Professional Documents
Culture Documents
Number of Pages 34: Research Designs & Standards Organization
Number of Pages 34: Research Designs & Standards Organization
Version No:1.0-d3
Date Effective
:00.00.2012
I
1.0 Amendment History:
S. No.
Amendment
Date
Version
0
1
First issue
NUMBER OF PAGES 34
Checked By : ADE/Signal-V
Printed:
Page 1 of 33
ISO9001:2008
Version No:1.0-d3
Date Effective
:00.00.2012
TABLE OF CONTENTS:
S.NO.
Item
Clause No.
Page Nos.
Foreword
----
2
3
4
Abbreviation
Amendment History
Scope
----------
0.3
0.4
1.0
4
5
6
Terminology
----
General requirements
----
----
3.18
Interlocking Requirements
----
10
System composition
----
10
10
----
13
11
System Architecture
----
14
12
----
7.2
15
13
Software Requirement
----
8.0
15
14
----
16
15
10
17
16
11
19
17
12
20
18
19
-------
13
13.4
20
20
Acceptance Tests
----
13.4
21
21
Routine tests
----
13.6
23
Checked By : ADE/Signal-V
----
20
Printed:
Page 2 of 33
ISO9001:2008
Version No:1.0-d3
Date Effective
:00.00.2012
22
Test Procedure
----
14
21
23
24
25
Tool Kit
Condition in case of Cross Acceptance
Quality Assurance
-------
15
16
17
23
24
25
26
27
------
18
19
25
25
28
----
20
25
0.
FOREWORD:
0.1
This specification is issued under the fixed serial No. RDSO/ SPN/192/2005 followed by
the year of original adoption as standard or in case of revision, the year of latest
revision.
0.2
1
2
3
IRS: S 36
IRS: S23*
RDSO/SPN/144
IS: 9000*
IS 2147-62*
Printed:
Page 3 of 33
ISO9001:2008
Version No:1.0-d3
Date Effective
:00.00.2012
6
7
8
9
10
11
12
13
14
15
16
17
19
20
21
22
23
24
25
26
Checked By : ADE/Signal-V
Printed:
Page 4 of 33
ISO9001:2008
Version No:1.0-d3
Date Effective
:00.00.2012
27
28.
29
30
31
0.3
IRS TC 55-2006,
Rev. 1.0
IRS: 63-2007, Rev. 3,
Amd. 2
IRS: S 76-89, Amd. 3
RDSOSPN/183/2011
V 2.0
IRS S; 96-2000
**
ABBREVIATIONS :
SNO.
1.
2.
3.
4.
5.
6.
ABBREVIATION
ABS
ATP
CA
CCIP
CD
CENELEC
7.
8.
9.
10.
11.
12.
13.
14.
15.
16.
17.
18.
19.
20.
21.
22.
23.
24.
CIU
CMU
CTC
EI
EMU
EPROM
IBS
I/O
ISA
MTBF
MTBWSF
MTTR
MT
OC
OFC
PC
PCB
QA
EXPANDED FORM
AUTOMATIC BLOCK SIGNALLING
AUTOMATIC TRAIN PROTECTION
CROSS ACCEPTANCE
CONTROL CUM INDICATION PANEL
COMPACT DISC
EUROPEAN COMMITTEE FOR ELECTRO TECHNICAL
STANDARDIZATION
CENTRAL INTERLOCKING UNIT
CENTRAL MONITORING UNIT
CENTRALISED TRAIN CONTROL
ELECTRONIC INTERLOCKING
ELECTRICAL MULTIPLE UNIT
ERASABLE PROGRAMMABLE READ ONLY MEMORY
INTERMEDIATE BLOCK SIGNALLING
INPUT/OUTPUT
INDEPENDENT SAFETY AUDITOR
MEAN TIME BETWEEN FAILURE
MEAN TIME BETWEEN WRONG SIDE FAILURE
MEAN TIME TO REPAIR
MAINTENANCE TERMINAL
OBJECT CONTROLLER
OPTICAL FIBRE CABLE
PERSONAL COMPUTER
PRINTED CIRCUIT BOARD
QUALITY ASSURANCE
Checked By : ADE/Signal-V
Printed:
Page 5 of 33
ISO9001:2008
Version No:1.0-d3
Date Effective
:00.00.2012
25.
26.
27.
28.
29.
30.
31.
32.
33
34
0.4
QAP
SEM
SIL
STR
TOT
UV
VDU
VGA
TPWS
ETCS
Amendment History:
Checked By : ADE/Signal-V
Printed:
Page 6 of 33
ISO9001:2008
Version No:1.0-d3
Date Effective
:00.00.2012
S.
Amendment
No. date
a
22.09.2005
1.0
2.0
Version
first issue
1.0
Checked By : ADE/Signal-V
Printed:
Page 7 of 33
ISO9001:2008
Version No:1.0-d3
Date Effective
:00.00.2012
lightening protection
shall be as per
RDSO/SPN/197/2008.
Clause3.16New clause added- duplicated
positive or negative supply terminals is provided
in EI.
Clause 3.17 New clause added- LED/LCD display
shall be provided on all the modules.
Clause3.18.1 modified Executive software and
independent safety assessor added.
Clause 3.18.3 New clause added- System shall
log of all the counters etc.
Clause 3.18.2 modified _ Deleted Warm stand
by.
Clause 3.18.4 added or equivalent standards.
Clause3.18.5 last sentence modified as All
modifications must have got approval of
internationally recognized validating agency.
Clause 3.18.7 last sentence modified ascommand held high for more than a specified
duration in EI as specified by the user railway.
Clause 3.18.8 the sentence modified -The VDU
system as well as Central Interlocking Unit shall
have back up information
Clause 4.2 New Clause added-The system shall
meet the interlocking requirements of the
station as per the approved interlocking plan.
Clause 5.1.1 last Para added as rules of IR as
defined in various specifications.
Clause 5.1.2 Cycle time and response time
added.
Clause 5.1.4 New clause added-VDU or CCIP
used with PP having standby processor.
Clause 5.1.7 New clause added-OC shall have
Solid state Point and Signal Module.
Clause 5.2.1 Clause modified as added It shall
work as slave unit of CIU through duplicated
OFC communication.
Clause 5.2.2 Clause modified as added RDSO
approved mono-mode OFC .
Clause
5.2.4
New
clause
addedCommunication channel should be compliant
safety standards.
Clause 5.2.6 new Para added- Communication
between OCs & CIU shall be as per EN-50159.
Clause 5.3 Clause modified as CCIP shall be
Prepared By: SSE/Signal/EI
Checked By : ADE/Signal-V
Printed:
Page 8 of 33
ISO9001:2008
Version No:1.0-d3
Date Effective
:00.00.2012
used as optional.
Clause 5.4.1 VDU configuration, SIL and
minimum requirements are described in this
clause.
Clause 5.4.2 VDU and MT
minimum
requirements are described in this clause.
Clause 5.4.4 modified -deleted colour monitor
(minimum VGA or better) shall be used for the
VDU and scrolling arrangement feature added
in this clause..
Clause 5.4.6 Ethernet based communication
added.
Clause 5.4.8 New clause Blocking of functions
shall be possible through VDU.
Clause 5.4.9 New clause added- Operation of
signal gears shall not be possible through both
VDU and VDU switch over is required due to the
conditions.
Clause 6.1 modified as included international
standards.
Clause 6.4.1 modified as included international standards.
Clause 6.5.3 modified as MTBWSF should be
minimum 10 hours replaced with MTBWSF
should be as per SIL4 requirements of CENELEC
standards.
Clause 6.6 modify- 25% replaced with 15%
Clause 7.1 (a) & (b) modified Deleted Warm
stand by system.
Clause 7.1.1 New clause added-Centralized &
Distributed arrangement of EI.
Clause 7.2.1 Added Industrial grade embedded PC and new para vi), vii) & viii) added.
Clause 7.2.2 New clause added-Failure of module shall be clearly indicated on MT.
Clause 7.2.3 new sentence added - It shall be
possible to scroll the yard layout for the big
yard.
Clause 7.2.4 New clause added-Keep MT anywhere at station.
Clause 7.2.2 New clause added-Power supply
clause. for MT.
Clause 8.1(b) new sentence added password
protection for modifying the application softPrepared By: SSE/Signal/EI
Checked By : ADE/Signal-V
Printed:
Page 9 of 33
ISO9001:2008
Version No:1.0-d3
Date Effective
:00.00.2012
ware.
Clause 8.1.1 New clause added Guidelines for
the FAT and SAT of the EI equipment's.
Clause 8.5.2 new sentence addedFront and
back contact of relays shall be checked by failsafe hardware and software.
Clause 9.1, 9.3, 9.4& 9.5 New clauses added for
Power supply and DC-DC converter requirements for EI.
Clause 9.6 clause modified Over voltage protection added.
Clause 9.8 Guidelines regarding lightning&
spikes for the compliant to EMC as per RDSO
SPN normative included in this clause.
Clause 9.9 modified as- if CCIP /VDU and CIU
are in separate building then they shall be interfaced using FOM to protect against lightening.
Clause 10. New paras10.1(h), i), 10.2 (vii), viii),
ix), x) added and para 10.1, b) modified regarding information to be furnished by the manufacture added.
Clause 11.2 new added as- Equipment room
shall be made air-conditioned. and 12
Clause 12 New clause added Warranty and
Availability
Clause 13.3 new sentence added- facilitate
Routine/acceptance test format approved by
RDSO.
Clause 13.4.3 New clause added - the clauses of
type test except environmental test is not required for the cross approved EIs.
Clause 14.5
Clause15.0 New clause added- Tool Kit specified.
Clause 16.0 modified and New para for the
condition in case of Cross Acceptance is added.
Clause 17.3 modified- and new sentence for including software loading precaution/procedure
added.
Clause 19(a) added new sentence submitted
information of station data , size of the room,
station layout details etc.
Clause 19(b) modified- CCIP and Type of VDU
Prepared By: SSE/Signal/EI
Checked By : ADE/Signal-V
Printed:
Page 10 of 33
ISO9001:2008
Version No:1.0-d3
Date Effective
:00.00.2012
1.0
SCOPE :
Checked By : ADE/Signal-V
Printed:
Page 11 of 33
ISO9001:2008
Version No:1.0-d3
Date Effective
:00.00.2012
1.1
1.2
1.3
1.4
In case of End Cabin/ Multi Cabin working, it shall be possible to interface more than
one pair of VDU control terminal with the EI.
1.5
The whole interlocking of a yard shall be controlled either by central operation or Distributed operation.
2.
TERMINOLOGY:
2.1
For the purpose of this specification, the terminology given in latest version of IRS: S
23 and RDSO/SPN/144 shall apply..
3.
GENERAL REQUIREMENTS:
3.1
The system shall provide all the interlocking, control and indication functions as per
approved interlocking plan, and selection table and panel diagram of the station.
3.2
The system shall have facility of monitoring of internal variables as well as status of
I/O. through the Maintenance terminal and data logger network of the railway. External Data logger shall be used for logging of analogue/digital inputs of external
functions and for rest the inherent diagnostic facility of EI shall be used. It shall be
Checked By : ADE/Signal-V
Printed:
Page 12 of 33
ISO9001:2008
Version No:1.0-d3
Date Effective
:00.00.2012
possible to connect EI with central monitoring unit kept at HQ control unit. MT shall
be used to diagnose problems/events related to hardware and software of EI. MT
shall have facility for automatic serial data transfer to a central monitoring unit. The
common protocol for this communication shall be as per Data Logger specification
No. IRS: S-99 latest version for interface only. RDSO approved external data logger
shall be supplied with EI unless specified otherwise by the purchaser.
3.3
The system shall be suitable for working on sections having 25 kV AC traction and
where passenger/freight trains hauled by single phase thyristor controlled or three
phase induction motor controlled AC locomotives or chopper controlled EMU stock
are operated.
3.4
The system shall be capable of working with the Control cum indication panel (CCIP)
with VDU or with duplicated VDU as per clause 5.3 as required by Railways. The CCIP is
optional and needs to be specified by the purchaser.
The system should have capability to interface with Block Working. It should also be capable
of interfacing with DAC, AFTC, UFSBI, BPAC, IBS, ABS including interfacing with outlying yards
and sidings. Supplier shall submit interface details.
3.6
The system shall be capable for working in non air-conditioned environment and
ambient temperature range between -10o C to 70 o C and Relative Humidity unto 95%
at 40o C.
3.7
The system shall be provided in an AC dust protected cabinet. The failure of AC unit
shall give an alarm to the operator, if agreed by purchaser railways.
3.8
3.9
Necessary provision shall be made in the hardware and software for modular
expansion of the system. For large stations, which cannot be covered by one EI, it shall
be possible to connect more than one EI. In case more than one Electronic Interlocking
needs to be used, the same can be used by placing all the EI equipments in same room
or connected by serial/Ethernet/OFC ports. The communication shall be of redundant
network/switches using fiber Optic cable arrangement with NMS to identify fault and
easy restoration. The system shall adopt duplicated ring network if placed at multiple
locations, the OFC paths should also be on diversified routes. The vital protocol shall
be complying to CENELEC normative EN 50159-1, Railway applications
Communication, Signalling and processing systems Part 1: The transmission systems
used must comply with the requirements for a closed Transmission System, as defined
in EN50159-1.
3.10
The communication channel provided between various EI shall comply with the
requirements for transmission of vital safety information as laid down in relevant
clause of latest version of RDSO/SPN/144/2004.
Checked By : ADE/Signal-V
Printed:
Page 13 of 33
ISO9001:2008
Version No:1.0-d3
Date Effective
:00.00.2012
3.11
EI shall have user-friendly graphic based design tool to generate station specific application software to carry out future yard modifications. It shall be possible for
Railway to carryout minor yard modifications without the help of firm and the training shall be imparted to Railway maintenance staff for the same as per agreement
with the Railway.
3.11
For all vital inputs/ outputs, going out of EI rooms double cutting arrangement shall
be provided.
3.12
Either OFC or twisted pair cable shall be used for all vital connections. Vital Radio link
as per the Indian telecom standards to connect between Object controllers and CIU
and in such cases, option of Fiber can be considered additionally. However the same
must comply with EN 50159-2 for open loop transmissions.
3.13
The RTC of EI system(s) should be updated/ synchronized with the External Data
logger and it shall be possible to log the events in chronological order in case of use of
either single/multiple EI with Data logger through CMU (Central Monitoring Unit) if
provided in network otherwise through protocol converter.
3.14
In case any peripheral equipment (such as VDU, MT, Data logger etc.) needs to be
connected to the EI through serial ports and then EI system shall be isolated from
the peripheral systems, Suitable isolators shall be used for connecting the peripheral
devices.
3.15
3.16
The terminals through which common positive or negative supply is provided to EI,
must be duplicated, this shall also require duplicated power supply cables from power
supply source to EI.
3.17
LED/LCD display shall be provided on all the modules of EIs to indicate status/ errors
of the module.
3.18
3.18.1 Both hardware & executive software of EI must meet SIL-4 as defined in CENELEC
Standards. The certificate of Independent safety assessor certifying that the system is
equivalent to SIL-4 compliant shall also be submitted.
3,18,2 The EI system executive software
should have been independently verified and
validated including its offered configuration by third party. User Railway shall verify
application software pertaining to yard data.
Prepared By: SSE/Signal/EI
Checked By : ADE/Signal-V
Printed:
Page 14 of 33
ISO9001:2008
Version No:1.0-d3
Date Effective
:00.00.2012
3.18.3 The system shall have log of all the counters like Emergency Route cancellation, Calling
On signal, Emergency Point operation, Overlap release operation etc. and that will be
logged in Maintenance terminal. It shall be possible to read all counters as and when
required. If Railway required, it shall also be possible to provide a counter box having
non-resettable counters.
3.18.4 The firm manufacturing EI, when applying for type approval or cross acceptance
approval shall submit documentary proof of independent validation as per CENELEC
Standards or equivalent standards, along with complete safety case.
3.18.5 The next level Signal control circuits like Cascading of Signal aspects, Red lamp
protection etc. Shall be achievable through Software only.
3.18.7 The audio-visual alarm shall be available for Approach locking, Button stucking etc.
Command held high for more than a specified duration in EI as specified by the user
railway.
3.18.8 The VDU system as well as Central Interlocking Unit shall have back up information on
log of all counters provided on VDU like emergency route cancellation, calling on
signal, emergency point operation, overlap release operations etc.
4.
INTERLOCKING REQUIREMENTS:
4.1
The system shall meet the interlocking requirements as specified in Cl.4.0 of IRS: S 36.
4.2
The system shall meet the interlocking requirements of the station as per the approved Interlocking plan and approved selection/control table provided by Zonal
Railway.
5.
SYSTEM COMPOSITION:
5.1
5.1.1 Microprocessor based interlocking equipment to read the yard and panel/VDU inputs,
process them in a fail-safe manner as per the selection table and generate required
outputs.
5.1.2 Cycle time and response time to read and process the input shall be fast enough to
ensure safety and avoid any apparent delay. Cycle time and response time of the
system shall be clearly indicated. The longest route for which all points are in favor
shall not take more than 5 seconds from initiation of command to display of lowered
signal aspect on control panel.
5.1.3 Duplicated VDU Control Terminal or VDU Control Terminal with Domino type Control
Cum Indication Panel (CCIP) (optional) used with Panel Processor having standby
Prepared By: SSE/Signal/EI
Checked By : ADE/Signal-V
Printed:
Page 15 of 33
ISO9001:2008
Version No:1.0-d3
Date Effective
:00.00.2012
processor. Panel Processor shall always be placed in same room as CCIP and connected through duplicated OFC ring with CIU.
5.1.4 Requirement of spare parts of each type for the first line maintenance shall be
indicated to meet system availability with Mean time to repair (MTTR) being not more
than 3 hours.
5.1.5 Maintenance terminal (MT) with display, keyboard, printer and event logging facility
for minimum 10, 00,000 events. The system shall have facility for automatic serial data
transfer to a central monitoring unit through data logger. The protocol for this
communication shall be as per Data Logger specification No. IRS: S-99.
5.1.6 Relay racks along with required number of approved type of relays or OCs.
5.1.7 CCIP shall used as optional and shall conform to relevant clauses of IRS: S 36 and
RDSO/SPN/186. It shall be provided with push buttons/ control switches for individual operation of points, clearing of signals, releasing of crank handle/ground lever
frame/ gate controls, cancellation of routes and other functions as covered by IRS: S
36 including block signalling, auto signal, IB signal, adjacent yard layout, to facilitate
indication or operation cum indication as per requirement.
5.1.8
5.2
EI shall either have object controllers having solid state Point & Signal modules to
drive signals and points directly or it shall be possible to interface EI or object controller to drive points and signals using RDSO approved relays.
OBJECT CONTROLLER:
5.2.1 OC shall be a Processor based system. It shall work as slave unit of CIU through
duplicated OFC communication and placed within 15 Km. radius from CIU. The OC
shall drive the field gears (Points, Signals & Relays) and take feedback (Inputs) from
various field gears without any modification/ change in the design of outdoor
Signalling equipment.
5.2.2 OC shall be normally placed in field locations.
5.2.3 The medium of communication between CIU and OCs shall be OFC provided on a ring
basis. In case of communication failure between CIU & OC, all the outputs shall be
brought to safe state whenever two consecutive telegrams are not received in
stipulated time period.
5.2.4 All the inputs and outputs of OCs shall be isolated.
5.2.5
OC shall carry out the supervisory function to check the proper level of system
voltages at critical points to ensure proper working of the system and shall also
check the health of the complete system. OCs when placed at multiple locations
Checked By : ADE/Signal-V
Printed:
Page 16 of 33
ISO9001:2008
Version No:1.0-d3
Date Effective
:00.00.2012
shall be connected through diversified/duplicated OFC ring and the protocol shall
comply to EN-50159-1 for closed loop transmission, additionally Vital Radio link as
per the Indian telecom standards to connect between Object controllers and CIU can
also be used which should comply with EN-50159-2 for open loop transmissions.
5.2.6 Occurrence of any error in any OC or hardware fault leading to unsafe condition shall
immediately withdraw all output commands and remove the source supply to
outputs. Functionally, each OC should be independent from other OC. Error in one OC
should not affect the working of other OCs.
5.2.7 If the system is developed using OCs, then it shall be developed in following two
phases:
(i)
In first phase, the object controller shall have only Relay driver cards duly validated
and meeting all SIL 4 safety requirements to drive Points, Signals and other field
gears. The approval shall be given to provide system with this arrangement over the
stations of Indian Railways.
(ii)
In second phase, after successful testing & working of above mentioned system for
specified time as decided by RDSO, Solid State Point and Signal lamp modules shall be
developed to the satisfaction of validators and RDSO.
5.2.8 In case of Cross Acceptance, EI with OCs may be directly accepted provided these have
performed satisfactorily for the quantity and period as specified in Cross Acceptance
procedure of RDSO.
5.3
5. 3.1 Requirements:
a. The software of VDU shall be certified to minimum SIL2 level by Independent
Safety Assessor.
b. Shall have Ethernet/OFC communication with the CIU either on copper cable or
OFC, with suitable isolators.
c. Shall have required level of security features & access control for the
operator/maintainer
d. Shall have key board/mouse operation.
e. It is possible to have either entry/exit like CCIP additionally pop up menu based
operation if feasible.
f. It shall be possible to disable the menus in case of emergency.
g. It shall synchronize the counters/clocks all the time and particularly when
resuming from a failure.
h. Shall support buzzers/alarms as in CCIP.
i. It is desired that it shall be possible to analyses the operation and run the play back
of the yard for the events of last 30 days.
Checked By : ADE/Signal-V
Printed:
Page 17 of 33
ISO9001:2008
Version No:1.0-d3
Date Effective
:00.00.2012
j.
Shall have minimum of two serial ports. The serial ports shall have inbuilt isolation
or external isolation shall be provided
In addition, it shall have two Ethernet ports
M12 type connectors shall be provided for DC power input, keyboard & mouse
CPU shall be having fan less design
Shall meet extended temperature range (min: -10C to 70C but not limited to)
Shall have DOM memory module for OS (CF type Extended memory can be used
Minimum 60GB)
The OS shall be rugged and shall be of latest version (e.g. Windows XP Embedded)
Shall be possible to support high resolution for the VGA/DVI port with dual display
arrangement (minimum 2000 x 2000 ; vertical 2000 pixels, horizontal 2000 pixels)
The monitor shall be of high resolution (minimum 1920 x 1080 but not limited to),
the minimum size of monitor shall be 42 inches.
A flashing indication shall be provided on the VDU to indicate healthy condition of the
main system, communication channel. Three dot markers in Red, Blue & Green colours
respectively shall also be displayed prominently at conspicuous location on the VDU
terminal to indicate that the colour monitor is healthy and all the three colours (Red,
Blue & Green) are present in right proportion.
It shall be possible to display the status of the yard by distinguishing with two differ
colours (i.e., system active and system inactive)
The software of VDU must meet SIL-2 as defined in CENELEC Standards. The certificate of third party Validator certifying that the VDU software is equivalent to SIL-2
compliant shall also be submitted.
5.3.3 The control terminal shall work with 230V 10%, 50Hz AC power supply, for which an
UPS of adequate capacity shall be supplied along with the system.
5.3.4 It shall be possible to display the complete yard layout including the section on the
monitor. It shall also have facility for displaying a portion of the yard or section in an
enlarged mode or with scrolling arrangement, if required.
Checked By : ADE/Signal-V
Printed:
Page 18 of 33
ISO9001:2008
Version No:1.0-d3
Date Effective
:00.00.2012
5.3.5 The current position/ status of various field equipments and track circuits shall be
displayed on the VDU using different colors/ symbols, as desired by the purchaser.
5.3.6 The system shall have suitable interface to receive and process the information for
displaying the status of field equipment on the control terminal. This interface shall be
of standard Ethernet based communication or any other approved type.
5.3.7 Availability of communication channel shall be indicated by a constantly flashing
indication. Whenever the communication channel goes faulty, a suitable error
message shall be displayed on the terminal.
5.3.8 Blocking of functions (points, signals, track circuits etc.) shall be possible through VDU.
The blocking operations shall be achieved in fail-safe manner.
5.3.8 If VDU and CIU are in separate building, then they shall be interfaced using FoM (Fiber
Optic Modem) to protect against lightning and surges.
5.3.9
Operation of signal gear shall not be possible simultaneously through both VDUs. In
case of VDUs used in Hot standby, VDU switch over is required in the following conditions:
a) VDU to EI communication failure
b) VDU computer failure
c) VDU monitors failure
d) One VDU is not controllable due to mouse failure.
6.
6.1
6.2
COMPONENTS:
Components used shall comply with relevant clause of latest version of
RDSO/SPN/144 and should be commercially available.
6.3
6.5
FAIL-SAFETY :
6.5.1 The requirements laid down in relevant clause of latest version of RDSO/SPN/144 shall
be complied.
Checked By : ADE/Signal-V
Printed:
Page 19 of 33
ISO9001:2008
Version No:1.0-d3
Date Effective
:00.00.2012
6.5.2 Either or both of hardware and software redundancy shall be provided to ensure
that any single fault does not lead to unsafe failure.
6.5.3 MTBWSF should be minimum 109 hours.
6.6
The system shall have provision for accommodating additional 15% of I/O in future.
7.0
SYSTEM ARCHITECHTURE:
7.1
For hot standby system, train operation shall not be affected. It should also be
ensured that the fault, which affected the main processor/ system, does not affect the hot standby processor/ system.
(b)
Two out of two hardware architecture with identical hardware and identical or
diverse software. In addition, hot standby processor(s) / system using similar 2
out of 2 hardware and software architecture shall be provided with facility of automatic changeover.
For hot standby system, train operation shall not be affected. It should also be
ensured that the fault, which affected the main processor/ system, does not affect the hot standby processor/ system.
(c)
Two out of three hardware architecture with identical hardware and identical or
diverse software.
7.1.1 One of the following arrangements. shall be used during the EI shall be commissioning of EI in the Railways :
i)
ii)
Centralized arrangement.
Distributed arrangement.
For medium size yards having routes more than 40, distributed architecture employing Object controllers in field near the signalling gears shall only be used. The Object
controllers shall have only function of input/output gatherer and interlocking logic
shall not be contained in any of Object controller. Complete redundancy from power
supply to communication, including communication system shall be provided for
connection of object controllers to main Central Interlocking unit. It shall be ensured
that no single point failure shall result in shut down of system or object controllers.
Prepared By: SSE/Signal/EI
Checked By : ADE/Signal-V
Printed:
Page 20 of 33
ISO9001:2008
Version No:1.0-d3
Date Effective
:00.00.2012
The connections of object controllers shall be only on duplicated OFC with diversified
path and redundant switches/modems. A comprehensive NMS for monitoring of
communication links as well equipments shall be provided for easy maintenance and
restoration of faults.
7.2
7.2.1 MT consisting of An Industrial grade embedded fanless PC with printer from a reputed
manufacturer shall be provided for following Operations: i)
ii)
iii)
iv)
v)
vi)
vii)
viii)
Display of the current status of points, signals, controls etc. of the yard.
Storage of minimum one month data or 10, 00,000 events.
Display of recorded events and
Data transfer to floppy, CD, flash memory or any other storage media.
Transfer of recorded events to external data logger.
Generation of exception reports shall be possible on MT for analysis purpose
and past events simulation on yard layout etc. exactly as per Data Logger
specification No. IRS: S-99 latest version.
The soft copy of Signalling circuits/manuals provide at the station shall also
be loaded on MT for ready reckoner of ESM in simple/local language.
MT shall be preferably connected to EI through OFC. If copper cable is used
for connectivity the MT port shall be isolated from the port of EI. At both
ends RS232 isolator/industrial grade opto-isolator shall be used.
SOFTWARE REQUIREMENTS:
8.1
Checked By : ADE/Signal-V
Printed:
Page 21 of 33
ISO9001:2008
Version No:1.0-d3
Date Effective
:00.00.2012
safety tests (including checking the Executive Software itself) that are the parts
of the processor for continual assurance of safety operation.
(b) Application Software
It shall be containing the logic that defines how the inputs and outputs for a
particular station are related. This shall be station specific.
It shall not be possible to modify Executive Software. However, Application engineers should have the facility to modify application software as and when required. It should be possible to prevent unauthorized access for modifying the
application software through a password protection.
8.1.1 The followings are to be ensured in case of application software:a)
The checksum of application software at the time of Factory Acceptance Test
(FAT) matches with the checksum at the site (SAT) if there is no modification
in yard layout after FAT.
b)
In case of yard modification, the changes in application software between
modified yard and old yard shall be shown in different colour using software
comparator at the circuit level for verification by Railways.
8.2
Software used in EI should have been developed in conformity with a software engineering standard issued by recognized standards body such as CENELEC with special
relevance to safety critical applications. Particular software engineering standards
used shall be specified and one complete set of such standards shall be made available to RDSO.
8.3
The selected EI executive Software should have been independently verified and
validated. As specified in the software Engineering Standards, full documentation on
Quality Assurance Program specially the Verification and Validation (V&V)
procedures carried out in-house or by any independent agency, should be made
available to RDSO to check their conformity to the standards. If the procedure and
documentation for V & V is considered inadequate, RDSO reserves the right to get
the verification and validation of software and hardware done by an independent
agency at the cost of the supplier.
8.4
The system shall conform to software requirements and self-check procedures as laid
down in relevant clause of latest version of RDSO/SPN/144.
8.5
8.5.1
Checked By : ADE/Signal-V
Printed:
Page 22 of 33
ISO9001:2008
Version No:1.0-d3
Date Effective
:00.00.2012
Sufficient self-check should be built into the system to detect possible hardware faults.
8.5.2 Integrity of the final vital output of the system for control of the field equipment
should be continuously monitored by failsafe hardware and software along with
reading front (in case of Metal to carbon relay) or both contacts (in case of Metal to
Metal relay) of relays to guard against inadvertent operation of the equipment.
9.
9.1
Non-regulated 230 Volts, 50 Hz. single phase or three phase, one or multiple supply
shall be provided by Railways for EI functioning to the vendor/manufactures and rest
all subsequent power supply requirements for EI, MT, VDU, OC etc. including backup
of atleast four hours (to prevent shutting down of system due to fluctuations in main
supply) for EI system shall be arranged by the vendor. The system shall work satisfactorily with input voltage variation from 150V to 275V AC and frequency variation
from 48Hz to 52 Hz. This shall also include provision of Power Supply change over
panel for selection of power supply from available multiple sources. The details of
Power supply shall be specified by the purchaser.
9.2
Two different voltages shall be used, one to drive EI equipment and the other for
receiving the inputs from the field gears.
All the DC-DC converters used to provide the different supply to the EI shall be provided for main and standby EI system separately.
9.3
9.3
The short circuit & over voltage protection of self restoring type shall be provided.
9.4
The required protection shall be provided to protect from any malfunctioning due to
false/ spurious feed.
9.5
Suitable surge protection and proper earthling arrangement shall be provided in the
power supply system to protect against transient voltages, lightning & spikes etc. as
per IEC normative. Also.
The above shall be implemented suitably in the field for the Indian Railways environment but firm shall provide a document capturing the installation / maintenance
methods / work instruction prior to installation.
The compliance of the following standards shall be evidenced in the above such document
IEC 61000-5-2
Checked By : ADE/Signal-V
Printed:
Page 23 of 33
ISO9001:2008
Version No:1.0-d3
Date Effective
:00.00.2012
IS 3403
RDSO/SPN/165/2004
RDSO/SPN/197/2008
9.6
9.7
Power supply arrangement for individual processor should be such that, in case of
fault in power supply of one processor, all processors should not cease to function
simultaneously. It should be possible to switch off and take out faulty processor for
repairing/replacement without affecting working of the balance system.
10.
10.1
c)
d)
Salient feature through which fail safety has been achieved e.g. use of a
watchdog timer, automatic shut down etc.
e)
Proof of safety in the form of process adopted for safety analysis and result
thereof.
f)
g)
h)
i)
j)
Checked By : ADE/Signal-V
Printed:
Page 24 of 33
ISO9001:2008
Version No:1.0-d3
Date Effective
:00.00.2012
Location
Date of Total
commis hours
misin use
sioning
No.
of No.
of MTB
safe side unsafe
F
failures
failures
MTBWSF MTTR
Total
Proveness criteria of Equipment Usage of same Type/Make & Model/Version shall
be as under: S. No.
Category of Equipment/System
1.
ii)
iii)
iv)
Checked By : ADE/Signal-V
the
system
Printed:
Page 25 of 33
ISO9001:2008
Version No:1.0-d3
Date Effective
:00.00.2012
10.2
v)
vi)
vii)
viii)
ix)
x)
The manufacturer shall provide the following certifications from approved validation
agency:
i)
ii)
iii)
iv)
v)
vi)
11.
11.1
The requirements of Environmental/ climatic tests as per relevant clause of
latest version of RDSO/SPN/144 (Indoor Equipment) shall be complied.
12.
12.1
The EI system including its equipment and subsystems shall be under warranty for
three years from the date of commissioning of complete system. However, purchaser can specify additional warranty if considered necessary.
Requirement of spare parts of each type for the first line maintenance shall be indicated for better system availability.
The MTBF of all vital modules shall be more than one lac hours. System availability
(Operational Availability of complete system, including power supply, wiring etc.)
Shall be 99.999% or better. The supplier to give the detailed calculation to achieve
this.
12.2
12.3
13.
13.1
Conditions of Tests
Unless otherwise specified all tests shall be carried out at ambient atmospheric
conditions.
Checked By : ADE/Signal-V
Printed:
Page 26 of 33
ISO9001:2008
Version No:1.0-d3
Date Effective
:00.00.2012
13.2
For inspection of material, relevant clauses of IRS: S 23 and RDSO/SPN/144 shall apply.
13.3
TEST EQUIPMENT:
13.4
The firm should have all essential Testing Equipments as per latest STR.
TYPE TESTS:
13.4.1 Standard RDSO layout shall be used for conducting type tests.
The following tests shall constitute type tests:
a)
b)
c)
d)
e)
f)
g)
h)
13.4.2 Any other tests shall be carried out as considered necessary by RDSO.
13.4.3 Only one EI shall be tested for this purpose. The equipment shall successfully pass all
the type tests for proving conformity with this specification. If the equipment fails in
any of the type tests, the purchaser or his nominee at his discretion, may call for
another equipment/card(s) of the same type and subject it to all tests or to the test(s)
in which failure occurred. No failure shall be permitted in the repeat test(s).
13.4.4 In case of Cross Approved EI, the clause 13.4.1 (a to e and g to h) of Type test will not
be applicable. The Environmental/ climatic tests as per Clause No. 13.4.1 (f) shall be
carried out at the time of Maintenance Type approval/indigenization.
13.5
ACCEPENTANCE TEST:
Checked By : ADE/Signal-V
Printed:
Page 27 of 33
ISO9001:2008
Version No:1.0-d3
Date Effective
:00.00.2012
13.5.2 Any other tests shall be carried out as considered necessary by the purchaser.
13.6
ROUTINE TEST:
13.6.1 The following shall comprise the routine tests and shall be conducted by manufacturer
on every EI and the test results will be submitted to the inspection authority before
inspection. The application software in proper format shall also be submitted to the
inspection authority in advance.
a)
b)
c)
d)
e)
f)
13.6.2 Any other tests shall be carried out as considered necessary by the purchaser.
14
TEST PROCEDURE:
The test procedure shall be based on the system design. The methodologies to be
adopted for various tests shall be decided taking into account the system design/
configuration and shall be approved by the purchaser.
14.1
VISUAL INSPECTION:
The equipment shall be visually inspected to ensure compliance with the requirement
of Clauses 3 to 7 of this specification. The visual inspection will broadly include
i)
ii)
Checked By : ADE/Signal-V
Printed:
Page 28 of 33
ISO9001:2008
Version No:1.0-d3
Date Effective
:00.00.2012
iii)
14.2
14.3
COMPUTERIZED TESTING:
The manufacturer shall provide a computer-based test set up with the required
software for automatic testing.
The following tests shall be conducted with the help of this set up.
After setting of points in main route & desired overlap, signal is cleared. Back
locking of the route and overlap should be verified. It should also be checked
that other yard functions are free.
The track circuit of the route should be dropped one by one and it should be
verified that it is not possible to clear the signal. All the routes are checked one
by one.
Checked By : ADE/Signal-V
Printed:
Page 29 of 33
ISO9001:2008
Version No:1.0-d3
Date Effective
:00.00.2012
ii)
14.4
14.4.1 These tests shall be conducted by automatic test procedure through a PC. The
diagnostic tests on the system shall be performed to test the integrity of the system
software by verifying the checksum.
14.4.2 It shall be possible to verify the application program vis-a-vis the selection table by the
user, preferably through regeneration of the locking table from yard data.
14.4.3 The PC at the end of the test shall print out summary of the tests conducted.
14.5
14.6
Type test, Acceptance test and Routine test as given in Para 13.4, 13.5 and 13.6 shall
not be required in case of Cross- acceptance.
The following shall be applied for locally developed systems
i)
ii)
iii)
iv)
15.
For the verification of same, a team of RDSO officials may visit the manufacturing
facility of manufacturer in its respective Country(s). Sample tests shall be carried out,
if found necessary. However, at least one set of equipment shall have to be installed in
Indian Railways, to prove its performance in Indian conditions. Details of cross
acceptance procedure may be referred to in concerned document of RDSO.
TOOL KIT:
The following tools shall be provided by the manufacturer at the time of supply of
the equipment:
i)
True RMS digital multimeters-4 digits display with facility of diode & transistor testing.
ii)
True RMS digital multimeters-42digits suitable upto 50 Hz, high accuracy.
iii)
Storage dual beam oscilloscope of 20 MHz or above bandwidth.
Checked By : ADE/Signal-V
Printed:
Page 30 of 33
ISO9001:2008
Version No:1.0-d3
Date Effective
:00.00.2012
iv)
v)
vi)
Function Generator.
Earth Resistance meter.
Insulation Resistance tester. Etc. and other tools as required by Purchaser/user Railway.
16.0
16.1
The systems offered under cross acceptance are not developed to the specification
of Indian Railway. These are developed to international or regional standards; therefore, certain deviations from Indian Railway specification are unavoidable. These
shall be clearly defined by the manufacturer while offering the system to RDSO.
These shall normally be accepted unless there is some serious deficiency likely to affect performance of the system on Indian Railway.
In case of Cross-Acceptance, the firm shall submit additional documents and information as per the latest version of Procedure order for cross acceptance/approval
of software embedded Electronics systems and new/imported technology products
for Railway signalling issued by RDSO.
The approval of systems offered under cross acceptance shall be governed by Procedure order for cross acceptance/approval of software embedded Electronic systems and new/imported technology products for Railway Signalling.
a)
Long Term Availability of Spares: It shall be ensured to supply spare parts for
a period of 25 years. It shall be required to carry sufficient inventories to ensure an ex-stock supply of consumable spares for the system.
b)
Training: The manufacturer shall have facility to provide training to Railway
officials at its premises in EI technology.
c)
Provision of Test & Repair facility: The manufacturer shall set up test and repair facility with simulation test set-up, fault diagnostic system, test jigs,
software for testing of cards/modules along with required test instruments
and tools.
d)
Annual Repair Contract: The manufacturer shall have provision of an annual
repair contract after expiry of the warranty period. During the annual repair
contract the manufacturer shall repair/replace all faulty cards ensuring availability of all required cards/modules by keeping sufficient inventory at its
end.
Type test, Acceptance test and Routine test as given in para 13.4, 13.5 and 13.6 shall
not be required in case of Cross- acceptance, The firm has to submit following documents to ensure that the system meets all requirements as mentioned in para 15:
i)
Certificates of Type tests done earlier at the time of development of the system as required by international standards.
v)
ii)
List of Routine tests done and sample copy of results to be submitted.
iii)
Acceptance tests to be done at the time of inspection of equipment to be
supplied. Routine tests reports to be submitted to RDSO before offering the
system for acceptance test.
iv)
Performance feedback reports from user Railways, if any..
16.2
16.3
16.4
Checked By : ADE/Signal-V
Printed:
Page 31 of 33
ISO9001:2008
Version No:1.0-d3
Date Effective
:00.00.2012
For the verification of same, a team of RDSO officials may visit the manufacturing facility of manufacturer in its respective Country(s). Sample tests shall
be carried out, if found necessary. However, at least one set of equipment
shall have to be installed in Indian Railways, to prove its performance in Indian conditions. Details of cross acceptance procedure may be referred to in
concerned document of RDSO.
17.
QUALITY ASSURANCE:
17.1
17.2
Since the quality of the equipment bears a direct relationship to the manufacturing
process and the environment under which it is manufactured, the manufacturer shall
ensure QAP of adequate standard.
17.3
Validation and system of monitoring of QAP procedure of the firm including software
loading precautions/procedures in addition to other system procedures to ensure
quality of the product shall form a part of type approval. The necessary Plant, Machinery and Test instruments as given below shall be available with the manufacturer.
Along with the prototype sample for type test, the manufacturer shall submit the
Quality Assurance Manual.
17.4
18
17.5
19.
PACKING:
As per relevant clause of latest version of RDSO/SPN/144.
20.
Approved interlocking plan, selection table and panel diagram of the station
(Cl. 3.1) and the station data such as old or new room, size of the room, station
layout details etc.
b)
c)
Checked By : ADE/Signal-V
Printed:
Page 32 of 33
ISO9001:2008
Version No:1.0-d3
Date Effective
:00.00.2012
d)
e)
f)
*********
21.
Activity
Creation,
maintenance
of this document
Compliance of
directives contained in this
document
Requirement
deviation from
directive
Responsibility
Approver
Supporting Consulted
Informed
Head of
SSE/SE/EI All
con- All concerned
Director/Signal-III Directorate
cerned
through
intranet/email
Directorate
Staff and Officers
Head of
Directorate
Directorate Staff
All concerned
through
intranet/email
Head of
Directorate All
con- All concerned
Director/Signal-III Directorate Staff
cerned
through
intranet/email
Checked By : ADE/Signal-V
Printed:
Page 33 of 33