Safety & Security for Rolling Stock
Safety and cybersecurity for rolling stock TCMS, remote I/O, driver HMIs and MVB/TRDP train networks, from requirements to vehicle integration.
Functional safety
For TCMS and subsystem controllers, safety begins with understanding hazards and assigning clear responsibilities. Define the required functions, interfaces and response to faults, then maintain evidence from requirements through integration and acceptance.
- Trace safety requirements to the control logic, interfaces and verification results.
- Define the expected response to sensor faults, missing data and loss of communication.
- Agree the required safety integrity, assessment and acceptance evidence for each application.
Cybersecurity
Connected rolling stock needs controlled boundaries between train control, passenger systems, maintenance tools and wayside connections. Assess the risks to devices and data, and select protection measures that preserve the required operational and safety behavior.
- Separate network zones and permit only the communication required across their boundaries.
- Control maintenance and remote access with authentication, permissions and activity records.
- Manage software updates, configuration changes and vulnerabilities throughout the service life.
Standards & project evidence
Select the applicable standards, editions and responsibilities with the vehicle manufacturer, integrator and operator. Each requirement must be supported by evidence for the equipment and application being supplied.
- EN 50126 series
- RAMS lifecycle and system safety: define requirements, assess risks and demonstrate the agreed reliability, availability, maintainability and safety objectives.
- EN 50716
- Railway software development: apply the required development, verification, validation and configuration management activities to the software scope.
- EN 50159 / IEC 62280
- Safety-related communication: assess transmission threats and define the measures needed for the safety-related data exchange.
- CLC/TS 50701 & IEC 62443
- Cybersecurity lifecycle and risk-based system protection: define assets, network zones, access controls and security requirements for the deployment.
- EN 50155
- Rolling stock electronic equipment: evaluate operating conditions, design, testing and integration. EN 50155 does not establish a Safety Integrity Level (SIL).
Product certification, software assurance and vehicle-level acceptance have different scopes. Confirm the applicable certificates, reports, configuration and operating conditions for the proposed solution.