MIREL VZ1 Setup guide

©1999 -2019 154VZ1:190111
MAINTENANCE
AND
DIAGNOSTICS
MANUAL
MIREL VZ1
TrainProtectionSystem
v04

154VZ1:190111 2/ 33
Additionalsourcefiles:
No.File Page PagesDescription
1
2
3
Changes:
VersionDescription Approved
by
000515DocumentintroductionHorváth
001011Addendum1Horváth
040511Addendum2,ŽSRV04, SW2Horváth
060117Reformatting,addition of MÁVfunctionalityHorváth
061102ModificationsafterMÁV,ŽSRV06, SW3functional testsHorváth
070611Additionaloffunctionaltest(stepsB08,B09, C64)Horváth
070618Changeinlabellingandorderofstepsinthefunctional test,
C52 toB17
Horváth
071210ChangesfromŽSR, DtestoperationsHorváth
090110Changesaftercompletion ofŽSR, Dtest operations
Expansion of MÁV functionalitiesto160km.h-1
Horváth
090822ModificationsbeforeapprovalofV03 Horváth
110828ModificationsbeforeapprovalofV04 Horváth
141119ModificationsbeforeapprovalofV04–operational verificationHorváth
170624Modification of prophylacticcontrolconditionsofD4Michalec
180115Changingconditionsof assemblyanddisassemblyMichalec
190111 Completion andMaintenanceofDocumentinAccordancewithTechnical
Conditions Horváth

154VZ1:190111 3/ 33
Contents
1Purposeofthe Document................................................................................4
2GeneralCharacteristics...................................................................................5
3SystemConfiguration......................................................................................6
4CentralUnit.....................................................................................................7
5Signal Repeater...............................................................................................9
6SystemDiagnostics.......................................................................................10
6.1 D1–Start-up DiagnosticControl..............................................................................................11
6.2 D2–ContinuousDiagnosticControl........................................................................................15
6.3 D3–FunctionalTest.................................................................................................................19
6.4 D4–ProphylacticControl.........................................................................................................21
7SystemMaintenance.....................................................................................23
7.1 S1–Operational Repairs..........................................................................................................24
7.2 S2–MaintenanceRepairs........................................................................................................25
8Faults............................................................................................................26
9Monitored AxleDiameterConfiguration..........................................................30
10 Datareading fromrecording equipment.....................................................31
11 Installation and Disassembly.....................................................................32
12 Notes........................................................................................................33

154VZ1:190111 4/ 33
1PurposeoftheDocument
ThisMaintenanceand Diagnostics ManualfortheMIRELVZ1trainprotection system,ver-
sion v04,isbasedon theMaintenanceand Diagnostics ManualfortheMIRELVZ1train
protectionsystem 154-99-SW-4P-VZdated15 June2000.
Thefollowingaddenda havebeenincorporatedintothemanual:
1.Addendum1dated11 October2000 totheMaintenanceand Diagnostics Manualfor
theMIRELVZ1trainprotectionsystembasedon requirementsfortechnicalsecurityof
thesystem(addedinsections:D1–Start-up self-diagnosticcontrol,D2–Continuous
self-diagnosticcontrol,D4–Prophylacticcontrol,Faultindication).
2.Addendum2dated11 May2004 totheMaintenanceand Diagnostics Manualforthe
MIRELVZ1trainprotection systembasedon theapprovalofAddendum1totheTech-
nicalConditionsforSerialInstallationoftheMIRELVZ1TrainProtectionSystem(257-
00-TW-4P-VZ,5March2004).
3.IncorporationoffunctionalitiesbasedonEVMspecificationsdated17 January2006 on
thebasisoftheSetofFunctionalRequirementsforMÁV RtOn-boardTrainProtection
Systemsand VigilanceEquipment(738-06-TW-4P-VZ, 12January2006),theSpecifica-
tionofChangestotheMIRELVZ1TrainProtection System-integrationofMÁV Rt
functions(412-02-FW-4P-VZ,15 January2006)and Addendum2totheTechnical
ConditionsforSerialInstallation oftheMIRELVZ1TrainProtection System(257-00-
TW-4P-VZ, 16January2006).
4.Modification offunctionalitiesbasedon LSspecificationsaftercompletion of testopera-
tionsforprogramversion v03 andexpansion offunctionalitybasedon EVMspecifica-
tionsfortrackspeedsofupto160km.h-1 basedon theSetofFunctionalRequirements
forMÁV RtOn-boardTrainProtection Systemsand VigilanceEquipment(738VZ1:
081020).
5.Additionof functionalitiesbasedon SHPspecificationson the basisof theBasicSpeci-
ficationsandSHPTechnicalDescription(1054VZ1:120910)including theincorporation
ofcommentsfromoperations.
6.Completion andadjustmentofMaintenanceand DiagnosticsManualforMIRELVZ1
trainprotection inaccordancewithsystemtechnicalconditions(257VZ1:110610).Ad-
dition offunctionalitytosupportstand-byregimeand cooperation withETCS-typetrain
protectionsystems.
7.Completion andadjustmentofMaintenanceand DiagnosticsManualforMIRELVZ1
trainprotection inaccordancewithtechnicalconditionsofsystems(257VZ1:190121).
Completion ofprocedurefordatareading fromrecording device.Completionofdiag-
nosticsanderrorcodeswhenintegrating withMIRELSHPEdevice.

154VZ1:190111 5/ 33
2GeneralCharacteristics
TheMIRELVZ1trainprotection systemisthemobileunit of thetrainprotection system. It is
designedforlocomotivesoperating inCzechRepublic,Slovakia,Hungaryand Poland.The
systemiscompatiblewithLSand EVMtypetrack infrastructure.Thesystemcooperates
withETCSand SHPtypeon-boardtrainprotection systemequipment. MIRELVZ1isan
opensystemthatmaybeexpandedinthefuturetoaccommodatedifferent typesofsystems
usedtotransmittrackinformation tolocomotives.
TheMIRELVZ1trainprotection systemisspecificallydesignedtomonitorengineervigi-
lance,transmitinformation fromtrackinfrastructuretotheengineer'scab,check maximum
speedwithrespect tothemaximumdesignspeedofthelocomotiveandthespeedsetpoint
and receiveinformation fromtrackinfrastructure.Othersystemfunctionsmonitorforamatch
betweentheselectedand actualdirection oftravel,assessradiocommandstoremotely
stopthelocomotiveandcheck thebraking ofastoppedlocomotive.
AcompleteMIRELVZ1trainprotection systemincludesthecentralunit, twosignalrepeat-
ersatbothoftheengineer'scabsand twosignalhorns.Aserialcommunication linkcon-
nectsthecentralunittothesignalrepeaters.Itisalsopossibletooperateasinglesignal
repeaterdepending on therequiredconfiguration of thesystem.MIRELVZ1isconfigurable
forsingleand doublecab locomotives. Thesystemisconfigurableforlocomotivesthatmust
transmitinformation fromthetrack infrastructuretotheengineer'scab and forlocomotives
operatedon track withouttrainprotection systeminfrastructure.TheMIRELVZ1trainpro-
tectionsystemisoperableonelectricanddiesellocomotivesand incontrolcabrollingstock.
Thelocomotive'son-boardbatterysourceisusedtopowertheMIRELVZ1trainprotection
system.MIRELVZ1configuration isdependentupon batterysourcevoltage.Thetrainpro-
tectionsystemisoperatedand controlledexclusivelyfromthe engineer'scab usingthesig-
nalrepeaterand othercontrols,including dead man'sbuttonsand othercontrolson thelo-
comotive'scontrolpanel.Nointerferenceintothemechanicalspaceofthelocomotiveis
requiredtooperatetheMIRELVZ1trainprotectionsystem.
TheMIRELVZ1trainprotection systemisadigitalelectronicsystemdesignedspecifically
assecureequipment.Secureoperation isensuredbyapairofprocessorunits,agroup of
specialwatch-dog circuits,two-channeltransmissionof informationfromtrackinfrastructure,
and two-channelmeasurementsofspeed,travelleddistanceand directionoftravel.The
signalrepeatersarecomposedofredundantsingle-boardcomputersdesignedspecifically
forthisuse.Thecomponentsusedinthecentralunitmeetdemanding criteriaforreliability
and robustness.
TheMIRELVZ1trainprotection systemconductsstart-up and continuousself-diagnostic
controlsand supportsafunctionaltesttoensuretheproperfunction ofall partsoftheMIREL
VZ1trainprotection systemand cooperating functionalunits.Thesystemismaintenance-
free apartfromtheperformanceofthefunctionaltest and prophylacticcontrol.

154VZ1:190111 6/ 33
3SystemConfiguration
Completeconfiguration:
§Centralunit1
§Signalrepeater2
§Horn2
Required sub-assemblies:
§Dead man'sbuttonsand pedalsnumber/typegivenbytypeoflocomotive
§IncrementalRPMsensor1
§Mainbrakepipepressuresensor1
§Recordingequipment1
Optionalsub-assemblies:
§Trackinfrastructuresignalsensorsoptionalconfigurations:4, 2or0
§Speedometerdepending on typeoflocomotive
§ControlsystemorARRdepending on typeoflocomotive
§Radiodepending on typeoflocomotive
§SHPsystemdepending on typeoflocomotive
§ETCSsystemdepending on typeoflocomotive
Note: Systemcompositiondiagramisillustrative. Componentsof systemcompositioncan
havevariousdesignversions

154VZ1:190111 7/ 33
4Central Unit
Thecentralunitperformsthemajorityofthesafetyand operationalfunctionsoftheMIREL
VZ1trainprotection system.
§Filteringand decodingtransmittedinformationfromtrackinfrastructure
§Filteringand evaluationofthesignalfromtheincrementalRPMsensoron thelocomotive
(measuringspeedtravelleddistanceand directionoftravel)
§Calculationofsafetyalgorithms
§Monitoringpressureinthemainbrakeline
§Monitoring inputs(controlswitches, dead man'sbuttonsand pedals,drivecontrollers,the
directacting brake,directioncontrollers,tractionsystemswitch, etc.)
§Sending outputs(controllingtheEPVvalve,horns,blueandredindicators,etc.)
§Communicationwiththesignalrepeaters
§Systemdiagnostics
§Systemfunctionaltest
§Indicators
8LEDindicatorsareinstalledon thefrontpanelof thecentralunit.Nocontrolelementsare
locatedon thecentralunitand thereisno needfortheoperatortointerferewiththecentral
unit during operationof thetrainprotectionsystem.
Thecentralunit ispoweredfromthelocomotive'sbatterysource.Powerisprovidedthrough
aseparatecircuitbreakerdedicatedforthetrainprotection systeminstalledwithother
breakersforthelocomotiveorinanotherspecificlocation depending on thespecifictypeof
locomotive.Thereisno operating situation whereswitchingoff thesystem'spowerbreaker
isrequired.OtherMIRELVZ1trainprotection systemperipheralsarepoweredbythecentral
unit.
ThecentralunitinBOXTUXversion isconstructedwitha19"widthtocomplywiththeIEC
60297 standardforrack-mountedequipment.Thedesign heightisaUmodule=44.5mm.
Centralunitmodulesareinstalledinan ALenclosure.Indicatorsareinstalledon thefront
panel. A72-pinDD-typeindustrialconnectorisinstalledon the rearpanel.
Mechanicaldesign ofcentralunitinBOXTUGversion havemodulesofcentralunitlocated
inaseparateAL-boxand isavailableintwodifferent modifications,depending on assembly
orientation.Indication elementsarelocatedatfrontpanel,37-pinconnectorofDBtype,25--
pinconnectorofDBtype,15--pinconnectorofDBtypeand two10-pinindustrialconnectors
oftypeHummelM16.
StructuraldesignofcentralunitinBOXKOGhascentralunitmoduleslocatedinaseparate
AL-boxofmodularBOXKOG-typestructuralsystem,foreasydevicefitting instandard19”
caseswithheight3U..Indicationelementsarelocatedatfrontpanel,37-pinconnectorof
DBtype,25--pinconnectorofDBtype,15--pinconnectorofDBtypeand two10-pinindus-
trialconnectorsoftypeHummelM16.
Thecentralunitwilloperateinanyposition.Thecentralunitisinstalledinsidethelocomotive
basedon thespecifictypeoflocomotive.Access tothefrontpanelwithoutrequiring any
disassemblyissufficientforordinaryoperating conditionsand whenmaintenanceisre-
quired.

154VZ1:190111 8/ 33
§Indicationelementson central unitfrontpanel
Illustrativepicture
CLK ZJ1Indication of operation
MEM ZJ2Indication ofD1diagnostics
WD ZJ3Indication ofD2diagnostics
KZJ4Indication ofinformation transferfromlinepart
SPI ZJ5Indication ofcommunication onSPIbus
ST1 ZJ6Indication ofcommunication with1st drivercab
ST2 ZJ7Indication ofcommunication with2nd drivercab
ERR ZJ8Systemerror
Full designation ofindicatorsis OIZJ1through OIZJ8.InordertoachievetransparencyofOperating Manual,weshall presentabbreviated desig-
nation ZJ1through ZJ8.

154VZ1:190111 9/ 33
5Signal Repeater
Thesignalrepeaterdisplaysinformationsentthetrackinfrastructuretotheengineer'scab,
signalsthedetectedcarrierfrequency ofthesignalinthetrack-sidepartofthetrainprotec-
tionsystem,signalsactionstakenbythetrainprotection systemand displays maximum
speed. It isalsousedtoconfiguretheoperating parametersof thetrainprotectionsystemby
theoperator.
Theunitisconnectedtothecentralunitwithafourconductorcablethatpowersthesignal
repeaterand securesdatacommunication betweenthecentralunitandthesignalrepeater.
Thesignalrepeaterisinstalledinsideofastand-aloneAlenclosureorisacontrolpanel-
mounteddevice.4signalsigns,bluelight,4LEDindicators,athree-digitalphanumericdis-
playand three controlbuttonsareinstalledon thefront. Aflexiblecablingbundleisinstalled
on thebottomoftheAlenclosuremodeland thesignalrepeaterisinstalledon articulated
hingesthatmaybeadjustedtoanangleof -30° to+210°.The cablingbundleisinstalledon
therearof themodelinstalledinthecontrolpanel.Thesignalrepeaterisinstalledinaverti-
calposition.
Thecontrolswitchdeterminestheactivecabof thetrainprotection system.
§Indicatorsand controlson the frontpanel ofthe signal repeater
NO1
§yellowsignal signinPREworkingregime
§required brakelinepressurereduction in MEN
workingregime
NO2 redsignal sign
NO3 greensignal sign
NO4
§annulussignal signinPREworkingregime
§increasedspeedregimeinMENworking re-
gime
NO5 vigilancecheck
NO6lightintensitysensor
75
NO7 75 Hzcarrierfrequency
50
NO8 50 Hzcarrierfrequency
M
NO9 MANUAL/MÁV
NO10 §..reducedmaximumspeed
§..stopped indicator
NO11three-digitalphanumericdisplay
NO12 MINUSbutton
NO13 PLUSbutton
NO14 CONFIRMbutton
The full namesof the indicatorsareOI1NO1toOI1NO14 and OI2NO1toOI2NO14. Abbreviated labels NO1toNO14
areused inthe operating manualtomakeit easiertoread.Context makesclearthe distinctionsbetween signalre-
peatermodels.

154VZ1:190111 10 / 33
6SystemDiagnostics
FourlevelsofMIRELVZ1trainprotectionsystemdiagnostics
D1Start-updiagnosticcontrol
D2Continuousdiagnosticcontrol
D3Functional test
D4Prophylacticcontrol
Thefirst twolevels(D1and D2)areconductedautomaticallybythesystemitself. If afault is
detected,theoperatorisnotifiedofsuchfactand thesystemisplacedintosafemode.Ac-
tionsaretakentolockout thesystemifthediscoveredfaultpreventssubsequentoperation
ofthetrainprotection system.Systemoperationalrepairs(S1)mustbeconductedwhena
faultisdetected.
Afunctionaltest(D3)isconductedbytheoperator'strainedpersonnel.Thefunctionaltest
checks theoverall functionalityof thesystem, meaning thefunctionalityofallindicatorsand
keypads,thefunctionalityofallinputand outputcircuitsandcooperation withotherequip-
menton thelocomotive(including driving controls,EPV,incrementalRPMsensor,pressure
sensor,etc.).Systemoperationalrepairs(S1)mustbeconductedwhenafaultisdetected.
Prophylacticcontrol(D4)ofthesystemisperformedperiodicallybythemanufacturerofthe
trainprotection systemorbyothertrainedpersons.Inaddition toperforming thefunctional
test,an in-depthcontroloftheentiresystemisconducted(measuring inputcodefilters,
reading internalvariablesofthetrainprotectionsystem,checking input/outputcircuitsand
checking thedevicesthat workinconjunction withthetrainprotection system). Thischeck is
conductedtocheck thecompletefunctionalityoftheequipmentand foranywearand tear.
Operationalrepairs(S1)ormaintenancerepairs(S2)arerequireddepending onanyfaults
that maybedetected.
Anyoneconducting diagnosticsofthetrainprotection systemmustbeinstructedwithre-
gardstooccupationalsafetyand mustbedemonstrablytrainedtoperformsuchactivities
withcertification toperformtheindividuallevelsofMIRELVZ1trainprotection systemdiag-
nostics.

154VZ1:190111 11 / 33
6.1D1–Start-up DiagnosticControl
Purpose:
Thiscontrolverifiesthestatus,integrityandfunctionalityofthe systemduringstart-up.D1
servesasadailytestifthesystemiscontinuouslyinoperationformorethan 24hours.
Execution:
Thetrainprotectionsystemautomaticallyexecutesthiscontrolwithoutintervention.
Schedule:
EverytimetheMIRELVZ1trainprotection systemisswitchedonwiththecontrolrepeated
after24 hoursofcontinuousoperationofthesystem.
Description:
D1start-updiagnosticcontrolisexecutedoncethesystemisswitchedon and diagnosesthe
functionalityofcommunication insidethecentralunit,communication betweenthecentral
unitandsignalrepeaters,thecircuitforsignalstransmittedfromtrack infrastructuretothe
on-boardequipment, controlelementsintheengineer'scaband theemergency brakeEPV.
D1start-updiagnosticcontrolisexecutedeverytimethesystemisplacedintoserviceand
onceevery24 hours(dailytest)if thesystemisoperatedcontinuously.D1start-updiagnos-
ticcontrolisexecutedautomaticallywithoutinterventiononthepartoftheoperator.The
controlisrepeatedafterthefollowingconditionsaremet:
§Controlisautomaticallyrepeatedthefirsttimethelocomotivestopsafter24 hourshave
passedsincethelasttimetheD1diagnosticcontrolwaslastcompleted
§If thelocomotivedoesnot reachaspeedof zerowithin24 to48 hoursofthemostrecent
D1diagnosticcontrol, theD1controlcannot berepeatedand thesystemdetectsafault
§D1start-updiagnosticcontrolisblockedwhenthesystemisoperating usingEVMspeci-
ficationsinMENworking regimeandaspeedorderof0istransmitteduntiladifferent
speedorderistransmitted
§Theoperatorisnotified15 secondsinadvanceof arepeatedD1start-up diagnosticcon-
trolbyablinking D1 codeon thesignalrepeaterand acousticsignalZS10.During thisin-
terval,theoperatormaypress the button todelaytherepeatof theD1start-up diag-
nosticcontrolforanother15minutes.Ifthe buttonisnotpressed,theD1start-up
diagnosticcontrolisautomaticallystartedandthecontrolmust becompletedinfull.
TheD1start-updiagnosticcontrolincludescheck ofthecircuitsforthetransmissionofsig-
nalsfromtrack infrastructuretotheon-boardequipmentofthetrainprotection system.
Whenexecuting thisportion oftheD1start-up diagnosticcontrol,thetransmission ofinfor-
mation fromtrackinfrastructureisnotactive,evenifthesystemisinworking regime.The
timetocheck thecircuitsforsignaltransmissionfromtrack infrastructureisapproximately90
secondsfromthestartof theD1control.
TheD1start-updiagnosticcontrolincludesacheck ofthefunctionalityoftheEPV on the
emergency brakevalve. Thesystemactivatestheopening oftheemergency brakeEPV two
times,whichresultsintwobriefdropsinairpressureinthemainbrakepipe.Prerequisites
forcompletingtheemergency brakeEPV functionalitycheckarecompletionofthecontrol
switchtest,switching thecontrolswitchintheactivecab,releasing thelocomotive'sdirect
actingpneumaticbrakeandthesystemmaynotbestand-byregime.
D1start-up diagnosticcontrolincludesdiagnostics oftheinputsignalsfromcab controls.
Theoperatorisforcedtomanipulatethecontrolsasnotifiedbyfourshortacousticsignals
and the D1 codeon bothsignalrepeaters.If theoperatordoesnotperformthedefinedac-

154VZ1:190111 12 / 33
tionwiththecontrols,thetrainprotection systemcannotbeswitchedtoworkingregimein
eithercab.Thisprocessinvolvesthefollowingcontrols:
§Controlswitchinthecab
§Directionalleverorotherdirectionselector
§Inputfromthepressureswitchon thedirectactingbrake
Theoperatorintheactivecab isobligedtoconductthefollowing manipulationsofthecon-
trolsduringeveryD1control:
§MovethecontrolswitchtotheOFF positionwiththecontrolswitchintheinactivecab
simultaneouslyintheoff position,
§Movethedirectionalleverintotheneutralposition,
§MovethedirectionalleverintotheFORWARDposition,
§MovethedirectionalleverintotheBACKWARDposition,
§Engagetheauxiliarybrake,
§Releasetheauxiliarybrake.
Theorderofthesecontrolmanipulationsisnotfixedand thedirectionalleverchangesand
theauxiliarybrakeoperationmustbeperformed withthecontrolswitchintheon position.
Controlmanipulationsareperformed intheactivelocomotivecab.
Theprocedureforexecuting theindividualdiagnosticstepsisindicatedonthesignalre-
peaterbytheseven-segmentcolumninfrontoftheD1code.Thegivenstephasnotbeen
completedifthesegmentisstilllit.Thesegmentgoesoutwhenall givenrequirementsfor
thespecificstephavebeenmet.Themeaningsoftheindividualsegmentsareasfollows:
PositionDescription
1strowSignalrepeatercommunicateswiththecentralunit
2nd rowBothcontrolswitchesareintheirnullposition
3rdrow Directionalleverintheactivecab innullposition and 1stdirection
(forwardorbackwarddepending ontypeoflocomotive)
4throw Directionalleverintheactivecab innullposition and 2nd direction
(backwardorforwarddepending ontypeoflocomotive)
5throwAuxiliarybrakehasperformed bothfunctions(engaged,released)
6throw OpeningthevalveinthefirstpartoftheEPVtestusingchannelM
causedrequireddecreaseinpressureinmainbrakepipe
7throw OpeningthevalveinthesecondpartoftheEPV test using channel
Mcausedrequireddecreaseinpressureinmainbrakepipe
Onceallofthestepsabovehavebeencompleted,theD1controlindicatoron thesignal
repeaterisoff and thesystemswitchesintoworkingregime.
Thelocomotiveispreventedfrommoving inanydirection ifthepressureinthemainbrake
pipeishigherthan3.5barduringtheD1start-updiagnosticcontrol.If thelocomotivemoves,
thesystemintervenesbyopening theemergency brakeEPV and sounding theZS11 acous-
ticsignalduring thetimethelocomotiveismoving. Allofthecompletedstepsof theD1con-
trolarethenrenderedinvalid.Afterthelocomotivestops,theacousticsignalswitchesoff
and theoperatormust repeat theentireD1controlinfull. The systemclosestheemergency
brakeEPV afterthecompletionof thecontrolswitchtest.
Thesystemchecks forthepresenceofaMIRELSTBfunctionalgatewaywhen
conductingtheD1start-up diagnosticcontrol. Initiating communication withMIREL
STBisindicatedbyareddotintheleft segmentofdisplayNO11.If communica-
tionwithMIRELSTBisnot initiatedduring theexecution oftheD1control, thesystemdoes

154VZ1:190111 13 / 33
notinitiatecommunication withMIRELSTBinsubsequentoperation and works inde-
pendently.
If trainprotection systemdiagnostics detectasystemfault(withtheexception ofacommu-
nication faultwiththesignalrepeaterintheinactivecab),thesystemisplacedintosafe
modeand signalrepeaterdisplaysNO11 inbothcabsdisplay ERR.Thesystemisplaced
intosafemodebyactivatingbothoutputchannelstocontroltheEPV.
List oftestsconductedwithinstart-updiagnosticcontrol:
Programintegritycheck –thesystemcalculatesthechecksumsinmemorycontainingthe
savedprogramsand comparesthemtotheexpectedvalues.Memoryfaulterrorcodesare:
E03, E40,E42, E43,E44, E45 or E46.Thesystemisnotfunctionalduring thistest.
Programparameterintegritycheck –thesystemcalculatesthechecksumsinmemory
containing thesavedprogramparametersand comparesthemtotheexpectedvalues.
Memoryfaulterrorcodesare: E02 or E03. Thesystemisnotfunctionalduring thistest.
Processorworkingregisterfunctionalitycheck – aread and writetestforallbitcombina-
tionsofdatainallregistersofallprocessors.Theerrorcodeforthisfaultis: E41.
RAMfunctionalitycheck – aread and writetestforallbitcombinationsofdatainall
memorycellsofallprocessors.Theerrorcodeforthisfaultis: E41.
Communication check betweenPMMprocessormodulesand thePMCcentralunit –
thePMM processormodulesendsaSYNC packettoinitiatecommunication withthePMC
processormodule.If communicationisnot initiatedwithin5seconds, theerrorcodeis: E34.
Thesystemisfunctionalduringthistest.
Communication check betweenthecentralunitandthesignalrepeaters –thePMM
processormoduleofthecentralunitsendsaSYNC packettoinitiatecommunication with
thesignalrepeaters.Ifcommunication isnotinitiatedwiththeactivestationwithin5sec-
onds,theerrorcodeis E04 or E05. Thesystemisfunctionalduring thistest.
Check oftransmission routes tomonitorinformation fromtrack infrastructure –the
systemteststransmission filters,theconnectionsofsensorsand thesensorsthemselvesin
bothtransmission channels.Thetestinvolves24 steps.Aprogression ofcombinationsof
thefollowingparametersisdefined:
Transmissionchannel:M, C
Carrierfrequency: 50 Hz, 75Hz
Transmissionroutefromcab: ST1, ST2
Signalintensity: low, moderate,high
Thefull scopeof thetransmission routetest isonlyconductedinthefullscaleif thelocomo-
tiveisstanding inasection oftrackwherethereisno signalsign transmission. If thesystem
detectsa50 Hzor75 Hzcarrierfrequency inthetrackcircuit,thisstepofthetestisskipped.
Theerrorcodeis: E07.
Thesystemisfunctionalduring thistest.Thereisno transmission ofinformation fromthe
trackinfrastructureifthesystemisswitchedintoPREorMENworkingregimeduring the
execution ofthetransmissionroutecheck.
EmergencybrakeEPV functionalitycheck –thesystemexecutesacheck ofEPV control
usingbothchannels. Thetestisperformedintwosteps. TheEPV isopenedbrieflywhenthe
locomotive'sbrakeisfirstreleased,firstusing channelMandthenchannelC.Thesystem
evaluatesthedropinpressureinthemainpipeand comparesit totheexpectedvalues. The
errorcode: E08.Thesystemisfunctionalduring thistest.

154VZ1:190111 14 / 33
Completion protocol:
Notissued.
Resolvingnonconformity:
Ifanyfaultisdetectedduringthestart-up diagnostictest, simplyswitchoffthecircuit breaker
forthetrainprotectionsystemforatleast5secondsand thenre-energisetheequipment to
re-initialisetheequipment. Anyfaultdisplayedafterre-initialising theequipmentpre-
ventssubsequentoperation ofthetrainprotectionsystem. Operationalrepairs(S1)are
required.

154VZ1:190111 15 / 33
6.2D2–ContinuousDiagnosticControl
Purpose:
Thiscontrolverifiesthestatus,integrityandfunctionalityofthe systemduringitsoperation.
Execution:
Thetrainprotectionsystemautomaticallyexecutesthiscontrolwithoutinterventionbythe
operatorormaintenance.
Schedule:
Duringtheoperationofthetrainprotectionsystem
Description:
Thetrainprotection systemexecutescontinuousdiagnosticsusing bothwatchdogcircuits
comparing evaluationsofchannelsMand Cinthecentralunit,comparingtheindicatorand
controlchannelinthesignalrepeatersand conductingothercontinuousteststhatcheck for
properoperation ofthetrainprotection system.Thetrainprotection systemcontinuously
comparestheresultsofthemain(PMM)and comparison (PMC)processormodule.Contin-
uousself-diagnosticsdetectasystemfaultintheeventofdifferencesand placethetrain
protectionsystemintosafemode.Communication betweenthecentralunitandthesignal
repeatersisanotheroperationthatthetrainprotection systemdiagnosescontinuously.The
trainprotection systemblocks subsequentoperation intheeventofaseriouscommunica-
tionfaultinvolving thesignalrepeaterintheactivecab (wherethecontrolswitchison).Ifa
communication faultisdetectedinthesignalrepeateratthe inactivecab,thesystemwill
continuetooperateinalimitedscopeand operationalrepairsarerequired.
Testsconductedduringcontinuousself-diagnosticcontrols:
Watchdog circuittest –bothprocessormodulesofthecentralunitand allsignalrepeater
modulesareequippedwithapairof watchdog circuits.Onemonitorstheproperoperationof
theprocessoritselfand thesecond monitorstheoperation oftheprocessorincooperation
withtheothercircuits.Watchdogcircuitsmonitortheproperoperationoftheprocessors,
correct execution of theprogram,timeractivityandthefunctionalityof processorinterruption
systems.Thewatchdogcircuitsoperatewithatimebaseof16 msand 100 ms.Whena
watchdog faultisdetected,thegivenfunctionalblock isre-initialisedand an errormessage
isgeneratedfortheentiresystem.Theerrorcodeforafaultinvolving aprocessormodule
(PMM,PMC)ofthecentralunitis E01.Theerrorcodeforafaultinvolving asignalrepeater
indicatormoduleis E03. Theerrorcodeforafaultinvolving asignalrepeatercontrolmodule
is E50.
Integritytestofdefinedoperating parameters –thecentralunitandthesignalrepeater
permanentlymonitorforconsistency betweendefinedparametersand thevalidparameters
inthecentralunit.Thisconcernstheselectedworking regimeand thedefinedtrainspeed
setting.Thetimelimitformatching thedefinedand validparametersis1second.Ifthepa-
rametersareinconsistentduring systemoperation(e.g.thereisacommunication faultbe-
tweenthecentralunitand asignalrepeater) orifthecentralunitdoesnotconfirmtheac-
ceptednewlysetparameterswithinthedefinedperiod oftime,thesystemdetectsan
integrityfaultofthedefinedparametersand thecorresponding errorcodeis E31 or E03.
Evaluation channelsMand Cinthecentralunitmutuallycomparetheactiveworkingre-
gime.Afaultisdetectediftheactiveworking regimeisinconsistentbetweenchannelsM
and Cforlongerthan 3secondsand theerrorcodeis E27.Theactiveworking regimein
bothchannelsispermanentlytestedagainsttheconfiguration permissionsforthespecific
trainprotection systemapplication. Thesystemdetectsafault if theactiveworking regimeis

154VZ1:190111 16 / 33
notconsistentwiththeconfiguredpermissions(prohibitedforthegivenconfiguration)and
theerrorcodeis E28.
Communication functionalitytest –eachunitcontinuouslymonitorsthefunctionalityof
datacommunication on theRS485 link.Thesystemreportsacommunication faultifthe
PMCprocessormoduleoranysignalrepeatermoduledoesnotreceivethecorrectdata
packetfromthePMM moduleaftermorethan5seconds.Thesystemalsoreportsacom-
munication fault if thePMM processormoduledoesnotreceivethecorrectresponsepacket
fromanyothermoduleafter50 attempts.Thesystemdetectsoneofthefollowingerror
codes: E04,E05,E06,E03,E50,E51 or E00. If aMIRELSTBfunctionalgatewayisdetect-
edduringthestart-up ofthesystem,thetrainprotection systemchecksthefunctionalityof
communication withthefunctionalgatewayduring systemoperation.Aloss ofchannelM
communication withtheMIRELSTBfunctionalgatewayisconsideredafaultand theerror
codeis E80.Aloss ofchannelCcommunication withtheMIRELSTBfunctionalgatewayis
consideredafaultand theerrorcodeis E81.ShouldaMIRELSHPE cooperating devicebe
enabledinthesystembytheconfiguration,thetrainprotectionchecks thefunctionalityof
theircommunicationduring entirefurthersystemoperation.Incaseofcommunication loss
betweenMIRELSHPEdeviceand M-channel,thesystemdetectsand indicateserror E85.
Incaseofcommunication loss betweenMIRELSHPE deviceand C-channel,thesystem
detectsandindicateserror E86.
Trainprotectionsystemintervention integritytest –thesystemcontinuouslycompares
theresultsofchannelsMandCofthecentralunitwithafrequency of10Hz.Afaultisde-
tectedifthereisadifferenceinresultswhenmonitoringtrainprotection systemintervention
forlongerthan5secondsand theerrorcodeis E10.
Maximumpermittedspeedevaluation integritytest –thesystemcontinuouslycompares
theresultsofchannelsMandCofthecentralunitwithafrequency of10Hz.Afaultisde-
tectedifthedifferenceinspeedexceeds5km.h-1 whenevaluating maximumpermitted
speedforlongerthan180 secondsandtheerrorcodeis E14.
Signalsign transmission integritytest –thesystemcontinuouslycomparestheresultsof
channelsMandCofthecentralunitwithafrequency of10Hz.Afault isdetectedif thedif-
ferenceintheresultswhendecoding transmittedsignalsignsorspeedordersexistsfor
longerthan20secondsandtheerrorcodeis E15.
Speedmeasurementtest –speedmeasurementsarecompletedusing thefour-channel
incrementalRPMsensor.Actualinstantaneousspeediscalculatedfrommeasurement
channels1,2and 3and 4inbothevaluation channels(Mand C).Thecalculatedspeedsare
comparedand everyevaluationchannelworks withthehigherof thetwocalculatedspeeds.
Afaultisdetectedifthedifferencebetweenthemeasuredspeedsislargerthan 20pulses
fromthesensorand theerrorcodeis E20. Themutualcomparison ofresultsinbothevalua-
tionchannelscontinues.Afaultisdetectedifthedifferenceinthespeedsmeasuredby
channelsMand Cisgreaterthan2km.h-1 formorethan 10secondsand theerrorcodeis
E25.
Pressuremeasurementtest –thepressuresensorinthemainbrakepipeisconnectedto
thesystembya4-20mAcurrent circuit.Thesystemcontinuouslyteststheupperandlower
limits. Afault isdetectedif thelimitvaluesareexceededand theerrorcodeis E24. Themu-
tualcomparison ofresultsinbothevaluation channelscontinues.Afaultisdetectedifthe
differenceinthepressuremeasuredbychannelsMand Cisgreaterthan 0.2barformore
than 20 secondsand theerrorcodeis E26.Thefinalmainbrakepipepressuretestchecks
forconformitybetweenpressureand themovementofthelocomotive.Afaultisdetectedif
pressureinthemainbrakepipeisless than 0.5barand thelocomotiveacceleratestomore
than10 km/handtheerrorcodeis E12.

154VZ1:190111 17 / 33
Actualdirection oftravelevaluation test –theconformityofdirection oftravelmeasure-
mentsarecheckedinthesamewayasspeedmeasurements.Theerrorcodeis E21 ifthe
evaluateddirectionsdonotmatchforaperiodof 3seconds.
EPV check during trainprotection systemintervention –theEPV valveisopenedusing
channelMiftrainprotectionsystemintervention isactivated.Thedecreaseinpressurein
themainpipeisthenmeasuredand comparedtotheexpectedvalues.EPVopeningisacti-
vatedusing channelCandifthereislowpressureinthemainpipe,afaultisdetectedand
theerrorcodeis E11.Theexpectedpressuredrop valuesarepressureofless than 4.5bar
within5secondsand pressureofless than3.5barwithin10 seconds.
IncrementalRPMsensorpowertest –thesystemusesacomparatortotest thepowerto
theincrementalRPMsensor. Afault isdetectedifthecurrentdrawistoo low(powerloss)or
too high(shortcircuit)andtheerrorcodeis E22.
Mainpipepressuresensorpowertest –thesystemusesawindowcomparatortotest the
pressuresensorsupplyvoltage.Afaultisdetectedifvoltageistoo lowortoo high and the
errorcodeis E23.
Testofdecoding andprocessorexecution ofinstructions– theproperdecodingand
executing oftheappliedsub-setoftheinstruction fileofprocessesistestedbytriggeringa
specialdiagnosticpartoftheprogram,whichisconductedcyclicallyin4brancheswitha
comparison of results.Aperiod of100 msisrequiredtoconductasinglecycle.Thetesting
period forallinputdatabitcombinationsis26 s.Afault isdetectedindecodingand execut-
inginstructionsandtheerrorcodeis E30.
D1start-up self-diagnosticcontrol completiontest– an errorisdetectedifthecomplete
scopeofD1controlisnotcompletedwithin4hoursfromthemomentthetrainprotection
systemisswitchedonandtheerrorcodeis E09.
D1start-up self-diagnosticcontrolrestarttest– anerrorisreportedif thesystemisuna-
bletorestartD1start-up self-diagnosticcontrolwithin24 to28hoursof themost recenttest
(ifthelocomotivehasnotstoppedcompletely)andtheerrorcodeis E32.
Signalsign indicatortest– information fromthesignalrepeaterindication and control
moduleiscomparedinthePMM and PMCprocessormodulesofthecentralunittodetect
anynonconformitybetweentheindicatedsignalsignand the bluelight.Theerrorcodeis
E52.
Signalrepeaterbutton test– information fromthesignalrepeaterindicationandcontrol
moduleiscomparedinthePMM and PMCprocessormodulesofthecentralunittodetect
anyfaultinthesignalrepeaterbuttons.Theerrorcodefora button fault is E53.Theerror
codefora buttonfaultis E54.Theerrorcodefora buttonfaultis E55.Thesystem
detectsan unpromptedinterventioniftheconfirmation button on thesignalrepeateris
improperlyoperatedandtheerrorcodeis E56.
MIRELSTBfunctionalgatewayfaultdetection –detectionisconductedautonomouslyof
theactualfunctionalgateway.Thetrainprotectionsystemdisplaysapplicableerrorcodesin
therangefrom E60 to E75.
Errordetection ofMIRELSHPE device–detection iscarriedoutautonomouslybydevice
proper.Trainprotectionrealizestheindication of respectiveerrorcodeinrangefrom E90 to
E98.
Configurationparameterintegritycheck –thesystemcalculatesthechecksumsin
memorycontainingtheconfigurationparametersand comparesthemtotheexpectedval-
ues.Theerrorcodeforamemoryfaultis E33.Evaluation channelsMand Cinthecentral
unitmutuallycompareconfiguration chains. Afault isdetectedif theconfiguration chainsare

154VZ1:190111 18 / 33
inconsistentbetweenchannelsMand Cforlongerthan 10secondsand theerrorcodeis
E34.
Check ofstand-byregimecontrolinputs– thesystemdetectsanyincorrectcombinations
ofstand-byregimecontrolinputsdepending on theconfiguration permissionsand theerror
codeis E82.
Statuscheckofrecordingequipment– thesystemchecksthecommunication statusand
internalstatusofrecording equipmentdepending on configuration permissions.Theerror
codeis E83.
SHPinterface test– thesystemchecksthestatusof thedigitalinterfacewiththeSHPsys-
temdepending on theconfiguration permissions.Thetrainprotectionsystemdetectsan
errorifan incorrectcombination ofdigitalinputsisdetectedfromtheSHPsystemand the
errorcodeis E83.
Processormodulerestarttest– afaultisdetectedifan uncontrolledrepeatedstartofei-
therof theprocessormodules,PMM orPMC, inthecentralunitoccursduring theoperation
ofthetrainprotection system;theerrorcodeis E17. Theerrorcodeif anuncontrolledrestart
oftheindicatormoduleon thesignalrepeaterintheactivecab occursduring operation of
thetrainprotectionsystemis E18.Theerrorcodeifan uncontrolledrestartofthecontrol
moduleon thesignalrepeaterintheactivecab occursduringoperation ofthetrainprotec-
tionsystemis E19.
Completion protocol:
Notissued.
Resolvingnonconformity:
If anyfaultisdiscoveredduring thecontinuousself-diagnostictest, simplyswitchoffthecir-
cuitbreakerforthetrainprotectionsystemforatleast5secondsandthenre-energisethe
equipmenttore-initialisetheequipment. Anyfaultdisplayedafterre-initialising the
equipmentpreventssubsequentoperation ofthetrainprotection system. Operational
repairs(S1)arerequired.

154VZ1:190111 19 / 33
6.3D3–FunctionalTest
Purpose:
Thistestverifiesthebasicfunctionalityandintegrityoftheoperatedsystem.Italsoverifies
interactionwithtrackinfrastructure,theodometersystemandthelocomotivebrakesystem
and verifiesthefunctionalityoftheoperatorinterface.
Execution:
Thetrainprotectionsystemoperator'strainedpersonnelorotherdemonstrablyauthorised
and trainedpersons
Schedule:
Thetestisperformed regularlyat6-monthintervalswithatoleranceof1month. Execution
oftheD4prophylacticcontrolisasubstitutefortheD3functionaltest.
Thesix-monthtermre-startsifan unplannedD3functionaltestisexecuted.
Thefirstdeadlineforconducting aD3functionaltestcommenceson thedateon whichthe
systemiscommissionedonthelocomotive.
Description:
Thefunctionaltestservestoensureproperoperation ofallbasicfunctionsofthetrainpro-
tectionsystem.Thefunctionaltestcomprises3sections:
A.Preparationandbasicfunctionality
B.Functionalityofdefinedparameters
C.DiagnosticTESTregime
ThespecialdiagnosticTESTregimeisusedbythetrainprotectionsystemtoperformSec-
tionCofthefunctionaltest.Thisregimeisselectedinthecab bypressingthe button and
engaging thecontrolswitch.Thelocomotivemustbecompletedstoppedand thesystem
mustbeinZAV regimeorinastatewhereD1self-diagnosticsarenotunderway.Press
tocompleteastepand movetothenextinSection C.Press toreturntotheprevious
step.Press toactivatethegivensystemoutput inthecurrentstep.Switchoff thecontrol
switchtoterminatetheTESTregime.
Analogueinputparameters(speedand pressureinthe mainpipe)arecontrolledwiththe
systeminZAV regimeorinastatewhereD1self-diagnostics arenotunderway.Pressing
and simultaneouslyshowsthespeedofthelocomotivewithprecisionof1km.h-1 on
theNO11 display,whilepressing and simultaneouslydisplaysthepressureinthe
mainbrakepipewithaccuracyof0.1baron theNO11 display. MIRELVZTtestequipmentis
requiredtoconductthefull scopeoftheD3functionaltest.
Document206VZ1hasthemethodologyand templateprotocolforconducting theD3func-
tionaltest ontheMIRELVZ1trainprotectionsystem.
Completion protocol:
Thecompletion protocolforthefunctionaltest mustcontainthe following details:
§Dateand site
§Serialnumberofthesystemandthecentralunit
§Thenumberofthelocomotiveon whichtheequipmentisinstalled
§Thesignatureofthepersonwhoconductedthetest
§Theresultofthefunctionaltest(no faults/ withfaults)

154VZ1:190111 20 / 33
§Adescriptionof allfaultsmustbeprovided
§Thesignatureofthepersonwhoconductedthetest
Resolvingnonconformity:
Operationalrepairsof thesystem(S1)mustbeconductedwhenafaultisdetected.