Classifications

• • B—PERFORMING OPERATIONS; TRANSPORTING
  • B61—RAILWAYS
  • B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
  • B61L19/00—Arrangements for interlocking between points and signals by means of a single interlocking device, e.g. central control
  • B61L19/06—Interlocking devices having electrical operation
• • B—PERFORMING OPERATIONS; TRANSPORTING
  • B61—RAILWAYS
  • B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
  • B61L25/00—Recording or indicating positions or identities of vehicles or trains or setting of track apparatus
  • B61L25/06—Indicating or recording the setting of track apparatus, e.g. of points, of signals
  • B61L25/08—Diagrammatic displays
• • B—PERFORMING OPERATIONS; TRANSPORTING
  • B61—RAILWAYS
  • B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
  • B61L19/00—Arrangements for interlocking between points and signals by means of a single interlocking device, e.g. central control
  • B61L19/06—Interlocking devices having electrical operation
  • B61L2019/065—Interlocking devices having electrical operation with electronic means

Definitions

• the invention relates to a method for error disclosure in an interlocking computer system with a control channel whose input signals represent safe signal state messages a railway safety system and its output signals for operating at least one element, such as a light signal, the Eisenbahnommesan ⁇ position are formed and on a display as text and graphics Color representation can be visualized and an interlocking computer system for performing the method.
• auxiliary operations on the interlocking computer system is to ensure that the basis of decision, that is, the message image on the display, which is ⁇ shows the operator, the actual state of the railway safety system, also called outdoor area corresponds.
• an operating channel 1a and a reference channel 1b are provided for this purpose.
• This computer channels la and lb process the information of a railway safety system 2, which is a confidential reporting source 3, for example, an electronic interlocking - elekt ⁇ ronisches interlocking - represents.
• Both computer channels that is to say the operating channel 1a and the reference channel 1b, are identical with respect to their input signals and algorithms used.
• Means a functionality for rockssanzei- ge / operator 4a and 4b is shown to ⁇ together 5b with the to-use element to be secured text ⁇ information as state image 5a and as a reference image of the text information on each Rechnerka ⁇ nal la and lb, the state of the railway protection system 2 , with error-free signal ⁇ processing the reference image 5b coincides with the state image 5a.
• the status display / operation 4a via the status screen 5a a checksum calculated and ge of theginsanzei- / operation 4b via the reference image 5b is a checksum it averages ⁇ .
• the checksum of the reference image 5b is transmitted 6 to the status display / operation 4a of the control channel 1a, which then transmits both checksums as part of the auxiliary operation to the secure reporting source 3 for comparison. Only the text information of the state image 5a are displayed on a display 7. Such tests are performed cyclically in Hin ⁇ terground to as early as incorrect working, for example frozen image pixel to one of the
• Digital Visual Interface - taps are only variants of this basic principle.
• the primary goal of all these procedures is to provide the operator with the safest possible basis for decision-making in critical situations.
• the image backup is based in principle on the comparison of two images, namely the image on the display, which is made available to the operator, and the image of a reference system, which generates the same representation.
• the invention has for its object to provide a method and an interlocking computer system of the generic type, which tolerate irrelevant pixel errors text-based graphics with high degree of error disclosure and have a higher availability, where possible low SIL requirements are desirable.
• the object is achieved in that when the element is actuated from element-specific pixel data of the display by means of OCR - Optical Character Recognition - encoded first text data are generated and compared with element ⁇ specific second text data of a process image of the fail-safe status messages.
• Serving according to claim 2 is an interlocking computer system in which a reference system with a readback channel for generating by means of OCR - Optical Character Recognition - encoded first text data from element-specific pixel data of the display when initiating the operation of the element and a logic channel for generating and storing element-specific second
• Text data of a process image of the signal-technically safe status messages of the railway safety system is provided, wherein the first and the second text data are fed to a comparator of a signal-technically safe status messages generating message source.
• the operator receives a secure decision-making basis ⁇ , wherein the backup procedure substantially simplified and is tolerant of insignificant pixels.
• System development costs are reduced as the SIL
• SIL level of 0 is required for the operating channel and a SIL level ⁇ 4 for the reference system, depending on the required safety of the overall system.
• the claimed method in which the reference system only evaluates the image portion of the text element or graphic pixel significant for the illustrated element state, is overall clear less prone to pixel errors than the known methods. This increases the availability of the entire system.
• a further advantage is that the software of the control channel can be easily replaced because of the low security levels, without jeopardizing the system approval.
• the second text data can be compiled directly from the process image of the reference system.
• a data connection between the control channel and the reference system which serves to transfer the specifics, such as name, coordinates and extent, of the text to be visualized on the display from the control channel to the reference system.
• the text generated by the operating channel and displayed on the display is saved by requesting the operator input reference system the necessary element handling information and comparing the OCR coded first text data of the item specific pixel data returned from the display with the second text data generated in the own logic channel.
• the readback channel for issuing first checksums of the first text data and the logic channel for outputting second checksums of the second text data are formed.
• the two checksums are transmitted by the reference system in the usual manner for the command release process to the secure reporting source, for example ESTW - electronic interlocking - or ETCS - European Train Control System -, in order to be compared there.
• Figure 1 is an interlocking computer system of known type
• FIG. 2 shows an interlocking computer system according to the invention.
• Figure 1 illustrates the conventional design of an interlocking ⁇ system, which has already been described above.
• substantially identical computer channels la and lb of Figure 1 are as a control channel 8 fun ⁇ verging first computer channel and a reference system 9 superiors see that use very different algorithms for very different tasks.
• the control channel 8 generates a process image 12, which is conditioned for the visualization 13 of a corresponding text and graphic color representation 14 on the display 7 from the signal-technically safe messages of the railway safety system 2 by means of a projected 10 interlocking logic 11. Operation, for example, to set a light signal from HALT to TRAVEL must be carried out as an auxiliary operation, because otherwise the ESTW would violate its safety rules. The auxiliary operation is sent through the control channel 8 to the ESTW.
• the color display 14 displayed on the display 7 is checked by the reference system 9 with regard to pixel errors and errors in the signal processing in the operating channel 8. These are first via a data connection 15 of the control channel 8 to the reference system 9 specifics of to visualize on the display 7 Governing color display 14, in particular name, Displaypositi ⁇ on,
• a readback channel 16 of the reference system 9 reads the image section of the display 7, which is relevant to the element to beie ⁇ nende.
• the corresponding image pixels ⁇ the transferred to a pixel buffer 17, and shown by an OCR algorithm 18 in a machine-readable state of the color 14 - first text data 19 - changed, which enables a first checksum 20th
• a second checksum 22 via a process image 23 of this logic channel 21 after appropriate normalization of the text to be displayed - second text data 24 - formed.
• the process image 23 is gebil- det as in the control duct 8 directly from the projected actuator 25 ⁇ factory logic 26 and thus directly from the fail-safe status messages of the railway protection system. 2
• the checksum 20 of the first text data 19 and the checksum 22 of the second text data 24 are transmitted to the fail-safe area of the interlocking system and compared there with one another. Only if the two checksums 20 and 22 agree can it be assumed that the signal processing in the operating channel 8 has proceeded without errors and the display 7 in the relevant pixel areas is error-free, so that the command can be released. This assurance procedures are not required for the current operating action pixel areas of the display 7 are ignored, resulting in a high availability of the overall system ⁇ .

Landscapes

• Engineering & Computer Science (AREA)
• Mechanical Engineering (AREA)
• Train Traffic Observation, Control, And Security (AREA)

Applications Claiming Priority (2)

Publications (1)

Family

ID=50115854

Family Applications (1)

Country Status (4)

Families Citing this family (3)

Family Cites Families (7)

• 2013
  • 2013-02-21 DE DE201310202814 patent/DE102013202814A1/de not_active Ceased
• 2014
  • 2014-02-12 EP EP14705098.3A patent/EP2941738A1/de not_active Withdrawn
  • 2014-02-12 CN CN201480007921.9A patent/CN104995641A/zh active Pending
  • 2014-02-12 WO PCT/EP2014/052698 patent/WO2014128036A1/de active Application Filing

Non-Patent Citations (2)

Also Published As

Similar Documents

Legal Events