ERTMS ETCS Signalling System RevF
ERTMS ETCS Signalling System RevF
LIST OF TABLES
Table 1: Reference Document Table ................................................................................................................................. 6
Table 2: Acronyms, Abbreviations and Definitions ............................................................................................................ 8
Table 3: Technical features of the HS/HC rail lines ........................................................................................................... 18
Table 4: Colour DMI criteria ............................................................................................................................................ 36
Table 5: Short description of rail capacity terminology .................................................................................................... 44
Table 6: Variable NID_LX ............................................................................................................................................. 54
Table 7: Structure of an ERTMS/ETCS Packet ................................................................................................................. 55
Table 8: Message 2 - SR Authorization ............................................................................................................................ 56
Table 9: Message 3: Movement Authority ....................................................................................................................... 57
1.3 Contents
This document is divided into the following chapters:
2 presents a brief history of the railway signalling. With an excursus among the signalling
basic concepts from nineteenth century to nowadays, it introduces to the birth of ERTMS
programme.
3 describes, from an architectural and a functional point of view, the main features of the
European HS/HC railway lines, with a special focus on the Italian national high speed railways,
on which ETCS Level 2 is adopted.
4 presents a brief history of the ERTMS programme, explaining the reasons for which it was
born, its main subsystems and the change specification process. Furthermore, it introduces the
main advantages consequent by the adoption of this standard.
5 as core of the paper, it describes the main features of ETCS command-control and signalling
system, component of the ERTMS programme. After listing all the possible ETCS levels of
Trains cannot collide with each other if they are not permitted to occupy the same section
of track at the same time.
For this reason, railway lines are divided into sections, known as blocks. In normal circumstances,
only one train is permitted in each block at a time.
In the early days of railways, at the middle of the nineteenth century (1850), men were employed to
stand at intervals (blocks) along the line with a stopwatch and they used hand signals to inform train
drivers that a train was going to pass more or less than a certain number of minutes previously. The
watchmen had no way of knowing whether a train had cleared the line ahead, so if a preceding train
stopped for any reason, the crew of a following train would have no way of knowing unless it was
clearly visible. As a result, accidents were common in the early days of railways.
Helping staff, semaphores was introduced at the turn of the century (1900). The signal fell into
horizontal position (indicating stop) when the train was going to pass. Such typical signal is shown in
the second picture of Figure 5.
With the invention of the electrical telegraph and then of the telephone, it became possible for the
staff at a station (train dispatchers), to send a message (first a specific number of rings on a bell, then
a telephone call) to confirm that a train had passed and that a specific block was finally clear.
About in 1930 the first optical signals were introduced. The whole system was called the absolute
block system or phone block system and its represented in Figure 1.
Direction of travel
Resistor
Resistor Battery
Relay
CLEAR
Battery
Relay
STOP
Battery
The track circuit shown here has been simplified for the illustration purpose. In practical application,
the relay would have several sets of contacts connected in combination with the contacts of other
relays belonging to nearby track circuits to form logic circuits for the control of the signaling devices.
Even in the simple form shown in Figure 3, it can be noticed that the breaking of any conductor or the
loss of power in the circuit will cause either a red signal or no signal at all to be displayed. A red or
dark signal must be always interpreted as a stop command. To put it another way, all signaling
systems are designed so that a green signal (meaning proceed) is presented only when the track
circuits provide positive information that it is safe to do so.
Detectors
R R R R
T T T T
Junction Junction
Box Box
Evaluator
T: Transmitter
to Control Room
R: Receiver
A detection point comprises two independent couple of detectors; therefore the device can detect
the direction of a train by the order in which the detectors are passed. As soon the train passes a
similar counting head at the end of the section, the counter decrements. If the net count is evaluated
as zero, the section is presumed to be clear for a second train.
The detector senses the wheels by evaluating the changes in the magnetic coupling between the
coils placed at each rail side. The system consists of:
A sensor coils for train wheels detection;
An electronic unit (electronic junction box) for signal conditioning and counting of the wheels;
An evaluator unit which compares the number of the wheels entering the rail section and the
wheels exiting the section.
The comparison result states the occupation status (section clear or occupied).
3.1 DEFINITIONS
HS (High Speed)/HC (High Capacity) railway is a type of rail transport which operates significantly
faster than traditional rail traffic.
Its important to clear the difference about HS and HC concept:
- A high speed rails a modern line, with heavy armament, with paths where possible and
basically straight flat, on which trains run specially, designed to achieve high top speeds.
- The terms High Capacity means a rail system to transport both goods train and passengers on
HS lines, but sometimes it can refers to advanced systems for the railway traffic control, that
allow the passage of a greater number of trains because more controlled and regular.
3.2 TARGETS
The main aims of the HS/HC projects are to transform the European railway network into a High
Speed/High Capacity system:
- with an overall capacity of more than twice conventional capacity;
- to upgrade and specialise existing lines for local, regional and goods freight transport;
- to enhance the effectiveness of existing lines, creating connections for port or airports;
- to realize the concept of interoperability (integration with the rail international traffic flows).
3.4.1 ERTMS/ETCS
On the HS/HC italian lines, the ERTMS / ETCS (or simply ETCS) L2 signalling system gives to the driver
all the information necessary for safe driving, both in relation to the effects of its actions and to the
changes in line conditions and with the activation of the emergency braking if the train speed
exceeds the maximum allowed. For further information about this technology, refer to 5.
ERTMS / ETCS L2 is active with a maximum speed about of 300 km/h on the HS/HC lines.
3.4.2 GSM-R
Its the mobile communications system used exclusively in the railway sector.
With the GSM-R the railway infrastructure and its staff is equipped of a mobile radio system which
can meet in an efficient and integrated, on a national scale, all the communication needs and data
communications related with rail operations, including the control, safety, and journey of trains.
The GSM-R transmits on a frequency band in the range 900 MHz reserved for railway operations in
Europe and provides communication services ground to train, both during normal circulation in cases
of emergency.
The GSM-R allows a better and constant contact between the crew and the ground (service
communications and emergency management) and allows the exchange of data between systems
and information technology and the various European rails signaling through a single standard
interoperable communications. In this way, the perspective of European integration in rail traffic
3.4.3 CSS - HS
The CSS HS (Command and Control System High Speed) is the most advanced integrated
management system at a distance of movement used in the railway field. Developed to improve and
ensure the regularity of trains in the process of upgrading the quality of services, to manage in an
integrated circulation, diagnostics and maintenance, public information, surveillance and simplify
management and obtaining the top timeliness and effectiveness in solving problems of movement
even on high traffic lines. Its a technologically advanced system that, by means of a logic computer,
sends and receives commands from controls in security from electromechanical instruments
(exchanges, signals) and apparatus (peripheral posts).
Figure 13 shows the advantages of the adoption of the ERTMS system in Europe, in terms of five main
parameters:
Safety:
- constant speed monitoring
- signals received in the train
- direct surveillance of level crossing and avalanche information systems
- uniform european drivers panels
- TSR (Temporary Speed Reductions) sent to the network
Cost:
Accessibility:
- reduced number of track magnets and no cables
- swifter error recovery with reduced number of systems
Interoperability
- standardised information screens for train drivers in Europe
- uniform technical interface between train and infrastructure
- uniform operative interface between train driver and infrastructure
Maintenance:
- standardised systems
- fewer critical safety interfaces
- one system per track
- several suppliers on the market
One of the objectives of this paper is, thus, to specify in more detail the features of this five
parameters just described, showing how ERTMS system realizes a tangible performance increase in
each of them.
ETCS Level 1 is a cab signalling system that can be superimposed on the existing signalling system, i.e.
leaving the fixed signal lateral system (national signalling and track-release system) in place.
Eurobalise radio beacons pick up signal aspects from the trackside signals via signal adapters and
telegram LEU Encoders and transmit them to the vehicle as a Movement Authority (permission to
cross one or more block sections) together with route data at fixed points.
The Eurobalises are used at this level as passive positioning beacons or electronic milestones.
Between two positioning beacons the train determines its position via sensors. The positioning
beacons are used in this case as reference points for correcting distance measurement errors. The
on-board computer continuously monitors the transferred data and the maximum permissible speed.
The ETCS Level 2 constitutes a continue ATP/ATC with interoperable Cab Signalling and fixed block
with block sections.
This system is installed on the Italian HS/HC lines.
As shown in the previous figures, for each ETCS level, the trainborne subsystem must also implement
the previous level.
ERTMS Level 2 is currently the most widely used version and we refer to it in the following sections of
this paper.
Figure 22: Communication of the trackside subsystem with other ERTMS L2 elements
5.2.1.1 ETCS
The ETCS L2 system realizes the two following main function:
1. Ensure the safe space separation among the trains working on the HS/HC line
2. Monitor the travel of the train, advising the driver if he pass a red (danger) signal or exceed
a speed restriction. In these cases, the system applied an automatic brake if the driver fails
responding to the warnings.
On the Italian HS/HC lines, it is called SDT (Sistema Distanziamento Treni).
In the next paragraphs, we describe the main components of these subsystems, currently used on
HSL Bologna-Florence. For detailed information, refer to [R5] and [R13].
5.2.1.1.3 KMS
The KMS (Key Management System) is the trackside component in charge of the management of
cryptographic keys on the railway, to facilitate secure ERTMS data radio communication.
ERTMS exchanges information between trackside equipment and trains and vice versa in the form of
data messages. When radio is used for these data messages a secure connection is required and
corresponding keys must be available on either side of the connection.
KMS component if basically composed of two different equipments, which performs different tasks:
KMC (Key Management Centre) and PKI (Public Key Infrastructure).
Key Management Centre (KMC) is part of the KMS; it is in charge of generating, updating and
dispatching the authentication keys into the ERTMS trackside and trainborne equipment and to
exchange keys with foreign KMCs (same equipments belonging to an adjacent line).
Public Key Infrastructure (PKI) is used for the management of asymmetric key material. The key
material is usually managed through Smart Cards or similar hardware.
For more details about the security issues into the ERTMS architecture, refer to Errore. L'origine
riferimento non stata trovata..
5.2.1.1.4 EUROBALISES
The Eurobalises, called track magnets in Figure 22, is the equipment installed on the track that sends
ETCS messages to trains. In ETCS level 2, it is mainly used for train location management. The
Eurobalises is considered to be fixed if it always transmits the same message stored in its internal
memory. Its mainly used to provide trains with the needed information for the relocation on board
function and to inform the RBC at the station facility about train positions via position reports.
In the opposite case (variable messages), we can talk about of switchable Eurobalises.
5.2.1.1.5 LEU
The LEU (Lineside Encoder Unit) is the safe equipment that interfaces between the Interlocking and
other external system, and the switchable Eurobalises installed on the track.
This equipment is able to interface with several switchable Eurobalises at the same time. It sends the
suitable predefined ERTMS/ETCS messages, according to the information received from the
Interlocking or external system.
The control system that deals the line management and, thus, the routing of trains, is called
interlocking. Setting a route means locking a several number of block sections, which together form
a path for a train. Until the route is active and its track circuit occupied, trains cannot obtain any part
of the route, which is considered as a mutually exclusive shared resource.
On Italian HS/HC lines, it is called GDV (Gestione della Via).
5.2.2.1 EVC
EVC (European Vital Computer) is the on-board computer, which safely processes the trainborne
functions on the basis of the:
1. information received from the wayside equipment
2. data introduced by the driver
3. data coming from on-board sensors
EVC is physically placed on board through the rack like the one just shown, realized by Alstom for the
Italian SSB. The driver can interface with EVC trough the DMI (Driver Machine Interface).
5.2.2.2 DMI
The DMI is the main means of interaction between the driver and the system. It is used to:
1. display signals and indications via a monitory in every driver cab;
2. acquire entered data end enable specific functions via a series of keys and buttons;
3. achieve technical interoperability on the driver side.
Note the different colours between the two circular arc speeds in the lower and upper parts of the
Figure 29. The use of certain colours responds to a predefined sequence of priorities, which
establishes the colour criteria shown in Table 4.
5.2.2.3.2 Radar
Based on the Doppler principle, the radar sensor gives an image of the ground displacement in order
to provide information about train speed and covered distance.
5.2.2.3.3 Accelerometer
In standard trainborne configuration an accelerometer is used and provides the ETCS trainborne sub-
system with the train acceleration/deceleration.
The accelerometer is based on force balance principle. Submitted to acceleration, the seismic mass
tends to move. The new position is detected by an optical position detector and converted into a
current. This current is proportional to the acceleration.
The accelerometer provides an output voltage proportional to the train acceleration by passing
through an accurate load resistor.
Figure 35 below shows a part of the VMMI-ERTMS simulator interface, customized for the HS/HC
Italian line Bologna-Florence. In this example, a TSR is imposed from the track circuit 121 to the 2020,
so a yellow segment is drawn down the interested sections. In the figure, this area is highlighted by a
red rectangle.
Predefined TSRs are planned during the engineering process and implemented into the RBC data
base. Any predefined TSR defined in the RBC internal data base can be automatically activated
according to information received from the Interlocking (e.g. in relation with sensors in the track).
Once the TSR is activated in the RBC data base, it shall be sent to the train only when it is inside the
path assigned by the RBC to this train. If no train is approaching the TSR area, no TSR shall be sent.
Predefined TSR are usually used to limit the train speed at well-known areas when known events are
raised. For example, they can be activated as result of the activation of a trackside detector or other
external electrical signal.
Pre-indication location: informs the driver that he is approaching an area where he has to
operate the service brake in order to brake to a target;
Indication (I): informs the driver that the train speed is approaching the maximum allowed
speed in that area;
Permitted Speed (P): the maximum speed the train is allowed to run;
Warning (W): If the train speed exceeds the Warning curve, an audible warning is issued to
the driver to indicate that he should start braking;
Service Brake Intervention (SBI): if the driver fails to obey the command to brake within a
predefined time, the train speed will overpass the SBI limit the on-board equipment will apply
the service brake until the allowed speed has been reached;
Emergency Brake Intervention (EBI): if the train speed is such that this limit is overpassed, the
emergency brake will be applied;
Release speed monitoring start location: the release speed may be necessary for two reasons.
One is that a train has to be able to approach the EOA where the permitted speed reaches
zero and might be too restrictive to permit acceptable driving due to inaccuracy of the
measured distance. The other reason is that in a level 1 application the train has to be able to
overpass the balise when the signal clears. For these two reasons a (low) release speed may
be given from trackside or may be calculated on board, based on the distance from the EOA
to the Supervised Location.
- A signal managed by the interlocking and located at entrance is red until the RBC sends a
movement authority to the train. As the not fitted train will not receive any movement
authority, the signal will stay red and the train will not enter the ERTMS/ETCS level 2 area.
- An information containing the train running number is sent to the control center. Based on it
and on its timetable, the operator will permit or not the access to the ERTMS/ETCS level 2
area to the entering trains.
- A Eurobalise of the adjacent national system is located at the entrance and protects the
ERTMS/ETCS level 2 Area by sending information to stop the train. As train fitted with
ERTMS/ETCS level 2 will have already switched to ERTMS/ETCS system, they will not take
into account the Eurobalise message and they will not be stopped.
For each connection related to an end section point, a safe zone called TAF zone must be
associated, in which the ERTMS/ETCS L2 signalling system can guarantee that the train is the first one
in the block and the section located downstream the train is not occupied.
The common point of all the situations involving the achievement of the function Start of Mission is
that the ERTMS/ETCS on-board is in SB mode. At the beginning of the Start of Mission procedure, the
data required to the driver are:
Driver ID
ERTMS/ETCS level
RBC ID/phone number
Train Data
Train Running Number
Train Position (known, invalid, unknown)
If the train position data stored in the on-board equipment is of status invalid or "unknown", the
information shall be transmitted to the RBC via the "SoM position report" message.
If the position report is validated by RBC, the ERTMS/ETCS on-board equipment is informed that the
train is accepted without valid position data, so it shall delete the train position data (new status:
unknown).
Consequentially, the train is set to SR until the next BG, when its able to send a valid position report
to RBC.
Here, the situations for which train position is invalid/unknown at start-up are listed:
If the train is running in a degraded mode (as at the beginning of the procedure Start of Mission),
ensuring that the train is the first one in the block and the section located downstream the train is
not occupied, is mandatory.
In a level 2/3 area, the ERTMS/ETCS on-board equipment shall be able to handle a TAF Request given
by the RBC. The track ahead free request from the RBC shall indicate to the on-board:
a) at which location the ERTMS/ETCS on-board equipment shall begin to display the request
to the driver.
b) at which location the ERTMS/ETCS on-board equipment shall stop to display the request to
the driver (in case the driver did not acknowledge)
The driver shall have the possibility to acknowledge the track ahead free request (meaning the driver
Confirm that the track between the head of the train and the next signal or board marking signal
position is free).
When the driver acknowledges, the ERTMS/ETCS on-board equipment shall stop displaying the
request, and shall inform the RBC that the track ahead is free.
There shall be no restrictive consequence by the on-board system if the driver does not acknowledge.
A new track ahead free request shall replace the one previously received and stored.
Official absolute world record for conventional train is held by the French TGV.
In April 2007, a specially tuned train, reduced to three cars with higher voltage, broke the world
record, reaching 574.8 km/h, the highest ERTMS speed until now.
5.3.3.1.1 GSM-R
The GSM-R, just generally described in 3.4.2, is the mobile communications system which allows the
exchange of data between an ERTMS L2 fitted train and the trackside subsystem.
This wireless and connection-oriented approach is often considered as the bottleneck of the
signalling system, which considerably limits the possible number of voice and data connections in
each cell of the network at the same time and it can cause a deadlock of the system, if the number of
users will rapidly increase (e.g. accidents, freight depots, lines with a high and dynamic volume of
traffic).
The SGSN (Serving GPRS Support Node) is responsible for the delivery of data packets from and to the
mobile stations within its geographical service area. Its tasks include packet routing and packet-
transfer, the mobility management, the logical link management and, finally, the authentication and
charging functions.
The GGSN (Gateway GPRS Support Node) acts as an interface between the GPRS backbone network
and the external packet data networks. It converts the GPRS packets coming from the SGSN,
mentioned before, into the appropriate PDP (Packet Data Protocol) format and sends them out on
Thus, as shown in Figure 38, this interface is splittable into the following two sub-interfaces:
- Interface A1, used for transmitting telegrams (Up-link) from the Balise to the OBU Antenna Unit.
- Interface A2, used for transmitting the required power (Tele-powering) from the OBU to the
Eurobalise
5.3.3.3.1 Variables
ERTMS/ETCS variables are used to encode single data values and cannot be split in minor units. Each
variable unambiguously identify a specific track entity, allowing the system to handle the data to be
evaluated.
The following Table 6 shows an example of a variable treated by the ERTMS/ETCS system, the
purpose of which is to identify the univocal number of a level crossing on the track.
Name NID_LX
Description Identity number of the Level Crossing.
Length of variable Minimum Value Maximum Value Resolution/formula
Variable Purpose
NID_PACKET Number - Packet identifier
Q_DIR Direction - Specifies the validity direction of transmitted data
L_PACKET Length - Number of bits in the packet
Q_SCALE Scale - Specifies which distance scale is used for all distance information within the packet.
Information Well defined set(s) of variables
5.3.3.3.3 Messages
ERTMS/ETCS messages (telegrams) are composed of one header, a predefined set of ERTMS/ETCS
variables (when needed), a predefined set of ERTMS/ETCS packets (when needed) and optional
packets as needed by application. The transmission order in ERTMS/ETCS messages respect the order
of data elements listed in the message format (from top to bottom).
As example, here two telegrams sent by RBC to the OBU, are described in term of triggering
functions, which activate the sending process and data structure.
TAF window
configured
NO
YES
Waiting MA Request
Message 2: SR
Authorization
to be sent
Samuel Jhonson