Diverse Vital Processing Units for Wayside Signal State Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing Positive Train Control (PTC) systems face challenges in accurately monitoring and determining the state of wayside signaling equipment, particularly in preventing false interpretations and failures that could lead to unsafe conditions.
Innovation Solution
A monitoring apparatus and method utilizing two separate and diverse vital processing units, each with current and voltage sensing capabilities, to determine the state of wayside signaling equipment and detect failures, employing a 2oo2 voting architecture to ensure accurate data validation and error detection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single processing unit is used to monitor wayside signaling equipment, then the device complexity is reduced, but the reliability and accuracy of state determination deteriorates due to potential false interpretations and undetected failures
Solution Approach 1:
The monitoring apparatus is divided into two separate and diverse vital processing units, each independently determining the state of wayside signaling equipment. This segmentation allows cross-validation of results, improving reliability by detecting discrepancies between units that indicate failures or false interpretations.
Solution Approach 2:
A second vital processing unit is created as a diverse copy of the first unit, both performing identical state determination functions independently. This copying approach enables comparison of results to detect failures and prevent false interpretations, enhancing reliability without significantly increasing operational complexity.
2Measurement precision
If multiple sensing parameters (current and voltage) are measured to improve detection accuracy, then the measurement precision improves, but the device complexity and energy consumption increase
Solution Approach 1:
Both current and voltage sensing capabilities are merged into each vital processing unit, allowing simultaneous measurement of multiple parameters. This combining approach improves measurement precision for detecting equipment state and failures while consolidating the sensing system architecture.
Solution Approach 2:
Each vital processing unit is designed as a multi-functional device that performs both current measurement and voltage measurement, as well as state determination and failure detection. This universality reduces overall system complexity by making each unit self-sufficient rather than requiring separate dedicated sensors for each function.
3Reliability
If a 2oo2 voting architecture is implemented to prevent false interpretations, then the reliability of safety determination improves, but the response time and system complexity increase
Solution Approach 1:
Both vital processing units continuously and independently determine the equipment state in parallel, performing validation work in advance rather than sequentially. This preliminary action approach ensures that state information is always validated and ready, preventing delays in safety determination while maintaining high reliability through continuous cross-validation.
Data Source
AI summary
A railroad monitoring apparatus includes first and second diverse vital processing units, first and second current sensors configured to measure the current being provided to one or more signaling elements of an item of wayside signaling equipment, and means for measuring voltage levels being supplied to each of the signaling elements. The first processing unit receives a first current measurement from the first current sensor and the measured voltage levels, and the second vital processing unit receives a second current measurement from the second current sensor and the measured voltage levels. The vital processing units are each programmed to determine based on one or more of the first current measurement, the second current measurement and the measured voltage levels: (i) the state of the item of railroad wayside signaling equipment, (ii) failures within the item of railroad wayside signaling equipment, and (iii) failures within the monitoring apparatus itself.