The article discusses the use of formal methods in the context of validating a new system designed to enhance the safety of railway personnel working along the tracks. The Safe Protection Integrator (SPI) is a system designed to enable the Person In Charge Of Possession (PICOP) to control new people protection functions within a Railway Interlocking System (RIS) via a tablet interface. These functions are based on the Elementary Protection Zone (EZE) concept, which allows signals granting access to a track-side work area to be closed. Together with the new RIS functions, the SPI enhances both the efficiency and safety of track-side work operations. This article presents how formal methods, and more specifically model checking, are applied to model these new principles and support the safety analysis process.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Verification of a Novel Interlocking Function for Personnel Protection

  • Christophe Limbrée

摘要

The article discusses the use of formal methods in the context of validating a new system designed to enhance the safety of railway personnel working along the tracks. The Safe Protection Integrator (SPI) is a system designed to enable the Person In Charge Of Possession (PICOP) to control new people protection functions within a Railway Interlocking System (RIS) via a tablet interface. These functions are based on the Elementary Protection Zone (EZE) concept, which allows signals granting access to a track-side work area to be closed. Together with the new RIS functions, the SPI enhances both the efficiency and safety of track-side work operations. This article presents how formal methods, and more specifically model checking, are applied to model these new principles and support the safety analysis process.