Critical embedded systems

RAILWAY REMOTE I/O MODULES

Together with the central computers, the EN 50155 qualified input / output modules make it possible to build complete train control control (TCMS) architectures. These acquisition and control modules are based on a generic platform: the “Basic Remote”. Input Output “module (” BRIO “) Generic BRIO complies with the SIL0 level of EN 50126, EN 50128, EN 50129. The range is supplemented by specific modules:

  • BRIO SIL2 : SIL2 Input/output Modules
  • BRIO SSPC : Solid State Power Controller
  • BRIO CEE : Energy Exchange Controller

More than 15000 BRIO are installed to date.

MAIN FEATURES

  • Processor : STM32 32 bits/200Mhz
  • Operating system : Free RTOS
  • I/O coprocessor : FPGA Xilinx
  • Memories : SDRAM 8Mo, NAND, Crypto.
  • Aluminium product with protective cover made of composite material
  • Dimensions : W x H x D = 30 x 262 x 265 mm
  •  Mounting :
    • 6U x 6HP rack mounting
    • Remote stand-alone mounting with a side support
  • Wiring of inputs/outputs and power supply on the rear panel :
    • 2 connectors of type DIN41612 F48 male class 1
  • Wiring network on the front panel :
    • Ethernet : M12 code D female
    • Serial links : Subd 9 points
  • Full range power supply 24Vdc to 110Vdc
  • Protection against polarity reversal and under voltage
  • Power consumption : <20W
  • 1 Ethernet port
    • M12 connector
    • 10/100 Mbits IEEE802.3
    • IP adress assigned either automatically via a DHCP server or with an external Key Indentifier Dongle (KID)
    • Latency performance between Ethernet command and I/O signal activation : <15ms
  • Protocols :
    • IEC61375-2-3 Train Real time Data Protocol (TRDP)
    • Ethernet/IP-CIP Scanner or Adapter protocols
    • UDP/TCP protocols
    • Maintenance webservices in accordance with UIC559
    • Secure remote reprogramming via HTTPS
  • Cybersecurity hardware mechanisms and software features (TRNG, AES-256, SHA-512…)

The serial ports list depends of the models.

  • 1 RS232 port for programming, configuration or maintenance
  • Option : 1x CAN 2.0 A/B or CANopen port
  • Option : 1x RS485 Modbus RTU port
  • Option : 1x I/O expansion port (RS485 HDLC Daisy Chain) to communicate with additional BRIO (extension or local redundancy)

SOFTWARE

CONFIGURABLE MODULE

  • BRIO can be used as a configurable remote module
  • Data mapping is fixed
  • Possibility to trigger the download of operating parameters from a central database after recognition of an identification key connected to the SubD RS232
  • Operation and maintenance by Web Services

Programmable module

  • The BRIO can be configured as a programmable micro PLC
  • IEC61131-3 programming (Ladder, Grafcet, Structured Text) with Straton
  • Many communication and protocol drivers

ENVIRONMENTAL QUALIFICATION TESTS

EMC TESTS

STANDARDS
OBJECT
LEVEL
Criterion

EN 61000-4-2 (2009)

Electric Static Discharge

Enclosure contact : ±6 kV

Enclosure air : ±8 kV

B

EN 61000-4-3 (2011)

Immunity Radiated RFI

80 MHz … 1 GHz : 20 V/m

1.4 GHz … 2.1 GHz : 10 V/m

2.1 GHz … 2.5 GHz : 5 V/m

A

EN 61000-4-4 (2010)

Fast burst

±2 kV direct/indirect

A

EN 61000-4-5 (2007)

Burst immunity

±2kV  Common Mode

±1kV  Differential Mode

A

EN 61000-4-6 (2009)

Immunity Conducted RFI

10Vrms

A

EN 55011 (2011)

Radiated/conducted emissions

150 kHz … 500 kHz

500 kHz … 30 MHz

30 MHz … 230 MHz

230 MHz … 1 GHz

99 dBμV

93 dBμV

40 dBμV/m at 3m

47 dBμV/m at 3m

MECHANICAL TESTS

STANDARDS

EN 61373 (2011)

ObjECT

Railway applications

Rolling stock equipment

Shock and vibration tests

lEVEL

50 m/s² XYZ 30ms

7.9 m/s² XYZ 5 hours

Criterion

A

CLIMATIC TESTS

STANDARDS

EN 60068-2-1 (2007)

EN 60068-2-1 (2007)

EN 60068-2-2 (2007)

EN 60068-2-30 (2007)

EN 50155 (2007)

OBJECT

Cold storage

Cold start

Dry heat

Damp test, cyclic

Salt mist

lEVEL

-40°C 16 hours

-40°C

+70°C

+55 °C ,95 % humidity 48 hours

48 hours (ST3)

Criterion

A

A

A

A

A

SPECIFIC BRIO

BRIO FSM : SIL2 SECURE I/O MODULE

The Fail Safe Module (FSM) is SIL2 CERTIFER certified in accordance with EN50126, EN50128 and EN50129. 

It has :

  • 20 digital inputs SIL2
  • 10 digital outputs Solid State Transistor (SST) SIL2

BRIO CEE : ENERGY EXCHANGE CONTROLLER

A BRIO CEE is installed in each car. It monitors the car’s electrical sources from auxiliary power converters.

If the car loses its power source, it dialogues with the BRIO CEE to allow the car to be recharged via the two adjacent cars. The rescue is complete if the car is surrounded by two healthy cars that do not rescue other cars.

BRIO SSPC : SEMI-CONDUCTOR POWER CONTROLLER

6 outputs can switch up to 6A and 2 outputs up to 10A.

According to a 1000-point disjunction curve, previously configured and saved, it cuts the output in less than 1 μs if the intensity exceeds a defined threshold.

On each output, it calculates the power and measures the temperature. The calculations are made by an FPGA coprocessor.

Remote reset: After disjunction, the output can be closed by a TCMS command via the Ethernet port.