DEVICE FOR THE CONTROLLED EXECUTION OF A SAFETY-RELEVANT ACTION IN RAIL TRANSPORT

Description

Technical field

[0001] According to some embodiments, a device for the controlled execution of a safety-relevant action in rail transport is disclosed. According to further embodiments, a central authority for authorizing a device for the controlled execution of a safety-relevant action in rail transport is disclosed. According to further embodiments, a network node of a data network for receiving data signals of a device for the controlled execution of a safety-relevant action in rail transport is disclosed. background

[0002] Unlike in air transport, safety-relevant actions in rail transport, such as switching and / or passing a stop signal or setting a switch, are currently often based on individual decisions, meaning they can be made and / or implemented by a single person. While this approach facilitates efficient decision-making and action, allowing for the earliest possible initiation of corrective measures, a disadvantage is that decisions made by individuals can be unchecked, leading to safety risks. In particular, the current approach does not consider the specific characteristics of such a decision when assessing whether there is a general interest in the decision being made by an individual.Such specifics may relate, for example, to the difficulty of the decision, the effects of the respective decision, and the circumstances of the individual concerned, and are of enormous importance from a security perspective for granting specific authorization to the individual.

[0003] D10 2005 014 050 A1 D1 discloses a device that sends signals to technical devices and stores access control data that determines which functionality the user is allowed to access.

[0004] GB 2540976 A1 discloses an access control method for a restricted resource in a networked computer system, wherein a blockchain data structure stores validated records of miner components. Brief summary of the invention

[0005] Therefore, there is a need to provide an efficient procedure for controlling safety-relevant actions in rail transport.

[0006] According to some embodiments, the underlying task is therefore to provide technical means by which efficient inquiries regarding the permissibility of carrying out a safety-relevant action in rail transport are made possible.

[0007] According to some further embodiments, the underlying task is therefore to provide technical means by which efficient authorization regarding specific safety-relevant actions in rail transport is enabled.

[0008] According to some embodiments, the underlying task is therefore to provide technical means by which the carrying out of a safety-relevant action in rail transport is made possible in an efficient manner, provided the action is permissible.

[0009] These tasks are solved according to corresponding embodiments by a device for the controlled execution of a safety-relevant action in rail transport according to claim 1, by a central authority for authorizing a device for the controlled execution of a safety-relevant action in rail transport according to claim 8, and by a network node of a data network for receiving data signals from a device for the controlled execution of a safety-relevant action in rail transport according to claim 12. Further embodiments relating to these devices are claimed in the dependent claims.

[0010] According to one embodiment, a device is disclosed which is configured for the controlled execution of a safety-relevant action in rail transport. The device can be arranged in a data network. The device includes a receiving unit configured to receive authorization information from a central authority. The device also includes a storage unit configured to store the authorization information. Furthermore, the device includes an instruction unit configured to selectively provide instructions for carrying out the safety-relevant action, depending on the authorization information.The device further comprises an output device configured to output a data signal, wherein the data signal is indicative of the provided instruction for carrying out the safety-relevant action as well as of the stored authorization information. The device further comprises an identification device configured to encrypt an identification parameter (16) of the device and to transmit the encrypted identification parameter to a central authority. The authorization information received by the receiving device is based on the transmittable encrypted identification parameter.

[0011] Based on this approach, it becomes possible to obtain authorization information regarding specific powers to carry out safety-relevant actions in rail transport and to select the desired specific powers as needed. Instructions can be derived from the selected powers, to which additional stored authorization information can be added, the latter potentially including supplementary information regarding the expiration of this authorization. By outputting this information as a single data signal, request information for carrying out a safety-relevant action in rail transport is efficiently provided, thereby improving the desired control over safety-relevant decisions in rail transport.

[0012] According to a further embodiment, a central authority for authorizing a device for the controlled execution of a safety-relevant action in rail transport is disclosed. The central authority comprises a first receiving device configured to receive an encrypted identification parameter of the device. The central authority further comprises a decryption device for decrypting the encrypted identification parameter of the device. The central authority also comprises an allocation device configured to assign authorization information to the decrypted identification parameter of the device. Finally, the central authority comprises a transmission device configured to transmit the authorization information assigned to the identification parameter to the associated device.

[0013] Based on this approach, it becomes possible to determine individualized authorization information for the device used to control the execution of a safety-relevant action in rail transport, based on a unique identification parameter, so that the device can be provided with the most appropriate authorization information. Furthermore, the decryption mechanism immediately before assigning this appropriate authorization information improves the tamper-proof nature of the device's identification data.

[0014] According to a further embodiment, a network node of a data network is disclosed, which is configured to receive data signals from a device for the controlled execution of a safety-relevant action in rail transport. The network node includes a second receiving device, which is configured to receive the data signal from the device, containing a provided instruction for carrying out the safety-relevant action as well as data from stored authorization information. The network node also includes a testing device, which is configured to check, based on the data signal, whether the provided instruction for carrying out the safety-relevant action is permissible. The network node further includes a second storage device, which, depending on the test device's verification, can store the received data signal in a distributed database.

[0015] Based on this approach, permissible data signals can be duplicated using a distributed database, thereby enabling safety-relevant actions in rail transport, depending on the data signal verification performed by the testing device. This ensures that the data is reliably fed into the distributed database using the simplest possible technical means.

[0016] A safety-relevant action within the meaning of the invention is understood to be a measure that can impair the safety of a process in rail transport. It may be provided that the action can be performed by a person involved in rail transport. Based on the safety-relevant action, it may further be provided that the movement of a rail user can be affected. It may also be provided that the safety-relevant action controls the timing and / or direction of the rail user's movement. For example, such a safety-relevant action may relate to a switch setting or a stop signal in rail transport.

[0017] Authorization information within the meaning of the invention is understood to be electronic data that includes information concerning the authorization to perform the safety-relevant action. It may be provided that such authorization information is issued by a central authority.

[0018] A central authority within the meaning of the invention is understood to be a network node of an electronic data network that can issue information to a multitude of other network nodes regarding their authorization to perform the safety-relevant action. Such a central authority can be implemented by an electronic interlocking system in railway traffic.

[0019] An instruction within the meaning of the invention is understood to be a directive for carrying out a safety-relevant action in rail transport, the admissibility of which can be verified on the basis of existing authorizations.

[0020] An identification parameter within the meaning of the invention is understood to be data that is characteristic of an electronic device. Such identification parameters can be intended for transmission within a data network and indicate the sender of the identification parameter. Such identification parameters can be intended for transmission to a central authority and constitute a request for authorization for security-relevant actions. It can be provided that each electronic device can transmit a different identification parameter to the central authority. Such identification parameters can exist in encrypted and decrypted form. A decryption device can be provided to transform an encrypted identification parameter into a decrypted identification parameter.

[0021] A distributed database within the meaning of the invention is understood to be a data backup unit, wherein the data is backed up at different locations. For example, such a distributed database can be designed as a blockchain-based database.

[0022] A smart contract within the meaning of the invention is understood to be a computer protocol that is implemented in electronic authorization information and is designed to verify the permissibility of a safety-relevant action in rail transport. It may be provided that the smart contract checks the data signals that can be output by the output device.

[0023] According to one embodiment of the device, the storage device is configured to adapt the stored authorization information depending on the output of the data signal.

[0024] In this way, previously requested and / or implemented safety-relevant actions in rail transport can be taken into account when assessing the admissibility of new requests. This allows the decision regarding the admissibility of a requested safety-relevant action to be made more precisely based on past events.

[0025] According to one embodiment of the device, the authorization information includes spatial and / or purpose-related authorization information for carrying out the safety-relevant action, and the instruction device is configured to provide the instruction in accordance with the spatial and / or purpose-related authorization information.

[0026] In this way, permissions that are highly similar according to specific criteria can be issued as common authorization information, resulting in efficiency gains.

[0027] According to one embodiment of the device, the authorization information includes units of a cryptocurrency.

[0028] In this way, authorization information regarding security-relevant measures can be limited to a finite, clearly defined set using digital units.

[0029] According to one embodiment of the device, the outputtable data signal comprises at least one unit of the cryptocurrency. According to another embodiment of the device, the output device is configured to remove at least one unit of the cryptocurrency from the storage device when outputting the stored authorization information.

[0030] After such requests have been exhausted, it may be possible that a further request to carry out the safety-relevant action will be rejected for lack of admissibility, since the device is designed to record past issued data signals.

[0031] According to one embodiment of the device, the units of the cryptocurrency are distinguishable.

[0032] Based on the distinguishability of the cryptocurrency units, specifics of the respective authorization information can be directly extracted from the respective currency unit, so that reading the authorization information from the cryptocurrency units is feasible using simple technical means.

[0033] According to one embodiment of the device, the authorization information includes executable smart contracts.

[0034] In this way, further aspects relevant to admissibility, which concern safety-relevant actions in rail transport, can be implemented in an efficiently editable protocol.

[0035] According to one embodiment of the device, the output device is configured to output the data signal to a control unit of an electronic interlocking system for railway traffic.

[0036] This makes it possible to provide information regarding the permissibility of a safety-relevant action in rail transport at a location that is set up for taking appropriate follow-up measures, thus resulting in efficiency advantages in obtaining corresponding safety-relevant actions.

[0037] According to the invention, the device further comprises an identification device configured to encrypt an identification parameter of the device and transmit the encrypted identification parameter to the central authority. According to the invention, the authorization information that can be received by the receiving device is based on the transmittable encrypted identification parameter.

[0038] In this way, the central authority can issue device-specific and individual authorization data to the device in question. Aspects of the device, such as its location, as well as those of the operator, such as their expertise and experience, can be taken into account.

[0039] According to one embodiment of the device, it further comprises a first deposit device which is set up to deposit an expenditure with the central authority depending on the authorization information received.

[0040] This creates incentives that enable, or at least facilitate, the central authority to revoke granted authorization at a later date. Thus, the central authority can subsequently adjust granted authorization based on changes in external circumstances or on user behavior of the device.

[0041] According to one embodiment of the central authority, it also has a publication facility by means of which an identification key of the central authority can be made publicly available.

[0042] In this way, a trust anchor of the central authority is made publicly available, thus ensuring the security of a device that requests authorization from the central authority.

[0043] According to one embodiment of the central authority, it is designed to store the decrypted identification parameter in a distributed database.

[0044] In this way, a third party involved in the data network can better view the authorizations of the device for the controlled execution of the safety-relevant action in rail transport and can thus better assess further requests originating from the network node of this device.

[0045] According to one embodiment of the central authority, it is configured to revoke the storage of the decrypted identification parameter in the distributed database.

[0046] In this way, the central authority can make a change in the authorization of the device public as quickly as possible.

[0047] According to one embodiment of the network node, it is implemented by a control unit of an electronic interlocking system.

[0048] This makes it possible to obtain information regarding the permissibility of a safety-relevant action in rail transport at a location that is set up for taking appropriate follow-up measures, thus resulting in efficiency advantages in obtaining corresponding safety-relevant actions.

[0049] According to one embodiment of the central authority or network node, the distributed database is a blockchain-based database.

[0050] This ensures that information once entered into the distributed database remains there due to a special blockchain-related encryption method, making it accessible to all network participants at any time. This facilitates third parties' ability to assess situations concerning authorization requests for security-relevant actions in the most appropriate manner and based on the most comprehensive knowledge possible.

[0051] The aspects described above relating to the respective embodiment and the associated advantages disclosed for the further development of the device, the central authority and the network node also apply to associated methods that can be carried out based on the claimed subject matter.

[0052] Authorization information, as defined in the invention, refers to information concerning an authorization to perform a safety-relevant action, which defines the characteristics of that authorization. Such authorization information can, for example, specify the type and / or scope of such authorization. This specification can be, for example, of a factual, spatial, and / or temporal nature.

[0053] A cryptocurrency within the meaning of the invention is understood to be a digital means of payment based on cryptographic methods, the units of which are exchangeable between different participants in a data network. It may be provided that the units of the cryptocurrency are uniquely identifiable.

[0054] The above advantages, features and application possibilities of an embodiment, as well as further advantages, characteristics and application possibilities, will become apparent from the following description of preferred embodiments with reference to at least partially schematic figures. BRIEF DESCRIPTION OF THE FIGURES

[0055] In Figure 1 A device for the controlled execution of a safety-relevant action in rail transport is schematically depicted according to one embodiment. Figure 2 A central authority for authorizing a device for the controlled execution of a safety-relevant action in rail transport, according to one embodiment, is schematically represented. Figure 3 A network node of a data network for receiving data signals from a device for the controlled execution of a safety-relevant action in rail transport according to one embodiment is schematically represented. DETAILED DESCRIPTION OF EXECUTION FORMS

[0056] In Figure 1 A device 1 for the controlled execution of a safety-relevant action 2 in rail traffic 3 is schematically depicted according to one embodiment. The device 1 can be arranged in a data network 4. The controlled execution of the safety-relevant action 2 in rail traffic 3 can refer to a rail traffic control element 31. Such a rail traffic control element 31 can have a safety-relevant effect on rail traffic 3. For example, the movement of vehicles in rail traffic 3 can be affected by such a rail traffic control element 31. For example, the rail traffic control element 31 can refer to a stop signal, a signal lamp, or a switch setting.

[0057] The device 1 can be in data communication with a central authority 7 and / or with a control unit 13 of an electronic interlocking system 14. The device 1 can have a receiving device 5, which is configured to receive authorization information 6 from the central authority 7. The authorization information 6 can contain spatial and / or purpose-related authorization information for carrying out security-relevant actions 2. Furthermore, the authorization information 6 can include units of a cryptocurrency, whereby it may be provided that the units of this cryptocurrency are distinguishable. The authorization information 6 can also include executable smart contracts.

[0058] The device 1 may further comprise a storage device 8 which is configured to store the authorization information 6.

[0059] The device 1 may further comprise an instruction unit 9, which is configured to selectively provide an instruction 10 for carrying out the safety-relevant action 2, depending on the authorization information 6. For example, the instruction unit 9 may select one or more authorization information from the authorization information 6 and provide the selected authorization information as instruction 10. The instruction unit 9 may be configured to provide the instruction 10 in accordance with spatial and / or purpose-related authorization information.

[0060] The device 1 can further comprise an output device 11, which is configured to output a data signal 12 that is indicative of the provided instruction 10 for carrying out the safety-relevant action 2 and of the stored authorization information 6'. According to one embodiment, the data signal 12 can output the provided instruction 10 and the stored authorization information 6'. The output data signal 12 can comprise at least one unit of a cryptocurrency. Furthermore, the output device can be configured to remove at least one unit of the cryptocurrency from the storage device 8 when outputting the data of the stored authorization information 6'. Correspondingly, the storage device 8 can be configured to adjust the stored authorization information 6' depending on the output of the data signal 12.A corresponding adjustment can be made possible, for example, by an adjustment signal 32 emanating from the control unit 13 of the electronic interlocking system 14, wherein the output device 11 is set up to output the data signal 12 to the control unit 13 of the electronic interlocking system 14 of the rail transport 3.

[0061] The device 1 may further comprise an identification device 15, which is configured to encrypt an identification parameter 16 of the device 1 and to transmit the encrypted identification parameter 16` to the central authority 7. The authorization information 6, which can be received by the receiving device 5, may be based on the transmittable encrypted identification parameter 16`.

[0062] The device 1 may further comprise a first deposit device 17, which is set up to deposit an expenditure 18 with the central authority 7 depending on the recorded authorization information 6.

[0063] In Figure 2 A central authority 7 for authorizing a device 1 for the controlled execution of a safety-relevant action 2 in rail transport 3 is schematically represented according to one embodiment. The central authority 7 can exchange data with the device 1. For example, an effort 18 can be transferred from the device 1 to the central authority 7.

[0064] The central authority 7 may have a first receiving device 19, which is configured to receive an encrypted identification parameter 16` of the device 1. The central authority 7 may further have a decryption device 20 for decrypting the encrypted identification parameter 16` of the device 1. Furthermore, the central authority 7 may have an allocation device 21, to which the decrypted identification parameter 16 can be supplied. Based on this, the allocation device 21 may be configured to assign authorization information 6 to the decrypted identification parameter 16 of the device 1. It may also be provided that this authorization information 6 is supplied to a transmission device 22, which is configured to transmit the authorization information 6 assigned to the identification parameter 16 to the associated device 1.

[0065] The central authority 7 may also have a publication facility 23 by means of which an identification key 24 of the central authority 7 can be made publicly accessible. For example, a public area 33 may be provided for this purpose.

[0066] It may also be provided that the central authority 7 is in a data exchange with a distributed database 25. It may be provided that the central authority 7 is configured to store the decrypted identification parameter 16 in the distributed database 25. Such storage may be temporary, as the central authority 7 may be configured to revoke the storage of the decrypted identification parameter 16 in the distributed database 25 by means of a revocation signal 34. It should be noted that the distributed database 25 may be set up as a blockchain-based database 30, also called a digital ledger.

[0067] In Figure 3A network node 26 of a data network for receiving data signals 12 from a device 1 for the controlled execution of a safety-relevant action 2 in rail transport 3 is schematically represented according to an embodiment. The network node 26 can be implemented by a control unit 13 of an electronic interlocking system 14. The control unit 13 can exchange data with the device 1.

[0068] The network node 26, according to the embodiment from Figure 3 The control unit 13 may include a second receiving device 27, which is configured to receive the data signal 12 from the device 1, wherein the data signal 12 contains a provided instruction 10 for carrying out a safety-relevant action 2 as well as data from a stored authorization information 6'. Furthermore, the control unit 13 may, according to the embodiment, consist of Figure 3a test device 28 which is configured to check, based on the data signal 12, whether the provided instruction 10 is permissible for carrying out the safety-relevant action 2. The control unit 13 according to the embodiment shown Figure 3 The device may also have a second storage device 29, to which the data signal 12 and a test signal 35, which may result from the testing of the testing device 28, can be supplied. The second storage device 29 may be configured to store the received data signal 12 in a distributed database 25, depending on the testing of the testing device 28. The distributed database 25 may be a blockchain-based database 30, also called a digital ledger. Reference symbol list

[0069] 1 Device 2 Safety-relevant action 3 Rail traffic 4 Data network 5 Receiving device 6 Authorization information 6 Stored authorization information 7 Central authority 8 Storage device 9 Instruction device 10 Instruction 11 Output device 12 Data signal 13 Control unit 14 Electronic interlocking 15 Identification device 16 Identification parameter 16 Encrypted identification parameter 17 Deposit device 18 Expenditure 19 First receiving device 20 Decryption device 21 Allocation device 22 Transmission device 23 Publication device 24 Identification key 25 Distributed database 26 Network node 27 Second receiving device 28 Verification device 29 Second deposit device 30 Blockchain-based database 31 Rail traffic control element 32 Adaptation signal 33 Public area 34 revocation signal 35 test signal

Claims

1. Device (1) designed for controlled implementation of a security-relevant operation (2) in rail traffic (3), wherein the device (1) can be arranged in a data network (4), having: - a recording facility (5), designed to record authorisation information (6) from a central authority (7), - a storage facility (8), designed to store the authorisation information (6), - an instruction facility (9), designed to optionally provide an instruction (10) to implement the security-relevant operation (2) as a function of the authorisation information (6), and - an output facility (11), designed to output a data signal (12), which is indicative of the provided instruction (10) to implement the security-relevant operation (2) and of the stored authorisation information (6'), and an identification facility (15), which is designed to encrypt an identification parameter (16) of the device (1) and to transmit the encrypted identification parameter (16') to the central authority (7), wherein the authorisation information (6) which can be recorded by the recording facility (5) is based on the transmittable encrypted identification parameter (16').

2. Device (1) according to claim 1, wherein the storage facility (8) is designed to adjust the stored authorisation information (6') as a function of the output of the data signal (12).

3. Device (1) according to one of claims 1 and 2, wherein the authorisation information (6) has spatial and / or designated authorisation information for implementation of the security-relevant operation (2) wherein the instruction facility (9) is designed to provide the instruction (10) in agreement with the spatial and / or designated authorisation information.

4. Device (1) according to one of claims 2 to 3, wherein the output facility (11) is designed to remove at least one unit of a cryptocurrency from the storage facility (8) when data from the stored authorisation information (6') is output.

5. Device (1) according to one of the preceding claims, wherein the authorisation information (6) comprises executable smart contracts.

6. Device (1) according to one of the preceding claims, wherein the output facility (11) is designed to output the data signal (12) to a control device (13) of an electronic signal box (14) of the rail traffic (3).

7. Device (1) according to one of the preceding claims, further having a first storage facility (17), which is designed to store an outlay (18) with the central authority (7) as a function of the recorded authorisation information (6) .

8. Central authority (7) for authorisation of a device (1) for controlled implementation of a security-relevant operation (2) in rail traffic (3), wherein the central authority (7) has: - a first receive facility (19), which is designed to receive an encrypted identification parameter (16') of a device (1), - a decryption facility (20) for decrypting the encrypted identification parameter (16') of the device (1), - an allocation facility (21), which is designed to assign authorisation information (6) to the decrypted identification parameter (16) of the device (1), and - a transmission facility (22), which is designed to transmit the authorisation information (6) assigned to the identification parameter (16) to the associated device (1).

9. Central authority (7) according to claim 8, further having a publication facility (23), by means of which an identification key (24) of the central authority (7) can be made publicly accessible.

10. Central authority (7) according to one of claims 8 and 9, which is designed to store the decrypted identification parameter (16) in a distributed database (25).

11. Central authority (7) according to claim 10, which is designed to revoke the storage of the decrypted identification parameter (16) in the distributed database (25).

12. Network node (26) of a data network (4), which is designed to receive data signals (12) of a device (1) for the controlled implementation of a security-relevant operation (2) in rail traffic (3) according to one of claims 1 to 7, having: - a second receive facility (27), which is designed to receive the data signal (12) of the device (1), which has a provided instruction (10) to implement the security-relevant operation (2) and data of stored authorisation information (6'), - a test facility (28), which is designed, on the basis of the data signal (12), to test whether the provided instruction (10) to implement the security-relevant operation (2) is permissible, and - a second storage facility (29), which can store the received data signal (12) in a distributed database (25) as a function of the test of the test facility (28).

13. Network node (26) according to claim 12, which is implemented by a control device (13) of an electronic signal box (14).