{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,30]],"date-time":"2026-04-30T00:09:56Z","timestamp":1777507796409,"version":"3.51.4"},"reference-count":23,"publisher":"Springer Science and Business Media LLC","issue":"4","license":[{"start":{"date-parts":[[2023,7,6]],"date-time":"2023-07-06T00:00:00Z","timestamp":1688601600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2023,7,6]],"date-time":"2023-07-06T00:00:00Z","timestamp":1688601600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"name":"Politecnico di Bari"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Real-Time Syst"],"published-print":{"date-parts":[[2023,12]]},"abstract":"<jats:title>Abstract<\/jats:title><jats:p>Recent advances in technology and railway have led to the introduction of systems and infrastructures capable of driving trains automatically. The Automatic Train Operation (ATO) system has been optimized for active human supervision. The next challenge is to realize ATO systems capable of achieving unsupervised operations on the mainlines. However, at this aim, additional safety functionalities should be provided. In this paper, we propose a pioneer hardware\/software Vital Control Module (VCM) architecture capable of expanding the control capabilities of the existing train control system. The VCM includes a Printed Circuit Board (PCB), to be integrated into the cabin equipment, managed by a reliable and safe hard Real-Time Operating System (RTOS). Both hardware and software are developed to be compliant with related safety standards. The VCM integrates an application logic that acts as an on-board equipment control core, assessing the overall operativity in real-time, and promptly issuing emergency brakes if hazardous situations occur. The application logic has been developed with a model-based approach via Simulink\/Stateflow tool and implemented as a C-script on the Xilinx Ultrascale\u2009+\u2009core housed on the PCB. We have used two testbeds to evaluate the VCM performance. Experimental results showed that the Worst-Case Response Time (WCRT) by the application logic is 13.6 times smaller than the most limiting specification-related deadline. The achieved earliness (\u2212\u00a01.8\u00a0ms out of 2\u00a0ms of deadline) allows for the easy expansion of VCM\u2019s train protection capabilities in the future. Results from the second testbed showed that the VCM can intervene to mitigate hazardous situations\u2009~\u20092 times faster than the current automatic train protection systems according to the related standard.<\/jats:p>","DOI":"10.1007\/s11241-023-09401-5","type":"journal-article","created":{"date-parts":[[2023,7,6]],"date-time":"2023-07-06T17:01:59Z","timestamp":1688662919000},"page":"636-661","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":9,"title":["A real-time vital control module to increase capabilities of railway control systems in highly automated train operations"],"prefix":"10.1007","volume":"59","author":[{"given":"Arturo","family":"Amendola","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mario","family":"Barbareschi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Salvatore","family":"De Simone","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3927-8686","authenticated-orcid":false,"given":"Giovanni","family":"Mezzina","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Alberto","family":"Moriconi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Cataldo Luciano","family":"Saragaglia","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Diana","family":"Serra","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Daniela","family":"De Venuto","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2023,7,6]]},"reference":[{"key":"9401_CR1","doi-asserted-by":"crossref","unstructured":"T. P. Baker, (1990) A stack-based resource allocation policy for realtime processes. In [1990] Proceedings 11th Real-Time Systems Symposium, 1990: 191\u2013200.","DOI":"10.1109\/REAL.1990.128747"},{"key":"9401_CR2","unstructured":"BSI - BS EN 50124-1 \u2013 TC - Tracked Changes (Redline) - Railway applications - Insulation coordination Part 1: Basic requirements - Clearances and creepage distances for all electrical and electronic equipment. February 2020a"},{"key":"9401_CR3","unstructured":"BSI - BS EN 50124-2 \u2013 TC - Tracked Changes (Redline) - Railway applications - Insulation coordination Part 2: Overvoltages and related protection. February 2020b"},{"key":"9401_CR4","unstructured":"CENELEC - EN 50128 Railway applications - Communication, signalling and processing systems - Software for railway control and protection systems. June 2020"},{"key":"9401_CR5","doi-asserted-by":"publisher","first-page":"29","DOI":"10.1007\/978-3-030-72003-2_3","volume-title":"Operating Rules and Interoperability in Trans-National High-Speed Rail","author":"P Deutsch","year":"2022","unstructured":"Deutsch P (2022) Overview ERTMS\/ETCS Baseline 3 and Beyond. Operating Rules and Interoperability in Trans-National High-Speed Rail. Springer, Cham, pp 29\u201394"},{"key":"9401_CR6","doi-asserted-by":"publisher","unstructured":"C. Donnarumma, P. Fara, G. Serra, S. Di Leonardi and M. Marinoni (2019) EN-50128 Certification-Oriented Design of a Safety-Critical Hard Real-Time Kernel. 2019 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW), Berlin, Germany, pp. 314\u2013317, https:\/\/doi.org\/10.1109\/ISSREW.2019.00090","DOI":"10.1109\/ISSREW.2019.00090"},{"key":"9401_CR7","unstructured":"Embedded Coder for MATLAB\u00ae 2022b\/ Simulink. Mathworks. https:\/\/it.mathworks.com\/help\/pdf_doc\/ecoder\/ecoder_ref.pdf. Accessed 1 Mar 2023"},{"key":"9401_CR8","unstructured":"EN 50155 (2022) Railway applications - Rolling stock - Electronic equipment. June 2022"},{"key":"9401_CR22","unstructured":"ERA, UNISIG, EEIG, ERTMS USERS GROUP - Subset-026 (2016) ERTMS\/ETCS System Requirements Specifications. Issue 3.6.0. May 2016"},{"key":"9401_CR9","doi-asserted-by":"publisher","first-page":"137","DOI":"10.1007\/978-3-030-77543-8_13","volume-title":"International Conference on Rigorous State-Based Methods","author":"R Eschbach","year":"2021","unstructured":"Eschbach R (2021) Formalizing and Analyzing System Requirements of Automatic Train Operation over ETCS Using Event-B. In: Raschke A, M\u00e9ry D (eds) International Conference on Rigorous State-Based Methods. Springer, Cham, pp 137\u2013142"},{"key":"9401_CR10","unstructured":"Fara P et al. (2021) Scheduling Replica Voting in Fixed-Priority Real-Time Systems.\" 33rd Euromicro Conference on Real-Time Systems (ECRTS 2021). Schloss Dagstuhl-Leibniz-Zentrum f\u00fcr Informatik."},{"key":"9401_CR11","doi-asserted-by":"crossref","unstructured":"Gustafsson, Jan, and Andreas Ermedahl. (2007) Experiences from applying WCET analysis in industrial settings. 10th IEEE International Symposium on Object and Component-Oriented Real-Time Distributed Computing (ISORC'07). IEEE.","DOI":"10.1109\/ISORC.2007.36"},{"key":"9401_CR12","doi-asserted-by":"crossref","unstructured":"Lehoczky, John P. (1990) Fixed priority scheduling of periodic task sets with arbitrary deadlines. [1990] Proceedings 11th Real-Time Systems Symposium. IEEE.","DOI":"10.1109\/REAL.1990.128748"},{"key":"9401_CR13","doi-asserted-by":"crossref","unstructured":"Markovits, Tibor Gergely, and Gy\u00f6rgy R\u00e1cz. (2021) Safety principles for designing a generic product for railway signalling systems. 2021 Fifth World Conference on Smart Trends in Systems Security and Sustainability (WorldS4). IEEE.","DOI":"10.1109\/WorldS451998.2021.9514005"},{"key":"9401_CR14","first-page":"15","volume":"199","author":"L Martinez","year":"2020","unstructured":"Martinez L, Martin U (2020) Terminology, differences, and challenges of communications-based train control and european train control systems. Comput Railways XVII: Railway Eng Design and Operation 199:15","journal-title":"Comput Railways XVII: Railway Eng Design and Operation"},{"key":"9401_CR15","volume-title":"Applications in Electronics Pervading Industry, Environment and Society ApplePies 2021 Lecture Notes in Electrical Engineering, l 866","author":"G Mezzina","year":"2022","unstructured":"Mezzina G, Barbareschi M, De Simone S, Di Benedetto A, Narracci G, Saragaglia CL, Serra D, De Venuto D (2022) Smart On-Board Surveillance Module for Safe Autonomous Train Operations. In: Saponara S, De Gloria A (eds) Applications in Electronics Pervading Industry, Environment and Society ApplePies 2021 Lecture Notes in Electrical Engineering, l 866. Springer, Cham"},{"key":"9401_CR16","unstructured":"MISRA C:2012 Compliance Considerations. MISRA C:2012 compliance, including modeling style, block usage, and configuration settings. Mathworks. https:\/\/it.mathworks.com\/help\/simulink\/misra-c2012-compliance-considerations.html. Accessed 1 Mar 2023"},{"key":"9401_CR17","unstructured":"Project Shift2Rail. Online available: https:\/\/projects.shift2rail.org\/s2r_ip_TD_r.aspx?ip=2&td=b47388a9-b1f8-4ed8-9872-bb7708f7c08d. Accessed 1 Mar 2023"},{"key":"9401_CR18","unstructured":"Simulink Coverage for MATLAB\u00ae 2022b\/ Simulink. Mathworks. https:\/\/it.mathworks.com\/products\/simulink-coverage.html. Accessed 1 Mar 2023"},{"issue":"1","key":"9401_CR19","doi-asserted-by":"publisher","first-page":"27","DOI":"10.1007\/BF02341920","volume":"1","author":"B Sprunt","year":"1989","unstructured":"Sprunt B, Sha L, Lehoczky J (1989) Aperiodic task scheduling for hardreal-time systems. Real-Time Syst 1(1):27","journal-title":"Real-Time Syst"},{"key":"9401_CR20","unstructured":"Stateflow for MATLAB\u00ae 2022b\/ Simulink. Mathworks. https:\/\/it.mathworks.com\/products\/stateflow.html. Accessed 1 Mar 2023"},{"key":"9401_CR21","unstructured":"SUBSET 041 (2012) ERTMS\/ETCS - RAMS Requirements Specification - Chapter 2 \u2013 RAM. Issue 3.1.0. March 2012"},{"key":"9401_CR23","doi-asserted-by":"publisher","first-page":"548","DOI":"10.1016\/j.trc.2017.09.009","volume":"85","author":"J Yin","year":"2017","unstructured":"Yin J et al (2017) Research and development of automatic train operation for railway transportation systems: a survey. Transport Res Part C: Emerg Technol 85:548\u2013572","journal-title":"Transport Res Part C: Emerg Technol"}],"container-title":["Real-Time Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11241-023-09401-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s11241-023-09401-5\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11241-023-09401-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,12,8]],"date-time":"2023-12-08T17:14:37Z","timestamp":1702055677000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s11241-023-09401-5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,7,6]]},"references-count":23,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2023,12]]}},"alternative-id":["9401"],"URL":"https:\/\/doi.org\/10.1007\/s11241-023-09401-5","relation":{},"ISSN":["0922-6443","1573-1383"],"issn-type":[{"value":"0922-6443","type":"print"},{"value":"1573-1383","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,7,6]]},"assertion":[{"value":"9 June 2023","order":1,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"6 July 2023","order":2,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}