Railway Plant Status Image Generation with Safety Integrity

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing systems for generating output images representing the status of railway transportation plants lack safety integrity, as they often rely on uncertified commercial graphics libraries and may display identical but incorrect images, failing to meet safety standards required in the railway sector.

Innovation Solution

A method and system that construct a non-commercial graphics library compliant with safety standards, using a configuration terminal to prepare a graphical data structure from a reference image, scan it to identify symbols, and generate graphical data records, ensuring safety integrity by checking the correctness of the data structure and loading it onto a calculation terminal that adheres to CENELEC EN50126, EN50128, and EN50129 standards.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of manufacture

If commercial off-the-shelf graphics libraries are used to generate output images, then the ease of manufacture and device complexity are improved, but the safety integrity and reliability deteriorate because these libraries are uncertified for safety critical sectors

Engineering Contradiction:
Improveease of manufactureVSAvoidsafety integrity
Core Design Contradiction:
Ease of manufactureVSReliability

Solution Approach 1:

The patent creates a simplified copy of graphics library functionality that is specifically tailored for safety-critical railway applications. Instead of using complex commercial graphics libraries, the invention implements a custom graphics generation system that replicates only the essential functions needed for railway status display, ensuring safety integrity while maintaining ease of manufacture through a streamlined approach

Inventive Principle:
Principle #26Copying

Solution Approach 2:

The patent changes the fundamental parameters of graphics generation by moving from pixel-manipulation based approaches to vector-based graphical data structures. This parameter change enables safety-critical operations by using mathematical descriptions of graphics elements that can be verified and validated, rather than relying on uncertified commercial library implementations

Inventive Principle:
Principle #35Parameter changes

2Reliability

If dual processing units with image voting are implemented, then the reliability through safety checks is improved, but the device complexity and loss of time increase due to additional processing steps

Engineering Contradiction:
Improvesafety integrityVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements a feedback mechanism where the generated output image is compared against the current known status of railway infrastructure. This feedback loop ensures safety integrity by verifying that displayed information matches actual system state, without requiring complex dual processing units. The feedback approach provides reliable safety checks while maintaining simpler device architecture

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The patent performs preliminary validation of graphical data structures during the image generation process itself, rather than requiring post-generation verification through dual processing units. By embedding safety checks within the generation workflow, the system achieves high reliability without the added complexity of redundant processing systems

Inventive Principle:
Principle #10Preliminary action

3Ease of operation

If commercial graphics libraries are used, then the ease of operation is improved, but the safety integrity deteriorates because they may display identical but incorrect images without detection

Engineering Contradiction:
Improveease of operationVSAvoidimage correctness
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent implements feedback validation where generated images are cross-checked against the authoritative status data from railway signaling systems. This ensures that displayed images accurately reflect the actual state of tracks, signals, and infrastructure, preventing incorrect images from being displayed while maintaining ease of operation through automated verification

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The patent replaces the mechanical approach of trusting commercial graphics library output with a data-driven verification system. Instead of relying on the correctness of external library implementations, the system substitutes a direct comparison mechanism that validates image content against known railway status data, ensuring image correctness while maintaining operational simplicity

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentEP4234360A1Method and system for generating an output image representative of a status of a railway transportation plant
Publication Date: 2023.08.30 RETE FERROVIARIA ITALIANA SPA
  • EP4234360A1 patent drawingFigure 1
  • EP4234360A1 patent drawingFigure 2
  • EP4234360A1 patent drawingFigure 3~4

AI summary

Described is a method for generating an output image representing a status of a railway transportation plant comprising a step of preparing a graphical data structure. The preparation includes the steps of: providing a reference image (3) for the plant, including symbols (30); a scan of a reference image (3) for identifying the symbols (30); a generation of the graphical data structure including a plurality of graphical data records (4), as a function of the symbols (30). The method comprises a step of: preparing management instructions, loading instructions for managing the graphical data structure in a calculation terminal (2); receiving, at the calculation terminal (2) a temporal succession of sets of input data (100), each set representing an updated status of the plant; generating, by a processing unit (200) of the calculation terminal (2), the output image, on the basis of the plurality of graphical data records (4) and on the set of input data (100) corresponding to the updated status of the plant, according to the management instructions.