Testing device and method for testing railway-specific application program

By using data diodes and existing applications in railway facilities to simulate real-life scenarios, test railway-specific applications, and compare the deviations between control signals and reported signals, the problems of high testing cost and high complexity in the existing technology are solved, and the rapid and Economical testing method.

CN119201668APending Publication Date: 2024-12-27SIEMENS MOBILITY GMBH
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202410835694.4
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Priority Date
2023-06-27
Filing Date
2024-06-26
Publication Date
2024-12-27

AI Technical Summary

Technical Problem

The existing technology is difficult to effectively test railway-specific applications, and the testing methods are expensive, requiring the design of special testing algorithms and hardware.

Method used

By using existing railway facilities and applications, using data diodes to connect the application to be tested and the data transmission device, simulate real scenarios for testing, compare the deviations of control signals and reported signals to judge the correctness of application functions, and use existing ones to use existing ones to simulate real scenarios. Applications and facilities are tested to reduce the use of additional hardware and software.

Benefits of technology

It realizes testing in real scenarios, reduces testing costs and engineering complexity, and can quickly determine whether the functions of the application to be tested are correct without affecting the operation of existing facilities.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119201668A_ABST
    Figure CN119201668A_ABST
Patent Text Reader

Abstract

The invention relates to a method for testing a railway-specific application to be tested. The test is carried out during the operation of the real railway installation, using the real railway installation in operation, an existing application program and a data transmission device, the application program is connected to the data transmission device via a data diode, the data flow direction of the data diode is directed from the data transmission device to the application program to be tested, during the operation of the railway installation, the railway installation transmits a status signal to the existing application program via the data transmission device and to the application program to be tested via the data transmission device and the data diode, and the application program to be tested and the existing application program each generate a control signal suitable for controlling the railway installation. And at least if the control signal of the to-be-tested application program and the control signal of the existing application program deviate from each other in a preset test time period or the mutual deviation exceeds a preset degree, determining that the function of the to-be-tested application program is incorrect.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The invention relates to a method for testing railway specific applications. Background Art

[0002] The term railway-specific application is understood to mean, for example, a software product or a computer program product which, when executed on a suitable platform, performs railway-related functions, which platform may consist of a computer, a plurality of computers, a computer network or a cloud computer. For example, a railway-specific application may perform the functions of a central dispatch, in other words, may be a central dispatch application. Summary of the invention

[0003] The object of the present invention is to provide a method for testing railway-specific applications which can be carried out with little effort.

[0004] This object is achieved according to the invention by a method having the features according to claim 1. Advantageous embodiments of the method according to the invention are specified in the dependent claims.

[0005] According to the invention, it is therefore provided that the test is carried out during operation of a real railway installation, using the real railway installation in operation, an existing application for controlling the operation of the real railway installation, and a data transmission device, the functionality of which should correspond to the functionality of the railway-specific application to be tested when the railway-specific application to be tested is operating correctly, the data transmission device communicatively connecting the real railway installation to the existing application, wherein within the scope of the method the railway-specific application to be tested is connected to the data transmission device via a data diode, wherein the data flow direction of the data diode is oriented in the direction from the data transmission device to the railway-specific application to be tested, during operation of the railway installation the railway installation transmits a status signal to the existing application via the data transmission device and via the data transmission device and the data diode to the railway-specific application to be tested, and the application to be tested and the existing application each generate a control signal suitable for controlling the railway installation, and at least if the control signal of the application to be tested and the control signal of the existing application deviate from each other or deviate from each other by more than a predetermined degree within a predetermined test time period, it is concluded that the function of the application to be tested is incorrect.

[0006] The main advantage of the method according to the invention is that it can be carried out with little additional hardware and software expenditure. The test method according to the invention is essentially based on existing hardware in terms of facilities, since already existing railway facilities and existing applications already in use are used, and the tests are carried out according to real scenarios. Since real operations are involved in the tests, no special test algorithms need to be designed on the engineering side, in contrast to other test methods, for example.

[0007] If it is inferred or determined that the application to be tested is not functioning correctly, an error signal is preferably generated.

[0008] For example, a deviation between the control signals exceeding a predetermined degree may be determined and an error signal generated when:

[0009] - the control signals differ in content,

[0010] - the control signal is deviated in time by more than a predetermined degree, because, for example, the application to be tested works too slowly,

[0011] - the application under test generates control signals that it should not generate, or

[0012] - The application under test does not generate the required control signals.

[0013] The above enumeration of possible deviations between the control signals is to be understood as an example and not as a complete list.

[0014] It is considered advantageous that the existing application generates a first report signal describing the status of the railway facility based on the status signal and transmits it to an operating unit superior to the existing application, and the application to be tested generates a second report signal describing the status of the railway facility based on the status signal and outputs it, and at least when the first and second report signals deviate from each other within a predetermined test time period or deviate from each other by more than the predetermined degree or another predetermined degree, it is determined that the function of the application to be tested is incorrect.

[0015] For example, a deviation between the reporting signals exceeding a predetermined level may be determined and an error signal generated when:

[0016] - the reporting signals differ in content,

[0017] - the reporting signal is shifted in time by more than a predetermined degree, because, for example, the application to be tested works too slowly,

[0018] - the application under test generates reporting signals that it should not, or

[0019] - The application under test does not generate the required reporting signals.

[0020] The above enumeration of possible deviations between the reporting signals is to be understood as an example and not as an exhaustive one.

[0021] In the last-mentioned variant design, it is considered advantageous that the operating unit generates a control command based on the first report signal and transmits the control command to the existing application and to the application to be tested without a feedback effect, the existing application generates a control signal of the existing application in the form of a first control signal that conforms to the control command as a reaction to the control command of the operating unit and transmits it to the railway facility, the application to be tested generates and outputs a control signal of the application to be tested in the form of a second control signal that conforms to the control command as a reaction to the control command of the operating unit, and at least if the first and second control signals that conform to the control command deviate from each other within a predetermined test time period or deviate from each other by more than the predetermined degree or another predetermined degree, it is determined that the function of the application to be tested is incorrect.

[0022] In a preferred embodiment, it is provided that the data transmission device connects the existing application and the application to be tested to the railway installation and the operating unit, respectively.

[0023] In another preferred design, it is provided that a second data transmission device is additionally present relative to the data transmission device, and the second data transmission device connects the existing application and the application to be tested to the operating unit, wherein a second data diode is connected between the second data transmission device and the application to be tested, and the data flow direction of the second data diode is oriented in the direction of the application to be tested.

[0024] The railway-specific application to be tested is preferably a central dispatching application, which is tested against an existing application in the form of an existing central dispatching application in real use, wherein the existing central dispatching application in real use controls the railway track facilities in real use during the testing of the application to be tested. In the case of the central dispatching application to be tested, the test duration is preferably at least two weeks, depending on the utilization of the railway facilities used for the test, and / or at least until a repetition in the operation process occurs in railway operation.

[0025] The railway-specific application to be tested and the existing application preferably run on different platforms.

[0026] The railway-specific applications to be tested are preferably run on a cloud platform.

[0027] The invention also relates to a testing device for testing railway-specific applications, in particular for executing the above method.

[0028] In terms of the test device, according to the present invention, the test device includes: an existing application for controlling the operation of the real railway facility, the function of the existing application corresponding to the function of the railway-specific application to be tested when the railway-specific application to be tested is running correctly; a first data transmission device, which is used to connect the real railway facility with the existing application in terms of communication; a first application connection terminal, which is used to connect the application to be tested to the first data transmission device, wherein a first data diode is connected between the first data transmission device and the first application connection terminal, the data output terminal of the first data diode is connected to the first application connection terminal, and its data input terminal is connected to the first data transmission device; a comparison unit, which is suitable for receiving the control signal transmitted by the existing application to the railway facility and the control signal outputted by the application to be tested to the first application connection terminal during the test operation, wherein the comparison unit is connected to the railway facility and the existing application unidirectionally and without a feedback effect. The comparison unit is designed to be able to infer that the function of the application to be tested is incorrect at least when the control signal of the application to be tested and the control signal of the existing application deviate from each other or deviate from each other by more than a predetermined degree within a predetermined test time period.

[0029] The testing device preferably has an operating unit which is arranged on top of the existing application program.

[0030] The comparison unit is preferably designed to compare a first report signal transmitted by the existing application to the operating unit with a second report signal output by the application to be tested on the output side, and to infer that the application to be tested is functionally incorrect at least when the first and second report signals deviate from each other within a predetermined test time period or deviate from each other by more than the predetermined degree or other predetermined degree.

[0031] Preferably, there is additionally a second data transmission device relative to the first data transmission device, which connects the existing application and the second application connection end to the operating unit, wherein the application to be tested can be connected to the second data transmission device via the second application connection end, wherein a second data diode is connected between the second data transmission device and the second application connection end, and wherein the data flow direction of the second data diode is oriented in the direction of the second application connection end.

[0032] With regard to the absence of a feedback effect, it is considered advantageous if a third data diode is additionally connected between the comparison unit and the first data transmission device, wherein the data flow direction of the third data diode is oriented in the direction of the comparison unit.

[0033] It is also preferred that a fourth data diode is additionally connected between the comparison unit and the second data transmission device, wherein a data flow direction of the fourth data diode is oriented in the direction of the comparison unit. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] The present invention is further described below based on the embodiments, wherein:

[0035] Figure 1 An embodiment of a test device according to the invention is shown, which is suitable for testing railway-specific applications, wherein the test device comprises two data transmission devices,

[0036] Figure 2-Figure 3 An exemplary embodiment for a test device according to the invention is shown with a data transmission device.

[0037] For the sake of clarity, the same reference numbers are always used in the figures for the same or similar components. DETAILED DESCRIPTION

[0038] Figure 1 An embodiment for a testing device 10 is shown, which is suitable for testing a railway-specific application APP2.

[0039] In accordance with Figure 1 In the embodiment of , the railway-specific application APP2 to be tested is a central dispatching application. The central dispatching application to be tested can be run on a cloud platform, for example.

[0040] For connecting the application APP2 to be tested, the test device 10 has a first application connection A1 and a second application connection A2. The two application connections A1 and A2 are designed as data connections and can be Ethernet connections, for example.

[0041] The test device 10 includes an existing application APP1 for controlling the operation of a real railway facility 20, wherein the existing application is also a central dispatching application. The existing application APP1 runs on a central dispatching computer (not shown in the figure for clarity), which provides a platform for the operation of the existing application APP1.

[0042] The existing application APP1 has been tested earlier and is in real operation. Therefore, the existing application APP1 is considered to be credible because it has been proven in operation and is used as a reference for the test operation.

[0043] The functions of the railway-specific application APP2 to be tested should correspond to the functions of the existing application APP1 when working correctly; if this is confirmed within the scope of the test, the test passes and the application APP2 to be tested can be used for the actual operation of the railway facility 20, for example, in order to replace the existing application APP1 in the future and replace the central dispatching computer by a cloud computer system.

[0044] In accordance with Figure 1In the embodiment of the test device 10, the test device 10 also includes a first data transmission device 31 and a second data transmission device 32. The two data transmission devices 31 and 32 can be Ethernet networks, for example. Alternatively, it can be provided that the first data transmission device 31 can be an Ethernet within the facility, and the second data transmission device 32 can be the Internet or a network including the Internet.

[0045] The first data transmission device 31 connects the real railway installation 20 in terms of communication to the existing application APP1 , the first application connection A1 and the comparison unit 40 .

[0046] The second data transmission device 32 connects the existing application APP1 and the second application connection terminal A2 to the operating unit 50. The operating unit 50 enables an operator to control the central dispatching function provided by the existing application APP1 and thereby control the railway facility 20.

[0047] In order to ensure that the application program APP2 to be tested does not have a return effect on the railway facility 20 or to prevent the application program APP2 to be tested from affecting the railway facility 20, a first data diode D1 is connected between the first data transmission device 31 and the first application connection terminal A1. The data output terminal of the first data diode D1 is connected to the first application connection terminal A1, and the data input terminal of the first data diode D1 is connected to the first data transmission device 31. This orientation or polarity of the data flow of the first data diode D1 ensures that the application program APP2 to be tested cannot input data into the first data transmission device 31, and the control signal SS2 of the application program APP2 to be tested cannot reach the railway facility 20.

[0048] In order to ensure that the application program APP2 under test also has no feedback effect on the operating unit 50 or to prevent the operating unit 50 from being influenced, for example, by the input of the report signal BS2 of the application program APP2 under test, a second data diode D2 is connected between the second data transmission device 32 and the second application connection A2.

[0049] The data output of the second data diode D2 is connected to the second application terminal A2, and the data input of the second data diode D2 is connected to the second data transmission device 32. This orientation or polarity of the data flow of the second data diode D2 ensures that the application program APP2 to be tested cannot input data into the second data transmission device 32, and the report signal BS2 of the application program APP2 to be tested cannot reach the operating unit 50.

[0050] In accordance with Figure 1 In the embodiment of the present invention, the testing device 10 further includes a comparing unit 40. The comparing unit 40 is used to compare the working modes of the application program APP2 to be tested and the existing application program APP1.

[0051] In order to ensure that the comparison unit 40 does not have a feedback effect on the first data transmission device 31 or prevent the comparison unit 40 from affecting the railway facilities 20, a third data diode D3 is connected between the first data transmission device 31 and the comparison unit 40, whose data output end is connected to the comparison unit 40, and whose data input end is connected to the first data transmission device 31.

[0052] In order to ensure that the comparison unit 40 does not have a feedback effect on the second data transmission device 32 or prevent the comparison unit 40 from affecting the operation unit 50, a fourth data diode D4 is connected between the second data transmission device 32 and the comparison unit 40, whose data output end is connected to the comparison unit 40, and whose data input end is connected to the second data transmission device 32.

[0053] according to Figure 1 The test device 10 preferably works as follows:

[0054] During normal operation of the railway facility 20, the existing application APP1 controls the driving operation. Here, the facility-side sensor 21 of the railway facility 20 generates a status signal STS, which reaches the existing application APP1 via the first data transmission device 31. The sensor 21 can be, for example, a switch position sensor, a track vacancy reporting device, etc.

[0055] The existing application APP1 evaluates the status signal STS and generates a (first) report signal BS1, which is transmitted to the superordinate operating unit 50 via the second data transmission device 32. The report signal BS1 indicates the respective operating state of the railway installation 20 and enables the operating unit 50 to correctly map the installation state.

[0056] The operating unit 50 can be operated by an operator who is familiar with the status of the facility. To this end, the operator can input commands to the operating unit 50, which are forwarded as control commands SB to the existing application APP1 via the second data transmission device 32. The existing application APP1 evaluates these control commands SB and generates a (first) control signal SS1 itself, which is transmitted to the actuator 22 of the railway facility 20 via the first data transmission device 31. The actuator 22 can be, for example, a switch machine, a light signal device, etc.

[0057] For example, the status signal STS can indicate that the switch position has been switched, and the corresponding reporting signal BS1 can transmit the new switch position to the operating unit 50. The command input by the operator to the operating unit 50 and the corresponding control command SB can, for example, indicate the switching of the light signaling device, whereupon the existing application APP1 triggers the actual switching of the light signaling device by outputting a corresponding (first) control signal SS1 to the corresponding actuator, here to the light signaling device.

[0058] Since the application APP2 to be tested is connected in parallel with the existing application APP1 in terms of data flow, the application to be tested obtains the status signal STS of the railway facility 20 and the control command SB of the operating unit 50, and generates its own (or second) report signal BS2, which is output in the direction of the second data transmission device and the operating unit 50 and in the direction of the comparison unit 40, and generates its own (or second) control signal SS2, which is output in the direction of the first data transmission device 31 and the railway facility 20 and in the direction of the comparison unit 40.

[0059] Since the data diodes D1 and D2 are connected in the blocking direction from the perspective of the application program APP2 to be tested, the report signal BS2 and the control signal SS2 of the application program APP2 to be tested only reach the comparison unit 40, but not the operation unit 50 and the railway facility 20. Therefore, the application program APP2 to be tested has no feedback effect on the actual operation of the railway facility 20.

[0060] The comparison unit 40 receives the control signal SS1 sent by the existing application APP1 to the railway facility 20 and the control signal SS2 of the application to be tested APP2, and outputs it in the direction of the first application connection terminal A1 during the test operation. In addition, the comparison unit 40 receives the report signal BS1 sent by the existing application APP1 to the operating unit 50 and the report signal BS2 outputted by the application to be tested APP2 on the output side.

[0061] The comparison unit 40 compares the control signal SS2 output by the application to be tested APP2 in the direction of the first application connection terminal A1 during the test operation with the actual control signal SS1 output by the existing application APP1, and if the control signals SS1 and SS2 deviate from each other within a predetermined test time period or deviate from each other by more than a predetermined degree, it is determined that the function of the application to be tested APP2 is incorrect.

[0062] The deviation between the control signals SS1 and SS2 exceeding a predetermined level may be, for example:

[0063] - the control signals SS1 and SS2 differ in content,

[0064] - the control signals SS1 and SS2 are offset in time by more than a predetermined degree, because, for example, the application program APP2 to be tested operates too slowly,

[0065] - the application program APP2 to be tested generates a control signal SS2 which should not be generated, or

[0066] - The application to be tested APP2 does not generate the required control signals.

[0067] The comparison unit 40 also compares the report signal BS2 output by the application to be tested APP2 in the direction of the second application connection terminal A2 during the test operation with the actual report signal BS1 output by the existing application APP1, and in addition, if the report signals BS1 and BS2 deviate from each other within a predetermined test time period or deviate from each other by more than a predetermined degree, it is determined that the function of the application to be tested APP2 is incorrect.

[0068] Reporting a deviation between signals BS1 and BS2 exceeding a predetermined level may be, for example:

[0069] - the reporting signals BS1 and BS2 differ in content,

[0070] - the reporting signals BS1 and BS2 are offset in time by more than a predetermined degree, because, for example, the application APP2 to be tested works too slowly,

[0071] - the application program APP2 to be tested generates a report signal BS2 which should not be generated, or

[0072] - The application to be tested APP2 does not generate the required reporting signal.

[0073] If the comparison unit 40 determines that the application program APP2 to be tested is not functioning correctly, it preferably generates an error signal F.

[0074] Figure 2 A further exemplary embodiment for a testing device 10 is shown, which is suitable for testing a railway-specific application APP2 .

[0075] In accordance with Figure 2 In the embodiment of FIG. 1 , the test device 10 comprises only one data transmission device 33 , which connects the railway facility 20 , the existing application APP1 , the application to be tested APP2 , the comparison unit 40 and the operating unit 50 .

[0076] The data transmission device 33 may be, for example, an Ethernet network within the facility, the Internet, or a network including the Internet.

[0077] Since the operating unit 50 inputs its control command SB into the data transmission device 33, it can reach the application program to be tested APP2 through the first application connection terminal A1. The application program to be tested APP2 can selectively send its report signal BS2 through the second application connection terminal A2 of the test device 10 (if it Figure 2 ) or alternatively via the first application connection terminal A1 (as shown Figure 3 As shown) is sent to the comparison unit 40.

[0078] In accordance with Figure 2 and Figure 3In the embodiment, only two data diodes D1 and D3 are used to ensure that the application program APP2 to be tested and the comparison unit 40 have no feedback effect.

[0079] In addition, the above combination Figure 1 The description of the test device 10 also applies to the Figure 2 and Figure 3 Embodiment of the invention.

[0080] Finally, it should be mentioned that the features of all the above-described embodiments can be combined with one another in any manner to form further other embodiments of the present invention.

[0081] Furthermore, all features of the dependent claims may be combined individually with each independent claim and may be combined arbitrarily either individually or with one or more other dependent claims to obtain further other embodiments.

[0082] Reference numerals list

[0083] 10 Test equipment

[0084] 20 Railway facilities

[0085] 21 Facility-side sensors

[0086] 22 Actuator

[0087] 31 first data transmission device

[0088] 32. Second data transmission device

[0089] 33 Data transmission device

[0090] 40 Comparison unit

[0091] 50 operating units

[0092] A1 First Application Connection Terminal

[0093] A2 Second Application Connection Port

[0094] APP1 Existing railway-specific applications with proven operation

[0095] APP2 Railway-specific applications to be tested

[0096] BS1 reporting signal

[0097] BS2 reporting signal

[0098] D1 First data diode

[0099] D2 Second data diode

[0100] D3 The third data diode

[0101] D4 Fourth data diode

[0102] F Error signal

[0103] SB Control Commands

[0104] SS1 control signal

[0105] SS2 control signal

[0106] STS status signal

Claims

1. A method for testing a railway specific application (APP2) to be tested, It is characterized in that The tests were conducted during operation on a real railway installation, using: Real railway facilities in operation (20); An existing application (APP1) for controlling the operation of a real railway facility (20), the functions of the existing application should correspond to the functions of the railway-specific application (APP2) to be tested when the railway-specific application (APP2) to be tested is running correctly; and a data transmission device (31) which connects the actual railway installation (20) to the existing application (APP1) in terms of communication; Among them, in the scope of this method, The railway-specific application (APP2) to be tested is connected to the data transmission device (31) via a data diode (D1), wherein the data flow direction of the data diode (D1) is oriented in the direction from the data transmission device (31) to the railway-specific application (APP2) to be tested; During the operation of the railway facility (20), the railway facility (20) transmits a status signal (STS) to an existing application (APP1) via a data transmission device (31) and transmits it to a railway-specific application (APP2) to be tested via the data transmission device (31) and a data diode (D1), and the application (APP2) to be tested and the existing application (APP1) respectively generate control signals (SS1, SS2) suitable for controlling the railway facility (20), and At least if the control signal (SS2) of the application to be tested (APP2) and the control signal (SS1) of the existing application (APP1) deviate from each other within a predetermined test time period or deviate from each other by more than a predetermined degree, it is determined that the function of the application to be tested (APP2) is incorrect.

2. The method according to claim 1, It is characterized in that The existing application (APP1) generates a first report signal (BS1) indicating the status of the railway installation (20) based on the status signal (STS) and transmits it to an operating unit (50) above the existing application (APP1). The application program (APP2) to be tested generates and outputs a second report signal (BS2) indicating the status of the railway facility (20) based on the status signal (STS), and At least when the first and second report signals (BS1, BS2) deviate from each other or deviate from each other by more than the predetermined degree or another predetermined degree within a predetermined test period, it is determined that the application to be tested (APP2) does not function correctly.

3. The method according to claim 2, It is characterized in that The operating unit (50) generates a control command (SB) based on the first report signal (BS1) and transmits the control command to the existing application (APP1) and to the application to be tested (APP2) without feedback, The existing application (APP1) generates a control signal (SS1) of the existing application in the form of a first control signal (SS1) corresponding to the control command as a response to a control command (SB) of an operating unit (50) and transmits it to the railway installation (20), The application program (APP2) to be tested generates and outputs a control signal (SS2) of the application program to be tested in the form of a second control signal (SS2) conforming to the control command as a response to a control command (SB) of the operating unit (50), and At least if the first and second control signals (SS1, SS2) that comply with the control command deviate from each other within a predetermined test period or deviate from each other by more than the predetermined degree or another predetermined degree, it is determined that the application to be tested (APP2) does not function correctly.

4. The method according to any one of the preceding claims, It is characterized in that The data transmission device (31) connects the existing application (APP1) and the application to be tested (APP2) to the railway facility (20) and the operating unit (50) respectively.

5. The method according to any one of claims 1 to 3, It is characterized in that In addition to the data transmission device (31), there is a second data transmission device (32), which connects the existing application (APP1) and the application to be tested (APP2) to the operating unit (50), wherein a second data diode (D2) is connected between the second data transmission device (32) and the application to be tested (APP2), and the data flow direction of the second data diode (D2) is oriented in the direction of the application to be tested (APP2).

6. The method according to any one of the preceding claims, It is characterized in that The railway-specific application (APP2) to be tested is a central dispatch application, which is tested against an existing application (APP1) in the form of an existing central dispatch application in real use, Therein, the existing central dispatching application in real use actually controls the railway track facilities during the testing of the application to be tested (APP2).

7. The method according to any one of the preceding claims, It is characterized in that The railway-specific application to be tested (APP2) and the existing application (APP1) run on different platforms.

8. The method according to any one of the preceding claims, characterized in that The railway-specific application (APP2) to be tested runs on the cloud platform.

9. A testing device for testing a railway-specific application (APP2), in particular for carrying out a method according to one of the preceding claims, It is characterized in that The test setup includes: An existing application (APP1) for controlling the operation of a real railway facility (20), the functions of the existing application should correspond to the functions of the railway-specific application (APP2) to be tested when the railway-specific application (APP2) to be tested is running correctly; a first data transmission device (31) which connects the actual railway installation (20) to the existing application (APP1) in terms of communication; A first application connection terminal (A1) used to connect the application to be tested (APP2) to the first data transmission device (31), wherein a first data diode (D1) is connected between the first data transmission device (31) and the first application connection terminal (A1), a data output terminal of the first data diode is connected to the first application connection terminal (A1), and a data input terminal thereof is connected to the first data transmission device (31); A comparison unit (40) adapted to receive a control signal (SS1) transmitted by an existing application (APP1) to a railway facility (20) and a control signal (SS2) outputted by an application to be tested (APP2) to a first application connection terminal (A1) during a test operation, wherein the comparison unit (40) is connected to the railway facility (20) and the existing application (APP1) in a unidirectional manner and without a feedback effect, The comparison unit (40) is configured to: At least if the control signal (SS2) of the application to be tested (APP2) and the control signal (SS1) of the existing application (APP1) deviate from each other within a predetermined test time period or deviate from each other by more than a predetermined degree, it is determined that the function of the application to be tested (APP2) is incorrect.

10. The test device according to claim 9, It is characterized in that The test device comprises an operating unit (50) arranged on top of an existing application program (APP1), The comparison unit (40) is designed to compare a first report signal (BS1) transmitted by the existing application (APP1) to the operating unit (50) with a second report signal (BS2) outputted by the application to be tested (APP2) on the output side, and to infer that the function of the application to be tested (APP2) is incorrect at least when the first and second report signals (BS1, BS2) deviate from each other within a predetermined test time period or deviate from each other by more than the predetermined degree or other predetermined degree.

11. The test device according to claim 10, It is characterized in that A second data transmission device (32) is additionally provided in relation to the first data transmission device (31), and the second data transmission device can connect an existing application (APP1) and a second application connection terminal (A2) to an operating unit (50), wherein an application to be tested (APP2) can be connected to the second data transmission device (32) via the second application connection terminal. A second data diode (D2) is connected between the second data transmission device (32) and the second application connection terminal (A2). And wherein the data flow direction of the second data diode (D2) is oriented along the direction of the second application connection terminal (A2).

12. The test device according to claim 10 or 11, It is characterized in that A third data diode (D3) is additionally connected between the comparison unit (40) and the first data transmission device (31). The data flow direction of the third data diode (D3) is oriented along the direction of the comparison unit (40).

13. The test device according to any one of the preceding claims 11 to 12, It is characterized in that A fourth data diode (D4) is additionally connected between the comparison unit (40) and the second data transmission device (32). The data flow direction of the fourth data diode (D4) is oriented along the direction of the comparison unit (40).