Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

ERTMS/ETCS National Values

Synopsis This document contains requirements and guidance for a process to determine or revise a set of values of ERTMS/ETCS National Values.

Copyright in the Railway Group documents is owned by Rail Safety and Standards Board Limited. All rights are hereby reserved. No Railway Group document (in whole or in part) may be reproduced, stored in a retrieval system, or transmitted, in any form or means, without the prior written permission of Rail Safety and Standards Board Limited, or as expressly permitted by law.

RSSB members are granted copyright licence in accordance with the Constitution Agreement relating to Rail Safety and Standards Board Limited.

In circumstances where Rail Safety and Standards Board Limited has granted a particular person or organisation permission to copy extracts from Railway Group documents, Rail Safety and Standards Board Limited accepts no responsibility for, nor any liability in connection with, the use of such extracts, or any claims arising therefrom. This disclaimer applies to all forms of media in which extracts from Railway Group documents may be reproduced.

Published by RSSB

© Copyright 2017 Rail Safety and Standards Board Limited Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

Issue Record

Issue Date Comments One 02/09/2017 Original document. To include additional National Values from ERTMS Baseline 3

This document will be updated when necessary by distribution of a complete replacement.

Superseded Documents The following Railway Group documents are superseded, either in whole or in part as indicated:

Superseded documents Sections superseded Date when sections are superseded GERT8408 issue one ERTMS/ETCS All 02/09/2017 National Values GEGN8608 issue one Guidance on All 02/09/2017 ERTMS/ETCS National Values

Supply The authoritative version of this document is available at www.rssb.co.uk/railway-group-standards. Enquiries on this document can be forwarded to [email protected].

Page 2 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

Contents

Part 1 Purpose and Introduction 7

1.1 Purpose 7 1.2 Context 7 1.3 Application of this document 8 1.4 Health and safety responsibilities 8 1.5 Structure of this document 8 1.6 Approval and Authorisation 8

Part 2 Requirements for ERTMS/ETCS National Values 9

2.1 Proposal of a set of ERTMS/ETCS National Values 9 2.2 Consultation on the proposed ERTMS/ETCS National Values 9 2.3 Consultation response on the proposed ERTMS/ETCS National Values 10 2.4 Optimising National Values 10 2.5 Publishing National Values 10 Appendices 11 Appendix A 11 Definitions 68 References 74

RSSB Page 3 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

List of Figures

Figure 1: Confidence interval of a ETCS fitted train 33

Figure 2: Chart demonstrating, by simplifying the curves as straight lines as an example, the shape of the resultant Permitted speed curve 35

Figure 3: High level schematic diagram of the processing of braking curves 36

Figure 4: Schematic diagram of how braking curves are derived 38

Figure 5: Comparison of where the 'hook' is shown if GUI curve is enabled. 41

Figure 6: Comparison of the position of the 'hook' if Q_NVSBFBPERM is enabled 42

Figure 7: Comparison of the position of the 'hook' if Q_NVINHSMICPERM is enabled 44

Figure 8: Demonstration of how A_NVMAXREDADH derates EBD and increases braking distance 46

Figure 9: DMI with TI initiated 47

Figure 10: DMI with TTI initiated 48

Figure 11: An example of a four steps Kv_int 58

Figure 12: Four steps Kv_int models 58

Figure 13: Process of extracting Kv_int 61

Figure 14: An example of a set of M_KRINT correction factors with five steps 65

Page 4 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

List of Tables

Table 1: Q_NVDRIVER_ADHES 11

Table 2: V_NVSHUNT 13

Table 3: V_NVSTFF 13

Table 4: V_NVONSIGHT 14

Table 5: V_NVSUPOVTRP 14

Table 6: V_NVUNFIT 17

Table 7: V_NVLIMSUPERV 18

Table 8: V_NVREL 19

Table 9: D_NVROLL 20

Table 10: V_NVALLOWOVTRP 22

Table 11: D_NVOVTRP 23

Table 12: T_NVOVTRP 24

Table 13: M_NVDERUN 26

Table 14: M_NVCONTACT 27

Table 15: T_NVCONTACT 27

Table 16: D_NVPOTRP 29

Table 17: D_NVSTFF 31

Table 18: Q_NVLOCACC 32

Table 19: Q_NVGUIPERM 40

Table 20: Q_NVSBFBPERM 41

Table 21: Q_NVINHSMICPERM 43

Table 22: A_NVMAXREDADH1/2/3 45

Table 23: Q_NVSRBKTRG 49

Table 24: Q_NVSBTSMPERM 50

Table 25: Q_NVEMRRLS 50

Table 26: M_NVEBCL 52

Table 27: M_NVAVADH 54

RSSB Page 5 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

Table 28: V_NVKVINT 56

Table 29: Q_NVKVINTSET 56

Table 30: M_NVKVINT 57

Table 31: A_NVP12 59

Table 32: A_NVP23 60

Table 33: Comparison of how A_NVP12, A_NVP23, Kv_int_x_a and Kv_int_x_b affects the outcome (all values are in relative terms) 62

Table 34: L_NVKRINT 63

Table 35: M_NVKRINT 64

Table 36: M_NVKTINT 66

Page 6 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

Part 1 Purpose and Introduction

1.1 Purpose

1.1.1 This document is a standard on ERTMS/ETCS National Values, for members of RSSB to use if they so choose. 1.1.2 This document contains requirements for a process to determine or revise European Rail Traffic Management System (ERTMS) / European Train Control System (ETCS) National Values within a set. 1.1.3 Guidance is provided as a series of sequentially numbered clauses prefixed ‘G’ immediately below each requirement. Where there is no guidance, this is stated. 1.1.4 The process set out in this document is applicable to ETCS fitted infrastructure irrespective of whether or not ERTMS-fitted trains operate on that infrastructure. 1.1.5 ERTMS/ETCS National Values, determined in accordance with the process set out in this document, describes asset characteristics that are relevant to compatibility between ERTMS-fitted trains and trackside infrastructure. 1.1.6 This standard is applicable to all three ETCS Baselines legal at the time of publication: Baseline 2, Baseline 3 Maintenance Release 1, and Baseline 3 Release 2, as specified in the Control Command and Signalling Technical Specification for Interoperability (CCS TSI). 1.1.7 Details on all the ERTMS/ETCS National Values are set out in the Appendix.

1.2 Context

1.2.1 ERTMS/ETCS National Values are parameters in the ETCS system, described in ERTMS subset-026, Systems Requirements Specification (SRS). 1.2.2 A set of ERTMS/ETCS National Values applies to a ‘National Area’. A National Area is a geographic region and does not necessarily align to political borders. ‘National’ in this context means determined at the national level, not necessarily applying throughout a whole nation. 1.2.3 The values are set as part of the infrastructure design to configure the behaviour of an ERTMS/ETCS application to be compatible with the operational and technical practices of a particular geographic region, for example, the maximum speeds permitted under different modes of operation. 1.2.4 National Values are configured by the infrastructure manager (IM) and coded within the trackside infrastructure, that is, Eurobalises and Radio Block Centres (RBCs). The values are sent to trains operating in the geographic region to which they apply and they cause the ETCS onboard to function in a way consistent with the infrastructure. 1.2.5 The SRS describes the National Values and details the range of values, it also specifies a default value for the ETCS onboard to use when the National Values for the geographic region that it is operating in are not available. This information is replicated in the Appendix. 1.2.6 Because the ERTMS/ETCS National Values are part of the trackside design, an IM needs to determine a set of values that are suitable for a geographic region. By the nature of National Values, this will affect the performance of ETCS fitted trains operating on that infrastructure. Therefore, it is considered advantageous to have an industry-agreed method of proposing, evaluating, agreeing and making available new sets, or revising existing sets, of National Values. This standard fulfils that purpose.

RSSB Page 7 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

1.2.7 This standard requires the IM who is introducing or revising the National Values to engage in consultation with neighbouring IMs and RUs who may be affected by the new National Values. The objective is to achieve harmonised operational practices across geographic regions. 1.2.8 This standard does not recommend specific values as National Values, but it does provide information to assist in determining a set of values, or evaluating the impact of a set of values. 1.2.9 In determining or revising a set of values, an IM will need to apply its own processes to manage safety and this will need to consider trains operating with the default set of values when the correct set for the geographic region is not available. Processes such as the Common Safety Method for Risk Evaluation and Assessment (CSM RA) will likely apply and the guidance in this standard will support these processes. 1.2.10 The CCS TSI requires that ETCS onboard equipment is compatible with any specific value of a National Value within the permitted range; once placed into service it is possible that the train may receive any permitted value of National Value during its lifetime.

1.3 Application of this document

1.3.1 Compliance requirements and dates have not been specified since these will be the subject of internal procedures or contract conditions. 1.3.2 The Standards Manual and the Railway Group Standards (RGS) Code do not currently provide a formal process for deviating from a Rail Industry Standard (RIS). However, a member of RSSB, having adopted a RIS and wishing to deviate from its requirements, may request a Standards Committee to provide opinions and comments on their proposed alternative to the requirement in the RIS. Requests for opinions and comments should be submitted to RSSB by e-mail to [email protected]. When formulating a request, consideration should be given to the advice set out in the ‘Guidance to applicants and members of Standards Committee on deviation applications’, available from RSSB’s website.

1.4 Health and safety responsibilities

1.4.1 Users of documents published by RSSB are reminded of the need to consider their own responsibilities to ensure health and safety at work and their own duties under health and safety legislation. RSSB does not warrant that compliance with all or any documents published by RSSB as sufficient in itself to ensure safe systems of work or operation or to satisfy such responsibilities or duties.

1.5 Structure of this document

1.5.1 This document sets out a series of requirements that are sequentially numbered. 1.5.2 This document also sets out the rationale for the requirement. The rationale explains why the requirement is needed and its purpose. Rationale clauses are prefixed by the letter 'G'. 1.5.3 Where relevant, guidance supporting the requirement is also set out in this document by a series of sequentially numbered clauses and is identified by the letter 'G'.

1.6 Approval and Authorisation

1.6.1 The content of this document was approved by the Control Command and Signalling Standards Committee on 13 April 2017. 1.6.2 This document was authorised by RSSB on 26 July 2017.

Page 8 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

Part 2 Requirements for ERTMS/ETCS National Values

2.1 Proposal of a set of ERTMS/ETCS National Values

2.1.1 For a National Area under its responsibility, the IM shall propose a set of values of ERTMS/ETCS National Values, including the rationale for the determination of each value.

Rationale G 2.1.2 As ERTMS/ETCS National Values are part of CCS trackside, the IM is responsible for deriving a set of ERTMS/ETCS National Values to enable trains to operate acceptably.

Guidance G 2.1.3 Appendix A of this document gives guidance on determining the ERTMS/ETCS National Values. G 2.1.4 This requirement allows the IM to propose more than one set of ERTMS/ETCS National Values within a National Area as there are operational situations where the provision of a different set of ERTMS/ ETCS National Values can provide safety or performance benefits. Examples of these operational situations include, but are not limited to: a) Changing the setting of M_NVCONTACT during data radio failures, or b) Adjusting a mode related ceiling speed on the approach to the border with another NID_C area, or c) Increasing the reverse movement limit for trains such as rail grinders or snow ploughs. G 2.1.5 Where more than one set of ERTMS/ETCS National Values can be applied within a National Area, the risks of trains having differing operational constraints have to be managed. G 2.1.6 The values for the ERTMS/ETCS parameter NID_C, which define National Areas, are limited. When determining a set of ERTMS/ETCS National Values, if the set has the same values as other National Areas which are under the responsibility of the same IM, consideration should be given to extending the National Area, instead of creating a new National Area. National Areas do not necessarily have to share a common boundary. G 2.1.7 Complexity in operational rules and the potential of ETCS intervention are reduced if the set of ERTMS/ETCS National Values is the same in bordering National Areas.

2.2 Consultation on the proposed ERTMS/ETCS National Values

2.2.1 The IM proposing any set of ERTMS/ETCS National Values shall consult with all affected IMs and railway undertakings (RUs) about the proposed values.

Rationale G 2.2.2 Affected RUs and IMs are consulted to check that the impact on safety and performance is acceptable.

Guidance G 2.2.3 Affected IMs are those that have National Areas that border the National Area for which a set of values is being proposed.

RSSB Page 9 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

G 2.2.4 Affected IMs can also include those that have similar sets of ERTMS/ETCS National Values. In order to avoid increasing the number of National Areas, an existing National Area which has a similar set of values can be extended (see G 2.1.1.4). G 2.2.5 Affected RUs include those that have access agreements for the National Area. G 2.2.6 Some ERTMS/ETCS National Values continue to have an effect on ERTMS/ETCS fitted trains in areas that are not fitted with ERTMS/ETCS trackside equipment. Normally, when operating on lines not fitted with ERTMS/ETCS trackside equipment, ERTMS/ETCS fitted trains use the last set of ERTMS/ETCS National Values received. Affected IMs and RUs should take this into account when assessing the impact of a proposed set of ERTMS/ETCS National Values. G 2.2.7 Appendix A of this document gives guidance to affected IMs and RUs on assessing the impact of the proposed set of ERTMS/ETCS National Values.

2.3 Consultation response on the proposed ERTMS/ETCS National Values

2.3.1 Affected IMs and RUs shall respond, explaining their opinions in relation to the proposed ERTMS/ ETCS National Values, in a timely manner.

Rationale G 2.3.2 Timely receipt of comments from affected IMs and RUs will enable optimisation of the proposed set of ERTMS/ETCS National Values to be achieved.

2.4 Optimising National Values

2.4.1 The IM proposing a set of values of ERTMS/ETCS National Values shall determine an optimal set of values for a National Area, taking into consideration the responses from the affected IMs and RUs.

Guidance G 2.4.2 Appendix A of this document gives guidance on the factors to be considered when determining the optimal ERTMS/ETCS National Values.

2.5 Publishing National Values

2.5.1 The IM proposing a set of ERTMS/ETCS National Values shall publish the new or revised ERTMS/ETCS National Values for the affected National Area.

Rationale G 2.5.2 When national values are created or revised it is important that those affected are advised in a timely manner by the IM proposing the change, in order that they can prepare for the impact of the change, if required.

Page 10 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

Appendices

Appendix A

A.1 Introduction A.1.1 This document does not set out ERTMS/ETCS National Values. A.1.2 Research project T093 was conducted between 2003 and 2004, on behalf of the National ERTMS Programme. T093 specifically covered ERTMS/ETCS National Values for Baseline 2, some of which is also applicable to Baseline 3. Each description of ERTMS/ETCS National Values will indicate the applicable ERTMS/ETCS subset. A.1.3 During the development of this document, reports from the ERTMS national programme Braking Aspect Working Group were used as an input to derive guidance on the brake related ERTMS/ETCS National Values, as defined in Baseline 3. A.1.4 This appendix provides general guidance. For application in a specific National Area, consideration should be given to the characteristics of the particular area when determining the suitability of any individual value. A.1.5 Default values are applied only if ERTMS/ETCS National Values are not available or there is a mismatch between the values onboard and the country or region identifier (NID_C) read from a balise group when compared to the corresponding identifier stored onboard. A.1.6 The set of ERTMS/ETCS National Values is stored by the ERTMS/ETCS onboard equipment, even when the ERTMS/ETCS onboard equipment is switched off (NP), and re-used when powered on. A.1.7 When assessing the impact of values on driving behaviour, RUs will need to consider the information presented on the driver machine interface (DMI). A.1.8 The ERTMS/ETCS National Values are set out in the following properties' tables and address Baseline 2 and Baseline 3 variables, as appropriate.

A.2 Q_NVDRIVER_ADHES A.2.1 Summary

Name Q_NVDRIVER_ADHES - Qualifier for the modification of trackside adhesion factor by driver

Subset-026 values 0 - Not allowed ; 1 - Allowed

Subset-026 Default value Not allowed

Resolution Either 0 or 1

ETCS Baseline Baseline 2 Baseline 3

Used in modes UN, SR, OS, FS and SH UN, SN, SR, OS, FS, LS and SH

Used in levels 0, 1, 2 and 3 0, NTC, 1, 2 and 3

Table 1: Q_NVDRIVER_ADHES

RSSB Page 11 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

A.2.1.1 The ERTMS/ETCS onboard braking model can be modified to take into account low adhesion by extending the calculated braking distance based on the maximum rate of deceleration set by ERTMS/ETCS National Value, A_NVMAXREDADH. This can be selected either: a) As commanded by trackside, or b) By the driver, if permitted, using the low adhesion function via the slippery rail ON/OFF control on the DMI. A.2.1.2 Q_NVDRIVER_ADHES specifies whether the driver is allowed to select the use of the modified braking model. Irrespective of the Q_NVDRIVER_ADHES value, the trackside can command the ERTMS/ ETCS onboard equipment to modify the adhesion factor (as set out in Subset-026 and RSSB-ERTMS-OC). A.2.2 Safety considerations A.2.2.1 ERTMS/ETCS can be configured to increase the calculated braking distance in low adhesion areas using the low adhesion functionality. Whether this functionality is used or not, is outside the scope of this document. If this functionality is used, it is possible to allow the driver to switch it on or off using the Slippery Rail controls on the ERTMS/ETCS DMI, that is, to either increase the calculated braking distance or revert to the normal braking distance. A.2.2.2 The effect on the braking curves of switching the low adhesion function on is dependent on the values of A_NVMAXREDADH1/2/3 (see also A.19 A_NVMAXREDADH1, A_NVMAXREDADH2, A_NVMAXREDADH3 on page 45). If A_NVMAXREDAD1/2/3 are set to any of the three special values and the low adhesion function is switched on, the Slippery Rail indication will be displayed on the ERTMS/ETCS DMI, but the braking curves are not modified. In practice, adhesion varies widely across the infrastructure with both location and time. This variation is significant, even in areas where the adhesion is acknowledged to be low, and the modifications imposed on the braking curves if A_NVMAXREDADH1/2/3 are not set to the special values cannot be guaranteed to accurately reflect the actual braking conditions. A.2.2.3 Regardless of whether the low adhesion function is switched on by the driver or commanded by the ERTMS/ETCS trackside, the information presented on the DMI may lead a driver to falsely believe that by following the information on the DMI the train can always be stopped before the end of its movement authority in any low adhesion condition. That said, where a driver becomes aware of low adhesion conditions (which may well be very localised), this potentially safety-critical information should be utilised as quickly and as widely as possible. On this basis, it could be appropriate to allow a driver to use the adhesion factor as an aid to driving the train more cautiously regardless of whether the braking curve is modified or not. A.2.3 Performance considerations A.2.3.1 Applying a limiting deceleration factor, ERTMS/ETCS National Value A_NVMAXREDADH, has the effect of extending the braking distance calculated by the ERTMS/ETCS onboard equipment, which increases journey times; hence increases headway times and therefore reduces the line capacity. A.2.4 Discussion A.2.4.1 A factor that may influence on whether to allow drivers to toggle the low adhesion function may be the ownership of responsibility in deciding where/when to apply the low adhesion function, or not to apply it at all. Regardless of who owns the responsibility to toggle the low adhesion function, there will still be a requirement for drivers to modify their behaviour in response to the available adhesion if safety and optimum performance are to be achieved. This is especially true when stopping a train where the stop is not supervised by ERTMS/ETCS, for example at station stops. A.2.4.2 The advantages of permitting drivers to switch on/off the low adhesion function include: a) Allowing immediate local responses to patches of low adhesion. b) Providing a reminder to drivers of the need to take into account adhesion conditions in their behaviour where the reminder is not provided by the trackside. A.2.4.3 The disadvantages include: Page 12 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

a) The additional driver training required in determining the conditions under which this Slippery Rail function should be used. b) The possible misunderstandings by drivers on the limitations of the low adhesion function, with the potential for driving behaviour which is inappropriate for the conditions. c) Incorrect use of this function, either leaving it switched on when not required with consequential performance implications, or failing to switch it on in low adhesion conditions, thus missing the opportunity to reduce risk. d) Additional workload for the driver. A.2.4.4 Further details on the setting of A_NVMAXREDADH are set out in A.19 A_NVMAXREDADH1, A_NVMAXREDADH2, A_NVMAXREDADH3 on page 45. There are other parameters, set out in section 3.13.10.4 of Subset-026, that affect the ETCS braking model. While these have some similarities with other variables in this document, these are not part of the ERTMS/ETCS National Values set and are outside the scope of this document.

A.3 V_NVSHUNT, V_NVSTFF, V_NVONSIGHT, V_NVSUPOVTRP A.3.1 Summary A.3.1.1 The four following ERTMS/ETCS National Values are all related to mode speed limits and are therefore considered together in this section.

Name V_NVSHUNT - Shunting mode (permitted) speed limit

Subset-026 Minimum value 0 km/h

Subset-026 Maximum value 600 km/h

Subset-026 Default value 30 km/h

Resolution 5 km/h

ETCS Baseline Baseline 2 Baseline 3

Used in modes SH SH

Used in levels 0, 1, 2 and 3 0, NTC, 1, 2 and 3

Table 2: V_NVSHUNT

A.3.1.2 V_NVSHUNT specifies a maximum speed to which the train is supervised when the ERTMS/ETCS onboard equipment is operating in the SH mode (see also RSSB-ERTMS-OC). When providing a movement authority with SH mode profile, the trackside also has the possibility of overriding the ERTMS/ETCS National Value via the V_MAMODE parameter within the mode profile packet.

Name V_NVSTFF - Staff Responsible mode (permitted) speed limit

Subset-026 Minimum value 0 km/h

Subset-026 Maximum value 600 km/h

RSSB Page 13 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

Name V_NVSTFF - Staff Responsible mode (permitted) speed limit

Subset-026 Default value 40 km/h

Resolution 5 km/h

ETCS Baseline Baseline 2 Baseline 3

Used in modes SR SR

Used in levels 1, 2 and 3 1, 2 and 3

Table 3: V_NVSTFF

A.3.1.3 V_NVSTFF specifies a mode-related speed restriction applicable to trains operating in SR mode. Other speed restrictions can also be supervised while in SR mode, as set out in Subset-026 section 4.5.

Name V_NVONSIGHT - On Sight mode (permitted) speed limit

Subset-026 Minimum value 0 km/h

Subset-026 Maximum value 600 km/h

Subset-026 Default value 30 km/h

Resolution 5 km/h

ETCS Baseline Baseline 2 Baseline 3

Used in modes OS OS

Used in levels 1, 2 and 3 1, 2 and 3

Table 4: V_NVONSIGHT

A.3.1.4 V_NVONSIGHT specifies a mode-related speed restriction applicable to trains operating in OS mode. Other speed restrictions are also supervised while in OS mode. When providing a movement authority with OS mode profile, the trackside also has the possibility of overriding the ERTMS/ETCS National Value via the V_MAMODE parameter within the mode profile packet.

Name V_NVSUPOVTRP - Permitted speed limit to be supervised when the 'override EoA' function is active

Subset-026 Minimum value 0 km/h

Subset-026 Maximum value 600 km/h

Page 14 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

Name V_NVSUPOVTRP - Permitted speed limit to be supervised when the 'override EoA' function is active

Subset-026 Default value 30 km/h

Resolution 5 km/h

ETCS Baseline Baseline 2 Baseline 3

Used in modes SR, SH, SN, SE and UN SR, SH and UN

Used in levels 0, STM, 1, 2 and 3 0, 1, 2 and 3

Table 5: V_NVSUPOVTRP

A.3.1.5 V_NVSUPOVTRP specifies the ceiling speed to which the train is supervised while the override function is active. Closely related to this national variable are D_NVOVTRP and T_NVOVTRP. A.3.2 Safety considerations A.3.2.1 V_NVSHUNT - While the ERTMS/ETCS onboard equipment is operating in SH, only ceiling speed supervision is provided, with no distance supervision. In addition, there is no guarantee regarding the state of occupancy of the section in which the train is moving and, unlike FS or OS, SH does not necessarily provide any assurance of route protection from the interlocking. Inherently, shunting is an activity that is likely to involve movements up to other vehicles or within a possession. The responsibility for avoiding collisions (with vehicles, buffer stops or people on the track) resides with the person controlling the movement and the driver, and their compliance with appropriate working practices is crucial. In SH mode, the train needs to be controlled to stop short of an obstruction or at the end of the movement authority. The value for V_NVSHUNT should be set low enough to enable observation of the line so that the train can be stopped safely and short of any obstruction. A.3.2.2 V_NVSTFF - When the ERTMS/ETCS onboard equipment is in SR, the ERTMS/ETCS onboard equipment has insufficient information to fully supervise the train movement. The driver is responsible for not exceeding the distance which the train is authorised to move, which will be marked by an ETCS stop marker. For example, it may be that the line ahead is occupied by another train or obstructed by some other obstacle, the Radio Block Centre (RBC) is unable to determine the location of the train or whether the train is the only train in the section (especially at start of mission). The value for V_NVSTFF should be set low enough to enable the driver to observe the line so that the train can be stopped safely and short of any obstruction. Otherwise there is the potential for a tripped train to exceed the overrun distance available. A.3.2.3 Setting V_NVSTFF to be high would increase performance, but the distance which a train could travel in SR is limited by D_NVSTFF, see section (A.13 D_NVSTFF on page 31). Having a high V_NVSTFF and a short D_NVSTFF may not be an ideal combination as drivers may interpret a high speed to mean they have a longer distance to cover, which may not be the case. Trains operating in SR mode will be tripped by balise message ‘Stop if in Staff Responsible’. If a train is tripped while travelling close to a high ceiling speed, it will stop further beyond the trip location compared with a train that is limited to a lower ceiling speed. A.3.2.4 V_NVONSIGHT - While the ERTMS/ETCS onboard equipment is operating in OS, the train receives a lesser degree of protection in comparison with FS. In particular, no guarantee regarding the occupation status of the sections through which the train is authorised to proceed is provided. Therefore, the primary protection against collision with obstacles resides with the driver of the train. From a safety perspective the value for V_NVONSIGHT should be set at a very low speed so that, by default, trains would travel at speeds from which they could stop within any sighting distance that would be encountered.

RSSB Page 15 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

A.3.2.5 V_NVSUPOVTRP - While the override function is active, the level of protection provided to a train by ERTMS/ETCS is reduced, because the event that would otherwise cause a train trip will not trip the train. In particular, the system will not enforce compliance with signals at danger in Level 1 and, similarly, the movement of trains without a movement authority in Level 2 will not be prevented. Consequently, the ERTMS/ETCS system does not provide any guarantee to the driver of a train with an active override that the track sections through which they are driving are unoccupied, nor that the points are set appropriately. The driver takes responsibility for the safety of their train (which may be in conjunction with the signaller if a written order has been issued) and the primary protection against collision and derailment is provided by the driver (this applies while override procedure is active, see Subset-026, section 5.8.4, and while operating in SR or SH). In order to ensure that the train can stop if any obstacle or inappropriately set points are encountered, the speed of the train should always be low enough that it can be stopped within sighting distance. A.3.2.6 V_NVSHUNT, V_NVSTFF, V_NVONSIGHT and V_NVSUPOVTRP are maximum supervised speeds, they are not necessarily target or line speeds. A.3.3 Performance considerations A.3.3.1 The actual impact on performance made by the value of V_NVONSIGHT depends upon the difference between it and the line speed. From a performance perspective, the optimum value is the largest speed within the constraint of safety. This is true for V_NVSTFF, V_NVSHUNT and V_NVSUPOVTRP. A.3.3.2 If the value of V_NVSUPOVTRP is greater than or equal to that of V_NVSHUNT, V_NVSTFF and V_NVUNFIT it will have no impact on performance, as these would be used to derive the ceiling speed to which the train is supervised instead. A.3.3.3 If permitted by operational rules, the driver can adjust the value of the SR ceiling speed supervision, irrespective of the value of V_NVSTFF. A.3.4 Discussion A.3.4.1 V_NVSHUNT, V_NVSTFF, V_NVONSIGHT and V_NVSUPOVTRP are ceiling speeds and not target speeds, and drivers should be trained to concentrate on driving at a speed appropriate to the conditions and activity. The value of V_NVSHUNT, V_NVSTFF, and V_NVONSIGHT can be shown on the DMI as the 'Basic Speed Hook' in their respective mode, but only when the driver toggles it on, as the default setting is off (not displayed). A.3.4.2 In SH or OS mode, the trackside has the capability to send a Movement Authority to the ETCS onboard, which contains the SH or OS mode profile, along with a V_MAMODE; when accepted, speed proposed by V_MAMODE will override V_NVSHUNT or V_NVONSIGHT. This also applies to V_ NVLIMSUPERV see section A.5.4.2 on page 19. A.3.4.3 Safety and operational considerations suggest that the value for all four parameters is the maximum speed from which any train could be brought to a standstill within the available sighting distance. However, the available sighting distance differs between locations, weather and, potentially, varies with time. Driving at an appropriate speed remains the driver's responsibility; ETCS provides a mechanism to reduce the risk associated with overspeed through the selection of appropriate values for V_NVSHUNT, V_NVSTFF, V_NVONSIGHT and V_NVSUPOVTRP. A.3.4.4 The risk for the four speeds may be different, depending on the circumstances in which the mode is applied. Independent risk assessments should be taken for each speed. The specific values used would depend upon the specific circumstance within the National Area. The DMI only displays the maximum supervised speed in OS and SR on request from the driver. A.3.4.5 If different values for the respective speed variables are used, the trackside application design should consider the implications of a different value for V_NVSTFF compared to V_NVONSIGHT when a train is running in SR and transitions to OS as a precursor to FS. If V_NVSTFF has a higher value than V_NVONSIGHT, an intervention could result (this is also true if the driver has selected an SR speed value greater than V_NVONSIGHT).

Page 16 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

A.4 V_NVUNFIT

A.4.1 Summary

Name V_NVUNFIT - Unfitted mode (permitted) speed limit

Subset-026 Minimum value 0 km/h

Subset-026 Maximum value 600 km/h

Subset-026 Default value 100 km/h

Resolution 5 km/h

ETCS Baseline Baseline 2 Baseline 3

Used in modes UN UN

Used in levels 0 0

Table 6: V_NVUNFIT

A.4.1.1 V_NVUNFIT specifies a ceiling speed to which the train is supervised while the ERTMS/ETCS onboard equipment is in UN; other speed restrictions might also be supervised while in UN (see subset-026 section 4.5). A.4.1.2 Unfitted mode is used to allow train movements in areas either: a) That are equipped neither with ERTMS/ETCS trackside equipment nor with a national train control system(s), or b) That are equipped with ERTMS/ETCS trackside equipment and/or a national train control system(s), but operation under their supervision is currently not possible. A.4.1.3 The Class 158s and 97s that operate in Level 2 on the Cambrian Line are ETCS Baseline 2 and have been configured to operate in Level 0 UN elsewhere. A.4.2 Safety considerations A.4.2.1 When an ERTMS/ETCS fitted train is operating in UN in Baseline 3, it is driven with no trackside train protection system, including Class B systems such as AWS/TPWS; whereas in Baseline 2, UN can be used in conjunction with these national train protection systems to control overspeed and/or enforce movement authorities. A.4.2.2 In UN mode in Baseline 3 the safe movement of a train is reliant on operational procedures. The best contribution to safety that ERTMS/ETCS can make is to supervise the train speed to the value that is permitted under the procedures applicable while operating with no train protection system. A.4.2.3 For Baseline 2 trains, V_NVUNFIT is not providing a safety function, as this is provided by Class B systems. V_NVUNFIT therefore has to be set to accommodate the highest permissible speed in the National Area. A.4.2.4 A TSR sent by a balise group will override V_NVUNFIT and reduce the speed of the train in UN mode, to cope with specific situations such as engineering works.

RSSB Page 17 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

A.4.3 Performance considerations A.4.3.1 From a performance perspective, the optimum value, in Baseline 3, for the parameter V_NVUNFIT is a value that allows the train to move at a speed that is permitted by operational procedures while there is no train protection system. A.4.3.2 In Baseline 2, because UN can be used in conjunction with Class B systems, V_NVUNFIT should be set at the highest permissible speed in the National Area. A.4.4 Discussion A.4.4.1 The UN mode has different applications depending on whether Baseline 2 or 3 is implemented at the trackside. When setting V_NVUNFIT the IM has to consider the available train protection system(s) and the level of protection that it provides. In the absence of protection systems, V_NVUNFIT has to be set low enough to enable drivers to control the train to a safe stop.

A.5 V_NVLIMSUPERV A.5.1 Summary

Name V_NVLIMSUPERV - Limited Supervision mode (permitted) speed limit

Subset-026 Minimum value 0 km/h

Subset-026 Maximum value 600 km/h

Subset-026 Default value 100 km/h

Resolution 5 km/h

ETCS Baseline Baseline 2 Baseline 3

Used in modes N/A LS

Used in levels N/A Level 1, 2 and 3

Table 7: V_NVLIMSUPERV

A.5.1.1 V_ NVLIMSUPERV specifies a mode-related speed restriction applicable to trains operating in LS mode. Other speed restrictions are also supervised while in LS mode. When providing a movement authority with LS mode profile, the trackside also has the possibility of overriding the ERTMS/ETCS National Value via the V_MAMODE parameter within the mode profile packet. A.5.2 Safety considerations A.5.2.1 When an ERTMS/ETCS fitted train is operating in LS, some signalling information for the driver comes from sources other than ERTMS/ETCS. A.5.2.2 V_NVLIMSUPERV may be different to the line speed. Drivers may misinterpret V_NVLIMSUPERV as the line speed. Safe operation depends on some form of signalling system that is independent of ERTMS/ ETCS and on the associated operational practices. For example, safe operation may depend on the driver obeying lineside signals and line speed restriction indicators, possibly supported by warning and / or protection systems. A.5.3 Performance considerations A.5.3.1 From a performance perspective, the optimum value for the parameter V_NVLIMSUPERV is the least restrictive one. Page 18 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

A.5.4 Discussion A.5.4.1 Whatever the maximum allowed speed values apply for Class-B trackside signalling systems, that maximum speed could be also the value for V_NVLIMSUPERV. Given that ERTMS/ETCS fitted trains will be expected to operate without restriction on these other systems at today's speeds, the value of V_NVLIMSUPERV should not be less than the maximum allowed for those systems. A.5.4.2 In LS mode, the trackside has the capability to send Movement Authorities to the ERTMS/ETCS onboard. The speed variable V_MAMODE parameter when sent together with the relevant MA replaces the ERTMS/ETCS National Value for V_NVLIMSUPERV. This also applies to V_NVSHUNT or V_NVONSIGHT (see section A.3.4.2 on page 16).

A.6 V_NVREL A.6.1 Summary

Name V_NVREL - Release Speed (permitted) speed limit

Subset-026 Minimum value 0 km/h

Subset-026 Maximum value 600 km/h

Subset-026 Default value 40 km/h

Resolution 5 km/h

ETCS Baseline Baseline 2 Baseline 3

Used in modes FS, OS and LS FS, OS and LS

Used in levels Levels 1, 2 and 3 Levels 1, 2 and 3

Table 8: V_NVREL

A.6.1.1 V_NVREL specifies the ERTMS/ETCS National Value of the release speed. V_NVREL is only used when commanded from the trackside. In general, a release speed can be used where a close approach to the End of Authority (EoA) is required. A.6.2 Safety considerations A.6.2.1 Where V_NVREL is used as the release speed, the train is only guaranteed to stop before reaching the supervised location in the event of a train trip when an appropriately restrictive value is used. The value should be such that the fitted train with the poorest deceleration is able to stop within the distance that separates the EoA and supervised location, at the location on the infrastructure where this distance is shortest and the down-hill gradient is steepest. A.6.2.2 When setting V_NVREL, how a driver interprets the release speed may need to be considered. A release speed which satisfies A.6.2.1 on page 19, but is still relatively high, could be mistakenly interpreted by the driver as an MA extension, leading to the train passing the EoA and being tripped, resulting in secondary hazards such as passenger slips, trips and falls or traction and braking shocks. A.6.3 Performance considerations A.6.3.1 In general, the larger the value of the release speed used, the lower the impact on performance, as a driver will be able to make an approach to the EoA/LoA at a higher speed. However, the faster the approach to the EoA/LoA, the more likely a train trip is. Train trips will have a significant impact upon operational performance, as recovery action will be required. The highest release speed that allows a train RSSB Page 19 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

to make reasonable progress towards the EoA/LoA, while being sufficiently low to reduce the likelihood of a train trip occurring, is probably the optimum value from the perspective of performance. A.6.4 Discussion A.6.4.1 V_NVREL is relevant if the ERTMS/ETCS trackside instructs the ERTMS/ETCS onboard to use the ERTMS/ETCS National Value when approaching an EoA, or on expiry of a section timer. It is also possible for the trackside to define a value to be used by the ETCS on-board as the release speed or to instruct the ETCS on-board to calculate its release speed for the on-board to use when approaching an EoA. A.6.4.2 V_NVREL is set by the IM to control the likelihood of passing the SvL at location(s) where V_NVREL is not superseded by release speed values calculated by ETCS onboard or one that is associated with a particular danger point. When setting the value for V_NVREL, the IM should consider reduced adhesion or degraded mode of the rolling stock. A.6.4.3 Setting V_NVREL to be very low might be difficult from a drivability point of view on specific train types.

A.7 D_NVROLL A.7.1 Summary

Name D_NVROLL - Roll away distance limit

Subset-026 Minimum values 0 cm

Subset-026 Maximum values 327.660 km or ∞

Subset-026 Default value 2 m

Resolution 10 cm, 1 m, or 10 m depends on Q_SCALE

ETCS Baseline Baseline 2 Baseline 3

Used in modes FS, OS, PT, RV, SB, SH, SR, UN FS, OS, PT, RV, SB, SH, SR, UN

Used in levels 0, 1, 2 and 3 0, 1, 2 and 3

Table 9: D_NVROLL

A.7.1.1 D_NVROLL defines the maximum distance that a train can travel before the ETCS onboard initiates a brake command as part of the Roll Away Protection, Reverse Movement Protection, or Standstill Supervision functions, see Subset-026 section 3.14.2, 3.14.3, 3.14.4. A.7.2 Safety considerations A.7.2.1 The movement of a train in an unexpected direction (or an unexpected train movement) represents a potential hazard. A potential hazard could arise, for example, where a train has been stopped near to a set of points, at a platform to allow passenger movement, near another train, near buffer stops or in the vicinity of trackside workers. A.7.2.2 No value of D_NVROLL can ensure roll away protection, reverse movement protection, or standstill protection is effective. Even a zero D_NVROLL value could allow some movement if the measurement of movement is subject to non-zero error.

Page 20 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

A.7.2.3 The smaller the D_NVROLL value used, the shorter the distance that a train will move and the lower the speed attained, before the brakes are commanded. Thus, while collisions could still occur, the consequences associated with a collision would be limited. A.7.2.4 Train brake failure might cause a train to roll away, but in these circumstances ETCS protection might be ineffective as it could be relying on applying protection through the defective braking system. A.7.2.5 In a situation where a rolling train moves into a position where it could foul other train movements on the infrastructure, its speed has less relevance than its specific location. In general, even in this situation, low values of D_NVROLL of the order of small numbers of metres will present low levels of risk, as some tolerance is incorporated into the design of the signalling infrastructure. A.7.2.6 In the case of coupling / uncoupling movements (see A.7.3.3 on page 21), the value of D_NVROLL is not considered to have an impact on the safety of personnel involved in supporting coupling and uncoupling, as the rules controlling this activity expressly forbid staff from going between the vehicles during 'ease-up' movements unless they are absolutely sure that the vehicles cannot move. A.7.3 Performance considerations A.7.3.1 The use of a small value for D_NVROLL could result in emergency brake applications being made in response to small movements with no potential impact on safety or in response to an odometry error. In that event, depending upon the implementation of the train's braking system, the driver might not be able to release the brake and move the train for some time even after acknowledging the application. This could introduce a significant impact on performance. A.7.3.2 In addition, the use of too small a value of D_NVROLL could introduce operational difficulties in situations where the stationary of a freight train attempts to commence an uphill movement. It is possible that, in this case, the locomotive may be dragged downhill by the weight of the train as the train's brakes are released and before it has the opportunity to develop sufficient power and traction to move in the desired direction. This downhill movement would result in the train's brakes being applied if the downhill movement of the locomotive exceeded the value of D_NVROLL. A.7.3.3 A non-zero value of D_NVROLL can be exploited to facilitate coupling and uncoupling operations in SB, thus avoiding the need for start of mission activities. This might have operational advantages in cases where the driving cabs being used to support the coupling or uncoupling movement are not those that the train will be driven from immediately before or after the coupling / uncoupling movement. A.7.4 Discussion A.7.4.1 The value for D_NVROLL from both the safety and performance perspectives is one that is small enough to restrict the risk presented by inappropriate train movement to an acceptable level, while being large enough to reduce instances of undesired brake application to an acceptable level. A.7.4.2 In general, specifying a low value for D_NVROLL would ensure that, in most such cases, collisions between trains caused by roll away or unexpected train movements would be avoided or would occur at very low speeds. However, setting the value too low may potentially cause problems where a level of roll back is inevitable, for example, where a heavy freight train is undertaking a hill start on a rising gradient. A.7.4.3 RSSB document ERTMS National Values-D_NVROLL records previous research carried out on the selection of the value for D_NVROLL. A.7.4.4 Train management systems independent of ERTMS/ETCS may provide similar roll away, standstill and reverse movement protection. The parameters that configure these existing systems may help inform the process of the selection of the value of D_NVROLL. There may be implications on train operation if the train management systems independent to ERTMS/ETCS use different values. A.7.4.5 In practice, for low values of D_NVROLL, roll away, reverse movement and, in particular, standstill protection will be limited by the precision and sensitivity of the odometry system.

RSSB Page 21 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

A.8 V_NVALLOWOVTRP

A.8.1 Summary

Name V_NVALLOWOVTRP - Maximum speed limit allowing the driver to select the 'override EoA' function

Subset-026 Minimum value 0 km/h

Subset-026 Maximum value 600 km/h

Subset-026 Default value 0 km/h

Resolution 5 km/h

ETCS Baseline Baseline 2 Baseline 3

Used in modes FS, OS, PT, SB, SE, SH, SN, SR, UN FS, LS, OS, PT, SB, SH, SN, SR, UN

Used in levels 0, STM, 1, 2 and 3 0, NTC, 1, 2 and 3

Table 10: V_NVALLOWOVTRP

A.8.1.1 V_NVALLOWOVTRP specifies the maximum train speed above which the driver's request for initiation of the train trip override function will be rejected. A.8.1.2 An override may be required where, for example: • Either: a) In Level 2, a train is stopped without an (MA) and no MA extension can be received (for example, after having received an emergency message, or after a train trip). b) In Level 2, a train is stopped at the border between two adjacent RBCs (for example, the interface between RBCs is unavailable). c) In Level 2, a train is stopped after having passed the border between two adjacent RBCs (for example, the connection to the accepting RBC cannot be established). d) In Level 2, the RBC is unable to give a permission to run (for example, lost connection with the interlocking). e) In Level 1, a signal cannot show a proceed aspect (for example, signal failure, route cannot be set). • Or: a) In Level 1, a train is stopped without an MA (for example, after the MA has been shortened due to a time out). b) In Level 0, Level STM, or Level NTC when transitioning into a Level 1 or Level 2 area and an MA is not available. A.8.1.3 Override procedure avoids a train trip, for example, when passing an EoA and when passing a balise group containing the following message(s): a) Transmitting 'stop in SR'. b) Not contained in the list of expected balises in SR. c) Transmitting 'stop in SH'. d) Not contained in the list of expected balises in SH. e) Overpassing the SR distance (see also D_NVSTFF).

Page 22 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

A.8.1.4 The trainborne equipment does not permit a request for an override if the train speed is greater than the value of the parameter V_NVALLOWOVTRP. Activation of the override places the train in SR, unless the train is in SH, in which case its mode will not change (see also Subset-026 section 4.6.2 Mode Transitions) or unless the train is in SN or UN, in which case the train remains in SN or UN until a transition border is passed when it then switches to SR. A.8.2 Safety considerations A.8.2.1 While the override is active, responsibility for the subsequent movement of the train past the point where, otherwise, the train would have tripped, rests with the driver. In order to discharge this responsibility, the driver has to establish the reason why the override is required and the conditions that apply. ERTMS/ ETCS specifications assume that a driver would only request such an override once, and after having been provided with the required information. A.8.2.2 If the driver requests override on the move, the driver may mistakenly proceed beyond the intended limit of the movement, which may result in harm. A.8.3 Performance considerations A.8.3.1 From a performance perspective, the optimum value is one that places no additional restriction on the movement of a train. In practice, it is anticipated that the request for an override would be made from a position close to the location where the train trip would otherwise occur (certainly within D_NVOVTRP) where the permitted speed would be low in any case, in anticipation of the requirement to stop. A.8.4 Discussion A.8.4.1 It is unusual for a train to need to request an override unless it is stationary, although it is possible that a higher speed could be tolerated, particularly for certain degraded mode operations such as working by pilotman or for operation of trains in engineering possessions. A.8.4.2 It may be difficult for the driver to judge where to select override while the train is travelling at speed, and being within the distance (D_NVOVTRP) and time (T_NVOVTRP) windows during which override remains available. Therefore, the driver may request override too early causing the override to expire too early, resulting in the train being tripped. A.8.4.3 Possible values could be determined using a similar logic as for the values of V_NVSHUNT, V_NVONSIGHT, V_NVSUPOVTRP and V_NVSTFF (see A.3 V_NVSHUNT, V_NVSTFF, V_NVONSIGHT, V_NVSUPOVTRP on page 13). This could apply in the case of working in possessions or temporary block working. A.8.4.4 Generally, it is probable that a request for an override will be made when the train is at standstill, irrespective of the value of V_NVALLOWTRP (requesting an override might require a written order for which the train should be at standstill).

A.9 D_NVOVTRP, T_NVOVTRP A.9.1 Summary

Name D_NVOVTRP - Maximum distance for overriding the train trip

Subset-026 Minimum value 0 cm

Subset-026 Maximum value 327.670 km

Subset-026 Default value 200 m

Resolution 10 cm, 1 m or 10 m depending on Q_SCALE

RSSB Page 23 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

Name D_NVOVTRP - Maximum distance for overriding the train trip

ETCS Baseline Baseline 2 Baseline 3

Used in modes SE, SH,SN, SR and UN SH, SN, SR and UN

Used in levels 0, STM, 1, 2 and 3 0, NTC, 1, 2 and 3

Table 11: D_NVOVTRP

A.9.1.1 D_NVOVTRP defines the maximum distance for which the train trip function may be disabled after the override function has been invoked.

Name T_NVOVTRP - Maximum time for overriding the train trip

Subset-026 Minimum value 0 s

Subset-026 Maximum value 255 s

Subset-026 Default value 60 s

Resolution 1 s

ETCS Baseline Baseline 2 Baseline 3

Used in modes SH, SN, SR and UN SH, SN, SR and UN

Used in levels 0, STM, 1, 2 and 3 0, NTC, 1, 2 and 3

Table 12: T_NVOVTRP

A.9.1.2 T_NVOVTRP is an ERTMS/ETCS National Value that specifies the maximum time that the train may travel with the train trip function disabled after the override function has been invoked. A.9.1.3 The override function remains active until (the full list of events which terminate override function is set out in SRS 5.8.4.1): a) Time T_NVOVTRP since the override function was activated has expired; or b) The train has travelled a distance D_NVOVTRP from where the override function was activated; or c) A trip event is overridden; or d) A further MA has been given to the train to pass beyond the location where it would have tripped the train if override was not activated. A.9.1.4 Both parameters are closely related to V_NVSUPOVTRP, which defines the maximum speed at which the train is permitted to travel while the train trip function is disabled after the override function has been invoked. This parameter was set out in A.3 V_NVSHUNT, V_NVSTFF, V_NVONSIGHT, V_NVSUPOVTRP on page 13. A.9.2 Safety considerations A.9.2.1 The train trip function provides a safety control to bring a train to a stand before a point of conflict. The inhibition of the trip function overrides this safety control and therefore has potentially

Page 24 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

adverse safety implications if it is active when it should not be. The inhibition of the train trip function therefore should be kept to as short a period as possible, commensurate with the achievement of the operational activity for which the override was requested. A.9.2.2 Consequently, the preferred value of D_NVOVTRP is one that restricts the override as closely as possible to that specific location where the train trip would otherwise occur. In principle, passing the point at which the train trip would occur should terminate the override. In practice, in Level 1 or Level 2, there could be failure modes whereby, for example, a balise that is expected to enforce a train trip, for some reason may not. For this reason, from a safety perspective, the optimum values of D_NVOVTRP and T_NVOVTRP are ones that are as small as possible, commensurate with the achievement of the operational requirement in support of which the override has been requested. A.9.2.3 Consideration is needed on the safety implications of enabling trains to proceed with the train trip function inhibited, and the rules, restrictions and training that will be needed to fully mitigate that risk (while the override is active, the train will not respond to train trips). A.9.3 Performance considerations A.9.3.1 Although these two ERTMS/ETCS National Values are closely associated with one another, D_NVOVTRP is considered to be the dominant factor when setting the values. After setting D_NVOVTRP, T_NVOVTRP can then be set by considering the time needed for a slow accelerating train setting off from rest to cover a distance of D_NVOVTRP. The aim is to decrease the probability of a slow accelerating train from being tripped because T_NVOVTRP expires before the train reaches the point where the override is required. A.9.3.2 As set out above, the inhibition of the train trip function has safety implications and therefore should be kept to as short a distance and time as possible, commensurate with the achievement of the operational activity for which the override was requested. A.9.3.3 The value of T_NVOVTRP would have a significant impact upon performance if it is too small to allow the train to reach the point where no disruptive performance impact can occur. If it is too small, then either an unwanted train trip will occur or it will be necessary to invoke the override function again. Potentially, either event is disruptive. A.9.3.4 From a performance perspective, the values used for both parameters should be large enough to ensure that no problems occur in practice; any further increase in the value confers no benefit. However, there are safety considerations of providing the ability for a train to proceed with the train trip function inhibited. A.9.4 Discussion A.9.4.1 As set out above, when considering the train trip function and its override, location and distance are more relevant than time and duration. A.9.4.2 The preferred value of D_NVOVTRP is one that restricts the override as closely as possible to that specific location where the train trip would otherwise occur. A.9.4.3 Significant performance impact would be experienced where T_NVOVTRP presented a driver with insufficient time to commence the movement and pass the tripping location before the override function timed out. A.9.4.4 It is therefore proposed that the extent of the override be limited by selection of the appropriate value of D_NVOVTRP, and that T_NVOVTRP should be given a value that ensures that it has the minimum restrictive impact on performance.

RSSB Page 25 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

A.10 M_NVDERUN

A.10.1 Summary

Name M_NVDERUN - Enter of Driver ID permitted while running

Subset-026 values 0 - no; 1 - yes

Subset-026 Default value 1 - yes

Resolution N/A

ETCS Baseline Baseline 2 Baseline 3

Used in modes FS, NL, OS, SR, SB, UN, PT, SE and FS, LS, NL, OS, SR, SB, UN, PT, SN SN and SH

Used in levels Levels 0, STM, 1, 2 and 3 Levels 0, STM, 1, 2 and 3

Table 13: M_NVDERUN

A.10.1.1 M_NVDERUN specifies whether a driver ID can be entered into the DMI while the train is moving. A.10.1.2 The driver ID is a number of up to eight digits, which is entered and validated as a part of the ERTMS/ETCS start of mission procedure. This procedure is invoked when the driving desk is opened. A.10.1.3 If the parameter M_NVDERUN has the value 'yes', then it is possible to change the driver ID when the train is moving; if the value is 'no', then it is possible to change the driver ID only while the train is stationary. A.10.2 Safety considerations A.10.2.1 The purpose of the driver ID is not, primarily, a safety related one. Therefore, if there is a mismatch between the identity of a driver and the driver ID held by the ERTMS/ETCS onboard equipment, then the consequences are not safety critical. Entering a driver ID while the train is moving carries with it a level of risk, because this data entry task could distract the driver from the primary function of driving the train. A.10.3 Performance considerations A.10.3.1 The impact on performance of not allowing a driver to enter the driver ID while the train is moving depends upon the action that is expected of the driver when the discrepancy arises. The impact could be significant if the driver is required to bring the train to a standstill at the earliest safe opportunity and to enter the correct driver ID. This could result from driver relief in traffic at an intermediate station where rapid changeovers are required. A.10.4 Discussion A.10.4.1 There are situations in which it would be undesirable for the driver to enter the driver ID while the train is in motion. This could be mitigated by the application of operational procedures, professional driving policies or other associated governance methods. This is done in some cases, with instructions and training for entering alphanumerical data into equipment such as train management systems or train radio systems. If permitted by M_NVDERUN, the driver decides when it is appropriate to enter the driver ID while on the move.

Page 26 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

A.11 M_NVCONTACT, T_NVCONTACT

A.11.1 Summary

Name M_NVCONTACT - Onboard reaction when T_NVCONTACT expires

Subset-026 Values 00 - Train trip; 01 - Service brake application; 10 - No reaction; 11 - Spare

Subset-026 Default value 10 - No reaction

Resolution N/A

ETCS Baseline Baseline 2 Baseline 3

Used in modes FS and OS FS, OS, and LS

Used in levels 2 and 3 2 and 3

Table 14: M_NVCONTACT

A.11.1.1 M_NVCONTACT defines the action that is to be taken if the ETRMS/ETCS onboard equipment remains out of contact with the RBC equipment for a period defined by T_NVCONTACT.

Name T_NVCONTACT - Maximum time without new 'safe' message.

Subset-026 Minimum value 0 s

Subset-026 Maximum value 254 s or ∞

Subset-026 Default value ∞

Resolution 1 s (between 0 s and 254 s)

ETCS Baseline Baseline 2 Baseline 3

Used in modes FS and OS FS, OS, and LS

Used in levels Levels 2 and 3 Levels 2 and 3

Table 15: T_NVCONTACT

A.11.1.2 T_NVCONTACT defines the critical time for which the ERTMS/ETCS onboard equipment can remain out of contact with the RBC before the ERTMS/ETCS onboard equipment takes the action defined by M_NVCONTACT. A.11.2 Safety considerations A.11.2.1 While the ERTMS/ETCS onboard equipment is out of communication with the RBC, it is not possible for the ERTMS/ETCS onboard equipment to receive and respond to a safety-critical ERTMS/ ETCS message, for example, an emergency stop command. If the value of the parameter M_NVCONTACT is 'No

RSSB Page 27 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

reaction', then any train that is out of communication with the RBC equipment is able to continue until it reaches the end of its MA or until communication is re-established, no matter how long these take. A.11.2.2 From a safety perspective this may be suboptimal, but the actual impact on safety will depend upon the frequency and extent of radio gaps, holes or interruptions, the extent of movement authority typically maintained ahead of trains, and the topography and features of the route. Another critical factor is the probability that a safety-related need will arise to withdraw or reduce any movement authority once it has been provided. A.11.2.3 In a system based on radio communication, relatively frequent confirmation that it is still safe to proceed is a possibility in most locations. However, there could be safety implications requiring location- specific assessment, where a train may be brought to a stand in an unsuitable location or may be caused to decelerate rapidly. A.11.2.4 From a safety perspective, the smaller the value of T_NVCONTACT the better, because the exposure to the risk from not being able to implement an ETCS emergency stop will be shorter. The shortest practicable time should not be less than the minimum period between the receipt of two consecutive trackside messages, as this will result in the reaction defined by M_NVCONTACT. A.11.3 Performance considerations A.11.3.1 From a performance perspective, the optimum value of the parameter M_NVCONTACT is 'No reaction', because this allows the train to continue to the end of the currently held movement authority, even if the ERTMS/ETCS onboard equipment is out of contact with the RBC equipment. If, as set out above, the value 'No reaction' is undesirable, the use of the value 'Service brake' has less of a performance impact than that of 'Train trip' because the receipt of a new message before the train is at a stand will release the brakes and allow the train to continue. A.11.3.2 From a performance perspective, the optimum value of T_NVCONTACT is the largest possible value, because this will make railway operation more tolerant of communication failures. The actual performance benefit arising from large values of T_NVCONTACT depends on, amongst other things, the extent of the movement authority that ERTMS/ETCS maintains ahead of trains. No additional performance benefit is achieved by using values of T_NVCONTACT greater than the time at which the movement authority is otherwise removed (for example, the time at which the train reaches the EoA/LoA or the time at which the MA times out, if at all). A.11.3.3 At the other extreme, using a value of T_NVCONTACT that is less than the expected period between 'safe' messages might have a significant effect on performance, because the action defined by M_NVCONTACT would be implemented before the receipt of each such message. Performance might be especially adversely affected if M_NVCONTACT is 'Train trip' or 'Service brake'. A.11.3.4 The values of T_NVCONTACT and M_NVCONTACT potentially affect the probability of operating in a degraded mode when recovering from the action specified by M_NVCONTACT. Degraded mode operation will have an impact on performance. A.11.4 Discussion A.11.4.1 M_NVCONTACT and T_NVCONTACT are closely linked, and the impact of the value selected for each of them will depend, to some extent, upon the value of the other. The settings of these ERTMS/ETCS National Values may depend on the design of the railway’s wider system and its operational concept. If the system has been designed to tolerate temporary unannounced radio holes/gaps/interruptions, and is supported by the operational concept and training, then it may be argued that no braking reaction is required, thus the consideration of the time element is irrelevant. A.11.4.2 Using 'No reaction' value for M_NVCONTACT in implementations is generally based upon the assumption that the frequency of coincidental radio disruption and the need to withdraw or reduce MA held by the train will be very low. The following are factors for consideration when intending to use ‘No reaction’ option for the parameter M_NVCONTACT:

Page 28 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

a) Depending upon the extent of the MA set ahead of the train and the extent of the radio disruption, the train may be allowed to proceed for a significant extent without the opportunity to affect its progress. b) Although, in case of Emergency Stops (see Subset-026 section 3.10), the ERTMS may not rely entirely on sending Emergency Stop messages but also on the use of the Global System for Mobile Communications - Railway (GSM-R) voice communication (Emergency calls), a common mode failure in the radio system or reception may lead to a loss of both data and voice communications. A.11.4.3 The choice of the value ('Train trip', 'Service brake', 'No reaction') could differ for different categories of line, as there are marked differences between risks associated with high-speed main lines and rural routes, including the arrangements for recovering from the reaction defined by M_NVCONTACT. A.11.4.4 In the case of an area with radio disturbance, the impact on performance depends on both the duration and the spatial extent of the disturbance. A potentially significant impact on performance arises where a localised failure, such as the failure of a radio mast, results in the creation of a 'radio-hole'. If the value of T_NVCONTACT is insufficient to allow a train to cross the 'hole', then the train is trapped until the failed equipment is repaired or the train is able to leave the 'hole' with the ERTMS/ETCS onboard equipment in an appropriate mode. A.11.4.5 Regarding T_NVCONTACT, from a safety perspective, the smaller the value the better. However, the impact on performance is reduced as the value used increases. In the extreme, where the value of T_NVCONTACT exceeds the time likely to be required to reach the extent of the MA provided (or exceeds the extent time-out normally provided with MAs), there will be no impact on performance. A.11.4.6 The reaction of the RBC and interlocking to a loss of contact should be considered. If both these assume that an MA once issued remains with the train until the train reports otherwise, then system integrity can be maintained. If either use time-out logic, then this might need to be replicated on the train. The value of T_NVCONTACT would be chosen such that: a) It is greater than the expected period between the ERTMS/ETCS onboard equipment receiving successive 'safety' messages. b) It is greater than the period required to recover from a radio drop-out. c) It is greater than the time required to cross 'radio holes' caused by failures of a single radio mast or a single base transceiver station. d) It is not significantly greater than the typical time required to reach the EoA/LoA. A.11.4.7 The above is for un-planned radio holes/gaps/interruptions. In case of an area with inadequate radio coverage, the infrastructure can be designed so that a train can be instructed, via 'Packet Number 68: Track Condition' to stop supervising T_NVCONTACT for a defined geographical extent in order to allow a train to progress through a known radio hole. A.11.4.8 V_NVREL is set by the IM to control the risk of passing the SvL at location(s) where V_NVREL is not superseded by release speed values calculated by ETCS onboard or one that is associated with a particular danger point. When setting the value for V_NVREL, the IM should consider reduced adhesion or degraded mode of the rolling stock.

A.12 D_NVPOTRP A.12.1 Summary

Name D_NVPOTRP - Maximum distance for reversing in Post Trip mode

Subset-026 Minimum value 0 cm

Subset-026 Maximum value 327.670 km

Subset-026 Default value 200 m

RSSB Page 29 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

Name D_NVPOTRP - Maximum distance for reversing in Post Trip mode

Resolution 10 cm, 1 m or 10 m depends on Q_SCALE

ETCS Baseline Baseline 2 Baseline 3

Used in modes PT PT

Used in levels Levels 1, 2 and 3 Levels 1, 2 and 3

Table 16: D_NVPOTRP

A.12.1.1 D_NVPOTRP specifies the maximum distance for which a train may reverse while the ERTMS/ ETCS onboard equipment is in PT. In PT, the ERTMS/ETCS onboard equipment allows train movement only in the reverse direction. If the distance travelled by the train exceeds that given by D_NVPOTRP, the ERTMS/ETCS onboard equipment initiates a service brake application so as to limit any further reverse movement. The train trip is inhibited during the reversing movement. A.12.2 Safety considerations A.12.2.1 A train trip is used to try to maintain the safety of railway operation when a potentially dangerous situation has been detected. The use of the train trip is based on the assumption that, when the potential danger has been detected, stopping the train as quickly as possible minimises the probability that the potential danger will become an actual danger and / or reduces the consequence of such a danger. A.12.2.2 There may be scenarios where the ability to move the train following a train trip may actually reduce the risk. For example, a train suffers low adhesion and passes a signal at danger and the onboard equipment invokes a train trip. Eventually, the train would come to rest at a position that cannot be controlled by the driver, possibly in the path of another train in a conflicting route. Such movements are always subject to authorisation by the signaller, in accordance with the Rule Book. A.12.3 Performance considerations A.12.3.1 The only performance benefit offered by the parameter D_NVPOTRP is the ability to make a reversing movement more quickly following a train trip, because the movement can start without a change in operating mode, that is, the movement can be made while the ERTMS/ETCS onboard equipment is still in PT. A.12.3.2 This performance benefit would be fully realised only if the value of D_NVPOTRP is sufficient for any train to complete the required reverse movement. If the distance that the train is required to reverse is greater than D_NVPOTRP, then the movement cannot be completed without invoking a (service) application of the brakes and, ultimately, without a mode change; such a situation is likely to negate the apparent advantage. A.12.4 Discussion A.12.4.1 As set out in A.12.2 Safety considerations on page 30, train drivers are only permitted to reverse when authorised to do so by the signaller, in accordance with the Rule Book. A.12.4.2 If reverse movement in PT mode is not permitted, that is, the national value is set to 0 m, any operational need for the train to reverse following a train trip would require a change in driving cab and completion of the Start of Mission procedure, or a mode change. Depending on the implementation, the mode change, for example to shunting mode, may additionally require authorisation by the signaller. A.12.4.3 Permitting reversing in PT mode may deliver the operational flexibility to perform authorised reverse movements without requiring a mode change, but its use can only be controlled procedurally. There

Page 30 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

is no technical means to prevent a driver reversing a train in PT mode if the value is non-zero, only to limit the extent of the move through the implementation of the required value.

A.13 D_NVSTFF A.13.1 Summary

Name D_NVSTFF - Maximum distance for running in Staff Responsible mode

Subset-026 Minimum value 0 cm

Subset-026 Maximum value 327.660 km or ∞

Subset-026 Default value ∞

Resolution 10 cm, 1 m or 10 m depends on Q_SCALE

ETCS Baseline Baseline 2 Baseline 3

Used in modes SR SR

Used in levels 1, 2 and 3 1, 2 and 3

Table 17: D_NVSTFF

A.13.1.1 D_NVSTFF specifies the maximum distance for travelling in SR in the absence of a distance received from the RBC or entered by the driver. A.13.2 Safety considerations A.13.2.1 When the ERTMS/ETCS onboard equipment is in SR, the ERTMS/ETCS onboard equipment has insufficient information to fully supervise the train movement. The risk associated with movement in this mode is mitigated by the application of operational procedures and the supervision of the train to a ceiling speed (the ERTMS/ETCS National Value V_NVSTFF by default). A.13.2.2 In practice, since the ERTMS/ETCS onboard equipment will leave SR as soon as conditions allow, there is no obvious safety risk associated with specifying a value for D_NVSTFF that exceeds that required to achieve the specific operational objective that is being addressed. Similarly, specifying a value that is insufficient to allow a train to achieve the specific operational objective has no direct safety impact since, once the train had been brought to a standstill, the distance that could be travelled could (and presumably would) be extended in any case. However, there could be safety implications due to the location where a train is brought to a stand or the way in which a train is brought to a stand, especially if this is as a result of rapid deceleration. A.13.2.3 Depending on the specific circumstances, the ERTMS/ETCS onboard equipment might not be able to leave SR (for example, if it is due to GSM-R or RBC failure). Allowing the train to continue for long distances (for example, exceeding that required by the operational objective) without any means of intervention is a potential safety risk, particularly in conditions of limited visibility. The SR movement could be constrained in the trackside application design by placing balise groups containing 'Stop if in SR' information (ERTMS/ETCS packet 137) at key locations which could allow a higher value of D_NVSTFF. A.13.3 Performance considerations A.13.3.1 While the onboard ERTMS/ETCS equipment is operating in SR it is constrained to travel below a ceiling speed that is: a) V_NVSTFF (by default); or RSSB Page 31 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

b) A value specified within the SR authorisation sent by the RBC (applies to Level 2 or Level 3 only); or c) A value entered by the driver (if permitted by operational rules). A.13.3.2 Where this SR ceiling speed is significantly lower than the most restrictive speed limit that would otherwise be applied, there will be a significant performance impact associated with operating in SR, especially if it is expected that the train has to travel for a long distance. However, while D_NVSTFF specifies the maximum distance a train can progress in SR, the value of D_NVSTFF is not necessarily the limiting factor of the extent of the train's journey. A train will continue with its ERTMS/ETCS onboard equipment in SR until either the operational conditions ensure that it makes a transition to a more restrictive mode, or the maximum distance that it is allowed to progress in this mode is reached. In the latter case, it is anticipated that this maximum distance would be extended (either by the driver or by a message from the trackside) since operational recovery could not, in general, be achieved otherwise. A.13.3.3 Thus, the specification of a value for D_NVSTFF that corresponds to a distance that exceeds that required to achieve the specific operational objective that is being addressed will introduce no adverse impact on performance. However, if the values specified correspond to a distance that is less than that required to achieve the specific operational objective, then, potentially, there could be a significant adverse impact on performance, as an extension to the maximum distance that can be travelled in this mode would be required. A.13.4 Discussion A.13.4.1 The value of D_NVSTFF has little or no impact on safety, because the speed (with V_NVSTFF) and the distance (with D_NVSTFF) are limited through design application rules. The distance set by D_NVSTFF should be long enough to cover the distance which the train has to travel while supervision from the lineside signalling system is unavailable. With a short D_NVSTFF, the driver may need to keep re- entering / revalidating SR to cover the same distance. In combination with ERTMS/ETCS National Value V_NVALLOWOVTRP, if the latter is set to permit selection of override on the move, then there are potential distraction issues at the time when the driver should be particularly vigilant. If V_NVALLOWOVTRP requires the selection of override to be undertaken at a stand, then there would be performance issues (see A.8 V_NVALLOWOVTRP on page 22). A.13.4.2 The distance which a train can travel in SR, while not exceeding D_NVSTFF, is also limited through application rules for the use of the 'Stop if in SR' messages in balise groups placed strategically. The only impact on performance will be an adverse one in situations where the value corresponds to a distance that is less than that required to achieve the specific operational objective that is being addressed.

A.14 Q_NVLOCACC A.14.1 Summary

Name Q_NVLOCACC - Default accuracy of the balise location

Subset-026 Minimum value 0 m

Subset-026 Maximum value 63 m

Subset-026 Default value 12 m

Resolution 1 m

ETCS Baseline Baseline 2 Baseline 3

Used in modes N/A FS, LS and OS

Page 32 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

Name Q_NVLOCACC - Default accuracy of the balise location

Used in levels N/A 1, 2 and 3

Table 18: Q_NVLOCACC

A.14.1.1 Q_NVLOCACC defines the accuracy of a balise location, and is used in the calculation of the confidence interval (maximum / minimum-safe-front-end of the train), when linking information, and therefore Q_LOCACC, is not available. A.14.1.2 The ERTMS/ETCS onboard calculates a confidence interval, within which it assumes the train is located. The confidence interval takes account of worst case acceptable tolerances of the odometer subsystem and the expected location accuracy of the balise group from which the distance is measured, as shown in Figure 1 Confidence interval of a ETCS fitted train on page 33.

Figure 1: Confidence interval of a ETCS fitted train

A.14.1.3 The maximum permissible over / under-reading amount is 5 m + 5% of distance travelled since the last reference point. A.14.1.4 The confidence interval is the over-reading amount + the under-reading amount + 2 x Q_LOCACC. A.14.1.5 The two parts of the confidence interval equation set out above, are to account for two types of inaccuracy: dynamic and static. The over-reading amount and under-reading amount is to account for the dynamic inaccuracy of the odometry system on the rolling stock; and the Q_LOCACC/Q_NVLOCACC is to account for the balise installation inaccuracy. A.14.2 Safety considerations A.14.2.1 Q_NVLOCACC is only used when linking information is not available. If the value of Q_NVLOCACC is less than the permissible installation tolerance of a balise or the distance between duplicated balises in a balise group, then in situations where speed and distance supervision is based on the confidence interval calculated using Q_NVLOCACC, the train may be further along than the confidence interval suggests. The train may be further along by the difference between the actual installation tolerance or the distance between duplicated balises and the value of Q_NVLOCACC. A.14.3 Performance considerations A.14.3.1 Assuming that the odometer system is operating within its specified tolerance, that is, within over / under-reading limits, a high value of location accuracy will unnecessarily increase the max-safe-front- end; the consequence of which would cause functions related to the train's location to execute sooner than

RSSB Page 33 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

is necessary. For instance, it may place the braking location further from the EoA / target speed point, increasing the stopping distance in effect. Overall, this is a very minor impact as over / under-reading limits have a higher impact to the confidence interval. A.14.4 Discussion A.14.4.1 As set out above, location accuracy is an important element in ERTMS/ETCS onboard functions where the train's location is required. However, the location accuracy provided within a set of ERTMS/ETCS National Values is essential only where location accuracy is not provided by linking information. Furthermore, the location accuracy element is most likely to be outweighed by the over / under-read element of the confidence interval. A.14.4.2 As Q_NVLOCACC is applicable to all balise groups in a National Area, the IM should consider setting the value to the highest value for Q_LOCACC in the area, or to the higher of permitted balise installation tolerance or allowance for duplicated balises.

A.15 Brake Related ERTMS/ETCS National Values A.15.1 When an ETCS fitted train approaches a supervised target, it enters target speed monitoring (TSM) and it calculates relative locations where ETCS has to perform specific actions as part of its ATP functionality. These actions include displaying information to the driver, and issuing commands to the train's traction and braking systems if the driver does not react correctly. The following locations are calculated: a) Emergency Brake Deceleration (EBD) - the latest location from which, if the emergency brake is fully applied and if the braking rate as defined in the train data is achieved, the train will still be brought to a stop at the SvL. b) Emergency Brake Intervention (EBI) - the latest location at which the emergency brake has to be commanded for the train to follow the EBD curve. This curve takes into account the brake build-up time. c) Service Brake Deceleration (SBD) - the latest location from which, if the service brake is fully applied and if the braking rate as defined in the train data is achieved, the train will still be brought to a stop at the EoA. SBD is calculated whether or not the service brake command is available for use. d) Service Brake Intervention 1 (SBI_1) - this is calculated for an EoA and is the latest location at which the service brake has to be commanded for the train to follow the SBD curve to stop at the EoA. The curve takes into account the brake build-up time for the service brake. e) Service Brake Intervention 2 (SBI_2) - this is calculated for an EBD based target and is the latest location at which the service brake is commanded to avoid the train reaching the EBI location. f) Warning (W) - the location from which an intervention by the ERTMS/ETCS onboard is two seconds away at current speed. This is indicated to the driver via the DMI. g) Permitted (P) - the location from which an intervention by the ERTMS/ETCS onboard is four seconds away at current speed. This is indicated to the driver via the DMI. h) Indication (I) - the location from which the ERTMS/ETCS onboard would generate an additional visual cue on the DMI to inform that the start of the P curve is approaching. A.15.2 These locations and speeds are calculated by the ERTMS/ETCS onboard according to a regular processing cycle. Although only one value is calculated for each of the above location types in each processing cycle, a speed-distance curve can be extrapolated for each location type by assuming that the train travels at its estimated speed, and that the performance of the train behaves according to the braking model applied, that is, not affected by external factors. The above location types will be referred to as curves hereinafter. A.15.3 EBD and SBD curves are generated by the ERTMS/ETCS onboard when their respective target types are presented to it. Target types are listed in section 3.13.8 of Subset 026. The ERTMS/ETCS onboard calculates EBI, SBI_2, W, P and I curves as offsets from the EBD curve; and SBI_1, W, P and I curves as offsets from the SBD curve. Where both EBD and SBD are generated, each of their offsets will be compared with their emergency or service brake counterparts, and the failsafe value will be applied where the Page 34 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

counterpart curves overlap. For example, the P curve offset from EBD will be compared with the P curve offset from SBD, and the lower of the two speed values will be used to generate the resultant P curve. This is shown in the following chart.

Figure 2: Chart demonstrating, by simplifying the curves as straight lines as an example, the shape of the resultant Permitted speed curve

A.15.4 Figure 2 Chart demonstrating, by simplifying the curves as straight lines as an example, the shape of the resultant Permitted speed curve on page 35 uses the P curve as an example to illustrate where EBD deduced and SBD deduced curves overlap; the lower of the two will be used as the resultant P curve. A.15.5 ETCS Baseline 3 introduces a harmonised algorithm and method to compute ETCS braking curves and the associated information displayed to the drivers. In setting the National Values, the calculation of braking curves has to take into account the extreme braking capability parameters of rolling stock to apportion safety responsibility between trackside and rolling stock. The ERTMS/ETCS National Values related to the calculation of braking curves are described in this section. A.15.6 The ERTMS/ETCS onboard derives the EBD and SBD from braking model(s). A braking model describes the rate of deceleration which the braking system could deliver (nominal brake rate) for different speed bands. The braking model is preloaded into the ERTMS/ETCS onboard for Gamma trains and derived onboard from train data through the use of a conversion model for Lambda trains. A.15.7 The rate of deceleration of any train is dependent upon the type and combination of brakes. ETCS onboard calculates the braking distance according to braking models, which describes the rate of deceleration at different speed bands. Gamma trains have predetermined speed dependent braking model(s) stored onboard; it is most suitable for trains with fixed, or limited variations of, consist and may include different combinations of special braking systems, including regenerative or magnetic shoe brakes. The braking model(s) describes a Gamma train’s braking performance, derived through simulation or testing. These models are generated to account for the allowed variations in consist and different types and combinations of braking systems. For Gamma trains containing multiple braking models, only one braking model is applied at any one time for the selected consist and the status of the braking system. A.15.8 Lambda trains either do not have predetermined braking models stored in the ETCS onboard, or the available braking models are not applicable to its current configuration. Instead, the ETCS onboard applies the conversion model to convert input data (including the brake percentage (the Lambda value), train

RSSB Page 35 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

length, and brake position) to form a braking model that is similar in format to that of a Gamma train. Lambda trains are most suitable where the rolling stock type(s) and train formations including, for example, train length, weight and wagon types can be different for each mission. The variable formation of a Lambda train means that the braking performance cannot be preset. For more details, see (ERA_ERTMS_040026). A.15.9 A set of ERTMS/ETCS National Values is assigned for a National Area; it can be set by the trackside by use of ETCS communication packet number 3. Within a set of ERTMS/ETCS National Values some braking related values apply to Gamma trains, some to Lambda trains, and some to both. If a train does not have the set of ERTMS/ETCS National Values associated with the National Area which it is in, it will use the default set of ERTMS/ETCS National Values, as defined in subset-026 section A3.2. A.15.10 A high-level schematic of the flow of information used in calculating the brake curves is shown in Figure 3 High level schematic diagram of the processing of braking curves on page 36.

Figure 3: High level schematic diagram of the processing of braking curves Page 36 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

A.15.11 Braking models define theoretical characteristics of a train's braking system which should be achieved during a brake application. The braking related ERTMS/ETCS National Values provide the capability to influence these theoretical braking characteristics and support the safety and performance requirements relevant to a particular National Area. A.15.12 The schematic below shows the process of generating braking curves from braking models and ERTMS/ETCS National Values. The ERTMS/ETCS National Values that are involved are shown in green.

RSSB Page 37 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

Figure 4: Schematic diagram of how braking curves are derived

A.15.13 Within a National Area there may be physical characteristics such as low wheel-rail adhesion that will increase the probability of a train exceeding its EoA/Supervised Location (SvL). There may also be characteristics of the scheme design, for example very short overlaps, that require a very low probability of trains exceeding their EoAs. ERTMS/ETCS National Values can be set to influence the calculation of EBD such that the ERTMS/ETCS onboard applies a lower rate of deceleration than that defined by the braking

Page 38 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

model. Although a train's actual rate of deceleration during an application of the emergency brake does not necessarily follow the rate described by the EBD, a lower rate of EBD will request the train driver to start decelerating earlier. This enables a lighter brake application, with a higher probability of not exceeding the EoA/SvL when the train applies the emergency brakes. A.15.14 A request for an earlier and lighter brake application potentially reduces the likelihood of passing the SvL but, conversely, with the calculated stopping distance extended, there may be adverse impacts on the performance of train services. A.15.15 There are some safety and performance considerations that are common to the braking related ERTMS/ETCS National Values including: • Safety: a) The driver needs to take into account low adhesion conditions, as the braking related indication shown on the DMI may not be achievable at such locations. b) A braking related ERTMS/ETCS National Value which is set incorrectly may lower the probability of the train from stopping before an EoA/SvL under an application of the emergency brake. c) The use of a lower rate of deceleration in the calculation of the braking curves provides a margin for the driver to react to unexpected events. d) If wheel-slide does occur, a train has a higher probability of stopping before the EoA/SvL where longer stopping distances are available. • Performance: a) A brake related ERTMS/ETCS National Value which is set incorrectly may cause the train to stop far in advance of the EoA/SvL when the emergency brake is applied. b) Brake related ERTMS/ETCS National Values that are set to be overly restrictive, may request the train to be slowed down far in advance from where it is needed to decrease in speed. c) A low rate of deceleration may adversely impact performance, as the train will not be maximising its available braking effort in relation to track condition. d) Not all trains require an extended braking distance because some trains' braking systems are more suitable for adverse track conditions or scheme design rules applied within a National Area than others. e) Because ERTMS/ETCS National Values are applied to all trains in the National Area, the braking related indications shown on the DMI may not reflect the optimum braking rate achievable by a specific train. f) Slow approach to an EoA/SvL may slow the release of routes. A.15.16 The use of ERTMS/ETCS National Values to influence brake curves is a 'one size fits all' solution. A National Area may consist of regions with different physical characteristics or scheme designs, and a single set of ERTMS/ETCS National Values may not be appropriate for all regions. The set of ERTMS/ETCS National Values may be over-restrictive in some regions and not restrictive enough in others within the same National Area. In such a case, it may be appropriate to divide the National Area. A.15.17 When an IM sets ERTMS/ETCS National Values for a National Area, it has to consider the drivability of trains crossing boundaries between National Areas, as drivers may have to adapt their driving style for different sets of ERTMS/ETCS National Values. A.15.18 In setting values it is essential for IMs and RUs to cooperate to ensure that the braking ERTMS/ ETCS National Values and corresponding rolling stock braking parameters result in a network braking performance which supports safe drivability and timetable performance. Digital Railway has set up a Braking Aspects Working Group (BAWG) to develop a process and to propose values for use on the GB railway network. The following braking related National Values should be read in conjunction with the BAWG's proposed values and its associated rationales. A.15.19 The following ERTMS/ETCS National Values are common to Lambda and Gamma trains.

RSSB Page 39 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

A.16 Q_NVGUIPERM

A.16.1 Summary

Name Q_NVGUIPERM - Permission to use the guidance curve

Subset-026 values 0 - No ; 1 - Yes

Subset-026 Default value No

Resolution N/A

ETCS Baseline Baseline 2 Baseline 3

Used in modes N/A FS, LS, OS, SR and UN

Used in levels N/A 0, 1, 2 and 3

Table 19: Q_NVGUIPERM

A.16.1.1 Q_NVGUIPERM is a qualifier to enable the display of the 'guidance curve' on the DMI. Q_NVGUIPERM is an ERTMS/ETCS National Value for IMs to override the GUI curve preference set by RUs. It does not force the GUI curve feature to be enabled on the rolling stock if it is disabled by the RU. A.16.1.2 Subset-026 states that the purpose of the guidance curve (GUI curve) is 'to provide a comfortable way of braking for the driver, to avoid excessive wear of the brakes and to save traction energy'. A.16.1.3 If the GUI curve is disabled, the hook on the DMI indicates the Permitted speed; if the GUI curve is enabled, the hook indicates the guidance curve. The GUI curve can never be higher than the P curve. A.16.1.4 The guidance curve is derived from the applied braking model stored onboard, which usually produces a lower speed than Permitted speed curve at the same location. The ERTMS/ETCS onboard uses the lower of the two curves to determine the position of the hook if the GUI curve is enabled. The DMI enters into 'Over-speed status' if the train speed exceeds the speed indicated by the hook. By lowering the recommended travelling speed shown to the driver, the margin between the recommended speed to the 'Warning speed' has increased, giving the driver more time to react before the ERTMS/ETCS onboard intervenes with an application of service or emergency brake. A.16.1.5 The DMI does not indicate whether the guidance curve or Permitted speed curve is being displayed. A.16.1.6 With the GUI curve enabled, the DMI will request the driver to apply the brakes earlier than with the GUI curve disabled. The diagram shown in Figure 5 compares the braking profiles indicated by the hook.

Page 40 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

Figure 5: Comparison of where the 'hook' is shown if GUI curve is enabled.

A.16.2 Safety considerations A.16.2.1 With the GUI curve enabled, the hook indicates a speed that provides a greater margin between the hook and the warning speed, than if the GUI curve is disabled. This additional margin may lead drivers to incorrectly believe that the system is more tolerant to overspeed. A potential confusion for the driver could arise when the GUI curve's setting changes without the driver knowing. For example, when a train transits from a National Area where the GUI curve is disabled to one where the GUI curve is enabled, the driver may be driving below the speed indicated by the hook, but suddenly be presented with overspeed status under the new ERTMS/ETCS National Value. A.16.3 Performance considerations A.16.3.1 The margin created by the GUI curve may cause the overall journey time to be longer, but could reduce the likelihood of an emergency brake intervention, which would be more disruptive to other train services. A.16.3.2 The GUI curve from simulation or tests can be compared with current driving practice, to assess if the use of GUI curve degrades performance. The analysis may need to take into account that drivers may drive at a speed lower than the speed indicated by the hook. A.16.4 Discussion A.16.4.1 RUs could also effectively disable the GUI curve by applying a higher 'A_brake_normal_service' brake rate, which will cause the ERTMS/ETCS onboard to select the lower original permitted speed as the displayed speed. A.16.4.2 An effective use of the GUI curve could be in decreasing the risk from low adhesion, where longer braking distances may accommodate small amounts of slip / slide.

A.17 Q_NVSBFBPERM A.17.1 Summary

Name Q_NVSBFBPERM - Permission to use the service brake feedback

Subset-026 values 0 - No ; 1 - Yes

Subset-026 Default value No

RSSB Page 41 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

Name Q_NVSBFBPERM - Permission to use the service brake feedback

Resolution N/A

ETCS Baseline Baseline 2 Baseline 3

Used in modes N/A FS, LS and OS

Used in levels N/A 1, 2 and 3

Table 20: Q_NVSBFBPERM

A.17.1.1 Q_SBFBPERM is a qualifier to enable the use of service brake feedback in the calculation of the SBI1 and SBI2 curves (see A.15.1 on page 34). This is only effective on trains where brake pressure feedback is provided, and where service brake command is implemented on the train. If the above conditions are satisfied, and the use of service brake feedback is enabled by the ERTMS/ETCS National Value then: a) When service braking effort begins to take effect, the service brake's build-up time constant is adjusted proportionally to its braking effort by the ERTMS/ETCS onboard, to reflect the shorter interval needed when further effort is required. b) The driver can observe the effect from the rate at which the 'hook' moves towards the target speed as the service brake is applied, shown in Figure 6 Comparison of the position of the 'hook' if Q_NVSBFBPERM is enabled on page 42.

Figure 6: Comparison of the position of the 'hook' if Q_NVSBFBPERM is enabled

A.17.1.2 Q_NVSBFBPERM varies the service brake build-up time, which is a factor that alters the separation between braking curves SBI2 and EBI. The service brake build-up time is also altered by the Q_NVSBTSMPERM, which when set to NO, overrides Q_NVSBFBPERM and sets the service brake build-up time between those two curves as zero, that is, no separation between those two curves. A.17.2 Safety considerations A.17.2.1 While good driving practice involves the use of the service brake, ERTMS/ETCS does not rely on the service brake to prevent trains from exceeding their speed and distance limits; it relies on the emergency brake. A.17.2.2 With service brake feedback enabled, once the brake application has reached a defined level, the time parameters used in the calculation of the SBI1 and SBI2 curves become locked to fixed values. Page 42 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

Following the locking of these values, if the driver releases the service brake and then reapplies it, there is an increased risk of an emergency intervention as it may not be possible for the service brake to reapply in time. A.17.3 Performance considerations A.17.3.1 The service brake feedback function provides the driver with information to better control the service brakes. Once the driver applies the service brake, the driver is better informed via the DMI with regards to when further application of the service brake has to be made. With less braking while the train is further from its target speed location, it does not have to lose speed unnecessarily. A.17.4 Discussion A.17.4.1 The use of service brake feedback may extend the system boundary of the onboard signalling system depending on the brake pressure feedback. If the service brake feedback is enabled, given the impact of the brake pressure feedback gauge on the braking capability of the train, maintaining its accuracy is a key consideration in the maintenance regime.

A.18 Q_NVINHSMICPERM A.18.1 Summary

Name Q_NVINHSMICPERM - Permission to inhibit the compensation of the speed measurement inaccuracy

Subset-026 value 0 - No ; 1 - Yes

Subset-026 Default value No

Resolution N/A

ETCS Baseline Baseline 2 Baseline 3

Used in modes N/A FS, LS, OS, SR and UN

Used in levels N/A 0, 1, 2 and 3

Table 21: Q_NVINHSMICPERM

A.18.1.1 Q_NVINHSMICPERM allows the trackside to enable or inhibit the compensation for the speed measurement inaccuracy inherent in the ERTMS/ETCS odometry sub-system in the calculation of the EBI related supervision limits for target speed monitoring by the ERTMS/ETCS onboard. A.18.1.2 The speed inaccuracy compensation adds a margin on top of the measured train speed, which in effect increases the braking distance by braking earlier towards a given SvL. The margin is one that is set within the ETCS specifications - Subset 041 defines the accuracy of speed known onboard to ±2 km/h for train speeds lower than 30 km/h, then increasing linearly up to ±12 km/h for train speeds of 500 km/h. A.18.1.3 Q_NVINHSMICPERM qualifies the use of speed inaccuracy compensation as follows: a) A value of '0' enables the ERTMS/ETCS onboard to use speed inaccuracy compensation, by adding a speed dependent margin onto the speed measurements from the odometer system. Whereas, b) A value of '1' inhibits the ERTMS/ETCS onboard from using speed inaccuracy compensation, which instead uses speed measurements directly from the odometer system. A.18.1.4 While speed inaccuracy compensation increases the train speed used for the calculation of emergency brake deceleration, it does not alter the measured speed which the driver reads on the DMI.

RSSB Page 43 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

Figure 7: Comparison of the position of the 'hook' if Q_NVINHSMICPERM is enabled

A.18.1.5 The train speed derived from the odometry system, Vest, may be different from the actual speed of the train, Vactual, due to factors such as inaccuracies within the odometry system, or variations in wheel diameter. Vest being less than Vactual could be unsafe, as set out in the safety considerations section. The difference in braking curves with Q_NVINHSMICPERM enabled or disabled is shown in Figure 7. A.18.2 Safety considerations A.18.2.1 This function mitigates the risk of a train not being able to stop before the SvL because of an underestimation of speed measurement by the ERTMS/ETCS onboard odometry sub-system, assuming that the level of error is within the tolerance specified within the TSI. If a train's actual speed is higher than that used by the system, the calculated emergency braking intervention point distance may be too short to stop the train before or at the SvL. Applying an additional margin to the measured speed may be a means of correcting an inaccurate speed measuring system which tends to under-measure. With other safety factors accounted for in the calculation of the emergency deceleration, the under-measured speed may not be a significant factor and thus may not need to be compensated. A.18.3 Performance considerations A.18.3.1 Compensating for speed inaccuracy would place the calculated emergency brake intervention point further from the target. This in turn places the warning, permitted, and indication (not measured train speed) limits also further from the target. To avoid triggering any warning or intervention, the driver will have to apply the brakes earlier than if the speed inaccuracy Q_NVINHSMICPERM compensation is inhibited. Although the performance impact on the approach to each SvL is not great, as the speed compensation is relatively low, the combined effect of early braking to a number of SvLs along a route may be significant. A.18.4 Discussion A.18.4.1 When deciding whether speed inaccuracy Q_NVINHSMICPERM compensation should be enabled or inhibited, the overall accuracy, and reliability of the speed measuring systems on different types of rolling stock should be considered. The IM and RU(s) should collaborate to determine whether the difference between the actual and measured speed warrants this compensation. If measured speed is systemically under-measured, an IM may set the ERTMS/ETCS National Value to '0' to apply speed compensation. Railway systems are designed such that minor discrepancies in precisions or accuracy in odometer measurements are tolerable. With the speed inaccuracy compensation being relatively low, the overall improvement to safety with speed inaccuracy compensation enabled is limited, but may have a notable impact on performance. For a train travelling at a speed of 160 km/h and reducing to a target speed of 0 km/h, the difference between stopping distances with speed inaccuracy compensation enabled or inhibited

Page 44 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

is approximately 60 m. There is a performance penalty when the stopping distance is extended because the train travels more slowly.

A.19 A_NVMAXREDADH1, A_NVMAXREDADH2, A_NVMAXREDADH3 A.19.1 Summary

Name A_NVMAXREDADH1, A_NVMAXREDADH2, A_NVMAXREDADH3 - Maximum deceleration under reduced adhesion conditions (1) (2) (3)

Subset-026 Minimum value 0 m/s2

Subset-026 Maximum value Baseline 3 Maintenance Release 1: 3.15 m/s2

Baseline 3 Release 2: 3.00 m/s2

Subset-026 Default value A_NVMAXREDADH1 = 1.0 m/s2

A_NVMAXREDADH2 = 0.7 m/s2

A_NVMAXREDADH3 = 0.7 m/s2

Resolution 0.05 m/s2

Special values for Baseline 3 Release 2 only: 61 - No maximum deceleration, display target information in CSM 62 - No maximum deceleration, display time to Indication in CSM 63 - No maximum deceleration, no additional display

ETCS Baseline Baseline 2 Baseline 3

Used in modes N/A FS, LS, OS,SR and UN

Used in levels N/A 0, 1, 2 and 3

Table 22: A_NVMAXREDADH1/2/3

A.19.1.1 A_NVMAXREDADH defines the maximum emergency brake deceleration rate used for the braking calculation when the low adhesion function is active. For Baseline 3 Release 2, the range of maximum emergency brake deceleration rate is limited between 0 m/s2 and 3.00 m/s2, and there is the option of using special values instead. The special values allow the IM to specify the DMI to either display Target Information (TI) or Time To Indication (TTI) on the approach to a target speed and while still in Ceiling Speed Monitoring (CSM) state, or for no additional information to be shown. If one of these special values is selected, no maximum rate of deceleration is applied for the braking calculation if the low adhesion function is active. A.19.1.2 For Baseline 3, where a maximum deceleration value is defined and when the low adhesion function is active, the A_NVMAXREDADH values only affect portions of the EBD curve where A_NVMAXREDADH delivers a lower rate of deceleration than the nominal brake rate of the train (see subset-026 3.13.6.2.1.3 and 3.13.6.2.1.4). As a result, the braking distance may be extended to accommodate the use of the lower rate of deceleration (A_NVMAXREDADH) for parts of the EBD curve, as

RSSB Page 45 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

shown in Figure 8 Demonstration of how A_NVMAXREDADH derates EBD and increases braking distance on page 46.

Figure 8: Demonstration of how A_NVMAXREDADH derates EBD and increases braking distance

A.19.1.3 There are three A_NVMAXREDADH ERTMS/ETCS National Values to be set: A_NVMAXREDADH1, A_NVMAXREDADH2, and A_NVMAXREDADH3. Only one applies to a given train; the selection being dependent on the onboard brake setting. a) A_NVMAXREDADH1: 'Passenger train in P' with special / additional brakes. b) A_NVMAXREDADH2: 'Passenger train in P' without special / additional brakes. c) A_NVMAXREDADH3: 'Freight train in P' or 'Freight train in G'. A.19.1.4 There are two ways to activate the ERTMS/ETCS reduced adhesion function. This can be either by an ETCS communication packet (Packet 71, via RBC, balise, or RIU); or activation by the driver through the DMI if activation via the DMI is not disabled by ERTMS/ETCS National Value Q_NVDRIVER_ADHES (A.2 Q_NVDRIVER_ADHES on page 11). The application of ERTMS/ETCS National Values A_NVMAXREDADH1/2/3 is distinct from other ERTMS/ETCS National Values because it can be activated at specific locations in a given National Area, on demand, where instructed by ETCS communication Packet 71, rather than being one permanently active setting for the whole of the National Area. The driver may activate the function via the DMI, or by the signaller sending the command via RBC in ERTMS level 2/3, or by balise/RIU in ERTMS level 1. A.19.1.5 Where a train is travelling in an area with ceiling speed supervision, and is approaching a target speed, the ERTMS/ETCS onboard calculates a permitted speed curve for the reduction. When the train reaches the location at which the permitted speed starts to decrease from the initial ceiling speed (the First indication location (dI)) the hook on the DMI turns yellow and gradually lowers in accordance to the transition in speed. dI is displayed on the DMI's planning area as the Indication Marker in the form of a horizontal yellow line, but its logarithmic scale may be difficult to read correctly, quickly. To address this, the IM has the option of enabling additional information on the DMI to assist drivers through the use of the special values. The options are either to display the distance based TI, or the time based TTI. A.19.1.6 In the DMI simulation screenshots shown in Figure 9, the train is travelling in an area where the permissible speed is 80 km/h. A reduction in speed to 20 km/h is approximately 700 m ahead. The yellow horizontal bar is the Indication Marker; when it descends to the bottom of the planning area, the 'hook' on the speedometer turns yellow and gradually decreases from 80 km/h to 20 km/h. With TI selected (A_NVMAXREDADHx = 61), the TI on the far left will appear when the next Most Relevant Displayed Target is present. TI displays the distance between the train's current location to the beginning of the 20 km/h ceiling speed. This is intended to support the driver in determining where to begin the braking effort.

Page 46 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

Figure 9: DMI with TI initiated

A.19.1.7 With TTI selected (A_NVMAXREDADHx = 62), the TTI will be displayed when the train is 14 seconds, at estimated speed, from the dI. The TTI appears on the top left of the DMI, and has a dark grey background and a white square that grows from the centre in 10 steps until it covers the dark grey square completely. Again, this is intended to support the driver in determining where to begin the braking effort.

RSSB Page 47 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

Figure 10: DMI with TTI initiated

A.19.1.8 If the special value of 63 is assigned, neither a cap in the rate of deceleration in low adhesion situations, nor the use of TI or TTI will be available. A.19.2 Safety considerations A.19.2.1 The use of A_NVMAXREDADH to constrain the highest rate of deceleration for the EBD, if the low adhesion function is active, provides benefits in safety when it is comparatively lower than the nominal rate. This effectively increases the stopping distance, prompting the driver to brake sooner and allowing lighter braking. A.19.2.2 Using the rate of deceleration imposed by A_NVMAXREDADH does not guarantee that the train would stop before the SvL, because the value may not reflect the actual adhesion condition at a given location. Potentially, the indication of the low adhesion function being active may lead the driver to believe that following the permitted speed indication on the ERTMS/ETCS DMI will prevent the train overshooting the EoA/SvL. However, the longer braking distance imposed by A_NVMAXREDADH may decrease the likelihood of overshooting the EoA/SvL when a train experiences sliding due to low wheel-rail adhesion. A.19.2.3 For Baseline 3 Release 2, if a maximum rate of deceleration is defined, the driver has only the Indication Marker in the planning area to forewarn of the latest location at which to start braking. This could result in the driver spending more time observing the DMI and, if the driver misses the cue or has inaccurately judged the location from the logarithmic scale, the descending hook may appear to start too suddenly and not leave the driver enough time to brake before warning or intervention limits are exceeded. A.19.2.4 The use of TI/TTI forewarns the driver of the approach of a first Indication location, supporting the driver in determining where braking should commence. However, this means that associated modification of the braking curves when the low adhesion function is active cannot be used, and the driver is responsible for judging the local adhesion condition and braking accordingly.

Page 48 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

A.19.3 Performance considerations A.19.3.1 An excessively low rate of deceleration will adversely impact on performance, as the train may not be maximising its available braking effort where wheel-rail adhesion is better than the A_NVMAXREDADH limitation. A.19.3.2 For Baseline 3 Release 2, the use of TI/TTI provides the driver with more information to support the decision on where to initiate braking effort. The less demanding braking curve allows a relatively later application of brakes when wheel-rail adhesion can sustain a higher rate of deceleration. A.19.4 Discussion A.19.4.1 The use of this National Value to impose either a longer braking distance or to enable TI/TTI, could be interpreted as extending the braking distance by capping the rate of deceleration by the system, or to allow the driver to decide the optimum location to initiate braking. A.19.4.2 The choice of A_NVMAXREDADH as a maximum rate of deceleration for the calculation of EBD is a trade-off between performance and safety. Setting the A_NVMAXREDADH too high may not be effective in protecting the train from exceeding the EoA/SvL and may mislead drivers into believing that following the permitted speed indication will guarantee that the train will stop before EoA/SvL. Setting the A_NVMMAXREDADH too low could be too restrictive and adversely impact performance. A.19.4.3 A_NVMAXREDADH has to be set to be lower than the train's nominal rate of deceleration for it to be effective. A.19.4.4 A mandatory longer stopping distance decreases the risks associated with late braking due to the driver misjudging the available wheel-rail adhesion. However, the extended braking distance does not guarantee that the train will stop at EoA or SvL. A.19.4.5 The use of TI/TTI inhibits the ability to cap the braking rate when the low adhesion function is active but provides additional information for the driver that a speed decrease is approaching. A.19.4.6 Neither TI nor TTI provides an indication of where braking has to commence, but they may support the driver in planning the brake application. A.19.4.7 When deciding to impose an ERTMS/ETCS National Value that is different from that imposed in the adjacent National Area, drivability across the border between the areas has to be assessed, as driving behaviour may need to differ significantly when the border is crossed. For example, if in one National Area drivers have TI or TTI to assist them to plan the application of brakes, but this is not available when they have crossed the national border, drivers may apply service brakes too late to prevent an ERTMS intervention.

A.20 Q_NVSRBKTRG, Q_NVSBTSMPERM, Q_NVEMRRLS A.20.1 Summary

Name Q_NVSRBKTRG - Permission to use service brake when braking to a target is supervised

Subset-026 values 0 - No ; 1 - Yes

Subset-026 Default value Yes

Resolution N/A

ETCS Baseline Baseline 2 Baseline 3

RSSB Page 49 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

Name Q_NVSRBKTRG - Permission to use service brake when braking to a target is supervised

Used in modes FS, LS, OS, SR and UN Q_NVSRBKTRG in Baseline 2 is renamed as Q_NVSBTSMPERM in Used in levels 0, 1, 2 and 3 Baseline 3

Table 23: Q_NVSRBKTRG

A.20.1.1 Q_NVSRBKTRG specifies whether service brake interventions should be used (if available) when the ERTMS/ETCS onboard equipment is supervising braking to a target.

Name Q_NVSBTSMPERM - Permission to use service brake in target speed monitoring

Subset-026 values 0 - No ; 1 - Yes

Subset-026 Default value Yes

Resolution N/A

ETCS Baseline Baseline 2 Baseline 3

Used in modes Q_NVSRBKTRG in Baseline 2 is FS, LS, OS, SR and UN renamed as Q_NVSBTSMPERM in Used in levels Baseline 3 Levels 0, 1, 2 and 3

Table 24: Q_NVSBTSMPERM

A.20.1.2 Q_NVSBTSMPERM has the same function as Q_NVSRBKTRG in that it specifies whether service brake interventions should be used (if available) when the ERTMS/ETCS onboard equipment is supervising braking to a target. A.20.1.3 For the following sections, the considerations presented for variable Q_NVSRBKTRG are also applicable to Q_NVSBTSMPERM.

Name Q_NVEMRRLS - Emergency brake release

Subset-026 values 0 - release only at standstill possible; 1 - immediate release possible

Subset-026 Default value Release only at standstill possible

Resolution N/A

ETCS Baseline Baseline 2 Baseline 3

Used in modes FS, LS, OS, SR and UN FS, LS, OS, SR and UN

Page 50 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

Name Q_NVEMRRLS - Emergency brake release

Used in levels 0, 1, 2 and 3 0, 1, 2 and 3

Table 25: Q_NVEMRRLS

A.20.1.4 Q_NVEMRRLS specifies whether a demand by the ERTMS/ETCS onboard equipment for an emergency brake application is maintained until the train is stationary, or whether it is released as soon as the condition that caused the demand no longer applies. A.20.1.5 Different implementations of ERTMS/ETCS can make different assumptions about the braking performance that is available with emergency brake intervention (which represents the 'guaranteed' performance) and service brake intervention (which represents the 'expected' performance). A.20.1.6 When the ERTMS/ETCS onboard equipment is supervising braking to a target, three intervention curves are calculated: a) A service brake intervention curve targeted at the EoA (SBI1). b) A service brake intervention curve targeted at the supervised location (SBI2). c) An emergency brake intervention curve targeted at the supervised location (EBI). A.20.1.7 Both SBI1 and SBI2 are calculated to permit the service brake to be used as the first line of intervention, if available. A.20.1.8 However, when the ERTMS/ETCS onboard equipment is supervising braking to a target and only emergency brake interventions are used, then an emergency brake application is used to protect the point that is the minimum of the system's most restrictive estimate of the location of the supervised location and the estimate of the EoA. A.20.1.9 Where the service brake provides the first intervention, the service brake demand generated by the onboard equipment is cancelled when the speed of the train reaches the permitted speed. A.20.1.10 If the ERTMS/ETCS National Value permits, an emergency brake intervention during CSM or TSM can be cancelled when the train has reached the permitted speed regardless of whether the emergency brake is the first line of intervention or not. A.20.2 Safety considerations A.20.2.1 The value of Q_NVSRBKTRG will not have a significant impact on the safety of ERTMS/ETCS. Irrespective of the value of this parameter, the ERTMS/ETCS onboard equipment should ensure that a train is not allowed to progress beyond its safe location. A.20.2.2 The value of Q_NVEMRRLS does not affect the primary safety role of the emergency brake application within ERTMS/ETCS. On the GB rail network, the Rule Book requires the driver to communicate with the signaller before being allowed to proceed if there has been a braking intervention which has brought the train to a stand. The setting of Q_NVEMRRLS to 'immediate release' needs to be consistent with any requirements on the driver in the event of an emergency brake intervention which does not bring the train to a stand. With either value, if the train attempts to exceed the emergency braking curve, the resulting emergency brake application should return the train to a position within the permitted speed envelope. A.20.2.3 Potentially, there are safety issues relating to the driver's perception of how emergency brake applications are used in ERTMS/ETCS, and these may influence the driver's confidence in the behaviour of the system. Where the value 'only at standstill' is selected, the subsequent behaviour of the train is consistent across the full range of rolling stock. Where the value 'Immediate release' is selected, this allows the release of the emergency brake demand from the ERTMS/ETCS onboard equipment when the train speed has been reduced sufficiently, but the actual behaviour depends on the characteristics of the train's braking system (for example, systems external to ETCS may affect whether the emergency brake is released RSSB Page 51 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

and may affect how the driver reapplies traction power). Also, forcing the train to stop has the desirable effect of discouraging drivers from driving in ways that cause emergency interventions. A.20.2.4 Consideration should be given to the reason why an ERTMS/ETCS emergency brake demand was needed in the first place. Other onboard systems, external to ERTMS/ETCS, may also command an emergency brake application; such instances are outside the scope of this document. A.20.3 Performance considerations A.20.3.1 The use of service brakes for TSM will add a margin between the SBI_2 and EBI, which pushes the W, P, and I curves closer to the train. The curves with Q_NVSRBKTRG / Q_NVSBTSMPERM set as 'yes' would apply earlier braking than if the value is set to 'no'. A.20.3.2 Potentially, the most significant impact on performance associated with not implementing service brake intervention arises if it is not possible to release the emergency brake application immediately the train speed has dropped to the permitted speed. A.20.3.3 From a performance perspective, the best value for the parameter Q_NVEMRRLS is 'immediate' as, in principle, trains could reach a non-zero target such as an LoA at a higher average speed if there was no requirement to brake them to a standstill. In practice, where the target speed is zero, the difference between the two cases (using 'only at standstill' and using 'immediate') should be minimal. Unless the emergency brake intervention curve is based on a grossly underestimated value of the available braking effort, the use of the emergency brake should not allow the train to move far off the intervention curve. Where the target speed is not zero, significant performance benefits may be achieved by releasing the emergency brake prior to standstill. A.20.4 Discussion A.20.4.1 Q_NVSRBKTRG value has no impact on emergency braking performance. However, allowing the service brake intervention imposes earlier braking and therefore, potentially, has an impact on performance. A.20.4.2 Regarding Q_NVEMRRLS from a safety perspective, if Q_NVSRBKTRG is 'yes' and the service brake application has failed to prevent the emergency brake intervention speed being reached, it can be considered inappropriate to allow a train to continue to the end of its EoA/LoA without first bringing it to a stop. This option has the advantage of discouraging driving practices likely to lead to dependence on emergency brake applications.

A.21 M_NVEBCL A.21.1 Summary A.21.1.1 The parameter described in this section relates to Gamma trains.

Name M_NVEBCL - Confidence level for emergency brake safe deceleration on dry rails

Subset-026 Minimum value 0

Subset-026 Maximum value 9

Subset-026 Default value 99.9999999%

Resolution From 0 = confidence level of 50% to 9 = confidence level of 99.9999999%

ETCS Baseline Baseline 2 Baseline 3

Page 52 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

Name M_NVEBCL - Confidence level for emergency brake safe deceleration on dry rails

Used in modes N/A FS, LS, UN, SR and OS

Used in levels N/A 0, 1, 2 and 3

Table 26: M_NVEBCL

A.21.1.2 For Gamma trains, the same braking model(s) applies to trains of the same class and the same consist; however, the actual braking characteristics of each train will differ slightly because of different maintenance cycle and usage. A.21.1.3 M_NVEBCL is used to set the minimum required probability that the train’s braking system could deliver the stated rate of deceleration when commanded. A corresponding derating factor (Kdry_rst) is applied to the nominal emergency brake rate to achieve the required confidence level. A.21.1.4 M_NVEBCL allows 10 confidence levels, ranging from 50% to 99.9999999%, to be defined. Each confidence level has a corresponding speed dependent Kdry_rst value which is stored onboard. The 10 available steps are listed in subset-026 section 7.5.1.75.1. Based on the value of M_NVEBCL and the estimated train speed, the ERTMS/ETCS onboard will select the appropriate value of (Kdry_rst), which is used to derate the calculation of the emergency brake’s deceleration. A.21.1.5 At different speed ranges, the probability of achieving the nominal brake rate may be different. Therefore, each speed range in the multi-step braking model may have a different de-rating factor assigned against it. A.21.1.6 Using the available steps illustrated in subset-026 section 7.5.1.75.1, if an IM demands a confidence level of 99.9%, it would set M_NVEBCL as ‘3’. When the ERTMS/ETCS onboard calculates the emergency braking curve, it will look up its Kdry_rst table and apply the corresponding Kdry_rst as a derating factor. A.21.1.7 Kdry_rst(EBCL) is part of the equation from which the emergency braking curve is derived; other correction factors are also applied. Also, the rate of deceleration is applied as a prediction; it does not guarantee that the train will stop at or before the SvL. It assumes the available wheel-rail adhesion can deliver the rate of deceleration demanded by the brakes. A.21.2 Safety considerations A.21.2.1 Passing the SvL could lead to collision, derailment and, potentially, fatalities. Incorrect setting of the M_NVEBCL increases the likelihood of overrunning the SvL. Setting a higher Confidence Level mitigates this risk by including the probability that trains will stop before the SvL. A.21.2.2 For a fleet of trains with the same brake model and Kdry_rst factors to meet the confidence level set out by the IM, the reliability and availability of train braking systems has to be as consistent as possible across the whole fleet. The RU has the responsibility to ensure variations in the reliability and availability are reflected in the Kdry_rst factors; Kdry_rst has to be relatively low for a fleet of stock type which has low consistency, as Kdry_rst has to take into account the worst possible performance of that type of train. A fleet of a stock type with low Kdry_rst, servicing routes with a relatively high Confidence Level, has to have a corresponding maintenance regime to uphold its availability and reliability. A.21.3 Performance considerations A.21.3.1 Where an IM can set a lower Confidence Level, trains apply a lower derating factor to their rate of emergency deceleration, reducing the predicted braking distance needed to stop before a given EoA/SvL. A.21.3.2 An inappropriate Confidence Level could adversely impact the headway of a route and therefore its capacity.

RSSB Page 53 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

A.21.3.3 An optimised setting of the Confidence Level takes safe stopping and minimised impact on performance into account. A.21.4 Discussion A.21.4.1 A higher than necessary M_NVEBCL has an impact on the train service’s performance. Although different trains have different nominal brake rates and associated Kdry_rst values, a high Confidence Level would inevitably require a heavier derating factor. A heavier derating factor would prevent drivers applying a late application of brakes, which could prevent recovery from delays. A.21.4.2 A high M_NVEBCL has an impact on headways. When setting M_NVEBCL, an IM should consider the type of service which RUs are operating, including the frequency at which the service may encounter stopping block markers or signals. A.21.4.3 Accurate stopping of trains depends on professional driving, and braking related information from DMIs should only be used as guidance. The aim of the deceleration curves is to predict how a train decelerates towards a given target. The curve takes into account several worst-case correction factors, but actual conditions may be more adverse than those used by the model. In such cases, driving while using the deceleration curve as guidance may cause a train to exceed its EoA. Where the correction factor is over- conservative, the system may hinder the performance of train services.

A.22 M_NVAVADH A.22.1 Summary A.22.1.1 The parameter described in this section relates to Lambda trains.

Name M_NVAVADH - Weighting factor for available wheel-rail adhesion

Subset-026 Minimum value 0

Subset-026 Maximum value 1

Subset-026 Default value 0

Resolution 0.05

ETCS Baseline Baseline 2 Baseline 3

Used in modes N/A FS, LS, OS, SR and UN

Used in levels N/A 0, 1, 2 and 3

Table 27: M_NVAVADH

A.22.1.2 M_NVAVADH M_NVAVADH is a modifier that defines the weighting to apply to the ERTMS/ETCS onboard rolling stock correction factor Kwet_rst. In order to determine the safe emergency deceleration rate, the emergency deceleration rate is first derated by the ERTMS/ETCS onboard correction factor Kdry_rst(EBCL) (see section A.21 M_NVEBCL on page 52 on M_NVEBCL). The M_NVEBCL value is set for rails in dry conditions, and, to factor in wet (low adhesion) conditions which the train may encounter, the emergency deceleration rate is further derated to provide a longer stopping distance for the train to decelerate. A.22.1.3 The derating is achieved by applying ERTMS/ETCS onboard rolling stock correction factor Kwet_rst, which is a factor of the reduced brake rate achieved by a train under the low adhesion test scenario stated in EN 15595:2009, in comparison with braking in dry conditions. For example, if the nominal

Page 54 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

brake rate (in dry conditions) of a train is 12%g, and the brake rate achieved during the low adhesion test scenario is 7%g, the Kwet_rst factor is equal to 7%g / 12%g, which is approximately 0.58. The RU is responsible for determining and configuring the Kwet_rst values in the ERTMS/ETCS onboard equipment. Both Kdry_rst and Kwet_rst are applied under all conditions (see the process diagram in Figure 4 Schematic diagram of how braking curves are derived on page 38). A.22.1.4 In practice, available adhesion is usually better than that experienced under test conditions, as set out in EN 15595:2009, and an IM can adjust the impact of Kwet_rst by setting M_NVAVADH. As an example, the braking model of a train may have a nominal brake rate of 12%g (after Kdry_rst(M_NVEBCL) is applied) and with a Kwet_rst of 0.58: a) Setting M_NVAVADH to 0, the full magnitude of the Kwet_rst correction factor will be effective to the brake model, that is, a rate of deceleration of (12%g x 0.58) 7%g will be applied in calculating the EBD. b) Setting M_NVAVADH = 1, the Kwet_rst correction factor is effectively neutral, and a resultant rate of deceleration of 12%g will apply to calculate the EBD. c) EN 15595:2009 sets a low adhesion reference point for rolling stock tests. For a network with a nominal adhesion performance which is better than this reference point, the IM would set M_NVAVADH to a corresponding value that reflects this improvement. For example, if the nominal adhesion was 60% better than the reference point, then the IM could set M_NVAVADH to 0.6. In our example, 10%g (60% from the low-adhesion brake rate (7%g) to the nominal brake rate (12%g)) will be applied to calculate the EBD. A.22.1.5 M_NVAVADH is a ‘one size fits all’ value that applies to all Gamma trains in a national value area. It is applied regardless of the actual available adhesion in an area and assumes that: a) Kwet_rst derates the nominal brake rate to meet the test conditions set out in EN 15595:2009. b) The worst adhesion conditions on the track are no worse than the test conditions set out in EN 15595:2009. c) The factors for derating the braking distance are linear, as is the scale of available adhesion between the test condition set out in EN 15595:2009 and dry conditions. A.22.1.6 The lower the value of M_NVAVADH, the greater the decrease will be in the emergency brake rate used in the calculation of the EBD curve. This increases the emergency braking distance applied to the train and advises the driver to apply the brakes earlier with a gentler deceleration. At different speed ranges, the impact of low adhesion may be different, and a different Kwet_rst can be assigned to adjust the rate of deceleration to reflect the difference. However, the M_NVAVADH value is speed independent. A.22.2 Safety considerations A.22.2.1 Applying an incorrect M_NVAVADH may potentially cause the train to exceed its given SvL if it overestimates the adhesion conditions. The setting of M_NVAVADH needs to reflect the nominal adhesion performance that can be achieved in that National Area. A.22.2.2 The M_NVAVADH has an influence on the permitted speed displayed to the driver via the DMI. The permitted speed is the maximum speed allowed but, as it does not reflect the actual wheel-rail adhesion at a given location, the driver may need to drive more conservatively in low adhesion conditions. The decision of where and how much braking effort is applied is the responsibility of the train driver. A.22.3 Performance considerations A.22.3.1 The ERTMS/ETCS onboard deceleration model is first derated by the Kdry_rst correction factor (selected according to M_NVEBCL), then further derated by the Kwet_rst correction factor, which is weighted by M_NVAVADH. Both correction factors are fixed; they are not intended to vary upon railhead conditions. Therefore, applying the full weight of Kwet_rst (M_NVAVADH=0) to accommodate locations with low wheel-rail adhesion will degrade performance at locations with better wheel-rail adhesion, such as tunnel areas.

RSSB Page 55 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

A.22.3.2 Although applying a high rate of deceleration has a higher chance of slip/slide, this effect may be countered by the WSP systems effort, or other adhesion enhancing systems available, such as sanders. A.22.4 Discussion A.22.4.1 The number of wheelsets in a consist may also have an effect on the amount of slip-slide on wet rails. Rolling stock with a longer formation may experience less slip-slide than the same rolling stock with a shorter formation. The front wheelsets of a consist have a cleansing effect for the rear wheelsets, where the latter would experience less railhead contaminants. A.22.4.2 IMs and RUs can work collaboratively to manage the risk of low adhesion by the use of methods other than M_NVAVADH, such as professional driving, sanders, , or warning boards.

A.23 Q_NVKVINTSET, V_NVKVINT, M_NVKVINT A.23.1 Summary A.23.1.1 The three parameters described in this section relate to Lambda trains and, taken together, form speed dependent correction factor models applicable to different types of train. These speed dependent correction factors apply to the calculation of the predicted braking distance, dependent on the estimated speed of the train and the selected type of train.

Name V_NVKVINT - Speed step used to define the integrated correction factor Kv_int

Subset-026 Minimum value 0 km/h

Subset-026 Maximum value 600 km/h

Subset-026 Default value N/A

Resolution 5 km/h

ETCS Baseline Baseline 2 Baseline 3

Used in modes N/A FS, LS, OS, SR and UN

Used in levels N/A 0, 1, 2 and 3

Table 28: V_NVKVINT

A.23.1.2 V_NVKVINT defines the speed at which a new M_NVKVINT value applies. Each V_NVKVINT does not have to be incremented by the same amount, nor do they have to correspond to the speed steps used in the conversion model. Figure 12 Four steps Kv_int models on page 58 shows an example of a set/sub-set of Kv_int with V_NVKVINT values corresponding to, for example, V1 and V2 in Figure11 An example of a four steps Kv_int on page 58. A maximum of five speed steps can be defined.

Name Q_NVKVINTSET - Type of Kv_int set

Subset value 00 - Freight trains

Page 56 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

Name Q_NVKVINTSET - Type of Kv_int set

01 - Conventional passenger trains

Subset-026 Default value N/A

Resolution Either 00 or 01; 10-11 are spares

ETCS Baseline Baseline 2 Baseline 3

Used in modes N/A FS, LS, OS, SR and UN

Used in levels N/A 0, 1, 2 and 3

Table 29: Q_NVKVINTSET

A.23.1.3 Q_NVKVINTSET describes the type of train (passenger or freight) to which the associated set of M_NVKVINT and V_NVKVINT applies. 'Freight trains' are those with the brake position in Freight in P or Freight in G. 'Conventional passenger trains' are those with the brake position in Passenger in P. For trains described as conventional passenger trains, the set of speed dependent correction factors (M_NVKVINT, V_NVKVINT, A_NVP12 and A_NVP23) which follow it are applicable. Figure 12 Four steps Kv_int models on page 58 shows the structure of the speed dependent sets for freight and convention passenger trains.

Name M_NVKVINT - Integrated correction factor Kv_int

Subset-026 Minimum value 0

Subset-026 Maximum value 2.54

Subset-026 Default value 0.7

The List of National / Default Data in A.3.2 of the SRS-026 states: The default value of the correction factor Kv_int shall be valid for any brake position, speed and maximum emergency brake deceleration. This means that the Kv_int model is valid for all train types and does neither contain any speed step nor any pivot deceleration limit.

Resolution 0.02

ETCS Baseline Baseline 2 Baseline 3

Used in modes N/A FS, LS, OS, SR and UN

Used in levels N/A 0, 1, 2 and 3

Table 30: M_NVKVINT

A.23.1.4 M_NVKVINT defines the speed dependent integrated correction factor that is applied to the emergency brake rate derived from the conversion model for each speed range defined by V_NVKVINT. The combination of the different speed ranges defined by V_NVKVINT, and the correction factor applicable to RSSB Page 57 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

that speed range as defined by M_NVKVINT, provide a set of Kv_int correction factors, as shown in Figure 12 Four steps Kv_int models on page 58. A.23.1.5 The IM is able to use the integrated correction factors to adjust the braking distance to suit the infrastructure layout or available adhesion. The correction factor is used to adjust the brake rate determined by the conversion model to tune the ETCS braking curve to more accurately align with the characteristics of a legacy signalling system; for example, performance, driving style or to reflect the available wheel-rail adhesion. A.23.1.6 Two sets of speed dependent correction factors (Kv_int) can be defined, as shown in Figure 12 Four steps Kv_int models on page 58: one set for freight trains, and one set for conventional passenger trains. The two sets are distinguished from one another using parameter Q_NVKINTSET. The conventional passenger trains set comprises two sub-sets, the application of which is dependent on the maximum emergency braking deceleration of the train (calculated by the conversion model) in relation to lower and upper deceleration limits A_NVP12 and A_NVP23 (see A.24 A_NVP12, A_NVP23 on page 59).

Figure 11: An example of a four steps Kv_int

Figure 12: Four steps Kv_int models

A.23.1.7 For freight trains, the M_NVKVINT value used is dependent on the train's current speed relative to the speed ranges defined by V_NVKVINT. For conventional passenger trains, the selection of M_NVKVINT has to take ERTMS/ETCS National Values A_NVP12 and A_NVP23 into consideration. For both brake settings, the selected M_NVKVINT value is multiplied with the relevant rate of deceleration from the braking model calculated by the conversion model. A.23.2 Safety considerations A.23.2.1 The correction factors used for the Lambda braking model are different to the ones used for the Gamma braking model in that the IM can decrease the nominal braking distance by setting the M_NVKVINT to be larger than one. The safety implication is that a train might not be able to stop before its SvL. However, the conversion model is comparatively conservative for current rolling stock on the GB mainline railway, which could mitigate this hazard.

Page 58 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

A.23.3 Performance considerations A.23.3.1 Setting M_NVKVINT to be too low can increase the predicted braking distance to be much longer than that which the train could achieve. A.23.3.2 Setting M_NVKVINT to zero, or near zero, will create a braking distance of infinity and the train will be unable to move. A.23.3.3 Unlike braking related ERTMS/ETCS National Values for Gamma trains, M_NVKVINT can be set to be higher than the value of one, making the applicable rate of deceleration to be higher than that generated by the conversion model. A.23.4 Discussion A.23.4.1 KVINT, in combination with KRINT (A.25 L_NVKRINT, M_NVKRINT on page 63) and KTINT (A.26 M_NVKTINT on page 66), is used to correlate the generated brake model with the predicted braking performance of trains. Therefore, in the setting of KVINT, the IM may have to take the conversion model into account, and analyse if the conversion model correctly reflects the general braking behaviour of trains. A.23.4.2 KVINT could be used to increase the probability of trains stopping before the EoA/SvL. An IM could use KVINT to reduce the possibility of exceeding an EoA/SvL by requiring drivers to brake earlier and more gently towards an EoA/SvL. A.23.4.3 KVINT could be used to reflect the available wheel-rail adhesion in general. An IM could set a smaller KVINT for a National Area for periods when wheel-rail adhesion is predicted to be low. A.23.4.4 An IM may wish to influence the EBD for different ranges of speed, for example, setting a low Kv_int can be used at low speeds to increase the confidence of not exceeding SvLs. At the same time, a value of one or greater can be applied to high-speed ranges, to take account of transitions from higher to lower speed limits without over-extending the predicted braking distances.

A.24 A_NVP12, A_NVP23 A.24.1 Summary A.24.1.1 The two parameters described in this section relates to Lambda trains.

Name A_NVP12 - Lower deceleration limit to determine the set of Kv_int to be used

Subset-026 Minimum value 0 m/s2

Subset-026 Maximum value 3.15 m/s2

Subset-026 Default value N/A

Resolution 0.05 m/s2

ETCS Baseline Baseline 2 Baseline 3

Used in modes N/A FS, LS, OS, SR and UN

Used in levels N/A 0, 1, 2 and 3

Table 31: A_NVP12

RSSB Page 59 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

Name A_NVP23 - Upper deceleration limit to determine the set of Kv_int to be used

Subset-026 Minimum value 0 m/s2

Subset-026 Maximum value 3.15 m/s2

Subset-026 Default value N/A

Resolution 0.05 m/s2

ETCS Baseline Baseline 2 Baseline 3

Used in modes N/A FS, LS, OS, SR and UN

Used in levels N/A 0, 1, 2 and 3

Table 32: A_NVP23

Page 60 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

Figure 13: Process of extracting Kv_int

A.24.1.2 For conventional passenger trains (not applicable to freight in P or G), two sets of speed dependent correction factors are defined: Kv_int_x_a and Kv_int_x_b. A_NVP12 represents the maximum threshold up to where Kv_int_x_a is applied and A_NVP23 represents the minimum threshold from where Kv_int_x_b is applied. The ERTMS/ETCS onboard uses the maximum rate of deceleration generated from the train's conversion brake model (A_ebmax), to compare against A_NVP12 and A_NVP23 to determine which set of speed dependent correction factors are applicable (see subset-026 3.13.6.2.1.8). If the values of A_NVP12 and A_NVP23 are different, the speed dependent correction factors applicable to trains with emergency brake deceleration falling between the two values are interpolated linearly by the following equation:

A.24.1.3 The chart at the top of Figure 13 Process of extracting Kv_int on page 61 shows how the two sets of Kv_int correction factors are linearly connected.

RSSB Page 61 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

A.24.2 Safety considerations A.24.2.1 The safety considerations for this ERTMS/ETCS National Value depend upon the setting of Kv_int. Where Kv_int_x_a has a greater value than Kv_int_x_b, setting A_NVP12 to a high value would result in more trains using the Kv_int_x_a set, increasing the probability that better-braked trains might exceed their EoA/SvL due to sliding in low adhesion conditions. This can have safety implications if an inappropriate correction value is used that derives a deceleration that exceeds the actual capability of the train. Conversely, the use of a more conservative Kv_int_x_b for trains that have a higher maximum rate of deceleration may reduce the likelihood of slip/slide by indicating an earlier and lighter application of brakes on the approach to the EoA, which allows longer distance to recover if the train does slip/slide. A.24.2.2 Setting A_NVP12 and A_NVP23 very close together, with Kv_int_x_a and Kv_int_x_b having noticeable differences, may cause drivability issues. Two similar train consists with similar characteristics may have different sets of Kv_int correction factors imposed upon them. If the difference of their A_ebmax puts one train into the Kv_int_x_a section, while the other train is in the Kv_int_x_b section, the two trains may have very different EBD imposed upon them, while having very subtle differences in driving characteristic. A driver may not realise the need to adjust driving practice until the emergency brake is deployed by the ERTMS/ETCS onboard. A.24.3 Performance considerations A.24.3.1 Where Kv_int_x_a has a greater value than Kv_int_x_b, setting A_NVP23 to a low value would result in more trains using the Kv_int_x_b set, which may unnecessarily derate their braking capability, thereby extending the length of the braking curves and impacting on performance. A.24.4 Discussion A.24.4.1 The setting of an effective A_NVP12/23 depends on the two sets of Kv_int models for conventional passenger trains, and the ETCS onboard derived A_ebmax. A.24.4.2 If an IM decides to use one set only of Kv_int for conventional passenger trains, A_NVP12/23 does not need to be set to any values, that is, the use of ERTMS/ETCS Default Values does not call for A_NVP12/23. A.24.4.3 If the A_ebmax is at the mid-range of the A_NVP12/23 scales, setting A_NVP12 to be on the high end would force more Lambda conventional passenger trains to use the Kv_int_x_a set; and Kv_int_x_b set if A_NVP23 is at the low end. Theoretically, dividing the A_NVP12/23 range into three equal portions makes an evenly distributed use of both Kv_int sets for conventional passenger trains. A.24.4.4 The absolute differences in the values between Kv_int_x_a and Kv_int_x_b could affect how A_NVP12/23 should be set. Table 33 Comparison of how A_NVP12, A_NVP23, Kv_int_x_a and Kv_int_x_b affects the outcome (all values are in relative terms) on page 62 sets out a qualitative comparison of four different scenarios.

Large differences between Little differences between Kv_int_x_a and Kv_int_x_b Kv_int_x_a and Kv_int_x_b

A_NVP12 and A_NVP23 being far Large difference in KVINTs and Little differences in correction apart A_NVP12 and A_NVP23 being far factors Kv_int between A_NVP12 apart provides gradual and A_NVP23, and almost differences as A_ebmax varies identical Kv_int for the entire along the scale. range. Trains with little differences in EBDs would have similar rate for A_ebmax would cause a small but all trains at similar speed, making noticeable difference in the EBD timetable performance prediction curve. easier.

Page 62 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

Large differences between Little differences between Kv_int_x_a and Kv_int_x_b Kv_int_x_a and Kv_int_x_b

A_NVP12 and A_NVP23 being Large step differences in EBD Very little difference across the close together curves between trains which may range. have similar A_ebmax. It might be simpler if both sets of It would cause driving Kv_int are unified, with A_NVP12 characteristic for trains with to be the same as A_NVP23. slightly different A_ebmax to be very different.

Table 33: Comparison of how A_NVP12, A_NVP23, Kv_int_x_a and Kv_int_x_b affects the outcome (all values are in relative terms)

A.25 L_NVKRINT, M_NVKRINT A.25.1 Summary A.25.1.1 The two parameters described in this section relate to Lambda trains.

Name L_NVKRINT - Train length step used to define the integrated correction factor Kr_int

Subset-026 Minimum value 0 m

Subset-026 Maximum value 2700 m

Subset-026 Default value N/A

Resolution 0 0 m 1 25 m 2 50 m

RSSB Page 63 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

Name L_NVKRINT - Train length step used to define the integrated correction factor Kr_int

3 75 m 4 100 m 5 150 m 6 200m 7 300 m 8-30 (steps of 100 m) 31 2700 m

ETCS Baseline Baseline 2 Baseline 3

Used in modes N/A FS, LS, OS, SR and UN

Used in levels N/A 0, 1, 2 and 3

Table 34: L_NVKRINT

Name M_NVKRINT - Integrated correction factor Kr_int

Subset-026 Minimum value 0

Subset-026 Maximum value 1.55

Subset-026 Default value 0.9 The List of National / Default Data in A.3.2 of the SRS-026 states: The default value of the correction factor Kr_int shall be valid for any train length. This means that the Kr_int model does not contain any train length step.

Resolution 0.05

ETCS Baseline Baseline 2 Baseline 3

Used in modes N/A FS, LS, OS, SR and UN

Used in levels N/A 0, 1, 2 and 3

Table 35: M_NVKRINT

A.25.1.2 Kr_int is a set of train length dependent integrated correction factors that apply to Lambda trains only. A.25.1.3 Wheelsets towards the front of a train consist, in particular on long trains, may experience a different wheel-rail coefficient of to wheelsets towards the rear. This is because preceding wheelsets Page 64 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

may displace water and contaminants on the railhead, which decreases the amount of contaminants experienced by the following wheelsets. When a train experiences low wheel-rail adhesion conditions, a longer train consist that is made up of the same stock type as a shorter consist could have a shorter braking distance than the shorter consist. A.25.1.4 In addition, low adhesion areas may exist in short lengths, and may therefore have a worse effect on shorter trains than long trains. When a short train applies its brakes, a larger portion of its wheels are braking on tracks with patches of extra low adhesion than when a longer train brakes at the same stretch of track. A.25.1.5 Kr_int provides the means for the IM to influence the calculation of the EBD curve to take account of the impact of the train length on the braking capability of the train. A.25.1.6 It is possible to define five individual factors within a Kr_int set in the form of a step function, starting from L_NVKRINT=0. The ERTMS/ETCS onboard will select and apply the corresponding M_NVKRINT value applicable to the train length range for the train length acquired as part of train data. A set of Kr_int with five values is shown in Figure 14 An example of a set of M_KRINT correction factors with five steps on page 65.

Figure 14: An example of a set of M_KRINT correction factors with five steps

A.25.1.7 In Figure 14 An example of a set of M_KRINT correction factors with five steps on page 65, the vertical axis could be associated with the 'contaminant clearing performance' and 'permitted traffic' for the horizontal axis. A.25.2 Safety considerations A.25.2.1 If the IM sets a Kr_int value that is too high it may lead to an over-estimation of the train braking capability in relation to the train length, which could lead to an overspeed, or passing of an SvL. If the driver enters an incorrect train length, this could have the same effect.

RSSB Page 65 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

A.25.3 Performance considerations A.25.3.1 Setting a Kr_int value too low would derate the EBD to have a gentler deceleration curve, requiring the driver to start braking earlier for a speed restriction or an EoA/SvL with a consequential impact on performance. A.25.4 Discussion A.25.4.1 One of the assumptions which Kr_int is based on is that longer trains have more wheelsets, which is not necessarily the case. It is therefore important to consider the number of wheelsets in setting the Kr_int values. A.25.4.2 The value of Kr_int is influenced by: a) The line environment; for example covered lines may experience very little railhead contamination. b) The type of contamination on the rail head and the rate at which train wheels can displace the contamination for the remaining wheels to brake on 'clean tracks'. c) The length of low adhesion areas in comparison with the length of trains that normally travel over them. A.25.4.3 When setting KRINT, the values have to be considered alongside other contributing correction factors in the EBD equation, namely, Kv_int correction factors.

A.26 M_NVKTINT A.26.1 Summary A.26.1.1 The parameter described in this section relates to Lambda trains.

Name M_NVKTINT - Integrated correction factor Kt_int

Subset-026 Minimum value 0

Subset-026 Maximum value 1.55

Subset-026 Default value 1.1

Resolution 0.05

ETCS Baseline Baseline 2 Baseline 3

Used in modes N/A FS, LS, OS, SR and UN

Used in levels N/A 0, 1, 2 and 3

Table 36: M_NVKTINT

A.26.1.2 Kt_int is an integrated correction factor that is applied on Lambda trains to influence the safe emergency brake build-up time, and hence the offset between the EBI curve and the EBD curve. The EBI curve is the final instance at which the emergency brake has to be commanded for the train to stay within the EBD curve. A.26.1.3 Kt_int is different from the correction factors, Kv_int and Kr_int, in that it is a single parameter applicable to all train lengths and speeds. A.26.1.4 When the emergency brake is commanded, a train with standard air brakes would have valves on the brake pipe opened to vent the pressurised air to the atmosphere. The brake pipe's air pressure drops until it equalises with atmospheric pressure, or until the valves are shut. The time delay between brake

Page 66 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

command and brake application is defined as T_brake_emergency. T_brake_emergency is derived from a standardised calculation for all Lambda trains, which cannot fully account for differences in train braking systems due to variations in design and maintenance regimes. Kt_int provides a means to adjust the calculated T_brake_emergency value to correct for these differences through the derivation of parameter T_be using the equation: T_be = Kt_int * T_brake_emergency. A.26.1.5 T_be is subsequently applied to calculate the offset between the EBI curve and the EBD curve. The greater the value of Kt_int, the greater the offset, and the earlier the emergency brake may be commanded. A.26.2 Safety considerations A.26.2.1 Applying a Kt_int which is too low, could result in T_be being shorter than the actual brake application time achievable by a train. This would result in the emergency brake being commanded too late for the train to decelerate within the EBD curve, which could cause the SvL to be exceeded. A.26.3 Performance considerations A.26.3.1 Setting a Kt_int value too high would increase the offset between the EBD and EBI, and subsequently all curves related to braking will be displayed to the driver earlier than necessary, with a consequential impact on performance. A.26.4 Discussion A.26.4.1 T_brake_emergency is calculated for all Lambda trains according to a standardised formula that considers the following train length ranges: a) Train length of less than 900 m. b) Train length of greater than 900 m but shorter than 1500 m. A.26.4.2 If Kt_int is set to accommodate a small proportion of Lambda trains which perform worse than the T_brake_emergency, a longer braking distance would apply to all trains, including those with quicker responding emergency braking systems. A.26.4.3 The setting of Kt_int is a trade-off between safety and performance dependent on the range of performance of the braking systems of Lambda trains which operate on the infrastructure.

RSSB Page 67 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

Definitions

A_NVMAXREDADH1, A_NVMAXREDADH2, Maximum deceleration, assumed by the ETCS A_NVMAXREDADH3 braking model, under reduced adhesion conditions (1) (2) (3). A_NVP12 Lower deceleration limit used by the ETCS braking model to determine the set of Kv to be used. A_NVP23 Upper deceleration limit used by the ETCS braking model to determine the set of Kv to be used. Baseline A set of specifications that forms a recognised legal version of ERTMS/ETCS. Brake position Brake position (Passenger or Goods) corresponds to the brake cylinder application and release timings selected on the automatic air-brake distributors, see GMRT2045 Issue 4 Appendix J for further details. Class B systems Existing non-ETCS national signalling systems, for list of Class B systems, see European Union Agency for Railways technical documents 'List of CCS Class B systems, ERA/TD/2011-11, version 3.0'. Ceiling Speed Monitoring (CSM) ETCS Ceiling Speed Monitoring. D_NVOVTRP An ETCS variable that is used for setting the Maximum distance for overriding an ETCS train trip. D_NVPOTRP An ETCS variable that is used for setting the Maximum distance for reversing in ETCS Post Trip mode. D_NVROLL An ETCS variable that is used for setting the Roll away distance limit. D_NVSTFF An ETCS variable that is used for setting the Maximum distance for running in ETCS Staff Responsible mode. Emergency Brake Deceleration (EBD) The location (or deceleration curve) calculated by the ERTMS/ETCS onboard, if the train is to be slowed down by use of emergency brakes, using current or estimated speed, and other train parameters. Emergency Brake Intervention (EBI) The location which the emergency brakes have to apply if the train is not to exceed the EBD position (or deceleration curve). End of Authority (EoA) An End of Authority is a location to which the train is permitted to proceed and where target speed = zero. Full Supervision mode (FS) ERTMS/ETCS on-board equipment mode giving full protection against overspeed and overrun.

Page 68 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

Isolation mode (IS) ETCS Isolation Mode. When the ERTMS/ETCS on- board equipment is disconnected from the vehicle braking system. Isolation is indicated to the driver. Infrastructure Manager (IM) Any ‘body’ or undertaking that is responsible in particular for establishing and maintaining railway infrastructure, or part thereof, as defined in article 3 of Directive 91/440/EEC, which may also include the management of infrastructure control and safety systems. The functions of the infrastructure manager on a network or part of a network may be allocated to different bodies or undertakings . Article 3 (b) of Directive 2004/49/EC. L_NVKRINT An ETCS variable that is used for setting the train length step used to define the integrated correction factor Kr. Limit of Authority (LoA) A Limit of Authority is the place beyond which the train has no information but to which the train is authorised to run with a defined target speed higher than zero. The train is expected to receive new information before passing the Limit of Authority. Limited Supervision mode (LS) ERTMS/ETCS on-board equipment mode giving partial protection against over speed and over run. The driver has to observe and obey to line side signals and operating rules when in limited supervision mode. M_NVAVADH An ETCS variable that is used for setting the weighting factor for available wheel/rail adhesion used by the ETCS braking model. M_NVCONTACT An ETCS variable that is used for setting the ERTMS/ ETCS onboard reaction when T_NVCONTACT expires. M_NVDERUN An ETCS variable that is used for setting the entry of ETCS Driver ID permitted while running. M_NVEBCL An ETCS variable that is used for setting the confidence level ETCS braking model for emergency brake safe deceleration on dry rails. M_NVKRINT An ETCS variable that is used for setting the ETCS braking model's integrated correction factor Kr. M_NVKTINT An ETCS variable that is used for setting the ETCS braking model's integrated correction factor Kt. M_NVKVINT An ETCS variable that is used for setting the ETCS braking model's integrated correction factor Kv. Non Leading mode (NL) ERTMS/ETCS on-board equipment mode when it is connected to an active cab which is not in the leading engine of the train.

RSSB Page 69 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

No Power mode (NP) ERTMS/ETCS on-board equipment mode in which the on-board equipment is not powered and the emergency brake is commanded. On Sight mode (OS) ERTMS/ETCS on-board equipment mode that gives the driver partial responsibility for the safe control of his train. In this mode the train possesses a movement authority but the track ahead might be occupied by another train. Passive Shunting mode (PS) ERTMS/ETCS on-board equipment mode that allows the on-board of a slave engine to be part of a shunting consist; or to carry on a shunting movement with a single engine fitted with one on- board equipment and two cabs, when the driver has to change the driving cab. Post Trip mode (PT) ERTMS/ETCS on-board equipment mode that is entered after a train trip when the train has been brought to a stand and the driver has acknowledged the situation. Q_NVDRIVER_ADHES An ETCS variable that is used for setting the qualifier for the modification of ETCS trackside adhesion factor by the driver. Q_NVEMRRLS An ETCS variable that is used for setting the qualifier for ETCS Emergency Brake Release. Q_NVGUIPERM An ETCS variable that is used to define whether the use guidance curve is permitted in the braking model. Q_NVINHSMICPERM An ETCS variable that is used for setting the permission to inhibit ETCS compensation of the speed measurement inaccuracy. Q_NVKINT An ETCS variable that is used for setting the qualifier for the ETCS braking model integrated correction factors. Q_NVKVINTSET An ETCS variable that is used to describe the type of Kv_int set which it is intending to set. Q_NVLOCACC An ETCS variable that is used for setting the default location accuracy of a balise location. Q_NVSBFBPERM An ETCS variable that is used to define whether the use of service brake feedback is permitted in the ETCS braking model. Q_NVSBTSMPERM An ETCS variable that is used to define whether the use of service brake is permitted in target speed monitoring. Q_NVSRBKTRG An ETCS variable that is used for setting the permission to use service brake when braking to a target is supervised.

Page 70 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

Radio Electronic Token Block (RETB) RETB is a method of protecting a single line of railway through the use of an electronic interlocking and a radio link to the trains which use the line. Radio Infill Unit (RIU) A trackside component that transmits infill information by radio to trains. Railway Undertaking (RU) Any private or public undertaking the principal business of which is to provide services for goods and/or passengers, with a requirement that the undertaking must ensure traction; this also includes undertakings which provide traction only. Article 3 (a) of Directive 2004/49/EC. Roll In Roll Out The time it takes for train to decelerate from line speed to a stopping station, dwell, then accelerate to line speed again, where a higher rate of deceleration and acceleration will gain higher performance. Reversing mode (RV) ERTMS/ETCS on-board equipment mode that allows the driver to change the direction of movement of the train whilst controlling the train from the same cab. Safe emergency deceleration rate The safe emergency deceleration rate is the value applied to generate the EBD curve. The value is derived from applying derating factors and route's gradient to the emergency deceleration rate, which is an extract from the train's braking model or a derivative from the conversion model. Service brake deceleration(SBD) The location (or deceleration curve) calculated by the ERTMS/ETCS onboard, if the train is to be slowed down by use of service brakes, using current or estimated speed, and other train parameters. Stand By mode (SB) ERTMS/ETCS on-board equipment mode that is a default mode when the on-board equipment is powered up or that is entered when shunting or non- leading mode is left or when the active cab is closed. Service brake intervention (SBI) ETCS Service Brake Intervention. The location which the service brakes have to apply if the train is not to exceed the SBD position (or deceleration curve). System Failure mode (SFM) ERTMS/ETCS on-board equipment mode entered when a fatal failure which could affect safety is found. Shunting mode (SH) ERTMS/ETCS on-board equipment operating mode which allows the train to move in shunting, without available train data. Sleeping mode (SL) ERTMS/ETCS on-board equipment mode that is used for the on-board equipment in slave engines controlled by a leading engine.

RSSB Page 71 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

System National mode (SN) ERTMS/ETCS on-board equipment mode in which the supervision of the train is ensured by a National System. Staff Responsible mode (SR) ETCS Staff Responsible mode. Supervised location (SvL) Supervised Location, which could be defined on- board as the end of the overlap, the Danger Point, or the End of Authority. T_NVCONTACT An ETCS variable that is used for setting the maximum time without new ETCS 'safe' message. T_NVOVTRP An ETCS variable that is used for setting the maximum time for overriding the ETCS train trip. Trip mode (TR) ERTMS/ETCS on-board equipment mode (e.g. entered when passing an EOA), resulting in an application of the emergency brake that can only be revoked at standstill and with additional precautions. TSM ETCS Target Speed Monitoring. Unfitted mode (UN) ERTMS/ETCS on-board equipment mode allowing a fitted train to run in an unfitted area. V_NVALLOWOVTRP An ETCS variable that is used for setting the maximum speed limit allowing the driver to select the ETCS 'override EoA' function. V_NVKVINT An ETCS variable that is used for setting the speed step used to define the ETCS integrated correction factor Kv. V_NVLIMSUPERV An ETCS variable that is used for setting the permitted speed while operating in ETCS Limited Supervision mode. V_NVONSIGHT An ETCS variable that is used for setting the permitted speed while operating in ETCS On Sight mode. V_NVREL An ETCS variable that is used for setting the permitted speed while operating in ETCS Release Speed mode. V_NVSHUNT An ETCS variable that is used for setting the permitted speed while operating in ETCS Shunting mode. V_NVSTFF An ETCS variable that is used for setting the permitted speed while operating in ETCS Staff Responsible mode. V_NVSUPOVTRP An ETCS variable that is used for setting the permitted speed limit to be supervised to, when the ETCS 'override EoA' function is active.

Page 72 of 74 RSSB Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 ERTMS/ETCS National Values Rail Industry Standard RIS-0708-CCS Issue: One Date: September 2017

V_NVUNFIT An ETCS variable that is used for setting the permitted speed while operating in ETCS Unfitted mode.

RSSB Page 73 of 74 Uncontrolled when printed Document supersedes GERT8408 Iss 1 and GEGN8608 Iss 1 with effect from 02/09/2017 Rail Industry Standard ERTMS/ETCS National Values RIS-0708-CCS Issue: One Date: September 2017

References

The Catalogue of Railway Group Standards gives the current issue number and status of documents published by RSSB. This information is also available from http://www.rssb.co.uk/railway-group-standards.

RGSC 01 Railway Group Standards Code RGSC 02 Standards Manual

Documents referenced in the text

(EU) 2016/919 Control Command and Signalling, Technical Specifications for Interoperability NS-ERTMS-SAF-4022 ERTMS National Values – D_NVROLL RSSB-ERTMS-OC ERTMS Operational Concept T093 Development of national values for ERTMS train control parameters – Final Report, RSSB, version 1.0.5, 31 March 2004 Subset-026 ERTMS/ETCS Class 1 System Requirements Specification, v3.6.0, ERA, 13 May 2016 ERA/TD/2011-11, version 3.0 List of CCS Class B systems BS EN 15595:2009 Railway applications. Braking. Wheel slide protection

Page 74 of 74 RSSB