Safe State Controller for Train Interface Card Power Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for controlling electric power to interface cards in train communication networks do not effectively manage failures, particularly distinguishing between low and high severity failures to ensure safe state transitions and prevent erroneous signal transmission.
Innovation Solution
A method and safe state controller that utilize a connecting device linked to a failure detection unit, switching between normal and safe state modes, with an energy storage unit to cut off power in case of failures, and a semiconductor switching device to activate different safe state modes, including a reversible temporarily cut off and irreversible permanent cut off, to prevent signal transmission in high severity failures.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the interface card remains connected to the power source during high severity failures, then power supply continuity is maintained, but erroneous signals may be transmitted and safety is compromised
Solution Approach 1:
The failure detection unit continuously monitors for failures before they can cause harmful effects. Upon detecting a high severity failure, the system preemptively cuts off power to the interface card through the connecting device, preventing erroneous signals from being transmitted. This preliminary protective action eliminates the harmful effect before it can manifest.
Solution Approach 2:
The connecting device extracts and removes power from the interface card when a high severity failure is detected. By taking out the power supply connection, the system isolates the interface card from the power source, thereby preventing it from generating or transmitting erroneous signals that could compromise safety.
2Reliability
If the interface card is immediately disconnected upon failure detection, then safety is ensured, but recovery time increases for low severity failures
Solution Approach 1:
The failure detection and response system is segmented into different pathways for low severity and high severity failures. For low severity failures, the system activates a less severe response that allows for potential recovery without complete disconnection. For high severity failures, full disconnection is implemented. This segmentation enables differentiated response strategies that optimize both safety and recovery time.
Solution Approach 2:
The connecting device dynamically adjusts its operation based on the severity of detected failures. Rather than a static disconnect-all-failures approach, the system dynamically selects the appropriate response level, enabling quick recovery for minor issues while maintaining safety for critical failures. This dynamic behavior optimizes the balance between safety and operational continuity.
3Measurement precision
If the connecting device continuously monitors for failures, then detection precision is improved, but energy consumption increases
Solution Approach 1:
The failure detection unit operates autonomously to monitor the interface card and power source for failures. By implementing self-service monitoring, the system maintains continuous surveillance without requiring external intervention or additional energy-intensive control mechanisms. The detection unit independently identifies failures and triggers appropriate responses, optimizing the balance between detection precision and energy efficiency.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Effectively disconnects safety-related host devices from the communication network upon failure detection, preventing erroneous signals and ensuring safe state transitions, with the ability to reconnect in low severity failures while permanently disconnecting in high severity scenarios.
Implementation Method 1
with an energy storage unit to cut off power in case of failures
Implementation Method 2
a semiconductor switching device to activate different safe state modes
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention relates to a method for controlling electric power provided to an interface card (2), the interface card (2) connecting one or more host devices (3) to one or more network devices (4) within a communication network, the method comprising: a) providing a connecting device (5) which in a normal operation mode connects the interface card (2) to a power source (6) thereby providing electrical power to the interface card (2); b) providing a failure detection unit (7a; 7b), the failure detection unit (7a; 7b) being at least indirectly linked to the connecting device (5); c) upon detection of a low severity failure and/or a high severity failure by the failure detection unit (7a; 7b), the connecting device (5) is changing to a safe state mode in which the connecting device (5) cuts off the power source (6) from the interface card (2). The invention further relates to a corresponding safe state controller (1).