Encrypted Train Integrity Signaling for Rapid Car Coupling

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing railway vehicle integrity control systems are vulnerable to external interference and cyberattacks, and the process of connecting cars to the network is lengthy and complex, lacking rapid coupling capabilities.

Innovation Solution

A railway vehicle integrity control system with a transmitter on the tail car emitting an encrypted control signal, an electronic control unit on the lead car, and a communication network with standardized network nodes that pass through each car, using overhead wireless communication and accelerometers for rapid integrity monitoring, and a rolling code encryption to prevent interference and cyberattacks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If all cars are equipped with network nodes for continuous signal transmission, then real-time integrity monitoring is improved, but the system becomes vulnerable to external interference and cyberattacks

Engineering Contradiction:
Improveintegrity monitoring reliabilityVSAvoidexternal interference and cyberattacks
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces a dedicated wireless communication channel as an intermediary between the transmitter and electronic control unit, separating the integrity monitoring function from the general vehicle communication network. This mediator channel is specifically designed for secure signal transmission, reducing vulnerability to external interference and cyberattacks while maintaining real-time monitoring capability.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If each car is connected to the network through multiple network nodes, then monitoring coverage is improved, but the coupling process becomes lengthy and complex

Engineering Contradiction:
Improvemonitoring coverageVSAvoidcoupling time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent segments the network into standardized modular units (guide cars with integrated network nodes) that can be independently coupled to the lead car. Each guide car unit contains pre-configured network nodes, allowing rapid coupling without complex network setup procedures. This segmentation enables quick assembly while maintaining comprehensive monitoring coverage through the distributed network architecture.

Inventive Principle:
Principle #1Segmentation

3Difficulty of detecting and measuring

If a comprehensive network of network nodes is deployed on all cars, then detection capability is improved, but system complexity and cost increase

Engineering Contradiction:
Improveintegrity breach detection capabilityVSAvoidsystem complexity
Core Design Contradiction:
Difficulty of detecting and measuringVSDevice complexity

Solution Approach 1:

The patent implements a universal network node design that performs multiple functions: wireless signal transmission, integrity monitoring, and communication with the electronic control unit. By making the network nodes multi-functional, the system achieves comprehensive detection capability without proportionally increasing complexity, as each node handles multiple tasks simultaneously rather than requiring separate dedicated components for each function.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentEP3501940B1Railway vehicle, associated railway system and method for composition of such a railway vehicle
Publication Date: 2025.11.12 ALSTOM HOLDINGS SA
  • EP3501940B1 patent drawingFigure 1~2
  • EP3501940B1 patent drawingFigure 3

AI summary

The present invention relates to a railway vehicle (12) comprising: - a plurality of cars (13) including a lead car (16) and a set of cars to be guided (18) including a trailing car (20), - a control system (15) for the integrity of the railway vehicle (12) comprising: + a transmitter (26) located on board the trailing car (20) and configured to transmit a control signal; + an electronic control unit (28) located on board the lead car (16) and configured to receive the control signal and command the railway vehicle (12) to stop if the control signal is not received; + a communication network (29) for transmitting the control signal; The control signal consists of an encrypted signal including an identification code, the electronic control unit (28) being configured to decrypt the control signal.