Railway Signalling Validation Layer for SIL2-to-SIL4 ETCS Overlay
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The transition to ETCS Level 2 signalling systems is hindered by the need to re-engineer existing trackside relay logic systems and train driver training, and the cost and complexity of retrofitting trains with new equipment, especially in auto sections where trackside relay logic is used, as SIL2 data cannot be directly used as input for SIL4 systems like ETCS.
Innovation Solution
A railway vehicle monitoring and signalling system that utilizes SIL2 data from trackside train detection devices, validated through conditional analysis, to generate SIL4 input data for Movement Authorities, allowing an ETCS overlay on legacy systems with minimal infrastructure changes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If SIL2 data from trackside relay logic is used directly as input for ETCS Level 2, then infrastructure changes are minimized, but the system reliability and safety integrity level are insufficient because SIL2 cannot be directly used as input for SIL4 systems
Solution Approach 1:
A processor acts as an intermediary between the SIL2 trackside relay logic and the SIL4 ETCS system. The processor receives SIL2 data, performs conditional analysis to validate it against safety criteria, and generates SIL4 input data when validation succeeds. This intermediary approach allows existing SIL2 infrastructure to be utilized while ensuring SIL4 safety requirements are met through the validation layer.
Solution Approach 2:
The system changes the safety integrity level parameter of the data through processing. By applying conditional analysis algorithms, the processor transforms SIL2 data into validated SIL4 input data, effectively upgrading the safety integrity level without requiring complete replacement of the underlying SIL2 infrastructure.
2Reliability
If trackside relay logic systems are re-engineered to provide SIL4 data, then safety and reliability are improved, but the cost and complexity of re-signalling increases significantly
Solution Approach 1:
Instead of completely re-engineering the trackside relay logic systems to provide SIL4 data, the invention applies partial action by adding a validation layer that processes only the necessary SIL2 data through conditional analysis. This partial approach achieves the required SIL4 safety level without the excessive complexity and cost of complete system replacement.
Solution Approach 2:
The processor creates a validated copy of the SIL2 data that meets SIL4 requirements. Rather than modifying the original SIL2 system, the invention generates equivalent SIL4 input data through conditional analysis, preserving the existing infrastructure while providing the required safety integrity level.
3Adaptability or versatility
If existing SSI and RRI interlockings are upgraded with ETCS functionality, then a common European standard is achieved, but the memory capacity and complexity limitations of these systems prevent direct integration
Solution Approach 1:
The system segments the ETCS functionality from the legacy interlocking systems. Instead of integrating ETCS directly into the memory-constrained SSI and RRI systems, the invention separates the validation logic into a standalone processor that receives data from the legacy systems, performs conditional analysis, and generates ETCS-compatible Movement Authorities, bypassing the memory and complexity limitations of the original systems.
4Adaptability or versatility
If comprehensive re-signalling is performed across all routes, then ETCS Level 2 coverage is maximized, but the cost runs into hundreds of millions of GBP and requires huge time and resources
Solution Approach 1:
The processor is designed as a universal solution that can interface with multiple different legacy interlocking systems (SSI, RRI, and other trackside relay logic systems) through standardized conditional analysis. This multi-functional approach allows the same validation architecture to be deployed across different routes and system types, reducing overall implementation costs and resources while maximizing ETCS coverage.
Data Source
Figure 1~3
Figure 4~5
Figure 6~7
AI summary
A railway vehicle monitoring and signalling system arranged to validate SIL2 reported data for input into a SIL4 ETCS system, and a method of validating the SIL2 reported data are described.