CA1159544A - Transit vehicle brake control apparatus - Google Patents

Abstract

48,243 ABSTRACT OF THE DISCLOSURE
There is disclosed a transit vehicle brake control apparatus and method which determines a safe brake velocity for the vehicle in relation to actual vehicle deceleration and an input command speed for the vehicle from the roadway. The actual speed of the vehicle is compared with the determined safe brake velocity for the control of the vehicle speed.

Description

r' ` ,_ 1 ~8,243 TRANSIT VEHICLE BRAKE CONTROL APPARATUS
BACKGROUND OF THE INVENTION
It is known in the prior art for a train vehicle to be operating along a roadway track divided in the sig-nalling blocks of predetermined lengths with a low imped-ance connection being provided between the track rails at the end of each such signalling block. A signal trans-mitter is operative with one end of each signal block at one of several frequencies and a cooperative signal re-ceiver is coupled with the other end of each signal block for controlling the operation of a train vehicle position-ed within that signal block such as described in U.S.
Patent No. Reissue 27,472 and U.S. Patent No. 3,532,~77 of G. M. Thorne-Booth and in U.S. Patent 3,593,022 of G. M.
Thorne-Booth et al. A published article entitled "Auto-matic Train Control Concepts Are Implemented by Modern Equipment" was published in the September, 1972 Westing-house Engineer at pages 145 to 151 and disclosed this operation of a train vehicle.
The train vehicle carried a signal receiver which sensed a desired input command speed coded signal within the signal block occupied by that vehicle and which input command speed signal was decoded to provide a de-sired speed command signal to the propulsion control apparatus of the vehicle to result in energizing the propulsion motors for regulating the actual speed in accordance with the desired speed of operation along the track and within each signal block. If the actual speed of the vehicle is too low, more propulsion effort is ~..

- ~ , .. . ,:, . -;
. :. : :: ~ . . .

., -5~ ~

2 ~8,2~3 required and if the actwal speed is too high, then braking of the vehicle is re(luired. A propulsion enable signal is provided to the vehicle propulsion and brake system wherl the actual speed of the vehicle is less than the desired speed for that vehicle within a given signal block. When the actual speed of the vehicle is greater than the de-- sired speed, then the propulsion enable signal is not provided and the full service brake will be applied. For the train vehicle to mo~e along the roadway track, it must be out of full service brake condition of operation to move in response to a desired speed signal.
It was known in the prior art to provide brake assurance to validate that the vehicle is properly re-sponding to the decelerating request, as set forth in an ` article published in the Conference Record of the 12th annual meeting of the IEEE Industry Applications Society~
Los Angeles, California, October 1977. Problems which can cause improper response include brake system failure or loss of traction. If brake system failure is the primary concern then the vehicle response can be measured to a limited degree by wheel deceleration. If traction loss is to be detected, then a slip-slide system can measure the loss.
It is known in the prior art to provide a speed control system employing redundancy techniques to achieve a high degree of failsafety and speed control accuracy.
For this purpose, two tachometers producing signals pro-portional of vehicle speed and two substantially identical signal processing channels are provided for redundancy, with one signal channel responding to a desired speed ONES
input signal and the other signal channel responding to a desired speed ZEROS input signal. Each such signal pro-cessing channel produces an output speed error signal equal in magnitude but opposite in polarity from the output speed error signal of the other channel when the system is operating properly. The speed output error signal from each channel is applied to respective level detectors which provide control signals to an alarm and , ' ~

:

5~

3 4~,243 braking apparatus for braking the vehicle or train the vehicles whenever an overspeed condition is sensed. The signal outputs of the two channels are compared and when the~ are not of the same magnitude indicating a failure in one or possibly both of those channels, an alarm is actu-ated again and the vehicle is braked. The speed error signal outputs of the two signal processing channels are summed and the mean value of the resultant summation is used as a speed error signal for controlling the drive motors of the vehicle dwring the time an overspeed condi-tion is not sensed, as described in U.S. Patent 3,749,994 of T. C. Matty.
It was known in the prior art to use an accel-erometer carried by a transit vehicle in the form of a pendulum which was operative to release the brake effort of the vehicle if too much braking of the vehicle resulted in too rapid stopping of the vehicle for the comfort of the passengers. In this regard, a switch was connected with the pendulum and was opened to release the brakes when the pendulum swung too far from the center position.
A general description of microprocessors and the related peripheral devices suitable for the practice of the present invention is provided in the Intel 8080 Micro-computer Systems Users Manual currently available from Intel Corp., Santa Clara, California 95051.
SUMMARY OF THE INVENTION
An improved transit vehicle brake control pro-vides an accurate and safe brake assurance through the determination of a maximum safe brake velocity or deceler-ation profile, based on vehicle travel time and in re-sponse to a change in the input command or desired speed received from the roadway track. A speed regulation of the vehicle movement is provided in relation to the previ-ous input command speed until a predetermined difference is detected between the generated maximum safe velocity and the vehicle actual speed, when the vehicle speed regulation then responds to the generated maximum safe velocity or speed. When the new input command speed is .;,, , :

.

~l 48,243 equal to or greater than the generated maximum safe veloc-ity, the new command speed becomes the speed reference for the vehicle speed regulation~
BRIEF DESCRIPTION OF THE DRAWINGS
Figure 1 is a schematic showing of a prior art transit vehicle operative with a roadway track including plurality of signal blocks;
Fig. 2 is a schematic showing of a prior art transit vehicle speed and brake control system;
Fig. 3 is a schematic showing of a prior art vehicle speed and brake control system;
Fig. 4 is a general showing of the speed and brake control of the present invention;
Fig. 5 is a schematic showing of a portion of the speed and brake control of the present invention;
Fig. 6 is a curve plot illustrating the opera-tion of the present speed and brake control; and Fig. 7 is a curve plot illustrating the modifi-cation of the determined VMAX relationship in response to a failure of the transit vehicle to respond adequately to a previously determined VMAX parameter.
DES~RIPTION OF THE P~EFERRED EMBODIMENT
In Fig. 1, there is shown a prior art roadway track arrangement including a transit vehicle 10 operative with tracks 12 and 14 in a direction indicated by the arrow. The train vehicle 10 includes a speed signal receiving antenna 16 operative with the coded desired or command speed signal provided to signal block N as defined by the low impedance member 18 and the low impedance member 20 connected between the rails 12 and 14 of the roadway track. The track is shown divided into signal blocks N-l, N, N~l and so forth, with each signal block being energized by a command speed signal. The signal block N receives a command speed signal from transmitter 22 which is cooperative with a receiver 24 for determina-tion by wayside equipment of the occwpancy of the signal block N by the train vehicle 10, for the pwrpose of con~
trolling additional train vehicles moving along the road-:

:., , ~
.
' ~ 48,~43 way track and following behind the train vehicle 10. The ~ommalld speed signal supplied to the signal block N by the transmitter 22 represents the maximum desired speed for the safe passage of the train vehicle 10 through the par~icular signal block N.
In Fig. 2, there is shown a prior ar-t vehicle brake control system including an antenna 16 for receiving the command speed signal from the roadway track, which signal is supplied to a receiver and decoder 40 for pro-viding a command speed signal 42 which then goes to anoverspeed control system 44 for determining the provision of a propulsion enable signal 46 to the propulsion control system 48 of the transit vehicle. The desired or command speed signal 42 also goes to a speed regulator system 50 for comparison with an actual vehicle speed signal 51 from a tachometer 52 ~or determining a vehicle speed error signal 53 to the P signal generator 54 to establish the tractive effort request P signal 55 which is supplied to the propulsion control system 48 for determining the operation of the vehicle motor 56 and thereby the opera-ting speed of the transit vehicle along the roadway track.
The output signal 46 from the overspeed control system 44 enables the propulsion control system 48 to provide the P
signal 55 and to energize the vehicle motor 56 for a safe speed con~rol of the transit vehicle. When the actual speed of the vehicle as indicated by the actual speed signal 58 is compared by the overspeed control system 44 with the command speed signal 42, if the actual speed is less than the command speed the propùlsion enable signal

4~ is provided. On the other hand, when the actual speed 58 is greater than the command speed 42, the propulsion enable signal 46 is no~ provided and the propulsion con-trol system 48 provides for the vehicle brakes to operate.
In Fig. 3, there i8 a schematic showing o~ a prior art transit vehicle speed and brake control system in accordance with the disclosure of above-referenced U.S.
Patent No. 3,749,994, and includin~ a first receiver and decoder 60 operative with the antenna 16 for providing a ~ . .

6 ~ 48,2~3 ONES command speed signal 61 as an inpu~ to the speed error apparatus 62 for comparison with an actual speed signal 63 input to the speed error apparatus 62 received from the tachometer 64 operative with the wheels of the vehicle. A resulting speed error signal 65 is applied as an input to a ]evel detector 66, and if the magnitude of the speed error signal is above a predetermined level determined by setpoint input 68, an output signal 67 is provided to the balance circuit 70. A second receiver and decoder 72 is operative with the antenna 16 for providing a ZEROS con~and speed signal 73 to the speed error appar-atus 74 in accordance with the ZEROS information of the command speed information in the roadway track as sensed by the antenna 16. The speed error apparatus 74 receives an actual speed signal 75 from a tachometer 76 for compar-ison with the command speed signal 73 from the receiver and decoder 72 to provide a speed error or difference signal 77 to a level detector 78. If the speed error signal 77 has an amplitude greater than the setpoint provided by the reference input 80, the balance circuit 70 receives an output 79 from the level detector 78. If the output 67 from the level detector 66 is substantially the same as the output 79 from the level detector 78, the balance circuit 70 provides an enable signal 82 to enable the operation of the P signal generator 84. The command speed signal 73 from the receiver and decoder 72 goes to a speed regulator 86 which receives an actual vehicle speed signal 87 from the tachometer 76 to provide a speed error signal 88 to the P signal generator 84 for determining the tractive effort request P signal and the operation of the propulsion and brake control 90 and in turn the operation of the vehicle motor 92 for providing the desired tractive effort of the motor 92 to move or brake the vehicle in relation to the roadway track.
In Fig. 4, there is shown the speed and brake control system of the present invention. The antenna 16 functions with the roadway track for receiving the coded input speed command information. The receiver 100 re-~ a5 ~g,243 ceives the ONES coded speed information and provides a col~mand speed signal 102. The receiver and decoder 104 receives the ZE~OS coded speed information and owtputs a command speed signal 106. The maximum safe velocity determination apparatus 108 responds to the ONES command speed signal 102 and responds to the vehicle acceleration signal 109 from a vehicle accelerometer 110 to provide a maximum safe brake velocity or speed signal 112. ~ maxi-mum safe velocity determination apparatus 114 responds to the ZEROS command desired speed signal 106 and to the vehicle acceleration signal 115 from a vehicle accelerom-eter 116 to provide a maximum safe brake velocity or speed si~nal 118. The speed error or difference dcvice 122 determines the difference between the vehicle actual speed signal 119 from the tachometer 120 and the maximum safe velocity signal 112 to provide a speed difference signal 124. The speed error or difference device 126 determines the difference between the maximum safe velocity signal 118 and the vehicle actual speed signal 127 from tach-ometer 128 for providing a speed difference signal 130.
The speed difference signal 124 from the speed difference device 122 is supplied to a level detector 132 for deter-mining if the speed difference signal 124 is above a minimum reference setpoint signal provided on input 134, and if it is above that minimum reference signal, an output signal 135 is supplied to a balance detector 136.
The level detector 138 responds to the speed difference signal 130 and compares it with a minimum reference set-point signal on input 140, and if the speed difference is greater than the minimum reference from input 140 an output 139 is provided to the balance detector 136. If the output 135 from level detector 132 and the output 139 from level detector 138 are substantially the same and in balance, an enable signal 142 is provided to the P signal generator 144.
A speed regulator 146 is responsive to the input command speed 106 and compares it with the actual vehicle speed 127 from tachometer 128 for providing a speed error ..

, , . ~ :

8 48,243 signal 148 to the P signal generator 144 for establishing the tractive effort request P signal 145 to the propulsion and brake system 150 that is operative in conjunction with the vehicle motor 152 or the vehicle brake 154 to deter-mine the vehicle operation as well known to persons skill-ed in this art.
A performance modification 149 can be provided if desired to set the vehicle speed as some predetermined percentage of the command speed 106 from the receiver and ~ecoder 104. The performance modification 149 modifies the command speed signal 106 and causes the vehicle through operation of the speed regulator 146 to runfhat some percentage less or for an absolute number less that is desired for the actual vehicle operation, for example, due to lower track adhesion or some known vehicle schedul-ing relationship with the other transit vehicles on the system and the like.
The speed difference signal 124 from the speed difference device 122 is supplièd to a safety margin check 156 which is operative with the logic for signal and brake control 158 to provide output signal 159 to determine the operation of the propulsion and brake system 150 as will be later explained. The speed difference signal 130 from the speed difference device 126 is provided to the safety margin check 160 and determines the operation of the logic for signal and brake control 158 in relation to providing the output signal 159 to the propulsion and brake system 150.
The operation of the maximum safe velocity determination apparatus 108 and the speed difference device 122 in relation to the ONES coded input speed command can be provided by a first microprocessor, such as the Intel 8080, including a particular vehicle system application control program determined by the program set forth in Appendix A. The operation of the maximum safe velocity determination apparatus 114 and the speed differ-ence device 126 in relation to the ZEROS coded input speed command can be provided by a second microprocessor, such .

,: ;, ~ , .

5~
~ 48,243 as the Intel 8080, including a particular vehicle system application control program determined by the program set forth in Appendix ~. Thusly, the maximum sa~e velocity Vmax for the present time ~t) is determined when the actual speed is greater than the input command speed and in relation to the maximum safe velocity Vmax for the previous time (-t-l) minus the ratio of the actual speed Vt to the previous maximum safe velocity ~max times (R-I+A) times the interval ~t between the present determination at time t and the previous determination at time (t-l).
The speed regulator 146 shown at the bottom of Fig. 4 allows the vehicle to run at the actual speed 306 such as shown in Fig. 6 and to approach within a predeter-mined speed difference SD of the maximum velocity profile 314.
For as long as the command speed is greater than the vehicle actual speed, the switch 147 shown in Fig. 4 is operative to permit the vehicle to run at the command speed, as shown in Figure 4 and as determined by the performance modification 149 in response to a reference input 151 which may be a manual input from the operator of the transit vehicle or may be from the automatic train operation control system in response to the command speed 300 from the track circuits in the particular signal block in which the transit vehicle is located. When the command speed changes such that the actual speed is greater than the command speed, the maximum safe brake velocity 118 is determined. When the actual vehicle speed approaches within a predetermined difference less than the maximum safe velocity in accordance with the profile 314 and as sensed by the comparator 153 operative with the flip-flop memory 157, which compare the vehicle actual speed 127 from the tachometer 128 with the maximum safe velocity 118, then the coil 155 is energized to raise the switch member 147 such that the determined maximum safe velocity 118 is applied as the reference input to the speed regula-tor 146 for causing the vehicle to decelerate in accord-ance with the maximum safe velocity profile 314. A speed ~ ..

' ' ' ~ ; , ~L~ 5~ 8,2~3 offseL 145 in accordance with the speed clif~erence 50 i5 provided to the speed regulator 14~ for cont.rolli.ng the act~ual speed Lo maintain the desired speed dif~erence 50.
Assume that the command speed 300 shown in Fig. 6, which corresponds to the output 106 of the receiver and decoder 104, is changed by the performance modification 149 and is applied through the switch 147 as the command speed shown by curve 306 to the speed regulator 146, the vehicle will continue to travel at the actual speed 306 until distance A is reached. At distance A, a downward input command speed change to curve 302 is provided to reduce the ve-hicle speed in relation to the known track system braking requirements. The maximum safe velocity determination apparatus 114 begins to determine the maximum safe veloc-ity signal 118. The comparator scn3c3 153 senses the actual speed 127 and the maximum safe velocity 118 to permit the vehicle to continue to run at speed 306 and as shown by curve extension 312 until the vehicle actual speed approaches the maximum safe velocity profile 314 by a predetermined difference speed SD, at which time theswitch 147 is operated by the memory 157 and the deter-mined maximum safe velocity 118 becomes the control refer-ence for the speed regulator 146 and the vehicle. When the actual speed is again below the command speed, the maximum safe velocity 118 is no longer determined and the switch 147 drops such that the command speed 106 becomes the reference to the speed regulator 146.
The comparator 153 senses when the actual speed is within a predetermined difference SD below the maximum safe brake velocity, and at that time provides an output to the flip-1Op memory 157 to energize the winding 155 and pick up the relay contact 147 to connect the maximum safe velocity signal 118 to be the reference input for the speed regulator 148. The comparator 159 senses when the actual speed is below the command speed and provides a reset output to the flip-flop memory 157 to deenergize the winding 155 and drop the contact 147 to the position shown in Figure 4. The comparator 153 does not provide an ~ 4 ~ ~8,243 output until after the actual spee~ is again above the command speed as sensed by the maximum saEe velocity determination apparatus 114 and the maximum safe brake velocity is again being determined, and in addition the actual speed is within a predetermined distance SD below the maximum safe brake velocity.
In Fig. 5, there is provided a schematic showing of the safety margin check 156 and the safety margin check 160 in relation to the logic for signal and brake control 158 as generally illustrated in Fig. 4. The maximum safe velocity signal 112 is provided to the speed difference device 122. The actual vehicle speed 119 is provided from the tachometer 120 to the speed difference device 122 such that the output speed difference signal 124 is then pro-vided to one input of each of a first comparator 180, a second comparator 182, a third comparator 184, and a fourth comparator 186 within the safety margin check apparatus 156. The first comparator 180 has a first level setpoint 188, such as 6 mph for e~ample, and is operative to provide a signal 190 when the speed difference signal 124 is greater than the setpoint reference 188, which output 190 goes to one input of an AND logic device 192 for energizing the winding 194 of a relay including a contact 198 which is normally open and falls by gravity when there is no output signal from the AND device 192.
When there is an output signal from the AND device 192, the coil 194 holds up the contact 198 such that a P signal enable 142 is provided and the traction effort re~uest P
signal 145 is supplied to provide a first brake effort by the propulsion and brake control system 150. When the speed difference signal 124 that is provided to the second comparator 182 is greater than the setpoint reference speed 210 such as 4 mph ~or example, an output 212 is provided to one input of AND device 214 for energizing the winding 216 operative with a contact member 218 for pro-viding a second brake effort by the mechanical brake enable signal 217 to the propulsion and brake control 150.
When the speed difference signal 124 applied to the third :

:
.

~y ~
12 48,243 comparator 184 is greater than the setpoint reference 220, such as 2 mph for example, an output signal 222 is pro-vided which energizes one input of AND device 224 for energizing the winding 226 operative with a contact member 228 for providing a third brake effort by the supplemental brake enable signal 227 to the propulsion and brake con-trol system 150. When the speed difference signal 124 that is applied to one inp~t of the fourth comparator 186 is greater than the setpoint reference signal 230, such as 0 mph for example, an output signal 232 is provided for energizing one input of AND device 234 causing the winding 236 to raise the contact member 238 to provide a fourth brake effort by the emergency brake enable signal 237 to the propulsion and brake control system 150.
The maximum safe velocity signal 118 that is supplied to the speed difference device 126 is compared with the actual vehicle speed 127 from the tachometer 128 to provide a speed difference signal 130 which is supplied to one input of each of a first comparator 250, a second comparator 252, a third comparator 254, and a fourth comparator 256. When the speed difference signal 130 is greater than a first level reference signal 258, such as 6 mph, the first comparator 250 provides an output signal 260 for energizing the second input of AND device 192 to cause the winding 194 to lift the contact member 198 and supply the P signal enable 142 to the P signal generator 144 and the propulsion and brake control system 150. When the speed difference signal 130 applied to the second comparator 252 is greater than a second reference signal 262, such as 4 mph, an output signal 264 for energizing a second input of AND device 214 for causing the winding 21 to hold the contact member 218 to provide the mechanical brake enable signal 217 to the propulsion and brake con-trol system 150. When the speed difference signal 130 applied to the third comparator 254 is greater than the third level reference signal 266, such as 2 mph, an output 268 is provided to the AND device 224 for causing the contact member 228 to provide the supplemental brake , ~ A~ L~ ~
13 48,243 enable signal 227 to the propulsion and brake system 150.
When the speed difference signal 130 applied to the fourth comparator 256 is greater than the fourth level reference signal 270, such as 0 mph, an output 272 is provided to AND device 234 for causing contact member 238 to be raised and to provide the emergency brake enable signal 237 to the propulsion and brake control system 150.
In Fig. 6, there is shown a curve plot illu-strating the operation of the present speed and brake control system. The command speed changes are shown to include the input command speed change from a value 300 at distance A to a command speed 302, which then changes at distance B to a command speed 304, and which changes at distance C to a command speed of 0. If the actual speed of the vehicle is shown by the dotted line 306, at vehicle ; distance location A the prior art speed control system as shown in Fig. 3 would respond to the new command speed 302 to follow the path 308 down to the speed 302 and perhaps lower than the speed 302 to some predetermined level 310 when determined by requested performance modifications and the like. Instead, it is desired in accordance with the present invention that the actual speed of the vehicle follow the path 312 in relation to the determined maximum ; safe velocity of the vehicle as shown by the curve 314.
When a predetermined speed difference SD, which for the example of ~igure 5 can be 6 MPH, occurs between the maximum safe velocity profile 314 and the actual speed of the vehicle 312, then the actual speed is controlled to follow the path 316 maintaining this predetermined speed difference SD until the new command speed 302 is reached.
Upon the next downward input command speed change at vehicle distance location B to the new command speed 30~, if the vehicle actual speed is at 310, the vehicle would continue at this same actual speed of 310 until a prede-termined speed difference S~ is provided in relation to the determined maximum safe velocity 315 at which time the vehicle would then follow the curve 317 while maintaining this speed difference until the next downward speed change . .

. . . .
.~

1~ 48,243 at distance location C. The actual speed of the vehicle at distance location C would then come down to a zero speed at approximately the location of the desired stop-ping point D.
In Fig. 7, the actual speed of the vehicle is shown by curve 312 in relation to the determined maximum safe velocity 314. It is desired that a predetermined speed difference SD1 be maintained between the maximum safe velocity 314 and the vehicle actual speed 316. If for some reason the brake operation of the vehicle should not be satisfactory due to the normal track condition adhesion being reduced or the like, and the vehicle actual speed would leave the desired curve 316 to an actual velocity curve 324 where a reduced speed difference SD2 is provided, then the maximum safe velocity de~ermination apparatus 108 and 114 as shown in Fig. 4 would each modify the determined maximum safe velocity in relation to the new conditions of vehicle operation, and establish the modified maximum safe velocity curve 32~ instead of the otherwise previous maximum safe velocity curve 322. This modified maximum safe velocity curve 320 would then in-crease the brake operation of the vehicle in an effort to retard the velocity of the vehicle and maintain this speed difference SD1. The vehicle would then follow a velocity path 326 which provided a speed difference SD3, similar to the desired speed difference SDl, as the vehicle actual speed decreased down to the next input command speed level 302. The desired speed difference SD between the vehicle actual velocity and the determined maximum safe velocity is continuously determined, and as the actual speed ap-proaches the maximum safe velocity profile, different kinds of successively increasing braking action can be taken. As this speed difference gets smaller and smaller, the succeeding operations take place such as, for example, initially the application of a brake operative with the vehicle wheels is provided, and if the actual speed of the vehicle does not thereafter maintain a desired predeter-mined speed difference in relation to the maximum velocity 48,2~3 profile, then an additional supplemental braking effort such as putting sand on the roadway track can be provided, and if this does not adequately reduce the actual velocity of the vehicle as desired, then an additional braking effort such as emergency spring applied track brakes that press wooden shoes against the vehicle tracks can be provided. This is illustrated in relation to Fig. 5 where the AND gate 192 provides an output signal 142 to the P
signal generator 144 to enable the provision o~ the P
signal to the propulsion and brake system such that the output of the AND gate 192 provides the P signal enable 142; and when the speed difference output as determined by either of the speed difference device 122 or the speed difference device 126 indicates that the determined speed difference is less than 6 mph, the AND gate 192 does not provide an output and the contact 198 drops by gravity to no longer enable the P signal generator 144 to provide the tractive effort determining P signal to the propulsion and brake system 150. In a similar manner, when the speed difference output of either of the speed difference de-vices 122 or 126 is less than 4 mph, the AND gate 214 no longer provides an output signal such that the mechanical brake enable signal 217 no longer is provided and contact 218 drops to no longer hold off the mechanical brakes and this results in the mechanical brakes being energized in an effort to stop the transit vehicle. When this speed difference output is less than 2 mph, the AND gate 224 no longer provides an output such that the supplemental brake enable 227 is then not provided to the propulsion and 3 brake system 150 to result in an additional brake effort such as providing sand on the vehicle tracks or the like.
And when this speed difference output is less than 0 mph, the AND gate 234 does not provi.de an output signal and the emergency brake enable 237 is then not provided to the propulsion and brake s~stem 150 such that the additional braking effort provided by emergency spring track brakes or the like is provided to reduce the velocity of the transit vehicle. The logic for signal and brake control , ~, .

, 16 48,2~3 158 as shown in Fig. 4 and Fig. 5 permits the vehicle to continue at less than the determined maximum safe velocity 314 shown in ~ig. 6 as long as the ac~ual speed is less than this maximum safe velocity, and this allows addition-al distance for the vehicle to travel as shown by curve312 in Figure 6.
As shown in Fig. 6, the track system determined allowed safe input command speed is shown by the curve steps 300, 302 and 304, and in practice is determined by the train vehicle system designers going backwards from a known desired stopping point D in relation to the known safe braking characteristics of the transit vehicles and the normal roadway ~rack conditions including vehicle brake operation and the like. The downward command speed changes between the command speed 30~ and the command speed 302 and the command speed 302 and command speed 304 which occur respectively at indicated distances A, B and C
are provided in relation to this system determined allowed safe speed. It was the prior art practice for the vehicle speed to respond to the input command speed change at distance A in accordance with the speed curve 308 until reaching the command speed 302 or if it is desired that the actual speed be a predetermined speed difference below the command speed, then the actual vehicle speed would proceed to the level such as shown at 310. This resulted in the vehicle travelling and stopping short of the de-sired stopping position D.
The present invention increases the flow of vehicles along a given roadway by determining the maximum safe velocity at a predetermined time interval such as 18 times a second with each such determination using the previous or old solution of maximum safe velocity as the input to the next such determination. Thusly, there is a determination of what the maximum safe velocity of vehicle travel is at any distance point along the roadway track, and then the present control operation establishes the vehicle actual speed operation to stay below the deter-mined maximum safe velocity, as shown by profile 314 in , : . , .

5~
17 48,243 Fig. 6. In this way, a safe perormance of the vehicle brake operation is established. In a~dition, there is a measurement of brake quality to establish if the brake operation of the vehicle is actually performing as it was designed and expected to perform, such that as the vehicle actual speed starts approaching the determined maximum safe velocity in accordance with the profile 314, the maximum safe velocity devices 108 and 114 determine a new maximum safe velocity for each determination time interval knowing changes in track grade and vehicle operation that affect the safe velocity determination in response to an accelerometer carried by the vehicle, and a resulting control of the vehicle brake operation is provided in relation to this determined maximum safe velocity.
When the position of the vehicle is at location E along the roadway track as shown in Fig. 6, the maximum safe velocity is not being determined by the maximum safe velocity devices 108 and 114, since there is no need for this determination at this distance location of the ve-hicle. When a downward input command ~peed change occurs to below the actual speed as shown at location A, then the determination of maximum safe velocity as shown by curve 314 begins, in response to the actual vehicle speed being above the new system safe allowed input command speed 302.
On the other hand should the vehicle actual speed, when the downward speed change is sensed at location A, be in fact below the new safe command speed 302, then the deter-mination of the maximum safe velocity by the apparatus 108 and 114 will still not begin because there is no safety requirement to know the maximum safe velocity in accord-ance with the profile 314 and 315, since the maximum safe velocity is known to be above the actual vehicle speed.
It should be noted that the determined maximum safe velocity 314 is the safe brake speed or deceleration profile for a given vehicle, whereas the input command speed ~ is determined by the physical roadway track system and is the determined ma~imum allowed safe system speed in relation to required vehicle operational safety .

, .

18 ~ ig5~ 8,243 considerations. The maximum safe velocity determination by apparatus 108 and 11~ in Fig. 4 is responsi~e ~o the maximum allowed input command speed determined by the roadway track system for the purpose of sensing a downward speed change such as occurs at distance locations A, B and C in Fig. 6, and in addition responds to the actwal ve-hicle speed and to the output of an accelerometer carried by the vehicle. The maximum safe velocity de-termination is for each of predetermined time intervals ~t which computes the VMAXl, VMAX2, VMAX3, and so forth for each of successive time intervals, and once the actual speed is less than or equal to ~he input command speed, then the Vmax determination is stopped as it is no longer required.
As the comparator 153 shown in Fig. 4 senses that the actual speed is no longer approachin~ the determined maximum safe brake velocity, then the switch 147 is oper-ated such that the speed regulator 146 receives as its speed reference input the command speed 106 which is compared to the actual vehicle velocity 127 for the pur-pose of determining the speed error 148 for establishingthe P signal from the P signal generator 144.
The prior art control apparatus shown in Figs. 2 and 3 utilized the input command speed 42 for establishing an overspeed condition, whereas the control apparatus of the present invention as shown in Fig. 4 uses the maximum safe velocity 112 and 118 for the purpose of overspeed control.
In the operation of the prior art apparatus as shGwn in Figs. 2 and 3, the maximum safe speed was in accordance with the input command speed 300 shown in Fig.

6 and at distance A when there was a speed change, the input command speed changed to 302 as a step function. In this operation, the maximum vehicle velocity was the command speed until a down step change and was then pro-jected a].ong a predetermined profile 308 until the nextsafe command velocity 302 was reached. In this regard, the maximum safe velocity was differen~ than command speed only during a transition to a new safe command speed 302.
: `^
:`:

,.

:

s~
19 48,243 In theory, it would be desirable to control the vehicle speed from the location A to the location B as shown in Fig. 6 in relation to the movement distance along the roadway track. ~owever, the transit vehicle does not know its actual location in relation to this distance, therefore) in accordance with the present invention, the maximum safe velocity VMAX is determined in relation to time and the transit vehicle is controlled by a speed difference error established in relation to this deter-lo mined maximum safe velocity as an input reference. The speed regulator 146 controls the P signal generator 144, and the maximum safe velocity VMAX 118 provides a safe vehicle speed control on a continuous basis in relation to time and the movement of the vehicle along the roadway track, after a predetermined difference SD shown in Figure 6 is sensed by the comparator 153 between the maximum safe velocity and the vehicle actual velocity.
In the operation of the control apparatus shown in Fig. 4 when a command speed change has occurred such as going from command speed 300 to a lower command speed 302, the maximum safe velocity is determined when the actual vehicle speed is above the new command speed and the transit vehicle is permitted to safely operate at an actual speed above the lower command speed 302 until a predetermined speed difference SD occurs in relation to the determined maximum safe velocity profile 314. And if the command speed 302 should continue the same indefin-itely, then when the input command speed is equal to or greater than the actual velocity~ the control operation returns to the command speed 302 being the`reference input to the speed regulator 146. ~f the performance modifica-tion 149 is providing some percentage reduction of the command speed 106, such as 70% of that command speed, when the command speed 302 becomes the new input reference, the performance modification 149 will apply 70% of this to the speed regulator 146 as the regulation setpoint for deter-mining the P signal by the P signal generator 144. Thus-ly, the determ:ination o~ the maximum safe velocity VMAX

, ,, : .

:
` !' ..
`~` ', :

~s~
48,2~3 provides an overspeed safety umbrella over the normal speed regulating system.
A measurement is made of the ~uality of the braking operation of the transit vehicle by looking at various level detection points when the vehicle is trying to follow the maximum safe velocity profile 314 such as shown in Fig. 7. The maximum safe velocity profile 314 is known to be the safe vehicle speed versus distance control profile, and if the vehicle actual speed comes too close to that profile 314 for any reason, this provides an indication of braking trouble such as an undesired slip slide condition or some other braking problem, to indicate that the vehicle brakes are letting the vehicle actual speed get too close to the maximum safe velocity profile 314. If the transit vehicle can in fact supply the re-quired brake effort to keep the vehicle speed a predeter-mined difference SD under the maximum safe velocity pro-file 314, then the vehicle speed 316 will follow the profile 314 down to the new command speed 302 while using the maximum safe velocity or speed VMAX as the control reference, and upon reaching the new command speed 302, the new input command speed 302 will become the control reference. However, in relation to Fig. 7, if at some distance location F, a slip slide or other loss of brake system activity occurs so the vehicle slows down at a slower rate, the VMAX determination will sense this and cause the VMAX profile to change with a greater slope as shown by curve portion 320 and request a faster stop with more deceleration for the vehicle. This occurs in rela-tion to time and the VMAX determination establishes thatthe vehicle will not stop at the desired distance so the VMAX reference changes to request a greater brake effort to increase the stopping effort of the vehicle by provid-ing a different slope for the maximum safe velocity pro-file 320. If the vehicle responds to follow this newslope VMAX curve 320, allowing the predetermined differ-` ence, then the operation continues to the stopping pointon the new input command speed curve 302 at which time the ~1 ~g ~ ~ ~
21 48,243 ~ctual speed becomes less than ~he command speed and ~henew command speed becomes the control reference to the speed regulator. However, if the vehicle does not respond to the new slope VMAX curve 320, then the VMAX curve slope repeatedly increases even more than before to additionally increase the brake effort to stop the vehicle at the desired location. If a bad adhesion condition is present, the two curves can cross and in addition to normal brakes, the emergency brake system also goes on in an effort to stop the vehicle at a safe stopping location. Thusly~
there is provided a monitor o the brake operation by continuing to monitor and adjust to what is happening in normal brake system operation. The VMAX curve 31~ is determined continuously as an iterative determination in relation to present time and present vehicle operation, and is successively modified as may be required in re-sponse to the vehicle operation responding or not respond-ing to succeeding modifications of the VMAX curve.
The equation which describes the general physi-cal model for a vehicle running at same speed on a leveltrack, and for reducing the speed to some lower speed arbitrarily is:
V = Vi - Jadt (1) where a = F/M (2) and where V = ~peed of Vehicle Vi = Initial Vehicle Speed a = Acceleration Rate t = Time F = Force applied M = Mass of system If only a given amount of force is available then "a" will be grade sensitive, and the equation becomes, V = Vi - ~(a - g)dt (3) ; Where g = grade and gravity effects.
The present invention uses the difference be-tween wheel deceleration A, and the inertial measured deceleration I to compute the grade effects on the vehicle which causes deviations from the required system design :
.~

, , ~s~s~
22 ~8,243 decelera~ion rate R. In addition a correction term Vi/Vma~, where Vi is the initial velocity and Vmax is maximum allowed velocity incorporated to accommodate excess safety distance.
These terms are combined into an equation to determine the present maximum velocity allowed a-t time t if the velocity allowed at the previous time t-l is known and the vehicle speed at time t is known.

V @t = V @(t-l) t 1 x (R-I + A) x (~T) (4) max max Vmax @(t- ) Where:
Vmax @t = max. velocity allowed @ time t Vmax @ (t-l) = max. velocity allowed @ time t-l Vt - actual vehicle speed at t R = system designed required decelera-tion rate I = vehicle deceleration rate measured by accelerometer in relation to inertial space A = vehicle deceleration rate measured by wheels in relation to track Qt = time interval between (t) and (t-l) If this determination is performed for every predetemined time interval ~t then a continuous updating is performed which takes into account running at lower than maximum speeds and the grade changes when they occur.
DESCRIPTION OF INSTRUCTION PROGRAM LISTING
-In Appendix A there is included an instruction program listing that has been prepared to provide the desired brake control of a transit vehicle in accordance with the here-disclosed control system and method. The instruction program listing is written in the basic lang-uage and is a general program establishing the functional operation of the present invention. For a specific train vehicle control application, a particular application . , :`

- , i : ~ , , ~,, . .
, ~ .
: ' ~3 ~8,243 program could be readily written in the assembly language of a suitable microprocessor, such as the Intel 8080 microprocessor computer system. Many of these computer systems have already been supplied to customers, including customer instruction books and descriptive documentation.
A person skilled in this art could apply the attached program in relation to specific vehicles to be controlled for a particular vehicle track system. The above basic control equation (4) corresponds with the program equation at line 160 of the program listing.

.

'\ :
A~l I~T _ .
PJ~IUT~E~R.~ltE A~S11F~AN~'~ WI TH RANDntl Gl?AnE~ ~T ~A~ t~ D~ST WI rH r~LAY R"`
2 I.F~
LET T_ .f)l 5 t.ET Q- 2

7 pl~p9Ta2/8/77~9:r)fl AM"
2~ LET Q~
2 I P~ JT
22 P7~ 'T"tINITlAL. ) STnP MAY TI'1~ AP'(;E qT~
23 PRIlJTn(AGC GRn~rt~L) nI~T nI~t GRAnE DI~T~
~.5 L~:T ~32- .f~6 3 fl LF~T G2- C 2- . rJ2 31 LET G-~2 3 2 LET I t.`~
33 PRIPJT -I;TA~);G
3~ PRI NT
35 LE:T V~.-31.7~
4n LET V1-V2-~J2-5 41 I.EJ ~ ;2 5r~ LET V: 27~, 7~
6 t LE~ R - T I -S -S I ^ ~-7~ LE:T L- ~ R N~ ( r~ ) ) ~n l.F~T ~1:t.~I~*R1~ n)~-.t~4 9~J 1.El' L4-L~t27.7~2)-2*L*(1.2+1r~G2))/t~*~1.?~ 1~)*G1 ~1 1.ET V9_~5*tl.tJ14t2)fV2 92 LET L7-~7+(2*V~((t1.r)14)t3)~6)+V~*10t~14+lo2/~i+~
93 1..ET L4-L4~L7 9 4 I F l.~L 4 T~!E~
~5 LET 1-L.4 9~ REM
lrJf) t.,n Tn sr~tJ
LE~ I-Q
12-1 LET A:I~tl~'l*~) 3r3 G~TO l~f1 4n LET I-l.?.
5n LET A~ l*G) 155 IF Tl~.~ THEN l~r~
156 LET R-R~I .2~1~fJ
157 IF R~ T~EN 1 15~ I.ET R-1.2 16~ LFT V-V-tR-I~A)*~VI~o~*T~V ~r ~s~c Qu~
17r~ L~T S-~+V*T
18r~ LET T1-TI~T
~gr~ L~T Vl-VI-A*T
2~Jt)t.ET S1-~1~V1*T
n~ G~ T~ 7~J~J
2IfJ IF V1~1 TH~N 215 211 IF v~r1 THE~! 2l5 21 2 ~;() Tf~
215 LET R-I~TtV2) ~16 L~T ~ T~
217 LET D-INT(TI~
21~LET E~I~tT~14~
219 LET F-I~T(I.) 22r~ T G3-(I~T~Gl*~ fJr)))~r)r)r)r1 3r)-) PRINT TA~I4~;~;TAB(2~1~ C$T~2fi):E:TAR(33) ~:T~E(43>:~3;TAB~7~:E
3lr~ ~nTn 4nr, .. . .
;

J ~ 4 8 24 3 ~-2 3~ 7t~ r 4'~'3 I F V~6 T1iEN 4 ~ I r) I ~ G~ r~3 ~ ;3'~
4 ~'~ I F 6~ ~ - D g T~ t~
43n E~l~
snn IF VI~V-I~ T~ 51 51f1 IF ~ T~ÆN 57rJ
5 3r~ LET I ~ / l nr) 54') IF I~-l .2 TH~! 5h 55n LET 1--1.2 56n G~l Tn 64r, 57f) ~LET l ~ .?/~
s~rl IF l~r~ THEN 6'J'I
59'1 LET ~ :r~
~nr, an Tn 64n 61~ LET l-I ~1.4/1 62~1 IF Icl .4 THEN fi4 63t) LET I - I . 4 64') LET I^I ~ t If~*~ V) ) 641 IF I>-l .4 T~EN644 642 LET I - -1. 4 643 Bf) TO 6~r) ~44 I F I ' 1. 4 T~EN 65~J
645 LET I-1.4 646 ~n Tt 65'~
6 5 f) ~.t) TO I 5 ~
'7f~fJ IF SI~L TH~N ?ln 7rJI LET M-ABS((GI-t7`2)~
7')2 IF ABS~GI-G)~*M T~IEN 21~J
7~3 I F G~7 I THE~I 7flS
7"4 LET a~G~
7'Jli I F G<G I THE~ 21 7f~6 LET G-G-M .
7r17 GO TO ?.1 71'1 G~TO 21 *

_2~S -~ ~ ~95,~4 Ll ~, 2 11 ~

~Ai~E A~U1~C~ ~ltITl~ RAU'ntlM ~RAr)~ AT l?AN~(tM nI~T WIf1~ tl~LAY R
2~Rt77,~:~1rl AM
t E NI TI AL )Sr~)P 1`1~Y T I !~1~ CH A P~G~ AT
(~cc GRn V~l.7 ~ T r)IST GRPrlE ~I~T
~1 40~^~J2 ?.6 335 422 24 20E~-r~4 42 21 263 337 i9 3.~RE-rl2 119 16 263 3~3 2 l 1 . 66E~rl2 ~n2 11 271 32fJ ?3 2~37E~12 3f1 6 275 316 27 -4~7E-r13 137 244 271 2~ 20rJ5E-~2 13 -I ~,.E-f)2 26 3S6 426 29 3 . 9g~-r~2 22 21 3~15 375 22 1 .66E-~)2 '71 16 351 4rl9 27 ~7'~7E~r~3 3R
I l 338 3R6 ?.R -9.E-~13 ~;t1 3 7-~ 4 1 ~ 3 5 -3 . 6~ ~ -r~
322 3S~ 35 ~3D~?F:-r~2 161 26 4~1 56S 36 -3.67E-tl2 2 21 342 4ng 25 S ~ 3 ~-n3 14 1 16 367 42~J 29 -I .9~E-~12 l ~6 I l 3~7 433 3'2 -2031 E~12 R4 6 33~ 37r~ 3r~ -~.5F.-~3 1~9 276 297 27 ~.R1E~ 1 15 - I -2.~-f)2 2~ 376 457 25 10~ t~ 2?7 1 355 4 1 ~ ~5 1, F~-r~4 1 ~
16 364 416 ?7 -?.. ~13 ~5 I l 346 3~ ?5 2.7F-r~2 ?.2 6 31~ 34R 26 1 .57E-r)2 1 1?
342 363 3 ~ ^t .F~-r14 1 55 -1 -4~E-f12 26 426 4~6 3t1 -I oS3E~tt2 154 21 462 517 33 ~2o33E~r12 I 3~5 1~ 34~ 39~ 2~5 ~.6F:~)3 fi4 I1 351 39~) 27 ~ J?~ ;5 75 6 393 421 ~1 -s.,E-n3 1 41 2~ 3rl~i 27 2 . n~n2 3 .

8 ~ 2 4 3 ~~11 tlNTTIAL ~~t T~p MAX r~H~1~Jr7FI AT
t~CC 13Rr~ VEL~ DI~T DI~T ~RAnE DI~T
4 oE~f)2 2~6 3-19 3~5 23 1 o4E~~13 1 19 21 ~!73 345 21 1 ~6F-r)7 IR9 16 3~1g 37-1 24 6r~ 3 3~5 11 285 335 26 ~ E-~J2 t ~
6 241 277 233 .~3E -f~2 1 7~1 264 3~1 32 -2.~7~ 2 1~1 2 . ~- r~
26 339 427. ~>.5-5~E-fl4 91 ~1 297 36~ 21 2.~E~ 195 16 355 413 2R -I 722E-r72 64 11 419 47~ 3h -3~s~E-t12 ~7 6 379 419 34 -2.4Fi-~J.? 36 269 ~4 ?RI ~,46E-~12 1~8 n ~
26 354 435 25 2. 7~-~)3 ?.4ft 21 3f)2 371 21 2.53E-r1~ Sq 16 34f) 395 26 1~ 13 17?
1 1 -41~ 464 34 -2.3~-r12 4~
6 361 39~i 33 -2.54E~t12 162 435 47~1 41 -3.~E~ 4?
fi -?.E-f1 26 37?. 451 ?.S ~.3F-r13 15~
2 1 3q~ 4 t 3 ~5 1 . ~-t~3 ~ .:
16 3~7 44~ 3~J-I ,6F:-~12 55 I l 3~t~ 42~ 3f~-I s?l F-rt2 I?R
6 424 459 36 -~.1 1F~1? 7R
424 451 3~ -3.1 7F-r1? ?
r~ -4.~ 2 26 453 523 31 -1.46~-~1?. 17 ~1 443 4~9 3 1 -~. r~4~ 4 16 334 3~ ~4 1.2~ Sr~
I l 399 43Q 29 6.5E-t~3 215 366 394 29 6D5E r~3 1 4g 431 455 3~-3 . 1 7E-~1~ 43 , .
. :
, 9S~ 4~2ll3 ~IPl~IAL ~ ~T~P ~A~r TIME~I~A~'rlr. AT
tACC ~R~ ` VEL)~I~T r~I8T GRADE ~T~
4 ~`E - ~J7.
26 277 365 2r12.68F-r)2 144 ~1 3rl~; 37~ 2~ 2 52 1~ 342 4~)3 Z~ -1.6~-r~2 ~
I 1 2~1 33rl 242 .~F -~3 1 ~n ,~ 6 277 316 276.6F~-fl3 R~
321 353 33_1.t~3F~r)2 2 2 . E- f~2 ~6 3r~1 3~7 21 3.n~rl2 233 ,' ~1 3~8 ~76 23 ~4"~-r~4 245 16 46t~ 5t9 35' 3059E-fl2 2r1 I ~~!9fJ 33~ 24 1 .S7~ 3 6 274 3fJ~ 25 2.63E-r~2 23g `. I 31 1 33~ 31 _3~S~ 2~
r~
. 26 2~ 3~2 21 3,,E-fl2 4~
21 325 392 23 1~27E-f~2 72 ' 16 299 355 22 3eE~~12 116 I 1 3S~ 395 2~ -5 . 7~ 3 6 277 3r~9 24 3 . ~ r~2 gn 2~5 31 7 2~ 1 . 6 7~ ? 1 6 7 ,-2.~ 2 26 331 4 ~ . n4~-n7. ~5 21 325 3g 1 ~2 2~ 2 1 1 16~ris 456 3n ~ 7E-~2 2 I 133 1 373 24 3 . I
6 379 412 ?.'~.~l .67F~-f1? 1?.
336 35fi 3~11 o4RF~fJ~ 2t3 -4 o~~t)2 264~7 S53 34 ~2as~ 12 1 ~6 2152~5 574 38-3.'94E-t~2 1~J7 163~6 44-~ ~5 3,7E-r~. 243 I l`~6~ 5 ~ 36~2 . gtSi~: -r~ 7 6 347 375 2~ 7~ f~
376 393 31 1 ~g~ . 219 *

.
` , .; :
`

Claims (14)

48,243 CLAIMS:

1, In brake control apparatus for a vehicle operative with a roadway having a command speed to establish the desired speed of the vehicle in relation to that roadway, the combination of:
means including an accelerometer coupled with the vehicle for sensing a first deceleration of the vehicle, means including a tachometer coupled with the vehicle for sensing the actual speed of the vehicle and determining a second deceleration of the vehicle, means responsive to a change of the command speed for determining a predetermined safe brake velocity for the vehicle in relation to said first deceleration and said second deceleration, and means for controlling the actual speed of the vehicle in response to at least a selected one of the actual speed and the determined safe brake velocity.

2. The brake control apparatus of claim 1, includ-ing:
means establishing a speed difference in response to the actual speed and the safe brake velocity, and means for controlling an overspeed condition of the vehicle in response to said speed difference.

3, The brake control apparatus of claim 1, with the safe brake velocity determining means being responsive to a change of the command speed to below the actual speed to initiate the determination of the safe brake velocity.

4, The brake control apparatus of claim 1, includ-48,243 ing the safe brake velocity determining means being re-sponsive to the command speed being greater than the actual speed to discontinue the determination of the safe brake velocity.

5. The brake control apparatus of claim 1, includ-ing:
means for determining when the actual speed is within a predetermined speed difference below the determined safe brake velocity for providing the control of the actual speed in response to the safe brake velocity.

6. The brake control apparatus of claim 1, includ-ing:
means for determining when the actual speed is below the command speed for providing the control of the actual speed in response to the command speed.

7. The brake control apparatus of claim 1, includ-ing:
means for determining a speed difference between the vehicle actual speed and the safe brake velocity, and means for providing at least one predetermined brake effort in response to the magnitude of the speed difference.

8. The method of brake control for a vehicle opera-tive with a roadway having a command speed, including the steps of:
determining the actual speed and a first deceleration of the vehicle in relation to a tachometer coupled to the vehicle, determining a second deceleration of the vehicle in relation to an accelerometer coupled to the vehicle, determining a safe brake velocity in accordance with the difference between the first deceleration and the second deceleration when the actual speed is greater than the command speed, and controlling the vehicle actual speed in response to one of the actual speed and the determined safe brake velocity.

48,243

9. The method of brake control of claim 8, with the control of vehicle actual speed being provided in re-sponse to the safe brake velocity when the actual speed is within a predetermined difference in relation to the safe brake velocity.

10. The method of brake control of claim 8, with the control of vehicle actual speed being provided by a speed regulation in response to one of the actual speed and the determined safe brake velocity for maintaining at least a predetermined speed difference be-tween the actual speed and the determined brake velocity.

11. The brake control method of claim 8, with the safe brake velocity not being determined when the actual speed s less than the command speed.

12. The brake control method of claim 8, including the step of:
controlling an overspeed condition of the vehicle in response to the safe brake velocity when the actual speed is less than a predetermined speed difference from the safe brake velocity.

13. The brake control method of claim 8, including:
determining a speed difference in response to the actual speed and the safe brake velocity, and preventing an overspeed of the vehicle in relation to said safe brake velocity in response to said speed difference.

14. The brake control method of claim 8, including the steps of:
determining a speed difference in response to the actual speed and the safe brake velocity, and providing at least one predetermined brake effort for the vehicle in response to the magnitude of said speed difference.