| 摘要 |
<p>The invention relates to a method for controlling a safety-critical railway operating process in which the programme necessary for the above is divided into a system software (V,PMS) and a software (BO) specific for railway management. External commands (K) and messages (M), which affect the control, are recorded and transmitted to commercial computers (R1,R2) in which the actual process control runs, by means of the system software running in one or several secure signalling computers (SR*), as defined by the relevant railway operating condition. The processing of the programme specific for railway management can occur in two channels, parallel or serially, whereby the monitoring of whether the commercial computers have reached the same result is carried out in the secure signalling computers. The output (SB) to the process (BA) for control also occurs from there, so long as the secure comparison recognises that the commercial computers have provided the corresponding process result at least twice, otherwise the signalling connection to the process elements (W,S) is securely cut. The advantage of the invention is that the same software can always be used for the secure signalling computers and the railway management software can be separately developed and checked without being linked to the system software. Significant cost and time savings can thus be made relative to the state of the art without affecting safety.</p> |
