Process for Data Transfer With Increased Security Against Construction Member Error

The invention concerns a process for data transfer with increased security against errors due to imperfections or failure of system components and finds application in remote control techniques, for example, radio-telecontrol fo locomotives.

Processes for monitoring defective construction elements are known. For example, in a configuration of a data working element a binary signal is used to modulate an alternating current signal. The binary signal zero means no voltage and the binary signal 1 the existing alternating current. This is only possible by a charge of alternating current amplification. So it is, for example, that the Siemans firm developed URTL, which is so charged as not to allow construction errors to lead to a dangerous working condition. The URTL (Monitorable (=Ueberwachbare)--Resistor--Transistor--Logic) process is one of the available error-secure switching network systems. Error security is attained such that the building unit will be built two-channelled and controlled. Both channels are related to each other by antivalent timing signals, wherein one monitor signal is injected with another key relation. The monitor signal is then evaluated by a monitor amplifier. The process works with a timed direct current impulse. The process has widespread use. For small scale operations, however, the process becomes too costly.

Another known technique employs a monitor switch (see German DT-OS No. 2,459,068) having a magnet circuit with different windings. The equivalence between two windings determines whether the output will develop a signal or not. A supplemental supervisory circuit B2 is in this way foreseen and the defective condition is thereby recognizable. However, the limited input possibility is disadvantageous.

A demonstration example according to the invention process will be brought out clearer by the following detailed description and drawing in which there is shown a block diagram of a system embodying the principles of the present invention.

With the pilotless operation of locomotives by means of radio-telecontrol the individual operations are observed by the loading and unloading of a required person and the regulated operating sequence engaged. For simplification only the operation of the start of the locomotive by an ON-OFF switch will be shown in the demonstration example. Further necessary commands could be the constant performance of braking, emergency braking, horn blowing, radio transmission, forward coupling, rear coupling, forward movement, backward movement, etc. According to the illustrated example occurring binary connections are described in the drawing near the respective construction element.

On the side of the radio transmitter there is a contact 1 for receiving orders. Particularly for safeguarding data two channels may be employed, if desired.

One of the input leads is guided to a secure reference signal. In the drawing, for example, the ZERO signal is being used. The supplementary input reference signal is an essential ingredient of the process. Without this reference signal a transmission with increased security according to the suggested process is not possible.

All input leads are each led to an "Exclusive-OR" array 2. The second input of the Exclusive-OR circuit will be acted upon with a signal, which changes its condition after every complete exit of the contents of all of the stages of the shift register 3. The shift register 3 converts the parallel data to a serial (binary) sequence. Shifting pulses T.sub.akt are generated by a continuous pulse source 14 (which may be a clock source) and are applied to both shift register 3 and a counter 15. Counter 15 is in cremented by one count upon the receipt of each shifting pulse. Selected outputs of the counter 15 are coupled to inputs of binary-decimal decoder 16 which generates a trigger pulse each time the counter reaches a predetermined valve. The trigger pulses generated by decoder 16 are applied to input 17a of bistable flip-flop 17. Each time a trigger pulse is applied to input 17a, the output level at 17b changes state. For example, if it is assumed that shift register 3 has three stages, counter 15 is adapted to count to a binary count of at least 11 (i.e. decimal "3"). Decoder 16 is adapted to develop a trigger pulse only at the binary count 11. This pulse is applied to the input of flip-flop 17 and to the reset input 15b of counter 15 to respectively change the binary output level at 17b and to reset counter 15 to zero. Thus, each time the contents of all of the stages of register 3 are shifted out, the binary level, applied to all inputs of circuit 2 from 17b, is reversed. To assure proper synchronism between and among the circuits, a start button 18 is provided. By depressing (i.e. "closing") the start button a "prime" signal is applied to the clear input 15a of counter 15, the clear input 3a of register 3, and; to the reset input 17 c of flip-flop 17. The prime signal is also applied to input 14c of pulse generator 14 to temporarily disable the pulse generator until the above mentioned circuits are "primed", thus assuring proper synchronism of the transmitter circuitry.

In an advantageous way, and in accordance with the circuitry described hereinabove, this binary sequence is completed to a total message by a synchronized signal. Between the input 1 and shifting register 3 of the Exclusive-OR circuit 2 there is an inversion of the input signals applied to the shift register 3 after every complete message. With the contact position shown, a 000/111/000 binary sequence will also be generated. A FSK (frequency shift keying) signal modulator 4 is connected to the output stage of the shift register 3. The FSK signal modulator generates an FSK signal in accordance with the digital signal shifted out of shift register 3. A HF modulator 5 modulates and amplifies the signals from modulator 4. The signals are then transmitted to the receiving station.

At the transmitting station for example, between shift register 3 and FSK modulator 4, it may be preferable to utilize a further coding arrangement for increasing the security of the system. Such a coding system is optional and is not shown in the drawing for purposes of simplicity.

On the receiving side (located in the locomotive), the data is demodulated by the HF- receiver sub-assembly 6, is converted by the FSK sub-assembly 7 to the appropriate binary signals and fed serially into the shift register 8.

The shift register 8 has three output terminals. Depending on the signals on the transmitter side, three sets of signals 000/111/000 could be sequentially transcribed on the outputs of the stages of shift register 8. The two outside terminals of the shift register 8 are applied to the amplifiers 9 and 10. The middle terminal of the shift register 8 has been left unconnected as shown in the drawing. Its output signal will, however, be further utilized in the same way as the output signal of the above mentioned outputs of the shifting register 8.

The outputs of both amplifiers 9 and 10 lead to the respective end terminals of the primary side of a transformer 11. The secondary winding of the transformer is coupled to a rectifier bridge 12, whose output is coupled across relay 13. The transformer 11 has a magnetic core having a magnetic property characterized by a right-angle hysteresis curve with high remanence.

When the binary "0" signal is generated by both outputs of the amplifiers 9, 10, and applied to the primary winding of the transformer 11, no current flows; the transformer remains in the remanence and carries over no signal on the secondary side. By known synchronizing techniques the start bit of each complete message (consisting of three binary bits in the present example) may be employed to set a counter 19 to zero. A local pulse generator at the receiver facility then applies pulses to increment counter 19 in synchronism with the transmission rate and hence in synchronism with the pulse generator 14 provided at the transmitter facility. Decimal decoder 20 (similar to decoder 16) provides an enabling signal which resets counter 19 each time a count of three is accumulated. The enabling signal is also applied to amplifiers 9 and 10 together with the outputs of register 8 (either directly or through suitable logic gates), to enable the amplifiers 9 and 10 only when register 8 is loaded with a complete message.

When the inverted signal (inverted by the Exclusive OR circuit 2,) is received at the receiver, a binary 1 signal appears at the outputs of both amplifiers 9 and 10 (creating no voltage drop across the primary winding), and no current can again flow. At the output (secondary) of the transformer no current can flow and the relay remains deenergized.

When switch 1 at the input of the transmitter system is closed it indicates that, an order should be given to the locomotive. The relay 13 at the receiver facility must respond to this signal. On the transmitter side a change of the transmitted binary sequence is caused by the closed switch 1. The altered binary sequence causes a differential potential on the primary side of the transformer 1 specifically a binary "1" appears at one end of the transfer primary and a binary "0" appears at the other end.

The magnetic core is continually magnetized and demagnetized and develops an alternating current on the secondary side of the transformer, which is converted in the rectifier 12 to an energizing voltage for the relay 13.

By the alternating transformation from the true to the inverted messages and separate subsequent treatment, a high security against the failure of a system component in the transmittal distance is achieved.

In the event of a system component failure the magnetic core assumes a polarity only by impulse. It is saturated in a very short time interval and can then no longer emit an output signal of a dangerous working condition.