Abstract
In this article, we present a concrete realisation of the ETCS hybrid level 3 concept, whose practical viability was evaluated in a field demonstration in 2017. Hybrid level 3 introduces virtual subsections as sub-divisions of classical track sections with trackside train detection. Our approach introduces an add-on for the radio block centre (RBC) of Thales, called virtual block function (VBF), which computes the occupation states of the virtual subsections using the train position reports, train integrity information, and the track occupation states. From the perspective of the RBC, the VBF behaves as an interlocking that transmits all signal aspects for virtual signals introduced for each virtual subsection to the RBC. We report on the development of the VBF, implemented as a formal B model executed at runtime using ProB and successfully used in a field demonstration to control real trains.
Highlights
1.1 ETCS levels 1–3The European Train Control System (ETCS) provides three progressively advanced levels for controlling trains
1.3 Virtual block function for HL3 In June 2017 the Heinrich Heine University Düsseldorf (HHU) was asked by Thales Deutschland GmbH to contribute to a field demonstration of feasibility of the ETCS hybrid level 3 principles
There are other uses of formal models as prototypes; here we use the formal model embedded in a real-world setting to conduct tests in real-time with actual hardware
Summary
The European Train Control System (ETCS) provides three progressively advanced levels for controlling trains. Level 1 requires trackside detection devices which detect whether a portion of track is free of any train. In practice this is done using either track circuits or axle counters. In ETCS level 3 one can dispense with trackside detection: there no longer are fixed track sections that are marked as free or occupied. An important concept in ETCS level 3 is train integrity: in principle a train can lose its integrity, e.g., lose some of its wagons This can pose a risk to trains which follow such a train, in particular if there is no trackside detection. ETCS level 3 requires trains to have built-in train integrity detection, and may require “sweeping” the track if integrity is lost
Sign-in/Register to view highlights & summary Sign-in/Register to access full text options 
Free) 
Talk to us
Join us for a 30 min session where you can share your feedback and ask us any queries you have
Schedule a call
