Secondary ETCS Computer for Automated Train Control Redundancy
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The European Train Control System (ETCS) in rail vehicles is not fully redundant, leading to complete system failure in case of faults in the primary ETCS device, resulting in loss of automated train control functionality.
Innovation Solution
Implementing a secondary ETCS device with a secondary computer that can take over operations from the primary computer in case of a fault, ensuring continued automated train control through switching from a 'sleeping' state to an active state, and utilizing existing components like balise antennas and GSM-R radio transmission devices for communication with the ETCS radio block center.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Extent of automation
If a primary ETCS device is used for automated train control, then automated control functionality is achieved, but complete system failure occurs if a fault occurs in the primary device
Solution Approach 1:
A secondary ETCS device is pre-configured and maintained in a standby state before any fault occurs. This preliminary preparation ensures that when the primary device fails, the secondary device can immediately take over without requiring complex real-time configuration or activation procedures, thus maintaining automated control functionality and system reliability.
2Reliability
If redundant systems are implemented to improve reliability, then system availability upon fault is improved, but device complexity increases
Solution Approach 1:
The secondary ETCS device shares common infrastructure components with the primary device, including the balise antenna, GSM-R radio transmission device, and driver's cab display. By merging these shared resources, the system achieves redundancy for critical functions while avoiding the complexity of completely separate redundant systems. The secondary device only requires its own processing unit and minimal additional components.
3Reliability
If a secondary ETCS device is implemented with full redundancy, then reliability is improved, but manufacturing cost and device complexity increase significantly
Solution Approach 1:
The secondary ETCS device is designed with multi-functionality, capable of operating with shared resources (balise antenna, GSM-R device, display) when functioning as a backup, and potentially serving as a primary device if needed. This universal design reduces manufacturing costs by eliminating the need for completely separate redundant systems while maintaining reliability through the ability to provide full automated control functionality when activated.
Data Source
AI summary
A method for operating a rail vehicle includes, at least to some extent, using a secondary ETCS device which travels along with the rail vehicle but is not used for its operation, if a fault occurs in a primary ETCS device. A secondary EVC takes over the role of a primary EVC and, in many applications, at least some train control functions. The advantage is that train control can, at least in some fault cases, be continued in an automated way in the case of a failure of a component of the primary ETCS device. A rail vehicle and an apparatus for the operation of a rail vehicle are also provided.