View
1
Download
0
Category
Preview:
Citation preview
© Siemens AG 2012
Infrastructure & Cities Sector, Mobility and Logistics Division Page 1 April 2012
Siemens Element Control Computer ECC
as a Safety related System
for Mainline Signalling
1. The Element Control Computer (ECC)
2. Centralised / Decentralised Solutions
3. ETCS Equipment Interfaces
4. Safety Philosophy
5. Railway Signalling Cabling/ EMC
6. Summary: Key Benefits of Electronic Interlocking
© Siemens AG 2012
Infrastructure & Cities Sector, Mobility and Logistics Division Page 2 April 2012
1. The Element Control Computer (ECC), Overview, typical Interfaces
Equipment
Room
ECC
Railway Signal Cables
Signals
Others as Key
Switches, TVD
PointmachinesCTR
Element Control
Computer ECC
© Siemens AG 2012
Infrastructure & Cities Sector, Mobility and Logistics Division Page 3 April 2012
1. The Element Control Computer (ECC), History
First Version developed during 1997-2000, Pilot Project Zywiec, Poland
Worldwide Countries with operational Experience, such as Germany, Switzerland, Austria, Poland, Netherlands, Great Britain, Romania, Greece, Norway, Lithuania, China, India, Saudi- Arabia, Brazil
Worldwide more than 25000 Element Operation Modules (EOM) in Service
Used for electronic Interlockings as SIMIS-W, SIMIS-D, SIMIS-IS, SICAS-S7, SICAS- ECC
Approved as per CENELEC/ EN50129 SIL 4 by EBA (German Board for Railway Safety)
© Siemens AG 2012
Infrastructure & Cities Sector, Mobility and Logistics Division Page 4 April 2012
1.1 The Element Control Computer (ECC) used for centralised Application
Equipment
Room
UPS
EOM
EOM
EOM
EOM
ECC-
Cabinet
ECC Indoor
CabinetECC Base FrameECC Extension Frame
EO
ME
OM
EO
ME
OM
EO
M
up
to
3 C
U
…….
8/16
10
3 CPUs (2-out-of-3 Computer-Configuration)
© Siemens AG 2012
Infrastructure & Cities Sector, Mobility and Logistics Division Page 5 April 2012
1.1.4 Environmental Conditions for ECC Hardware
Climatic Test EN 60068-2-1 Cold in Operation -40°C /16h
EN 60068-2-2 Dry Heat in Operation +70°C / +85°C 16h
EN 60068-2-14 Change of Temperature in Operation
-40°C / +30°C / 3h / 5 Cycles
EN 60068-2-30 Damp Heat Cyclic in Operation
+55°C / 90-100% / 48h /2 Cycles
Mechanical Test EN 60068-2-27
EN 60068-2-64
Vibration, Shock
EMC Test EN 50121
EN 61000
See 6.2
-> In Case of exceeding Limits, the Installation of Air Conditioner is possible
© Siemens AG 2012
Infrastructure & Cities Sector, Mobility and Logistics Division Page 6 April 2012
1.1.5 The ECC Signal Operation Module (SOM6)
Safety related Function:
• to switch on/off Signal Lamp
• to monitor the Lamp Current
• to monitor the Signal Cable
(Loss of Insulation)
• up to eight Signal Lamps
connectable
• to realise electrical Insulation
between Indoor and Outdoor Area
• up to two Signals per each SOM6
max. two red aspect Lamps (remain
switched on in Case of Safety Shutdown)
© Siemens AG 2012
Infrastructure & Cities Sector, Mobility and Logistics Division Page 7 April 2012
1.1.6 The ECC Point Operation Module (POM4)
Safety related Function:
• to switch the Point Machine
• to monitor the point position
• to monitor the Point Machine Cable
(Loss of Insulation)
• to realise electrical Insulation
between Indoor and
Outdoor Area
• to monitor the running Current
© Siemens AG 2012
Infrastructure & Cities Sector, Mobility and Logistics Division Page 8 April 2012
1.1.7 The ECC DC Point Operation Module (DC POM)
Safety related Function:
• to switch the Point Machine
• to monitor the point position
• to monitor the Point Machine
Cable (Loss of Insulation)
• to realise electrical Insulation
between Indoor and
Outdoor Area
• to monitor the running Current
© Siemens AG 2012
Infrastructure & Cities Sector, Mobility and Logistics Division Page 9 April 2012
1.1.8 The ECC Universal Operation Module (UNOM2)
• universal In-/Output of Messages
and Commands
Safety related Function:
• to read in Key Switch Message,
for example
• to realise electrical Insulation
between Indoor and Outdoor Area
• to monitor the Outdoor Cable
(Loss of Insulation)
© Siemens AG 2012
Infrastructure & Cities Sector, Mobility and Logistics Division Page 10 April 2012
1.1.9 The ECC Input/Output Operation Module (INOM2)
Safety related Function:
• to read in Track Vacancy Message
• to read in Relay Message
• universal In-/Output of Messages
and Commands
In contrast to UNOM2: No electrical Insulation between Indoor and Outdoor Area
realised – Indoor Use only!
• Control of existing Relay Circuits
(Interfaces)
© Siemens AG 2012
Infrastructure & Cities Sector, Mobility and Logistics Division Page 11 April 2012
1.2 The Element Control Computer (ECC) used for decentralised Application,
1.2.1 - Big decentralised Units, ECC- Outdoor Cabinet
Equipment
Room
UPS
ECC – Outdoor - Cabinet
Ethernet30 km
Optional : IL- Bus, Profibus
© Siemens AG 2012
Infrastructure & Cities Sector, Mobility and Logistics Division Page 12 April 2012
1.2 The Element Control Computer (ECC) used for decentralised Application,
1.2.2 - Small decentralised Units, MSTT- Signals, DSTT
ETCS-
BalisesMSTT-
Signal
(EOM)
Equipment
Room
ISDN
up to 15 km
© Siemens AG 2012
Infrastructure & Cities Sector, Mobility and Logistics Division Page 13 April 2012
1.2.2.1 Small decentralised Unit, MSTT- Signal, Netherlands, HSL-Zuid
© Siemens AG 2012
Infrastructure & Cities Sector, Mobility and Logistics Division Page 14 April 2012
Interlocking Architecture:
● centralised,
● decentralised
– which one is the best Solution ?
Old Matter of Dispute:
2. Centralised / Decentralised Solutions
© Siemens AG 2012
Infrastructure & Cities Sector, Mobility and Logistics Division Page 15 April 2012
Centralised:
Germany, Austria, Netherlands, Saudi- Arabia
Decentralised:
Great Britain, Switzerland, Netherlands
2. Centralised / Decentralised Solutions
-> Historical Reasons
-> Geographical Reasons
-> Environmental Conditions
-> Countries with sparsely meshed Power Supply
© Siemens AG 2012
Infrastructure & Cities Sector, Mobility and Logistics Division Page 16 April 2012
2. Centralised / Decentralised Solutions
Power Supply Cable (3.3kV)
Tr
EOM
Tr
EOM
Tr
EOM
Tr
EOM
Main Signal Cable
Signal Tails Tails Tails Tails
200m f.e.
Dist.-
Box
Dist.-
Box
Dist.-
BoxDist.-
Box
Data Cable (Information)
Equip-
ment
Room
EOM
EOM
EOM
EOM
Equipment
Room
P
S
Tails Tails Tails Tails
6.5 km
DM
decentralised
centralised
6.5 km
6.5 km
Tr
EOM
Transformer
Element
Operating
Module
P
SPower
Supply
© Siemens AG 2012
Infrastructure & Cities Sector, Mobility and Logistics Division Page 17 April 2012
Power Supply Cable (3.3kV)
Tr
EOM
Tr
EOM
Tr
EOM
Tr
EOM
Main Signal Cable
Signal Tails Tails Tails Tails
200m f.e.
Dist.-
Box
Dist.-
Box
Dist.-
BoxDist.-
Box
Data Cable (Information)
Equip-
ment
Room
EOM
EOM
EOM
EOM
Equipment
Room
P
S
Tails Tails Tails Tails
Paid by Others <=>
Not paid by Signalling
„Everywhere a Socket“
DM
Viewpoint commercial
Supply Split (PWR <-> SIG):
6.5 km
6.5 km
2.1 Centralised / Decentralised Solutions
© Siemens AG 2012
Infrastructure & Cities Sector, Mobility and Logistics Division Page 18 April 2012
Power Supply Cable (3.3kV)
Tr
EOM
Tr
EOM
Tr
EOM
Tr
EOM
Main Signal Cable
Signal Tails Tails Tails Tails
200m f.e.
Dist.-
Box
Dist.-
Box
Dist.-
BoxDist.-
Box
Data Cable (Information)
Equip-
ment
Room
EOM
EOM
EOM
EOM
Equipment
Room
P
S
Tails Tails Tails Tails
To be considered within Safety
Case acc. EN50129
DM
Viewpoint HW - Safety Case (EN50129)
6.5 km
6.5 km
2.2 Centralised / Decentralised Solutions
© Siemens AG 2012
Infrastructure & Cities Sector, Mobility and Logistics Division Page 19 April 2012
Power Supply Cable (3.3kV)
Tr
EOM
Tr
EOM
Tr
EOM
Tr
EOM
Main Signal Cable
Signal Tails Tails Tails Tails
200m f.e.
Dist.-
Box
Dist.-
Box
Dist.-
BoxDist.-
Box
Data Cable (Information)
Equip-
ment
Room
EOM
EOM
EOM
EOM
Equipment
Room
P
S
Tails Tails Tails Tails
Viewpoint Maintainability
DM
Indoor Equipment/
Outdoor Equipment
outdoorsindoors
6.5 km
6.5 km
2.3 Centralised / Decentralised Solutions
© Siemens AG 2012
Infrastructure & Cities Sector, Mobility and Logistics Division Page 20 April 2012
2.4 Centralised / Decentralised Solutions
Power Supply Cable (3.3kV) powered by Public Utility ? – Availability? - Batteries?
Tr
EOM
Tr
EOM
Tr
EOM
Tr
EOM
Main Signal Cable
Signal Tails Tails Tails Tails
200m f.e.
Dist.-
Box
Dist.-
Box
Dist.-
BoxDist.-
Box
Data Cable (Information)
Equip-
ment
Room
EOM
EOM
EOM
EOM
Equipment
Room
U
P
S
Tails Tails Tails Tails
Viewpoint Availability of Power Supply
DM
Power Supply Equipment
including Feeder
6.5 km
6.5 km
© Siemens AG 2012
Infrastructure & Cities Sector, Mobility and Logistics Division Page 21 April 2012
Old Matter of Dispute:
Interlocking Architecture:
● centralised,
● decentralised
– which one is the best Solution ?
No general answer possible, Customer and Supplier have to
find out the solution which is the best for the relevant
application
Sometimes a combination of both is perfect !
Both, centralised & decentralised architecture is possible,
using the ECC by SIEMENS
>
>
>
2. Centralised / Decentralised Solutions
© Siemens AG 2012
Infrastructure & Cities Sector, Mobility and Logistics Division Page 22 April 2012
3. ETCS Equipment Interfaces
3. 1 LEU – S21, centralised and decentralised, L1
3. 2 MSTT- Signal, decentralised, L1, L2
Level Transition
ECC - SOM
LEUS21
Signal Cable
Signal Lamp
Balise
ISDN via 1x4x0.9 Star Quad Cable
Signal Lamp
Balise
U
C
O
M
I
Data for Lamp
Data for Balise
MSTT
Balise Telegrams can be configured independently from the Signal
Lamp Current !
ECC
© Siemens AG 2012
Infrastructure & Cities Sector, Mobility and Logistics Division Page 23 April 2012
3. ETCS Equipment Interfaces, L2
IIC/OMC
Equip.
Room
ACC
Interlocking Interface
Component / Overhead
Management
Component
Interlocking Bus (fibre optical cable)
50 km
(ECC) (ECC) (ECC) (ECC)
Equip.
RoomEquip.
Room
Equip.
Room
ACC ACC ACC
(ECC)
RBC
(ECC)
H3SZSp / Sahara - Interface
Antenna
Redundant ISDN
ECC, 3 CUs with Dummy Plates
ECC, 3 CUs with EOMs
© Siemens AG 2012
Infrastructure & Cities Sector, Mobility and Logistics Division Page 24 April 2012
4. Safety Philosophy
© Siemens AG 2012
Infrastructure & Cities Sector, Mobility and Logistics Division Page 25 April 2012
4.2 How to obtain the sufficient HW- Safety- Level (SIL2 – SIL4)
+60V-60V
U-
U+
Switch 1.1
Switch 1.2
Fuse
Current
Current
+60V-60V
U-
U+
Switch 2.1
Switch 2.2
Fuse
Current
Current
SignalSOM6
Signal Voltage
ASS 1
ASS 2
Safety related functions are
independently doubled
(HW acc. EN50129)
Safety related functions are
checked within sufficient Fault
Detection Time ←
(SW acc. EN50128)
•
•
Short Circuit Detection
Loss of Insulation
of the Signal Cable
Current Detection
Position Detection (for Points)
•
•
•
Detected Errors may lead to
Safety Shutdown
(ASS1, ASS2, Red Error LED)
•
High Availability,
selective Shutdown Concept •
© Siemens AG 2012
Infrastructure & Cities Sector, Mobility and Logistics Division Page 26 April 2012
Safety Case proves that Failure
Rate is sufficient
Fault Tree based Calculation
•
•
Current
Detector 1
Current
Detector 2Short Circuit Interrupt
AND
OR
Failure Rate Rate(LAMBDA)
Failure rate,
Failure
detection time
Failure rate,
Failure
detection time
Failure rate,
Failure
detection time
Failure rate,
Failure
detection time
Caution: the resulting
Endangering Rate depends not
only on the EOM but also on the
Outdoor Cabling!
•
Caution: the resulting
Endangering Rate depends not
only on the EOM but also on the
Adherence of the SAR!
•
4.3 Fault Tree Analysis – the Split of Safety Responsibility
© Siemens AG 2012
Infrastructure & Cities Sector, Mobility and Logistics Division Page 27 April 2012
5. Railway Signalling Cabling/ EMC
5.1 Control Distance limiting Effects, the Ohmic Resistance
SOM- Switches
closed
Maximum control distance depends on the ohmic resistance of conductors
up to 6.5km possible or even bigger
Rconductor
Rconductor
U = RI
Lamp lights with
correct brightness
The secondary voltage must be adjustable at the taps of the lamp transformer
© Siemens AG 2012
Infrastructure & Cities Sector, Mobility and Logistics Division Page 28 April 2012
10
2030
40
50
60
70
85 1
00
120
150
200
500
800
5
2
0 2 4 6 8 10-2-4-6-8-10
X [m]
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
-1
-2
-3
-4
-5
He
igh
t[m
]
1
2
5
10
20
50
100
200
500
1000
Ma
gn
eticF
ield
[µ
T]
© SIEMENS AG 2012, All rights reserved
5.2 EMC with AC Traction Power Systems (2 x 25 kV Catenary)
Magnetic Field of a 2 x 25 kV Catenary
© Siemens AG 2012
Infrastructure & Cities Sector, Mobility and Logistics Division Page 29 April 2012
C1
C2
C3
C4
C5
C6
C7
C8
5.2 Control Distance limiting Effects: The Cable‘s mutual Capacitance,
in Combination with Short Circuit to Earth and induced Voltage from Traction Power
Example of a core- stranded Railway Signal Cable with defined Mutual Capacitance
Cable Damage:
Earth Leakage
SOM- Switches
Open
induced voltageUind
UindThe Cable’s
Capacitance makes
the AC current flow
to earth
Ccable
Lamp lights up
accidentally
Unwanted
primary lamp
current
Maximum control distance depends on the cable’s mutual capacitance
up to 6.5km possible or even bigger
© Siemens AG 2012
Infrastructure & Cities Sector, Mobility and Logistics Division Page 30 April 2012
5.3 EMC with AC Traction Power Systems (Catenary)
Dimensioning of Induction Protecton for Railway Signalling Cables by
Sitras Sidytrac :
Short term induced Voltage as a Consequence of Catenary Breakdown
© Siemens AG 2012
Infrastructure & Cities Sector, Mobility and Logistics Division Page 31 April 2012
6. Summary: Key Benefits of Electronic Interlocking
Economy
- A minimum of space required
- Fast and easy testing with approved functional modules
- Pre-assembled Implementation in containers possible
Technology
- Precondition for forward-looking Train Control System as ETCS
Availability
- Highly reliable hardware design
- Very high availability with redundant hardware
Maintenance
- Reduced maintenance due to highly reliable hardware
- Effective maintenance due to diagnostic and maintenance systems for on-line
and remote diagnosis
Safety
- Conformance to the CENELEC safety requirements
- EN50128/EN50129
Recommended