Requirements for GSM-R Voice Radio System

Transcription

1 Requirements for GSM-R Voice Radio System Signatures removed from electronic version Synopsis This document mandates requirements for the use of GSM-R systems, where these are available, to support operational voice communications. Submitted by Karl Reilly Project Manager Authorised by Anne Blakeney Acting Department Head s Management This document is the property of the Rail Safety and Standards Board Limited. It shall not be reproduced in whole or in part without the written permission of the Department Head of Railway Group Standards Management, Rail Safety and Standards Board. Published by Rail Safety and Standards Board Evergreen House 160 Euston Road London NW1 2DX Copyright 2003 Rail Safety and Standards Board Limited Page 1 of 20

2 Requirements for GSM-R Voice Radio System Issue record Issue Date Comments One December 2003 Original document Page 2 of 20

3 Requirements for GSM-R Voice Radio System Contents Section Description Page Part 1 General information Scope of s General responsibilities General compliance date Health and safety responsibilities Technical content Supply 6 Part 2 Application of this document Purpose To whom these requirements apply Application infrastructure controller Application station operator Application train operator Application Rail Safety and Standards Board Document management Definitions and acronyms 8 Part 3 System requirements SIM card and network access arrangements Normal operation Degraded modes Emergency arrangements Engineering operations protection of people and train movements 17 Appendix A Mandatory requirements taken from the optional EIRENE FRS (version 5) and SRS (version 13) requirements 19 References 20 Page 3 of 20

4 Requirements for GSM-R Voice Radio System This page has been left blank intentionally Page 4 of 20

5 Requirements for GSM-R Voice Radio System Part 1 General information 1.1 Scope of s The overall scope of s, and specifically of the controlled infrastructure (as used in this ), is set out in Appendix A of GA/RT6001. The specific scope of this is set out in Part This standard is convergent with requirements of the European Union Directive 96/48/EC and the associated technical specifications for interoperability for the control-command and signalling sub-system of the trans-european high-speed rail system, in the context of the implementation of GSM-R voice communications systems for the United Kingdom railway network This standard provides the national controls that the United Kingdom is required to put in place. These requirements do not impose system requirements that would become a barrier to European interoperability. 1.2 General responsibilities s are mandatory on all Railway Group members and apply to all relevant activities that fall into the scope of each individual s Railway Safety Case. If any of those activities are performed by a contractor, the contractor s obligation in respect of Railway Group Standards is determined by the terms of the contract between the respective parties. Where a contractor is a duty holder of a Railway Safety Case, then s apply directly to the activities described in its Railway Safety Case The Railway Group comprises Rail Safety and Standards Board Limited, the infrastructure controller and the train and station operators who hold railway safety cases for operation on or related to the controlled infrastructure (as set out in GA/RT6001) Rail Safety and Standards Board Limited is also known as RSSB Under the Railways (Safety Case) Regulations 2000, the duty holder (as defined in those Regulations) is responsible for ensuring that the requirements of s are complied with. Contractual arrangements (including a lease at a station) do not of themselves relieve the duty holder of its obligations under those Regulations. 1.3 General compliance date This standard comes into force and shall be complied with from 7 February 2004, except as specified in Part 2. Where the date specified in Part 2 is later than the above date, this is to allow Railway Group members sufficient time to achieve compliance with the specified exceptions After the compliance date, Railway Group members shall not deviate from the requirements set out in this. Where it is considered not reasonably practicable to comply with the requirements, authorisation not to comply shall be sought in accordance with GA/RT6001, GA/RT6004 or GA/RT Health and safety responsibilities In issuing this, RSSB makes no warranties, express or implied, that compliance with all or any documents published by RSSB is sufficient on its own to ensure safe systems of work or operation. Each user is reminded of its own responsibilities to ensure health and safety at work and its individual duties under health and safety legislation. Page 5 of 20

6 Requirements for GSM-R Voice Radio System 1.5 Technical content The technical content of this has been approved by: Jeff Allan, Principal Train Control and Communications Engineer, RSSB Richard Evans, Principal, Operations, RSSB Enquiries should be directed to RSSB Tel or 1.6 Supply Controlled and uncontrolled copies of this may be obtained from the Industry Safety Liaison Department, Rail Safety and Standards Board, Evergreen House, 160 Euston Road, London NW1 2DX or Page 6 of 20

7 Requirements for GSM-R Voice Radio System Part 2 Application of this document 2.1 Purpose This document mandates requirements for the use of GSM-R systems, where these are available, to support operational voice communications. 2.2 To whom these requirements apply This document contains requirements that are applicable to the duty holders of the infrastructure controller, station operator and train operator categories of Railway Safety Case. 2.3 Application infrastructure controller Scope The requirements of this document apply to all new and existing equipment and processes used for GSM-R voice communications The requirements of this document apply to all work that affects GSM-R systems on Network Rail controlled infrastructure, whether new or alteration Where a GSM-R system is being used operationally, the requirements of this document are to be complied with following the document coming into force on 7 February After 7 February 2004, or after the date by which compliance is achieved, Railway Group members shall not deviate from the requirements set out in this document. Exclusions from scope There are no exclusions from the scope specified in clauses to inclusive for the infrastructure controller. Exceptions to general compliance date The requirements of section 3.5 for engineering works are required to be complied with no later than 1 January Application station operator Scope The requirements of this document apply to all equipment and processes where the Network Rail GSM-R infrastructure is used for communications Where a GSM-R system is being used operationally, the requirements of this document are to be complied with following the document coming into force on 7 February Exclusions from scope There are no exceptions from the scope specified in clause for station operators. Exceptions to general compliance date There are no exceptions to the general compliance date specified in clause for station operators. 2.5 Application train operator Scope The requirements of this document apply to all new and existing equipment and processes used for GSM-R borne voice communications. Page 7 of 20

8 Requirements for GSM-R Voice Radio System Where a GSM-R system is being used operationally, the requirements of this document are to be complied with following the document coming into force on 7 February After 7 February 2004, or after the date by which compliance is achieved, Railway Group members shall not deviate from the requirements set out in this document. Exclusions from scope There are no exclusions from the scope specified in clauses to for train operators. Exceptions to general compliance date There are no exceptions to the general compliance date specified in clause for train operators. 2.6 Application Rail Safety and Standards Board There are no requirements applicable to RSSB. 2.7 Document management Superseded documents This does not supersede any other Railway Group documents. Related requirements in other documents This standard supports the implementation of EU Directive 96/48 and TSI Control - Command and Signalling for the implementation of GSM-R voice communications systems for the United Kingdom railway network. It contains requirements that support the European requirements by tailoring them to suit United Kingdom operations. These requirements are not intended to impose system requirements that would become a barrier to European interoperability. 2.8 Definitions and acronyms Broadcast calls A call from, for example, the signaller to all train drivers within the boundaries of a geographic area. Only the initiator of the call can talk, the recipients can listen only. Cab radio For the purpose of this document, a cab radio is a GSM-R radio that, as a minimum, meets all the mandatory requirements for a cab radio as specified within the EIRENE FRS and SRS, and which is being used as a train radio in the sense set out in GE/RT8080. Priority and pre-emption The EIRENE specifications determine the enhanced multi-level precedence and pre-emption (emlpp) levels for specific call types. The priority and pre-emption requirements specify a hierarchy of call types to ensure that operational and emergency calls are not blocked by lower level priority calls using available frequencies. Group call A call made to all members of a pre-defined group within a local geographical area. Only one member of the group can talk at any instant, with all other group members listening. GSM-R A digital radio system (Global System for Mobile communications Railways) based on the GSM mobile communication standard adapted for use on European railways. The GSM-R system, for the purposes of this document, is one that complies with the EIRENE Functional Requirement Page 8 of 20

9 Requirements for GSM-R Voice Radio System Specification (version 5) and the System Requirement Specification (version 13) and updates approved as part of the change control process. General broadcast call A general broadcast call is a group call of a non-emergency nature that is broadcast to all trains in a geographic area. Operational radio A hand-held robust portable GSM-R radio with the capability to make and receive railway emergency calls that, as a minimum, meets all the mandatory requirements for an operational radio as specified within the EIRENE FRS and SRS. Railway emergency call A high priority call, as set out in the EIRENE specifications, for informing drivers, signallers and other concerned personnel of a level of danger requiring all railway movements in a pre-defined area to stop. Two types of railway emergency calls are defined by the EIRENE specifications: a) train emergency calls (for railway emergencies which do not involve shunting operations) b) shunting emergency calls (for railway emergencies which involve shunting operations). Running lines Those lines that are identified as running lines and published in the infrastructure controller s Sectional Appendix. Subscriber identity module Subscriber identity module (SIM Card) is part of the network infrastructure providing identity and functionality for the radio managed and controlled by the infrastructure controller. Page 9 of 20

10 Requirements for GSM-R Voice Radio System This page has been left blank intentionally Page 10 of 20

11 Requirements for GSM-R Voice Radio System Part 3 System requirements 3.1 SIM card and network access arrangements SIM card distribution The infrastructure controller shall be responsible for the controlled and secure distribution of configured SIM cards to all Railway Group members. The SIM cards shall be configured in such a manner that users cannot withhold their identity when using the GSM-R network Railway Group members shall make requests for the supply of SIM cards from the infrastructure controller. The requests shall detail the classification of use for such SIM cards; these classifications include but are not limited to: a) cab radio b) operational radio c) general purpose radios (these radios do not have a dedicated railway emergency call button) Railway Group members in receipt of SIM cards from the infrastructure controller shall control their onward distribution. Railway Group members shall retain records of all authorised SIM usage, including details of contractors or other third parties who are users Railway Group members shall ensure that SIM cards no longer required are remotely disabled by the infrastructure controller and then returned, in a secure manner, to the infrastructure controller The infrastructure controller shall maintain a record of all SIM cards issued, both active and disabled. SIM card security requirements Railway Group members shall ensure that SIM cards, when stored, are kept under secure conditions The infrastructure controller shall monitor the system for indications of technical misuse of SIM cards. When technical misuse is detected, the infrastructure controller shall take such actions necessary to control the risk arising from such misuse. Where a SIM card is being technically misused and the infrastructure controller detects such technical misuse, the infrastructure controller shall inform the responsible Railway Group member of the technical misuse and the actions that have been taken Railway Group members shall inform the infrastructure controller, upon detection, that a SIM card is being used for a purpose for which it was not intended, or has been lost, stolen or damaged. In these circumstances the infrastructure controller shall disable the SIM card from access to the network. Cab radio SIM card requirements Train operators shall ensure that any GSM-R radio that is to be normally used as a cab radio is equipped with a SIM card configured as a cab radio and, as a minimum, is able to: a) comply with the mandatory EIRENE FRS and SRS requirements relating to cab radios b) comply with the optional EIRENE FRS and SRS requirements listed in Appendix A which relate to cab radios The train operator shall permit access to the cab radio, for maintenance purposes only, to the authorised maintainer. Page 11 of 20

12 Requirements for GSM-R Voice Radio System Further requirements for cab radios are set out in GE/RT8080. Operational radio SIM card requirements Railway Group members shall ensure that a GSM-R radio that is to be used as an operational radio is equipped with a SIM card configured as an operational radio and, as a minimum, is able to: a) comply with the mandatory EIRENE FRS and SRS requirements relating to operational radios b) comply with the optional EIRENE FRS and SRS requirements listed in Appendix A, which relate to operational radios Railway Group members shall ensure that only the authorised maintainer can amend the default configuration of the operational radio. General purpose radio SIM card requirements Railway Group members shall ensure that a GSM-R radio that is to be used as an general purpose radio is equipped with a SIM card configured as a general purpose radio. The SIM card shall hold the configuration of the general purpose radio in respect of the ability to make and receive railway emergency calls through the radio. In addition, the Railway Group member shall ensure that the GSM-R radio, as a minimum, is able to: a) comply with the mandatory EIRENE FRS and SRS requirements relating to general purpose radios b) comply with the optional EIRENE FRS and SRS requirements listed in Appendix A, which relate to general purpose radios Railway Group members shall ensure that only the authorised maintainer can amend the default configuration of the general purpose radio. 3.2 Normal operation Network access requirements The infrastructure controller shall ensure that trains operating on Network Rail controlled infrastructure that are fitted with a GSM-R cab radio, including those trains with cab radios registered on another railway network, are able to communicate with: a) the controlling signaller b) the appropriate regional controller. Requirement when there is more than one connection to the cab radio Where provided, GSM-R functionality allows more than one connection within the train to the cab radio being used by the driver. This means that the radio connection points are fixed within the train and when being used, for example by the guard, the driver is aware that a call is being made and is able to listen in. The driver can override any low priority call to send or receive essential operational and railway emergency calls. When the driver overrides a low priority call or receives an essential operational or railway emergency call, the pre-emption system terminates the lower priority call made at non-driving cab connection points Train operators using this multi-connection functionality shall undertake a workload assessment of all on-train staff to ensure that all calls can be made without unduly distracting the driver. Page 12 of 20

13 Requirements for GSM-R Voice Radio System Call pre-emption requirements The infrastructure controller shall ensure that the GSM-R network is implemented so that higher priority calls always take precedence over, and if necessary pre-empt, lower priority calls The infrastructure controller shall implement emergency voice calls, as set out in GE/RT8080 and GE/RT8000, as railway emergency calls and provide them with an emlpp priority designation of The infrastructure controller shall ensure that all operational calls are given a priority and preemption priority designation of 3. However, the infrastructure controller shall permit a driver requesting, via a signaller, the attendance of the emergency services, to raise the priority and pre-emption designation to 2. In all other cases the infrastructure controller shall prevent a user of the GSM-R system from raising the priority and pre-emption designation priority of a call. Requirements for using group calls Train operators are permitted to use group calls in the following circumstances: a) shunting b) assisting failed trains c) banking movements d) tandem operation when there is a driver in more than one locomotive e) propelling f) driving from other than the leading cab g) working with a locomotive at both ends h) single power car operation i) other operational circumstances permitted by the infrastructure controller, for example uncoupling of multiple unit trains When group calls are required and they involve train movements on running lines, they shall be set up by the infrastructure controller as set out in GE/RT8000. Restrictions on the use of group calls Except in an emergency, Railway Group members shall not use group calls for passing safetycritical instructions for the following activities: a) passing signals at danger b) protection of staff c) protection of trains d) electrical isolations e) wrong direction and unsignalled movements. Page 13 of 20

14 Requirements for GSM-R Voice Radio System 3.3 Degraded modes Requirements for GSM-R handportables for drivers, where provided Train operators, in consultation with the infrastructure controller, shall ensure that any issued GSM-R handportables, in addition to the train radio, are compatible with the implemented GSM- R fixed infrastructure Train operators, in consultation with the infrastructure controller, shall develop procedures to control the use of GSM-R handportables provided to drivers and traincrew. The procedures shall, as a minimum, cover the following factors: a) scenarios when the GSM-R handportable is to be used, when it is not to be used and when it is to be switched off. In particular, limitations on the use of the GSM-R handportable when the driver has access to a working train radio b) protocol for identifying calls to signallers and regional controller as being from the driver of a specific train c) availability and use of railway emergency call functionality d) avoiding driver confusion if both the GSM-R handportable and cab radio receive a GSM-R railway emergency call in the cab. This could be avoided if either the driver handportable is configured so that it cannot receive railway emergency calls, or the driver is instructed to switch off the GSM-R handportable while in the cab and the GSM-R cab radio is working e) avoiding the initiation of unwanted (accidental or deliberate) railway emergency calls f) ensuring that the GSM-R handportable s battery life is maintained Train operators shall ensure that the driver s GSM-R handportable is suitable for the environment in which it is required to operate If the driver s GSM-R handportable is required to be available for use when in the cab, then the train operator shall provide a suitable housing for the radio within the cab If the driver is required to be able to use the GSM-R handportable to make and/or receive railway emergency calls, then the train operator shall ensure that the GSM-R handportable supports this functionality If a driver is required to forward point-to-point calls from the cab radio to the GSM-R handportable (for example, prior to leaving the cab), then the GSM service Call Forwarding on No Reply (CFNRy) shall be used for call forwarding. To support this mode of operation: a) the train operator shall ensure that the cab radio supports the GSM service Call Forwarding on No Reply (CFNRy) b) the infrastructure controller shall provide the GSM service Call Forwarding on No Reply (CFNRy) in the GSM-R network c) the train operator shall ensure that the cab radio human machine interface design takes cognisance of the need to set up and cancel call forwarding to handportables. Operational radio requirements when used instead of a cab radio Train operators shall ensure that when using an operational radio instead of cab radio, then: a) the full requirements of this standard shall apply b) the operational radio, together with its associated equipment, satisfy the basic functionality and basic performance requirements for train radios, as set out in GE/RT8080. Page 14 of 20

15 Requirements for GSM-R Voice Radio System When a cab radio has failed, the requirements set out in GO/RT3437 apply. Page 15 of 20

16 Requirements for GSM-R Voice Radio System Requirements for general broadcast calls The infrastructure controller shall ensure that only the following groups of staff can send a general broadcast to trains: a) signallers b) regional controllers The infrastructure controller shall, in consultation with train operators, define the circumstances in which a general broadcast can be used. Consideration shall be given to the consistency of usage throughout the rail network The infrastructure controller shall use the same pre-defined geographic areas used for broadcasting railway emergency calls and shall also have the ability to group such areas together, as set out in clause Emergency arrangements Requirements for broadcasting and receiving railway emergency calls The infrastructure controller shall ensure that a written procedure is in place for the receiving of railway emergency calls, including, where appropriate, shunting emergency calls and the broadcasting of railway emergency calls. A copy of this procedure shall be kept at each staffed fixed location likely to receive a railway emergency call. The written procedure shall, as a minimum, cover the following factors: c) identification of railway emergency calls d) broadcast areas for railway emergencies e) when more than one railway emergency call is received f) when more than one signaller receives the same railway emergency call g) when the wrong signaller receives the railway emergency call h) call prioritisation i) wrongly routed calls j) call transfer The infrastructure controller shall ensure that all staff and contractors under its control likely to receive or initiate railway emergency calls and, where appropriate, shunting emergency calls, are competent in the operation of the GSM-R equipment provided and in the written procedure set out in clause The infrastructure controller shall ensure at each location that is likely to receive an emergency call that in 98% of occasions an emergency call can be answered within 12 seconds of it being received at that location The infrastructure controller shall have an auditable process in place to manage the automatic railway emergency call confirmation functionality provided by GSM-R. This process shall also ensure that railway emergency call confirmation and the appropriate voice recording of the railway emergency call (as set out in GE/RT8021) can be easily identified as belonging to the same railway emergency event. Page 16 of 20

17 Requirements for GSM-R Voice Radio System Requirements for determining the geographic boundaries for emergency broadcasts The infrastructure controller shall define geographic areas for the broadcasting of railway emergency calls for acceptance by train operators. These pre-defined geographic areas shall take the following operational factors, as a minimum, into account: a) identifiable route sections b) complexity of route sections c) signal box areas d) signaller control areas e) intensity of train service f) service group patterns g) tunnels and viaducts The infrastructure controller shall be able to group together the pre-defined geographic groups to enable railway emergency calls to be transmitted to larger areas, if necessary The infrastructure controller shall design and configure the GSM-R system so that trains on adjacent, but unconnected routes, do not unnecessarily receive railway emergency calls that are not applicable to them. Requirements for remote access The infrastructure controller shall configure the GSM-R system to enable the appropriate signaller to broadcast a message over a train s public announcement system in the event of a railway emergency The infrastructure controller shall configure the GSM-R system to enable the activation of a train driver s safety/vigilance device to be alarmed and registered at the controlling signalbox Train operators shall ensure that any train that requires remote access is configured correctly to the infrastructure controller s network. 3.5 Engineering operations protection of people and train movements Requirements for engineering operations on GSM-R fitted infrastructure The infrastructure controller shall ensure that those track workers who are required to use radio communication are, in the following circumstances, issued with a GSM-R handportable radio to be used as the primary means of communication: a) when acting as an individual working alone (IWA) b) when acting as a Controller of On-Site Safety (COSS) c) setting up and removal of engineering protection limits, as set out in GE/RT8000 d) setting up and removal of engineering possession limits, as set out in GE/RT8000 e) setting up and removal of engineering worksites f) giving and receiving instructions for the movement of trains within engineering possessions. Page 17 of 20

18 Requirements for GSM-R Voice Radio System The infrastructure controller shall ensure that procedures are in place to control the use of GSM-R handportables provided to track workers. The procedures shall, as a minimum, cover the following factors: a) scenarios in which the GSM-R handportable is to be used, when it is not to be used and when it is to be switched off b) protocol for identifying calls to signallers and regional controllers c) availability and use of railway emergency call functionality d) avoiding the initiation of unwanted (accidental or deliberate) railway emergency calls e) ensuring that the GSM-R handportable s battery life is maintained The infrastructure controller shall ensure that the GSM-R handportable is suitable for the environment in which the track worker is required to use it If the track worker is required to be able to use the GSM-R handportable to make and/or receive railway emergency calls, then the infrastructure controller shall ensure that the GSM-R handportable supports this functionality. Page 18 of 20

19 Requirements for GSM-R Voice Radio System Appendix A Mandatory requirements taken from the optional EIRENE FRS (version 5) and SRS (version 13) requirements A.1 The functional requirements and system requirements for GSM-R are specified in the EIRENE Functional Requirements Specification (FRS) and System Requirements Specification (SRS). Their implementation is mandated by the Technical Specification for Interoperability relating to the controlcommand and signalling sub-system. A.2 Certain of these requirements are shown as optional. The following list identifies those requirements that shall be complied with by Railway Group members. EIRENE ref. FRS Table 3-1 (rows 3 and 4) FRS FRS i SRS SRS bullets 1, 3, 5 SRS SRS SRS Description Call set-up times for operational fixed-to-mobile and mobile-to-fixed calls. Where there is a risk that stored numbers or other set-up details may be accidentally changed, facilities should be provided on the cab radio in order to prevent this happening. During emergency calls, speech should be possible to allow a controller receiving the warning tone to give information. The handover success rate should be at least 99.5% over train routes under design load conditions (as given in [GSM 03.05]). The cab radio should provide interfaces to the following on-train systems: train borne recorder; public address; driver s safety device. Note that in the case of public address and driver s safety device, provision of interfaces is only required when remote access is required to the cab radio (see clause ). Each railway should have appropriate call barring facilities to prevent unintended access to the GSM-R network by non-authorised users. Provision should be made to prevent unauthorised calls to mobiles from outside the GSM-R network. Location dependent addressing may be provided using location information from external sources. Note that the application of this clause is limited to ensuring that the GSM-R network can accept external train location information sources where such sources are utilised, as set out in clause of GE/RT8080. Page 19 of 20

20 Requirements for GSM-R Voice Radio System References The Catalogue of s and the s CD-ROM give the current issue number and status of documents published by RSSB. Documents referenced in the text s GA/RT6001 s Change Procedures GA/RT6004 Temporary Non-Compliance with s GA/RT6006 Derogations from s GE/RT8000 Master Rule Book GE/RT8021 Facilities for Emergency Voice Communications with Control Rooms GE/RT8080 Train Radio Systems for Voice and Related Messaging Communications GO/RT3437 Defective On-Train Equipment Other references The Wireless Telegraph Act 1949 The Telecommunications Act 1984 Railways High Speed Interoperability Directive (96/48) EIRENE Functional Requirements Specification EIRENE System Requirement Specification The Communications Bill 2003 Page 20 of 20