Apparatus and method for implementing safe visual information provision

The invention to which the present application relates is a device and method capable of providing information indicating the operation and / or condition or condition of a system to one or more users and selecting and generating information in a way that eliminates or at least reduces the risk of a potentially catastrophic error if for example, information is damaged or lost during subsequent transmission, remote processing and / or display.

[0002] Visual representation of information is well known. In certain applications, such as, for example, rail-side signaling, the visual information provided is the basic means by which the driver of the rail vehicle can decide if further driving is or is not safe. Therefore, it is necessary to present such visual information in a reliable manner to avoid the occurrence of potentially catastrophic errors.

[0003] The information is generally provided in a manner in which a mechanically or electrically operating element is used to change the state of the information display. Typically, mechanical or electrical operation is possible only when a predetermined event or signal is detected, which then allows the state to be changed. Although this form of the system has been used for many years, it has several disadvantages, among which the cost of maintaining the device plays an important role. However, so far this form of the system is considered necessary to meet stringent safety requirements.

[0004] The application WO 02/064414 A1 discloses a method intended to control the movement of a plurality of vehicles on a roadway divided into a plurality of runway blocks. The method uses a control system comprising an on-board computer (OBC) located on the deck of each vehicle, at least one server for communication with on-board computers and a vehicle location tracking system. The method includes the steps of determining the complex state of the blocks for all runway blocks, transmitting the composite block state to the onboard computers, and controlling the movement of each vehicle on the

Based on the complex state of the blocks.

The object of the present invention is to provide an apparatus and method for providing information in a reliable manner and thereby fulfilling, usually exceeding safety requirements, while providing a system that is more efficient, more user friendly and more economical to install and maintain.

In a first aspect of the invention there is provided a device for providing at least a first set of information, said device comprising a control means and at least one displaying means, said controlling means being located in a location geographically distant from the displaying means, displaying the means being able to move with a communication means is provided between said monitoring means and the display means to enable data transmission between these means, said data being transmitted to the display means sufficient to allow a display image to be generated corresponding to the information shown to the viewer looking at the displaying center,wherein the further controlling means has information about the geographic location of the display means at the moment of displaying the image, and the data transmitted to the displaying means depend on said geographical location at a given time, characterized in that data transmitted to the displaying means is encrypted and the decryption of the data by the displaying the measure is only possible if the detected geographical location and the local time and date in the displaying center are consistent with the values ​​for which display and use of the data to be displayed is required.that data transmitted to the display center is encrypted, and decrypting data by the displaying center is possible only if the detected geographical location and the local time and date in the displaying center are consistent with the values ​​for which display and use of the data to be displayed is required.that data transmitted to the display center is encrypted, and decrypting data by the displaying center is possible only if the detected geographical location and the local time and date in the displaying center are consistent with the values ​​for which display and use of the data to be displayed is required.

[0007] In one embodiment, a known geographic location is within a predetermined area or alternatively is a precise location.

[0008] In one embodiment, the data is transmitted from the displaying means and / or another source to the controlling means that allows defining the geographic location of the displaying means. IN

In one embodiment, said data is GPS data and / or Inertial Navigation Unit (INU) and / or data indicating the occurrence of a specific event, such as, for example, an indicator of reaching and / or moving beyond a known location. In one embodiment, the indicator is a mark or other detectable device whose presence can be detected when traveling at a fixed distance.

[0009] Usually, the displaying means is provided inside an above-ground vehicle, such as a train, a car, a bus or the like, or a ground-laying aircraft.

[0010] In one embodiment, the transmitted data is encrypted with a key containing an identifier for a specific displaying means and / or vehicle in which the displaying medium is transported so that data can be used to generate the displayed image only in the specific display center for which they are intended. .

[0011] In one embodiment, the displayed image is generated only from data transmitted to the controlling means.

[0012] In one embodiment, in addition to the displaying means, an auditory means for use in conjunction with the displaying means is provided. In one embodiment, an audible means for generating an alert is provided.

[0013] In one embodiment, the transmitted data comprises a second set of information that can be read at the display location location, such that the display- ing center represents a first set of information and a second set of information that is evaluated in conjunction with the first set. In one embodiment, the displayed image generated from the first set of information may be generated and / or used as a basis for action and / or stored only when the criteria of the second set of information are met. Typically, the second set of information is evaluated at the location displaying the measure and typically involves ensuring that the display of the second set of information meets predetermined criteria.

[0014] In one embodiment, the second set of information refers to the time interval in which the displayed image should be generated, and

EP 2 435 285 B1 can be provided in the form of a built-in, suitable for a machine readout, timestamp for the generated displayed image. This eliminates the possibility of further displaying a potentially erroneous image on the display screen, because if the system is working correctly, the displayed image should always be turned off and replaced before the expiry of the validity period, and if it does not occur, an alarm can be generated. Additionally or alternatively, the second set of information may include a built-in machine-readable indication of a target display color for a predetermined area of ​​the displayed image. Additionally or alternatively, the second set of information may include a geographic location that is suitable for machine readout, where the current image should be displayed, and optionally an indication of the geographical location in which this image should be replaced with the new image. Again, if it is detected that the geographic location of the display center has gone beyond its geographic validity limits, then an alarm may be generated. Thus, the device can generate an image of time sensitive information and / or color and / or geographic location in a reliable manner.

[0015] In one embodiment, the second set of information is included in the bar code that is presented in the displayed image and can be read at the display location of the means by means of a bar code reader to recognize the required information and then to compare it with real time and / or geographic the location and / or color of the image at any given time. Typically, the comparison is then repeated at specific intervals or is carried out continuously until the time or location parameters are violated or the display image is changed.

[0016] Typically, data transmitted to the display means is encrypted by means of a corresponding encryption method.

[0017] In one embodiment, the displaying center may generate an additional displayed picture or a displayed icon that can be selectively generated after the occurrence of a predetermined event.

EP 2 435 285 B1

Typically, an additional displayed image or display icon is generated locally for the displaying measure, such as partially overlapping the first set of information in response to reaching or exceeding a specific time or geographical location.

[0018] In one embodiment, an apparatus is shown for use with a railway system in which the displaying center is located in the driver's cab of the railway vehicle, and the controlling agent is usually provided in the same location as the current rail control centers that control the movement of the trains. According to the invention, the need to provide mechanical or electric track-side signaling devices and infrastructure for them can be eliminated because the signals and information transmitted by these beacons are "virtually" reproduced in the displaying center within the train. As the geographical location of the train and the time of train movement can be identified, feedback information necessary for the controlling agent and the train driver is still provided,

[0019] Other possible applications of the device according to the invention are to provide a display means for use in connection with any displayed information or any combination of displayed information from road information, public information, emergency signs, display of medical information such as patient results, scans or the like. displaying information for persons traveling by plane, such as information on e-tickets and electronic boarding passes, resistant to display failures via an internet browser and / or projection or video displays of the kind for displaying the image on the wall and / or fail-safe display of centrally generated maps images.

[0020] In a further aspect of the invention there is provided a method of generating information display, said method comprising the steps of: recognizing the geographic location of the displaying center on which the displayed image is to be generated, and the time at which it is to be generated

The image to be displayed, displaying the center, is intended to be moved with the vehicle, recognizing, in the controlling medium, a display image that must be generated for said recognized geographical location and time, said controlling means located in a location geographically distant from the displaying a means for transmitting the first data set to the display means to enable said display image to be generated and wherein the second data set is generated and transmitted, said second data set including at least one reference parameter for determining whether said displayed image is to be or not be displayed, characterized in that the data transmitted to the display means for display are encrypted,and decrypting data by the displaying center is possible only if the detected geographical location and the local time and date in the displaying center are consistent with the values ​​for which display and use of displayed data is required.

[0021] In one embodiment, the parameters include a geographical location and / or color code and / or time.

[0022] In one embodiment, if an established display image should no longer be displayed but is still displayed on the screen, an alarm is generated. In one embodiment, the alarm may prevent further driving of the vehicle in which the displaying center is placed.

[0023] In one embodiment, the transmitted data is encrypted with a key containing an identifier for a specific display means, such that only a specific display means can decrypt the data.

[0024] In one embodiment, the second set of information is generated by the control means as a bar code embedded in the picture corresponding to the first set of information and displayed in the displaying medium, said bar code may be read by the device in the display means to provide a read-out of the validity period and / or geographical information. Typically, the information obtained by the bar code is compared to the real time of the clock or

EP 2 435 285 B1

GPS / INU which indicates the current time and / or geographical location of the displaying measure.

[0025] In one embodiment, the second set of information typically displayed as a bar code is amplified by one or more flashing or dynamically color coded graphic cursors added locally by the displaying center next to the bar code section of the display. Considering that the bar code reader element in the displaying center is similarly amplified in order to be able to read the displayed cursor (cursors) and determine their color, you can quickly and permanently confirm both timeliness and / or color for the operation of the local display and the associated processing without having to wait for the displayed image to expire.

[0026] The scope of the present invention is defined in the appended claims.

The following is a specific embodiment of the invention with reference to the attached drawings, of which:

Fig. 1 schematically shows a system in accordance with one embodiment of the invention;

Fig. 2 shows a screen display according to one embodiment of the invention;

Figs. 3a-f show sequential displayed images that can be selectively created in accordance with one embodiment of the invention; and Figure 4 shows a railway network in which the system may be used in accordance with one embodiment of the invention.

[0028] First, with reference to Fig. 1, a system according to the invention is schematically shown. Fig. 1 shows the center display 4. The center is located inside the vehicle 2, which can have any form for movement on roads, tracks and the like. The vehicle includes a display medium 4. The display medium contains a screen display 6 that can be viewed by the vehicle operator who can take appropriate action based on the displayed

EP 2 435 285 B1. A control center 8 is also shown, which is located in a location geographically distant from the vehicle 2. The display means and control means are, however, connected by wireless communication 10, which makes it possible to transmit data between them. It should be noted that the controlling agent 8 usually communicates with a plurality of display means at any time, and that each displaying center has a unique network address and a unique set of scrambling keys, so that encrypted data transmitted to the address of a specific display means can be specifically read only by the respective means. , the correct displaying center.

[0029] According to the invention, the aim is to provide a display image on a displaying center, which image may be used to convey information to one or more recipients in a reliable manner, which eliminates the recipient's ability to take action based on incorrect information in time and / or the location where it is viewed.

[0030] In Fig. 1, the controlling means 8 has information about the geographic location of displaying means 4, usually due to data transmitted back from the displaying means 4 to the controlling means 8. The controlling medium also has information about the specific time and with respect to these parameters and possibly to other external instructions and conditions may determine the first set of information that must be displayed on screen 6 displaying the measure at a given moment or for a short time ahead. The data for generating a particular displayed image at the target display time is then transmitted from the controlling means to the displaying center 4 and are then decrypted and displayed to the recipient on the display screen 6.

Typically, the image data created in the controlling means for displaying the displaying center 4 on the display screen 6 is obtained by using raster scan techniques, which reduces the risk of easy damage to the correctly generated image and

To obtain a different, incorrect, but seemingly correct image.

[0032] In addition to the first set of information, a second set of information is also generated and transmitted. The scope and type of information depends on the operating conditions of the displaying agent, for example if it is in a fixed or moving location. However, in each case, a second set of information is provided to allow checking and as a reference to ensure that the generated image is displayed for only a limited time or in a specific location, thus eliminating the possibility of the display being jammed.

[0033] The invention is described below in one embodiment in which it is used in combination with a railway system for visual representation of signaling controlling the passage of a train within a railway system and notifying the train driver about it without the need for physical track signals and infrastructure for causing mechanical signaling and / or electrical lighting of the sirens.

[0034] Fig. 2 shows a picture type 12 that can be generated on the display screen 6 of the display means according to the invention. The displayed image includes the signal status indication 14: green for the "drive" command, yellow for the "drive carefully" command and red for the "stop" command. The signal icon 16 may also be generated, although it should be noted that it is generated more to meet the driver's expectations as to the appearance of the signal than for any practical requirement of the system. Also shown is ID 18 for a specific signal. Additionally, a validity time marker 20 is shown indicating the moment when the data and driving license associated with the displayed image cease to be valid. The scope of the permission to drive on tracks is indicated in field 22, and additional warnings or counseling for the train driver for the respective geographical location may be represented in field 24. Thus, the parts of the displayed image 12 provide all the required aspects of the first set of information that the driver requires in order to continue his train. Data is sent from the controlling party

The task of the display agent is limited to the proper decryption and processing of the data to generate the displayed image 12, and the driver has only to interpret the information presented to him.

The information displayed should be provided in a reliable manner in the sense that the occurrence of an error caused by the malfunction of the display means should be detectable at the location of the displaying means. To achieve this, a second set of information is also shown in the form of a displayed bar code 26 and a colored bar 27. The display means comprises means for interpreting and using information presented by a bar code and a colored bar.

[0036] In this application example, the bar code contains information regarding the subject signal color, the validity time to which the displayed image 12 remains valid, and the geographical location in which the displayed image 12 should be shown. The displaying center is equipped with a clock to compare the current time with the validity time coded within the displayed image 26. If the current time is later than the time indicated by the displayed image 26, this indicates an error, which may result in an alarm to avoid further use of the driver. from the displayed image 12. At the same time the displaying center can be equipped with a GPS and / or internal navigation system,

[0037] If the displaying center is not moving, the information shown in the displayed image 26 may only relate to the time of displaying the image.

[0038] Figs. 3a-f show a series of displayed images that can be generated for the signaled train path on a short track section within the track network shown in Fig. 4. Fig. 3a shows the displayed image "green entry signal" with green light " drive "shown on

The image is displayed in position 14 and on the signal icon 16, which image is generated and encrypted by the controlling means and transmitted to and decrypted and displayed by the displaying center at the beginning of the route for instructing the driver to travel to the location where the first The "signal" is the same as in the "Z" field of the displayed image of the driving license. After detecting that the train has traveled beyond this location, typically by detecting by the train the GPS / INU route point or RFID tag on the tracks and transmitting the data pointing back to the controlling medium, the displayed image 12 is locally changed by adding locally generated 30 "text He 'drove' to obtain the content indicated in Fig. 3b. If necessary, this scenario can then be repeated for subsequent intermediate "green drive signals" within the signaled route. After reaching the end of the route, which is determined by detecting the appropriate route point or RFID label code, the displayed image changes to a "yellow warning signal" shown in area 14 and by the signal icon 16 in Fig. 3c based on data taken at any earlier point. from the controlling agent. This signal indicates that the driver should now continue to drive with caution until the end of the route, specifically to the "red stop signal" CD11. When you reach and drive past the CD9 warning beacon, the displayed image is again reinforced locally using text 30 "Crossed" as shown in Fig. 3d. Just before the end of the tour, also based on the detection of a specific route point or RFID label code, the final set of encrypted image data from the controlling medium is decrypted to enable the final display of the red signal of the CD11 signator of FIG. 3e to be generated to indicate the end of the route. In an operationally disallowed case, when the driver does not stop at the red CD11 signaling device, the displaying means locally generates the alarm "STOP" 32 of Fig. 3f together with the audible alarm in the driver's cab, and an alarm report is sent to the controlling agent. It should also be remembered that in each case the rim 14 of each displayed image from Fig. 3a-e is the final set of encrypted image data from the controlling medium is decrypted to enable generation of a terminating displayed image of the "red exit signal" of the CD11 siren from FIG. 3e to indicate the arrival to the end of the route. In an operationally disallowed case, when the driver does not stop at the red CD11 signaling device, the displaying means locally generates the alarm "STOP" 32 of Fig. 3f together with the audible alarm in the driver's cab, and an alarm report is sent to the controlling agent. It should also be remembered that in each case the rim 14 of each displayed image from Fig. 3a-e is the final set of encrypted image data from the controlling medium is decrypted to enable generation of a terminating displayed image of the "red exit signal" of the CD11 siren from FIG. 3e to indicate the arrival to the end of the route. In an operationally disallowed case, when the driver does not stop at the red CD11 signaling device, the displaying means locally generates the alarm "STOP" 32 of Fig. 3f together with the audible alarm in the driver's cab, and an alarm report is sent to the controlling agent. It should also be remembered that in each case the rim 14 of each displayed image from Fig. 3a-e is when the driver does not stop at the red CD11 signaling device, the display center locally generates the "STOP" alarm 32 of Fig. 3f together with the audible alarm in the driver's cab of the vehicle, and an alarm report is sent to the controlling center. It should also be remembered that in each case the rim 14 of each displayed image from Fig. 3a-e is when the driver does not stop at the red CD11 signaling device, the display center locally generates the "STOP" alarm 32 of Fig. 3f together with the audible alarm in the driver's cab of the vehicle, and an alarm report is sent to the controlling center. It should also be remembered that in each case the rim 14 of each displayed image from Fig. 3a-e is

The target color of the signal is repeated both in the "light of the beacon" from the signal icon 16 and at the periphery of the image, as well as in the vicinity of the bar code section of the image.

[0039] In each case except the "STOP" alarm of Fig. 3f, the displaying means generates a displayed image 26 for the second reference information set, which is displayed on the display screen of the measure, as shown, to ensure that after exceeding the pre-set no "signal" image is displayed.

[0040] Fig. 4 shows a railway signaling system according to the invention for use on a relatively small train rail system. A highlighted series of route points 28 is provided for the location of signals or actions, which points correspond to setting a particular signaled route within the system between the initial point of the route in the depot, which corresponds to the displayed image of Fig. 3a and the route point

Cresswell Ford corresponding to the target section 36 of Figs. 3a-e. Typically, the controlling system generates data to be transmitted to the train as it travels over the rail route, which data is generated for each route point 28 when the train passes by them, so that the driver is continuously informed about the current driving license range in within the controlled railway area until reaching the goal 36. Thus, it is appreciated that the pair of displayed pictures "drive" of Figs. 3a and 3b can be repeated for each respective pair of intermediate waypoints reached and traversed by the train on the route to the destination 36, and that control points and corresponding displayed images are generated as each route point is reached, detected and passed along the route.

[0041] Thus, a system is provided that provides an efficient and reliable display of information that depends on the time and / or color and / or geographic location in a reliable manner.

EP 2 435 285 B1