Modeling of CBTC carborne ATO functions using SCADE

In order for a train to be operated safely in driverless mode, automatic train protection (ATP) and automatic train operation (ATO) functions have to be safely designed based on the high credibility, especially for the train which is run in driverless mode. For this reason, ATP and ATO functions for CBTC(Communications-Based Train Control) carborne systems are designed using SCADE (Safety-Critical Application Development Environment) which is a graphic-based development tool, suitable for designing safety-critical systems. This paper focuses on the development of CBTC carborne ATO functions using SCADE. At the beginning of this paper, Characteristics of SCADE will be introduced. ATO functions of CBTC carborne equipment also will be introduced and the ATO functions will be modeled by using SCADE. In order to test the developed program, at first, the developed ATO functions will be tested on the SCADE simulator. Second, developed ATO functions will be tested again on the carborne simulator with the C-code generated by KCG 6.0, a code generator of the SCADE certified by the EN 50128 standard. Finally, the application results of the developed ATO functions in the field are also shown through the driverless operation in the Gyeong-San test line.