Remote Signal Box Control System Fallback Mode
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The safety of rail-bound traffic is compromised during partial failures of technical safety systems, leading to increased accident risks at fallback levels where human responsibility dominates, due to limitations in technical and financial feasibility of maintaining system availability.
Innovation Solution
An operations control system switches to a second operating mode providing limited interlocking functionality upon detecting faults, utilizing pre-existing status information to offer automated support and monitoring, reducing the need for complete system shutdown and enhancing safety by enabling partial automation during communication or signal box failures.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the operations control system is completely switched off during faults, then system safety is maintained, but system availability and productivity deteriorate
Solution Approach 1:
The interlocking functionality is segmented into two distinct parts: a safety-critical interlocking in the signal box and a non-safety-related reduced interlocking logic in the operations control system. This segmentation allows the operations control system to provide limited automated support during faults without compromising overall system safety, thereby resolving the contradiction between safety and availability.
Solution Approach 2:
Instead of completely shutting down the operations control system during faults, the invention implements a partial action approach by providing a reduced interlocking logic that handles only non-safety-critical functions. This partial functionality maintains system availability while the safety-critical functions remain protected through the dedicated signal box interlocking.
2Reliability
If automated support is provided during fallback operation, then safety improves, but system complexity increases
Solution Approach 1:
The safety-critical interlocking functionality is extracted from the operations control system and placed in the signal box, while only the non-safety-related reduced interlocking logic remains in the operations control system. This extraction reduces the complexity burden on the operations control system while maintaining the necessary automated support for fallback operations.
Solution Approach 2:
The system is designed with a predefined reduced interlocking logic that is prepared in advance for fallback operation. This beforehand preparation allows the system to quickly switch to a safe, limited functionality mode during faults without requiring complex real-time decisions, thereby improving fallback safety while controlling complexity.
3Extent of automation
If reduced interlocking logic runs on operations control system, then automated support is maintained, but financial and technical limits are approached
Solution Approach 1:
Different levels of interlocking functionality are assigned to different locations: full safety-critical interlocking in the signal box and reduced non-safety interlocking in the operations control system. This local quality differentiation allows automated support to be maintained where technically feasible while respecting financial and technical constraints through appropriate functional distribution.
Data Source
AI summary
The invention relates to a method for operating, securing and/or monitoring rail-bound traffic, wherein a signal box (10) is controlled remotely in a first operating mode by an operation control system (20). In order to further increase the safety of rail-bound traffic, the method according to the invention is implemented such that a disruption of the signal box (10) or a disruption of the communication between the operation control system (20) and the signal box (10) is determined, the operation control system (20) is switched into a second operating mode upon determination of the disruption, and a limited signal box functionality is provided by the operation control system (20) in the second operating mode. The invention also relates to an operation control system (20).