Open search


Safe control for trains

In the MEN Train Control System (MTCS) a QNX BSP ensures safe communication between the control unit and the I/O. MTCS communicates via real-time Ethernet and interfaces to many types of networks like CANopen and MVB.

The MH50C can be rack- or wall-mounted (Photo: MEN)

AVAILABLE IN A SIL 4-PRE-CERTIFIED CONFIGURATION, the system is based on the F75P SBC to provide safe control of single functions as well as for complete train control. It is an application-ready system platform in half 19-inch that allows safe control of all rail relevant actors and sensors, including doors, brakes, speed measurement data, and complete vehicle control. The MH50C control unit, the main component of the system, is based on the F75P, which features dual-redundant CPUs as well as an independent processor that controls the I/O. This configuration allows the system to offer real-time Ethernet, safe I/O, and connections to networks for railways such as CAN. The control unit is a modular system platform usable for safety-critical train applications like train control, automatic train operation and automatic train protection up to SIL 4.

While the correct output of the two redundant processors is guaranteed through a safe communication and compare layer, the QNX BSP ensures safe data transmission to the third CPU – the I/O unit. The communication protocol of this third CPU was developed in accordance with EN 50159, which targets safety relevant communication in transmission systems. This ensures safe communication in the area known as the black channel, located between the control unit and I/O, for safe communication throughout the system. Because of a partnership with QNX, a SIL 4 certified solution for both the hardware and software is available. The system can be wall or rack-mounted, and can be cooled by natural convection or using an additional fan tray at the bottom of the system. Cooling is independent of the mounting position.

Publish date