Method for operating a train safety assembly, train safety assembly and rail vehicle comprising a train safety assembly
10214226 ยท 2019-02-26
Assignee
Inventors
Cpc classification
B61L15/0081
PERFORMING OPERATIONS; TRANSPORTING
B61L27/70
PERFORMING OPERATIONS; TRANSPORTING
B61L2027/202
PERFORMING OPERATIONS; TRANSPORTING
B61L15/0063
PERFORMING OPERATIONS; TRANSPORTING
International classification
B61L15/00
PERFORMING OPERATIONS; TRANSPORTING
Abstract
A train safety assembly has an onboard apparatus of a first train safety system and a specific transmission device for transmission with a trackside part of a second train safety system. The onboard apparatus is started using a version of a first software and the specific transmission device is started using a version of a second software. The versions of the first and second software are checked for their compatibility. In order to be able to provide the train safety assembly for use on a track section, which is equipped with the trackside part of the second train safety system, and to put same into operation in a faster and more cost-efficient manner, if the started versions of the first and second software are incompatible, the transmission device is automatically restarted with another version of the second software, and the started first and second software are checked for their compatibility.
Claims
1. A method for operating a train safety assembly (34) having an onboard apparatus of a first train safety system with a specific transmission device connected to the onboard apparatus via an interface, and configured for communication with a trackside part of a second train safety system, the method comprising: starting the onboard apparatus using a given version of a first software; starting the specific transmission device using a given version of a second software; checking the given version of the first software and the given version of the second software for compatibility; in the case of incompatibility of the given version of the first software and the given version of the second software, automatically restarting the specific transmission device with another version of the second software; and checking the given version of the first software and the other version of the second software for compatibility.
2. The method according to claim 1, wherein, in the case of incompatibility of the given version of the first software and the started other version of the second software, automatically restarting the specific transmission device with a further version of the second software and checking the given version of the first software and the started further version of the second software for compatibility.
3. The method according to claim 1, which comprises, on each restart of the specific transmission device, automatically restarting the onboard apparatus with the given version of the first software.
4. The method according to claim 1, wherein a data memory with stored version-information on the version of the second software to be started is assigned to the specific transmission device, and the method further comprises: on each start and on each restart, determining the version of the second software to be started by transmitting from the specific transmission device a version-request signal to the data memory via a data-transmission connection; in response to the version-request signal, communicating with the data memory a version-response signal comprising the stored version-information on the version of the second software to be started to the specific transmission device via the data-transmission connection; and in response to the version-response signal, starting the version of the second software to be started with the specific transmission device.
5. The method according to claim 4, wherein the data memory is a non-volatile data memory.
6. The method according to claim 4, which comprises, before the specific transmission device starts, storing information on the given version of the second software as version-information in the data memory so that, in response to the version-response signal, the specific transmission device starts with the one version of the second software.
7. The method according to claim 5, which comprises: in the case of compatibility of the given version of the first software with the given version of the second software, the specific transmission device communicates a version-retain signal to the data memory; and in response to the version-retain signal, retaining the information on the given version of the second software or storing the information anew in the data memory.
8. The method according to claim 5, which comprises: in the case of incompatibility of the given version of the first software and the given version of the second software, communicating with the specific transmission device a version-change signal to the data memory; and in response to the version-change signal, instead of the information on the given version of the second software, storing information on the other version of the second software as version-information in the data memory so that, in response to the version-response-signal, the specific transmission device restarts with the other version of the second software.
9. The method according to claim 8, wherein, in the case of compatibility of the given version of the first software and the started other version of the second software, communicating with the specific transmission device a version-retain signal to the data memory, and in consequence of the version-retain signal, retaining the information on the other version of the second software stored in the data memory or storing the information anew in the data memory.
10. The method according to claim 8, wherein, in the case of incompatibility of the given version of the first software and the started other version of the second software, communicating with the specific transmission device a version-change signal to the data memory; and in response to the version-change signal, instead of the information on the other version of the second software, storing information on the further version of the second software as version-information in the data memory so that, in response to the version-response signal, the specific transmission device restarts with the further version of the second software.
11. The method according to claim 6, wherein the specific transmission device communicates a version-indication signal comprising the version-information on the started version of the second software to the onboard apparatus via the interface, that the onboard apparatus uses the communicated version-information on the started version of the second software and version-information on the started version of the first software to check whether the started versions are compatible or incompatible; and the onboard apparatus blocks the interface for further communication with the specific transmission device if it identifies the started versions as incompatible; the onboard apparatus communicates a version-indication signal comprising the version-information on the started version of the first software to the specific transmission device via the interface if it identifies the started versions as compatible; the specific transmission device uses the communicated version-information on the started version of the first software and the version-information on the started version of the second software to check whether the started versions are compatible or incompatible; the specific transmission device blocks the interface for further communication with the onboard apparatus if it identifies the started versions as incompatible; the specific transmission device communicates the version-change signal to the data memory if it identifies the started versions as incompatible; and the specific transmission device communicates the version-retain signal to the data memory if it identifies the started versions as compatible.
12. The method according to claim 11, wherein the onboard apparatus keeps the interface free for further communication with the specific transmission device if the started versions are identified as compatible and the specific transmission device keeps the interface free for further communication with the onboard apparatus if the started versions are identified as compatible.
13. The method according to claim 7, wherein the specific transmission device communicates a version-indication signal comprising the version-information on the started version of the second software to the onboard apparatus via the interface, that the onboard apparatus uses the communicated version-information on the started version of the second software and version-information on the started version of the first software to check whether the started versions are compatible or incompatible; and the onboard apparatus blocks the interface for further communication with the specific transmission device if it identifies the started versions as incompatible; the onboard apparatus communicates a version-indication signal comprising the version-information on the started version of the first software to the specific transmission device via the interface if it identifies the started versions as compatible; the specific transmission device uses the communicated version-information on the started version of the first software and the version-information on the started version of the second software to check whether the started versions are compatible or incompatible; the specific transmission device blocks the interface for further communication with the onboard apparatus if it identifies the started versions as incompatible; the specific transmission device communicates the version-change signal to the data memory if it identifies the started versions as incompatible; and the specific transmission device communicates the version-retain signal to the data memory if it identifies the started versions as compatible.
14. The method according to claim 13, wherein the onboard apparatus keeps the interface free for further communication with the specific transmission device if the started versions are identified as compatible and the specific transmission device keeps the interface free for further communication with the onboard apparatus if the started versions are identified as compatible.
15. The method according to claim 1, which comprises: providing the given version of the first software of the onboard apparatus and the versions of the software of the specific transmission device in accordance with a System Requirements Specification Version of a European Train Safety System, wherein the System Requirements Specification versions of the European Train Safety System are different from those corresponding to different versions of the second software of the specific transmission device.
16. The method according to claim 4, wherein the version-information on the respective version of the software is provided in form of a number.
17. A train safety assembly for a rail vehicle, comprising an onboard apparatus of a first train safety system and a specific transmission device, which is connected via an interface to said onboard apparatus and which is adapted to a trackside part of a second train safety system, and wherein the train safety assembly is configured to carry out the method according to claim 1.
18. A rail vehicle, comprising a train safety assembly according to claim 17.
Description
BRIEF DESCRIPTION OF THE SEVERAL VIEWS OF THE DRAWING
(1) The invention is described in more detail below with reference to the figures, which show:
(2)
(3)
DESCRIPTION OF THE INVENTION
(4) The rail vehicle 1 shown comprises onboard equipment of a first train safety system 6 designated with 5 as a whole. The first train safety system 6 is a European Train Safety System (ETCS). The onboard equipment 5 comprises an onboard apparatus 7 in the form of an ETCS onboard computer (EVC).
(5) The rail vehicle 1 is located on a track section 8 equipped with trackside equipment 9 of a second train safety system 10. The second train safety system 10 is a train safety system according to a national standard; here for example the Danish train safety system ZUB 123.
(6) The rail vehicle 1 comprises at least one onboard facility 11.1, which is adapted to the second train safety system 10 in order to be able to travel on the track section 5 shown.
(7) The rail vehicle 1 can also comprise further onboard facilities 11.2, . . . , 11.n, which are adapted to further train safety systems in order also to be able to travel on sections of track equipped with trackside equipment of these further train safety systems. The further train safety systems are train safety systems according to further national standards, for example the German train safety system INDUSI or the French train safety system TVM.
(8) The onboard facilities 11.1, 11.2, . . . , 11.n comprise receivers 12.1, 12.2, . . . , 12.n, which are suitably embodied to receive signals from transmitters of assigned trackside equipment. For example, the onboard facility 10.1 comprises the receiver 12.1, which is suitably embodied to receive signals, here designated S.1 as a whole, from a transmitter 13 of the trackside equipment 9 shown of the second train safety system 10. The signals S.1 are used to transmit information on the second train safety system 10.
(9) The onboard facilities 11.1, 11.3, . . . , 11.n further comprise specific transmission devices 14.1, 14.2, . . . , 14.n and non-volatile data memories 15.1, 15.2, . . . , 15.n, wherein the specific transmission devices 14.1, 14.2, . . . , 14.n are communicatively connected to the receivers 12.1, 12.2, . . . , 12.n via first data transmission links 16.1, 16.2, . . . , 16.n and to the non-volatile data memories 15.1, 15.2, . . . , 15.n via second data transmission links 17.1, 17.2, . . . , 17.n. For example, the onboard facility 11.1 comprises the specific transmission device 14.1 and the non-volatile data memory 15.1, wherein the specific transmission device 14.1 is communicatively connected to the receiver 11.1, embodied as a vehicle coupling coil, via the first data-transmission connection 16.1 and to the non-volatile data memory 15.1 via the second data-transmission connection 17.1.
(10) The specific transmission devices 14.1, 14.2, . . . , 14.n are adapted to the trackside part of the respective second train safety system. For example, the specific transmission device 14.1 is adapted to the trackside part 9 of the second train safety system 10 such that it is able to receive, and to some extent also process, the information on the second train safety system 10.
(11) The specific transmission devices 14.1, 14.2, . . . , 14.n are also communicatively connected via a data bus 18, which forms an interface 19, to the onboard apparatus 7 of the first train safety system 6. The interface 19 represents an interface specified in UNISIG documents (FFFIS).
(12) The onboard apparatus 7 of the first train safety system 6 comprises different functional units connected to the data bus 18. These include inter alia an STM control function unit 20, a driver/machine interface, (DMI) 21, a brake interface unit, (BIU) 22 and an odometry unit (Odometry) 23. Here, the driver/machine interface 21 is connected to a driver's cab display 26 operated by the driver 25 via a data-transmission connection 24 and the brake interface unit 22 is connected to a brake system 28 via a data-transmission connection 27.
(13) In the case of the second train safety system 10 (here by way of example ZUB 123), the trackside equipment 9 shown comprises in a known way inter alia a track control center 29, track devices 30 in the form of adapters, track coupling coils functioning as transmitters 13, signals 31 and connection lines 32, 33.
(14) The onboard apparatus 7, the specific transmission device 14.1 of the non-volatile data memory 15.1, the second data-transmission connection 17.1 and the data bus 18 are part of a train safety assembly, designated 34 as a whole, which is suitably embodied to carry out the method described below with reference to
(15) First, the onboard apparatus 7 is provided with a version v.sub.i of a first software. In addition, the specific transmission device 14.1 is provided with least two versions V.sub.I, V.sub.II of a second software. Also held resident in the specific transmission device or in the data memory is a list with information on the different versions of the second software. In the present exemplary embodiment, the list 35.1 is held resident in the specific transmission device 14.1. In the first place, the list 35.1 contains information on the one version V.sub.I and, in the second place, information on the other version V.sub.II of the second software.
(16) Here, the version v.sub.i of the first software of the onboard apparatus 7 and the versions V.sub.I and V.sub.II of the software of the specific transmission device 14.1 are each provided according to a System Requirements Specification Version SRS V of the European Train Safety System, wherein the System Requirements Specification Versions of the European Train Safety System to which the software versions V.sub.I and V.sub.II of the specific transmission device 14.1 correspond are different.
(17) In addition, information on one of the versions V.sub.I, V.sub.II of the second softwarei.e. information from the list 35.1is stored as version-information V.sub.Info in the non-volatile data memory 15.1. Therefore, the non-volatile data memory is provided with the stored version-information V.sub.Info on the one version of the second software to be started (see method step 40 in
(18) The version-information V.sub.Info is a number. This number can, for example, be provided in the form of a FFFIS STM version number provided as defined in Version 3.1.0 of the UNISIG Specification SUBSET-035. In the present exemplary embodiment, the version-information V.sub.Info is provided as a major number X of the FFFIS STM version number. X=3i.e. the major number 3is a version of the second software corresponding to baseline 2. X=4 i.e. the major number 4 is a version of the second software corresponding to baseline 3. In the present exemplary embodiment, therefore, the list 35.1 contains two major numbersnamely in first position the major number 3 and in second position the major number 4.
(19) First, the onboard apparatus 7 and the specific transmission device 14.1 are startedi.e. run up. The start of the two devices is designated 41 in
(20) To determine the version of the second software to be started, the specific transmission device 14.1 communicates a version-request signal S.sub.v-Anfr to the data memory 15.1 via the data-transmission connection 17.1 (see method step 42 in
(21) If, at first, no version-information V.sub.Info were stored in the data memory 15.1, the specific transmission device 14.1 would use the information in first place in the list 35.1i.e. here, the major number 3, as version-information and accordingly start with the version V.sub.I.
(22) The specific transmission device 14.1 communicates the version-indication signal S.sub.V-Ang comprising the version-information V.sub.Info on the started one version V.sub.I of the second software to the onboard apparatus 7 via the interface 19 (see method step 44 in
(23) The onboard apparatus 7 uses the communicated version-information V.sub.Info on the started one version V.sub.I of the second software and version-information v.sub.info on the started version v.sub.i of the started first software to check whether the started versions V.sub.I, v.sub.i are compatible or incompatible (see method step 45 in
(24) The onboard apparatus 7 would communicate a version-indication signal Sv_ang comprising the version-information v.sub.info on the started version v.sub.i of the first software to the specific transmission device 14.1 via the interface 19 if it identifies the started versions V.sub.I, v.sub.i as compatible.
(25) Then, the specific transmission device 14 would use the communicated version-information v.sub.info on the started version v.sub.i of the first software and the version-information V.sub.Info on the started version V.sub.I of the second software to check whether the started versions are compatible or incompatible.
(26) The specific transmission device 14.1 would then communicate a version-retain signal S.sub.V-Erh to the data memory 15.1 if it identifies the started versions V.sub.I, v.sub.i as compatible.
(27) In response to the version-retain signal S.sub.v-Erh, the information on the one version V.sub.I of the second softwarei.e. here the major number 3 would remain stored in the data memory 15.1 or be stored there anew.
(28) However, in the exemplary embodiment depicted in
(29) Although the onboard apparatus 7 still communicates its version-indication signal S.sub.v ang comprising the version-information v.sub.info on the started version v.sub.i of the first software to the specific transmission device 14.1 (see method step 46 in
(30) And, the specific transmission device 14.1 on its part also blocks the interface 19 for further communication with the onboard apparatus 7 since it has identified the started versions V.sub.I, v.sub.i as incompatible.
(31) The specific transmission device 14.1 also communicates a version-change signal S.sub.V-Wechs to the data memory 15.1 because it has identified the started versions as incompatible (see method step 47 in
(32) In response to the version-change signal S.sub.V-Wechs, instead of the information on the one version V.sub.I of the second software, which here corresponds to baseline 2, the information on the other version V.sub.II of the second software, which here corresponds to baseline 3, is stored as version-information V.sub.Info in the data memory 15.1. Therefore, now instead of the major number 3, the major number 4 is stored as version-information V.sub.Info (see method step 48 in
(33) Due to the incompatibility of the started one version v.sub.i of the first software and the started one version V.sub.I of the second software, the specific transmission device 14.1 also restartsand to be precise automatically.
(34) On each restart of the specific transmission device 14.1, the onboard apparatus 7 also restarts with the one version v.sub.i of the first softwareand to be precise also automatically. Therefore, the onboard apparatus 7 starts again with its one version v.sub.i of the first software.
(35) The automatic restart of both devices 7 and 14.1 is designated 49 in
(36) The specific transmission device 14.1 now again communicates its version-request signal S.sub.V-Anfr to the data memory 15.1 (see method step 50 in
(37) The specific transmission device 14.1 then communicates its version-indication signal S.sub.V-Ang, which now comprises the version-information V.sub.Info on the started other version V.sub.II of the second software, to the onboard apparatus 7 via the interface 19 (see method step 52 in
(38) Now, first, the onboard apparatus 7 checks the started one version v.sub.i of the first software and the started other version V.sub.II of the second software for compatibility (see method step 53 in
(39) The onboard apparatus 7 again communicates via the interface 19 its version-indication signal S.sub.v.sub._.sub.ang, which comprises the version-information v.sub.info on the started version v.sub.i of the first software, to the specific transmission device 14.1 since it identifies the started versions V.sub.II, v.sub.i as compatible (see method step 54 in
(40) The specific transmission device 14.1 communicates its version-retain signal S.sub.V-Erh to the data memory 15.1 since it has identified the compatibility of the started one version v.sub.i of the first software and the started other version V.sub.II of the second software (see method step 55 in
(41) If the specific transmission device 14.1 were to possess a further version V.sub.III of the second software, which, for example, corresponds to baseline 4, then information on this further version V.sub.III would be found in the third place in the list. Then, in the case of incompatibility of the started one version v.sub.i of the first software and the started other version V.sub.II of the second software, the specific transmission device would communicate the version-change signal to the data memory, wherein, in response to the version-change signal, instead of the information on the other version V.sub.II of the second software, information on the further version V.sub.III of the second software would be stored as version-information in the data memory.
(42) Therefore, in the case of incompatibility of the started one version v.sub.i of the first software and the started other version V.sub.II of the second software, the specific transmission device 14.1 would automatically restart, and to be precise in response to the version-response signal, now with the further version V.sub.III of the second software.
(43) And then, the started one version v.sub.i of the first software and the started further version V.sub.III of the second software would be checked for their compatibility.
(44) In the case of compatibility of the started one version vi of the first software and the started further version VIII of the second software, the specific transmission device 14.1 would communicate the version-retain signal to the data memory 15.1, wherein, in response to the version-retain signal, the information on the further version V.sub.III of the second software would remain stored or be stored anew in the data memory 15.1.
(45) In the exemplary embodiment shown, however, the started one version v.sub.i of the first software and the started other version V.sub.II of the second software are compatible. The onboard apparatus 7 on its part holds the interface 19 for further communication with the specific transmission device 14.1 since it identifies the started versions as compatible and the specific transmission device on its part also holds the interface 19 for further communication with the onboard apparatus 7 since it identifies the started versions as compatible.
(46) In other words, with the described method, in the connection setup between the specific transmission device 14.1 and the onboard apparatus 7, it is possible to select the necessary version of the second software in connection with the non-volatile data memory 15.1. Or, expressed another way, the specific transmission device is able to select the baseline. Here, the specific transmission device 14.1 and the onboard apparatus 7 communicate with one other via the data bus 18 via which the connection is established. When starting (i.e. when running-up)due to the major number X held resident in the data memory as version-information V.sub.Infoit is first assumed in the specific transmission device 14.1 that the necessary version of the second software corresponds to one of the standard baselines. Therefore, it is first assumed that version of the second software required is that to which major number X stored in the data memory 15.1 is assigned according to UNISIG Specification SUBSET-035. The specific transmission device 14.1 starts with this version of the second software and attempts to use this to establish the connection to the STM control function unit 20 of the onboard apparatus 7 via the data bus 18.
(47) This attempt can finish with one of the four following results: a.) The connection is established successfully and the onboard apparatus 7 responds with its version-indication signal S.sub.v.sub._.sub.ang, which comprises the version-information v.sub.info on the started version of the first softwarehere by way of example also in the form of a major number X defined according to the UNISIG Specification SUBSET-035. The specific transmission device 14.1 identifies from the major numbers that the started version of the first software and the started version of the second software are compatible. In other words, the onboard apparatus responds to a baseline version format of the specific transmission device with a baseline version format and the specific transmission device identifies that the baseline version format of the onboard apparatus corresponds to its baseline version formatthe started versions of the first software and the second software are compatible. b.) The connection is established successfully and the onboard apparatus 7 responds with its version-indication signal S.sub.v.sub._.sub.ang, which comprises the version-information v.sub.info in the form of a major number X. The specific transmission device identifies that the started version of the first software and the started version of the second software are incompatible. In other words, the onboard apparatus responds to the baseline version format of the specific transmission device with its baseline version format and the specific transmission device identifies that this baseline version format does not correspond to its baseline version formatthe versions are incompatible. c.) The connection is not established successfully, however, the onboard apparatus 7 still responds with its baseline version format before closing the connection. The specific transmission device 14.1 identifies that the started version of the first software and the started version of the second software are incompatiblei.e. it identifies that its baseline version format does not correspond to the baseline version format of the onboard apparatus 7. d.) The connection is not established successfully, the onboard apparatus 7 closes the connection immediately without responding with its baseline version format. The specific transmission device 14.1 also identifies from the lack of response that the started version of the first software and the started version of the second software are incompatible.
(48) Therefore, result a.) is obtained when the started version of the first software and the started version of the second software are compatible. If, however, these versions are incompatible, one of results b.), c.) or d.) is obtained.
(49) In the case of compatibility (case A), the established connection is correct. I.e., the specific transmission device 14.1 has selected with its started version of the second software a software compatible with the started version of the first software of the onboard apparatus. In other words, the specific transmission device 14.1 has selected with its started baseline a baseline compatible with the baseline of the onboard apparatus. The specific transmission device ensures that this compatible baseline is stored in the data memory before it runs down and uses this baseline from the start in the event of the establishment of a subsequent connection. The entire data traffic, including with other functions of the onboard apparatus, for example the DMI or the BIU, is effected with a corresponding protocol format of this selected baseline. The onboard apparatus now has the condition of a configured baseline.
(50) In the case of incompatibility (case B), the specific transmission device has not received confirmation of its baseline from the STM control function unit 20 of the onboard apparatus 7. The specific transmission device then assumes that the cause is incompatibility of the baseline. Therefore, the baseline of the specific transmission device 14.1 is changed. The information on the newly selected baseline is stored in the data memory 15.1 as version-information.
(51) This case B prevails first with the exemplary embodiment shown in
(52) A new connection is established with the two devices 7 and 14.1. This takes place by restarting the two devices. The specific transmission device 14.1 again attempts to connect the onboard apparatus 7, but now with the new baseline. Once again, the above-described case differentiation takes place. If the new baseline of the specific transmission device 14.1 is now compatible with the baseline of the onboard apparatus 7, case A takes effect. If not, case B prevails again. With the exemplary embodiment shown in
(53) Therefore, the train safety assembly 34 according to the invention enables the specific transmission device to be connected with both currently usual embodiments of the onboard apparatusi.e. with a version of the first software according to baseline 2 or with a version of the first software according to baseline 3; hitherto this could only be achieved by a complete replacement of devices.
(54) A completely refreshed selection of the baseline of the specific transmission device 14.1 is effected by deleting the stored version-information V.sub.Info.
(55) The preselection of the desired baseline can be effected by the selective targeted storage of information on one of the available versions of the second softwarein other words by the selective storage of a baseline. If the information on this preselected version of the second software is not in first place in the list, the selection is continued with the information in first place if both the first preselected version and all versions with information that comes after the information for the preselected version in the list have been found to be incompatible.
(56) However, here, the specific transmission device is embodied such that it does not start any of the available versions of the second software automatically twice. Therefore, if all available versions of the second software are found to be incompatible with the version of the first software, no automatic restart of the specific transmission device takes place or any such restart would be aborted.