Railway Convoy Brake Pipe Isolation for Uniform Emergency Braking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current railway braking systems face challenges in ensuring uniform emergency braking across a train convoy, particularly when communication between locomotives is lost, leading to risk of derailing due to partial application of brakes and continued traction by slave locomotives.
Innovation Solution
A control system for a railway convoy that includes a safety unit developed to SIL≤2 standards, which monitors communication and pressure control to prevent the relay valve from supplying the brake pipe in malfunction conditions, ensuring uniform emergency braking by isolating the brake pipe and inhibiting traction during communication failures.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the brake control unit is developed according to SIL≥3 safety levels to ensure emergency braking safety, then the safety and reliability of emergency braking is improved, but the development costs and complexity increase by approximately an order of magnitude
Solution Approach 1:
The system is divided into two distinct units: a brake control unit handling normal braking operations at SIL≤2, and a safety unit handling emergency braking monitoring at SIL≥3. This segmentation allows each unit to be developed and certified at appropriate safety levels, reducing overall complexity while maintaining emergency braking safety.
Solution Approach 2:
The safety-critical emergency braking monitoring function is extracted from the brake control unit and placed in a separate safety unit. This extraction isolates the SIL≥3 requirements to a dedicated component, allowing the main brake control unit to operate at the lower SIL≤2 level, thereby significantly reducing development complexity and cost.
2Loss of information
If communication between locomotives is maintained during emergency braking, then coordination and information sharing are improved, but the risk of partial brake application and derailing increases when communication is lost
Solution Approach 1:
The safety unit continuously monitors communication status and brake pipe pressure in advance, detecting communication failures before they cause partial brake application. When communication loss is detected, the safety unit immediately triggers uniform emergency braking across all wagons, preventing the derailing condition before it occurs.
Solution Approach 2:
The safety unit implements continuous feedback monitoring of communication status and brake pipe pressure. This feedback mechanism detects communication failures and pressure anomalies in real-time, enabling the system to respond with uniform emergency braking application across the entire train convoy, ensuring reliability even when communication is lost.
3Ease of operation
If the relay valve is allowed to supply the brake pipe during normal operation, then braking control flexibility is improved, but the risk of malfunction and non-uniform brake application increases during emergency conditions
Solution Approach 1:
The safety unit acts as an intermediary between the brake control unit and the relay valve during emergency conditions. When a communication failure or malfunction is detected, the safety unit overrides the brake control unit and directly controls the relay valve to ensure uniform emergency braking application, while allowing the brake control unit to maintain flexibility during normal operations.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This solution prevents derailing by ensuring all wagons apply emergency braking and inhibit traction, reducing development complexity and cost by separating normal braking and communication functions from emergency braking monitoring, allowing the brake control unit to remain at SIL≤2 while the safety unit handles SIL≥3 functions.
Implementation Method 1
a brake pipe (105) for the service and emergency pneumatic braking of the railway convoy (400)
Implementation Method 2
which includes a relay valve (212) the outlet (214) of which is arranged to be connected to the brake pipe (105)
Implementation Method 3
A control system for a railway convoy (400), particularly for the transport of goods
Implementation Method 4
the current pressure value present at the brake pipe (105) does not correspond to the current pressure value received in the message sent by the master locomotive (101)
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A control system is described for a railway convoy (400), particularly for the transport of goods, comprising wagons (102), a master locomotive (101) and at least one slave locomotive (402, 403). The railway convoy (400) comprises a brake pipe (105) which extends along the entire railway convoy (400). The master locomotive (101) is arranged to control the pressure in the brake pipe (105) and to send traction and/or braking commands to the slave locomotive (402, 403) by means of a communication channel. The at least one slave locomotive (402, 403) comprises a transceiver means (230) arranged to receive the traction and/or braking commands and to re-transmit them to a traction control unit (232) and to a brake control unit (211) of the slave locomotive (402, 403). The control system includes a safety unit (501) arranged to prevent a relay valve (212) from supplying the pneumatic brake pipe (105) when at least one malfunction condition of the control system for a railway convoy (400) occurs.