{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,3]],"date-time":"2026-02-03T21:47:19Z","timestamp":1770155239988,"version":"3.49.0"},"reference-count":32,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2021,3,2]],"date-time":"2021-03-02T00:00:00Z","timestamp":1614643200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2021,3,2]],"date-time":"2021-03-02T00:00:00Z","timestamp":1614643200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"name":"Rete Ferroviaria Italiana","award":["ca4\/2018"],"award-info":[{"award-number":["ca4\/2018"]}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Braz Comput Soc"],"published-print":{"date-parts":[[2021,12]]},"abstract":"<jats:title>Abstract<\/jats:title><jats:p>Railway systems are composed of a multitude of subsystems, sensors, and actuators that exchange datagrams through safety-critical communication protocols. However, the vast majority of these protocols rely on ad hoc interlacing mechanisms and safety codes which raise the heterogeneity and complexity of the overarching railway system. Therefore, Rete Ferroviaria Italiana, the company who is in charge of managing the Italian railway network, coordinated the definition of the Protocollo Vitale Standard (Standard Vital Protocol). This protocol is inspired to, and compliant with, the communication protocols adopted for the European Train Control System (ETCS) (SUBSET, UNISIG, 037, Euroradio FIS, version 2.3. 0; SUBSET, UNISIG, 098, RBC-RBC safe communication interface, 2007), and it is meant to become the standard layer to enable safe communication between components of the Italian railway system. This paper reports our experience in the design, implementation, verification, and validation of the Protocollo Vitale Standard in compliance with the European safety standards for railway systems. We first defined a safety plan and a verification and validation plan, which guide the design, development, verification, and validation activities as required by safety standards. Guidelines of such plans have been followed strictly until completion of the work, which concludes with the provision of a safety case where all safety evidences are summarized. Noticeably, we (i) selected appropriate safety mechanisms, (ii) verified the software design, (iii) implemented the software in compliance with code metrics and coding rules, (iv) conducted tests to validate the protocol against its functional and performance requirements, and ultimately (v) devised all relevant documentation and a safety case which summarizes the evidences needed for certification.<\/jats:p>","DOI":"10.1186\/s13173-021-00106-w","type":"journal-article","created":{"date-parts":[[2021,3,2]],"date-time":"2021-03-02T03:02:32Z","timestamp":1614654152000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":4,"title":["Development and validation of a safe communication protocol compliant to railway standards"],"prefix":"10.1186","volume":"27","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1779-6677","authenticated-orcid":false,"given":"Duccio","family":"Bertieri","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Andrea","family":"Ceccarelli","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tommaso","family":"Zoppi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Innocenzo","family":"Mungiello","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mario","family":"Barbareschi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Andrea","family":"Bondavalli","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2021,3,2]]},"reference":[{"key":"106_CR1","doi-asserted-by":"crossref","unstructured":"Avizienis A et al (2004) Basic concepts and taxonomy of dependable and secure computing. IEEE Trans Dependable Secure Comput 1(1):11\u201333","DOI":"10.1109\/TDSC.2004.2"},{"key":"106_CR2","doi-asserted-by":"crossref","unstructured":"Ceccarelli A, Zoppi T, Vasenev A, Mori M, Ionita D, Montoya L, & Bondavalli A (2018) Threat analysis in systems-of-systems: an emergence-oriented approach. ACM Transactions on Cyber-Physical Systems 3(2):1\u201324. USA.","DOI":"10.1145\/3234513"},{"issue":"1","key":"106_CR3","doi-asserted-by":"publisher","first-page":"17","DOI":"10.1109\/TII.2016.2610185","volume":"13","author":"ZE Bhatti","year":"2016","unstructured":"Bhatti ZE, Roop PS, Sinha R (2016) Unified functional safety assessment of industrial automation systems. IEEE Trans Industr Inform 13(1):17\u201326","journal-title":"IEEE Trans Industr Inform"},{"key":"106_CR4","first-page":"2418","volume":"14.6","author":"G Xie","year":"2017","unstructured":"Xie G et al (2017) Hardware cost design optimization for functional safety-critical parallel applications on heterogeneous distributed embedded systems. IEEE Trans Industr Inform 14.6:2418\u20132431","journal-title":"IEEE Trans Industr Inform"},{"key":"106_CR5","unstructured":"IEC, IEC61508 (2010) 61508 functional safety of electrical\/electronic\/programmable electronic safety-related systems. International Electrotechnical Commission"},{"key":"106_CR6","volume-title":"Railway applications - the specification and demonstration of Reliability, Availability, Maintainability and Safety (RAMS)","author":"CEI EN 50126","year":"2008","unstructured":"CEI EN 50126. Railway applications - the specification and demonstration of Reliability, Availability, Maintainability and Safety (RAMS), 2008."},{"key":"106_CR7","unstructured":"CENELEC, EN50159 (2010) Railway applications-communication, signalling and processing systems - safety-related communication in transmission systems [Report]: Standard.-[sl]. European Committee for Electro-Technical Standardization"},{"key":"106_CR8","unstructured":"CENELEC, EN50128. Railway applications-communication, signaling and processing systems-software for railway control and protection systems, 2011"},{"key":"106_CR9","unstructured":"CEI EN 50129 (2004) Railway applications - communication, signalling and processing systems - Safety related electronic systems for signalling"},{"key":"106_CR10","doi-asserted-by":"crossref","unstructured":"Sniady A, Soler J (2012) An overview of GSM-R technology and its shortcomings. In: 2012 12th International Conference on ITS Telecommunications. USA: IEEE; pp 626\u2013629","DOI":"10.1109\/ITST.2012.6425256"},{"key":"106_CR11","unstructured":"Fall KR (2011) TCP\/IP Illustrated, Volume 1: The Protocols, Addison-Wesley Professional, USA, ISBN: 9780321336316"},{"key":"106_CR12","unstructured":"UNISIG (2015) SUBSET-037 EuroRadio FIS. Version 3.2.0"},{"key":"106_CR13","unstructured":"Winter P et al (2009) Compendium on ERTMS. Eurail Press"},{"key":"106_CR14","volume-title":"098, RBC-RBC safe communication interface","author":"SUBSET, UNISIG","year":"2007","unstructured":"SUBSET, UNISIG. 098, RBC-RBC safe communication interface, 2007."},{"key":"106_CR15","doi-asserted-by":"crossref","unstructured":"Bertieri D, Zoppi T, Mungiello I, Ceccarelli A, Barbareschi M, Bondavalli A (2019) Implementation, verification and validation of a safe and secure communication protocol for the railway domain. In: LADC 2019 9th American symposium on dependable computing","DOI":"10.1109\/LADC48089.2019.8995727"},{"issue":"6","key":"106_CR16","first-page":"46","volume":"30","author":"R Wang","year":"2008","unstructured":"Wang R, Zhao H-b, Wang S-m (2008) Research on uplink-signal simulator used for BTM test in balise system. J China Railway Soc 30(6):46\u201350","journal-title":"J China Railway Soc"},{"key":"106_CR17","unstructured":"Technical Committee ISO\/IEC JTC 1\/SC 7 (1998) ISO\/IEC 10746-1:2009 Information technology \u2014 Open distributed processing \u2014 Reference model: Overview \u2014 Part 1"},{"key":"106_CR18","unstructured":"RFI (2017) Relazione Tecnica RFI DTCDNSSS RT IS 05 021 F. Protocollo Vitale Standard. Internal report (in Italian). Italy"},{"issue":"441","key":"106_CR19","first-page":"0311","volume":"197","author":"PUB, NIST FIPS","year":"2001","unstructured":"PUB, NIST FIPS (2001) 197: advanced encryption standard (AES). Fed Inf Process Stand Publ 197(441):0311","journal-title":"Fed Inf Process Stand Publ"},{"key":"106_CR20","volume-title":"The aes-cmac algorithm. RFC 4493","author":"J Song","year":"2006","unstructured":"Song, Junhyuk, et al. The aes-cmac algorithm. RFC 4493, 2006."},{"issue":"2","key":"106_CR21","doi-asserted-by":"publisher","first-page":"317","DOI":"10.1109\/TCOM.1982.1095473","volume":"30","author":"J Wolf","year":"1982","unstructured":"Wolf J, Michelson A, Levesque A (1982) On the probability of undetected error for linear block codes. IEEE Trans Commun 30(2):317\u2013325","journal-title":"IEEE Trans Commun"},{"issue":"2","key":"106_CR22","first-page":"63","volume":"6","author":"M Franekova","year":"2011","unstructured":"Franekova M, Rastocny K (2011) Modelling of disturbing effects within communication channel for safety-related communication system. Adv Electr Electron Eng 6(2):63\u201368","journal-title":"Adv Electr Electron Eng"},{"key":"106_CR23","doi-asserted-by":"crossref","unstructured":"Koopman P, Chakravarty T (2004) Cyclic redundancy code (CRC) polynomial selection for embedded networks. In: International conference on dependable systems and networks, 2004. IEEE, pp 145\u2013154","DOI":"10.1109\/DSN.2004.1311885"},{"issue":"10","key":"106_CR24","doi-asserted-by":"publisher","first-page":"851","DOI":"10.1109\/LPT.2012.2189002","volume":"24","author":"S Loquai","year":"2012","unstructured":"Loquai S et al (2012) 10-Gb\/s pulse-amplitude modulated transmission over 1-mm large-core polymer optical fiber. IEEE Photon Technol Lett 24(10):851\u2013853","journal-title":"IEEE Photon Technol Lett"},{"key":"106_CR25","volume-title":"Guidelines for the use of the C language in critical systems","author":"MISRA C:2012s","year":"2013","unstructured":"MISRA C:2012s (2013) Guidelines for the use of the C language in critical systems. MIRA Limited, Warwickshire"},{"key":"106_CR26","unstructured":"Coding Styles. gnu.org\/prep\/standards\/standards.html#Writing-C"},{"issue":"4","key":"106_CR27","first-page":"1","volume":"10","author":"LH Rosenberg","year":"1997","unstructured":"Rosenberg LH, Hyatt LE (1997) Software quality metrics for object-oriented environments. Crosstalk J 10(4):1\u20136","journal-title":"Crosstalk J"},{"key":"106_CR28","volume-title":"C\/C++ coding standard recommendations for IEC 61508, version V1, revision R2","author":"Exida Consulting LLC","year":"2011","unstructured":"Exida Consulting LLC. C\/C++ coding standard recommendations for IEC 61508, version V1, revision R2 (2011)"},{"key":"106_CR29","volume-title":"Ent - a pseudorandom number sequence test program","author":"J Walker","year":"2008","unstructured":"John Walker, Ent - a pseudorandom number sequence test program. http:\/\/fourmilab.ch\/random\/, 2008."},{"key":"106_CR30","unstructured":"GCovr Library. https:\/\/gcovr.com\/en\/stable\/"},{"key":"106_CR31","unstructured":"LCov Library. https:\/\/github.com\/linux-test-project\/lcov"},{"key":"106_CR32","unstructured":"Polyspace tool, Matlab. https:\/\/it.mathworks.com\/products\/polyspace.html"}],"container-title":["Journal of the Brazilian Computer Society"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1186\/s13173-021-00106-w.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1186\/s13173-021-00106-w\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1186\/s13173-021-00106-w.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,8,13]],"date-time":"2024-08-13T10:46:12Z","timestamp":1723545972000},"score":1,"resource":{"primary":{"URL":"https:\/\/journal-bcs.springeropen.com\/articles\/10.1186\/s13173-021-00106-w"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,3,2]]},"references-count":32,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2021,12]]}},"alternative-id":["106"],"URL":"https:\/\/doi.org\/10.1186\/s13173-021-00106-w","relation":{},"ISSN":["0104-6500","1678-4804"],"issn-type":[{"value":"0104-6500","type":"print"},{"value":"1678-4804","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,3,2]]},"assertion":[{"value":"17 June 2020","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"24 January 2021","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"2 March 2021","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"The authors declare that they have no competing interests.","order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}}],"article-number":"5"}}