METHOD FOR CONFIGURING CONTROL SOFTWARE IN A RAIL VEHICLE

Description

[0001] The invention relates to a method for configuring control software in a rail vehicle which is preferably already in operational use.

[0002] The behavior of a rail vehicle is determined by vehicle software or control software. This software is specifically developed for a rail vehicle type and is referred to, tested, and approved as a software release for that specific type.

[0003] The software is installed on the rail vehicle before or during delivery and is an integral part of the rail vehicle upon delivery to a customer.

[0004] Changes or adaptations to the software requested by the customer require cost-intensive redevelopment or additions to the software, followed by renewed testing and approval, including commissioning of the software on the customer's rail vehicle.

[0005] After approval, the correspondingly modified vehicle or control software is "loaded" onto the respective rail vehicle or installed in the corresponding programmable components on site with the assistance of service personnel.

[0006] Depending on the extent of the software change, a so-called non-regression test must be carried out in a suitable test infrastructure after commissioning.

[0007] This process of software change is intensive in terms of time, personnel and costs.

[0008] US 2020 / 0044868 A1 discloses a method for selectively activating and configuring components, in which a manufactured electronic device contains at least one hardware component that is locked or deactivated. An end user of the electronic device uses a computer-based or cloud-based platform to request the activation or update of this hardware component.

[0009] It is therefore the object of the present invention to provide an improved method for adapting or configuring vehicle or control software in a rail vehicle.

[0010] This object is achieved by the features of claim 1 and claim 13. Advantageous further developments are specified in the dependent claims.

[0011] The invention relates to a method for configuring vehicle software or control software in a rail vehicle and to a rail vehicle with control software.

[0012] According to the invention, in addition to basic functions, the software also includes additional functions that can be optionally activated or deactivated and with which customer-specific wishes or a customer-specific requirement profile can be addressed on a vehicle-specific basis.

[0013] The basic functions describe the software components required for the basic operation of the rail vehicle, for example functions, which concern the drive or its control, which concern the brakes or their control, etc.

[0014] The optional functions describe functions that can be selected or influenced according to customer requirements or customer-specific requirements even after delivery of the rail vehicle. This includes, for example, an activatable or deactivatable function. which concerns a "rail vehicle wash" operating mode or enables and addresses this operating mode, which enables or concerns the setting or specification of a maximum speed of the rail vehicle, which enables or concerns the activation of specific performance increases of the rail vehicle, which enables or concerns the activation of a driver assistance system, etc.

[0015] The basic functions and the optional functions are tested, validated and approved in their forms, combinations and functional sequences by the manufacturer or by authorized bodies before implementation in the rail vehicle.

[0016] In this context, it is important that the basic functions and the optional functions are approved on a vehicle type and individual vehicle-specific basis, while the optional functions can also be activated or deactivated on an individual vehicle-specific basis.

[0017] The optional functions are activated or deactivated by individually assigned parameters and, if necessary, their sequence or result is influenced by set parameters.

[0018] These parameters are referred to below as switching parameters and are designed as value parameters or parameter fields.

[0019] A value parameter is used to activate or deactivate an assigned optional function, while a parameter field is used to influence not only the activation or deactivation of an assigned optional function but also its internal process.

[0020] The activated optional function is subject to a predetermined usage period, at the end of which the optional function is deactivated via an associated switching parameter or at the end of which values ​​of an associated optional function are set to predetermined (base) values.

[0021] The software is therefore (re)set to a predetermined or previous state after the end of the usage period.

[0022] In a preferred further development, a start date and / or an end date is assigned to the optional function in order to define the period of use.

[0023] By exclusively assigning a start date, it is possible to use the associated optional function without restrictions, i.e. permanently, from the start date.

[0024] By exclusively assigning an end date, it is possible to use the associated optional function from now until the end date is reached.

[0025] By assigning a start date and an end date, it is possible to use the associated optional function within a predetermined period of time.

[0026] According to the invention, a warning message is displayed to the rail vehicle manufacturer before the end of the usage period to alert him to the impending expiration of the usage period.

[0027] In a preferred further development, the initial display and, if applicable, the repetition frequency of the display of the warning message are specifically set.

[0028] In an advantageous further development, a permanent activation of an optional function is transferred to an original state of the control software, which is preferably stored by the affected rail vehicle in order to maintain safety.

[0029] In an advantageous further development, every time the software is restarted on a control unit or units of the rail vehicle, it is checked whether a warning message is present for an optional function.

[0030] In an advantageous further development, the warning message for an optional function triggers the generation of similar warning messages for other optional functions. This prevents a foreseeable deactivation of an optional function from having undesirable effects on other optional functions or on the entire control software.

[0031] Accordingly, a uniform warning message is created for all optional functions, which is preferably stored as a configuration component of the rail vehicle.

[0032] According to the invention, a list of all optional functions including the associated usage period of a selected rail vehicle can be called up remotely.

[0033] This is done, for example, using a web server or an internet browser.

[0034] According to the invention, the switching parameters are selected or determined by the manufacturer or distributor of the rail vehicle. This enables intelligent fleet management, in which selected rail vehicles are adapted to specific tasks according to customer specifications or a customer-specific requirement profile.

[0035] In an advantageous further development, the switching parameters are defined using software-supported tools that enable, for example, sales staff to select permissible switching parameters for corresponding functions, fill them in as a switching parameter set and save them.

[0036] In an advantageous further development, the switching parameters are saved in the form of a file that can be processed directly by the control units of the rail vehicle.

[0037] In an advantageous further development, the file with the switching parameters is encrypted for each individual vehicle in order to prevent unauthorized manipulation or to prevent duplication of the file.

[0038] In an advantageous further development, the file with the switching parameters is transmitted via a communication channel for implementation in the rail vehicle.

[0039] The transfer is either directed to a service technician who receives the file, for example, via email or cloud-based data transfer, or the file transfer is directed directly to the affected rail vehicle, which receives the file and whose control units then preferably implement the file automatically.

[0040] In a preferred embodiment, the transmission of the file containing the switching parameters is encrypted to prevent tampering, transmission errors, or security attacks. For this purpose, a public-key method is used, for example.

[0041] In a beneficial development, the file containing the switching parameters is temporarily stored on a rail vehicle computer. This serves to document the software's status and provides a fallback level that increases vehicle safety.

[0042] In an advantageous further development, the entire control technology of a rail vehicle in question, which includes several control units for parameterization, is addressed or influenced via the file. Exactly one file with switching parameters is then created for each rail vehicle and applied in the rail vehicle, the contents of which are distributed among the associated control units. This minimizes the necessary handling effort.

[0043] In an advantageous further development, the control units query a central location of the rail vehicle or a land-based control station during restart or boot-up whether new switching parameters are available for the associated rail vehicle.

[0044] In an advantageous further development, this demand is coordinated with the help of a switching manager in order to prevent an uncoordinated activation of the switching parameters in the associated functions or to enable a reliable activation or deactivation of the optional functions with regard to time sequences.

[0045] In a preferred development, the switching manager uses a method to create fingerprints of a currently used switching parameter set and a newly received switching parameter set.

[0046] For example, a "Message Digest Algorithm 5, MD5" method or a CRC method can be used to create the fingerprints, with which a switching parameter set can be uniquely identified in terms of content.

[0047] The fingerprints are transmitted to the central station along with an associated receipt date. This station then selects the valid switching parameter set with the same fingerprint across all control units and the most recent receipt date, and transmits the decision to the rail vehicle control unit or to the associated control units.

[0048] In a preferred further development, the activation or deactivation of the optional function takes place in a safe state of the rail vehicle, preferably at a standstill and / or in a predefined vehicle environment.

[0049] When the control units are restarted, the new switching parameter set is loaded in order to make the configured range of functions available to the vehicle or control software.

[0050] In a preferred training course, a train driver of the rail vehicle receives a message that the functionality of the software has been changed or configured.

[0051] Preferably, the train driver is granted a right of veto so that he can accept or reject the software configuration.

[0052] A rejection decision is preferably obtained once and then evaluated as a permanent rejection, i.e. a rejection decision remains in effect even after a future restart of the control units.

[0053] Alternatively, the driver's decision is queried again each time the vehicle's control units are restarted.

[0054] In a preferred further development, a train driver of the rail vehicle is shown a list of the activated optional functions and the associated parameters on a display.

[0055] The train driver cannot influence the optional functions set. This task is primarily the responsibility of fleet management.

[0056] In a preferred further development, a previous switching parameter set remains valid or active if not all control units uniformly adopt the new switching parameter set.

[0057] In a preferred further development, when a control unit is replaced or when a control unit is de-grouped, a restart of the control units of the control system is initialized in order to ensure that the currently valid switching parameters are adopted.

[0058] The method according to the invention enables the sales department, the manufacturer or the fleet management of a rail vehicle to subsequently activate functions requested or required by the customer in vehicles that have already been delivered, without having to involve technical departments.

[0059] The method according to the invention enables the sales department, the manufacturer or the fleet management of a rail vehicle to subsequently configure the control software for vehicles already delivered within a predetermined framework and in a fast and responsive manner.

[0060] The method according to the invention makes it possible to carry out or enable the software configuration either by on-site service personnel or by using remote data transmission.

[0061] The method according to the invention enables the software configuration to be carried out reliably from both a functional and a security perspective.

[0062] The method according to the invention allows for a much faster response to customer requests by setting predefined parameters in functions or by activating already approved functions.

[0063] The method according to the invention reduces costs because software configuration can be carried out directly, i.e. without the involvement of subsequent engineering services, as well as without subsequent validation of the software or without re-approval of the software.

[0064] The method according to the invention at least reduces or completely avoids the previously necessary non-regression tests in a test infrastructure required for this purpose.

[0065] The invention is explained in more detail below using an example drawing. It shows: FIG 1 a self-explanatory representation of a software configuration created by the sales department and its implementation by a vehicle or rail vehicle according to the present invention. FIG 2 a self-explanatory representation of the interaction between customers, sales and vehicle or rail vehicle according to the present invention. FIG 3 a self-explanatory embodiment of an activation or deactivation of an optional function according to the present invention. FIG 4 shows an overall view of the present invention using a flowchart.

[0066] In a first step (S1), basic functions required for basic operation of the rail vehicles are implemented in control software designed for a variety of rail vehicles. Optional functions required to implement customer-specific requirements are implemented in the control software.

[0067] In a second step S2, the basic functions and the optional functions in their forms, combinations and functional sequences are tested, validated and approved by the manufacturer or by authorized bodies before the control software is implemented in the rail vehicles.

[0068] In a third step S3, the basic functions and the optional functions are implemented as control software in the rail vehicles.

[0069] In a fourth step S4, at least one optional function is activated or deactivated in a selected rail vehicle using a switching parameter that is individually assigned to the optional function.

[0070] The required switching parameter is created outside the rail vehicle based on customer requirements and subsequently transferred to the selected rail vehicle.

[0071] The activated optional function is assigned a predetermined usage period.

[0072] The optional function is activated or deactivated on a rail vehicle that is in operational use.

[0073] The switching parameters are defined using software-supported tools that only allow a permissible switching parameter selection for corresponding functions.

[0074] The switching parameters are saved individually or in the form of a file that can be directly processed by control units of the selected rail vehicle.

[0075] The switching parameters are encrypted so that decryption can only be carried out by the selected rail vehicle.

[0076] The switching parameters are transmitted via a communication channel to a service technician who updates the control software in the selected rail vehicle, or are transmitted directly to the selected rail vehicle, with its control units automatically implementing them in the control software.

[0077] During commissioning, the control units of the rail vehicle query a central location on the rail vehicle or a land-based control station as to whether new switching parameters are available for the associated rail vehicle.

[0078] The demand is coordinated using a switching manager to enable coordinated activation or deactivation of optional functions or the switching parameters in associated optional functions.

[0079] The optional function is activated or deactivated when the rail vehicle is in a safe state, preferably when stationary or in a predefined vehicle environment.

[0080] The driver of the rail vehicle is granted a right of veto to reject a control software configuration with regard to the optional function.

[0081] A permanent activation of an optional function is transferred to an original state of the control software, which is stored on the rail vehicle to protect it.

[0082] A rail vehicle operator, a rail vehicle fleet manager or a rail vehicle manufacturer will be shown a warning message before the end of the usage period to alert them to the impending expiry of the usage period.

[0083] The warning message of an optional function causes the creation of similar warning messages for other optional functions.

Claims

1. Method for configuring control software in a rail vehicle, - in which basic functions which are needed for the basic operation of the rail vehicles are implemented in control software intended for a multiplicity of rail vehicles, - in which optional functions which are needed to implement a multiplicity of customer-specific requirements profiles are implemented in the control software, - in which the embodiments, combinations and functional sequences of the basic functions and the optional functions are tested, validated and approved before the control software is implemented in the rail vehicles, - in which the basic functions and the optional functions are subsequently implemented as control software in the rail vehicles, - in which, in a selected rail vehicle, at least one optional function is activated and / or deactivated using a switching parameter individually assigned to the optional function, - in which the switching parameter required for this purpose is created outside the rail vehicle on the basis of a special customer-specific requirements profile and is subsequently transmitted to the selected rail vehicle, - the content of assigned switching parameters being selected and determined by the manufacturer of the rail vehicle in order to enable fleet management in which selected rail vehicles are adapted to specific tasks according to the specification of the customer-specific requirements profile, - in which the activated optional function is assigned a predetermined period of use, - in which a list of all optional functions along with the associated period of use of the selected rail vehicle is retrieved by remote control using a web server, - in which a warning is displayed to the rail vehicle manufacturer before the period of use has expired to notify them of the imminent expiry of the period of use of an optional function, - in which the warning pertaining to an optional function causes similar warnings to be generated for other optional functions to prevent foreseeable deactivation of the optional function from having undesirable effects on other optional functions.

2. Method according to Claim 1, in which the optional function is activated and / or deactivated in a rail vehicle which is in operation.

3. Method according to Claim 1 or 2, in which the switching parameter is determined using software-supported tools which allow only a permissible switching parameter selection for corresponding functions.

4. Method according to one of the preceding claims, in which switching parameters are stored individually or in the form of a file which can be directly processed by control devices of the selected rail vehicle.

5. Method according to Claim 4, in which switching parameters are encrypted, with the result that decryption can be carried out solely by the selected rail vehicle.

6. Method according to one of the preceding claims, in which switching parameters are transmitted via a communication channel - and via an interface to a service engineer who updates the control software in the selected rail vehicle, or - are transmitted directly to the selected rail vehicle, the control devices thereof automatically implementing said switching parameters in the control software.

7. Method according to one of the preceding claims, in which control devices of the rail vehicle, during start-up, inquire, at a central entity of the rail vehicle or at a landside control station, whether there are new switching parameters for the associated rail vehicle.

8. Method according to Claim 7, in which the inquiry is coordinated with the aid of a changeover manager in order to enable coordinated activation and / or deactivation of optional functions or of the switching parameters in associated optional functions.

9. Method according to one of the preceding claims, in which the optional function is activated and / or deactivated in a safe state of the rail vehicle, preferably at a standstill or in a predefined vehicle environment.

10. Method according to one of the preceding claims, in which a veto right is granted to a traction vehicle driver of the rail vehicle in order to reject a control software configuration with respect to the optional function.

11. Method according to one of the preceding claims, in which permanent activation of an optional function is transferred to an original state of the control software, said permanent activation being stored on the rail vehicle to ensure the safety thereof.

12. Method according to Claim 1, in which the warning pertaining to an optional function causes similar warnings to be generated for other optional functions.

13. Rail vehicle having control software, - in which the control software intended for a multiplicity of rail vehicles has basic functions which are intended for the basic operation of the rail vehicle, - in which the control software has optional functions which are intended to implement a multiplicity of customer-specific requirements profiles, - the embodiments, combinations and functional sequences of the basic functions and the optional functions having been tested, validated and approved before the control software is implemented in the rail vehicle, - in which at least one optional function can be activated and / or deactivated using a switching parameter individually assigned to the optional function, - in which the switching parameter required for this purpose can be created outside the rail vehicle on the basis of a special customer-specific requirements profile and can subsequently be transmitted to the selected rail vehicle for the purpose of configuring the control software, - the content of assigned switching parameters having been selected and determined by the manufacturer of the rail vehicle in order to enable fleet management in which selected rail vehicles can be adapted to specific tasks according to the specification of the customer-specific requirements profile, - in which the activated optional function has an assigned predetermined period of use, - in which a list of all optional functions along with the associated period of use of the selected rail vehicle can be retrieved by remote control using a web server, - in which a warning can be displayed to the rail vehicle manufacturer before the period of use has expired to notify them of the imminent expiry of the period of use of an optional function, - in which the warning pertaining to an optional function causes similar warnings to be generated for other optional functions to prevent foreseeable deactivation of the optional function from having undesirable effects on other optional functions.

14. Rail vehicle according to Claim 13, in which the optional function can be activated and / or deactivated in a rail vehicle which is in operation.

15. Rail vehicle according to Claim 13 or 14, in which the switching parameter can be determined using software-supported tools which allow only a permissible switching parameter selection for corresponding functions.

16. Rail vehicle according to one of Claims 13 to 15, in which switching parameters are stored individually or in the form of a file which can be directly processed by control devices of the selected rail vehicle.

17. Rail vehicle according to Claim 16, in which switching parameters are encrypted, with the result that decryption can be carried out solely by the selected rail vehicle.

18. Rail vehicle according to one of Claims 13 to 17, in which switching parameters can be transmitted via a communication channel - and via an interface to a service engineer who updates the control software in the selected rail vehicle, or - can be transmitted directly to the selected rail vehicle, the control devices thereof automatically implementing said switching parameters in the control software.

19. Rail vehicle according to one of Claims 13 to 18, in which control devices of the rail vehicle are switched during start-up in such a manner that they inquire, at a central entity of the rail vehicle or at a landside control station, whether there are new switching parameters for the associated rail vehicle.

20. Rail vehicle according to one of Claims 13 to 19, in which permanent activation of an optional function can be transferred to an original state of the control software and is stored on the rail vehicle to ensure the safety thereof.