ES Innenanlagen General Concept ETCS Interlocking (rev. 76445) General Concept ETCS Interlocking Version 1.01_published, 30.4.2018 1 Disclaimer This document is a DRAFT version which is still under construction. Its content may change in the ongoing concept phase of SmartRail 4.0. The document is not completely verified and is not finalized by now. The document is published to enable an open discussion of the ongoing work of the SmartRail 4.0 program. Links and references inside of this document may refer to other documents inside of the program SmartRail 4.0, that may not be published at this stage. 2 Contents 1 Disclaimer . 1 2 Contents . 1 3 Glossary . 3 4 Introduction to objectives and approach / Scope of this document . 5 4.1 Introduction and scope . 5 4.2 Process-model in this document . 5 4.3 Premises and requirements . 6 4.3.1 General premises . 6 4.3.2 The general requirements of the ETCS interlocking (EI) . 7 4.3.3 Requirements for the EI system limits . 7 4.3.4 Requirements for the application conditions of the EI (to be designed) . 8 5 Functional description of the entire EI system . 9 5.1 Fundamental working principles of the EI . 9 5.2 Basic conditions for a safe production . 9 5.3 Basic conditions . 10 5.3.1 Safe use . 10 5.3.1.1 Knowledge of the properties, capabilities and states of a moveable object . 10 5.3.1.2 Error-free railway network topology . 11 5.3.2 Safely locked states of trackside assets . 11 5.3.2.1 Check the necessary element states before granting any movement permission . 12 5.3.2.2 Prevention of conflicting change of element states . 12 5.3.2.3 Element states monitoring . 12 5.3.3 Movement only within reserved topology section . 12 5.3.3.1 Effects of localization inaccuracies in the steering and the MP protection . 13 5.3.3.2 Handling localization inaccuracies . 15 5.3.4 Compliance with geometric distances assurance . 16 5.3.4.1 Identification of geometric distances . 16 1/34 SBB CFF FFS 2018-05-01 01:31 ES Innenanlagen General Concept ETCS Interlocking (rev. 76445) 5.3.4.2 Speed and direction of movement . 17 5.4 Conceptual approach - safety in geographic areas . 17 5.4.1 Working principles . 17 5.4.1.1 Utilization permissions (danger areas and movement permissions) . 17 5.4.1.2 Risk path . 19 5.4.1.3 Requesting and reserving a movement permission . 19 5.4.1.4 Utilization conditions (UC) . 23 5.4.1.5 Geometric overlaps of MPs and DAs . 24 5.4.1.6 Differentiation between DA-request and DA-demand . 28 5.4.1.7 Removing or changing a danger area . 28 5.4.1.8 Overriding infrastructure object element states (IOES) . 29 5.5 Generic approach EI core . 30 5.6 Functional architecture and scope of the EI . 30 5.6.1 EI Key functions . 31 5.6.1.1 Not shown in Diagram . 33 6 References . 34 2/34 SBB CFF FFS 2018-05-01 01:31 ES Innenanlagen General Concept ETCS Interlocking (rev. 76445) 3 Glossary Term Abbrev. Description Danger Area DA A danger area is an interleaving free set of topology fragments with the same utilization conditions. A danger area represents e.g. a worksite. ETCS Interlocking EI ETCS FSS based interlocking comprising the RBC. Its dynamic, rule based and geometric safety logic controls all movements of the objects and all changes of the state of the trackside assets within the EIs effective range. All operational logic is moved to the higher-level systems. GLAT GLAT Guided Movable Object Infrastructure IO An Infrastructure Object represents a track side asset in the OC. Object Examples: a point, a level crossing, a track segment, a signal Infrastructure IOE The logical representation in form of edges and/or vectors of elements of the track side assets. This Object Element logical representation is - among other things - utilised to describe the track network topology and for communication purposes between software components. Example: a single switch would consist of either two non-directional edges or four (directed) vectors, representing the trafficability possibilities 'through' and 'deflceting'. Infrastructure IOES The current state of an Infrastructure Object Element. Object Element Example: The logical representation of the point in reverse direction (= an IOE) is "trafficable" State Moveable Object MOB A moveable object is any object in the network topology (moving or not) that can pose a threat or be threatened by being near to an utilization area (movement permission, danger area). MOBs are objects that are detected as such by a RTSA. They were either localiced and/or registered by the sensors or subsystems of the RTSA. MOBs may create a too high safety risk compared to the application safety targets and their movement may be controlled by a RTSA. Movement MP A movement permission is an authorization for a moveable object to move. A movement permission Permission guarantees that the movement can be performed safely. A MP includes, for example, the path (a gap- and overlap-free sequence of topology fragments), the direction of travel, the complete speed profile that matches the path and the number of stops. A movement permission always refers to exactly one movable object. Object Controller OC The Object Controller connects the ETCS Interlocking (EI) with legacy interlockings and with the trackside assets. Object OI The Object Identification manages all moving and stationary objects within the geographic safety area of Identification the interlocking.