A rail crossover control system for a rail track section is disclosed. The rail track section has first and second rail tracks, a crossover track section extending between the first and second rail tracks, at least one first set of rail switches arranged to controllably determine whether a train continues on the first track or is diverted from the first track onto the crossover track section, and at least one second set of rail switches arranged to controllably determine whether a train continues on the second track or is diverted from the second track onto the crossover track section. The system comprises at least one interlocking control unit arranged to control the first and second sets of rail switches according to determined train routes, and an obstruction detector arranged to detect presence of an obstruction on the crossover track section and generate an obstruction signal when an obstruction is detected.

A rail crossover control system for a rail track section is disclosed. The rail track section has first and second rail tracks, a crossover track section extending between the first and second rail tracks, at least one first set of rail switches arranged to controllably determine whether a train continues on the first track or is diverted from the first track onto the crossover track section, and at least one second set of rail switches arranged to controllably determine whether a train continues on the second track or is diverted from the second track onto the crossover track section. The system comprises at least one interlocking control unit arranged to control the first and second sets of rail switches according to determined train routes, and an obstruction detector arranged to detect presence of an obstruction on the crossover track section and generate an obstruction signal when an obstruction is detected.

An interlocking data safe conversion method for formal verification and a translator. Two translators with same functions are developed by adopting different programming methods and programming languages. An input file of each of the translators at least comprises an interlocking information table in interlocking data, a device interface information table, a station yard description data and interlocking Boolean logic data. Consistency of output files of the two translators is compared to realize detection process failure.

An interlocking data safe conversion method for formal verification and a translator. Two translators with same functions are developed by adopting different programming methods and programming languages. An input file of each of the translators at least comprises an interlocking information table in interlocking data, a device interface information table, a station yard description data and interlocking Boolean logic data. Consistency of output files of the two translators is compared to realize detection process failure.

An interlocking device performs route control for trains based on: first operation diagram information as train operation diagram information on a train which runs between stations; second operation diagram information as train operation diagram information on a train which moves in a station yard; and on-track position information on the trains. The interlocking device performs control with time on a signal and/or a switch on a route of a train based on different information according to whether a predetermined condition is satisfied.

An interlocking device performs route control for trains based on: first operation diagram information as train operation diagram information on a train which runs between stations; second operation diagram information as train operation diagram information on a train which moves in a station yard; and on-track position information on the trains. The interlocking device performs control with time on a signal and/or a switch on a route of a train based on different information according to whether a predetermined condition is satisfied.

An interlocking device performs route control for trains based on: first operation diagram information as train operation diagram information on a train which runs between stations; second operation diagram information as train operation diagram information on a train which moves in a station yard; and on-track position information on the trains. The interlocking device changes an order of the route control according to whether a predetermined condition is satisfied.

An interlocking device performs route control for trains based on: first operation diagram information as train operation diagram information on a train which runs between stations; second operation diagram information as train operation diagram information on a train which moves in a station yard; and on-track position information on the trains. The interlocking device changes an order of the route control according to whether a predetermined condition is satisfied.

A system, in particular for controlling signal towers in rail traffic, includes at least a plurality of redundant replicants for generating redundant control signals. A voter structure having a plurality of majority voters is also provided. Each majority voter has a respective output and inputs that are connected to the outputs of the plurality of redundant replicants. The voter structure and the plurality of redundant replicants are separated from one another in terms of hardware, the outputs of the plurality of majority voters are connected to the inputs of a discriminator voter and the output of the discriminator voter provides a control signal, in particular for controlling signal towers. The discriminator voter only emits a control signal when the inputs thereof are not at variance.

A method and system for managing guided vehicle traffic over a railway network include a first ATS system regulating guided vehicle traffic over a first regulation domain and a second ATS system regulating guided vehicle traffic over a second regulation domain. The first and second regulation domains have a common boundary. The first ATS system sends, to the second ATS system, configuration and circulation data for a part of the first regulation domain, for regulating guided vehicle traffic on the part according to a set of regulation data from the second ATS system. The second ATS system determines, from received configuration and circulation data, regulation data for an extended regulation domain including the second regulation domain and the part and for sending to the first ATS system the set of regulation data regulating the guided vehicle traffic on the part of the regulation domain of the first ATS system.