Method for identifying and verifying control software of a rail vehicle
A method identifies and verifies control software of a rail vehicle. In the method, the control software is formed by functions, with each function fulfilling an associated task. As a networked collective, the functions form the structure of the control program. A function-dependent checksum is generated for each function. A structure-dependent checksum is generated for the structure. A total checksum is generated for the control software from the function-dependent checksums and the structure-dependent checksum. The total checksum identifies and verifies the control software for homologation in a country.
1. A method for identifying and verifying control software of a rail vehicle, wherein the control software being formed by functions, wherein each function of the functions performs a task respectively assigned thereto, wherein the functions, in their interconnected entirety, form a structure of the control software, which comprises the steps of:
creating a function-dependent checksum for each of the functions resulting in a plurality of function-dependent checksums;
creating a structure-dependent checksum for the structure;
creating an overall checksum for the control software from the function-dependent checksums and from the structure-dependent checksum, wherein the overall checksum identifies and verifies the control software for authorization in a country; and
displaying to a rail vehicle driver a version number of the control software based on the overall checksum of the control software for monitoring purposes.
2. The method according to claim 1 , wherein:
in a case of unchanged functions and in the case of an unchanged structure of the control software, forming the overall checksum which indicates unchanged control software; and
in a case of a change to the control software for country-specific reasons, forming a country-specific function from a chosen unchanged function by changing the function and forming a country-specific overall checksum that differs from the overall checksum of the unchanged control software.
3. The method according to claim 2 , wherein:
in a case of the unchanged functions and the unchanged structure of the control software, forming the overall checksum which indicates the unchanged control software; and
in a case of a change to the structure of the control software for the country-specific reasons, forming a country-specific structure, and forming the country-specific overall checksum that differs from the overall checksum of the unchanged control software.
4. The method according to claim 3 , which further comprises:
activating and operating either the country-specific function or the unchanged function in the control software with an aid of a country identifier, in which, in a case of an activated country-specific function and in a case of the unchanged structure of the control software, the country-specific overall checksum of the control software is displayed for verification, wherein in a case of an activated unchanged function and in a case of the unchanged structure of the control software, the overall checksum of the unchanged control software is displayed for verification.
5. The method according to claim 4 , which further comprises selecting the country identifier on a basis of a rail network in which the rail vehicle is located or into which the rail vehicle is traveling.
6. The method according to claim 4 , which further comprises displaying the country identifier based on the overall checksum of the control software, to a rail vehicle driver for monitoring purposes.
7. The method according to claim 4 , wherein:
in the control software, a first function supplies both the unchanged function and the country-specific function, as downstream functions, with results;
two of the downstream functions ascertain respective results; and
the country identifier functions as a selection block, and only one of the results is transmitted to a further function.
8. The method according to claim 4 , wherein:
in the control software, using the country identifier, which acts on a selection block, a first function supplies either the unchanged function or the country-specific function, as downstream functions, with results;
one of the two downstream functions ascertains a respective result; and
an ascertained respective result is transmitted to a further function.
9. The method according to claim 1 , wherein:
when ascertaining the structure, points of intersection are detected in a signal profile of the control software; and
connections identified by way of the points of intersection are substituted in order then to calculate the checksum of the structure.