SECURE DISPLAY PROCEEDING

Size: px

Start display at page:

Download "SECURE DISPLAY PROCEEDING"

Caren Parks
6 years ago
Views:

1 Signalling Technique for Railways Presentation: SECURE DISPLAY PROCEEDING Interlocking System ZSB

Company presentation is a family-owned company in the

leading supplier of its kind of products.

origin of products and thereby set standards.

started the manufacture of signal engineering equipment

The mechanical constructions of that time changed into

This technology based on safety considerations and is

2 Company presentation is a family-owned company in the fifth generation and has a reputation as a worldwide leading supplier of its kind of products. In its business divisions, it has formed its general origin of products and thereby set standards. Shortly after the company s foundation (1872), they started the manufacture of signal engineering equipment for railway traffic. The mechanical constructions of that time changed into today s computer-controlled systems. This technology based on safety considerations and is today regarded as a trendsetter in the European market and beyond. This division determines the safety philosophy and the quality standards of all product areas. 2

2010 Product Lines Systems for Railways Systems for Petrol Stations Systems for Fare Collections Systems for Parking and Leisure Facilities Capabilities g g g g Research and Development Production

3 2010 Product Lines Systems for Railways Systems for Petrol Stations Systems for Fare Collections Systems for Parking and Leisure Facilities Capabilities g g g g Research and Development Production Project Management Sales and Service Network Worldwide Human Ressources g appr employees g more than 350 employees with university degrees g more than 200 personnel with over 25 years service g more than 100 trainees Turnover g more than 300m pa Scheidt & Bachmann headquarters in Mönchengladbach Quality Certifcate ISO 9001 (since 1993) 3

4 Content ZSB 2000 communication structure Necessity of a secured display proceeding + Solution according to Mü 8004 Analysis of dislay system Graphics Device Interface (GDI) Secure display proceeding steps Cost saving potentials 4

5 ZSB 2000 communication structure Dispatcher Level (Disposition Level) consist dispatcher computer + station computer PC s, MS WinXP display + operation program realised under Visual C++ Station Level 5 consist station computer + secure computer w/ train-route-modules FAM (2of2) bidirectional communication between station computer + secure computer (secure control level) are realised in different transmission ways CAN-BUS + RS232

6 ZSB 2000 communication structure connection along the route is realise via modem which allows bidirectional communication within disposition level (station computer dispatcher desk computer) 6

7 ZSB 2000 communication structure station computer receive the transmitted CAN-Telegrams (system bus) pass it fuhrter to dispatcher desk station computer supports an interface for safety control of operation procedures Operation procedures can be even handled at dispatcher desk as well! 7

8 Necessity of a secured display proceeding necessary for: Actions realized by dispatcher with the result changing of (field) element condition Verification of element conditions as decision-maker for the best possible railway operational procedures Solution acc. to Mü 8004 (safety rule) Procedere acc. to guideline Principle for a safety display (loup) for integrated electronic control centre (IECC) and electronic block Basic principle based on poly canal secure display proceeding between secure control level and dispatcher desk Using of two independent PC s (dispatcher PC and station PC) Reading back of pixel bitmap of element via graphics device interface 8

9 Analysis of display system Display errors In modern PC-Systems is the way of a created bitmap in RAM very difficult to understand, because... there are a lot of different chip sets on motherboard available (different procedure of memory mappings and different interfaces as well) the graphic system has a different technical architecture the access method between display-ram and hardware of using graphic card is different Different serial and paralel ways of creation of the displayed pixel in regards of different colour, position, etc... or errors of LCD screens (chip on glass) Best result is to involve the user (dispatcher) for verification the loup element! 9

Using of Graphics Device Interface Graphics device interface is a standardized operation system and an interface for independent picture contents Example:

10 Using of Graphics Device Interface Graphics device interface is a standardized operation system and an interface for independent picture contents Example: PRINT SCREEN print screen function read out via GDI and displayed always the correct screen content output format is independent from the existing graphic system 10

11 Secure display proceeding steps (from dispatcher point of view ) The secure display proceeding (Secure display proceeding = ANSI; in German language Anzeige-Sicherung ) comprise the following steps: Active testing of the display hardware of the dispatcher desk before realizing a secure routine (e.g. Set up of a train trafficability blockade; in German language Befahrbarkeitssperre!) Checking of the pixel data of the display image by: Reading back of the display image for intention to secure and calculate the corresponding check sum (for the reference image) on dispatcher desk level Preparation of reference image and calculation of the equivalent check sum in the station computer Comparison of the two check sums in the secure control level (train-routemodules FAM) 11

to black/white illustration checked and confirmed by dispatcher 1 2

12 Display Proceeding (1) Checking of display HW As test pattern the current loup picture is used Loup will be switched from coloured loup to black/white illustration checked and confirmed by dispatcher 1 2 Realisation of Display Proceeding confirming of not colored loup content 12

13 Display Proceeding (2) Checking of pixel data The review of data of current element state is required from safety level and accordingly updates the display The pixel data of updated image at dispatcher desk monitor will read back from display RAM and generates a corresponding check sum 3 rebuilding of loup 13

14 Display Proceeding (3) Creation of reference bitmap The station computer transmit a virtual reference image into the RAM and generates and calculates a corresponding check sum (code of 128-bit length) This image has the same resolution and colour as the image at dispather desk monitor The structure of this bitmap is independent from the graphic system The dispatcher computer read out a bitmap realised via graphics device interface and after that created a check sum as well Display source is in sub-system TA1 of safety system (train-route-module) The calculated check sum will be compared in the safety level with the check sum of station computer at later time The created check sum will be negated. As the result a difference mark is created corresponding of check sum in station computer. The negation mark will be delete in TA1/11 at least 14

15 Display Proceeding (4) Comparison of both check sum codes The calculated check sums from dispatcher computer and station computer will be transfered by data telegrams to secure control level sub-system TA1 and TA11 (train-route-modules) and tested for identify If the comparison of the check sums is succesfully the message loup secured is displayed at the dispatcher desk. Now all coloured element symbols has the real displayed conditions. The display will be stay in that condition up to the next element change occured If the comparation of check sums are not succesfully the secure control level will response w/ an error message and block any actions at dispatcher level 4 loup secured 15

monitors commercial PC HW commercial graphic card w/ multiple outputs for visualisation of station loups only track cabling required for

16 Cost Saving Potentials Classic ILS Scheidt & Bachmann ZSB 2000 expensive signalling real-time computer HW special graphic card w/ separate rear-reading canal needs more (track) cabling leads expensive real-time operation system SW cost intensive safety cathode ray tube monitors commercial PC HW commercial graphic card w/ multiple outputs for visualisation of station loups only track cabling required for bidirectional communication commercial operation system MS WindowsXP commercial TFT-Screens for supervision of station loups at dispatcher desk 16

17 Thank you very much for your attention! Dipl.-Wirt.-Ing. Ingo Kempe Project Manager Sales Department South Europe 17

ZSB 2000 YOUR SYSTEM INTEGRATOR FOR DIGITAL SIGNALLING SYSTEMS

ZSB 2000 YOUR SYSTEM INTEGRATOR FOR DIGITAL SIGNALLING SYSTEMS 2 Copyright 2018 Scheidt & Bachmann GmbH Image credits Page 2/3, 4/5, 12/13, 16/17, 18/19, 23, 27: Fotolia.de. Additional images Scheidt &