IECC Reference Handbook

IECC 7000
Issue 6
Date 29 October 1999

Introduction and
System Structure

For approval and authorisation of this document, please refer to the This document is the property of
IECC Applications Manual Contents, RT/E/S/10040. Railtrack. It shall not be
reproduced in whole or in part
without the written permission of
the Railtrack Professional Head of
Signalling Asset Management.

Published and issued by

Director, Asset Management
Railtrack plc
Railtrack House
Euston Square
LONDON
NW1 2EE

 1999 RAILTRACK PLC

This page is intentionally blank
IECC REFERENCE HANDBOOK SAO-IEC-HF-10 Issue 6
IECC 7000 INTRODUCTION AND SYSTEM STRUCTURE

Amendment Record
Issue Date Description

6 29/10/99 Converted to Word format by AEA Technology Rail.

Same as issue 5.2.

Author Approved Date Date

IECC REFERENCE HANDBOOK SAO-IEC-HF-10 Issue 6
IECC 7000 INTRODUCTION AND SYSTEM STRUCTURE

ii
IECC REFERENCE HANDBOOK SAO-IEC-HF-10 Issue 6
IECC 7000 INTRODUCTION AND SYSTEM STRUCTURE

Contents

1 Introduction 1

1.1 PURPOSE 1

2 System Structure 2

2.1 IECC OVERVIEW 2

2.2 IECC SUBSYSTEMS 2
2.3 SUBSYSTEM DUPLICATION 4
2.4 COMMUNICATIONS OVER THE NETWORKS 4
2.5 REMOTE CONTROL AND MONITORING 5
2.6 IECC CONFIGURATION LIMITATIONS 5

iii
IECC REFERENCE HANDBOOK SAO-IEC-HF-10 Issue 6
IECC 7000 INTRODUCTION AND SYSTEM STRUCTURE

iv
IECC REFERENCE HANDBOOK SAO-IEC-HF-10 Issue 6
IECC 7000 INTRODUCTION AND SYSTEM STRUCTURE

1 Introduction

1.1 PURPOSE

The IECC Reference Handbook provides information to enable project managers to make informed decisions
about the IECC requirements for a proposed scheme.
IECC 7000 (this document) describes the IECC in general.
IECC 7001 describes individual subsystems, ARS, DIS, FBS, GWS, ISM, PCS, ECS, SDS, SIM, RII, RDF,
TDS, TRW and TTP. Each chapter contains information about functions, configuration and limitations.
IECC 7002 contains a comprehensive parts list, in spreadsheet format, together with supplier information. The
power loading requirements for each subsystem are detailed.

1
IECC REFERENCE HANDBOOK SAO-IEC-HF-10 Issue 6
IECC 7000 INTRODUCTION AND SYSTEM STRUCTURE

2 System Structure

2.1 IECC OVERVIEW

The Integrated Electronic Control Centre (IECC) is an electronic signalling control system, operated from desk-
like workstations, which provides all the facilities required for the control and monitoring of a substantial area of
railway.
A Signaller’s Workstation holds four or five monitor screens providing a detailed display of the railway, train
describer maps, alarms and information messages. Control is exercised either through a trackerball and push-
button set, or through a keyboard. Other equipment, such as telephones or closed circuit television, may also be
fitted to the workstation. Copies of the signalling displays may be provided in additional information
workstations (e.g. Regulator’s Display Workstation) for the benefit of signalling supervisors, train announcers,
and so forth.
The IECC also provides:
• a train describer, with communications links to other train describer systems;
• automatic routesetting;
• technician facilities for monitoring and diagnosing faults; and
• a simulator to allow IECC software and data to be fully tested, and to simulate the operational railway for
operator training.
Nearly all of the software is standardised, the characteristics of each scheme being stored as data.

2.2 IECC SUBSYSTEMS

An IECC is composed of many computer subsystems, the number and configuration of which depends upon the
size and complexity of the scheme served. The subsystems are linked in two groups via ‘ring’ communications
networks, as shown in Figure 7000-2A.

2.2.1 Subsystems Connected to the Signalling Networks

The Signalling networks connect the subsystems which directly control the railway, including:
(a) SSI (Solid State Interlocking)
An SSI is a computerised safety system and is the interface between the IECC and the trackside
signalling equipment. It contains a record of the state of the railway and a set of rules which must be
obeyed when changing the state of equipment.
(b) RRI (Route Relay Interlocking)
An RRI is an electro-mechanical safety system, based on relay logic, which performs a function similar
to that of an SSI. Each is provided with an Interface Processor (IFP) or a Relay Interlocking Interface
(RII) resembling an SSI so that the IECC can communicate with all interlockings in the same way.
(c) DIS (Flexible Display Subsystem) or
SDS (Signalling Display Subsystem)
DIS or SDS controls the monitors provided for the signaller, translates his commands into panel
requests for the interlockings and provides a Train Describer function.

2
IECC REFERENCE HANDBOOK SAO-IEC-HF-10 Issue 6
IECC 7000 INTRODUCTION AND SYSTEM STRUCTURE

DIS and SDS are functionally the same but have different hardware architectures. In SDS specialised
graphics boards are used to provide the displays. In DIS the man/machine interface is provided on an
industrial personal computer system.
(d) RDF (Remote Display Facility)
RDF is similar in nature to a DIS or SDS but it is split between the man/machine interface and the rest
of the subsystem. The man/machine interface (remote workstation) can be up to 250 miles distant from
the rest of the subsystem (host SDS).
(e) ARS (Automatic Routesetting Subsystem)
ARS assists the signaller by setting routes and monitoring the state of the railway.

2.2.2 Subsystems Connected to the Information Networks

The Information networks connect subsystems which do not directly control the railway, including:
(a) PCS (Protocol Converter Subsystem) or
ECS (External Communications Subsystem)
PCS or ECS provides electronic connections to remote Train Describers, Automatic Train Reporting,
Central Information Systems, Track-to-Train Radio systems, Passenger Information Systems, and so on.
An IECC has a PCS or an ECS, not both.
(b) IGS (Information Generator Subsystem)
IGS provides an up-to-date information database with regard to TD and signalling information. This is
used to provide information to other external systems e.g. Customer Information System, in a defined
manner.
(c) TTP (Timetable Processor)
TTP is responsible for transmitting an electronic copy of the timetable to the subsystems which require
it, such as ARS, IGS and SIM. For this reason, ARS is also connected to the information networks as
well as the signalling networks.
(d) FBS (Fringe Box Subsystem)
FBS provides the manual TD input interface to the IECC from a Fringe Box or Gate Box.

2.2.3 Subsystems Connected to Both Networks

Some subsystems are connected to both Signalling and Information networks, including:
(a) GWS (Gateway Subsystem)
GWS records events as they occur on the Signalling networks and responds to enquiries from
subsystems on the Information networks, without delaying the operation of the signalling subsystems.
(b) RII (Relay Interlocking Interface Subsystem)
RII connects the RRIs to the IECC via the Signalling networks but is controlled through the Information
networks.
(c) SIM (Simulator Subsystem)
SIM provides a means to fully test IECC software and data. It can also be used for operator training. It
can receive data from the TTP via the Information network and translate this into the format required by
the FAT (Fully Automatic Train) controller. Trains will be created according to this data and move
around the simulated area. They may also be created manually. It is also possible to simulate the failure
of both trains and trackside equipment.
(d) ISM (IECC System Monitor Subsystem)

3
IECC REFERENCE HANDBOOK SAO-IEC-HF-10 Issue 6
IECC 7000 INTRODUCTION AND SYSTEM STRUCTURE

ISM allows the technician to investigate error and failure conditions on both signalling and information
subsystems. Diagnostic information is also provided.
ARS is considered to be a Signalling networks subsystem (see section2.2.1) but is also connected to the
Information networks for direct communication with TTP.

2.2.4 TDS (Testing Display Subsystem)

TDS is, essentially, an SDS with only one computer unit. It has a keyboard and trackerball, and usually 2
monitors. It is used to test stage work data and post-commissioning data changes, for SSIs and DIS or SDS.
The major components are self-contained, so that the TDS is portable. The TDS runs on an independent network,
with, typically, several SSIs. The TDS is not connected to the operational Signalling or Information networks.

2.2.5 TRW (Training Workstation)

TRW is made up of a number of single computer unit subsystems (ARS, DIS or SDS, GWS and SIM with
optionally ISM and/or TTP). This can be made to look exactly like an operational IECC system and as such, is
used for signaller training.

2.3 SUBSYSTEM DUPLICATION

Subsystems which are essential for the running of the IECC are duplicated. The two computer units for the
subsystem operate in a Master/Standby arrangement so that the Standby can take over should the Master fail.
The software responsible for co-ordinating the Master and Standby units in a duplicated subsystem is available to
each computer unit. On the Master, it allows the computer unit to carry out the functions of the subsystem. On the
Standby unit, it monitors the Master, ready to take over should a failure occur.
A ‘changeover’ between Master and Standby can take place manually or automatically. Automatic changeover
takes place when the Standby computer unit detects a failure in the Master computer unit. The TTP can only be
changed over manually.
Generally, ARS, DIS, GWS, IGS, ISM, SDS, PCS, ECS, RII, RDF and TTP are all duplicated.

2.4 COMMUNICATIONS OVER THE NETWORKS

Each subsystem is connected to the networks via a number of nodes (see section2.6.1). Every network node is
given a unique name which identifies the subsystem to which it is connected. When sending a message, a
subsystem specifies the node name of the receiving subsystem.
Both the Signalling and Information networks are duplicated. Subsystems send messages first on one network of a
pair and then on the other, alternating each time they transmit. If one network link between two subsystems
breaks, messages continue over the undamaged network.
Subsystems connected to the Signalling networks communicate with each other via those networks. If a subsystem
on the Signalling networks needs to communicate with a subsystem on the Information networks, it sends the
message via the Gateway subsystem. Subsystems on the Information networks communicate with each other, and
with those on the Signalling networks, in a similar way.
Some subsystems (GWS, ISM, RII, SIM and ARS) are connected to both Signalling and Information Networks.
In the case of the GWS, ISM and ARS, the connections to the Information networks are similar to those to the
Signalling networks except that the processing that keeps the Master and Standby computer units in step is not
present. The RII and SIM are controlled through the Information network only, but communicate signalling
information directly to the signalling network as though they were an SSI.

4
IECC REFERENCE HANDBOOK SAO-IEC-HF-10 Issue 6
IECC 7000 INTRODUCTION AND SYSTEM STRUCTURE

2.5 REMOTE CONTROL AND MONITORING

The ISM technician’s terminal provides status information on all subsystems connected to the Signalling or
Information networks. However, it cannot carry out full diagnostics unless RCM, the Remote Control and
Monitoring software is installed on the “to be interrogated” subsystem. A subsystem which provides RCM is said
to be “fully responding”. IECC subsystems that are connected to the Signalling and Information networks are
usually fully responding.
SIM however appears on the Signalling network exactly the same as an SSI, i.e. as a partly responding subsystem.
Therefore ISM has the same facilities for monitoring SIM on the Signalling network as it does for an SSI. On the
Information network however it appears as a non-responding system so no information will be available at the
ISM. This is necessary because otherwise the IECC will show a fault when the simulator is removed (the normal
situation). It should be noted that SIM can also be set up as a fully responding subsystem is required.
Since RII also appears on the Signalling network as an SSI, ISM has the same facilities for monitoring RII as for
SIM and SSI. However since RII is normally connected to the IECC it appears on the Information network as a
fully responding subsystem.

2.6 IECC CONFIGURATION LIMITATIONS

2.6.1 Networks
An IECC contains four Superlink networks, two as Signalling networks and two as Information networks (see
section 2.2). Each Superlink network consists of a number of fixed sockets, called wallboxes, which are connected
together in a loop (‘ring’).
The connection between an IECC computer unit and a wallbox is made via a node. Two types of node are used,
stand alone box nodes and rack mounted nodes. A stand alone box node connects a single computer unit to a
wallbox. All new IECCs use rack mounted nodes which enable up to 16 computer units to be connected to the
network via two wallboxes (up to 8 computer unit connections per wallbox).
The maximum distance between computer units on the networks is determined by the nodes and the powered on/off
status of the nodes, not by the distance between wallboxes. The length of cable between a powered on node (a
powered on stand alone box node or a powered on rack) and the next powered on node must not exceed 250m,
including the lengths of the cables between the nodes and wallboxes. In practice, the limit is only of concern for
Signalling networks with DIS or SDS signalling display subsystems. In these instances, the Signalling networks
cables run long distances, between the equipment room and the control room, to connect to the DISs or SDSs in
the Signaller’s Workstations.
An SSI requires 2 nodes. A duplicated IECC subsystem which is connected to one network requires 4 nodes. (For
example, SDS requires connections from each of the SDS computer units to each of the Signalling networks.) A
duplicated IECC subsystem that is connected to both networks usually requires 8 nodes, 4 nodes on each network.
The exception is RII which, although duplicated and connected to both networks, appears as one or more SSIs on
the Signalling networks. The total number of nodes associated with an RII is 4 for connections to the Information
networks plus 2 for each pseudo SSI.
The capacity of each network is 20 subsystems. The Signalling networks will never be fully loaded as the number
of subsystems is limited to 3 signalling display subsystems (which can be all DISs, all SDSs, a combination of
DISs and SDSs, or all RDFs), 1 ARS, 1 GWS, 1 ISM and 12 SSIs, i.e 18 in total.

2.6.2 Adjacent IECCs

Adjacent IECCs communicate as Adjacent Signal Boxes via PCS or ECS.

2.6.3 Network Model

At intervals, each subsystem on the Signalling networks (except ISM), requests details of any changes from each
interlocking. The interval between requests is set to between 0.5 and 1.5 seconds. This is known as the “SSI

5
IECC REFERENCE HANDBOOK SAO-IEC-HF-10 Issue 6
IECC 7000 INTRODUCTION AND SYSTEM STRUCTURE

polling rate”. The greater the number of changes per interlocking per second and the greater the number of
interlockings with which a subsystem communicates, the greater its polling rate must be.
A suggested IECC configuration can be checked using the “Network Model”. This determines how busy the
Signalling networks will be, with a given number of steps and changes per second. The Network Model is
maintained by AEA Technology.

2.6.4 Subsystems
An IECC generally can consist of:
• between 1 and 12 interlockings (RRIs via an IFP or RII), up to 6 per DIS, SDS or RDF;
• 1 ARS;
• between 1 and 3 signalling display subsystems (DISs, SDSs, a combination of DISs and SDSs, or RDFs);
• 1 ECS driving up to 28 communications channels or 1 PCS driving up to 16 DPCs;
• between 1 and 16 FBSs;
• 1 GWS;
• 1 IGS;
• 1 ISM;
• between 1 and 8 RIIs;
• 1 TDS;
• 1 TRW, consisting of a SIM and a non duplicated ARS, DIS or SDS, GWS and optionally a non
duplicated ISM and/or TTP;
• 1 TTP.
The smallest configuration possible consists of a single interlocking and a DIS or SDS, on the Signalling
networks.
Further details about the function and configuration of each subsystem is given in IECC 7001.

2.6.5 IECC Wide Limitations

An IECC monitors up to 1536 TD berths. Some of these may be controlled by Adjacent Signal Boxes rather than
by the IECC. Of 1536 TD berths, up to 32 are Early Transmission Berths (ETBs).
The IECC holds up to 32 TD maps. The static part of a TD map shows track circuits. On this, TD berths,
signals, routes, flags, subsystem status or remote link status can be displayed. Each of these consist of 1 or more
TD map items. In most cases, a TD map item is a single character, however a berth requires only one item. The
maximum number of dynamic TD map items on each map is 512.
IECC-wide naming restrictions are:
• a subsystem identity is up to 2 characters long;
• a signalling item name is up to 8 characters long;
• a berth name is up to 4 characters long;
• a train description is up to 4 characters long internally, but can be up to 6 characters long externally i.e.
to/from remote systems;
• a TD map name is up to 4 characters long;
• an area name is up to 4 characters long; and

6
IECC REFERENCE HANDBOOK SAO-IEC-HF-10 Issue 6
IECC 7000 INTRODUCTION AND SYSTEM STRUCTURE

• a contingency plan name is up to 2 characters long.

Details of the limits specific to each subsystem are given in document IECC 7001.

7
 SIM

up to 3 1 to 12 Simulated SSIs To Information

SDS SDS TTP
Systems
or

ARS
RMT
IECC REFERENCE HANDBOOK

SIGNALLING
INFORMATION
RDF Networks GWS ECS
Networks
Networks or PCS
up to 3
RMT
ISM
IECC 7000 INTRODUCTION AND SYSTEM STRUCTURE

To Adjacent
Train Describers
SSI SSI FB FB
up to 12
up to 16
RII

N.B. Each pseudo SSI within the RII

counts as one of the maximum of 12.

Figure 7000-2A IECC Subsystems

SAO-IEC-HF-10 Issue 6