Safe Control Product Family
The robust and rail-ready safe control components comply with the railway standards for environmental and EMC conditions EN 50155 (rolling-stock) and EN 50125-3 / EN 50121-4 (signalling/trackside).
Safe Control Systems

The MH50C can act as the central component of a train control system lie ATO or ATP or trackside applications like ZC or ATP based on ERTMS/ETCS, PTC, PZB/Indusi or ZUB.
Features
- For Applications up to SIL4 (EN5012x) or SIL3 (IEC61508)
- Certified safe CPU board with 3 CPUs
- Safe I/O boards
- QNX safe operating system available
- Certification packages available
- Extensible by distributed safe I/O boxes connected via real-time Ethernet
- Optional MVB, RS232, RS422, RS485, CAN, GPS
- Compact 40 HP application-ready system
- Rack-mounted or wall-mounted
- For rolling stock and wayside applications

KT8 is a safe remote I/O box certifiable up to SIL 4 for TCS applications like train control, ATO or ATP using the duagon SAFE CONTROL System.
Features
- For Applications up to SIL4 (EN5012x) or SIL3 (IEC61508)
- Safe I/O boards
- Certification packages available
- Distributed safe I/O and controller boxes connected via real-time Ethernet
- Support for QNX safe operating system
- Compact 40 HP housing for remote locations
- Full EN 50155 compliance
- Rack-mounted or wall-mounted
Safe Board-Level Computers
The F75P is an x86 Intel Atom E680T based fail-safe vital embedded computer, certified to SIL 4 with onboard dual redundancy for functional safety and a third CPU for I/O communication. It targets safety-critical applications in embedded railway and wayside computers and in industrial automation. F75P is also part of the duagon SAFE CONTROL System.
Features
- 2x Intel Atom E6xx, up to 1 GB DDR2 RAM (each) for onboard dual redundancy
- 1x Intel Atom E6xx, up to 2 GB DDR2 for I/O
- Independent supervisors for each block
- Fail-safe board architecture
- Event logging
- SIL 4 certification packages available for hardware and software (QNX)
- TÜV Süd certified according to EN 50129 (SIL 4), EN 50128 (SIL 4) and IEC 61508 (SIL3)
- Full EN 50155 compliance
- -40 °C to +70 °C (+85 °C)
- Conformal coating

Safe I/O Boards

Main Features
- 8 digital outputs, 24 V, 48 V, 72 V, 96 V, 110 V
- 300 mA per channel, 1200 mA total
- High-side switch outputs (load to ground)
- Optical isolation from other cards
- Fail-safe board architecture
- Certified to EN 5012x (SIL 2/4), EN 50159, IEC 61508 (SIL ⅔)
- Developed acc. to EN 50129, EN 50128, IEC 61508
- Extensive supervision functions
- EN 50155 fully compliant
- -40 °C to +85 °C
- Conformal coating

Main Features
- 16 digital inputs, 24 V, 48 V, 72 V, 96 V, 110 V
- 1 to 10 mA, pulsed
- Optical isolation from other cards
- Fail-safe board architecture
- Certified to EN 5012x (SIL 2/4), EN 50159, IEC 61508 (SIL ⅔)
- Developed acc. to EN 50129, EN 50128, IEC 61508
- Extensive supervision functions
- EN 50155 fully compliant
- -40 °C to +85 °C
- Conformal coating

Main Features
- 8 digital outputs, 24 V, 48 V, 72 V, 96 V, 110 V
- 300 mA per channel, 1200 mA total
- Low-side switch outputs (load to supply voltage)
- Optical isolation from other cards
- Fail-safe board architecture
- Certified to EN 5012x (SIL 2/4), EN 50159, IEC 61508 (SIL ⅔)
- Developed acc. to EN 50129, EN 50128, IEC 61508
- Extensive supervision functions
- EN 50155 fully compliant
- -40 °C to +85 °C
- Conformal coating
