Eurailspeed Parallel Session D.1. Carlo Carganico Director Approval and Certification, RFI

Transcription

1 Eurailspeed Parallel Session D.1 Carlo Carganico Director Approval and Certification, RFI 1

2 Approval process of the Italian High Speed Railway System Eurailspeed, November 8th 2005 Carlo Carganico

3 Issues Italian High Speed railway system EU and Italian railway legislation Approval process EC Verification Safety Assessment Technical Acceptance Verification Final considerations 3

4 Italian HS Railway System 4

5 Italian HS Railway System HS HS Lines Lines Milano-Bologna-Firenze Milano-Bologna-Firenze Firenze-Roma Firenze-Roma Torino-Novara-Milano-Venezia Torino-Novara-Milano-Venezia Terzo Terzo Valico Valico (Genova-Novara) (Genova-Novara) HS HS Status Status of of Realisation Realisation km km planned planned km km in in construction construction km km in in operation operation Lines Lines Planned Planned Lines Lines in in Construction Construction Lines Lines in in Operation Operation 5

6 Italian HS Railway System Rome Naples Line 6

7 Italian HS Railway System Rome Naples Line Overall Length Tunnels Bridges Max. Speed Capacity 204 km 38 km 40 km 300 km/h 24 trains/h Min. Radius 5450 m Max. Gradient 21 (Average 18 ) Tracks Dist. 5 m Running Time 1h 10 (Currently 1h 45 ) Interconn. 3 Anagni Cassino Caserta Power Supply 2x25 kv - 50 Hz Signalling Telecommunications GSM-R ERTMS/ETCS Lev.2 7

8 EU and Italian railway legislation 8

9 EU railway legislation 91/440/EC - on the development of the Community's railways 95/18/EC - on the licensing of railway undertakings 96/48/EC - interoperability of high speed railway network I Railway Package - licensing of RUs, allocation of infrastructure capacity and safety certification 2001/16/EC - interoperability of conventional railway network II Railway Package - European Railway Agency and Railway Safety Directive 9

10 Italian railway legislation DL 299/2001 transposition of Directive 96/48/EC DL 188/2003 transposition of Directives 2001/12/EC, 2001/13/EC, 2001/14/EC DL 268/2004 transposition of Directive 2001/16/EC 10

11 RFI: role and responsibility According with the national legislation in force, the Italian Infrastructure Manager (RFI) acts as: National Safety Authority: issuing safety related rules and standards providing the Safety Certificates to the Railway Undertaking approving safety related equipments and systems Competent Body: assessing the conformity to the essential requirements defined by Directives 96/48/EC and 2001/16/EC authorizing the putting into service of the new lines/subsystems of the national HS and conventional lines 11

12 Other Companies: roles and responsibilities TAV (Adjudicating Entity): responsible for the whole system contractual aspects General Contractor: responsible for the complete design and manufacture of the HS lines whole system Italferr (FS Group Engineering Company): responsible for design and construction supervision 12

13 Approval process 13

14 Italian HS lines General Approval Process All Subsystems EC Verification (Interoperability Assessment) CCS Subsystem CCS Subsystem All Subsystems Safety Assessment Functional Assessment TVC (Technical Verification Commissions) Acceptance Verification Conformity Declaration and Acceptance of the line Pre-bussinnes Service Putting into public service 14

15 HS Rome-Naples: Constraints The new Rome Naples high speed line will be the first one to be put into service in Italy after the promulgation of the 96/48/EC Directive. The main considerable aspects of the this project from the conformity assessment point of view are the followings: Interoperability Certification by mean of a retroactive application of TSI procedures to an already designed and even realised high speed line Processes controlled with application of Quality Management System compliant with ISO 9001 Application of Cenelec Standards for Assessment of Safety Related Components and Sub-Systems 15

16 EC Verification 16

17 TSI Conformity Certification The fulfilment of essential requirements is provided with EC Certification of each structural subsystem constituting the high speed rail system. EC Conformity Certification establishes: the complying with the applicable TSI principles or, under the circumstance of derogation, the complying with the Italian legislation, rules and technical specifications as transmitted to the European Community The TSI derogation is planned in the case of advanced development of the project at the moment of TSIs issuing. 17

18 EC Conformity Certification: further requirements The verification of further safety requirements, not included in the TSIs, is performed according to national laws. For example: Safety Approval (Interlocking, Digital Track circuits,etc.) Functional Approval Field Technical verification before placing in service 18

19 RFI: Competent Body The Italian Ministry of Transport appointed RFI, during the temporary period, to perform procedures for conformity assessment as established by legislation. Therefore RFI performs, acting as Competent Body, the EC verification activities with the support of Notified Bodies RINA (Energy and Infrastructure subsystems) and SciroTUV (Control-Command Subsystem). 19

20 EC Certification: basic activities The EC Verification is essentially based on the following two main macro-activities: Design Review Assessment of Quality Management Systems (QMS) 20

21 EC Conformity Certification Activities Quantities Design Documentation Corpus Design Review Quality Management System Evaluation Quality Management System Surveillance 50 Dynamic Integration Run-Tests

22 Safety Assessment 22

23 Safety Assessment activities: the references The Assessment activities are carried out with respect to the CENELEC norms for the Railway field: EN 50126: whole process (life-cycle) for the Total Railway System EN 50129: defines activities and techniques to be used for the Safety demonstration of the electronic railway signaling systems; practically is the guide-line for the preparation of the Safety case that will be Assessed EN 50128: is a specific subset of EN for the software 23

24 Safety Assessment: roles and responsibilities Design and acceptance process is regulated by CENELEC norms and RFI procedures The suppliers must have a specific Verification and Validation department to demonstrate the fulfillment of the required safety targets RFI conformity certification department plays the role of Assessor, also using third party organizations to manage the heavy workload (thousands documents to be analyzed) but keeping continuous control of the whole process 24

25 Safety Assessment activities The Assessment activities cover the analysis of the Safety Case and related documents completed with audits and inspections related to: Safety and Quality management system System architecture (hardware/software) and conformity to the CENELEC standards Test witnessing Document management and requirements traceability 25

26 Safety Assessment activities: the RFI experience A five years experience gives to RFI the confidence with the suppliers V&V organizations V&V experts guarantee the equipment is safe for use, documenting each phase and keeping responsibility for the declarations inserted in all the applicable documents RFI, by its Assessment process, put a judgment across the activities made by the supplier 26

27 HS lines CCS Subsystem architecture Technological system architecture Control Command SCC-AV Radio Block Centre RBC GSM-R Optical fiber network Interlocking BTS switches Other circuits Track circuits No switchable balise Train 27

28 Safety Assessment activities: the Rome-Naples field Specific Application Safety Assessment on Km stretch Generic Application ERTMS Safety Assessment 28

29 System Validation Strategy and Process Main Process and Responsibilities 29

30 System Validation Strategy and Process RFI has deployed a formal and rigorous Supplier Surveillance System, with a continuous information exchange and some feedback sessions RFI has led the process covering: The analysis of the Generic Product and Generic Application Safety Cases and all referred documents The analysis of the Specific Application Safety Cases, Physical Implementation Safety Reports and referred documents 30

31 System Validation Strategy and Process Specific Application assessment, including also physical implementation, has required: the analysis of the quality control and fieldengineering documentation and evidences the execution of several witness testing sessions using the real systems and equipments (plants and/or trains) The testing sessions have been prepared, deployed, managed, verified and assessed jointly by experts of RFI (Conformity Certification Department) and SCIRO-TÜV Consortium (Notified Body) 31

32 System Validation Strategy and Process The high number of modifications and retrofits applied on the products and systems, in order to solve different problems, particular RFI requirements, etc., have obliged both manufacturers and RFI to look up to: quality assurance procedures non regression test activities document analysis (repetition on modified items) 32

33 System Validation Strategy and Resources Main Omologation Process indicators Number of assessed Safety Cases 10 Number of audit sessions 8 Number of witness testing sessions 20 Number of issued Safety Reports 50 Number of on-field trials using real systems/equipment 15 Number of trials with one or two trains 20 Number of RFI Conformity Certification involved persons 7 Number of N.B. (SCIRO-TUV) involved persons 20 33

34 System Validation Strategy and Resources Rolling Stocks used for testing: No. 5 ETR500 Trains No. 1 E402B Loco High Speed Infrastructure including: - Tracks and Catenary homologated for >300 km/h - TLC systems - GSM-R plants Tests between HS and CL junctions Pre-operation period to complete operational tests 34

35 Main Criticalities Impacting Final Phase ERTMS/ETCS products were not completely mature at the end of 2004, so: suppliers have been required to modify products in order to support the Italian High Speed Line Application residual Safety Open Points, mitigated by measures not acceptable for commercial service, had to be removed UNISIG standards in evolution have implied modifications on the ERTMS functions implementation ( > 2.2.2) 35

36 Main Criticalities Impacting Final Phase Time Available for System Approval, fixed for end of August 2005, was rapidly decreasing, due to the changes to the products and the applications Complexity of the Overall Signaling and Automation System involving a huge number of variables to be managed: difficult to fix problems and to solve them ERTMS/ETCS level 2 applied for first time, involving new approach to signalling logics and new approval framework 36

37 Main Criticalities Impacting Final Phase Application at 300 km/h, requiring special attention to timing problems, e.g. delays in propagation of emergency messages and orders TLC network based on the GSM-R technology, as unique vehicle to bring information ground <-> trains, showing initially significant instability First Field Test Campaigns in the first three months of 2005 showed a huge amount of different problems, difficult to control 37

38 Open Points in the Assessment Process At the beginning of the process, several open points were found Between March 2005 and August 2005 all the safety related open points have been closed. Today, at the pre-operation phase, only formal and not critical points are still open. All these points will be closed in few days or weeks, anyway before the beginning of the commercial service (December this year) 38

39 Open Points example (Radio Block Center) Dec CAT.A CAT. B Total A+B Others Points found Points not closed % of open points 100% 59% 59% 60% 39

40 Open Points example (Radio Block Center) May 2005 CAT.A CAT. B Total A+B Others Points found Points not closed % of open points 0% 18% 18% 17% 40

41 Acceptance Verification 41

42 Technical Verification Commissions (TVC) The Technical Verification Commissions (TVC) carry on all the customer acceptance verifications such as: Design review and documentation completeness Certification tests Checks and tests on field System Integration tests and for safety related components and subsystems Homologations, Functional and Safety assessment etc. 42

43 Final considerations 43

44 Practical Approach to Commissioning Success factors: The field activities, especially witness testing sessions, successfully recovering lack of documentation and control evidences The close collaboration among all the actors (RFI, General Contractor, Saturno Consortium, Italferr, Manufacturers) with continuous presidium by Conformity Certification Department The Problem Solving approach, deployed during all the test & commissioning phases, assuming the HS line as on-service and operating in real-time 44

45 Rome-Naples: Status and Timing 1 Jul: Start of the trials with the real system and train up to 150 km/h 15 Jul: Start of the trials with the real system and train up to 300 km/h 1 Aug: Start of the trials with two trains running up to 300 km/h 31 Aug:End of Safety Assessment process 12 Sep: Start of the pre-business operations service Dec 2005: Foreseen start of the commercial service 45

46 Thank you 46