at least one power source (3,4), connected to at least one supply unit (23) optionally with at least one proving unit (24) on one side of at least one connecting medium (27);

at least one output unit (25) connected to at least one driven unit (26) connected to the other side of said at least one connecting medium (28); and

at least one intelligent standalone networked system with fail safe detection using improved control systems and high level of functional integrity , and optionally such other systems with their independent or similar functionality connected to such standalone safety system to form an improved control network.

Still another embodiment of the present invention an improved control network safety system wherein an intelligent stand-alone network comprises of monitoring system for level crossings at rail roads for remote/distant monitoring of objects with fail safe detection of the incoming as well as departed train from the gate location, monitoring of road users itself using at least one detector (2a) obviating the need for wiring, generating audio and/or visual alarms for road users on detecting the incoming train and aborting the alarms upon detecting the departure of train in standalone network created by changing the domain of the detector from conventionally used magnetic detectors wired up to 2 km from the location, to Electronic Eye which standing at the Level Crossing monitors both the Level Crossing as well as detects the oncoming train such that the need of long distance wiring between a detector and its detecting unit is obviated.

Still another embodiment of the present invention provides an improved control network safety system wherein a proving unit of the present invention comprises any one of the following either alone or in combination:

Status code generator (35, 38),

- MFM ( Multiple feedback means) (34, 40),

Output Unit (25) comprising video sensing means, optical sensing means, voltage sensing means, current sensing means, digital sensing means, magnetic sensing, or pressure sensing or any of the conventional means.

Status reader (32)

Yet still another embodiment of the present invention provides an improved control network safety system wherein a power source (3, 4) comprises of solar panel, battery or other conventional units.

Still another embodiment of the present invention provides an improved control network safety system wherein a system obviates the need of wiring between \ detector and detecting unit and is placed at the standalone location and connect to the system at the location itself.

In one embodiment the system is a video detection system.

Yet still another embodiment of the present invention provides an improved control network safety system wherein connecting mediums (27, 28) are selected from one or more mediums wherein the medium comprises of cable, air, radio communication, optical fibre or any conventional medium congenial for the interconnection to meet the functionality with high level of integrity.

Still yet another embodiment of the present invention provides an improved control network safety system wherein a supply unit (23) comprises either alone or in combination the current liming means, polarity control means, voltage control means or any means to control the flow of energy to adapt the flow of energy. Still another embodiment of the present invention provides an improved control network safety system wherein an output unit (25) comprises of either alone or in combination sensing means (31, 33, 39, 41, 42), output status feeder/generator (35, 38), noise filter, multiple feedback means (34, 40), under over control means (47), output limiting means (30), at least one power regulator and optionally polarity control means (29, 36).

Yet another embodiment of the present invention provides an improved control network safety system wherein a driven unit (26) comprises of LED cluster lamps with or without optical sensing means and either alone or in combination control means, current limiting means, current sensing means or any conventional means.

Yet another embodiment of the present invention provides an improved control network safety system wherein a monitored function comprises of sensing feedback communication between the units, sub units, intra- sub units at the location and/or between the locations to perform the control functions.

Still yet another embodiment of the present invention provides an improved control network safety system wherein a control function comprises of activity to perform in accordance with the application for the end use with or without the conditionality of terms of reference.

Still another embodiment of the present invention provides an improved control network safety system wherein a fail-safe detection comprises of optical feedback generated.

Still another embodiment of the present invention provides an improved control network safety system wherein a feedback is generated after individually validating the parameters of voltage, current, optical, magnetic, digital input and/or output, pressure, and such other factors for correctness as per the defined requirements at the location/unit, logically generating the combined correctness in fail safe manner as the feedback signal/status of high integrity.

Still in another embodiment of the present invention provides an improved control network safety system wherein location (1) is a station or a relay room (1) and/or a locomotive (1) connected through a suitable medium. Further yet another embodiment of the present invention provides an improved control network safety system wherein at least one more proving is generated for the same output status code and/or at least one more output status code is generated from the same proving code using the same medium or another medium at the same or another location, wherein output status code is of high integrity generated using the improved control system.

Still further embodiment of the present invention an improved control network safety system wherein the status code is generated by the output unit (25) after it is checked in inherently fail safe manner using under over control means and multiple feedback means in functional priority sequence using optical sensing, voltage sensing, current sensing, digital sensing means, or any conventional means, wherein all functions are ANDed.

Yet another embodiment of the present invention provides an improved control network safety system wherein the status code is the LED lamp feedback and proving code is the output generated by the proving unit.

Still another embodiment of the present invention provides an improved control network safety system wherein the monitoring function inter unit/subunit and/or intra unit/sub unit is in a separate domain from the one or any other monitoring function.

Still another embodiment of the present invention provides an improved control network safety system wherein the integrity level of at least one function is SIL- 4 as per Cenelec standards.

Yet another embodiment of the present invention provides an improved control network safety system wherein the driven unit comprises of video screen, audio alarm, radio transmitter, optical fibre interface or any unit necessary to meet the application, control/interface requirements to meet the functional needs, each such unit having a functional integrity means as per the requirement.

Further, embodiment of the present invention provides an improved control network safety system wherein the system can be employed for level crossings at rail roads or for any facility management or store management and other industrial applications. BRIEF DESCRIPTION OF FIGURES

The invention is further described by following figures herein that are provided for illustration only and is not construed to limit the scope of the invention in any way:

Figure 1: shows the improved control network using improved control system at system schematic level.

Figure 2a & 2b: shows some sub components of the control system, and a configuration of the system, respectively.

Figure 3a: shows one embodiment of the block diagram of sub units of Fail Safe Unit of the improved control system for illustrating the application of LC gates with solar/battery power source (3,4), for safety system for gates used in the improved control network

Figure 3b: shows the sub units of an Electronic Eye Unit

Figure 4: illustrates the sub unit elements categorised under sensing means, control elements and design control elements

Figure 5: shows two configurations one for radio communication at station {5, 6, 7 and 8} and other at unmanned LC gate {9, 10, 11 and 12}) with improved control network for safety systems for LC gates with mediums Figure 6: shows illustratively the details of the standalone control network of fail-safe units using improved control systems for LC gate application

Figure 7: shows standalone network controlled safety system for a location of LC gate with sub unit configuration details of one of the Fail Safe Units using the Electronic Eye

Figure 7a: shows the Electronic Eye Fail Safe Unit for LC Gate DETAILED DESCRIPTION OF THE PRESENT INVENTION

The present invention relates to an improved control network for use in applications requiring high level of functional integrity at one or more location, for improving efficiency, availability, reliability and safety of operation in various applications using one or more control system by segregating the domains of various functions critical to maintain high level of operation integrity, remote monitoring and control, using the received function information proven or otherwise to further prove the function at the receiving location with the functional identification of the receiving location, and having an intelligent response mechanism to control the needs at the location and/or other location, entire operation being online and/or periodically reciprocated/ hand shaken /monitored, transporting a proven, monitored function through a medium to sub units.

The present invention relates to the improved control network(l) and safety system for gates [(5,6,7,8,46), (9,10,11,12,45)] such as level crossing gates (railroad crossing gates) and discloses a stand-alone system, Intelligent Control Networked Safety System (ICNSS 1) with one or more driven load/unit/Fail Safe Units (FSU1, FSU2, FSU3, FSU4) and with remote and/or local detection. The system comprises at least one detector sub unit such as a camera of suitable range and view angle to work as an Electronic Eye (2a), thus obviating the need for mechanical or wired interface with the rail track, a power source, intelligence to identify objects (42, 27) intended to be identified, system ability to exercise control as per requirement of the application and generate at least one alarm (FSU1, FSU3) and/or intelligent control output (27, 28). The system of the present invention also provides another configuration with remote monitoring and/or control of the level crossing activity at the station (6, 10), which then becomes the other location in the network. This can be extended to more locations. Alarm is considered as a non- intrusive action. However, based on the monitoring this action may be converted to intrusive control action [FSU4, (Md, 45), Md, 46), (M6, lCNSSx)] to meet with the safety requirements, and caused through direct and/or interactive two way control intra or inter location. Such action as per the safety function is in accordance with the terms of reference. A term of reference may be understood as an absolute requirement single or multiple to meet the safety condition and has to be complied. The possibility of failure of compliance has to be defined in terms of safety standards such as Cenelec standards. For example, warning is to be given to road users upon detection of the train. Barrier has to be closed only after giving the warning and seeing no body is in the barrier zone. In the event level crossing remains infringed either a condition can be to give warning to train driver, or an intrusive condition can be to cause automatic braking of the train. So this becomes the list of terms of reference such as for a standalone level crossing gate safety system. So clearly each of the above terms of reference requires separate respective units networked at the same location. Now in each of the units as per the invention there will be sub components/units/sub units as shown in Figure 4, each of them will have a functionality as per the requirements of improved control system, wherein their integrity would be kept high by keeping their domains separate so that under no condition of failure or external interference is the immunity/ integrity of the function/respective operation is affected to cause a wrong feedback or communication of the status or malfunction of another safety requirement. Thus, building the integrity from the smallest functional unit, the same is applied at the unit level and then at the stand alone network level as shown in figures 6 and 7 at a location and intra location shown in figure 5 and finally becoming a part of the improved control network (1) as shown in figure 1. The interconnection mediums some of which are also shown as {(Ml, M2,...), (Ma, Mb, Mc....) described in figure 4, are so chosen to keep the cost low and take the benefit of domain segregation. Even when the medium is same, it may be either physically separate, and when physically also the same, segregation may also be done as in the design control elements in figure 4 showing the domain control mechanisms. Segregation of domains done appropriately and adoption of energy conditions most suited reduces number of components required to achieve the functionality and therefore also the cost of fail safety mechanisms. The system of the present invention provides improvement in reliability, availability, maintainability and also reduces costs thereby increasing energy efficiency and savings.

Reliability is improved by domain isolation of critical functions as above where required, supplemented with functional sequencing and proving using under over control means(47), i.e. within a defined window in such case, which further increases the immunity and integrity which is enhanced/made absolute/ wrong side failure rate and further made negligible by ANDing under over control window {(38&47), (40&47)} testing of the primary segregated domain function with a complimenting function.

Availability is improved due to lower failure rate due to reduced failure of components, removal/ reduction of external interference due to higher immunity with domain shift and/or high integrity proven status networked in the control system.

Lower Failure Rate using the above methods also reducing the components both in the system and outside the system with domain change increasing the maintainability and availability of the control network, safety of the system.

Reduction in internal and external components reduces both energy and cost requirements, also can cut down further the energy consumption by causing periodic hand shaken reliability instead of online connect in the units/sub units of the network.

It is the object of this invention to upgrade the integrity levels in such systems, have multiple units, Fail Safe Units ( FSU1, 2, 3, 4) shown in figures 6 and 7 networked within a standalone configuration at a location, wherein one or more locations are able to upgrade their integrity levels for one or more functions to provide the safety with respect to terms of reference as may be defined for the application with such improved control network intra or inter location having the functional control intelligence, outputs (27, 28) interconnected intra and/or inter location, thereby improving the reliability, safety, availability and efficiency.

In other words, the Control intelligence becomes easier and more effective intra- location or inter location when high integrity proven functions are exchanged. Furthermore, as an example, despite the warning signals people/pedestrians cross over the LC gate which further increases casualties/accidents. Thus, there is a need for a system which can also detect such violation by people/pedestrians and generate alarms (FSU1, FSU3), intelligently control safety functions [(FSU4), (Md, 46), (Md, 45). In cases, it is important to generate an alarm at the station and/or the train to cause preventive action. None of the systems offered till date for manned or unmanned LC gates has offered a solution to this problem with the integrity as stated in this invention. Further, there is not enough interface with the control room/station or safety management to ensure that all unsafe conditions are avoided and human interface is minimised or overridden to affect the safety. The system created by this invention which detects with high confidence level if level crossings are free of obstructions as trains approach, improves safety by allowing not lowering of crossing barriers that may trap vehicles or pedestrians on the tracks, and can automatically signal the trains to brake until the obstruction clears.

For example, in the LED cluster lighting validation even though optical sensing is the final test for verifying whether the signal is lit or not lit within the specified window, and in addition ANDing it with the functional test of LED current, makes the signal LIT/Not LIT test absolute. Such method thereby also reduces the system components for safety validation, need for redundancy etc. For example systems use 2 out of 3, or 3 out of 4 processors to achieve the reliability and SIL - 4 integrity.

High level of integrity of one or more critical functions translates into higher integrity of networked sub units. For example, in the Level Crossing if video identification of the objects is with absolute integrity then its proven status code transmitted to the network of its location or another location such as station/locomotive can be straight away used to raise or not raise the alarm. Otherwise, it would require the video to be recycled for object detection and/or human interface at the station or locomotive which has its own limitations, wherein video received at station/locomotive, reliability would become important and thereby also requiring extra components.

One of the main embodiment of the present invention provides a safety system for gates particularly level crossing gates (railroad crossing gates). The present invention relates to improving safety, availability, reliability and reducing cost of operation with respect to the terms of reference by using a standalone safety system as shown in figure 7a incorporating an electronic eye (2a) for detecting remote and/or nearby object/s for warning and safety actions on LC gates.

The system comprises at least one long range camera, video imaging and a comparison mechanism, segregating the domains of functions critical to maintaining high level of system operation integrity to generate warning audio and/or visual (3) at the location, and optionally transporting a proven, monitored function comprising the optical validation of the signal, magnetic /audio validation( optional as per need) of the hooter, in separate domains over the same medium say by changing the carrier frequency of the feedbacks through a medium Ml intra location to the ICNSS ( INTELLIGENT CONTROL NETWORK SAFETY SYSTEM) (5) and using the proven function information to further prove the function at the receiving location with the functional requirements of the receiving location, entire operation being online and/or periodically reciprocated/hand-shaked.

The system further comprises: at least one power source, connected to at least one supply unit optionally with at least one proving unit on one side of at least one connecting medium; at least one output unit connected to at least one driven unit connected to the other side of said at least one connecting medium; the system requiring at least one monitored and/or control function with at least one term of reference; said function being in different domain from at least one monitored, one or any unit of the system.

The proving unit of the present invention comprises any one of the following either alone or in combination:

Status code generator,

- MFM ( Multiple feedback means),

Video sensing means ,Voltage sensing means, current sensing means or any conventional means,

Status reader

The advantages of the present invention includes providing an intelligent standalone video detection system, obviating the need of wiring for remote/distant detection of objects, fail safe detection of the incoming as well as departed train from the gate location itself using at least one camera, generating audio and/or visual alarms for road users on detecting the incoming train and aborting the alarms upon detecting the departure of train.

The system may also detect the LC gate infringement by road users and record it and if desired (optionally), transmit any status online or otherwise to a remote location using another medium. The system of the present invention may for instance detect the infringement of the LC gate, record it and further provide warning signal to the train driver; and/or communicate, hand-shake/reciprocate with the station. The system results in reduction in energy consumption, capital costs, maintenance costs in various systems operating and monitoring various electrical loads such as LED based lighting systems, audio alarms, etc.

In the present invention all components of the system connected through one or more than one medium(s) are interlocked with online hand-shake inherently validating the output of various sensing means for the high confidence level output with respect to the terms of reference.

The interconnectivity of the components and the sub-components within the components is done in functional priority sequence to logically preclude the wrong side failure both in terms of systematic failure(s) and component failure(s).

In the present invention inherently fail safe methodology may be adopted to provide the key function, thereby facilitating the other functions to be determined through logical means with high degree of confidence level.

the said control/safety system comprising:

Status code generator (35, 38),

- MFM ( Multiple feedback means) (34, 40),

- Output Unit (25) comprising video sensing means, optical sensing means, voltage sensing means, current sensing means, digital sensing means, magnetic sensing, or pressure sensing or any of the conventional means.

Status reader (32)

Still another embodiment of the present invention provides an improved control network safety system wherein a system obviates the need of wiring between detector and detecting unit and is placed at the standalone location and connect to the system at the location itself. In one embodiment the system is a video detection system.

Still yet another embodiment of the present invention provides an improved control network safety system wherein a supply unit (23) comprises either alone or in combination the current liming means, polarity control means, voltage control means or any means to control the flow of energy to adapt the flow of energy.

Still another embodiment of the present invention provides an improved control network safety system wherein an output unit (25) comprises of either alone or in combination sensing means (31, 33, 39, 41, 42), output status feeder/generator (35, 38), Noise filter, Multiple Feedback means (34, 40), Under over Control means (47), output limiting means (30), at least one power regulator and optionally polarity control means (29, 36).

Still another embodiment of the present invention provides an improved control network safety system wherein a fail-safe detection comprises of optical

feedback generated. Still another embodiment of the present invention provides an improved control network safety system wherein a feedback is generated after individually validating the parameters of voltage, current, optical, magnetic, digital input and/or output, pressure, and such other factors for correctness as per the defined requirements at the location/unit, logically generating the combined correctness in fail safe manner as the feedback signal/status of high integrity.

Still in another embodiment of the present invention provides an improved control network safety system wherein location (1) is a station or a relay room (1) and/or a locomotive (1) connected through a suitable medium.

Further yet another embodiment of the present invention provides an improved control network safety system wherein at least one more proving is generated for the same output status code and/or at least one more output status code is generated from the same proving code using the same medium or another medium at the same or another location, wherein output status code is of high integrity generated using the improved control system.

Still another embodiment of the present invention provides an improved control network safety system wherein the integrity level of at least one function is SIL- 4 as per Cenelec standards. Yet anothe meet the application, control/interface requirements to meet the functional needs, each

such unit having a functional integrity means as per the requirement.

Further, embodiment of the present invention provides an improved control

network safety system wherein the system can be employed for level crossings at rail

roads or for any facility management or store management and other industrial

applications.

Although, the present invention has been described with reference to the features,

it will be apparent to those skilled in the art that this description is only for an

embodiment and does not limit the scope of the present invention. It will be obvious to

those skilled in the art to make various changes, modifications and alterations to the

invention described herein to the extent that these various changes, modifications and

alterations do not depart from the scope of the present invention, they are intended to be

encompassed therein.

Claims

We Claim:

1. An improved control network safety system comprising electronically controlled network with high level of functional integrity at one or more location, using one or more improved control system/s with segregation of the domains of various functions critical to operation integrity, remote monitoring and control, using the received function information proven or otherwise to further prove the function at the receiving location with the functional identification to the receiving location, and having an intelligent response mechanism to control the needs at the location and/or other location, entire operation being online and/or periodically reciprocated/ hand shaken/monitored, with transporting of one or more proven, monitored function/s through a medium to unit/sub units, the said control/safety system comprising: at least one power source (3,4), connected to at least one supply unit (23) optionally with at least one proving unit (24) on one side of at least one connecting medium (27); at least one output unit (25) connected to at least one driven unit (26) connected to the other side of said at least one connecting medium (28); at least one intelligent standalone networked system with fail safe detection using improved control systems and high level of functional integrity , and optionally such other systems with their independent or similar functionality connected to such standalone safety system to form an improved control network.

2. The improved control network safety system as claimed in claim 1 wherein the intelligent stand-alone network comprises of monitoring system for level crossings at rail roads for remote/distant monitoring of objects with fail safe detection of the incoming as well as departed train from the gate location, monitoring of road users itself using at least one detector (2a) obviating the need for wiring, generating audio and/or visual alarms for road users on detecting the incoming train and aborting the alarms upon detecting the departure of train such that the need of long distance wiring between a detector and its detecting unit is obviated by.

3. The improved control network safety system as claimed in claim 1, wherein the proving unit of the present invention comprises any one of the following either alone or in combination:

Status code generator (35, 38),

- MFM ( multiple feedback means) (34, 40),

Status reader (32)

4. The improved control network safety system as claimed in claim 1, wherein the power source (3, 4) comprises of solar panel, battery or other conventional units.

5. The improved control network safety system as claimed in claim 1, wherein the system obviates the need of wiring between detector and detecting unit and is placed at the standalone location and connect to the system at the location itself.

6. The improved control network safety system as claimed in claim 1, wherein the connecting mediums (27, 28) are selected from one or more mediums wherein the medium comprises of cable, air, radio communication, optical fibre or any conventional medium congenial for the interconnection to meet the functionality with high level of integrity.

7. The improved control network safety system as claimed in claim 1, wherein the supply unit (23) comprises of either alone or in combination the current liming means, polarity control means, voltage control means or any means to control the flow of energy to adapt the flow of energy.

8. The improved control network safety system as claimed in claim 1, wherein the output unit (25) comprises of either alone or in combination sensing means (31, 33, 39, 41, 42), output status feeder/generator (35, 38), Noise filter, Multiple Feedback means (34, 40), Under over Control means (47), output limiting means (30), at least one power regulator and optionally polarity control means (29, 36).

9. The improved control network safety system as claimed in claim 1, wherein the driven unit (26) comprises of LED cluster lamps with or without optical sensing means and either alone or in combination control means, current limiting means, current sensing means or any conventional means.

10. The improved control network safety system as claimed in claim 1, wherein

the monitored function comprises of sensing feedback communication between the units, sub units, intra- sub units at the location and/or between the locations to perform the control functions.

11. The improved control network safety system as claimed in claim 1, wherein the control function comprises of activity to perform in accordance with the application for the end use with or without the conditionality of terms of reference.

12. The improved control network safety system as claimed in claim 1, wherein

the fail-safe detection comprises of optical feedback generated.

13. The improved control network safety system as claimed in claim 12 wherein the feedback is generated after individually validating the parameters of voltage, current, optical, magnetic, digital input and/or output, pressure, and such other factors for correctness as per the defined requirements at the location/unit, logically generating the combined correctness in fail safe

manner as the feedback signal/status of high integrity.

14. The improved control network safety system as claimed in claim 1, wherein said location (1) is a station or a relay room (1) and/or a locomotive (1) connected through a suitable medium.

15. The improved control network safety system as claimed in any of the preceding claims wherein at least one more proving is generated for the same output status code and/or at least one more output status code is generated from the same proving code using the same medium or another medium at the same or another location, wherein output status code is of high integrity generated using the improved control system.

16. The improved control network safety system as claimed in claim 15, wherein the status code is generated by the output unit (25) after it is checked in inherently fail safe manner using under over control means and multiple feedback means in functional priority sequence using optical sensing, voltage sensing, current sensing, digital sensing means, or any conventional means, wherein all functions are ANDed.

17. The improved control network safety system as claimed in the claims 15 or 16, wherein, status code is the LED lamp feedback and proving code is the output generated by the proving unit.

18. The improved control network safety system as claimed in claim 1, wherein, the monitoring function inter unit/subunit and/or intra unit/sub unit is in a separate domain from the one or any other monitoring function.

19. The improved control network safety system as claimed in any of the preceding claims, wherein the integrity level of at least one function is SIL- 4 as per Cenelec standards.

20. The improved control network safety system as claimed in claim 1, wherein the driven unit comprises of video screen, audio alarm, radio transmitter, optical fibre interface or any unit necessary to meet the application, control/interface requirements to meet the functional needs, each such unit having a functional integrity means as per the requirement.

21. The improved control network safety system as claimed in any of the preceding claims wherein the system can be employed for level crossings at rail roads or for any facility management or store management and other industrial applications.