Safe Control Product Family

Systems with Single Building Blocks

The robust and rail-ready safe control components comply with the railway standards for environmental and EMC conditions EN 50155 (rolling-stock) and EN 50125-3 / EN 50121-4 (signalling/trackside).

Safe Control Systems

D-SC Controller

The MH50C can act as the central component of a train control system lie ATO or ATP or trackside applications like ZC or ATP based on ERTMS/ETCS, PTC, PZB/Indusi or ZUB.

Features

  • For Applications up to SIL4 (EN5012x) or SIL3 (IEC61508)
  • Certified safe CPU board with 3 CPUs
  • Safe I/O boards
  • QNX safe operating system available
  • Certification packages available
  • Extensible by distributed safe I/O boxes connected via real-time Ethernet
  • Optional MVB, RS232, RS422, RS485, CAN, GPS
  • Compact 40 HP application-ready system
  • Rack-mounted or wall-mounted
  • For rolling stock and wayside applications
D-SC Remote I/O

KT8 is a safe remote I/O box certifiable up to SIL 4 for TCS applications like train control, ATO or ATP using the duagon SAFE CONTROL System.

Features

  • For Applications up to SIL4 (EN5012x) or SIL3 (IEC61508)
  • Safe I/O boards
  • Certification packages available
  • Distributed safe I/O and controller boxes connected via real-time Ethernet
  • Support for QNX safe operating system
  • Compact 40 HP housing for remote locations
  • Full EN 50155 compliance
  • Rack-mounted or wall-mounted

Safe Board-Level Computers

Vital Embedded Single Board Computer

The F75P is an x86 Intel Atom E680T based fail-safe vital embedded computer, certified to SIL 4 with onboard dual redundancy for functional safety and a third CPU for I/O communication. It targets safety-critical applications in embedded railway and wayside computers and in industrial automation. F75P is also part of the duagon SAFE CONTROL System.

Features

  • 2x Intel Atom E6xx, up to 1 GB DDR2 RAM (each) for onboard dual redundancy 
  • 1x Intel Atom E6xx, up to 2 GB DDR2 for I/O 
  • Independent supervisors for each block 
  • Fail-safe board architecture 
  • Event logging 
  • SIL 4 certification packages available for hardware and software (QNX) 
  • TÜV Süd certified according to EN 50129 (SIL 4), EN 50128 (SIL 4) and IEC 61508 (SIL3) 
  • Full EN 50155 compliance 
  • -40 °C to +70 °C (+85 °C) 
  • Conformal coating

Safe I/O Boards

8 Safe Digital Outputs
High-Side Switching for d-SC

Main Features

  • 8 digital outputs, 24 V, 48 V, 72 V, 96 V, 110 V
  • 300 mA per channel, 1200 mA total
  • High-side switch outputs (load to ground)
  • Optical isolation from other cards
  • Fail-safe board architecture
  • Certified to EN 5012x (SIL 2/4), EN 50159, IEC 61508 (SIL ⅔)
  • Developed acc. to EN 50129, EN 50128, IEC 61508
  • Extensive supervision functions
  • EN 50155 fully compliant
  • -40 °C to +85 °C
  • Conformal coating
     
16 Safe Digital Inputs for d-SC
SIL 2 to SIL 4 Modular Train Control System

 Main Features

  •  16 digital inputs, 24 V, 48 V, 72 V, 96 V, 110 V
  • 1 to 10 mA, pulsed
  • Optical isolation from other cards
  • Fail-safe board architecture
  • Certified to EN 5012x (SIL 2/4), EN 50159, IEC 61508 (SIL ⅔)
  • Developed acc. to EN 50129, EN 50128, IEC 61508
  • Extensive supervision functions
  • EN 50155 fully compliant
  • -40 °C to +85 °C
  • Conformal coating
     
8 Safe Digital Outputs
Low-Side Switching for d-SC

Main Features

  • 8 digital outputs, 24 V, 48 V, 72 V, 96 V, 110 V
  • 300 mA per channel, 1200 mA total
  • Low-side switch outputs (load to supply voltage)
  • Optical isolation from other cards
  • Fail-safe board architecture
  • Certified to EN 5012x (SIL 2/4), EN 50159, IEC 61508 (SIL ⅔)
  • Developed acc. to EN 50129, EN 50128, IEC 61508
  • Extensive supervision functions
  • EN 50155 fully compliant
  • -40 °C to +85 °C
  • Conformal coating