An interlocking device performs route control for trains based on: first operation diagram information as train operation diagram information on a train which runs between stations; second operation diagram information as train operation diagram information on a train which moves in a station yard; and on-track position information on the trains. The interlocking device performs control with time on a signal and/or a switch on a route of a train based on different information according to whether a predetermined condition is satisfied.

A system, in particular for controlling signal towers in rail traffic, includes at least a plurality of redundant replicants for generating redundant control signals. A voter structure having a plurality of majority voters is also provided. Each majority voter has a respective output and inputs that are connected to the outputs of the plurality of redundant replicants. The voter structure and the plurality of redundant replicants are separated from one another in terms of hardware, the outputs of the plurality of majority voters are connected to the inputs of a discriminator voter and the output of the discriminator voter provides a control signal, in particular for controlling signal towers. The discriminator voter only emits a control signal when the inputs thereof are not at variance.

A railway turnout control method comprises: constructing a data space corresponding to a railway turnout area (101); adding a virtual railway turnout, in the data space, to an area in which a target turnback stopping point is located (102); adding the virtual railway turnout to a railway turnout list corresponding to a route along which a train drives into the area (103); and not releasing claim of the virtual railway turnout when the train stops at the turnback stopping point (104); Also provided is a railway turnout control system. The method and system can solve problems of deadlock of a turnback area and insufficient safety protection of crossed routes.

A safety method is provided for a railway network which is divided into track segments by track elements and can be traveled by vehicles. In the method the vehicles request, from selections of the track elements, steps for assignment as a travel path element. Each of the selected track elements automatically assigns itself as a travel path element for each vehicle that requests the steps for assignment as a travel path element, under predetermined conditions. For temporal optimization of the assignment of the track elements as travel path elements, the respective track element automatically assigns itself to the respective vehicle, in that in reaction to a first request of the respective vehicle in a demand type requested by the respective vehicle, the track element carries out its approval as a travel path element for the respective vehicle.

This trackside controller for at least one piece of trackside equipment of a railway network, comprising a processor, a memory unit associated with the processor, and at least one communication port configured to be directly connected to the piece of trackside equipment. The memory unit comprises an area dedicated to storing a logic object representative of said at least one piece of trackside equipment, the logic object being executable by the processor and comprising a plurality of logic rules defining the operation of said at least one piece of trackside equipment.

A distributed interlocking device, architecture and process are disclosed, and are based on segregating vital logic for a signal installation by type of signal equipment. A plurality of intelligent signal devices is disclosed, wherein each intelligent signal device is used to control a basic signal unit. A signal unit includes a set of signal apparatuses that are geographically and logically interrelated. An intelligent signal device receives data related to the states of other signal devices, determines and controls its own operational states, and communicates its own operational states to other devices. A generic intelligent signal device is also disclosed. Further, a plurality of new concepts, and signal control functions are provided, and include a vital change management process, and a failure recovery scheme based on dynamic reconfiguration of home and distant control functions.

A route control program generation device constructs a group of a plurality of environment models with different states in which the states of the plurality of environment models are changed in various manners. The environment model is constituted by a first moving body that is a control target and is present on a track divided into a plurality of sections, and a second moving body other than the control target, and searches for a state transition order where it is possible to achieve a request for causing the first moving body to move to a prescribed section by causing the first moving body to move to a destination while causing a state of one environment model to transition to a state of another environment model in response to the request. The route control program generation device constructs the group to match a prescribed restriction condition based on the restriction condition.

An interlocking data safe conversion method for formal verification and a translator. Two translators with same functions are developed by adopting different programming methods and programming languages. An input file of each of the translators at least comprises an interlocking information table in interlocking data, a device interface information table, a station yard description data and interlocking Boolean logic data. Consistency of output files of the two translators is compared to realize detection process failure.

An interface adapter for controlling a track-side object of a railway installation includes an analog input from an external source and an analog output to drive an electromechanical relay circuit. A bidirectional digital communication interface communicates digital data including first digital data transmitted and second digital data received. An analog-to-digital converter coupled to the analog input is configured to generate a first digital signal representing the electrical input. A digital-to-analog converter coupled to the analog output is configured to generate the electrical output in response to a second digital signal. A power supply supplies electrical power to the digital-to-analog converter. A programmable logic control circuit includes a control program configured to produce the first digital data from the first digital signal, transmit the first digital data using the digital communication interface, process the second digital data, and produce the second digital signal in response to the second digital data.

The safety device includes a plurality of arithmetic units which output an arithmetic result of input data as arithmetic data in each control period, a first comparison unit which compares information indicating the control period at a timing at which each of the plurality of arithmetic units outputs the arithmetic data, a plurality of temporary storage units which hold the arithmetic data output by the plurality of arithmetic units, a second comparison unit configured to compare the arithmetic data held by the plurality of temporary storage units, and an output unit configured to output the arithmetic data to outside. Each of the plurality of temporary storage units outputs the arithmetic data held therein according to a comparison result from the first comparison unit, and the output unit outputs the arithmetic data output by the temporary storage units to the outside according to a comparison result from the second comparison unit.