Blockchain Remote Command Verification for Locomotives
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems for remotely operating locomotives lack verification of command and response communications, posing security and safety concerns, especially when an operator is not onboard to recognize and intervene in unsafe or operationally poor situations.
Innovation Solution
A control system utilizing a shared ledger, such as a blockchain, to verify and store command and sensor signals transmitted between locomotives and remote controller interfaces, ensuring immutable and tamper-proof records of transactions, thereby ensuring only authorized commands are sent and received.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If remote controller interface is used to convey command and control signals without verification, then ease of operation is improved, but security and safety deteriorate
Solution Approach 1:
The system implements feedback mechanisms where the remote controller interface receives verification responses from the locomotive control system. The verification process includes the remote controller sending a verification request, the locomotive control system responding with verification information, and the remote controller updating its state based on this feedback. This ensures that only authenticated commands are executed while maintaining operational ease.
Solution Approach 2:
The system performs preliminary verification actions before executing any remote control commands. The remote controller interface verifies its authority and the validity of commands before transmitting them to the locomotive control system. This preliminary verification step prevents unauthorized or malicious commands from being executed, thereby enhancing security without complicating the actual operation.
2Reliability
If verification of command and response communication is implemented, then security and safety are improved, but device complexity increases
Solution Approach 1:
The verification mechanism is designed to be universal and multi-functional. The same verification protocol handles multiple scenarios including command authentication, response verification, and state confirmation. The remote controller interface uses a single verification framework to manage various communication types, reducing the need for separate verification systems for each function and thereby limiting the increase in device complexity.
Solution Approach 2:
The system introduces an intermediary verification layer between the remote controller interface and the locomotive control system. This intermediary layer handles all verification logic centrally, allowing the main control systems to remain relatively simple. The verification mechanism acts as a mediator that authenticates commands and responses without requiring complex modifications to the core control architecture.
3Extent of automation
If operator is not onboard for manual intervention, then automation level is improved, but ability to recognize and intervene in unsafe situations deteriorates
Solution Approach 1:
The system provides continuous feedback to the remote controller interface about the locomotive's operational state, command execution status, and any detected anomalies. This feedback mechanism enables the automated system to monitor operations in real-time and allows remote operators to intervene when necessary. The feedback loop includes verification responses that confirm command execution and alert operators to unsafe situations, maintaining the ability to recognize and intervene despite the operator not being onboard.
Solution Approach 2:
The system replaces the mechanical presence of an onboard operator with an electronic verification and communication system. Instead of requiring a human operator physically present on the locomotive, the system uses digital verification protocols, communication interfaces, and automated monitoring to enable remote operation. This substitution maintains operational control and safety while achieving the desired automation level.
Data Source
AI summary
The preset disclosure provides a control system for operating one or more locomotives in a train, the control system including a first communication unit located on-board a first locomotive of a first consist in the train; and an off-board remote controller interface located remotely from the train, the off-board remote controller interface being configured to receive or generate a locomotive control command, store the received or generated locomotive control command in a shared ledger, and relay the locomotive control command to the first communication unit. The first communication unit is configured to receive the locomotive control command from the off-board remote controller interface.