Operation of a rail vehicle by means of an ETCS device

Abstract

A method for operating a rail vehicle includes, at least to some extent, using a secondary ETCS device which travels along with the rail vehicle but is not used for its operation, if a fault occurs in a primary ETCS device. A secondary EVC takes over the role of a primary EVC and, in many applications, at least some train control functions. The advantage is that train control can, at least in some fault cases, be continued in an automated way in the case of a failure of a component of the primary ETCS device. A rail vehicle and an apparatus for the operation of a rail vehicle are also provided.

Claims

1. A method for operating a train, the method comprising the following steps: providing a primary train control device having a primary computer and a driver's display, and a secondary train control device having a secondary computer, wherein the primary train control device is located on one locomotive of a train consist and the secondary train control device is located on another locomotive of the train consist; using the primary computer in connection with the primary train control device to control the train; in response to a fault, switching from the primary computer to the secondary computer; and using the secondary computer together with the driver's display of the primary train control device to control the train.

2. The method according to claim 1, wherein the fault includes at least one of the following: a failure of a component of the primary train control device; or a fault message regarding the primary train control device.

3. The method according to claim 1, which further comprises, in reponse to the fault, switching at least parts of the primary train control device to an isolated state in which the parts of the primary train control device are inactive, and shifting the secondary computer from a sleeping state to an active state.

4. The method according to claim 3, which further comprises switching the primary train control device to the isolated state and signaling the isolated state to the secondary computer.

5. The method according to claim 4, which further comprises carrying out the step of signaling the isolated state to the secondary computer via a bus system, a circuit or a radio connection.

6. The method according to claim 1, which further comprises: slowing down the train in response to the fault; when the train is stationary, switching at least parts of the primary train control device to an isolated state in which the parts of the primary train control device are inactive using train control isolation switches and interrupting a train control connection to an train control radio block center.

7. The method according to claim 6, which further comprises carrying out the step switching at least parts of the primary train control to the isolated state by inactivating the parts of the primary train control except for a recording unit and the driver's cab display device, when the train is stationary.

8. The method according to claim 1, which further comprises using the secondary computer to operate the train by providing at least one functionality selected from the group consisting of: monitoring a highest admissible speed of the train, and monitoring a highest admissible speed of a route.

9. The method according to claim 8, which further comprises carrying out the step of monitoring the highest admissible speed of the route based on external specifications.

10. The method according to claim 1, which further comprises providing a balise antenna at a head of the train relative to a direction of travel of the train, being used by the secondary computer for operation of the train.

11. The method according to claim 10, which further comprises , when the balise antenna at the head of the train cannot be used, providing another balise antenna of the train and using the other balise antenna with the secondary computer for operation of the train.

12. The method according to claim 11, which further comprises providing reduced backup functionality for operation of the train by using the secondary computer.

13. The method according to claim 12, which further comprises using the secondary computer in a train control mode for the reduced backup functionality.

14. A train, comprising: a primary train control device having a primary computer and a driver's display; a secondary train control device having a secondary computer; said primary train control device being configured to be switched to an inactive state in response to a fault in said primary train control device; said secondary computer being configured to be activated to control the train in response to the fault together with said driver's display of said primary train control device; and wherein said primary train control device is located on one locomotive of a train consist and said secondary train control device is located on another locomotive of the train consist.

15. In a train having a primary train control device located on one locomotive of a train consist, wherein the primary train control device has a driver's display, the improvement comprising: a secondary train control device with a secondary computer, said secondary train control device located on another locomotive of the train consist, said secondary train control device configured to receive an activation message in reponse to a fault in said primary train control device and to be activated to control the train in connection with said driver's display of said primary train control device after the primary train control device has deactivated in reponse to the fault.

Description

BRIEF DESCRIPTION OF THE SEVERAL VIEWS OF THE DRAWING

(1) The diagrams show

(2) FIG. 1 a diagrammatic view of a rail vehicle with a plurality of carriages, some of which have ETCS devices with EVCs;

(3) FIG. 2 exemplary switching between ETCS devices, in particular EVCs of the ETCS devices, on the basis of a flow chart.

DESCRIPTION OF THE INVENTION

(4) For rail vehicles with several ETCS vehicle devices which are electrically connected, a secondary EVC which was in sleeping mode until then assumes the function of vehicle control after and/or for isolation of the leading active EVC (i.e. the primary EVC, also referred to as ETCS computer).

(5) It should be noted that primary EVC and secondary EVC are only selected as exemplary illustrative terms to show that one of the computers (the primary EVC) was active previously and is at least partially replaced by the other computer (the secondary EVC). Accordingly, the primary EVC is part of the primary ETCS device and the secondary EVC is part of the secondary ETCS device. Preferably, several ETCS devices are provided in one rail vehicle, for example in various carriages of the rail vehicle.

(6) Thereby, at least part of the automated train control, in particular the ETCS functionality, can be maintained.

(7) Depending on the vehicle and route design, backup functions are maintained to varying degrees.

(8) If a fault which necessitates a change to system failure mode occurs in the primary ETCS device then the rail vehicle is slowed down, for example, and when at a standstill this faulty primary ETCS device is isolated by means of ETCS isolation switches. All the backup functions associated with the ETCS device are deactivated as a result. A connection to the RBC available in ETCS Level 2 is interrupted. The component recording unit (Juridical Recorder, JRU) and driver's cab display (Driver Machine Interface, DMI) are preferably not affected by such isolation.

(9) Insofar as the driver's cab display in the carriage of the rail vehicle with the primary ETCS device was not the cause of the system failure and is still functional, for example, the secondary EVC assumes the function of vehicle control after a mode switch in connection with this driver's cab display.

(10) The isolation of the primary EVC is signaled to the secondary (sleeping) EVC (ETCS systems and thus their EVCs are electrically connected). Depending on the design of the rail vehicle, this signaling is realized via a bus system (MVB, Profinet, CAN), a circuit or a radio connection.

(11) The secondary EVC quits the sleeping mode and assumes the backup functions of the rail vehicle. The extent of these backup functions may vary and ranges e.g. from straightforward supervision of maximum speed through to full train supervision.

(12) FIG. 1 shows a diagrammatic view of a rail vehicle 101 with a plurality of carriages, some of which have an ETCS device 103 to 106. Each of the ETCS devices 103 to 106 has, inter alia, a computer 108 to 111 (also referred to as EVC). The rail vehicle 101 is moving in the direction of travel 102, before the occurrence of the fault the ETCS device 106 is active, the other ETCS devices 103 to 105 are inactive, e.g. in the sleeping state. If a fault occurs in the ETCS device 106, this is at least partially switched to an inactive state and for example, the computer 110 takes over the ETCS device 105. The computers 108 to 111 and/or the ETCS devices 103 to 106 are connected in exemplary fashion via a bus 107 in FIG. 1.

(13) The following scenarios can be distinguished advantageously:

(14) (a) Scenario 1: The route and rail vehicle are equipped for ETCS Level 2, the secondary EVC and the driver's cab display are connected to each other via a bus. The secondary EVC provides the same modes in ETCS Level 2 as the primary (previously active) EVC and establishes a connection to the RBC via GSM-R. If there is access to the data of the balise antenna at the head of the rail vehicle (via a separate and/or offset balise channel), the backup functions can be provided and/or maintained in full. However, if there is no access to this data, the data e.g. of the local balise antenna of the carriage in which the secondary EVC is located are used. The backup function is therefore limited because the data is captured too late (not at the head of the vehicle). In other words, the head of the rail vehicle has passed over the balise long before the local balise antenna receives the data from the balise. In this connection, for example, limit balises are recognized too late, resulting in a delayed response.

(15) (b) Scenario 2: The route is equipped for ETCS Level 1, the secondary EVC and the driver's cab display are connected to each other via a bus. If there is access to the data of the balise antenna at the head of the vehicle, the same modes are provided as in the primary EVC. However, if there is no access to the data of the balise antenna at the head of the rail vehicle, significantly reduced monitoring of the secondary EVC is provided. Thus, preferably only one predefined maximum speed and one temporary speed restriction are monitored. As data from the route is not captured at the head of the rail vehicle, a response may occur too late; the train control function is limited accordingly.

(16) (c) Scenario 3: The secondary EVC can be used as the source for the speed signal regardless of the ETCS level. In this respect, the speed information from the secondary EVC can be displayed on the driver's cab display of the carriage which has the primary ETCS system.

(17) If a display component in the driver's cab display of the carriage with the primary ETCS system fails, the remaining display can be used to display the necessary information for safe operation of the train. Preferably a summarized presentation of the information can be selected for this or it is possible to switch between various views.

(18) If a GSM-R module of the primary ETCS device fails, the GSM-R module of the secondary ETCS device can be used, if necessary by means of the secondary EVC.

(19) FIG. 2 illustrates exemplary switching between ETCS devices, in particular EVCs of the ETCS devices, with reference to a flow chart.

(20) In a step 201 a fault in the primary ETCS device is ascertained, the rail vehicle is slowed to a standstill in a step 202. In a step 203 the primary ETCS device is at least partially switched to an inactive state (e.g. switched off, isolated) and in a step 204 the previously sleeping EVC of the secondary ETCS device is activated. In a step 205 the rail vehicle is operated by means of the secondary EVC. Such operation of train control functionality can take place to a varying extent e.g. depending on the ETCS level.

(21) Fail safety may be reduced as a result of the autonomous design of the primary and secondary ETCS devices.

(22) The proposed solution thus enables an ETCS device integrated into rail vehicles, which until now has only been carried purely passively in sleeping mode, to now provide backup functions when the primary ETCS device (or part thereof) fails and thus to operate as a redundant system with full or reduced backup function.

(23) An advantage is that the availability of technical train control by ETCS in trains with several ETCS devices is significantly increased and as a result reversion to backup on the basis of operational regulations with staff responsibility is reduced, increasing the safety of the whole system.

(24) Although the invention was illustrated and described in more detail by the at least one exemplary embodiment shown, the invention is not limited thereto and other variations can be derived therefrom by the person skilled in the art without departing from the scope of the invention.

LIST OF REFERENCE CHARACTERS

(25) 101 Rail vehicle 102 Direction of travel 103-106 ETCS (vehicle) device 107 Electrical connection of the ETCS devices and/or EVCs, e.g. in the form of a bus system 108-111 EVC (computer of the ETCS device) 201-205 Steps of a method for using a secondary ETCS device and/or a computer of the secondary ETCS device