| 摘要 |
The invention relates to a level crossing safety system having a control device for roadside components (3a, 3b; 4a, 4b, 4c, 4d), in particular gates (3a, 3b) and light signals (4a, 4b, 4c, 4d). In order to be able to replace computers which are secure in terms of signalling with computers which are not secure in terms of signalling, provision is made for the control device to have a control computer (6) which is secure in terms of signalling and for component computers (8a; 8b) which are not secure in terms of signalling to be associated with the components (4a; 4b), wherein the component computers (8a; 8b) each comprise a first and a second single-channel computer (10a, 11a; 10b, 11b) having diverse hardware, and for the control computer (6) and the component computers (8a, 8b) to have means for controlling and monitoring the components (4a; 4b) with the following sequence: - the control computer (6) transmits an actuating command to the first computers (10a; 10b) which control the component (4a; 4b) associated therewith, - the first and second computers (10a, 11a; 10b, 11b) of the component (4a; 4b) independently determine the energization of the component (4a; 4b) and transmit this read-back result to the control computer (6) and - the control computer (6) compares the actuating command thereof with the read-back results from the components (4a; 4b) and compares the read-back results with one another, in which case a safety response is triggered if at least one of the comparison results does not match. |
