Practical Verification of Railway Signalling Programs | IEEE Journals & Magazine | IEEE Xplore

Practical Verification of Railway Signalling Programs


Abstract:

SafeCap is a modern toolkit for modelling, simulation and formal verification of railway networks. This paper discusses the use of SafeCap for formal analysis and automat...Show More

Abstract:

SafeCap is a modern toolkit for modelling, simulation and formal verification of railway networks. This paper discusses the use of SafeCap for formal analysis and automated scalable safety verification of solid state interlocking (SSI) programs – a technology at the heart of many railway signalling solutions around the world. The main driving force behind SafeCap development was to make it easy for signalling engineers to use the technology and thus to ensure its smooth industrial deployment. The unique qualities and the novelty of SafeCap are in making the use of formal notations and proofs fully transparent for the engineers. In this paper we explain the formal foundations of the proposed method, its tool support, and its successful application by railway companies in developing industrial signalling projects.
Published in: IEEE Transactions on Dependable and Secure Computing ( Volume: 20, Issue: 1, 01 Jan.-Feb. 2023)
Page(s): 695 - 707
Date of Publication: 10 January 2022

ISSN Information:

Funding Agency:


1 Introduction

Effective signalling is essential to the safe and efficient operation of a railway network. It enables trains to travel at high speeds, run close together, and serve multiple destinations. Whether by mechanical semaphores, colour lights or electronic messages, signalling allows trains to move only when it is safe for them to do so. Signalling locks moveable infrastructure, such as the points that form railway junctions, before trains travel over it. Furthermore, signalling often actively prevents trains travelling further or faster than is safe and sometimes even drives the trains. At the heart of any signalling system there are one or more interlockings. These devices constrain authorisation of train movements as well as movements of the infrastructure to prevent unsafe situations arising. Solid State Interlocking (SSI) technology, developed in the UK, was one of the first computerised interlockings worldwide. The SSI devices use 2-out-of-3 redundancy to support their safety critical functionality. Programs executed on SSI processors are responsible for safe authorisation of the train and infrastructure movements.

Contact IEEE to Subscribe

References

References is not available for this document.