A computer interlocking system includes: a first sub-system and a second sub-system that have a same structure and function, where the first sub-system and the second sub-system form a double 2-vote-2 architecture, respectively including a main control layer, a network layer, and a communication and execution layer; the network layer being configured to construct a communication network of a sub-system in which the network layer is located; the main control layer and the communication and execution layer in the first sub-system being respectively connected to a communication network of the first sub-system; and the main control layer and the communication and execution layer in the second sub-system being respectively connected to a communication network of the second sub-system.

A distributed interlocking device, architecture and process are disclosed, and are based on segregating vital logic for a signal installation by type of signal equipment. A plurality of intelligent signal devices is disclosed, wherein each intelligent signal device is used to control a basic signal unit. A signal unit includes a set of signal apparatuses that are geographically and logically interrelated. An intelligent signal device receives data related to the states of other signal devices, determines and controls its own operational states, and communicates its own operational states to other devices. A generic intelligent signal device is also disclosed. Further, a plurality of new concepts, and signal control functions are provided, and include a vital change management process, and a failure recovery scheme based on dynamic reconfiguration of home and distant control functions.

This trackside controller for at least one piece of trackside equipment of a railway network, comprising a processor, a memory unit associated with the processor, and at least one communication port configured to be directly connected to the piece of trackside equipment. The memory unit comprises an area dedicated to storing a logic object representative of said at least one piece of trackside equipment, the logic object being executable by the processor and comprising a plurality of logic rules defining the operation of said at least one piece of trackside equipment.

A device for monitoring network traffic arriving at a signal box of a railway operating system over a communication network includes a network TAP for reading the network traffic arriving at the signal box over the communication network and outputting the read arriving network traffic to a processor in order to check the read arriving network traffic. A network separating device separates the signal box from the communication network. The processor is configured to actuate the network separating device on the basis of the result of the check of the read arriving network traffic in such a way that the network separating device separates the signal box from the communication network. A corresponding method and a computer program product are also provided.

A safety method is provided for a railway network which is divided into track segments by track elements and can be traveled by vehicles. In the method the vehicles request, from selections of the track elements, steps for assignment as a travel path element. Each of the selected track elements automatically assigns itself as a travel path element for each vehicle that requests the steps for assignment as a travel path element, under predetermined conditions. For temporal optimization of the assignment of the track elements as travel path elements, the respective track element automatically assigns itself to the respective vehicle, in that in reaction to a first request of the respective vehicle in a demand type requested by the respective vehicle, the track element carries out its approval as a travel path element for the respective vehicle.

A railway turnout control method comprises: constructing a data space corresponding to a railway turnout area (101); adding a virtual railway turnout, in the data space, to an area in which a target turnback stopping point is located (102); adding the virtual railway turnout to a railway turnout list corresponding to a route along which a train drives into the area (103); and not releasing claim of the virtual railway turnout when the train stops at the turnback stopping point (104); Also provided is a railway turnout control system. The method and system can solve problems of deadlock of a turnback area and insufficient safety protection of crossed routes.

A railway turnout control method comprises: constructing a data space corresponding to a railway turnout area (101); adding a virtual railway turnout, in the data space, to an area in which a target turnback stopping point is located (102); adding the virtual railway turnout to a railway turnout list corresponding to a route along which a train drives into the area (103); and not releasing claim of the virtual railway turnout when the train stops at the turnback stopping point (104); Also provided is a railway turnout control system. The method and system can solve problems of deadlock of a turnback area and insufficient safety protection of crossed routes.

A computer interlocking system includes: a first sub-system and a second sub-system that have a same structure and function, where the first sub-system and the second sub-system form a double 2-vote-2 architecture, respectively including a main control layer, a network layer, and a communication and execution layer; the network layer being configured to construct a communication network of a sub-system in which the network layer is located; the main control layer and the communication and execution layer in the first sub-system being respectively connected to a communication network of the first sub-system; and the main control layer and the communication and execution layer in the second sub-system being respectively connected to a communication network of the second sub-system.

The present disclosure discloses an interlocking protection device for turnout switching. The interlocking protection device for turnout switching comprises a receiving module, a confirmation module, a processing module, and a centralized control interlocking module, wherein the receiving module is configured to receive a turnout switching instruction; the confirmation module is configured to receive a confirmation instruction; the processing module is configured to determine a target turnout position according to the turnout switching instruction and output a driving confirmation signal according to the confirmation instruction; and the centralized control interlocking module comprises a confirmation unit and a position switch unit. Under a centralized control mode, the confirmation unit carries out separate turnout locking according to the target turnout position and carries out locking confirmation according to the driving confirmation signal. After locking confirmation, the position switch unit closes target turnout position switches and opens the other turnout position switches.

An interlocking data safe conversion method for formal verification and a translator. Two translators with same functions are developed by adopting different programming methods and programming languages. An input file of each of the translators at least comprises an interlocking information table in interlocking data, a device interface information table, a station yard description data and interlocking Boolean logic data. Consistency of output files of the two translators is compared to realize detection process failure.