Device for controlling a traffic system, adjustable element of a traffic system, and traffic system

Abstract

The invention relates to a device for controlling a traffic system. This device has a computing unit, a first communication terminal and a second communication terminal. The device is configured to set up, via the first communication terminal, a first connection to a further device for controlling the traffic system. The device is also configured to set up, via the second communication terminal, a second connection to an adjustable element of the traffic system. The computing unit is configured to calculate adjustment information for the adjustable element. The device is configured to use system information to decide whether the device is allowed to forward the adjustment information to the adjustable element and, if so, to output the adjustment information via the second communication terminal and the second connection. The system information is connection information which is output by the adjustable elements and is transmitted, via the second connection, to the devices for controlling the traffic system. The device is also configured to synchronize the adjustment information with the further device for controlling the traffic system via the first communication terminal and the first connection. The device may also be configured to check the first connection for a fault and, if a fault is detected in the first connection, to set up an alternative connection to the further device for controlling the traffic system via the adjustable element.

Description

[0001] Description

[0002] Device for controlling a traffic system, adjustable element of a traffic system, traffic system

[0003] The invention relates to a device for controlling a traffic system, a method for operating a device for controlling a traffic system, an adjustable element of a traffic system, a method for operating an adjustable element of a traffic system and a traffic system.

[0004] Traffic systems are systems in which traffic on a traffic route can be influenced by means of adjustable elements. Traffic routes can in particular include roads and railways, and possibly also waterways. Traffic on rails can be influenced, for example, by setting signals, switches and track locks as adjustable elements. Traffic on roads can be influenced, for example, by setting traffic lights, barriers and variable message signs as adjustable elements. Traffic on waterways can be influenced, for example, by setting passage signals as adjustable elements and controlling locks as adjustable elements. Devices for controlling the traffic system are known for all traffic systems; for roads, for example, these are called traffic control centers and for rails, for example, signal boxes.These can each be individually responsible for specific sections of the traffic route. For redundancy reasons, however, it can also be provided that several such devices for controlling a traffic system work redundantly and are synchronized with one another. The redundantly working devices for controlling the traffic system calculate control information for the controllable elements of the traffic system. In doing so, it must be checked whether the control information calculated by all devices for controlling the traffic system for the controllable elements is identical, or whether the individual devices for controlling the traffic system have calculated contradictory control information. For this purpose, a wired or wireless communication line is usually provided between the devices for controlling the traffic system, via which communication line the devices for controlling the traffic system can exchange data and in particular the control information.During operation, communication lines between traffic system control devices may be interrupted and / or traffic system control devices may fail. In these cases, it can be challenging to determine which of the traffic system control devices should output the control signals to the controllable elements.

[0005] The invention is based on the object of providing an improved device for controlling a traffic system which can make decisions regarding control sovereignty. A further object of the invention is to provide an improved adjustable element which can be used together with the improved device for controlling a traffic system in decision-making regarding control sovereignty. A further object of the invention is to specify an operating method for a device for controlling the traffic system. Furthermore, it is an object of the invention to specify an operating method for an adjustable element. A further object of the invention is to specify an improved traffic system.

[0006] These objects are achieved by the subject matter of the independent patent claims. Advantageous further developments are specified in the dependent claims.

[0007] The invention relates to a device for controlling a traffic system. This device has a computing unit, a first communication port and a second communication port. The device is set up to establish a first connection to a further device for controlling the traffic system via the first communication port. Furthermore, the device is set up to establish a second connection to at least one adjustable element of the traffic system via the second communication port. The computing unit is set up to calculate adjustment information for the adjustable element. The device is set up to output the adjustment information via the second communication port and the second connection. The device is set up to synchronize the adjustment information with the further device for controlling the traffic system via the first communication port and the first connection.The device is configured to make a decision based on system information as to whether the device may transmit the control information to the controllable element. In this case, the device is configured to output the control information via the second communication port and the second connection.

[0008] The system information can include which of the other devices are available for controlling the traffic system. In general, the system information can, for example, include a network topology of the traffic system, i.e., it can include which devices for controlling the traffic system and which controllable elements are currently available. Based on this system information, a decision can then be made as to which of the devices for controlling the traffic system should have control over certain controllable elements, and this device can then output the corresponding control information.

[0009] The devices for controlling the traffic system can be, for example, signal boxes for a railway or traffic control centers for a road. The controllable elements can be signals, switches, and track locks for the railway, or traffic lights, barriers, and variable-message signs for the road.

[0010] In one embodiment of the device, it is set up to receive network information as system information via the second communication port from the adjustable element. The network information can also include, in particular, which further devices for controlling the traffic system and which adjustable units are connected to the device according to the invention. In particular, the network information can contain a network topology. The network information can further include connection information, wherein the connection information indicates which devices for controlling a traffic system an adjustable element is connected to. The devices for controlling the traffic system can then, for example, be set up to decide, based on the connection information, which of the devices for controlling the traffic system are allowed to issue control commands to the adjustable element(s).

[0011] The network information can, in particular, contain the devices for controlling the traffic system to which the controllable element is connected, and can then be referred to as connection information. Furthermore, the network information can contain a network topology. Based on the connections of the controllable element or the network topology, the device for controlling the traffic system can make a well-founded decision as to which of the controllable elements may be controlled.

[0012] In particular, all devices included in the traffic system for controlling the traffic system can be configured to both output network information and receive network information from all other devices for controlling the traffic system. Such output of the network information can, in particular, be made to all controllable elements connected to the device. This network information can then be forwarded by all controllable elements to all devices connected to the controllable element.

[0013] The device can be configured to receive additional network information as additional system information from another controllable element and to make the decision based on the network information and the additional network information. Alternatively, the controllable elements can generate the network information by checking which traffic system control devices they are connected to.

[0014] In one embodiment of the device, the system information is a synchronization signal received via the first communication port and the first connection. In particular, it can be provided that the devices for controlling the traffic system check information about an existing connection among themselves using synchronization signals and use this as system information when deciding which of the devices for controlling the traffic system should control the adjustable element.

[0015] In one embodiment of the device, it is set up to check the first connection for an error and, in the event that an error is detected in the first connection, to establish an alternative connection to the further device for controlling the traffic system via the adjustable element.

[0016] Because the device is configured to establish the alternative connection via the adjustable element, an interrupted first communication connection can be compensated. The synchronization of the device for controlling the traffic system and the further device for controlling the traffic system can then take place via the alternative connection. This provides a more robust traffic system, since improved system information is available to the devices for controlling the traffic system.

[0017] In one embodiment of the device, it is configured to issue a request to establish the alternative connection to the controllable element via the second communication port. Thus, the alternative connection is established upon request of the device for controlling the traffic system. This enables efficient implementation of the method.

[0018] In one embodiment of the device, it is further configured, if an error is detected in the first connection, to decide on the basis of the output network information and / or the received network information whether calculation of the setting information is stopped or continued. This can be done in particular on the basis of the network topology. If, for example, two devices for controlling the traffic system are still connected via a first communication connection and a further device for controlling the traffic system is no longer connected to these two devices for controlling the traffic system, this further device for controlling the traffic system can use this information and stop calculating the setting information, since synchronization may be more difficult.Alternatively, if there is a stable alternative connection via which the synchronization can take place, it can also be provided to continue the calculation of the control information and to synchronize it via the alternative connection.

[0019] In one embodiment of the device, it is designed to synchronize the control information with the further device for controlling the traffic system via the alternative connection.

[0020] In one embodiment of the device, it is further configured to output network information to the controllable element via the second communication port. The network information may, in particular, include which further devices for controlling the traffic system and which controllable units are connected to the device according to the invention. In particular, the network information may include a network topology.

[0021] In one embodiment of the device, it is further configured to output connection information to the adjustable element via the second communication port. This may, if necessary, enable another device for controlling the traffic system to use this connection information as system information.

[0022] In one embodiment of the device, it is further configured to decide, based on the output connection information and / or the received network information, whether a calculation of the setting information is stopped or continued.

[0023] In one embodiment of the device, the computing unit includes at least two processor cores. In particular, at least three processor cores can be provided. The computing unit is configured to calculate the control information independently of one another using the processor cores. The device for controlling the traffic system is configured to output error information via the first communication port and / or the second communication port if the control information calculated using different processor cores differs from one another. This can, for example, achieve an SIL-4 result and provide reliable control information. If the error information is output, other devices for controlling the traffic system can infer from this that the device for controlling the traffic system which output the error information is currently operating inadequately.The setting information of this device can then be neglected during synchronization if necessary.

[0024] In one embodiment of the device, it is set up to receive error information from another device for controlling the traffic system via the first communication port and / or the second communication port. This makes it possible to draw conclusions as to which devices for controlling the traffic system are working inadequately. The control information from these devices can then be neglected during synchronization if necessary. In one embodiment of the device, it is set up to decide, based on the output error information and / or the received error information, whether calculation of the control information is stopped or continued. This also makes it possible to draw conclusions as to which devices for controlling the traffic system are working inadequately. The control information from these devices can then be neglected during synchronization if necessary.

[0025] The device for controlling the traffic system can further be configured to use the information available in the traffic system, for example the connection information and / or the network information, to decide which adjustable elements only this device for controlling the traffic system has access to and then assume control of this adjustable element. Furthermore, the device for controlling the traffic system can be configured to control those adjustable elements that are still connected to it in such a way that safe operation is possible independently of the adjustable elements that are no longer connected.

[0026] The invention also relates to a method for operating a device for controlling a traffic system. The device includes a computing unit, a first communications port, and a second communications port. The method comprises the steps explained below. A first connection is established to a further device for controlling the traffic system via the first communications port. Furthermore, a second connection is established to at least one adjustable element of the traffic system via the second communications port. These method steps can be carried out simultaneously or sequentially in any order. Furthermore, adjustment information for the adjustable element is calculated by means of the computing unit. Furthermore, the adjustment information is synchronized with the further device for controlling the traffic system via the first communications port and the first connection.A decision is then made based on system information as to whether the device may pass the control information on to the controllable element and, in this case, the control information is output via the second communication port and the second connection.

[0027] The method may include checking the first connection for an error. If an error is detected in the first connection, an alternative connection to the further device for controlling the traffic system can be established via the adjustable element.

[0028] In one embodiment of the method for operating a device for controlling a traffic system, a request to establish the alternative connection is issued to the controllable element via the second communication port.

[0029] In one embodiment of the method for operating a device for controlling a traffic system, the control information is synchronized with the further device for controlling the traffic system via the alternative connection.

[0030] In one embodiment of the method for operating a device for controlling a traffic system, network information is received from the controllable element via the second communication port.

[0031] In one embodiment of the method for operating a device for controlling a traffic system, connection information is output to the adjustable element via the second communication port.

[0032] In one embodiment of the method for operating a device for controlling a traffic system, if an error is detected in the first connection, a decision is made on the basis of the output connection information and / or the received network information as to whether a calculation of the control information is stopped or continued.

[0033] In one embodiment of the method for operating a device for controlling a traffic system, the computing unit includes at least two, in particular three, processor cores. The computing unit calculates the control information using the processor cores independently of one another. If the control information calculated using different processor cores differs from one another, error information is output via the first communication port and / or the second communication port.

[0034] In one embodiment of the method for operating a device for controlling a traffic system, error information is received from another device for controlling the traffic system via the first communication port and / or the second communication port.

[0035] In one embodiment of the method for operating a device for controlling a traffic system, a decision is made on the basis of the output error information and / or the received error information as to whether a calculation of the control information is stopped or continued.

[0036] The method for operating a device for controlling the traffic system can further be designed such that, based on the system information available in the traffic system, for example the connection information and / or the network information, a decision is made as to which adjustable elements only this device for controlling the traffic system has access to. The device for controlling the traffic system can then take over control of this adjustable element. Furthermore, the method for operating a device for controlling the traffic system can be designed such that those adjustable elements that are still connected to the device for controlling the traffic system are controlled in such a way that safe operation is possible independently of the adjustable elements that are no longer connected.

[0037] The invention also relates to an adjustable element of a traffic system. This element has a controller and a plurality of control connections. The control connections can be connected to devices for controlling a traffic system. The adjustable element is designed to receive control information via the control connections and to process it by means of the controller. In addition, the adjustable element is further designed to output system information to a device for controlling the traffic system.

[0038] It can be provided that the controllable element generates the system information itself and outputs it to all devices connected to the controllable element for controlling the traffic system. The system information can be determined using a secure method in accordance with S IL-4.

[0039] In one embodiment, the controllable element is configured to maintain a list of the respectively connected devices for controlling the traffic system.

[0040] In one embodiment, the device for controlling the traffic system is configured to use this list to decide whether this device may provide control information to the controllable element.

[0041] In one embodiment, the controllable element is configured to use this list to decide which of the traffic system control devices the controllable element should control and to output this information as system information. In this case, for example, the controllable element itself can decide from which of the traffic system control devices control information should be accepted. In one embodiment, the controllable element is configured to output the list of the respectively connected devices as network information.

[0042] In one embodiment, the adjustable element is configured to receive the system information from another device for controlling the traffic system and to output it to the device 110 for controlling the traffic system.

[0043] In one embodiment, the adjustable element is further configured to establish an alternative connection between at least two devices for controlling the traffic system. Because the adjustable element is configured to establish the alternative connection, the advantages explained in connection with the device for controlling a traffic system can be implemented by means of the adjustable element.

[0044] The adjustable element, or in particular the control of the adjustable element, can have two or more processor cores and thus also provide safe operation with, for example, an S IL-4 result.

[0045] In one embodiment of the adjustable element, it is configured to establish the alternative connection upon request from at least one device for controlling the traffic system. Provision can be made for the alternative connection to be established only if this should become necessary due to a fault in one of the first communication connections. This check can be performed by the devices for controlling the traffic system.

[0046] In one embodiment of the adjustable element, it is further configured to receive network information from a device for controlling the traffic system and to output it to another device for controlling the traffic system. This allows network information to be passed on via the adjustable elements. In one embodiment of the adjustable element, it is further configured to determine connection information, wherein the connection information contains the devices for controlling the traffic system to which the adjustable element is connected, and the adjustable element is configured to output the connection information to the devices for controlling the traffic system.The adjustable element can, for example, be configured to output the connection information to a device for controlling the traffic system whenever the adjustable element detects that a connection has been established to a previously unconnected device for controlling the traffic system. Furthermore, the adjustable element can be configured to establish the connections to the devices for controlling the traffic system individually and to transmit the connection information in each case.

[0047] The invention further relates to a method for operating an adjustable element. The adjustable element has a controller and a plurality of control connections. The control connections are connected to devices for controlling a traffic system. Control information is received via the control connections and processed by the controller. The adjustable element outputs system information to a device for controlling the traffic system. The system information can be generated by the adjustable element or transmitted to the adjustable element by another device for controlling the traffic system.

[0048] In one embodiment of the method for operating an adjustable element, an alternative connection is established between at least two devices for controlling the traffic system.

[0049] In one embodiment of the method for operating an adjustable element, the alternative connection is established upon request of at least one device for controlling the traffic system.

[0050] In one embodiment of the method for operating an adjustable element, network information is received from a device for controlling the traffic system and output to another device for controlling the traffic system.

[0051] In one embodiment of the method for operating an adjustable element, connection information is determined, the connection information containing the devices for controlling the traffic system to which the adjustable element is connected. The connection information is output to the devices for controlling the traffic system. The connection information can, for example, always be output to a device for controlling the traffic system when the adjustable element detects that a connection has been established to a previously unconnected device for controlling the traffic system. Furthermore, the adjustable element can set up the connections to the devices for controlling the traffic system individually and, in doing so, transmit the connection information in each case.

[0052] The invention further relates to a traffic system with at least two devices according to the invention for controlling a traffic system and at least one adjustable element according to the invention. Significantly more adjustable elements and even more than two devices for controlling a traffic system can also be provided.

[0053] It can be provided that the devices according to the invention for controlling a traffic system and the adjustable element are safe systems within the meaning of EN 50159, whereby the connections do not necessarily have to be designed as safe systems. Furthermore, it can be provided that all devices for controlling a traffic system and all adjustable elements are assigned unique identification numbers, which they can each transmit.

[0054] Using the methods and procedures described, it is possible to achieve a traffic system in which each device for controlling a traffic system and each controllable element maintains a list of the respectively connected systems, and on the basis of this list it can be decided which device for controlling a traffic system controls which controllable element. This can, for example, be based on the device for controlling a traffic system with which a controllable element has been permanently connected for the longest time. Alternatively, the controllable elements can be set up to select, for example on the basis of the connection information and / or the network information, which of the devices for controlling the traffic system may control the respective controllable element.Alternatively, the devices for controlling the traffic system can be set up to decide among themselves which of the devices is allowed to control which of the controllable elements and to make a corresponding token available to this device. This can be done, for example, in such a way that each device for controlling the traffic system determines a control priority for each controllable element connected to it, each controllable element receives the control priority of all devices for controlling the traffic system connected to it and informs the device for controlling the traffic system with the highest control priority accordingly. The control priority can be influenced in that related and interacting controllable elements receive a higher control priority if they are directly connected to one of the devices for controlling the traffic system.

[0055] The above-described properties, features, and advantages of this invention, as well as the manner in which they are achieved, will become clearer and more readily understood through the explanations of the following, highly simplified, schematic representations of preferred embodiments. Each schematic representation shows:

[0056] FIG 1 a transport system;

[0057] FIG 2 shows the traffic system of FIG 1 in the event of a communication link failure;

[0058] FIG 3 another transport system; and

[0059] FIG 4 shows the further traffic system of FIG 3 in the event of failure of a communication connection and a device for controlling the traffic system.

[0060] FIG 1 shows a traffic system 100. The traffic system 100 has a device 110 for controlling a traffic system 100, wherein the device 110 for controlling the traffic system 100 has a computing unit 111, a first communication port 112 and three second communication ports 113. A different number of first communication ports 112 and second communication ports 113 can also be provided. The device 110 is set up to establish a first connection 121 to a further device 130 for controlling the traffic system 100 via the first communication port 112. The further device 130 for controlling the traffic system 100 has a further computing unit 131, a further first communication port 132 and three further second communication ports 133. A different number of further second communication ports 133 can also be provided.The further device 130 can further be configured to establish a further first connection 121 to the device 110 for controlling the traffic system 100 via the further first communication port 132.

[0061] The device 110 for controlling the traffic system 100 is configured to establish a second connection 122 to a respective adjustable element 160 of the traffic system 100 via the second communication ports 113. The computing unit 111 is configured to calculate adjustment information for the adjustable elements 160. The device 110 is configured to output the adjustment information to the respective adjustable elements 160 via the second communication ports 113 and the second connections 122. At the same time, the further device 130 for controlling the traffic system 100 is also configured to establish a further second connection 142 to a respective adjustable element 160 of the traffic system 100 via the further second communication ports 133. The further computing unit 131 is configured to calculate setting information for the adjustable elements 160.The further device 130 is configured to output the setting information to the respective adjustable elements 160 via the further second communication ports 133 and the second connections 142.

[0062] The device 110 for controlling the traffic system 100 is further configured to synchronize the control information with the further device 130 for controlling the traffic system 100 via the first communication port 112 and the first connection 121. The further device 130 for controlling the traffic system 100 is further configured to synchronize the control information with the device 110 for controlling the traffic system 100 via the further first communication port 132 and the further first connection 141.

[0063] The device 110 for controlling the traffic system 100 can be set up to check the first connection 121 for an error. If no error is detected in the first connection, the synchronization of the device 110 for controlling the traffic system 100 and the further device 130 for controlling the traffic system 100 can take place via the first connection 121. It can also be provided that the further device 130 for controlling the traffic system 100 is set up to check the further first connection 141 for an error. If no error is detected in the further first connection 141, the synchronization of the further device 130 and the device 110 can take place via the further first connection 141.

[0064] Additionally or alternatively, the device 110 can be configured to make a decision on the basis of system information as to whether the device 110 may forward the setting information to the adjustable element 160. In this case, the device 110 is configured to output the setting information via the second communication port 113 and the second connection 122. The system information can be, for example, connection information and / or network information. In particular, the system information can be network information received via the second communication port (113) and the second connection (122). The network information can in particular contain which of the devices for controlling the traffic system the adjustable element is connected to and can then be referred to as connection information. Furthermore, the network information can contain a network topology.Based on the connections of the adjustable element or the network topology, the device for controlling the traffic system can make a well-founded decision as to which of the adjustable elements may be set.

[0065] In particular, the system information may also be a synchronization signal received via the first communication port 112 and the first connection 121.

[0066] The first connection 121 and the further first connection can be identical, as indicated in FIG 1, and can be, for example, a wired or a wireless connection between the device 110 and the further device 130.

[0067] FIG. 2 shows the traffic system 100 in the event that an error is detected in the first connection 121. This is indicated in FIG. 2 as a lightning symbol on the first connection 121. For this case, the device 110 for controlling the traffic system 100 is configured to establish an alternative connection 123 to the further device 130 for controlling the traffic system 100 via one of the adjustable elements 160. To establish the alternative connection 123, one of the adjustable elements 160 can be selected (or if only one adjustable element 160 is present, this can be used), and then the alternative connection 123 can be established via the second connection 122 between the device 110 for controlling the traffic system 100 and the stellar element 160 and the further second connection 142 between the adjustable element 160 and the further device 130 for controlling the traffic system 100.Thus, synchronization between the device 110 for controlling the traffic system 100 and the further device 130 for controlling the traffic system 100 is still possible via the alternative connection despite the failure of the first connection 121.

[0068] Because the device 110 for controlling the traffic system 100 is configured to establish the alternative connection 123 via the adjustable element 160, an interrupted first communication connection 121 can be compensated. The synchronization of the device 110 for controlling the traffic system 100 and the further device 130 for controlling the traffic system 100 can then take place via the alternative connection 123. This provides a more robust traffic system 100.

[0069] The devices 110, 130 for controlling the traffic system 100 can, for example, be signal boxes 101 for a railway line, as shown in FIGS. 1 and 2. The adjustable elements 160 can be signals 163, switches 164 and track barriers 165 for the railway line, as shown in FIGS. 1 and 2. In FIGS. 1 and 2, the alternative connection 123 is set up using a signal 163 as an example; however, a setup using switches 164 and track barriers 165 is also conceivable. It can be provided that the signal boxes 101 are spatially separated from one another and it can be provided that the railway line and thus the traffic system 100 comprises more than one signal 163, one switch 164 and one track barrier 165 each. Furthermore, other adjustable elements 160 can also be provided for the railway line.

[0070] The device 110 for controlling the traffic system 100 can be operated with an operating method comprising the following steps:

[0071] - Establishing the first 121 connection to a further device 130 for controlling the traffic system 100 via the first communication port 112;

[0072] - Establishing the second connection 122 to at least one adjustable element 160 of the traffic system 100 via the second communication port 113;

[0073] - Calculating setting information for the adjustable element by means of 160 the computing unit 111;

[0074] - Synchronizing the control information with the further device 130 for controlling the traffic system 100 via the first communication port 112 and the first connection 121;

[0075] - Making a decision based on system information as to whether the device 110 may forward the setting information to the adjustable element 160 and outputting the setting information via the second communication port 113 and the second connection 122 in this case.

[0076] Furthermore, the method can optionally comprise checking the first connection 121 for an error and, in the event that an error is detected in the first connection 121, establishing an alternative connection 123 to the further device 130 for controlling the traffic system 100 via the adjustable element 160.

[0077] The adjustable elements 160 of the traffic system 100 of FIGS. 1 and 2 each have a controller 161 and a plurality of control connections 162. The control connections 162 can be connected to devices 110, 130 for controlling the traffic system 100, or are connected to these in FIGS. 1 and 2. The adjustable element 160 is set up to receive control information via the control connections 162 and to process it by means of the controller 161. The adjustable element 160 is further set up to maintain a list of the respectively connected devices 110, 130 for controlling the traffic system 100 and to output this information as system information.The adjustable element 160 can additionally be configured to use this list to decide which of the devices 110, 130 for controlling the traffic system 100 the adjustable element 160 should control and, if necessary, to output this information to the relevant device 110, 130 for controlling the traffic system 100.

[0078] Furthermore, the adjustable element 160 can be configured to establish an alternative connection 123 between the two devices 110, 130 for controlling the traffic system 100. The adjustable element 160 can be operated such that adjustment information is received via the adjustment connections 162 and processed by the controller 161. Furthermore, system information can be output to the devices 110, 130 for controlling the traffic system 100. In the case of the interrupted first connection 121 in FIG. 2, the alternative connection 123 can also be established between at least two devices 110, 130 for controlling the traffic system 100, if necessary.

[0079] Furthermore, optional embodiments can be implemented in the traffic system 100 of FIGS. 1 and 2, which are explained below. These configurations can each be provided individually, but can also be combined with one another.

[0080] Alternatively or additionally, the adjustable element 160 can further be configured to receive the system information from the further device 130 for controlling the traffic system 100 and to output it to the device 110 for controlling the traffic system 100.

[0081] It can be provided that all signals or information transmitted via the first connection 121 and / or the second connection 122 and / or the further first connection 141 and / or the further second connection 142 and thus possibly also via the alternative connection 123 are provided with a signature. This makes it possible to prove the legitimacy of the signal or information in the event that the first connection 121 and / or the second connection 122 and / or the further first connection 141 and / or the further second connection 142 can also be accessed from outside the transport system 100, for example in the case of wireless transmission or transmission on the Internet.If the first connection 121 and / or the second connection 122 and / or the further first connection 141 and / or the further second connection 142 cannot be accessed from outside, the signing can be omitted if necessary.

[0082] In one exemplary embodiment, the device 110 for controlling the traffic system 100 or the further device 130 for controlling the traffic system 100 is configured to output a request to establish the alternative connection 123 to the controllable element 160 via the second communication port 113. During the operating method of the device 110 for controlling the traffic system 100, the controllable element outputs the request. In one exemplary embodiment, the controllable element 160 is configured to establish the alternative connection 123 upon request from at least one device 110, 130 for controlling the traffic system 100.

[0083] In one embodiment, the device 110 for controlling the traffic system 100 is configured to synchronize the control information with the further device 130 for controlling the traffic system 100 via the alternative connection 123. During the operating method of the device 110 for controlling the traffic system 100, the device 110 synchronizes the control information with the further device 130 for controlling the traffic system 100 via the alternative connection 123. In one embodiment, the computing unit 111 of the device 110 for controlling the traffic system 100 has, as optionally shown in FIGS. 1 and 2, at least two, in particular at least three, processor cores, a first processor core

[0084] 114 , a second processor core 115 and a third processor core 116 . The computing unit 111 is set up to calculate the control information by means of the processor cores 114 , 115 , 116 independently of one another. The device 110 for controlling the traffic system 100 is set up in the event that the control information is calculated by means of different processor cores 114 ,

[0085] 115, 116 differ from one another, to output error information via the first communication port 112 and / or the second communication port 113. During the operating method of the device 110 for controlling the traffic system 100, the device outputs the error information via the first communication port 112 and / or the second communication port 113. Then, for example, the further device 130 for controlling the traffic system 100 can react to the error information and, when synchronizing the control information, ignore the control information provided by the device 110 for controlling the traffic system 100. The further computing unit 131 of the further device 130 for controlling the traffic system 100 also has three processor cores in a similar way: a further first processor core 134, a further second processor core 135 and a further third processor core 136.

[0086] By using the two or three processor cores 114, 115, 116, for example, an S IL-4 result can be achieved and safe control information can be obtained. The third core is usually added to increase availability. If the error information is output, further devices 130 for controlling the traffic system 100 can infer from this that the device 110 for controlling the traffic system 100, which output the error information, is currently operating inadequately. The control information of this device 100 can then be neglected during synchronization if necessary. The controllable element 160, or in particular the controller 161 of the controllable element, can have three processor cores and thus likewise provide safe operation with, for example, an S IL-4 result.Of course, more than three processor cores can be provided in both the computing unit 111 and the controller 161.

[0087] In one embodiment, the device 110 for controlling the traffic system 100 is configured to receive error information from another device 130 for controlling the traffic system 100 via the first communication port 112 and / or the second communication port 113. In the operating method of the device 110 for controlling the traffic system 100, the device 110 for controlling the traffic system 100 receives error information from another device 130 for controlling the traffic system 100 via the first communication port 112 and / or the second communication port 113.

[0088] In one embodiment, the device 110 for controlling the traffic system 100 is configured to decide, based on the output error information and / or the received error information, whether a calculation of the control information is discontinued or continued. During the operating method of the device 110 for controlling the traffic system 100, the device 110 for controlling the traffic system 100 decides whether a calculation of the control information is discontinued or continued.

[0089] 1 and 2, unless differences are described below. The traffic system 100 has the device 110 for controlling the traffic system 100 and also two further devices 130 for controlling the traffic system 100. The device 110 for controlling the traffic system 100 and the devices 130 for controlling the traffic system 100 are constructed as explained in connection with FIGS. 1 and 2. The device 110 is designed to establish a first connection 121 to one of the further devices 130 for controlling the traffic system 100 via two first communication connections 112. Furthermore, the further devices 130 for controlling the traffic system 100 are connected to one another via further first communication connections 132 and a further first connection 142.Furthermore, both further devices 130 for controlling the traffic system 100 are also connected to the adjustable elements 160 via the further second communication ports 132 and further second connections 142.

[0090] FIG 4 shows the traffic system 100 of FIG 3, wherein it is indicated by means of flashes that one of the first connections 121 to one of the further devices 130 for controlling the traffic system 100 and the other of the further devices 130 for controlling the traffic system 100 has failed. In this case, the device 110 for controlling the traffic system 100 is not able to detect whether further devices 130 for controlling the traffic system 100 are available for synchronization. Furthermore, the further device 130 for controlling the traffic system 100, which continues to be active, is likewise not able to detect that the device 110 for controlling the traffic system 100 is still operating. In this case, it is possible that the device 110 for controlling the traffic system 100 and the further device 130 for controlling the traffic system 100, which continues to be active, output contradictory control signals.However, if the mechanism explained in connection with FIGS. 1 and 2 for receiving the connection information from the adjustable element 160 via the second communication port 113 and the second connection 122 is present, the device 110 for controlling the traffic system 100 and further devices 130 for controlling the traffic system 100 can make a decision as to which of the devices 130 for controlling the traffic system 100 may output setting information to the adjustable element 160. This device 110, 130 can then output the setting information.Furthermore, the mechanism explained in connection with FIGS. 1 and 2 for establishing alternative connection 123 to the further device 130 for controlling the traffic system 100 via the adjustable element 160 can be present, and the device 110 for controlling the traffic system 100 and the further active device 130 for controlling the traffic system 100 can be synchronized and thus provide unique control signals.

[0091] In one embodiment, the device 110 for controlling the traffic system 100 is further configured to output network information to the adjustable element 160 via the second communication port 113. The adjustable element 160 can then be configured to receive the network information from the device 110 for controlling the traffic system 100 and output it to a further device 130 for controlling the traffic system.

[0092] In one embodiment, the device 110 for controlling the traffic system 100 is further configured to receive network information from the adjustable element 160 via the second communication port 113.

[0093] Using the network information transmitted via the adjustable elements 160, it is possible to forward to the devices 110, 130 for controlling the traffic system 100 which of the devices 110, 130 for controlling the traffic system 100 are still active and connected. This makes it easier to decide which of the devices 110, 130 for controlling the traffic system 100 should be used to calculate the control signal. This decision can be made, for example, based on which of the active devices 110, 130 for controlling the traffic system 100 offer the largest connected network.

[0094] In one exemplary embodiment, the device 110 for controlling the traffic system 100 is further configured to decide, based on the output network information and / or the received network information, whether to discontinue or continue calculating the control information if an error is detected in the first connection. This can occur, for example, if significantly more participants are present in another subnetwork comprising devices 110, 130 for controlling the traffic system 100 that is not accessible to this device 110 for controlling the traffic system 100.

[0095] During the operating method of the device 110 for controlling the traffic system 100, the device outputs the network information via the second communication port 113, receives the network information via the second communication port 113, or decides whether to stop or continue calculating the control information. During the operating method of the controllable element 160, the controllable element receives the network information from the device 110 for controlling the traffic system 100 and outputs the network information to another device 130 for controlling the traffic system.

[0096] The first connections 121, 141 can be checked for errors, for example, by issuing a sign of life via the first communication ports 112, 132 at regular intervals, and interpreting the lack of confirmation of the sign of life as an error in the first connections 121, 141. Other forms of checking are also conceivable. Such a sign of life can also be referred to as a heartbeat.

[0097] The devices 110, 130 for controlling the traffic system 100 can, for example, be traffic control centers 102 for a road, as shown in FIGS. 3 and 4. The adjustable elements 160 can be traffic lights 166, barriers 167 and variable message signs 168 for the road, as shown in FIGS. 3 and 4. In FIGS. 3 and 4, the alternative connection 123 is set up via a traffic light 166 by way of example; however, a set-up via barriers 167 and variable message signs 168 is also conceivable. It can be provided that the traffic control centers 102 are spatially separated from one another and it can be provided that the road and thus the traffic system 100 comprises more than one traffic light 166, one barrier 167 and one variable message sign 168. Furthermore, other adjustable elements 160 may also be provided for the road.In addition, it is conceivable to provide the traffic control centers 102, traffic lights 166, barriers 167 and variable message signs 168 together with the exemplary embodiments explained in connection with FIGS. 1 and 2 or, in the exemplary embodiments of FIGS. 3 and 4, analogous to FIGS. 1 and 2, to design the devices 110, 130 for controlling the traffic system 100 as signal boxes 101 and the adjustable elements 160 as signals 163, switches 164 and track locks 165 for the railway.

[0098] It can be provided that at least one of the adjustable elements 160 of FIGS. 1 to 4 is further configured to determine connection information. The connection information can contain the devices 110, 130 for controlling the traffic system 100 to which the respective adjustable element 160 is connected. The adjustable element 160 is further configured to output the connection information to the devices 110, 130 for controlling the traffic system 100. The devices 110, 130 for controlling the traffic system 100 can use the connection information, for example, to determine the network information.

[0099] In particular, the devices 110, 130 for controlling the traffic system 100 can establish an alternative connection 123 via the controllable elements 160, thus increasing the availability of synchronization of the devices 110, 130 for controlling the traffic system 100. As a result, the devices 110, 130 for controlling the traffic system 100 can decide autonomously for a longer period of time which of the devices 110, 130 for controlling the traffic system 100 should output control signals to which of the controllable units 160. Alternatively or additionally, it can be provided that the controllable elements 160 output system information to the devices 110, 130 for controlling the traffic system 100, thus making it easier for the devices 110, 130 for controlling the traffic system 100 to decide which of the devices 110, 130 for controlling the traffic system 100 should output control signals to which of the controllable units 160.Both variants lead to a more robust traffic system 100 in the event that individual first connections 121 or individual second connections 122 fail.

[0100] Although the invention has been illustrated and described in detail by the preferred embodiment, the invention is not limited by the disclosed examples and other variations can be derived therefrom by those skilled in the art without departing from the scope of the invention.

Claims

Patent claims 1. A device (110) for controlling a traffic system (100), comprising a computing unit (111), a first communication port (112), and a second communication port (113), wherein the device (110) is configured to establish a first connection (121) to a further device (130) for controlling the traffic system (100) via the first communication port (112), wherein the device (110) is configured to establish a second connection (122) to at least one adjustable element (160) of the traffic system (110) via the second communication port (113), wherein the computing unit (111) is configured to calculate adjustment information for the adjustable element (160), wherein the device (110) is configured to synchronize the adjustment information with the further device (130) for controlling the traffic system (100) via the first communication port (112) and the first connection (121),wherein the device (110) is configured to make a decision based on system information as to whether the device (110) may forward the setting information to the adjustable element (160), and in this case to output the setting information via the second communication port (113) and the second connection (122).

2. The device (110) of claim 1, further configured to receive network information as system information from the adjustable element (160) via the second connection (122) and the second communication port (113), and wherein the device (110) is configured to make the decision based on the network information.

3. Device (110) according to claim 2, wherein the device (110) is configured to receive further network information as further system information from a further adjustable element and to make the decision based on the network information and the further network information.

4. Device (110) according to one of claims 2 or 3, wherein the device (110) is configured to decide on the basis of the output connection information and / or the received network information whether a calculation of the setting information is discontinued or continued.

5. The device (110) according to any one of claims 1 to 4, wherein the system information is a synchronization signal received via the first communication port (112) and the first connection (121).

6. Device (110) according to one of claims 1 to 5, wherein the device (110) is configured to check the first connection (121) for an error and, in the event that an error is detected in the first connection (121), to establish an alternative connection (123) to the further device (130) for controlling the traffic system (100) via the adjustable element (160).

7. Device (110) according to claim 6, wherein the device (110) is configured to receive a request for producing the Output alternative connection (123) to the adjustable element (160) via the second communication port (113).

8. Device (110) according to claim 6 or 7, wherein the device (110) is configured to synchronize the control information with the further device (130) for controlling the traffic system (100) via the alternative connection (123).

9. A method for operating a device (110) for controlling a traffic system (100), wherein the device (110) has a computing unit (111), a first communication port (112) and a second communication port (113), comprising the following steps: - establishing a first connection (121) to a further device (130) for controlling the traffic system (100) via the first communication port (112); - establishing a second connection (122) to at least one adjustable element (160) of the traffic system (100) via the second communication port (122); - Calculating setting information for the adjustable element (160) by means of the computing unit (111); - Synchronizing the control information with the further device (130) for controlling the traffic system (100) via the first communication port (112) and the first connection (121); - Making a decision based on system information as to whether the device (110) may forward the setting information to the adjustable element (160) and outputting the setting information via the second communication port (113) and the second connection (122) in this case.

10. Adjustable element (160) of a traffic system (100), comprising a controller (161) and a plurality of control connections (162), wherein the control connections (162) can be connected to devices (110, 130) for controlling a traffic system (100), wherein the adjustable element (160) is designed to receive control information via the control connections (162) and to process it by means of the controller (161), wherein the adjustable element (160) is further designed to output system information to a device (110, 130) for controlling the traffic system (100).

11. Adjustable element (160) according to claim 10, wherein the adjustable element is configured to maintain a list of the respectively connected devices (110, 130) for controlling the traffic system (100) and to decide on the basis of this list which of the devices (110, 130) for controlling the traffic system (100) the adjustable element (160) should control and to output this information as system information.

12. Adjustable element (160) according to claim 10 or 11, wherein the adjustable element is configured to maintain a list of the respective connected devices (110, 130) for controlling the traffic system (100) and further to maintain the list of the respective because connected devices (110, 130) as network information.

13. Adjustable element (160) according to one of claims 10 to 12, further configured to establish an alternative connection (123) between at least two devices (110, 130) for controlling the traffic system (100).

14. Adjustable element (160) according to claim 13, wherein the adjustable element (160) is configured to establish the alternative connection (123) upon request of at least one device (110, 130) for controlling the traffic system (100).

15. Method for operating an adjustable element (160), wherein the adjustable element (160) has a controller (161) and a plurality of control connections (162), wherein the control connections (162) are connected to devices (110, 130) for controlling a traffic system (100), wherein control information is received via the control connections (162) and processed by means of the controller (161), wherein the adjustable element (160) outputs system information to a device (110, 130) for controlling the traffic system (100).

16. Traffic system (100) with at least two devices (110, 130) according to one of claims 1 to 8 and at least one adjustable element (160) according to one of claims 10 to

Images