Method for managing vital train movements
A method for communicating safety critical train authorization under the conditions of limited communications capability is disclosed.
1. A method for controlling vital train movement of a train from a central server that is not onboard the train, the method comprising:
partitioning, by the server, a full movement authority for the train into a plurality of partial movement authorities, wherein each partial movement authority is a subset of the full movement authority;
transmitting by the server directly to the train, at a first time, at least one but not all of the partial movement authorities; and
transmitting by the server directly to the train, at a second time, at least one of the partial movement authorities that were not sent at the first time.
2. The method of claim 1 wherein the partial movement authorities are transmitted via a plurality of health monitoring messages.
3. The method of claim 1 further comprising truncating the full movement authority by not transmitting all of the partial movement authorities to the train.
4. The method of claim 3 wherein when direct communication between the train and the server is lost and at least one partial movement authority is not received by the train, the train operates under pre-existing railroad-specific rules, and not under the truncated full movement authority.
5. The method of claim 1 further comprising:
transmitting by the server directly to the train the expected full movement authority, prior to the first time, via a first communication channel.
6. The method of claim 5 , wherein at least one of (i) the transmitting to the train at the first time and (ii) the transmitting to the train at the second time is via a second communication channel that has a lower bandwidth than the first communication channel.
7. The method of claim 5 wherein at least one of (i) the transmitting to the train at the first time and (ii) the transmitting to the train at the second time is via a second communication channel that has a higher latency than the first communication channel.
8. The method of claim 1 wherein at least one of (i) the transmitting to the train at the first time and (ii) the transmitting to the train at the second time is at a lower bandwidth than when transmitting the expected full movement authority.
9. The method of claim 1 wherein at least one of (i) the transmitting to the train at the first time and (ii) the transmitting to the train at the second time has a higher latency than when transmitting the expected full movement authority.
10. A method for controlling vital train movement of a train from a central server that is not onboard the train, the method comprising:
receiving, by the train directly from the server, at a first time, a full movement authority;
receiving, by the train directly from the server, at a second time, one of a plurality of partial movement authorities, wherein each partial movement authority in the plurality is a subset of the full movement authority; and
receiving, by the train directly from the server, at a third time, at least one of the plurality of partial movement authorities that were not received at the second time.
11. The method of claim 10 wherein the first time is before the second time and also before the third time.
12. The method of claim 10 wherein the partial movement authorities are received via a plurality of health monitoring messages directly from the server.
13. The method of claim 10 wherein when direct communication between the train and the server is lost and at least one partial movement authority is not received by the train, the train operates under pre-existing railroad-specific rules, and not under the full movement authority.
14. The method of claim 10 wherein at least one of (i) the receiving at the second time and (ii) the receiving at the third time is via a second communication channel that has a lower bandwidth than a first communication channel used for receiving at the first time.
15. The method of claim 10 wherein at least one of (i) the receiving at the second time and (ii) the receiving at the third time is via a second communication channel that has a higher latency than a first communication channel used for receiving at the first time.
16. The method of claim 10 wherein at least one of (i) the receiving at the second time and (ii) the receiving at the third time is via a lower bandwidth than the receiving at the first time.
17. The method of claim 10 wherein at least one of (i) the receiving at the second time and (ii) the receiving at the third time is with a higher latency than the receiving at the first time.
18. The method of claim 1 wherein a partial movement authority is an update to the corresponding information in the full movement authority.
19. The method of claim 10 wherein a partial movement authority is an update to the corresponding information in the full movement authority.
20. A method for controlling vital train movement of a train from a central server that is not onboard the train, the method comprising:
partitioning, by the server, a full movement authority for the train into a plurality of partial movement authorities, wherein each partial movement authority is a subset of the full movement authority;
transmitting, by the server directly to the train, at least one but not all of the partial movement authorities;
transmitting, by the server directly to the train, at least one of the partial movement authorities that were not sent at the first time; and
when an update to the full movement authority is to be transmitted to the train, transmitting the update, by the server directly to the train, via one or more partial movement authorities, and not by transmitting an updated full movement authority.