Professional Documents
Culture Documents
Support System 10 - 14
Initially, Smartlock 400, retains the Trackside Functional Control Systems, such as the Integrated Electronic Control
Modules (TFM) and trackside communications link that are Centre (IECC), being able to provide the required
used with SSI. connections to the IECC or equivalent network.
It can interface with a conventional signaller’s entrance/ The main elements of a typical Smartlock 400 scheme are
exit (NX) panel and is also compatible with VDU-based shown in Figure 1.
Figure 1
Main elements of a typical
Smartlock 400 Scheme.
3
Smartlock 400
There are three key elements to the SML400: The TICC houses the equipment responsible for interfacing
the CIXL to the TFM network. It receives input regarding the
1 The Central Interlocking (CIXL) is the heart of the state of the trackside interfaces from the TFMs and
SML400. It consists of a 2 out of 3 (2oo3) forwards these indications to the CIXL. Based on its image
platform loaded with the specific application data of the railway, the CIXL then evaluates the interlocking logic
and the interlocking software. for an individual VIXL and determines the controls to be
2 The Trackside Interface Communications Cubicle output through the TICC to all TFMs for that VIXL.
(TICC) is responsible for managing the external The Support System provides diagnostic functionalities
trackside communications networks and the such as monitoring, alarm management, event log
protocol for communication with TFMs. management, user access management and configuration
3 The Support System is composed of a Support facilities. It also provides signalling technician’s control
System Cubicle (SSC), one or more user interface functionality to start/stop (put off-line) VIXLs and apply /
PCs (client PCs) and printers. It provides all the remove restrictions to prevent signals clearing, points
necessary information and controls required by moving, routes setting etc. (mimicking those provided for
the maintainer and signalling technician for an SSI).
maintaining and controlling the signalling system.
In addition to the local clients, a remote
maintainer facility is available with connection via Central Interlocking (CIXL)
a secured Wide Area Network (WAN).
Overview
Functional Description
The CIXL is at the heart of the SML400 and is based on
The CIXL contains interlocking memory that records the Alstom’s “2oo3 Platform”, which is a general-purpose safety
current state of the railway under its control; this includes computer for railway signalling and control applications. The
functions such as signal lamp proving, point detection and interlocking software within the CIXL is general-purpose and
track section occupancy. It also stores internal interlocking is configured for:
variables such as approach locking and timing functions.
The interlocking memory states are referenced by the • Network Rail’s Generic Requirements, and
signalling logic to determine when and which controls may • The specific requirements of each signalling
be sent to the trackside devices: point movements and scheme, via the application data (this is prepared
signal aspects etc. as determined by changes of input in accordance with the scheme plan, control
states from the trackside, or requests made by the signaller. tables and other relevant input information using
SML400 allows the CIXL to be partitioned into a number of the Smartlock 400 application engineering system).
“virtual interlockings” (VIXLs) that are independent of each The CIXL manages the interface with either type of Traffic
other functionally and communicate by means of a Control System (TCS) used in the UK; that is, the CIXL
dedicated internal message mechanism. The interlocking provides direct interfaces to Panel Multiplexers (PMUXs)
memory is partitioned among the VIXLs, with any given which are required by an NX panel, and/or direct interfaces
signalling function belonging to one - and only one - VIXL. to an IECC – or similar systems supporting the same
Each VIXL has its own links to the Signaller’s control and interface e.g. Modular Control System (MCS).
display system.
4
The CIXL is configured with three memory cards (PCMCIA
cards) loaded with the specific application data and the
interlocking software. Additionally, each computing channel
has its own identity device. The information (scheme name,
CIXL identity and VIXL data version) loaded from the identity
devices is checked against the memory cards content.
5
Smartlock 400
Front Side
2003 PLATFORM
Blanking Panel
I/O SUBSYSTEM
I/O
I/O B, SAU card #1
I/O B, SAU card #2
I/O B, SAU card #3
I/O B, SAU card #4
I/O A, SAU card #1
I/O A, SAU card #2
I/O A, SAU card #3
I/O A, SAU card #4
Debug connectors
Blanking Panel
Blanking Panel
Subsystem
I/O B PSU
Bonding
ESD
I/O SUBSYSTEM
Serial
Stud
Bus
Computing Computing Computing
Channel A Channel B Channel C Subrack for
Computing
Main Processor
Main Processor
Main Processor
Blanking Panel
Blanking Panel
Blanking Panel
Subsystem
REDMAN
REDMAN
REDMAN
HSCU
HSCU
HSCU
PSU
PSU
PSU
Maintenance Panel
Subrack for
FAN UNIT
Fan
FAN UNIT Switch
Blanking Panel
SWITCHES / FUSES
I/O Ch Ch Ch I/O
Panel for
A A B C B Switches &
Fuses I/O Termination
Panel
Power
Main PSU Supply Unit Main PSU Power Supply
#1 Subrack #2 Unit Subrack IEC Mains
Sockets
Mains & Circuit
Isolating Breakers &
VENTILATION GRILLE
Transformers Primary
Earth Stud
Not to scale
External
Figure 2 Cubicle layout. Cable Entry
Cubicle Layout
The CIXL is implemented in a standard (19-inch the LRUs are labelled to avoid the insertion of
series) rack with an internal height measurement that incorrect equipment. Provision is made, via the front
is 37U-high, the Cubicle layout is shown in Figure 2. panel switches, for the Maintainer to actively change
the LRUs within the platform whilst it is running. The
All Line Replaceable Units (LRUs) and indicators are LRU must be powered off before any manipulation.
accessed from the front of the Cubicle; apertures for
6
Environment I/O Subsystem Design
The cubicle is designed for operation in the following The I/O Subsystem is based on a Dual Modular
environmental conditions: Redundant 1 out of 2 (1oo2) architecture.
• Ambient temperature variations, in the range The maintainer, is able to power on and off each I/O
from 0 to +45oC. Group.
Computing Subsystem
7
Smartlock 400
8
Rear View Side View Front View
(Door removed) (Panel Removed) (Door removed)
Front End
Rack
TFM Gateway
Rack
DLM or
LDT
DLM DLM LDT LDT
Power
Distribution Front End
Rack
TFM Gateway
Rack
LDT
I/O
Sockets
110V Power
Sockets & 110V ac /
Switches 48V ac
Power Tray
Not to Scale
9
Smartlock 400
Architecture
IMnet
Monitor Link
(RS-422)
CIXL
Remote Time Signalling
Maintenance/ Source Technicians
Diagnostic Terminal (client)
Terminal
(client) Server (B) Server (A)
Printer
Dual/Redundant
SUPPORT SYSTEM
10
The Support System includes at least one dedicated Functionality
workstation for the Maintainer and Signalling
Technician with a screen, keyboard, mouse and The support system provides both diagnostic and
printer for one or more CIXLs. More than one local signalling technician functionality as follows:
terminal with full functionality is used for operational
Diagnostic Functionality
UK schemes within the signalling control centre. The
current configuration of the support system cubicle A. Monitoring: Provides text and graphical
provides one rack-mounted PC as the Maintainer’s information on the state of different elements of the
workstation. Other workstation PCs may be interlocking such as the CIXL, trackside objects,
distributed around the signalling control centre as communications equipment and links.
required.
B. Alarm Management: Performs fault diagnosis and
Each support server logs all system activity on a pair provides text and graphical information on faults and
of logging devices, one of which may be removed for important events (including information on the
analysis offline in case of incident/accident health/state of the elements concerned) detected by
investigation. Data logs may also be transferred to the system.
offline facilities for analysis via removable media,
including USB flash drives and recordable DVD discs, C. Event Log Management: Logs and stores all
for less critical events. events in the exact order of their detection and
provides access to historical data.
The support system’s servers are linked to the CIXLs
by the IMNet, which is compatible with open D. User Access Management: Controls user access
communications. The IMNet is a pair of redundant to the different functions of the support system.
networks that link:
E. Configuration Facility: Provides configuration of
• the CIXL to the support servers the support system where an individual application is
described through a set of configurable application
• the clients, printers and the NTP time source to data.
the servers.
Signalling Technician Functionality
The redundant networks are linked together at the
central switches to allow the redundant support A. Interlocking mode control: Allows the technician to
servers to communicate. WAN links may be provided change the operating mode of the CIXL and individual
to allow clients at remote locations to access the VIXLs including starting/stopping.
system but with restricted functionality. A separate
B. Temporary controls: The support system provides
network may be used to link remote clients to a
commands to the technician to impose or remove
“local” client (nominated as a client gateway) using
temporary controls on the operation of the
WindowsTM terminal services software. A version of
interlocking. Owing to potentially serious
the SSC also includes connection to the IDNet
consequences of the setting and, in particular, the
enabling sensing and logging of communications
clearance of controls, the mechanism by which the
(read only) between CIXLs and to another
commands are issued (i.e. controls are set and
interlocking.
cleared) is Safety Integrity Level (SIL) 1.
In addition to the diagnostic information received via
In addition to the local clients, a remote maintainer
the IMNet, each CIXL Extended Adaptation Unit (XAU)
facility is also available with connection via a secured
is connected to the support system servers via a
WAN. The remote terminal will have the same
synchronous serial RS-422 Monitor Link. This link
operator interface as a local version, but with
enables ‘snooping’ to be performed by the support
restricted functionality.
system on the trackside communication data passing
between the CIXL and TFMGW. This information is
logged and incorporated into the live databases on
the support servers.
11
Smartlock 400
The cubicle itself is a standard industrial type, Two rack-mounted industrial servers host the
dimensions 1.2m (h) x 0.6m (w) x 1.0m (d). The software that monitors the state of the overall
mechanical configuration of a typical SSC is shown Smartlock 400 system and the equipment under its
in Figure 5. control. These provide a central service for individual
client PCs.
Environmental
Each support server maintains a database that
The SSC is designed for use in buildings without records system events (including alarms and system
climatic control, class T1 according to EN 50125-3, status). The users may query the database on-line to
with limited operating temperature range of 0 to 35°C see the sequence of events surrounding any alleged
with relative humidity up to 85%. The storage incident or failure. Files that record the full set of
temperature range is 0 to 55°C. It meets the events, in sequential order, and further files that
environmental requirements of British Railways permit a graphical replay, are also held on these
specification BR967, Category B. servers for a period of 14 days. Copies of these files
may be taken on a removable USB drive. The log
files are held on mirrored “solid state” drives, a
pair of which is provided on each server.
The mirroring provides “1 out of 2”
redundancy on each server in the event
of drive failure, which also permits,
Support in extreme circumstances, one
Server A Solid State Drive from each
server to be taken away by
the investigating authority,
KVM Switch
whilst leaving the system
fully operational.
Support
Server B
(Redundant
Server)
Client PC
Time Server
Patch Panel
LAN Switch
LAN Switch
12
Local Support System Client/Client Gateway
13
Smartlock 400
Further local client PCs may be provided to permit At least two printers from the approved equipment list
technicians within range of the locally switched part of will be provided at the SCC to ensure technician
the IMNet LAN to access the system, ie. without control states can be printed, signed and centrally
involving transmission over the WAN. A desk top saved. The printers may also be used to print screen
client PC is provided for such purposes. Copies of shots of current system states or historical events to
saved logs may be transferred to removable USB assist with investigation and analysis. A screen shot
storage devices. of the “states” mimic is advised to support any screen
shots that might rely on colour. Printers may also be
provided at remote locations if required.
14
The baseband link uses a dedicated twisted pair In the absence of controls from the Central
cable over which data is transmitted in half-duplex Interlocking, all TFMs will assume the “red retained”
mode at a rate of 20 kbits/s by the DLMs. Separate state, and display their “most restrictive” aspects.
cables are provided for the ‘A’ and ‘B’ links and they Points will remain locked in their current positions.
can, if required, be run over different physical routes
in order to increase availability. The subsystems in the TICC take approximately 10
seconds to recover once power is restored, but the
The maximum length of the baseband link, including CIXL takes between 2 and 3 minutes to restart, but
any spur up to 1 km in length, is 10 km (but it can be then enters a 4 minute timeout to ensure that all
extended to 40 km by using repeaters at intervals of trains that may have previously observed clear signal
up to 8 km). aspects have come to a stand. During this timeout
period, signals will be sent controls for their most
restrictive aspects and points will not be controlled by
Trackside Functional Modules (TFM) the Central Interlocking, hence remain locked in their
current positions.
Trackside Functional Modules (TFMs) are the local
interface with vital signalling equipment at the trackside.
These are the same modules that are employed by
SSI. Two types are currently in use in the UK as follows:
15
Designed & produced by Anderson Lambert +44 (0) 1582 754000 www.andersonlambert.com
www.signallingsolutions.com
For product information: www.signallingsolutions.info
Prices are correct at the time of publication. Signalling Solutions Limited reserve the right to change specifications and prices.