RAILWAY VEHICLE, RAILWAY SYSTEM AND METHOD FOR ASSOCIATED RAILWAY VEHICLE COMPOSITE
Patent Information
- Application Number
- FR2017062658
- Authority / Receiving Office
- FR · FR
- Patent Type
- Patents
- Current Assignee / Owner
- Filing Date
- 2017-12-20
- Publication Date
- 2025-03-07
- Estimated Expiration
- 2037-12-20
AI Technical Summary
Existing railway vehicle integrity control systems are vulnerable to external interference and computer attacks, and the coupling process is complex and costly, lacking rapidity and redundancy.
A railway vehicle system with an encrypted control signal, decentralized network nodes, and accelerometers for real-time integrity monitoring, using wireless communication and independent power sources to ensure secure, rapid, and redundant coupling and detection.
Enhances security against interference and attacks while minimizing costs and simplifying the coupling process, enabling rapid and reliable integrity monitoring with enhanced safety measures.
Smart Images

Figure 00000019_0000 
Figure 00000019_0001 
Figure 00000020_0000
Description
Railway vehicle, railway system and vehicle composition method associated railway The present invention relates to a railway vehicle comprising a plurality of cars, including a lead car defining one end of the railway vehicle, and a set of guide cars connected to the lead car, the set of guide cars comprising a tail car located at one end of the tail of the railway vehicle opposite the lead end, and a first railway vehicle integrity control system for controlling the attachment of each car of the set of guide cars to the lead car, the first control system comprising a transmitter configured to emit a control signal, the transmitter being located on board the tail car; an electronic control unit configured to receive the control signal and command the railway vehicle to stop in the event of failure to receive the control signal, the electronic control unit being located on board the lead car;and a communication network to carry the control signal to the electronic control unit, said communication network comprising a plurality of network nodes, including at least one on board each car in the set of cars to be guided, the communication network being configured so that the control signal passes through at least one network node on board each car in the set of cars to be guided before reaching the electronic control unit; The detachment of a carriage from the rest of the train can have significant consequences and lead to serious accidents. Therefore, checking the integrity of the train is a crucial element for railway safety. This integrity check involves verifying the mechanical attachment of the individual carriages to the lead carriage. Thus, it is known to monitor the integrity of the railway vehicle in real time and to immediately stop the railway vehicle if a breach in its integrity is detected. This immediate stop helps prevent accidents. Such a system for monitoring the integrity of a railway vehicle is described, for example, in EP 1 465 358. In this document, all the cars of a railway vehicle are equipped with several network nodes capable of transmitting or receiving a control signal. This control signal is continuously transmitted through the network formed by all the network nodes. A breach of the railway vehicle's integrity is detected by the failure of one of the network nodes to receive a signal. The railway vehicle is then brought to a stop. However, such a solution does not protect against interference from other rail vehicles operating alongside the rail vehicle, nor against potential cyberattacks on the network. Furthermore, this solution does not allow for rapid coupling of the individual cars comprising the rail vehicle, as connecting each module to the network is a lengthy and complex process. One aim of the invention is to enhance the security of a railway vehicle's integrity control system, particularly by preventing external interference and cyberattacks. Other objectives include minimizing the cost of such a system and enabling easy and rapid coupling of the railway vehicle's carriages. To this end, the invention relates to a railway vehicle of the aforementioned type, in which the control signal consists of an encrypted signal comprising an identification code, the electronic control unit being configured to decipher the control signal in order to obtain the identification code. Depending on specific embodiments, the railway vehicle comprises one or more of the following characteristics, taken individually or in any technically feasible combination: -the railway vehicle also includes a second control system whose composition is similar to that of the first control system but for which the corresponding transmitter is located on board the lead car and the corresponding electronic control unit is located on board the tail car; - the network nodes are adapted to transmit the control signal without the decipher; - network nodes include aerial nodes, at least one of which is on board each car in the set of cars to be guided, each aerial node being equipped with a wireless communication module and being adapted to communicate over the air with the or each other aerial node located within a predetermined perimeter; - for each rolling stock, at least one overhead node is located at each interface with another rolling stock; -the predetermined perimeter is less than the length of the rolling stock, of preference less than 30 m; - The wireless communication module is compatible with the Zigbee protocol or WiFi or the Bluetooth standard; - Each air node is configured to communicate with a mobile terminal of an operator; - an identification code is uniquely associated with the issuer; - at least one element among the transmitter, the electronic control unit and the network nodes is electrically powered autonomously by at least one photovoltaic cell and / or at least one vibration energy source; -The railway vehicle includes a plurality of accelerometers, each network node being connected to an accelerometer: - each network node is configured to transmit on the communication network an acceleration measurement measured by the accelerometer connected to said network node; the electronic control unit is configured to receive the acceleration measurement measured by each network node, and to compare said acceleration measurements with each other; and the electronic control unit is configured to emit an alert signal and / or trigger the stopping of the railway vehicle in the event that at least two of said acceleration measurements have a deviation greater than a predetermined threshold value; - the electronic control unit is configured to transmit on the communication network an acceleration measurement measured by at least one accelerometer located in the lead car; and each network node is configured to receive said acceleration measurement and compare this acceleration measurement to an acceleration measurement taken by the accelerometer connected to said network node. The invention also relates to a railway system comprising: - a freight transport vehicle, each air node of said rail vehicle being configured to issue an associated unique identifier; - a computer server comprising a database, the database containing information relating to goods transported by the rail vehicle and, associated with each of these pieces of information, at least one unique air node identifier; - a railway infrastructure configured to allow the movement of the railway vehicle, the railway infrastructure including at least one radio station configured to receive at least one unique identifier transmitted by at least one air node and send an information signal including at least one unique identifier to the computer server, the computer server being able to deduce from the unique identifier the position of the goods in the railway infrastructure by comparison with the database. The invention also relates to a method for assembling a railway vehicle comprising the following steps: - juxtaposition of a car to be guided to the lead car or to a car linked to the lead car; - mechanical linkage of the car to be guided to the lead car or to the car linked to the lead car; connection of each aerial node of the car to be guided to the communication network by an operator using a mobile terminal. The invention also relates to a method for assembling a railway vehicle comprising the following steps: - juxtaposition of a car to be guided to the lead car or to a car linked to the lead car; - mechanical linkage of the car to be guided to the lead car or to the car linked to the lead car; - emission, by the electronic control unit, of an acceleration measurement measured by at least one accelerometer located in the lead car; - reception, by the network nodes of the car to be guided, of said measurement of the acceleration emitted by the electronic control unit; - for each network node of the car to be guided, comparison of said acceleration measurement emitted by the electronic control unit to an acceleration measurement measured by the accelerometer connected to said network node, and when said measurement of the acceleration emitted by the electronic control unit is substantially equal to said measurement of the acceleration measured by the accelerometer connected to said network node, connection of said network node to the communication network. The invention will be better understood upon reading the following description, given solely by way of example, and made with reference to the attached drawings, in which: Figure 1 is a top view of a railway system according to the invention; Figure 2 is a schematic side view of a railway vehicle from the railway system of Figure 1; Figure 3 is a schematic side view of a car equipping the vehicle railway of Figure 2. The railway system 10 illustrated in Figure * includes a computer server 11, a railway vehicle 12 and a railway infrastructure 14. Computer server 11 includes a database. The railway vehicle 12 comprises a plurality of cars 13 and a system 15 for controlling the integrity of the railway vehicle 12. The cars 13 are composed of a lead car 16 defining one end of the railway vehicle 12 and at least one, here a plurality, of cars to guide 18, including a tail car 20 located at one end of the tail of the railway vehicle 12. Advantageously, the railway vehicle is a freight train. The lead car 16 is then constituted by a locomotive and each guide car 18 is constituted by a wagon. In an advantageous embodiment, the rail vehicle 12 is configured to travel in both directions. The rear car 20 is then also a locomotive capable of hauling the other cars 13 that make up the rail vehicle 12. The railway infrastructure 14 includes 22 rails and 24 radio stations. The 24 radio stations are located on the side of the 22 rails. The rail vehicle 12 is located on the rails 22 and is suitable for running on the rails 22. With reference to Figure 2, the control system 15 is configured to control the attachment of the guide car or cars 18, including the tail car 20, to the lead car 16. For this purpose, the control system 15 includes a transmitter 26, an electronic control unit 28 and a communication network 29. Transmitter 26 is located in the rear car 20. It is configured to transmit a control signal. The control signal is advantageously encrypted. The electronic control unit 28 is located in the lead car 16. The electronic control unit 28 is advantageously a self-contained piece of equipment that interfaces with the control and signaling equipment of the railway vehicle 12. Alternatively, the electronic control unit 28 is integrated directly into the control and / or signalling equipment of the railway vehicle 12. According to another variant, the electronic control unit 28 is configured to cooperate with a braking device of the vehicle 12 and to automatically transmit braking commands to the braking device to limit the risks of breaching the integrity of the railway vehicle 12. The electronic control unit 28 is configured to receive the control signal and command the railway vehicle 12 to stop if the control signal is not received. Alternatively, the transmitter 26 is located in the lead car 16 and the electronic control unit 18 is located in the rear car 20. The communication network 29 is capable of transmitting the control signal emitted by the transmitter 26 to the electronic control unit 28. For this purpose, it comprises a plurality of network nodes 30. Each car 13 includes at least one of these network nodes 30 and the communication network 29 is configured so that the control signal passes through at least one network node 30 on board each car 13 before reaching the electronic control unit 28. Each car 13 advantageously has a multitude of network nodes 30 allowing for redundancy of the network nodes 30. Thus, in the event of failure of a network node 30, the communication network 29 is still able to carry the control signal. Advantageously, the network nodes 30 are adapted to transmit the control signal emitted by the transmitter 26 without deciphering or modifying it, the network nodes 30 not including an algorithm for deciphering the control signal. Network nodes 30 can thus be formed from simple, standardized nodes, requiring no encryption or decryption devices. Network nodes 30 also do not require an IT security system, as the control signal is transmitted in encrypted form within each network node 30. The cost of supplying and installing network nodes 30 is therefore low. Furthermore, because network nodes 30 are standardized, considerable flexibility is possible in the composition of the railway vehicles 12. Advantageously, the transmitter 26, the control unit 28, and the network nodes 30 are electrically powered independently. The communication network 29 is therefore independent of the power supply to the rail vehicle 12, making the communication network 29 more robust. Adding such a control system 15 to an unequipped rail vehicle 12 is also simplified. For this purpose, each car 13 advantageously contains, as illustrated in Figure 3, at least one photovoltaic cell 32 capable of electrically supplying the elements which, among the transmitter 26, the control unit 28 and the network nodes 30, are on board said car 13. Alternatively, each car 13 contains at least one vibration energy source 34 capable of electrically powering the components, including the transmitter 26, the control unit 28, and the network nodes 30, located on board said car 13. The vibration energy source 34 converts the vibration energy of the car 13 into electrical energy. The vibration energy source 34 is, for example, a piezoelectric transducer. The network nodes 30 advantageously include air nodes 36. Each car 13 includes at least one air node 36. Each air node 36 is Equipped with a wireless communication module, it is designed to communicate wirelessly with the air node(s) 36 located within a predetermined perimeter. Therefore, the use of a GPS system between the network nodes 30 and at least one satellite is not necessary, as the air nodes 36 communicate directly with each other. The connection between the network nodes 30 is thus ensured continuously, even when the rail vehicle 12 passes through a tunnel, for example. In an advantageous embodiment, the predetermined perimeter has an overall spherical shape centered on the aerial node 36 and a radius advantageously less than 30 m. Alternatively, the predetermined perimeter has an overall ellipsoidal shape oriented along the direction of the railway vehicle 12 and / or an ellipsoidal shape oriented orthogonally to the direction of the railway vehicle 12. Advantageously, for each car 13, at least one air node 36, preferably a single air node 36 is located at each interface with another car 13. Advantageously, the wireless communication module of each 36 air node is compatible with the Zigbee or WiFi protocol or the Bluetooth standard. Each air node 36 is configured to communicate with a mobile terminal of an operator. The mobile terminal is, for example, a mobile phone or a digital tablet. Each air node 36 is capable of connecting to or disconnecting from the communication network 29 by command of the operator using said mobile terminal. The operator's mobile terminal is capable of displaying the status of the communication network 29, thus enabling the diagnosis of a defective network node 30. Each 36 air node is associated with a unique identifier and is configured to transmit the unique identifier over the air. The railway vehicle 12 advantageously includes a human-machine interface carried, for example, by the electronic control unit 28. The integrity status of the railway vehicle 12 is communicated to the driver of the railway vehicle 12 or to an operator by means of the human-machine interface. The control signal consists of an encrypted signal containing an identification code. The electronic control unit 28 is configured to decrypt the control signal in order to obtain the identification code. Thus, encrypting the control signal allows the communication network 29 to be protected against external attacks. The control signal emitted by the transmitter 26 cannot be read by a third party connecting to the network. communication 29. The third party cannot therefore retrieve the identification code and falsify the control signal. In an advantageous embodiment, the control signal is encrypted using a rolling code in which the encryption key exchanged between the transmitter 26 and the receiving electronic control unit 28 is not unique but changes with each transmission of a new control signal. This encryption technique prevents any replay attack. Indeed, if the control signal is recorded and repeated on the communication network 29 by an external user, the electronic control unit 28 detects the incorrect encryption key and ignores the received signal. Advantageously, the identification code is uniquely associated with the transmitter 26. Thus, the communication network 29 of the railway vehicle 12 cannot interfere with an additional railway vehicle 12 located near said railway vehicle 12. Indeed, even if the network nodes 30 of the railway vehicle 12 and the additional railway vehicle 12 are able to connect with each other and transmit the respective control signals to the other railway vehicle 12, in the event of the control signal of the additional railway vehicle 12 being received by one of the overhead nodes 36 of said railway vehicle 12, the electronic control unit 28 detects the wrong identification code and does not consider the received control signal as valid. Advantageously, the railway vehicle 12 comprises a plurality of accelerometers 38 advantageously dispersed among the cars 13 so that each car 13 is equipped with at least one accelerometer 38. Each network node 30 is connected to an accelerometer 38, said accelerometer 38 preferably being mounted on board the same car 13 as the network node 30. The accelerometers 38 are configured to operate during the coupling phase of the different cars 13 as well as during the movement of the railway vehicle 12 on the rails 22. Each network node 30 is configured to transmit on the communication network 29 an acceleration measurement measured by the accelerometer 38 connected to said network node 30. The acceleration measurement consists of an instantaneous measurement of an acceleration value or an acceleration profile over a given period of time. Advantageously, the electronic control unit 28 is configured to directly receive the acceleration measurement emitted by each accelerometer 38. Alternatively, the transmitter 26 is configured to receive the acceleration measurement transmitted by each network node 30. The transmitter 26 is also configured to include this acceleration measurement in the control signal. The electronic control unit 28 is then configured to retrieve, from the control signal, the acceleration measurement taken by each network node 30. The control unit 28 is also configured to compare said acceleration measurements with each other. The electronic control unit 28 is thus capable of detecting a breach of integrity of the rail vehicle 12 in the event that at least two of the acceleration measurements taken by at least two network nodes 30 diverge significantly. In particular, two acceleration measurements are considered to diverge when the difference between two acceleration measurements exceeds a predetermined threshold, for example, equal to 10% of the larger of the two measured acceleration values. The electronic control unit 28 is also configured to issue a warning signal and / or to trigger the stopping of the rail vehicle 12 when such a breach of integrity is detected.Advantageously, the electronic control unit 28 is capable of transmitting the warning signal to a rail traffic control center on the tracks 22, which is then capable of taking appropriate safety measures, such as stopping vehicle traffic on the tracks 22 of the infrastructure. The detection of the breach of integrity of the railway vehicle 12 is thus very rapid and therefore allows for enhanced railway safety. The electronic control unit 28 is configured to transmit on the communication network 29 an acceleration measurement measured by at least one accelerometer 38 located in the lead car 16. Each network node 30 is configured to receive said acceleration measurement emitted by the electronic control unit 28. Each network node 30 is also configured to compare said acceleration measurement emitted by the electronic control unit 28 to the acceleration measurement measured by the accelerometer 38 connected to said network node 30. Each network node 30 is able to connect to the communication network 29 if the acceleration measurement emitted by the electronic control unit 28 is compatible with the acceleration measurement measured by the accelerometer 38 associated with the network node 30. According to a preferred embodiment of the invention, the railway vehicle 12 is a train of freight transport. The database of computer server 11 then contains information relating to transported goods, each piece of information being associated with at least one unique identifier of an air node 36 of the railway vehicle 12. Each radio station 24 located on the side of the rails 22 is also configured to receive the unique identifier emitted by at least one air node 36 of the rail vehicle 12 when the radio station 24 is within the predetermined perimeter of at least one air node 36. Radio station 24 is also configured to, when it has received such a unique identifier, send to computer server 11 an information signal including this unique identifier. The computer server 11 is then able to deduce from this information signal, by comparing the one or each unique identifier included in this signal with the database, the position of goods in the railway infrastructure 14. A first method for composing railway vehicle 12 will now be describe. This composition comprises two steps: the creation of the communication network 29 from the different network nodes 30 and then the coupling of the transmitter 26 and the electronic control unit 28. The creation of communication network 29 takes place in the following manner. Initially, a lead car 16 is located on rails 22. An operator creates a communication network linking the electronic control unit 28 and the aerial nodes 36 of the lead car 16 by means of a dedicated application installed on his mobile terminal. Advantageously, the operator associates a unique identifier with this communication network, which it communicates to all nodes of the network. A guide car 18 is then juxtaposed with the lead car 16. The guide car 18 is then mechanically linked to the lead car 16. Then, the operator, equipped with a mobile terminal, positions themselves near the guide car 18. When the operator is within the predetermined range of an air node 36 of the guide car 18, the operator connects to the air node 36 using the mobile terminal. The operator receives from the air node 36 its associated unique identifier and an identification number associated with the car 13 containing said air node 36. If the information received by the operator is consistent, they connect said air node 36 to the communication network of the lead car 16 using the mobile terminal and transmit to it the unique identifier associated with said communication network. Next, a new guide car 18 is juxtaposed with the previously attached guide car 18. It is then mechanically linked to the lead car 16 via the previously attached guide car 18, and its aerial nodes 36 are connected to the previously mentioned communication network using the method described above. This step is repeated for any number of cars to be guided 18, until a tail car 20 is attached. The communication network thus obtained by adding the aerial nodes 36 of the different cars 16, 18, 20 constitutes the communication network 29. All the air nodes 36 of the communication network 29 are thus connected and can communicate with each other. Advantageously, each air node 36 adds the identifier of the communication network 29 to the signals that the air node 36 transmits on the network. Each air node 36 receives the signals transmitted by other air nodes 36 but only transmits the received signal to the rest of the communication network 29 if the identifier read in the signal corresponds to the unique identifier associated with said communication network 29. Once the tail car 20 is attached, the transmitter 26 of said tail car 20 is coupled to the electronic control unit 28 so that the electronic control unit 28 identifies the identification code of the transmitter 26 and associates it with the transmitter 26. This step constitutes the coupling of the transmitter 26 and the electronic control unit 28. To do this, the operator, for example, connects the transmitter 26 and the electronic control unit 28 by connecting the transmitter 26 directly to the electronic control unit 28. Once the connection between the transmitter 26 and the electronic control unit 28 is established, the transmitter 26 is disconnected from the electronic control unit 28 and positioned in the rear car 20. Advantageously, the transmitter 26 is physically fixed to a network node 30 of the rear car 20. Alternatively, the operator performs the coupling of the transmitter 26 and the electronic control unit 28 using the mobile terminal, with the transmitter 26 remaining located in the rear car 20. According to another variant, the electronic control unit 28 is configured to be coupled with a single transmitter 26 in order to avoid safety problems in the event that additional cars are added to the vehicle and the transmitter 26 is not removed. The composition of the railway vehicle 12 is therefore easily done, obtaining the communication network 29 is done quickly by means of a mobile terminal. A second method for composing a railway vehicle 12 will now to be described. Initially, a guide car 18 is juxtaposed with the lead car 16. The guide car 18 is then mechanically linked to the lead car 16. The electronic control unit 28 transmits on the communication network 29 the acceleration measurement measured at the moment of mechanical connection by at least one accelerometer 38 located in the lead car 16. The acceleration measurement is an instantaneous value or an acceleration profile over a given period of time. This acceleration measurement is broadcast by at least one air node 36 of the lead car 16 and is captured by at least one air node 36 of the car to be guided 18. This latter air node 36 compares the acceleration measurement thus received with the acceleration measurement measured by the accelerometer 38 associated with said air node 36 and connects to the communication network 29 if said acceleration measurements are compatible. Alternatively, each accelerometer 38 transmits to the communication network 29 the acceleration measurement measured at the time of the mechanical link. Each air node 36 of the car to be guided 18 connects to the communication network 29 if one of the received acceleration measurements is compatible with the acceleration measurement measured by the accelerometer 38 linked to said air node 36. Alternatively, the connection of each air node to the communication network 29 must be validated / approved by the operator with their terminal. Next, a new guide car 18 is juxtaposed with the previously attached guide car 18. It is then mechanically linked to the lead car 16 via the previously attached guide car 18, and its overhead nodes 36 are connected to the communication network 29 by means of the process described above. This step is repeated for any number of cars to be guided 18, until a tail car 20 is attached. Once the tail car 20 is attached, the transmitter 26 of said tail car 20 is coupled to the electronic control unit 28 so that the electronic control unit 28 associates the identification code with the transmitter 26. This coupling is typically done in a similar manner to that described for the first composition method. The composition of the railway vehicle 12 is thus done in a very simple way, no action from the operator being necessary in order to obtain the communication network 29. A method for operating the integrity control system 15 will now to be described. Initially, the rail vehicle 12 travels on rails 22, the integrity of the vehicle rail 12 being provided. Transmitter 26 continuously emits an encrypted control signal comprising a unique identification code associated with transmitter 26. Advantageously, the unique identification code is changed with each new transmission of information by a rolling code algorithm. The communication network 29 carries this control signal to the electronic control unit 28, the control signal passing through at least one network node 30 of each car 13. The electronic control unit 28 receives and deciphers the control signal. The electronic control unit 29 verifies that the received unique identification code corresponds to that of the transmitter 26 with which the electronic control unit 28 is coupled. Optionally, each network node 30 simultaneously transmits to the communication network 29 an acceleration measurement measured by the accelerometer 38 connected to said network node 30. The electronic control unit 28 retrieves the acceleration measurement measured by the accelerometer 38 connected to each network node 30 and compares said acceleration measurements with each other. As long as the electronic control unit 28 receives the unique identification code associated with the transmitter 26 and as long as the acceleration measures remain compatible, the integrity of the railway vehicle 12 is ensured. In the event of a breach in the integrity of the rail vehicle 12, the distance between the two cars 13 on either side of the breached interface increases. When the distance between the overhead network nodes 36 located on either side of the breached interface exceeds the radius of the predetermined perimeter, the transmission of the control signal between the two overhead network nodes 36 is interrupted. Since the electronic control unit 28 no longer receives the unique identification code from the transmitter 26, it deduces the breach in the integrity of the rail vehicle 12 and commands the rail vehicle 12 to stop. The breach of the integrity of the rail vehicle 12 also results in the acceleration measurements of at least two network nodes 30 located on either side of the breached interface diverging. This divergence will be detected by the electronic control unit 28 when it compares these two acceleration measurements, which will also deduce the breach of the integrity of the rail vehicle 12 and consequently command the rail vehicle 12 to stop. This comparison of acceleration measurements thus allows for faster detection of integrity breaches than by simply detecting a break in the transmission of the control signal. Furthermore, it provides redundancy in the means of monitoring the integrity of railway vehicle 12. Alternatively, the electronic control unit 28 only emits a warning signal when a breach of integrity in the rail vehicle 12 is detected by comparing acceleration measurements. The rail vehicle 12 is then only brought to a stop when the breach of integrity is detected due to the failure to receive the identification code. Thanks to the invention described above, it is possible to strengthen the security of the integrity control system 15 of a railway vehicle 12, in particular in order to avoid external interference and computer attacks, while minimizing the cost of such a system. This invention also allows for easy and rapid composition of a railway vehicle 12 as well as simple, responsive and redundant operation of the railway vehicle 12 integrity control system 15.
Claims
CLAIMS 1.- Railway vehicle (12) comprising: - a plurality of cars (13) including a head car (16) defining a head end of the railway vehicle (12), and a set of guide cars (18) connected to the head car (16), the set of guide cars (18) comprising a tail car (20) located at a tail end of the railway vehicle (12) opposite the head end, and - a first control system (15) for controlling the integrity of the railway vehicle (12) for controlling the attachment of each car of the set of cars to be guided (18) to the leading car (16), the first control system (15) comprising: + a transmitter (26) configured to transmit a control signal, the transmitter (26) being located on board the tail car (20); + an electronic control unit (28) configured to receive the control signal and to command the stopping of the railway vehicle (12) in the event of failure to receive the control signal, the electronic control unit (28) being located on board the lead car (16); and + a communication network (29) for routing the control signal to the electronic control unit (28), said communication network (29) comprising a plurality of network nodes (30), at least one of which is on board each car of the set of cars to be guided (18), the communication network (29) being configured so that the control signal passes through at least one network node (30) on board each car of the set of cars to be guided (18) before reaching the electronic control unit (28), characterized in that the control signal consists of an encrypted signal comprising an identification code, the electronic control unit (28) being configured to decrypt the controlled signal so as to obtain the identification code, and in that the rail vehicle (12) comprises a plurality of accelerometers (38), each network node (30) being connected to an accelerometer (38). 2.- Railway vehicle (12) according to claim 1, in which the railway vehicle (12) also comprises a second control system (15) whose composition is similar to that of the first control system (15) but for which the corresponding transmitter (26) is located on board the leading car (16) and the unit of corresponding electronic control (28) is located on board the tail car (20). 3.- Railway vehicle (12) according to any one of the preceding claims, in which the network nodes (30) are adapted to transmit the control signal without decrypting it. 4.- Railway vehicle (12) according to any one of the preceding claims, in which the network nodes (30) comprise aerial nodes (36), at least one of which is on board each car of the set of cars to be guided (18), each aerial node (36) being provided with a wireless communication module and being adapted to communicate by air with the or each other aerial node (36) located within a predetermined perimeter. 5.- Railway vehicle (12) according to claim 4, in which the wireless communication module is compatible with the Zigbee or WIR protocol or the Bluetooth standard. 6.- Rail vehicle (12) according to one of claims 4 or 5, wherein each aerial node (36) is configured to communicate with a mobile terminal of an operator. 7.- Rail vehicle (12) according to any one of the preceding claims, in which an identification code is uniquely associated with the transmitter (26). 8.- Railway vehicle (12) according to any one of the preceding claims, in which at least one element among the transmitter (26), the electronic control unit (28) and the network nodes (30) is electrically powered autonomously by at least one photovoltaic cell (32) and / or at least one vibration energy source (34). 9.- Railway vehicle (12) according to any one of the preceding claims, in which: - each network node (30) is configured to transmit on the communication network (29) an acceleration measurement measured by the accelerometer (38) connected to said network node (30); - the electronic control unit (28) is configured to receive the acceleration measurement measured by each network node (30), and to compare said acceleration measurements with each other: and - the electronic control unit (28) is configured to emit an alert signal and / or trigger the stopping of the railway vehicle (12) in the event that at least two of said acceleration measurements have a difference greater than a threshold value 35 predetermined. 10.- Railway vehicle (12) according to any one of the preceding claims, in which: - the electronic control unit (28) is configured to transmit on the communication network (29) an acceleration measurement measured by at least one accelerometer (38) located in the lead car (16); - each network node (30) is configured to receive said acceleration measurement and compare this acceleration measurement to an acceleration measurement measured by the accelerometer (38) connected to said network node (30). 11.- Railway system (10) comprising: 10 - a railway vehicle (12) according to any one of claims 4 to 6, said railway vehicle (12) constituting a goods transport vehicle, each aerial node (36) of said railway vehicle (12) being configured to emit an associated unique identifier; - a computer server (11) comprising a database, the database containing information relating to goods transported by the railway vehicle (12) and, associated with each of these pieces of information, at least one unique air node identifier (36), - a railway infrastructure (14) configured to allow the circulation of the railway vehicle (12), the railway infrastructure (14) comprising at least one radio station (24) configured to receive at least one unique identifier transmitted by at least one aerial node (36) and send an information signal comprising the at least one unique identifier to the computer server (11), the computer server (11) being able to deduce from the unique identifier the position of the goods in the railway infrastructure (14) by comparison with the database. 25 12.- Method of composing a railway vehicle (12) according to the claim 6, comprising the following steps: - juxtaposition of a car to be guided (18) to your lead car (16) or to a car (13) linked to the lead car (16): - mechanical connection of the car to be guided (18) to the leading car (16) or to the 30 car (13) connected to the leading car; - connection of each aerial node (36) of the car to be guided (18) to the communication network (29) by an operator by means of a mobile terminal. 13- Method for composing a railway vehicle (12) according to claim 10 comprising the following steps: 35 - juxtaposition of a car to be guided (18) to the leading car (16) or to a car (13) linked to the lead car (16); • mechanical connection of the car to be guided {18) to the leading car (16) or to the car attached to the leading car (13); - transmission, by the electronic control unit (28), of an acceleration measurement measured by at least one accelerometer (38) located in the leading car 5 (16); - reception, by the network nodes (30) of the car to be guided (18), of said acceleration measurement emitted by the electronic control unit (28); - for each network node (30) of the car to be guided (18), comparison of said acceleration measurement emitted by the electronic control unit (28) with an acceleration measurement 10 measured by an accelerometer (38) connected to said network node (30), and - when said measurement of the acceleration emitted by the electronic control unit (28) is substantially equal to said measurement of the acceleration measured by the accelerometer (38) connected to said network node (30), connection of said network node (30) to the communication network (29). 15