/CENELEC Phase 3/Generic Preliminary Hazard Analysis Template

Transcription

1 Project CENELEC Phase 3 /CENELEC Phase 3/ Version: 6.0 Printed by: Holter Printed on: 22 May 2003 Generated from DOORS V5.2 Copyright (c) 2003 UIC / Euro-Interlocking

2 Contents 1 Introduction Background Purpose Scope Structure Unique identification of each statement in the Euro-Interlocking Standard (EIS) 2 2 The approach structured hazard analysis An overview of the phases Analysis phase 1: Determining the scope of the train movement process The objective of the train movement process Defining applicable scenarios Overview of generic train movement process scenarios Analysis phase 2: Describing the train movement process The structure of the process description Principles for the definition of states Analysis Phase 3: Analysing deviations in the train movement process Analysis Phase 4: Defining hazards Hazard identification Classifying hazards 9 5 Analysis Phase 3: Analysing train movement 28 process deviations 6 Analysis phase 4: Defining hazards Hazards involving deviations within one scenario Hazards involving the same acr in several scenarios Hazards involving different acrs within several scenarios Hazards involving combining external influences with acrs Hazards involving combining new states with process states Further analyses Introduction Process description Defining functions and objects Functions Objects Hazard analysis Hazard Analysis Glossary References Analysis phase 1: Determining the scope of the 9 train movement process 4 Analysis phase 2: Describing the train movement 11 process Contents Copyright (c) 2003 UIC / Euro-Interlocking i

3 GPHAT-1-Com 1 Introduction GPHAT-2-Com 1.1 Background GPHAT-3-Com The purpose of an interlocking system is enable rail traffic move safely within an appropriate time frame. One of the main objectives of the Euro-Interlocking project is create the Euro-Interlocking Standards for an interlocking system. Significantly lower life-cycle costs are expected result. The Euro-Interlocking Standards will be the basis on which suppliers will develop or apply generic products usable in participating countries. Such products will in turn be the basis for cost-efficient interlocking systems. GPHAT-4-Com The main objective of this is identify hazards that could occur as a result of deviations in the train movement process when using new or existing generic interlocking systems. By focusing on the train movement process, the analysis and results are independent of the final hardware and software solutions that suppliers of interlocking systems may choose. GPHAT-5-Com The hazard analysis encompasses four steps: - First: Identification of the scenarios that make up the train movement process. - Second: For each scenario, identification of the acrs involved and the sequence of (desired) states that these acrs traverse. - Third: Identification of deviations, including undesired states these acrs may go through, and external influences that may lead such an undesired state. - Fourth: Identificain of hazards that could occur as a result of these deviations, if no action is taken. GPHAT-6-Com The analysis is not restricted hazards resulting from undesired states for a single acr, but also includes hazards resulting from the combined undesired states for two acrs. GPHAT-7-Com The result is a list of various types of hazards that could occur in the train movement process within Euro-Interlocking's scope, and that should be taken in account by interlocking systems. GPHAT-8-Com This document serves as a basis for the definition of guidelines for later solution-dependent hazard analyses at functional and system level. Suppliers of interlocking systems should carry out these solution-dependent hazard analyses ensure that interlocking systems meet the safety requirements of national railway safety authorities. GPHAT-402-Com The Euro-Interlocking document, "Guidelines for Hazard Analysis [GuidHaz] presents additional background on hazard analysis. Section 7.4 of the present document gives a summary. GPHAT-9-Com 1.2 Purpose Copyright (c) 2003 UIC / Euro-Interlocking Page 1 of 152

4 GPHAT-10-Com The main objective of an interlocking system is enable rail traffic move safely within an appropriate time frame and appropriate conditions. This implies that train operations are free of unacceptable risks. Identifying all hazards is a precondition determining what level of risk is acceptable. GPHAT-11-Com CENELEC EN defines a hazard as a physical situation with a potential for human injury. GPHAT-12-Com The main objective of this analysis is identify hazards in the solution-independent train movement process, within the scope of railway purposes. This results in a concrete hazard list. GPHAT-13-Com Together, these identified hazards are the basis for the safety approval process. GPHAT-14-Com 1.3 Scope GPHAT-324-Com This document is a template for a generic hazard analysis and not the analysis itself. Chapter 2 is therefore the heart of the document. Chapters 3 6 present an example of how execute the approach described in Chapter 2. GPHAT-15-Com The scope of this is the train movement process, independent of the solutions that assure safe and timely train movement. This train movement process is restricted the Euro-Interlocking project scope, which encompasses interlocking systems. GPHAT-16-Com 1.4 Structure GPHAT-17-Com Chapter 1 is this introduction and provides some background for the analysis. Chapter 2 describes the applied method. Chapters 3 6 describe the results of the performed analysis. Chapter 7 provides a conclusion and describes how this document relates further analyses. GPHAT-18-Com 1.5 Unique identification of each statement in the Euro-Interlocking Standard (EIS) GPHAT-19-Com To allow the unique identification of modification requirements within the EIS, the letters GPHAT () precede the number for each object in this document. GPHAT-20-Com 2 The approach structured hazard analysis GPHAT-21-Com 2.1 An overview of the phases Copyright (c) 2003 UIC / Euro-Interlocking Page 2 of 152

5 Euro-Interlocking scope Railway purposes Scope the train movement process Describe train movement process Analyse train movement process deviations Define hazards Initial Hazard List GPHAT-22-Com Determining the scope of the train movement process: Define the various scenarios by which the interlocking system will play a role in achieving higher railway purposes, for example transport of goods and people. This results in a list of scenarios that are needed carry out a train movement process within the interlocking scope. GPHAT-23-Com Describing the train movement process: For each scenario, describe which acrs are involved and the sequence of states they go through. These scenarios gether comprise the train movement process. GPHAT-24-Com Analysing train movement process deviations: Identify undesired states for the process acrs. This gives insight in possible deviations in the train movement process. GPHAT-25-Com Defining hazards: Identify hazards that could result from deviations from the normal train movement process, if no action is taken. GPHAT-26-Com 2.2 Analysis phase 1: Determining the scope of the train movement process GPHAT-27-Com The objective of the train movement process GPHAT-28-Com Several objectives for train movement processes can be defined. In general terms, there is a need for transport of people and goods by rail. On this basis, a number of scenarios can be defined; see paragraph Copyright (c) 2003 UIC / Euro-Interlocking Page 3 of 152

6 GPHAT-29-Com The high-level objective of the interlocking system is enable trains move in such a way that they can carry people or goods safely within an appropriate time frame and appropriate conditions. Furthermore, this movement must be based on the available infrastructure and necessary train movements. This implies scenarios such as coupling and uncoupling sections of trains. GPHAT-30-Com Defining applicable scenarios GPHAT-31-Com The chosen scenarios determine the scope of the hazard analysis. GPHAT-32-Com Initial bases for the scenarios are the context of the Euro-Interlocking project as defined in its Domain Knowledge document, and an analogous NS-RIB study. (See the references at the end of this document.) GPHAT-33-Com Each scenario needs be a recurrent and independent activities that help achieve the higher purposes of the train movement process. This "building-block" approach yields a simpler description of the train movement process. GPHAT-34-Com Overview of generic train movement process scenarios GPHAT-35-Com A basis for the hazard analysis process is a list of all possible scenarios that can used describe the train movement process. The assumption can be made that these high level scenarios - or analogous ones - are applicable operations on any railway. Copyright (c) 2003 UIC / Euro-Interlocking Page 4 of 152

7 Scenario Identification Scenario name A. Start train (from platform) B. Move train from Y X C. Drive through several power supply terriries D. Sp train (at platform) E. Turn train or change head F. Couple trains G. Uncouple trains H. Move train from one station another I. Use road crossing GPHAT-396-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 5 of 152

8 Scenario Identification Scenario name J. Use special crossing K. Use pedestrian crossing L. Hand over infra control area another infra control M. Hand over infra control area the original infra control N. Start using work area O. Sp using work area P. Move (work) train within area Q. Move (work) train between two areas R. Move machinery within area S. Perform trackside maintenance T. Facilitate train movement GPHAT-36-Com 2.3 Analysis phase 2: Describing the train movement process GPHAT-37-Com In this phase, the scenarios for the analysis are selected. This selection of scenarios determines the scope of the analysis. The selection of scenarios is based on: GPHAT-38-Com - the Euro-Interlocking project scope and GPHAT-39-Com - the relevant interlocking system objective(s). GPHAT-40-Com The scenarios describe the desired states for acrs (within the train movement process). Combinations of these scenarios will form the train movement process. Copyright (c) 2003 UIC / Euro-Interlocking Page 6 of 152

9 GPHAT-41-Com The structure of the process description GPHAT-42-Com The scenarios will be described in more detail so as conform the following structure and concepts: Acrs within the train movement process Start state Train Control Infrastructure Train... Action state of the acr Final state GPHAT-43-Com Acr: A system (such as people, means or procedures) that helps carry out the train movement process. Acrs also play an important role in bounding the scope. GPHAT-44-Com State: A description of the state of a specific acr. GPHAT-45-Com Action: An event that is needed change states. GPHAT-46-Com Principles for the definition of states GPHAT-47-Com For the description of the scenarios, the following principles apply: - A state must be described as the situation between two actions. - A state must be based on a small number of terms and concepts. GPHAT-48-Com 2.4 Analysis Phase 3: Analysing deviations in the train movement process Copyright (c) 2003 UIC / Euro-Interlocking Page 7 of 152

10 GPHAT-49-Com The bases for this analysis are the scenarios and corresponding desired states of the acrs. GPHAT-50-Com In this phase, the states are identified that deviate from the desired states and that may lead a failure mode and thus indirectly a hazard. By using FMEA (failure modes effects analysis), the state deviations can be defined in a structured way. GPHAT-51-Com One basis for identifying failure modes using FMEA is the use of guide words identify deviations. The proposed guide words are: - No or Not: No part of the intention is achieved but nothing else happens. For example, the train is NOT moving. - More: Some qualitative increase over what was intended. - Less: Some quantitative decrease over what was intended. - Better: Some qualitative increase over what was intended. - Worse: Some qualitative decrease over what was intended. - Opposite: The logical opposite of the intention happens. - Something else than: Something quite different happens GPHAT-52-Com 2.5 Analysis Phase 4: Defining hazards GPHAT-53-Com In this phase, the hazards involved in the train movement process are identified. This identification starts with the list of desired and undesired states. Based on these states and external influences, hazards are identified. GPHAT-54-Com Hazard identification GPHAT-55-Com Hazards are identified in terms of the (combination of) states, acrs, and environmental conditions that may lead hazardous situations. GPHAT-56-Com Within a single scenario, some process deviations could lead hazards. GPHAT-57-Com When considering the combination of effects that one acr can have in different scenarios, only physical acrs are relevant, because only these could directly result in hazards. Furthermore, they must be acrs that are active at that moment. GPHAT-58-Com Hazards can involve several states of different acrs in a combination of scenarios. It is possible, for example, that two trains are heading wards a specific location X. GPHAT-59-Com Furthermore, external influences can have an impact on the train movement process and can result in hazards. Copyright (c) 2003 UIC / Euro-Interlocking Page 8 of 152

11 GPHAT-60-Com External influences in combination with an acr could lead a hazard or a new undesired state in the process. GPHAT-61-Com These new undesired states in combination with other states (desired or not) could also lead hazards. GPHAT-62-Com Classifying hazards GPHAT-63-Com To keep the identified hazards in a structure, they are classified by the type of hazardous situations they may lead. An example: A moving train approaches a stationary train. GPHAT-64-Com 3 Analysis phase 1: Determining the scope of the train movement process GPHAT-65-Com The scope of this is the train movement process. To bound the scope of the train movement process for the Euro-Interlocking project, the following starting points are used: GPHAT-66-Com - The generic train movement process - The interlocking system context diagram (see Domain Knowledge document). - The objective(s) of the interlocking system. GPHAT-67-Com On the basis of these initial circumstances, the various scenarios that apply this analysis are identified. GPHAT-68-Com The generic train movement process is defined by the scenarios in section By comparing this generic train movement process with the interlocking system context diagram, a subset of scenarios applicable this analysis is be identified. GPHAT-69-Com The identified scenarios establish a solution-independent train movement process. The following table lists the scenarios from paragraph The scenarios C, H, I, J and K are not part of the final analysis: Copyright (c) 2003 UIC / Euro-Interlocking Page 9 of 152

12 Scenario Identification Scenario name Argument A. Start train (from platform) B. Move train from Y X C. Drive through several power supply terriries Excluded: Power supply is considered an external influence D. Sp train (at platform) E. Turn train or change head F. Couple trains G. Uncouple trains H. Move train from one station another Excluded: This is a combination of the scenarios A,B,D I. Use road crossing Excluded: This is considered an external influence GPHAT-397-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 10 of 152

13 Scenario Identification Scenario name Argument J. Use special crossing See I. K. Use pedestrian crossing See I. L. Hand over infra control area another infra control M. Hand over infra control area the original infra control N. Start using work area O. Sp using work area P. Move (work) train within area Q. Move (work) train between two areas R. Move machinery within area S. Perform trackside maintenance T. Facilitate train movement GPHAT-70-Com 4 Analysis phase 2: Describing the train movement process GPHAT-71-Com In the diagrams below, all the scenarios listed in chapter 3 are presented in greater detail. These scenarios are the basis for determining deviations in the train movement process. Main acrs are as follows: GPHAT-72-Com - Train control: people and technical systems responsible for controlling the train. GPHAT-73-Com - Infra control: people and technical systems responsible for controlling the infrastructure. GPHAT-74-Com - Shunter: The person responsible for coupling and uncoupling trains. Copyright (c) 2003 UIC / Euro-Interlocking Page 11 of 152

14 GPHAT-75-Com - Area user: People working on the track, such as a maintenance team. GPHAT-325-Com For traceablility, each action within a scenario is identified by "CA" plus a number (for example CA01). GPHAT-76-Com A Y Z X GPHAT-77-Com Scenario: A: Start train (from platform) Acrs: - Train control - Train Constraints: - Train movement from Y X is possible - The desired (and allowed) spping place is located at Z, between Y and X State matrix: Actions Acrs Train control Train Initial state Knows that the train is standing still at Z Is standing still at Z ca52 establish ready for departure Knows that the train is ready for departure - ca01 authorise move Authorises the train move wards X is moving wards X End state Moves train X Is moving wards / located at X GPHAT-78-Com A Y Z X GPHAT-79-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 12 of 152

15 Scenario: Acrs: Constraints: State matrix: Actions Acrs B: Move train from Y X - Infra control - Train control - Train - The area between Y and X falls under one single infra control (if not: see scenario Q) Infra control Train control Train Initial state Expects that the train starts move wards Y Moves train Y Is moving wards / located at Y ca25 request move from Y X - facilitate train movement (scenario T) ca33 report that train movement from Y X is possible knows that the train control wants move the train from Y X expects authorization make the train move from Y X expects that train control knows that movement from Y X is authorised knows that movement from Y X is authorised ca09 move from Y X - expects that infra control knows that train is located between Y and X ca51 report that the train is located between Y and X knows that the train is located between Y and X - - is moving wards / located at X - is moving wards / located at X End state Expects the train move X Moves train X Is moving wards / located at X Copyright (c) 2003 UIC / Euro-Interlocking Page 13 of 152

16 GPHAT-80-Com A Y Z X GPHAT-81-Com Scenario: D: Sp train (at platform) Acrs: - Infra control - Train control - Train Constraints: - Train movement from Y X is possible - The desired (and permitted) sp place is located at Z, between Y and X State matrix: Actions Acrs Infra control Train control Train Initial state Expects that the train is moving wards X Moves train X Moves X ca34 report that the sp place is approaching expects train control know that the asked sp place is nearing knows that the train is asked sp at Z ca02 bring sp - Knows that the train has spped at Z - is spped at Z End state Knows that the train is standing still at Z Knows that the train is standing still at Z Is standing still at Z GPHAT-82-Com A Y Z X Copyright (c) 2003 UIC / Euro-Interlocking Page 14 of 152

17 GPHAT-83-Com Scenario: E: Turn train or change head Acrs: Constraints: State matrix: - Train control - Train - Train movement from Y X is possible - At the permitted spping place, the direction of traffic changes - The train is standing still at the desired (and permitted) spping place Z, between Y and X Actions Acrs Train control Train Initial state Knows that the train stands still at Z Stands still at Z ca03 switch off expects the train be turned off is turned off ca28 report that the train is switched off knows that the train is turned off expects train control know that the train is turned off ca04 prepare for new direction of traffic expects the train be ready for the new direction of traffic is turned off ca26 report that the train is ready for new direction of traffic knows that the train is ready for the dirction of traffic expects train control know that the train is ready for the new direction of traffic ca05 prepare for departure expects that the train is being prepared for departure is ready for new direction of traffic ca27 report that the train is ready depart knows that the train is ready for departure expects train control know that the train is ready for departure End state Knows that the train stands still at Z Is ready for departure GPHAT-84-Com A B Y Z ZB X Copyright (c) 2003 UIC / Euro-Interlocking Page 15 of 152

18 GPHAT-85-Com Scenario: F: Couple trains Acrs: Constraints: - Control of train A - Train A - Shunter - Train A and train B are ready for coupling - It is possible move train A from Y X - Train B is standing still at ZB, in front of X F1: Coupling trains State matrix: Actions Acrs Control of train A Train A Shunter Initial state Knows that train A is standing still At Z Is standing still at Z Is located next the track near the train - Have the train depart (scenario A) Moves train X ca11 authorise coupling have train A press against train B Is moving wards / located at ZB is coupled with train B ca14 perform coupling - - Knows that the trains are coupled ca45 report the coupling is completed knows that coupling is completed - expects train control know that coupling is completed - - End state Knows that the train is standing still at A Is standing still at Z Is located next the track near the train Copyright (c) 2003 UIC / Euro-Interlocking Page 16 of 152

19 GPHAT-86-Com F2: Coupling vehicles State matrix Actions Acr Control of train A Train A Shunter Initial state Knows that train A is standing still at Z Is standing still at Z Is located next the track near the train -- Have the train depart (scenario A) Moves train X Is moving wards / located at ZB - ca11 authorise press against an object has train A press agans train B is pressing against train B - ca15 establish - - knows that the trains are pressing against each other ca44 report that the trains are pressed against each other knows that the trains are pressing against each other - expects train control know that the trains are pressed against each other ca16 step on the track - - is located on the track between the trains ca17 couple mechanically - is coupled with tran B knows that the trains are coupled ca21 step off the track - - is located next the track near the train ca45 report the coupling is completed knows that coupling is completed - expects train control know that coupling is completed End state Knows that train A is standing still at Z Is standing still at Z Is located next the track near the train GPHAT-87-Com B A Y Z X Copyright (c) 2003 UIC / Euro-Interlocking Page 17 of 152

20 GPHAT-88-Com Scenario: G: Uncouple trains Acrs: Constraints: - Control of train A - Train A - Shunter - In the beginning Train A and train B make up the coupled train A - The coupled train A is ready be uncoupled - The coupled train is standing still upon arrival at Z - Train A makes up the front of the coupled train - It is possible move (the coupled) train A from Y X G1: Uncoupling trains State matrix: Actions Acrs Control of train A Train A Shunter Initial state Knows that train A is standing still at Z Is standing still at Z Is located next the track near the train ca18 uncouple aumatically is uncoupling is uncoupled - ca19 perform uncoupling - - knows that the train is uncoupled ca46 report that the train is physically uncoupled knows that the train is uncoupled - expects train control know that the train is uncoupled End state Knows that train A is standing still at Z Is standing still at Z Is located next the track near the train GPHAT-89-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 18 of 152

21 G2: Uncoupling vehicles State matrix: Actions Acrs Control of train A Train A Shunter Initial state Knows that train A is standing still at Z Is standing still at Z Is located next the track near the train ca43 report that the shunter can step on the track expects the shunter know that he is stepping on the track - knows that he can step on the track ca16 step on the track - -- is located on the track between the trains ca20 uncouple manually - is uncoupled knows that the train is uncoupled ca21 step off the track - - is located next the track near the train ca46 report that the train is physically uncoupled knows that the train is uncoupled - expects train control know that the train is uncoupled End state Knows that train A is standing still at Z Is standing still at Z Is located next the track near the train GPHAT-90-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 19 of 152

22 Scenario: L: Hand over infra control area another infra control Acrs: - Infra control 1 - Infra control 2 Constraints: State matrix: - Infra control 1 is the original infra control - Area G will be transferred - The infra stucture is suited for control by infra control 2 Actions Acrs Infra control 1 Infra control 2 Initial state Is able control area G In not able control area G ca37 request transfer of infra control over an area knows that infra control 2 wants take over control expects infra control 1 hand over control ca39 report that the infra control over an area is transfered expects infra control 2 know that control is transferred knows that control is transferred End state Is not able control area G Is able control area G GPHAT-91-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 20 of 152

23 Scenario: M: Hand over infra control area the original infra control Acrs: - Infra control 1 - Infra control 2 Constraints: State matrix: - Infra control 1 is the original infra control Actions Acrs Infracontrol 1 Infra control 2 Initial state Is not able control area Is able control area ca40 report that the infra control over an area is returned knows that control has been given back expects that train control 1 knows that control has been given back End state Is able control area Is not able control area GPHAT-92-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 21 of 152

24 Scenario: N: Start using work area Acrs: - Infra control - Area user Constraints: - The area user is ready use the area State matrix: Actions Acrs Infra control Area user Initial state Is able control are Is not located in area ca41 request for use of an area knows that area user wants use the area ca42 report that use of an area is authorised expects the area user know that using the area is allowed expects permission use the area knows that using the area is allowed ca22 enter area - is located in the area End state - expects that the area user starts use area Is located in area GPHAT-93-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 22 of 152

25 Scenario: O: Sp using work area Acrs: - Infra control - Infra area user Constraints: - The use of the area is completed State matrix: Actions Acrs Infra control Area user Initial state - expects that the area user starts use area Is located in area ca23 leave area - is not located in the area ca38 report that the area has been vacated knows that the area has been vacated expects infra control know that the area is vacant End state Is able control area Is not located in area GPHAT-94-Com Y X GPHAT-95-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 23 of 152

26 Scenario: Acrs: Constraints: State matrix: P: Move (work) train within area: Move the train from Y X and back, with area user in charge - Infra control - Infra area user - Train - Train control - A movement is required between the places Y and X - The area user communicates with infra control regarding the train movements - Train control knows that infra control controls the area Actions Acrs Infra control Area user Train control Train Initial state - expects that the area user starts use area Is located in area Moves train Y Is moving wards / located at Y ca49 request authorise the train move between Y and X - facilitaite train movement (scenario T) ca50 ca53 ca10 ca51 report that train movement between Y and X is authorised permission authorise the train move between Y and X authorise move between Y and X report that the train is located between Y and X knows that the area user wants the make the train move between Y and X Knows that train movement is possible expects the area user know that moving between Y and X is possible expects permission make the train move between Y and X knows that it is possible move between Y and Xs expects the train start moving between Y and X - - knows that the area user wants the train start moving between Y en X - - authorises the train move between Y and X knows that the train is located between Y and X - is located between Y and X - - expects infra control know that the train is located between Y and X End state - expects that the area user starts use area Is located in area Trainsfers train X Is moving wards / located at X Copyright (c) 2003 UIC / Euro-Interlocking Page 24 of 152

27 GPHAT-96-Com G H A Y Z X GPHAT-97-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 25 of 152

28 Scenario: Q: Move (work) train between two areas: Moving the train between Y and Z Acrs: - Infra control 1 - Infra control 2 - Train control - Train Constraints: State matrix: - The train is located in Y, in area G - Infra control 1 controls area G - Infra control 2 controls area H - The is only 1 route from G H - Place Z is located on the route from G H - From Z onward, the area H is controlled by infra control 2 - In order be able move the train, both movement from Y Z, and from Z X must be possible Actions Acrs Infra control 1 Infra control 2 Train control Train Initial state Expects the train move Y Expects the train move Z Moves train Y Moves wards / is located at Y ca25 request move from Y X knows that the train control wants move the train from Y X - expects authorization make the train move from Y X - - Facilitate train movement (scenario T) ca47 ca48 ca33 request for facilitating followup movement Facilitate train movement (scenario T) report that follow-up movement is possible report that train movement from Y X is possible Knows that train movement is possible expexts that follow-up movement will be created knows that the train will pass place Z Knows that train movement is possible knows that follow-up movement is possible expects that train control knows that movement from Y X is authorised expects infra control 1 know that follow-up movement is possible knows that movement from Y X is authorised ca09 move from Y X - is moving train X is moving wards / located in X ca51 report that the train is located between Y and X knows that the train is located between Y and X - - expects infra control know that the train is located between Y and X - - End state Expects the train move Z Expects the train move X Moves train X Moves wards / is located at X Copyright (c) 2003 UIC / Euro-Interlocking Page 26 of 152

29 GPHAT-98-Com Scenario: S: Perform trackside maintenance Acrs: - Area user - Infrastructure Constraints: - The activities take place in an area State matrix: Actions Acrs Area user Infrastructure Initial state In located in area In state S ca24 perform activities has performed activities in state S' End state In located in area In state S GPHAT-99-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 27 of 152

30 Scenario: Acrs: Constraints: State matrix: T: Facilitate train movement - Infra control - Points - The required route for the train s movement starts at Y and ends at X - Every place on the route is visited only once - Points are located on the path Actions Acrs Infra control Points Initial state Knows that the train wants pass by Y Are switched a random ca12 search for the required route has found required route ca13 create the required route by switching points the required expects the required route be created are switched the required ca32 report that the required route has been created knows that te required route has been created expects infra control know that the required route has been created End state Knows the train movement is possible Are switched the required GPHAT-100-Com 5 Analysis Phase 3: Analysing train movement process deviations GPHAT-101-Com Based on the scenarios, all desired states are defined. Each bears an identifier in the format, TO## <description>. For each desired state, the undesired states are listed and bear identifiers in the format, TO## :dev# <description>. GPHAT-102-Com By applying the guide words each of the desired states, the following deviations are defined. GPHAT-103-Com Action: CA01 authorise move State: TO91 authorises the train move wards X Copyright (c) 2003 UIC / Euro-Interlocking Page 28 of 152

31 - dev1 does not authorise the train move wards X - dev2 authorises the train move wards not X State: TO92 is moving wards X - dev1 is not moving wards X - dev2 is moving wards something else than X GPHAT-104-Com Action: CA02 authorise sp State: TO26 knows that the train is spped at Z - dev1 knows that the train is not spped at Z - dev2 knows that the train is spped at not Z State: TO27 is spped at Z - dev1 is not spped in Z - dev2 is spped in different than Z GPHAT-105-Com Action: CA03 switch off State: TO72 expects the train be turned off - dev1 expects the train will not be shut down - dev2 expects falsely the train will be shut down - dev3 expects falsely the train will not be shut down State: TO73 is turned off - dev1 is not shut down GPHAT-106-Com Action: CA04 prepare for direction of traffic State: TO76 expects the train be ready for the direction of traffic - dev2 expects falsely the train be ready for the direction of traffic - dev1 expects the train not be ready for the direction of traffic - dev3 expects falsely the train not be ready for the direction of traffic State: TO77 is ready for the direction of traffic - dev1 is ready for not the direction of traffic - dev2 is not ready for the direction of traffic Copyright (c) 2003 UIC / Euro-Interlocking Page 29 of 152

32 GPHAT-107-Com Action: CA05 prepare for departure State: TO80 expects that the train is being prepared for departure - dev1 expects that the train is not being prepared for departure - dev2 expects falsely that the train is being prepared for departure - dev3 expects falsely that the train is not being prepared for departure State: TO81 is ready for departure - dev1 is not ready for departure GPHAT-108-Com Action: CA09 move from Y X State: TO00 is moving / located in X - dev1 is moving / located behind X - dev2 is moving / located in between Y and X - dev3 is moving / located before X - dev4 stands still - dev5 rolls between Y and X - dev6 rolls beyond X - dev7 rolls before Y State: TO01 is moving train X - dev1 is moving train behind X - dev2 is moving train before Y - dev3 is moving train in between Y and X - dev4 lets train roll beyond X - dev5 lets train roll before Y - dev6 lets train roll between Y and X - dev7 is not moving train GPHAT-109-Com Action: CA10 authorise move between Y and X State: TO60 authorizes the train move between Y and X - dev1 authorizes the train move before Y - dev2 authorizes the train move beyond X - dev3 lets the train roll beyond X - dev4 lets the train roll before Y - dev5 lets the train roll between Y and X - dev6 does not let the train move at all Copyright (c) 2003 UIC / Euro-Interlocking Page 30 of 152

33 State: TO61 is located between Y and X - dev1 is located before Y - dev2 is located beyond X - dev3 stands still - dev4 rolls between Y and X - dev5 rolls beyond X - dev6 rolls before Y GPHAT-110-Com Action: CA11 authorise press against an object State: TO29 lets train A press against train B - dev1 does not let train A press against train B State: TO30 is coupled with train B - dev1 is not coupled with train B State: TO34 is pressing against train B - dev1 is not pressing against train B GPHAT-111-Com Action: CA12 search for the required route State: TO68 has found required route - dev1 has not found required route GPHAT-424-Com Action: CA13 create the required route by switching points State: TO69 expects the required route be created - dev1 expects falsely the required route be created - dev2 expects falsely the required route not be created - dev3 expects the required route not be created State: TO71 are switched the required - dev1 are not switched the required GPHAT-112-Com Action: CA14 perform coupling State: TO31 Knows that the trains are coupled - dev1 knows falsely that the trains are not coupled Copyright (c) 2003 UIC / Euro-Interlocking Page 31 of 152

34 GPHAT-113-Com Action: CA15 establish State: TO35 knows that the trains are pressing against each other - dev1 knows falsely that the trains are not pressing against each other - dev2 does not know that the trains are pressing against each other GPHAT-114-Com Action: CA16 step on the track State: TO37 is located on the track between the trains - dev1 is not located on the track between the trains - dev2 is located on the track not between the trains - dev3 is located not on the track not between the trains GPHAT-115-Com Action: CA17 couple mechanically State: TO30 is coupled with train B - dev1 is not coupled train B - dev2 is partly coupled train B State: TO31 Knows that the trains are coupled - dev1 knows the trains are not coupled - dev3 knows falsely the trains are coupled - dev2 knows the trains are different coupled GPHAT-116-Com Action: CA18 uncouple aumatically State: TO39 is uncoupling - dev1 is not uncoupling - dev2 is uncoupling partly State: TO40 is uncoupled - dev1 is not uncoupled - dev2 is partly uncoupled GPHAT-117-Com Action: CA19 perform uncoupling State: TO41 knows that the train is uncoupled - dev1 knows falsely that train is not uncoupled Copyright (c) 2003 UIC / Euro-Interlocking Page 32 of 152

35 GPHAT-118-Com Action: CA20 uncouple manually State: TO40 is uncoupled - dev1 is not uncoupled - dev2 is partly uncoupled State: TO41 knows that the train is uncoupled - dev1 knows falsely that train is not uncoupled - dev2 knows that train is partly uncoupled - dev3 knows falsely that train is uncoupled - dev4 knows that train in not uncoupled GPHAT-119-Com Action: CA21 step off the track State: TO45 is located next the track near the train - dev1 is located in the track near the train - dev2 is located near the track but somewhere else than near the train - dev3 is located in the track but somewhere else than near the train GPHAT-120-Com Action: CA22 enter area State: TO54 is located in the area - dev1 is not located in the area - dev2 is located in a different area GPHAT-121-Com Action: CA23 leave area State: TO83 is not located in the area - dev1 is located in the area - dev2 is located in another area Copyright (c) 2003 UIC / Euro-Interlocking Page 33 of 152

36 GPHAT-122-Com Action: CA24 perform activities State: TO66 has performed activities - dev1 has not performed activities - dev2 has perfromed the wrong activities State: TO67 in state S - dev1 state is not changed (still in state S) - dev2 is changed in different state (S") GPHAT-123-Com Action: CA25 request move from Y X State: TO03 knows that the train control wants move the train from Y X - dev1 does not know that the train control wants move the train from Y X - dev2 knows something else that the train control wants move from Y X State: TO04 expects authorization make the train move from Y X - dev1 expects falsely authorisation make the train move from Y X - dev2 expects falsely no authorisation make the train move from Y X - dev3 expects no authorisation make the train move from Y X GPHAT-124-Com Action: CA26 report that the train is ready for direction of traffic State: TO78 knows that the train is ready for the dirction of traffic - dev1 does not know that the train is ready for the direction of traffic - dev2 knows something else than that the train is ready for the direction of traffic State: TO79 expects train control know that the train is ready for the direction of - dev1 expects train control know that the train is not ready for direction of traffic - dev2 expects falsely train control know that the train is ready for direction of traffic - dev3 expects falsely that train control do know that train is not ready for driving Copyright (c) 2003 UIC / Euro-Interlocking Page 34 of 152

37 GPHAT-125-Com Action: CA27 report that the train is ready depart State: TO82 knows that the train is ready for departure - dev1 does not know that train is ready for departure - dev2 knows something else than that train is ready for departure State: TO84 expects train control know that the train is rady for departure - dev1 expects train control know that the train is not ready for departure - dev2 expects falsely train control know that the train is not ready departure - dev3 expects falsely train control know that the train is ready for departure GPHAT-126-Com Action: CA28 report that the train is switched off State: TO74 knows that the train is turned off - dev1 does not know that train is turned off - dev2 knows something else than that the train is turned off State: TO75 expects train control know that the train is turned off - dev1 expects train control know that the train is turned off - dev2 expects falsely train control know that the train is turned off - dev3 expects falsely train control know that the train is not turned off GPHAT-127-Com Action: CA32 report that the required route has been created State: TO05 knows that the required route has been created - dev1 does not know the required route has been created - dev2 knows something else than that the required pad has been created State: TO70 expects infra control know that the required route has been created - dev1 expects falsely infra control know that the required route has been created - dev2 expects falsely infra control not know that the required route has been created - dev3 expects infra control not know that the required route has been created GPHAT-128-Com Action: CA33 report that train transfer from Y X is possible State: TO06 expects that train control knows that tranfer from Y X is authorised - dev1 expects falsely that train control knows that transfer from Y X is authorised - dev2 expects falsely that train control not know that transfer from Y X is - dev3 expects that train control knows that transfer from Y X is authorized Copyright (c) 2003 UIC / Euro-Interlocking Page 35 of 152

38 State: TO07 knows that tranfer from Y X is authorized - dev1 does not know that transfer from Y X authorized - dev2 knows something else than that transfer from Y X authorized GPHAT-129-Com Action: CA34 report that the sp place is approaching State: TO24 expect train control know that the requested spping place is nearing - dev1 expects falsely train control know that the requested spping place is nearing - dev2 expects falsely train control not know that the requested spping place is nearing - dev3 expects traincontrol not know that the requested spping place is nearing State: TO25 knows that the train is requested sp at Z - dev1 does not know that the train is requested sp at Z - dev2 knows something else than that the train is requested sp at Z GPHAT-130-Com Action: CA37 request transfer of infra control over an area State: TO46 knows that infra control 2 wants take over the control - dev1 does not know that infra control 2 wants take over the control - dev2 knows something else than that infra control 2 wants take over the control State: TO47 expects infra control 1 hand over the control - dev1 expects falsely infra control 1 hand over control - dev2 expects falsely infra control 1 not hand over control - dev3 expects infra control 1 not hand over control GPHAT-131-Com Action: CA38 report that the area has been vacated State: TO55 expects infra control know that the area has been vacated - dev1 expects falsely infra control know that the area has been vacated - dev2 expects falsely infra control not know that the area has been vacated - dev3 expects infra control not know that the area has been vacated State: TO87 knows that the area has been vacated - dev1 does not know that the area has been vacated - dev2 knows something else than that the area has been vacated Copyright (c) 2003 UIC / Euro-Interlocking Page 36 of 152

39 GPHAT-132-Com Action: CA39 report that the infra control over an area is transferred State: TO85 expects infra control 2 know that control is transferred - dev1 expects falsely infra control 2 know that control is transferred - dev2 expects falsely infra control 2 not know that control is transferred - dev3 expects infra control 2 not know that control is transferred State: TO86 knows that control is transferred - dev1 does not know that control is transferred - dev2 knows something else than that control is transferred GPHAT-133-Com Action: CA40 report that the infra control over an area is returned State: TO48 knows that control has been given back - dev1 does not know that control has been given back - dev2 knows something else than that control has been given back State: TO49 expects that train control 1 knows that the control has been given back - dev1 expects falsely that train control 1 knows that the control has been given back - dev2 expects falsely that train control 1 not know that the control has been given - dev3 expects train control 1 not know that the control has been given back GPHAT-134-Com Action: CA41 request for use of an area State: TO50 knows that area user is ready use the area - dev1 does not know that area user is ready use the area - dev2 knows something else than that area user is ready use the area State: TO51 expects permission use the area - dev1 expects falsely permission use the area - dev3 expects no permission use the area - dev2 expects falsely no permission use the area GPHAT-135-Com Action: CA42 report that use of an area is authorized State: TO52 expects the area user know that using the area is allowed - dev1 expects the area user not know that using the area is allowed - dev2 expects falsely the area user know that using the area is allowed - dev3 falsely the area user not know that using the area is allowed Copyright (c) 2003 UIC / Euro-Interlocking Page 37 of 152

40 State: TO53 knows that using the area is allowed - dev1 does not know that using the area is allowed - dev2 knows something else that the usingthe area is allowed GPHAT-136-Com Action: CA43 report that the shunter can step on the track State: TO43 expects the shunter know that he is stepping on the track - dev1 expects the shunter not know that he is stepping on the track - dev2 expects falsely the shunter know that he is stepping on the track - dev3 expects falsely the shunter not know that he is stepping on the track State: TO44 knows that he can step on the track - dev1 does not know that he can step on the track - dev2 knows something else than that he can step on the track GPHAT-137-Com Action: CA44 report that the trains are pressed against each other State: TO35 knows that the trains are pressing against each other - dev1 knows something else than that the trains are pressing against each other - dev2 does not know that the trains are pressing against each other State: TO36 expects train control know that the trains are pressed against each - dev1 expects falsely train control know that the train are pressed against each other - dev3 expects falsely train control not know that the train are presed against each - dev2 expects train control not know that the train are presed against each other GPHAT-138-Com Action: CA45 report coupling is completed State: TO32 knows that coupling is completed - dev1 knows something else than that combining is completed - dev2 does not know that coupling is completed State: TO33 expects train control know that coupling is completed - dev1 expects falsely train control knowt that coupling is completed - dev2 expects train control not know that coupling is completed - dev3 expects falsely train control not know that coupling is completed Copyright (c) 2003 UIC / Euro-Interlocking Page 38 of 152

41 GPHAT-139-Com Action: CA46 report that the train is physically uncoupled State: TO41 knows that the train is uncoupled - dev1 knows something else than that the train is uncoupled - dev2 does not know that the train is uncoupled State: TO42 expects train control know that the train is uncoupled - dev1 expects falsely train control know that the train is uncoupled - dev2 expects train control not know that the train is uncoupled - dev3 expects falsely train control not know that the train is uncoupled GPHAT-140-Com Action: CA47 request for facilitating follow-up movement State: TO62 expects that follow-up movement will be created - dev1 expects falsely that follow-up movement will not be created - dev2 expects falsely that follow-up movement will be created - dev3 expects that follow-up movement will not be created State: TO63 knows that the train will pass place Z - dev2 knows something else than that the train will pass place Z - dev1 does not know that the train will pass place Z GPHAT-141-Com Action: CA48 report that follow-up movement is possible State: TO64 knows that follow-up movement is possible - dev1 knows that follow-up movement is partly possible - dev2 does not know that follow-up movement is possible State: TO88 expects infra control 1 know that follow-up movement is possible - dev1 does not expect that infra control 1 know that follow-up movement is possible - dev2 expects falsely infra control 1 not know that follow-up movement is possible - dev3 expects falsely infra control 1 know that follow-up movement is not possible GPHAT-142-Com Action: CA49 request authorise the train move between Y and X State: TO56 knows that the area user wants have the train move between Y and X - dev1 does not know that the area user wants have the train move between Y and X - dev2 knows something else than that the area user wants have the train move State: TO57 expects permission have the train move between Y and X Copyright (c) 2003 UIC / Euro-Interlocking Page 39 of 152

42 - dev1 expects falsely permission have the train move between Y and X - dev2 expects falsely permission have the train not move between Y and X - dev3 expects permission have the train not move between Y and X GPHAT-143-Com Action: CA50 report that train movement between Y and X is State: TO59 knows that it is possible move between Y and X - dev1 does not know that it is possible move between Y and X - dev2 knows something else than that it is possible move between Y and X State: TO94 expects the area user know that moving between Y and X is possible - dev1 expects the area user know that moving between Y and X is not possible - dev2 expects falsely the area user know that moving between Y and X is possible - dev3 expects falsely the area user not know that moving between Y and X is possible GPHAT-144-Com Action: CA51 report that the train is located between Y and X State: TO89 knows that the train is located between Y and X - dev1 does not know that the train is located between Y and X - dev2 knows something else than that the train is located between Y and X State: TO90 expects infra control know that the train is located between Y and X - dev1 expects infra control not know that the train is located between Y and X - dev2 expects falsely infra control know that the train is located between Y and X - dev3 expects falsely infra control not know that the train is located between Y and X GPHAT-145-Com Action: CA52 establish ready for departure State: TO82 knows that the train is ready for departure - dev1 knows falsely that the train is not ready for departure - dev2 knows falsely that the train is ready for departure GPHAT-146-Com Action: CA53 order authorise the train move between Y and X State: TO58 expects the train start moving between Y and X - dev1 expects falsely the train start moving between Y and X - dev2 expects falsely the train not start moving between Y and X - dev3 does not expect the train start moving between Y and X Copyright (c) 2003 UIC / Euro-Interlocking Page 40 of 152

43 State: TO93 knows that the area user wants the train start moving between Y en X - dev1 does not know that the area user wants the train start moving between Y and X - dev2 knows something else than that the area user wants the train start moving GPHAT-147-Com 6 Analysis phase 4: Defining hazards GPHAT-148-Com In this chapter describes the identified hazards. Because it deals with a lot of data, it structures the hazards in line with the following figure. The following hazard categories and consequence types are defined: Hazard consequences (4 types) Hazard categories (16 Categories) Hazards involving same scenrario (ID ) Hazards involving same acrs in several scenarios (ID ) Hazards involving different acrs in several scenarios (ID ) Hazards involving different acrs with external influences (ID ) Hazards involving new states in several scenarios (ID ) Hazards stemming from the process Hazards from process and external influences GPHAT-149-Com The following hazard categories and consequence types are defined: Copyright (c) 2003 UIC / Euro-Interlocking Page 41 of 152

44 Hazard type Description Consequence haza Crossing of trains at common point type I: Collision hazb Moving train approaches spped train type I: Collision hazc Train leaves authorised section type I: Collision hazd Train moving backwards type I, Collision Presence of people type I, Collision hazf Train movement on unsuitable infrastructure type II, Derailment hazg Wrongly applied exception handling type III, Damage hazh Train is located in wrong section type I, Collision Copyright (c) 2003 UIC / Euro-Interlocking Page 42 of 152

45 GPHAT-398-Com Hazard type Description Consequence hazi Collision between train and road vehicle type I, II hazj Train enters water type I,II, III hazk Release of dangerous goods due collision or derailment type I, II hazl Presence of goods type I,III hazm Trains with excessive profile train hits platform, tunnel, or another train type I, II, III hazn Wrong power supply Type III: Damage hazo Train is under power (electrocution) type III: Damage hazp Wrong train movement on right infrastructure Type II: Derailment GPHAT-150-Com 6.1 Hazards involving deviations within one scenario GPHAT-151-Com A deviation within one scenario can lead a hazardous situation. For example, the departure of a train that is not ready depart can result in damage. GPHAT-152-Com This table described some examples of identified hazards within one scenario. Copyright (c) 2003 UIC / Euro-Interlocking Page 43 of 152

46 HazID Scenario Condition Hazard type 1001 A Departs while train not ready hazg 1002 B, P en Q Moving over infrastructure while points are not in right hazf 1003 F1 en F2 Train A presses o hard against Train B hazg 1004 F2 en G2 Just after shunter moves on track, train A moves unexpectedly 1005 P Train in area moves in wrong direction and collides with area user GPHAT-153-Com 6.2 Hazards involving the same acr in several scenarios GPHAT-154-Com In normal operation, scenarios will often transpire one after the other. But it is also reasonable expect that midway through one scenario, another scenario starts. This kind of unpredictable situation can lead hazards. The possible combinations thus need be analysed. Only combinations involving the same acr are analysed. In this case, only physical acrs are relevant, because only their actions could directly result in hazards. GPHAT-399-Com Furthermore, the analysis only considers acrs that are active at the time (moving trains, for example, but not spped ones). For this study, this means that only the train is taken in account. A shunter cannot create a hazard himself because he always needs a train, for example, yield a hazard. The results of this analysis are summarised in the matrix below, with the characters in the matrix presenting the hazard type: GPHAT-155-Com. Copyright (c) 2003 UIC / Euro-Interlocking Page 44 of 152

47 TO30 dev1: is not coupled train B G - G - G - G - G - G - TO30 dev2: is partly coupled train B G - G - G - G - G - G - TO40 dev1: is not uncoupled G - G - TO40 dev2: is partly uncoupled G - G - G - G - G - G - TO77 dev1: is ready for not the direction of traffic G - TO77 dev2: is not ready for the direction of traffic G - G - TO81 dev1: is not ready for departure G - G - TO27 dev1: is not spped in Z TO61 dev4: rolls between Y and X TO61 dev5: rolls beyond X TO61 dev6: rolls before Y TO92 dev0: is moving wards X TO92 dev2: is moving wards something else than X GPHAT-156-Com The following table presents these example of combinations in more detail. Copyright (c) 2003 UIC / Euro-Interlocking Page 45 of 152

48 HazID State A Conflicting state Condition Hazard type 2008 TO30 dev1: is not coupled train B TO27 dev1: is not spped in Z while rolling, part A separates from part B hazg 2009 TO30 dev1: is not coupled train B TO61 dev4: rolls between Y and X while rolling, part A partly separates from part B hazg 2010 TO30 dev1: is not coupled train B TO61 dev5: rolls beyond X while rolling, part A partly separates from part B hazg 2011 TO30 dev1: is not coupled train B TO61 dev6: rolls before Y while rolling, part A partly separates from part B hazg 2012 TO30 dev1: is not coupled train B TO92 dev0: is moving wards X part A is not linked, and part B is accelerating hazg 2013 TO30 dev1: is not coupled train B 2021 TO30 dev2: is partly coupled train B TO92 dev2: is moving wards something else than X TO27 dev1: is not spped in Z part A is not linked, and part B is accelerating while rolling, part A partly seperates from part B hazg hazg 2022 TO30 dev2: is partly coupled train B TO61 dev4: rolls between Y and X while rolling, part A partly seperates from part B hazg GPHAT-238-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 46 of 152

49 HazID State A Conflicting state Condition Hazard type 2023 TO30 dev2: is partly coupled train B TO61 dev5: rolls beyond X while rolling, part A partly seperates from part B hazg 2024 TO30 dev2: is partly coupled train B TO61 dev6: rolls before Y while rolling, part A partly seperates from part B hazg 2025 TO30 dev2: is partly coupled train B TO92 dev0: is moving wards X part A is not fully linked, while part B is already accelerating hazg 2026 TO30 dev2: is partly coupled train B TO92 dev2: is moving wards something else than X part A is not fully linked, while part B is already accelerating hazg 2038 TO40 dev1: is not uncoupled TO92 dev0: is moving wards X part A is still linked, and part B is accelerating hazg 2039 TO40 dev1: is not uncoupled 2047 TO40 dev2: is partly uncoupled TO92 dev2: is moving wards something else than X TO27 dev1: is not spped in Z part A is still linked, and part B is accelerating while moving, part A partly seperates from part B hazg hazg GPHAT-239-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 47 of 152

50 HazID State A Conflicting state Condition Hazard type 2048 TO40 dev2: is partly uncoupled TO61 dev4: rolls between Y and X while rolling, part A partly seperates from part B hazg 2049 TO40 dev2: is partly uncoupled TO61 dev5: rolls beyond X while rolling, part A partly seperates from part B hazg 2050 TO40 dev2: is partly uncoupled TO61 dev6: rolls before Y while rolling, part A partly seperates from part B hazg 2051 TO40 dev2: is partly uncoupled TO92 dev0: is moving wards X part A is not fully linked, while part B is already accelerating hazg 2052 TO40 dev2: is partly uncoupled TO92 dev2: is moving wards something else than X part A is not fully linked, while part B is already accelerating hazg Copyright (c) 2003 UIC / Euro-Interlocking Page 48 of 152

51 GPHAT-240-Com HazID State A Conflicting state Condition Hazard type 2064 TO77 dev1: is ready for not the new direction of traffic TO92 dev0: is moving wards X the train is ready for heading the in wrong direction, but heads or tries head in the right direction hazg 2077 TO77 dev2: is not ready for the new direction of traffic TO92 dev0: is moving wards X train departs although not ready hazg 2078 TO77 dev2: is not ready for the new direction of traffic TO92 dev2: is moving train departs although not wards something else than ready X hazg 2090 TO81 dev1: is not ready for departure TO92 dev0: is moving wards X train departs although not ready hazg 2091 TO81 dev1: is not ready for departure TO92 dev2: is moving train departs although not wards something else than ready X hazg GPHAT-157-Com 6.3 Hazards involving different acrs within several scenarios GPHAT-158-Com In practise, it is reasonable assume that different acrs perform several scenarios at the same time. An example is two trains that are moving ward X. These hazards are identified by combining several (un)desired states. It is not useful combine all states, because: GPHAT-159-Com - Only physical acrs can have an impact on hazards. A train control itself cannot be a hazard, but it can cause a hazard. GPHAT-160-Com - Among the physical acrs, only the physical states are relevant. A shunter who is expecting something cannot be hazard, but that he is moving on the track can be a hazard in combination with a train. GPHAT-161-Com These combinations are summarized in the matrixes below (for the corresponding types of hazards and consequences, see GPHAT-149). The characters in the matrix are the hazard types. Copyright (c) 2003 UIC / Euro-Interlocking Page 49 of 152

52 GPHAT-418-Com TO00 dev0: is moving / located in X TO00 dev1: is moving / located behind X TO00 dev2: is moving / located in between Y and X TO00 dev3: is moving / located before Y TO00 dev4: stands still TO00 dev5: rolls between Y and X TO00 dev6: rolls beyond X TO00 dev7: rolls before Y TO27 dev0: is spped at Z TO27 dev1: is not spped in Z TO27 dev2: is spped in different than Z TO34 dev0: is pressing against train B TO34 dev1: is not pressing against train B TO37 dev0: is located on the track between the trains TO37 dev1: is not located on the track between the trains TO37 dev2: is located on the track not between the trains TO37 dev3: is located not on the track not between the trains TO45 dev0: is located next the track near the train TO45 dev1: is located in the track near the train TO45 dev2: is located near the track but somewhere else than nea TO45 dev3: is located in the track but somewhere else than near TO00 dev0: is moving / located in X A TO00 dev1: is moving / located behind X C C TO00 dev2: is moving / located in between Y and X A C A TO00 dev3: is moving / located before Y D D D D TO00 dev4: stands still B C B D TO00 dev5: rolls between Y and X A C A D B A TO00 dev6: rolls beyond X C C C D C C C TO00 dev7: rolls before Y D D D D D D D D TO27 dev0: is spped at Z B C B D B C D TO27 dev1: is not spped in Z C C C D B C C D B A TO27 dev2: is spped in different than Z B C B D B C D B TO34 dev0: is pressing against train B G G G G G G G G G G TO34 dev1: is not pressing against train B G G G G G G G G TO37 dev0: is located on the track between the trains E E E E E E E E E TO37 dev1: is not located on the track between the trains TO37 dev2: is located on the track not between the trains E E E E E E E E TO37 dev3: is located not on the track not between the trains TO45 dev0: is located next the track near the train TO45 dev1: is located in the track near the train E E E E E E E E E TO45 dev2: is located near the track but somewhere else than near the train TO45 dev3: is located in the track but somewhere else than near the train E E E E E E E E E GPHAT-415-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 50 of 152

53 TO00 dev0: is moving / located in X TO00 dev1: is moving / located behind X TO00 dev2: is moving / located in between Y and X TO00 dev3: is moving / located before Y TO00 dev4: stands still TO00 dev5: rolls between Y and X TO00 dev6: rolls beyond X TO00 dev7: rolls before Y TO27 dev0: is spped at Z TO27 dev1: is not spped in Z TO27 dev2: is spped in different than Z TO34 dev0: is pressing against train B TO34 dev1: is not pressing against train B TO37 dev0: is located on the track between the trains TO37 dev1: is not located on the track between the trains TO37 dev2: is located on the track not between the trains TO37 dev3: is located not on the track not between the trains TO45 dev0: is located next the track near the train TO45 dev1: is located in the track near the train TO45 dev2: is located near the track but somewhere else than nea TO45 dev3: is located in the track but somewhere else than near TO54 dev0: is located in the area E E E E E E E E E TO54 dev1: is not located in the area TO54 dev2: is located in a different area E E E E E E E E E TO61 dev0: is located between Y and X H H H H H H H H H H H G G E E E E TO61 dev1: is located before Y H H H H H H H H H H H G G E E E E TO61 dev2: is located beyond X H H H H H H H H H H H G G E E E E TO61 dev3: stands still H H H H H H H H TO61 dev4: rolls between Y and X H H H H H H H H H H H G G E E E E TO61 dev5: rolls beyond X H H H H H H H H H H H G G E E E E TO61 dev6: rolls before Y H H H H H H H H H H H G G E E E E TO67 dev0: in state S' TO67 dev1: state is not changed (still in state S) TO67 dev2: is changed in different state (S") F F F F F F F F F TO71 dev0: are switched the required TO71 dev1: are not switched the required F F F F F F F F F TO83 dev0: is not located in the area TO83 dev1: is located in the area E E E E E E E E E TO83 dev2: is located in another area E E E E E E E E E TO92 dev0: is moving wards X A C A D B A C D B A B G G E E E E TO92 dev1: is not moving wards X B C B D B C D B G TO92 dev2: is moving wards something else than X A C A D B A C D B A B G G E E E E GPHAT-416-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 51 of 152

54 TO54 dev0: is located in the area TO54 dev1: is not located in the area TO54 dev2: is located in a different area TO61 dev0: is located between Y and X TO61 dev1: is located before Y TO61 dev2: is located beyond X TO61 dev3: stands still TO61 dev4: rolls between Y and X TO61 dev5: rolls beyond X TO61 dev6: rolls before Y TO67 dev0: in state S' TO67 dev1: state is not changed (still in state S) TO67 dev2: is changed in different state (S") TO71 dev0: are switched the required TO71 dev1: are not switched the required TO83 dev0: is not located in the area TO83 dev1: is located in the area TO83 dev2: is located in another area TO92 dev0: is moving wards X TO92 dev1: is not moving wards X TO92 dev2: is moving wards something else than X TO54 dev0: is located in the area TO54 dev1: is not located in the area TO54 dev2: is located in a different area TO61 dev0: is located between Y and X E E A TO61 dev1: is located before Y E E D D TO61 dev2: is located beyond X E E C D C TO61 dev3: stands still B D C TO61 dev4: rolls between Y and X E E A D C B A TO61 dev5: rolls beyond X E E C D C C C C TO61 dev6: rolls before Y E E D D D D D D D TO67 dev0: in state S' TO67 dev1: state is not changed (still in state S) TO67 dev2: is changed in different state (S") F F F F F F TO71 dev0: are switched the required TO71 dev1: are not switched the required F F F F F F TO83 dev0: is not located in the area TO83 dev1: is located in the area E E E E E E TO83 dev2: is located in another area E E E E E E TO92 dev0: is moving wards X E E H H H H H H H F F E E A TO92 dev1: is not moving wards X H H H H H H B TO92 dev2: is moving wards something else than X E E H H H H H H H F F E E A B A GPHAT-162-Com The following table describes these combinations in more detail. GPHAT-327-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 52 of 152

55 HazState A Conflicting state Condition Hazard ID Type 3001TO00 dev0: is moving / located in X TO00 dev0: is moving / located in X two trains approach X from different angles or cross each other s paths on the way their own points X haza 3002TO00 dev1: is moving / located behind X TO00 dev0: is moving / located in X train A moves past its permitted space and approaches or crosses the path of train B hazc 3003TO00 dev2: is moving / TO00 dev0: is moving / located in between Y and X located in X both trains approach X from different angles or cross each other s paths on the way their own points X haza 3004TO00 dev3: is moving / located before Y TO00 dev0: is moving / located in X train A unintentionally moves backwards and approaches or crosses the path of train B hazd 3005TO00 dev4: stands still TO00 dev0: is moving / located in X the spot where train A is intentionally standing still, is in the path of train B hazb 3006TO00 dev5: rolls between Y and X TO00 dev0: is moving / located in X two trains approach X from different angles or cross each other s paths on the way their own points X haza GPHAT-328-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 53 of 152

56 HazState A Conflicting state Condition Hazard ID Type 3007TO00 dev6: rolls beyond X TO00 dev0: is moving / located in X train A moves past its permitted space and approaches or crosses the path of train B hazc 3008TO00 dev7: rolls before Y TO00 dev0: is moving / located in X 3009TO27 dev0: is spped at Z TO00 dev0: is moving / located in X 3010TO27 dev1: is not spped in Z TO00 dev0: is moving / located in X train A unintentionally moves backwards and approaches or crosses the path of train B the spot where train A is purposely standing still, is in the path of train B train A moves beyond its permitted space and approaches or crosses the path of train B hazd hazb hazc 3011TO27 dev2: is spped in different than Z TO00 dev0: is moving / located in X the spot wards which train B is driving, intersects with the location of train A, which is intentionally standing still hazb 3012TO34 dev0: is pressing against train B TO00 dev0: is moving / located in X train C pushes against train B, and B and C move behind train A HazG Copyright (c) 2003 UIC / Euro-Interlocking Page 54 of 152

57 GPHAT-329-Com HazState A Conflicting state Condition Hazard ID Type 3013TO34 dev1: is not pressing against train B TO00 dev0: is moving / located in X train A drives behind train B, which is not pushing train HazG 3014TO37 dev0: is located on the track between the trains TO00 dev0: is moving / located in X train drives shunter s 3015TO37 dev2: is located on the track not between the trains TO00 dev0: is moving / located in X train drives shunter s 3016TO45 dev1: is located in the track near the train TO00 dev0: is moving / located in X train drives shunter s 3017TO45 dev3: is located in the track but somewhere else than near the train TO00 dev0: is moving / located in X train drives shunter s 3018TO54 dev0: is located in the area TO00 dev0: is moving / located in X train drives area user s GPHAT-330-Com HazState A Conflicting state Condition Hazard ID Type 3019TO54 dev2: is located in a different area TO00 dev0: is moving / located in X train drives area user s 3020TO61 dev0: is located between Y and X TO00 dev0: is moving / located in X normal train crosses the path of another train 3021TO61 dev1: is located before Y TO00 dev0: is moving / located in X train A approaches or crosses the path of train B 3022TO61 dev2: is located beyond X TO00 dev0: is moving / located in X normal train crosses the path of another train in the area 3023TO61 dev3: stands still TO00 dev0: is moving / located in X train B approaches train A 3024TO61 dev4: rolls between Y and X TO00 dev0: is moving / located in X train A approaches or crosses the path of train B Copyright (c) 2003 UIC / Euro-Interlocking Page 55 of 152

58 GPHAT-331-Com HazState A Conflicting state Condition Hazard ID Type 3025TO61 dev5: rolls beyond X TO00 dev0: is moving / located in X train A approaches or crosses the path of train B 3026TO61 dev6: rolls before Y TO00 dev0: is moving / located in X train A approaches or crosses the path of train B 3027TO67 dev2: is changed in different state (S") TO00 dev0: is moving / located in X train traverses infrastructure which is in the wrong hazf 3028 TO71 dev1: are not switched the required 3029TO83 dev1: is located in the area TO00 dev0: is moving / located in X TO00 dev0: is moving / located in X path of train traverses infrastructure which is in the wrong train drives area user s hazf 3030TO83 dev2: is located in another area TO00 dev0: is moving / located in X train drives area user s Copyright (c) 2003 UIC / Euro-Interlocking Page 56 of 152

59 GPHAT-332-Com Haz State A Conflicting state Condition Hazard ID Type 3031TO92 dev0: is moving wards X TO00 dev0: is moving / located in X two trains approach X from different angles or cross each other s paths on the way their own points X haza 3032TO92 dev1: is not moving wards X TO00 dev0: is moving / located in X the spot where train A is unintentionally standing still, is on the path of train B hazb 3033TO92 dev2: is moving wards something else than X TO00 dev0: is moving / located in X train A approaches or crosses the path of train B haza 3034TO00 dev1: is moving / located behind X TO00 dev1: is moving / located behind X two trains wrongly go past X from different angles or cross each other s path by wrongly going past their own points X hazc 3035TO00 dev2: is moving / TO00 dev1: is moving / located in between Y and X located behind X train B moves past its permitted space and approaches or crosses the path of train A hazc 3036TO00 dev3: is moving / located before Y TO00 dev1: is moving / located behind X train A unintentionally moves backwards, and in so doing approaches or crosses the path of train B, which is outside its permitted space hazd GPHAT-333-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 57 of 152

60 HazState A Conflicting state Condition Type ID Hazard 3037TO00 dev4: stands still TO00 dev1: is moving / located behind X train A moves past its permitted space and drives in an area where train B is unintentionally standing still hazc 3038TO00 dev5: rolls between Y and X TO00 dev1: is moving / located behind X train B moves past its permitted space and approaches or crosses the path of train A hazc 3039TO00 dev6: rolls beyond X TO00 dev1: is moving / located behind X 3040TO00 dev7: rolls before Y TO00 dev1: is moving / located behind X 3041TO27 dev0: is spped at Z TO00 dev1: is moving / located behind X 3042TO27 dev1: is not spped in Z TO00 dev1: is moving / located behind X two trains move past X from different angles, or cross each other s path by moving past their own points X train B moves past its permitted space and approaches or crosses the path of train A, which is unintentionally moving backwards train B moves past its permitted space and drives in an area where train A is standing still moving unintentionally, two trains approach each other or cross each other s path hazc hazd hazc hazc GPHAT-334-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 58 of 152

61 HazState A Conflicting state Condition Hazard ID Type 3043TO27 dev2: is spped in different than Z TO00 dev1: is moving / located behind X train B moves past its permitted space and approaches train A, which is unintentionally standing still hazc 3044TO34 dev0: is pressing against train B TO00 dev1: is moving / located behind X train C pushes against train B, and B and C drive behind train A HazG 3045TO34 dev1: is not pressing against train B TO00 dev1: is moving / located behind X a train drives behind another train, which is not pushing HazG 3046TO37 dev0: is located on the track between the trains TO00 dev1: is moving / located behind X train drives shunter s 3047TO37 dev2: is located on the track not between the trains TO00 dev1: is moving / located behind X train drives shunter s 3048TO45 dev1: is located in the track near the train TO00 dev1: is moving / located behind X train drives shunter s GPHAT-335-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 59 of 152

62 HazState A Conflicting state Condition Hazard ID Type 3049TO45 dev3: is located in the track but somewhere else than near the train TO00 dev1: is moving / located behind X train drives shunter s 3050TO54 dev0: is located in the area 3051TO54 dev2: is located in a different area TO00 dev1: is moving / located behind X TO00 dev1: is moving / located behind X train drives area user s train drives area user s 3052TO61 dev0: is located between Y and X TO00 dev1: is moving / located behind X normal train moves past its permitted space and crosses the path of another train 3053TO61 dev1: is located before Y TO00 dev1: is moving / located behind X a train of some kind, which is unintentionally driving backwards, approaches or crosses the path of a normal train, which moves past its permitted space 3054TO61 dev2: is located beyond X TO00 dev1: is moving / located behind X two trains wrongly move beyond X from different angles or cross each other s paths by moving past their own points X GPHAT-336-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 60 of 152

63 HazState A Conflicting state Condition Hazard ID Type 3055TO61 dev3: stands still TO00 dev1: is moving / located behind X a train of some kind crosses the path of or approaches a normal train that is unintentionally standing still 3056TO61 dev4: rolls between Y and X TO00 dev1: is moving / located behind X 3057TO61 dev5: rolls beyond X TO00 dev1: is moving / located behind X 3058TO61 dev6: rolls before Y TO00 dev1: is moving / located behind X 3059TO67 dev2: is changed in different state (S") TO00 dev1: is moving / located behind X two trains approach X from different angles or cross each other s paths on the way their own points X two trains move past X from different angles or cross each other s paths when moving wards their own points X two trains approach X from different angles or cross each other s paths on the way their own points X train traverses infrastructure which is in the wrong hazf 3060TO71 dev1: are not switched the required TO00 dev1: is moving / located behind X train traverses a point which is in the wrong hazf GPHAT-337-Com Haz State A Conflicting state Condition Type ID Hazard 3061TO83 dev1: is located in TO00 dev1: is moving / train drives area user s the area located behind X 3062TO83 dev2: is located in another area TO00 dev1: is moving / located behind X train drives area user s 3063TO92 dev0: is moving wards X TO00 dev1: is moving / located behind X two trains approach X from different angles or cross each other s paths on the way their own points X hazc 3064TO92 dev1: is not moving TO00 dev1: is moving / wards X located behind X 3065TO92 dev2: is moving TO00 dev1: is moving / wards something else located behind X than X 3066TO00 dev2: is moving / TO00 dev2: is moving / located in between Y and X located in between Y and X train B approaches train A train A approaches or crosses the path of train B two trains approach X from different angles or cross each other s paths on the way their own points X hazc hazc haza Copyright (c) 2003 UIC / Euro-Interlocking Page 61 of 152

64 GPHAT-338-Com HazState A Conflicting state Condition Hazard ID Type 3067TO00 dev3: is moving / located before Y TO00 dev2: is moving / located in between Y and X train A unintentionally moves backwards and approaches or crosses the path of train A hazd 3068TO00 dev4: stands still TO00 dev2: is moving / located in between Y and X 3069TO00 dev5: rolls between Y and X TO00 dev2: is moving / located in between Y and X 3070TO00 dev6: rolls beyond X TO00 dev2: is moving / located in between Y and X 3071TO00 dev7: rolls before Y TO00 dev2: is moving / located in between Y and X 3072TO27 dev0: is spped at Z TO00 dev2: is moving / located in between Y and X the spot where train A is unintentionally standing still, intersects with the path of train B two trains approach X from different angles or cross each other s paths on the way their own points X train A moves past its permitted space and approaches or crosses the path of train B train A unintentionally moves backwards and approaches or crosses the path of train B the spot where train A is intentionally standing still, intersects with the path of train B hazb haza hazc hazd hazb Copyright (c) 2003 UIC / Euro-Interlocking Page 62 of 152

65 GPHAT-339-Com HazState A Conflicting state Condition Hazard ID Type 3073TO27 dev1: is not spped in Z 3074TO27 dev2: is spped in different than Z 3075TO34 dev0: is pressing against train B 3076TO34 dev1: is not pressing against train B TO00 dev2: is moving / located in between Y and X TO00 dev2: is moving / located in between Y and X TO00 dev2: is moving / located in between Y and X TO00 dev2: is moving / located in between Y and X train A moves past its permitted space and approaches or crosses the path of train B the spot wards which train B is driving, intersects with the location of train A, which is intentionally standing still train C pushes against train B, and B and C drive a behind train A one train drives a behind another, which is not pushing hazc hazb HazG HazG 3077TO37 dev0: is located on the track between the trains 3078TO37 dev2: is located on the track not between the trains TO00 dev2: is moving / located in between Y and X TO00 dev2: is moving / located in between Y and X train drives shunter s train drives shunter s GPHAT-340-Com HazState A Conflicting state Condition Hazard ID Type 3079TO45 dev1: is located in the track near the train TO00 dev2: is moving / located in between Y and X train drives shunter s 3080TO45 dev3: is located in the track but somewhere else than near the train TO00 dev2: is moving / located in between Y and X train drives shunter s 3081TO54 dev0: is located in the area TO00 dev2: is moving / located in between Y and X train drives area user s 3082TO54 dev2: is located in a different area TO00 dev2: is moving / located in between Y and X train drives area user s 3083TO61 dev0: is located between Y and X TO00 dev2: is moving / located in between Y and X normal train crosses the path of another train 3084TO61 dev1: is located before Y TO00 dev2: is moving / located in between Y and X train A approaches or crosses the path of train B Copyright (c) 2003 UIC / Euro-Interlocking Page 63 of 152

66 GPHAT-341-Com HazState A Conflicting state Condition Hazard ID Type 3085TO61 dev2: is located beyond X TO00 dev2: is moving / located in between Y and X a train of some kind crosses the path of or approaches a regular train which is standing still 3086TO61 dev3: stands still TO00 dev2: is moving / located in between Y and X train B approaches train A 3087TO61 dev4: rolls between Y and X TO00 dev2: is moving / located in between Y and X train A approaches or crosses the path of train B 3088TO61 dev5: rolls beyond X TO00 dev2: is moving / located in between Y and X 3089TO61 dev6: rolls before Y TO00 dev2: is moving / located in between Y and X train A approaches or crosses the path of train B train A approaches or crosses the path of train B 3090TO67 dev2: is changed in different state (S") TO00 dev2: is moving / located in between Y and X train traverses infrastructure which is in the wrong hazf Copyright (c) 2003 UIC / Euro-Interlocking Page 64 of 152

67 GPHAT-342-Com HazState A Conflicting state Condition Hazard ID Type 3091TO71 dev1: are not switched the required TO00 dev2: is moving / located in between Y and X train traverses infrastructure which is in the wrong hazf 3092TO83 dev1: is located in the area TO00 dev2: is moving / located in between Y and X train drives area user s 3093TO83 dev2: is located in another area TO00 dev2: is moving / located in between Y and X train drives area user s 3094TO92 dev0: is moving wards X TO00 dev2: is moving / located in between Y and X two trains approach X from different angles or cross each other s paths on the way their own points X haza 3095TO92 dev1: is not moving wards X TO00 dev2: is moving / located in between Y and X two trains approach X from different angles or cross each other s paths on the way their own points X hazb 3096TO92 dev2: is moving wards something else than X TO00 dev2: is moving / located in between Y and X train A approaches or crosses the path of train B haza GPHAT-343-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 65 of 152

68 HazState A Conflicting state Condition Hazard ID Type 3097TO00 dev3: is moving / located before Y TO00 dev3: is moving / located before Y trains unintentionally move backwards and in so doing, approach each other or cross each other s paths hazd 3098TO00 dev4: stands still TO00 dev3: is moving / located before Y train B unintentionally moves backwards, and in so doing approaches or collides with train A, which is unintentionally standing still hazd 3099TO00 dev5: rolls between Y and X TO00 dev3: is moving / located before Y train B unintentionally moves backwards and approaches or crosses the path of train A hazd 3100TO00 dev6: rolls beyond X TO00 dev3: is moving / located before Y 3101TO00 dev7: rolls before Y TO00 dev3: is moving / located before Y 3102TO27 dev0: is spped at Z TO00 dev3: is moving / located before Y train A moves past its permitted space and approaches or crosses the path of train B, which is unintentionally moving backwards trains unintentionally move backwards and in so doing, approach each other or cross each other s paths train B unintentionally moves backwards, and in so doing enters an area where train A is intentionally standing still hazd hazd hazd GPHAT-344-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 66 of 152

69 HazState A Conflicting state Condition Type ID Hazard 3103TO27 dev1: is not spped in Z TO00 dev3: is moving / located before Y train A moves outside its permitted space and approaches or crosses the path of train B, which is unintentionally moving backwards hazd 3104TO27 dev2: is spped in different than Z TO00 dev3: is moving / located before Y the spot wards which train B is unintentionally moving backwards, crosses or is on the path of train A hazd 3105TO34 dev0: is pressing against train B TO00 dev3: is moving / located before Y train C pushes against train B, and train B and C drive a behind train A HazG 3106TO34 dev1: is not pressing against train B TO00 dev3: is moving / located before Y one train drives a behind another, which is not pushing HazG 3107TO37 dev0: is located on the track between the trains 3108TO37 dev2: is located on the track not between the trains TO00 dev3: is moving / located before Y TO00 dev3: is moving / located before Y train drives shunter s train drives shunter s GPHAT-345-Com HazState A Conflicting state Condition Hazard ID Type 3109TO45 dev1: is located in the track near the train TO00 dev3: is moving / located before Y train drives shunter s 3110TO45 dev3: is located in the track but somewhere else than near the train 3111TO54 dev0: is located in the area 3112TO54 dev2: is located in a different area TO00 dev3: is moving / located before Y TO00 dev3: is moving / located before Y TO00 dev3: is moving / located before Y train drives shunter s train drives area user s train drives area user s 3113TO61 dev0: is located between Y and X TO00 dev3: is moving / located before Y two normal trains, which are both driving backwards, come near or cross each other s path on the way their own points X 3114TO61 dev1: is located before Y TO00 dev3: is moving / located before Y train A approaches or crosses the path of train B Copyright (c) 2003 UIC / Euro-Interlocking Page 67 of 152

70 GPHAT-346-Com HazState A Conflicting state Condition Hazard ID Type 3115TO61 dev2: is located beyond X TO00 dev3: is moving / located before Y train A approaches or crosses the path of train B 3116TO61 dev3: stands still TO00 dev3: is moving / located before Y train B approaches train A 3117TO61 dev4: rolls between Y and X TO00 dev3: is moving / located before Y train A approaches or crosses the path of train B 3118TO61 dev5: rolls beyond X TO00 dev3: is moving / located before Y 3119TO61 dev6: rolls before Y TO00 dev3: is moving / located before Y train A approaches or crosses the path of train B train A approaches or crosses the path of train B 3120TO67 dev2: is changed in different state (S") TO00 dev3: is moving / located before Y train traverses infrastructure which is in the wrong hazf GPHAT-347-Com HazState A Conflicting state Condition Type ID Hazard 3121TO71 dev1: are not switched the required TO00 dev3: is moving / located before Y path of train traverses infrastructure which is in the wrong hazf 3122TO83 dev1: is located in the area TO00 dev3: is moving / located before Y train drives area user s 3123TO83 dev2: is located in another area TO00 dev3: is moving / located before Y train drives area user s 3124TO92 dev0: is moving wards X TO00 dev3: is moving / located before Y train A approaches or crosses the path of train B hazd 3125TO92 dev1: is not moving wards X TO00 dev3: is moving / located before Y train B approaches train A hazd 3126TO92 dev2: is moving wards something else than X TO00 dev3: is moving / located before Y train A approaches or crosses the path of train B hazd Copyright (c) 2003 UIC / Euro-Interlocking Page 68 of 152

71 GPHAT-348-Com HazState A Conflicting state Condition Hazard ID Type 3127TO00 dev5: rolls between Y and X TO00 dev4: stands still the spot where train B unintentionally standing still, crosses or is on the path of train A hazb 3128TO00 dev6: rolls beyond X TO00 dev4: stands still 3129TO00 dev7: rolls before Y TO00 dev4: stands still train B moves past its permitted space and in an area where train A is unintentionally standing still train A unintentionally moves backwards and approaches or collides with train B, which is unintentionally standing still hazc hazd 3130TO27 dev1: is not spped in Z TO00 dev4: stands still train A moves past its permitted space and drives in an area where train B is unintentionally standing still hazb 3131TO61 dev0: is located between Y and X TO00 dev4: stands still a normal train unintentionally sps in an area designated for exceptional use and collides with another train 3132TO61 dev1: is located before Y TO00 dev4: stands still train A approaches or crosses the path of train B Copyright (c) 2003 UIC / Euro-Interlocking Page 69 of 152

72 GPHAT-349-Com HazState A Conflicting state Condition Hazard ID Type 3133TO61 dev2: is located beyond X TO00 dev4: stands still a train of some type crosses the path of or approaches a normal train that is unintentionally standing still 3134TO61 dev4: rolls between Y and X TO00 dev4: stands still train A approaches train B 3135TO61 dev5: rolls beyond X TO00 dev4: stands still train A approaches train B 3136TO61 dev6: rolls before Y TO00 dev4: stands still train A approaches train B 3137TO92 dev0: is moving wards X TO00 dev4: stands still the spot where train B is unintentionally standing still, crosses or is on the path of train A hazb 3138TO92 dev2: is moving wards something else than X TO00 dev4: stands still train A approaches train B hazb Copyright (c) 2003 UIC / Euro-Interlocking Page 70 of 152

73 GPHAT-350-Com HazState A Conflicting state Condition Hazard ID Type 3139TO00 dev5: rolls between Y and X TO00 dev5: rolls between Y and X 3140TO00 dev6: rolls beyond X TO00 dev5: rolls between Y and X both trains approach X from different angles or cross each other s paths on the way their own points X train A moves past its permitted space and approaches or crosses the path of train B haza hazc 3141TO00 dev7: rolls before Y TO00 dev5: rolls between Y and X train A unintentionally drives backwards and approaches or crosses the path of train B hazd 3142TO27 dev0: is spped at Z TO00 dev5: rolls between Y and X 3143TO27 dev1: is not spped in Z TO00 dev5: rolls between Y and X the spot where train A is intentionally standing still, is in the path of train B train A moves past its permitted space and approaches or crosses the path of train B hazb hazc 3144TO27 dev2: is spped in different than Z TO00 dev5: rolls between Y and X the spot ward which train B is driving, crosses or is on the path train A, which is intentionally standing still hazb Copyright (c) 2003 UIC / Euro-Interlocking Page 71 of 152

74 GPHAT-351-Com HazState A Conflicting state Condition Hazard ID Type 3145TO34 dev0: is pressing against train B TO00 dev5: rolls between Y and X train C pushes against train B, and B and C drive a behind train A HazG 3146TO34 dev1: is not pressing against train B TO00 dev5: rolls between Y and X one train drives a behind another, which is not pushing HazG 3147TO37 dev0: is located on the track between the trains 3148TO37 dev2: is located on the track not between the trains 3149TO45 dev1: is located in the track near the train TO00 dev5: rolls between Y and X TO00 dev5: rolls between Y and X TO00 dev5: rolls between Y and X train drives shunter s train drives shunter s train drives shunter s 3150TO45 dev3: is located in the track but somewhere else than near the train TO00 dev5: rolls between Y and X train drives shunter s GPHAT-352-Com HazState A Conflicting state Condition Hazard ID Type 3151TO54 dev0: is located in the area TO00 dev5: rolls between Y and X train drives area user s 3152TO54 dev2: is located in a different area TO00 dev5: rolls between Y and X train drives area user s 3153TO61 dev0: is located between Y and X TO00 dev5: rolls between Y and X regular train crosses path of nonregular of train 3154TO61 dev1: is located before Y TO00 dev5: rolls between Y and X train A approaches or crosses the path of train B 3155TO61 dev2: is located beyond X TO00 dev5: rolls between Y and X train A approaches or crosses the path of train B 3156TO61 dev3: stands still TO00 dev5: rolls between Y and X train B approaches train A GPHAT-353-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 72 of 152

75 HazState A Conflicting state Condition Hazard ID Type 3157TO61 dev4: rolls between Y and X TO00 dev5: rolls between Y and X train A approaches or crosses the path of train B 3158TO61 dev5: rolls beyond X TO00 dev5: rolls between Y and X train A approaches or crosses the path of train B 3159TO61 dev6: rolls before Y TO00 dev5: rolls between Y and X train A approaches or crosses the path of train B 3160TO67 dev2: is changed in different state (S") TO00 dev5: rolls between Y and X train traverses infrastructure is situated in the wrong hazf 3161TO71 dev1: are not switched the required TO00 dev5: rolls between Y and X path of train traverses infrastructure is situated in the wrong hazf 3162TO83 dev1: is located in the area TO00 dev5: rolls between Y and X train drives area user s GPHAT-354-Com HazState A Conflicting state Condition Hazard ID Type 3163TO83 dev2: is located in another area 3164TO92 dev0: is moving wards X TO00 dev5: rolls between Y and X TO00 dev5: rolls between Y and X train drives area user s train A approaches or crosses the path of train B haza 3165TO92 dev1: is not moving wards X TO00 dev5: rolls between Y and X train B approaches train A hazb 3166TO92 dev2: is moving wards something else than X TO00 dev5: rolls between Y and X train A approaches or crosses the path of train B 3167TO00 dev6: rolls beyond X TO00 dev6: rolls beyond X both trains approach X from different angles or cross each other s paths on the way their own points X 3168TO00 dev7: rolls before Y TO00 dev6: rolls beyond X train B moves past its permitted space and approaches or crosses the path of train A, which is unintentionally driving backwards haza hazc hazd Copyright (c) 2003 UIC / Euro-Interlocking Page 73 of 152

76 GPHAT-355-Com HazState A Conflicting state Condition Hazard ID Type 3169TO27 dev0: is spped at Z TO00 dev6: rolls beyond X train B drives in train A s area hazc 3170TO27 dev1: is not spped in Z TO00 dev6: rolls beyond X two trains unintentionally move, and approach each other or cross each other s paths hazc 3171TO27 dev2: is spped in different than Z TO00 dev6: rolls beyond X train B moves past its permitted space and approaches train A, which is unintentionally standing still hazc 3172TO34 dev0: is pressing against train B TO00 dev6: rolls beyond X train C pushes against train B, and B and C drive a behind train A HazG 3173TO34 dev1: is not pressing against train B TO00 dev6: rolls beyond X one train drives a behind another, which is not pushing HazG 3174TO37 dev0: is located on the track between the trains TO00 dev6: rolls beyond X train drives shunter s GPHAT-356-Com HazState A Conflicting state Condition Hazard ID Type 3175TO37 dev2: is located on TO00 dev6: rolls beyond X train drives shunter s the track not between the trains 3176TO45 dev1: is located in the track near the train TO00 dev6: rolls beyond X train drives shunter s 3177TO45 dev3: is located in the track but somewhere else than near the train 3178TO54 dev0: is located in the area 3179TO54 dev2: is located in a different area TO00 dev6: rolls beyond X train drives shunter s TO00 dev6: rolls beyond X train drives area user s TO00 dev6: rolls beyond X train drives area user s 3180TO61 dev0: is located between Y and X TO00 dev6: rolls beyond X A normal train moves past its permitted space and crosses a path of another train Copyright (c) 2003 UIC / Euro-Interlocking Page 74 of 152

77 GPHAT-357-Com HazState A Conflicting state Condition Hazard ID Type 3181TO61 dev1: is located before Y TO00 dev6: rolls beyond X train A approaches or crosses the path of train B 3182TO61 dev2: is located beyond X TO00 dev6: rolls beyond X train A approaches or crosses the path of train B 3183TO61 dev3: stands still TO00 dev6: rolls beyond X train B approaches train A 3184TO61 dev4: rolls between Y and X TO00 dev6: rolls beyond X train A approaches or crosses the path of train B 3185TO61 dev5: rolls beyond X TO00 dev6: rolls beyond X train A approaches or crosses the path of train B 3186TO61 dev6: rolls before Y TO00 dev6: rolls beyond X train A approaches or crosses the path of train B GPHAT-358-Com HazState A Conflicting state Condition Hazard ID Type 3187TO67 dev2: is changed in different state (S") TO00 dev6: rolls beyond X train traverses infrastructure which is in the wrong hazf 3188TO71 dev1: are not switched the required TO00 dev6: rolls beyond X path of train traverses infrastructure which is in the wrong hazf 3189TO83 dev1: is located in the area 3190TO83 dev2: is located in another area 3191TO92 dev0: is moving wards X 3192TO92 dev1: is not moving wards X TO00 dev6: rolls beyond X train drives area user s TO00 dev6: rolls beyond X train drives area user s TO00 dev6: rolls beyond X train A approaches or crosses the path of train B hazc TO00 dev6: rolls beyond X train B approaches train A hazc GPHAT-359-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 75 of 152

78 HazState A Conflicting state Condition Hazard ID Type 3193TO92 dev2: is moving wards something else than X TO00 dev6: rolls beyond X train A approaches or crosses the path of train B hazc 3194TO00 dev7: rolls before Y TO00 dev7: rolls before Y 3195TO27 dev0: is spped at Z TO00 dev7: rolls before Y two trains unintentionally move backwards and in so doing approach or cross each other s paths the spot where train A is intentionally standing still, intersects with the path of train B hazd hazd 3196TO27 dev1: is not spped in Z TO00 dev7: rolls before Y train A moves past its permitted space and approaches or crosses the path of train B, which is unintentionally moving backwards hazd 3197TO27 dev2: is spped in different than Z TO00 dev7: rolls before Y the spot wards which train B is unintentionally moving backwards, crosses the path from train A, which is unintentionally moving hazd 3198TO34 dev0: is pressing against train B TO00 dev7: rolls before Y train C pushes against train B, and B and C drive a behind train A HazG GPHAT-360-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 76 of 152

79 HazState A Conflicting state Condition Hazard ID Type 3199TO34 dev1: is not pressing against train B TO00 dev7: rolls before Y train pushes against train B, train B rolls situated behind train A HazG 3200TO37 dev0: is located on the track between the trains TO00 dev7: rolls before Y train drives in which the shunter is present 3201TO37 dev2: is located on the track not between the trains TO00 dev7: rolls before Y train drives in which the shunter is present 3202TO45 dev1: is located in the track near the train TO00 dev7: rolls before Y train drives in which the shunter is present 3203TO45 dev3: is located in the track but somewhere else than near the train TO00 dev7: rolls before Y train drives in which the shunter is present 3204TO54 dev0: is located in the area TO00 dev7: rolls before Y train drives in which area user is present GPHAT-361-Com HazState A Conflicting state Condition Hazard ID Type 3205TO54 dev2: is located in a different area TO00 dev7: rolls before Y train drives area user s 3206TO61 dev0: is located between Y and X TO00 dev7: rolls before Y driving backwards, two trains come near or cross each other s paths on the way their own points X 3207TO61 dev1: is located before Y TO00 dev7: rolls before Y train A approaches or crosses the path of train B 3208TO61 dev2: is located beyond X TO00 dev7: rolls before Y train A approaches or crosses the path of train B 3209TO61 dev3: stands still TO00 dev7: rolls before Y train B approaches train A 3210TO61 dev4: rolls between Y and X TO00 dev7: rolls before Y train A approaches or crosses the path of train B Copyright (c) 2003 UIC / Euro-Interlocking Page 77 of 152

80 GPHAT-362-Com HazI D State A Conflicting state Condition Hazard Type 3211 TO61 dev5: rolls beyond X TO00 dev7: rolls before Y train A approaches or crosses the path of train B 3212 TO61 dev6: rolls before Y TO00 dev7: rolls before Y train A approaches or crosses the path of train B 3213 TO67 dev2: is changed in different state (S") TO00 dev7: rolls before Y train traverses infrastructure which is in the wrong hazf 3214 TO71 dev1: are not switched the required 3215 TO83 dev1: is located in the area 3216 TO83 dev2: is located in another area TO00 dev7: rolls before Y TO00 dev7: rolls before Y TO00 dev7: rolls before Y path of train crosses infrastructure which is in the wrong train drives area user s train drives area user s hazf GPHAT-363-Com HazI D State A Conflicting state Condition Hazard Type 3217 TO92 dev0: is moving wards X TO00 dev7: rolls before Y train A approaches or crosses the path of train B hazd 3218 TO92 dev1: is not moving wards X TO00 dev7: rolls before Y train B approaches train A hazd 3219 TO92 dev2: is moving wards something else than X TO00 dev7: rolls before Y train A approaches or crosses the path of train B hazd GPHAT-272-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 78 of 152

81 HazID State A Conflicting state Condition Hazard type 3227 TO92 dev0: is moving wards X TO27 dev0: is spped at Z the spot where train B intentionally standing still, is in the path of train A hazb 3228 TO92 dev2: is moving wards something else than X TO27 dev0: is spped at Z a train of some kind hazb approaches or collides with a normal train that is intentionally standing still 3229 TO27 dev1: is not spped in Z TO27 dev1: is not spped in Z two trains unintentionally move and approach each other or cross each other s paths haza 3230 TO27 dev2: spped in different than Z TO27 dev1: is not spped in Z the spot where train B unintentionally standing still intersects with the spot where A is also unintentionally standing still hazb 3231 TO34 dev0: is pressing against train B TO27 dev1: is not spped in Z one train moves in the opposite hazg direction of another, which is pushing 3232 TO34 dev1: is not pressing against train B TO27 dev1: is not spped in Z one train drives a behind another, which is not pushing HazG GPHAT-273-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 79 of 152

82 HazID State A Conflicting state Condition Hazard type 3233 TO37 dev0: is located on the track between the trains TO27 dev1: is not spped in Z trains drives shunter s 3234 TO37 dev2: is located on the track not between the trains TO27 dev1: is not spped in Z trains drives shunter s 3235 TO45 dev1: is located in the track near the train TO27 dev1: is not spped in Z trains drives shunter s 3236 TO45 dev3: is located in the track but somewhere else than near the train TO27 dev1: is not spped in Z trains drives shunter s GPHAT-274-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 80 of 152

83 HazID State A Conflicting state Condition Hazard type 3237 TO54 dev0: is located in the area 3238 TO54 dev2: is located in a different area TO27 dev1: is not spped in Z TO27 dev1: is not spped in Z trains drives area user s trains drives area user s 3239 TO61 dev0: is located between Y and X TO27 dev1: is not spped in Z a train of some kind approaches or crosses the path of a normal train, which is moving unintentionally 3240 TO61 dev1: is located before Y 3241 TO61 dev2: is located beyond X TO27 dev1: is not spped in Z TO27 dev1: is not spped in Z train A moves backwards and in so doing, approaches or collides with train B, which is unintentionally standing still a train of some kind crosses the path of or approaches a normal train which is moving unintentionally 3242 TO61 dev3: stands still TO27 dev1: is not spped in Z the spot where train B is unintentionally standing still intersects with the spot where train A is also standing still GPHAT-275-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 81 of 152

84 HazID State A Conflicting state Condition Hazard type 3243 TO61 dev4: rolls between Y and X 3244 TO61 dev5: rolls beyond X 3245 TO61 dev6: rolls before Y TO27 dev1: is not spped in Z TO27 dev1: is not spped in Z TO27 dev1: is not spped in Z train A approaches or crosses the path of train B a train of some kind crosses the path of or approaches a normal train which is moving unintentionally train A rolls backwards and in so doing, approaches or collides with train B, which is unintentionally standing still 3246 TO67 dev2: is changed TO27 dev1: is not spped in train traverses infrastructure in different state (S") Z which is in the wrong hazf 3247 TO71 dev1: are not switched the required 3248 TO83 dev1: is located in the area 3249 TO83 dev2: is located in another area TO27 dev1: is not spped in Z TO27 dev1: is not spped in Z TO27 dev1: is not spped in Z path of train traverses infrastructure which is in the wrong trains drives area user s trains drives area user s hazf GPHAT-276-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 82 of 152

85 HazID State A Conflicting state Condition Hazard type 3250 TO92 dev0: is moving wards X 3251 TO92 dev1: is not moving wards X TO27 dev1: is not spped in Z TO27 dev1: is not spped in Z train A approaches train B, which should be standing still at that moment train B unintentionally approaches or crosses the path of train A, which is not accelerating haza hazb 3252 TO92 dev2: is moving wards something else than X TO27 dev1: is not spped in Z train B unintentionally haza approaches or crosses the path of train A, which is moving in the wrong direction 3253 TO34 dev0: is pressing against train B TO27 dev2: spped in different than Z train A approaches train B hazg GPHAT-277-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 83 of 152

86 HazID State A Conflicting state Condition Hazard type 3254 TO61 dev0: is located between Y and X 3255 TO61 dev1: is located before Y TO27 dev2: spped in different than Z TO27 dev2: spped in different than Z a regular train intentionally sps in an area designated for exceptional use train A drives backwards and in so doing approaches or crosses the path of train B, which is unintentionally standing still at Z 3256 TO61 dev2: is located beyond X TO27 dev2: spped in different than Z train A moves past its permitted space, and drives in an area where train B is unintentionally standing still at Z 3257 TO61 dev4: rolls between Y and X TO27 dev2: spped in different than Z a regular train intentionally sps in area designated for exceptional use 3258 TO61 dev5: rolls beyond X TO27 dev2: spped in different than Z train A moves past its permitted space and drives in an area where train B is unintentionally standing still at Z GPHAT-278-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 84 of 152

87 HazID State A Conflicting state Condition Hazard type 3259 TO61 dev6: rolls before Y TO27 dev2: spped in different than Z train A moves backwards, and in so doing, approaches or collides with train B, which is unintentionally standing still at a Z 3260 TO92 dev0: is moving wards X 3261 TO92 dev2: is moving wards something else than X TO27 dev2: spped in different than Z TO27 dev2: spped in different than Z the Z, where train B is unintentionally standing still, crosses or in on the path of train A hazb train A, which is moving de HazB wrong direction, approaches or crosses the path of train B, which is unintentionally in Z 3262 TO34 dev0: is pressing against train B TO34 dev0: is pressing against train B one train moves in the opposite hazg direction of another train that is pushing it 3263 TO37 dev0: is located on the track between the trains TO34 dev0: is pressing against train B one train pushes against another, but the shunter is between them HazE GPHAT-279-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 85 of 152

88 HazID State A Conflicting state Condition Hazard type 3264 TO45 dev1: is located in the track near the train TO34 dev0: is pressing against train B train pushes against another train, but the shunter is in the area of the trains 3265 TO45 dev3: is located in the track but somewhere else than near the train TO34 dev0: is pressing against train B train approaches or collides with the shunter HazE 3266 TO54 dev0: is located in the area TO34 dev0: is pressing against train B train pushes against another train, but the shunter is between the trains HazE 3267 TO54 dev2: is located in a different area TO34 dev0: is pressing against train B train pushes against another train, but the shunter is between the trains HazE 3268 TO61 dev0: is located between Y and X 3269 TO61 dev1: is located before Y TO34 dev0: is pressing against train B TO34 dev0: is pressing against train B train C pushes against train B, hazg and B and C drive a behind train A train C pushes against train B, HazG and B and C drive a behind train A GPHAT-280-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 86 of 152

89 HazID State A Conflicting state Condition Hazard type 3270 TO61 dev2: is located beyond X 3271 TO61 dev4: rolls between Y and X 3272 TO61 dev5: rolls beyond X 3273 TO61 dev6: rolls before Y TO34 dev0: is pressing against train B TO34 dev0: is pressing against train B TO34 dev0: is pressing against train B TO34 dev0: is pressing against train B train C pushes against train B, HazG and B and C drive a behind train A train C pushes against train B, HazG and B and C drive a behind train A train C pushes against train B, HazG and B and C drive a behind train A train C pushes against train B, HazG and B and C drive a behind train A 3274 TO67 dev2: is changed TO34 dev0: is pressing in different state (S") against train B train traverses infrastructure which is in the wrong hazf 3275 TO71 dev1: are not switched the required TO34 dev0: is pressing against train B path of train crosses infrastructure which is in the wrong hazf GPHAT-281-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 87 of 152

90 HazID State A Conflicting state Condition Hazard type 3276 TO83 dev1: is located in the area TO34 dev0: is pressing against train B trains drives area user s 3277 TO83 dev2: is located in another area TO34 dev0: is pressing against train B trains drives area user s 3278 TO92 dev0: is moving wards X TO34 dev0: is pressing against train B train A approaches or crosses the path of train B hazg 3279 TO92 dev1: is not moving wards X TO34 dev0: is pressing against train B train B approaches train A hazg 3280 TO92 dev2: is moving wards something else than X TO34 dev0: is pressing against train B train A approaches or crosses the path of train B hazg 3281 TO61 dev0: is located between Y and X TO34 dev1: is not pressing against train B train is standing still in an area where another train is present HazG 3282 TO61 dev1: is located before Y 3283 TO61 dev2: is located beyond X TO34 dev1: is not pressing against train B TO34 dev1: is not pressing against train B train C does not push against HazG train B; train B drives wards a behind train A train C does not push against HazG train B; train B drives wards a behind train A GPHAT-282-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 88 of 152

91 HazID State A Conflicting state Condition Hazard type 3284 TO61 dev4: rolls between Y and X 3285 TO61 dev5: rolls beyond X 3286 TO61 dev6: rolls before Y TO34 dev1: is not pressing against train B TO34 dev1: is not pressing against train B TO34 dev1: is not pressing against train B train C does not push against HazG train B; train B drives wards a behind train A train C does not push against HazG train B; train B drives wards a behind train A train C does not push against HazG train B; train B drives wards a behind train A 3287 TO92 dev0: is moving wards X TO34 dev1: is not pressing against train B train A approaches train B hazg 3288 TO92 dev2: is moving wards something else than X TO34 dev1: is not pressing against train B train A approaches train B hazg GPHAT-283-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 89 of 152

92 HazID State A Conflicting state Condition Hazard type 3289 TO61 dev0: is located between Y and X 3290 TO61 dev1: is located before Y TO37 dev0: is located on the track between the trains TO37 dev0: is located on the track between the trains a shunter and a train pass by or collide with each other in an exceptional area train moves backwards and approaches or collides with the shunter, who is intentionally there 3291 TO61 dev2: is located beyond X 3292 TO61 dev4: rolls between Y and X 3293 TO61 dev5: rolls beyond X 3294 TO61 dev6: rolls before Y 3295 TO92 dev0: is moving wards X TO37 dev0: is located on the track between the trains TO37 dev0: is located on the track between the trains TO37 dev0: is located on the track between the trains TO37 dev0: is located on the track between the trains TO37 dev0: is located on the track between the trains train moves past its permitted space and drives in the shunter s area trains drives shunter s trains drives shunter s trains drives shunter s train accelerates wards X and in so doing, traverses the shunter s area HazE GPHAT-284-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 90 of 152

93 HazID State A Conflicting state Condition Hazard type 3296 TO92 dev2: is moving wards something else than X 3297 TO61 dev0: is located between Y and X 3298 TO61 dev1: is located before Y 3299 TO61 dev2: is located beyond X 3300 TO61 dev4: rolls between Y and X 3301 TO61 dev5: rolls beyond X 3302 TO61 dev6: rolls before Y 3303 TO92 dev0: is moving wards X TO37 dev0: is located on the track between the trains TO37 dev2: is located on the track not between the trains TO37 dev2: is located on the track not between the trains TO37 dev2: is located on the track not between the trains TO37 dev2: is located on the track not between the trains TO37 dev2: is located on the track not between the trains TO37 dev2: is located on the track not between the trains TO37 dev2: is located on the track not between the trains train accelerates wards X' and in so doing crosses the area containing the shunter trains drives shunter s trains drives shunter s trains drives shunter s trains drives shunter s trains drives shunter s trains drives shunter s train approaches or collides with the shunter GPHAT-285-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 91 of 152

94 HazID State A Conflicting state Condition Hazard type 3304 TO92 dev2: is moving wards something else than X TO37 dev2: is located on the track not between the trains train approaches or collides with the shunter HazE 3305 TO61 dev0: is located between Y and X TO45 dev1: is located in the track near the train train drives shunter s 3306 TO61 dev1: is located before Y TO45 dev1: is located in the track near the train train drives shunter s 3307 TO61 dev2: is located beyond X TO45 dev1: is located in the track near the train train drives shunter s GPHAT-286-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 92 of 152

95 HazID State A Conflicting state Condition Hazard type 3308 TO61 dev4: rolls between Y and X TO45 dev1: is located in the track near the train train drives shunter s 3309 TO61 dev5: rolls beyond X TO45 dev1: is located in the track near the train train drives shunter s 3310 TO61 dev6: rolls before Y TO45 dev1: is located in the track near the train train drives shunter s 3311 TO92 dev0: is moving wards X TO45 dev1: is located in the track near the train train drives shunter s HazE 3312 TO92 dev2: is moving wards something else than X TO45 dev1: is located in the track near the train train approaches or collides with the shunter HazE 3313 TO61 dev0: is located between Y and X TO45 dev3: is located in the track but somewhere else than near the train train drives shunter s 3314 TO61 dev1: is located before Y TO45 dev3: is located in the track but somewhere else than near the train train drives shunter s 3315 TO61 dev2: is located beyond X TO45 dev3: is located in the track but somewhere else than near the train train drives shunter s GPHAT-287-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 93 of 152

96 HazID State A Conflicting state Condition Hazard type 3316 TO61 dev4: rolls between Y and X TO45 dev3: is located in the track but somewhere else than near the train train drives shunter s 3317 TO61 dev5: rolls beyond X TO45 dev3: is located in the track but somewhere else than near the train train drives shunter s 3318 TO61 dev6: rolls before Y TO45 dev3: is located in the track but somewhere else than near the train train drives shunter s 3319 TO92 dev0: is moving wards X TO45 dev3: is located in the track but somewhere else than near the train train approaches or collides with the shunter HazE 3320 TO92 dev2: is moving wards something else than X TO45 dev3: is located in the track but somewhere else than near the train train approaches or collides with the shunter HazE 3321 TO61 dev0: is located between Y and X TO54 dev0: is located in the area train drives area user s 3322 TO61 dev1: is located before Y TO54 dev0: is located in the area train drives area user s Copyright (c) 2003 UIC / Euro-Interlocking Page 94 of 152

97 GPHAT-288-Com HazID State A Conflicting state Condition Hazard type 3323 TO61 dev2: is located beyond X TO54 dev0: is located in the area trains drives area user s 3324 TO61 dev4: rolls between Y and X TO54 dev0: is located in the area trains drives area user s 3325 TO61 dev5: rolls beyond X TO54 dev0: is located in the area trains drives area user s Copyright (c) 2003 UIC / Euro-Interlocking Page 95 of 152

98 GPHAT-289-Com HazID State A Conflicting state Condition Hazard type 3326 TO61 dev6: rolls before Y TO54 dev0: is located in the area trains drives area user s 3327 TO92 dev0: is moving wards X TO54 dev0: is located in the area train approaches or collides with the area user HazE 3328 TO92 dev2: is moving wards something else than X TO54 dev0: is located in the area train approaches or collides with the area user HazE 3329 TO61 dev0: is located between Y and X TO54 dev2: is located in a different area trains drives area user s 3330 TO61 dev1: is located before Y TO54 dev2: is located in a different area trains drives area user s 3331 TO61 dev2: is located beyond X TO54 dev2: is located in a different area trains drives area user s 3332 TO61 dev4: rolls between Y and X TO54 dev2: is located in a different area trains drives area user s 3333 TO61 dev5: rolls beyond X TO54 dev2: is located in a different area trains drives area user s GPHAT-290-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 96 of 152

99 HazID State A Conflicting state Condition Hazard type 3334 TO61 dev6: rolls before Y TO54 dev2: is located in a different area train drives area user s 3335 TO92 dev0: is moving wards X TO54 dev2: is located in a different area train approaches or collides with the area user HazE 3336 TO92 dev2: is moving wards something else than X TO54 dev2: is located in a different area train approaches or collides with the area user HazE 3337 TO61 dev0: is located between Y and X TO61 dev0: is located between Y and X two trains move during exceptional use of area and cross each other s paths haza 3338 TO61 dev1: is located before Y TO61 dev0: is located between Y and X train A approaches or crosses the path of train B hazd 3339 TO61 dev2: is located beyond X TO61 dev0: is located between Y and X train A approaches or crosses the path of train B hazc 3340 TO61 dev3: stands still TO61 dev0: is located between Y and X train A approaches or crosses the path of train B hazb 3341 TO61 dev4: rolls between Y and X TO61 dev0: is located between Y and X train A approaches or crosses the path of train B haza GPHAT-291-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 97 of 152

100 HazID State A Conflicting state Condition Hazard type 3342 TO61 dev5: rolls beyond X TO61 dev0: is located between Y and X train A approaches or crosses the path of train B hazc 3343 TO61 dev6: rolls before Y TO61 dev0: is located between Y and X train A approaches or crosses the path of train B hazd 3344 TO67 dev2: is changed TO61 dev0: is located in different state (S") between Y and X train traverses infrastructure which is in the wrong hazf Copyright (c) 2003 UIC / Euro-Interlocking Page 98 of 152

101 GPHAT-292-Com HazID State A Conflicting state Condition Hazard type 3345 TO71 dev1: are not switched the required TO61 dev0: is located between Y and X path of train traverses infrastructure which is in the wrong hazf 3346 TO83 dev1: is located in the area TO61 dev0: is located between Y and X train drives area user s 3347 TO83 dev2: is located in another area TO61 dev0: is located between Y and X train drives area user s 3348 TO92 dev0: is moving wards X TO61 dev0: is located between Y and X regular train crosses path of another train in the area 3349 TO92 dev1: is not moving wards X TO61 dev0: is located between Y and X train A s inability accelerate blocks special use foreseen for an area 3350 TO92 dev2: is moving wards something else than X TO61 dev0: is located between Y and X train A approaches or crosses the path of train B 3351 TO61 dev1: is located before Y TO61 dev1: is located before Y unintentionally driving backwards, two non-regular trains approach or cross each other s paths hazd GPHAT-293-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 99 of 152

102 HazID State A Conflicting state Condition Hazard type 3352 TO61 dev2: is located beyond X TO61 dev1: is located before Y train A approaches or crosses the path of train B hazd 3353 TO61 dev3: stands still TO61 dev1: is located before Y train A approaches or crosses the path of train B hazd 3354 TO61 dev4: rolls between Y and X 3355 TO61 dev5: rolls beyond X 3356 TO61 dev6: rolls before Y TO61 dev1: is located before Y TO61 dev1: is located before Y TO61 dev1: is located before Y train A approaches or crosses the path of train B train A approaches or crosses the path of train B train A approaches or crosses the path of train B hazd hazd hazd 3357 TO67 dev2: is changed TO61 dev1: is located before train traverses infrastructure in different state (S") Y which is in the wrong hazf 3358 TO71 dev1: are not switched the required 3359 TO83 dev1: is located in the area TO61 dev1: is located before Y TO61 dev1: is located before Y path of train traverses infrastructure which is in the wrong trains drives area user s hazf GPHAT-294-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 100 of 152

103 HazID State A Conflicting state Condition Hazard type 3360 TO83 dev2: is located in another area 3361 TO92 dev0: is moving wards X 3362 TO92 dev1: is not moving wards X 3363 TO92 dev2: is moving wards something else than X TO61 dev1: is located before Y TO61 dev1: is located before Y TO61 dev1: is located before Y TO61 dev1: is located before Y train drives area user s train A approaches or crosses the path of train B train B approaches train A train A approaches or crosses the path of train B GPHAT-295-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 101 of 152

104 HazID State A Conflicting state Condition Hazard type 3364 TO61 dev2: is located beyond X TO61 dev2: is located beyond X train A approaches or crosses the path of train B hazc 3365 TO61 dev3: stands still TO61 dev2: is located beyond X train A approaches or crosses the path of train B hazc 3366 TO61 dev4: rolls between Y and X TO61 dev2: is located beyond X train A approaches or crosses the path of train B hazc 3367 TO61 dev5: rolls beyond X TO61 dev2: is located beyond X train A approaches or crosses the path of train B hazc 3368 TO61 dev6: rolls before Y TO61 dev2: is located beyond X train A approaches or crosses the path of train B hazd 3369 TO67 dev2: is changed TO61 dev2: is located in different state (S") beyond X train traverses infrastructure which is in the wrong hazf 3370 TO71 dev1: are not switched the required TO61 dev2: is located beyond X path of train traverses infrastructure which is in the false hazf 3371 TO83 dev1: is located in the area TO61 dev2: is located beyond X train drives area user s GPHAT-296-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 102 of 152

105 HazID State A Conflicting state Condition Hazard type 3372 TO83 dev2: is located in another area TO61 dev2: is located beyond X trains drives area user s 3373 TO92 dev0: is moving wards X TO61 dev2: is located beyond X a train of some kind crosses the path of or approaches a normal train 3374 TO92 dev1: is not moving wards X TO61 dev2: is located beyond X train B approaches train A 3375 TO92 dev2: is moving wards something else than X TO61 dev2: is located beyond X train A approaches or crosses the path of train B 3376 TO61 dev4: rolls between Y and X 3377 TO61 dev5: rolls beyond X 3378 TO61 dev6: rolls before Y 3379 TO92 dev0: is moving wards X TO61 dev3: stands still train A approaches train B hazb TO61 dev3: stands still train A approaches train B hazc TO61 dev3: stands still train A approaches train B hazd TO61 dev3: stands still train A approaches train B GPHAT-297-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 103 of 152

106 HazID State A Conflicting state Condition Hazard type 3380 TO92 dev2: is moving wards something else than X TO61 dev3: stands still train A approaches train B 3381 TO61 dev4: rolls between Y and X TO61 dev4: rolls between Y and X train A approaches or crosses the path of train B haza 3382 TO61 dev5: rolls beyond X TO61 dev4: rolls between Y and X train A approaches or crosses the path of train B hazc GPHAT-298-Com HazID State A Conflicting state Condition Hazard type 3383 TO61 dev6: rolls before Y TO61 dev4: rolls between Y and X train A approaches or crosses the path of train B hazd 3384 TO67 dev2: is changed TO61 dev4: rolls between Y in different state (S") and X train traverses infrastructure which is in the wrong hazf 3385 TO71 dev1: are not switched the required TO61 dev4: rolls between Y and X path of train traverses infrastructure which is in the wrong hazf 3386 TO83 dev1: is located in the area TO61 dev4: rolls between Y and X train drives area user s 3387 TO83 dev2: is located in another area TO61 dev4: rolls between Y and X train drives area user s 3388 TO92 dev0: is moving wards X TO61 dev4: rolls between Y and X train A approaches or crosses the path of train B 3389 TO92 dev1: is not moving wards X TO61 dev4: rolls between Y and X train B approaches train A Copyright (c) 2003 UIC / Euro-Interlocking Page 104 of 152

107 GPHAT-299-Com HazID State A Conflicting state Condition Hazard type 3390 TO92 dev2: is moving wards something else than X TO61 dev4: rolls between Y and X train A approaches or crosses the path of train B 3391 TO61 dev5: rolls beyond X TO61 dev5: rolls beyond X train A approaches or crosses the path of train B hazc 3392 TO61 dev6: rolls before Y TO61 dev5: rolls beyond X train A approaches or crosses the path of train B hazd 3393 TO67 dev2: is changed TO61 dev5: rolls beyond X in different state (S") train traverses infrastructure which is in the wrong hazf 3394 TO71 dev1: are not switched the required TO61 dev5: rolls beyond X path of train traverses infrastructure which is in the false hazf 3395 TO83 dev1: is located in the area TO61 dev5: rolls beyond X train drives area user s 3396 TO83 dev2: is located in another area TO61 dev5: rolls beyond X train drives area user s 3397 TO92 dev0: is moving wards X TO61 dev5: rolls beyond X train A approaches or crosses the path of train B GPHAT-300-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 105 of 152

108 HazID State A Conflicting state Condition Hazard type 3398 TO92 dev1: is not moving wards X TO61 dev5: rolls beyond X train B approaches train A 3399 TO92 dev2: is moving wards something else than X TO61 dev5: rolls beyond X train A approaches or crosses the path of train B 3400 TO61 dev6: rolls before Y TO61 dev6: rolls before Y train A approaches or crosses the path of train B hazd 3401 TO67 dev2: is changed TO61 dev6: rolls before Y in different state (S") train traverses infrastructure which is in the wrong hazf GPHAT-301-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 106 of 152

109 HazID State A Conflicting state Condition Hazard type 3402 TO71 dev1: are not switched the required TO61 dev6: rolls before Y path of train traverses infrastructure which is in the wrong hazf 3403 TO83 dev1: is located in thearea TO61 dev6: rolls before Y train drives area user s 3404 TO83 dev2: is located in another area TO61 dev6: rolls before Y train drives area user s 3405 TO92 dev0: is moving wards X TO61 dev6: rolls before Y train A approaches or crosses the path of train B 3406 TO92 dev1: is not moving wards X TO61 dev6: rolls before Y train B approaches train A 3407 TO92 dev2: is moving wards something else than X TO61 dev6: rolls before Y train A approaches or crosses the path of train B 3408 TO92 dev0: is moving wards X TO67 dev2: is changed in different state (S") train crosses infrastructure which is in the wrong hazf GPHAT-302-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 107 of 152

110 HazID State A Conflicting state Condition Hazard type 3409 TO92 dev2: is moving wards something else than X TO67 dev2: is changed in different state (S") train traverses infrastructure which is in the wrong hazf 3410 TO92 dev0: is moving wards X 3411 TO92 dev2: is moving wards something else than X TO71 dev1: are not switched the required TO71 dev1: are not switched the required path of train crosses infrastructure which is in the wrong path of train crosses infrastructure which is in the wrong hazf hazf 3412 TO92 dev0: is moving wards X TO83 dev1: is located in the area train drives area user s 3413 TO92 dev2: is moving wards something else than X TO83 dev1: is located in the area train drives area user s 3414 TO92 dev0: is moving wards X TO83 dev2: is located in another area train drives area user s GPHAT-303-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 108 of 152

111 HazID State A Conflicting state Condition Hazard type 3415 TO92 dev2: is moving wards something else than X TO83 dev2: is located in another area train drives area user s 3416 TO92 dev0: is moving wards X TO92 dev0: is moving wards X two trains approach X from different angles, or cross each other s paths on the way their own points X haza 3417 TO92 dev1: is not moving wards X TO92 dev0: is moving wards X train B approaches train A hazb 3418 TO92 dev2: is moving wards something else than X TO92 dev0: is moving wards X train A approaches or crosses the path of train B haza 3419 TO92 dev2: is moving wards something else than X TO92 dev1: is not moving wards X train A approaches train B hazb 3420 TO92 dev2: is moving wards something else than TO92 dev2: is moving train A approaches or crosses wards something else than the path of train B X haza GPHAT-163-Com 6.4 Hazards involving combining external influences with acrs GPHAT-164-Com It is possible that an external influence change an acrs state spontaneously. This can directly result in a hazard or in a possible new state that can form a hazard in combination with another state. The following table describes combinations of external influences and acrs that directly result in hazards. Copyright (c) 2003 UIC / Euro-Interlocking Page 109 of 152

112 Haz ID External influence Acr Condition Type Hazard 4001 explosion Train Train is located in area hazf 4002 climate Train Lightning: Train located in area HazF 4003 bumper Train The train is moving and crosses or approaches bumper hazf 4004 earthquake Train Train is located in area hazf 4005 people on platform Train The train is moving and there are people on the edge of the platform 4005 flood Train Train is located in area hazj 4006 crossing road traffic Train The train is moving and crosses or approaches a road traffic path hazh 4007 crossing waterbourne traffic Train The train is moving and enters or approaches an open waterbourne traffic path hazj 4008 crossing waterbourne traffic Train The train is standing still on a waterbourne traffic path being opened HazJ 4009 climate Train Wind: Train exposed excessive side wind hazf GPHAT-400-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 110 of 152

113 Haz ID External influence Acr Condition 4010 power supply Train The train is connected an incorrect power supply (o high/alternate/ direct) Type Hazard hazn 4011 outside profile Infrast ructur e The train is moving on infrastructure whose loading guage (at tunnels, bridges, or other obstacles) is insufficient. hazm 4012 obstacle on the railway Train Train approaches or collides with an obstacle hazf 4013 goods-handling area Train The train is moving in a goods-handling area where loose goods lie about hazl 4014 power supply Train Contr ol Train control is connected an incorrect power supply (o high/ alternating/ direct) hazn 4015 power supply 4016 power supply Infra Contr ol 1 Track eleme nt Infra control is connected an incorrect power supply (o high/ alternating/ direct) Track element (such as a point, signal, or inoccupancy proving device) is connected but not o the correct power supply (o high/alternating/direct) hazn hazn obstacle on the railway crossing personnel Train Train Train is approaching/crossing people who are on or near railway The train is moving and crosses or approaches personnel whom are on or around the railway drawn broken overhead wire Train Train is located where the overhead wire is broken hazo GPHAT-165-Com 6.5 Hazards involving combining new states with process states Copyright (c) 2003 UIC / Euro-Interlocking Page 111 of 152

114 GPHAT-166-Com Among the combinations made in the previous paragraph, those which result in new states (those having the format TO### res0 <description>) can be combined with other new states or with other states, as the following matrixes shows. The characters in the matrix are the involved hazard types. Copyright (c) 2003 UIC / Euro-Interlocking Page 112 of 152

115 GPHAT-419-Com TO101 res0: The train is moving with dangerous goods K - K - K E - - E - - TO102 res0: The train is moving out of control B - C - B E - - E - - TO103 res0: The train is moving in a tunnel B - C - B E - - E - - TO104 res0: The train is moving slowly B - C - B E - - E - - TO105 res0: The train is moving quickly B - C - B E - E - E - E - TO106 res0: The train is moving in a curve B - C - B E - - E - - TO107 res0: Train is moving on a fly-over B - C - B E - - E - - TO108 res0: The train is standing still in a tunnel - B TO120 res0: Out-of-profile train is moving B - C - B E - - E - - TO121 res0: Goods train is moving B - C - B E - - E - - TO122 res0: Track is slippery - P - - G TO27 dev0: is spped at Z TO27 dev1: is not spped in Z TO27 dev2: spped in different than Z TO34 dev0: is pressing against train B TO34 dev1: is not pressing against train B TO37 dev0: is located on the track between the trains TO37 dev1: is not located on the track between the trains TO37 dev2: is located on the track not between the trains TO37 dev3: is located not on the track not between the trains GPHAT-420-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 113 of 152

116 TO45 dev0: is located next the track near the train TO45 dev1: is located in the track near the train TO45 dev2: is located near the track but somewhere else than ne TO45 dev3: is located in the track but somewhere else than near TO54 dev0: is located in the area TO54 dev1: is not located in the area TO54 dev2: is located in a different area TO61 dev0: is located between Y and X TO61 dev1: is located before Y TO61 dev2: is located beyond X TO61 dev3: stands still TO61 dev4: rolls between Y and X TO61 dev5: rolls beyond X TO61 dev6: rolls before Y TO101 res0: The train is moving with dangerous goods - E - - E - E - - E - K - K - K - K - K - K - K - TO102 res0: The train is moving out of control - E - - E - E - - E - H - H - H - H - H - H - H - TO103 res0: The train is moving in a tunnel E - E - E - E - E - - E - H - H - H - H - H - H - H - TO104 res0: The train is moving slowly - E - - E - E - - E - H - H - H - H - H - H - H - TO105 res0: The train is moving quickly E - E - - E - E - - E - H - H - H - H - H - H - H - TO106 res0: The train is moving in a curve - E - - E - E - - E - H - H - H - H - H - H - H - TO107 res0: Train is moving on a fly-over - E - - E - E - - E - H - H - H - H - H - H - H - TO108 res0: The train is standing still in a tunnel H - H - H - - H - H - H - TO120 res0: Out-of-profile train is moving - E - - E - E - - E - H - H - H - H - H - H - H - TO121 res0: Goods train is moving - E - - E - E - - E - H - H - H - H - H - H - H - TO122 res0: Track is slippery P - P - P - - P - P - P - GPHAT-421-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 114 of 152

117 TO101 res0: The train is moving with dangerous goods - K - K - - K - - E - E - K - K - K - TO102 res0: The train is moving out of control - F - F - - F - - E - E - A - B - A - TO103 res0: The train is moving in a tunnel - F - F - - F - - E - - A - B - A - TO104 res0: The train is moving slowly - F - F - - F - - E - E - A - B - A - TO105 res0: The train is moving quickly P - P - F - P - F - - E - E - A - B - A - TO106 res0: The train is moving in a curve - F - F - - F - - E - E - A - B - C - TO107 res0: Train is moving on a fly-over - F - F - - F - - E - E - A - B - C - TO108 res0: The train is standing still in a tunnel B - - B - TO120 res0: Out-of-profile train is moving - F - F - - F - - E - E - A - B - A - TO121 res0: Goods train is moving - F - F - - F - - E - E - A - B - A - TO122 res0: Track is slippery P - - P - TO67 dev0: in state S' TO67 dev1: state is not changed (still in state S) TO67 dev2: is changed in different state (S") TO71 dev0: are switched the required TO71 dev1: are not switched the required TO83 dev0: is not located in the area TO83 dev1: is located in the area TO83 dev2: is located in an other area TO92 dev0: is moving wards X TO92 dev1: is not moving wards X TO92 dev2: is moving wards something else than X GPHAT-422-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 115 of 152

118 TO101 res0: The train is moving with dangerous goods K - K - TO102 res0: The train is moving out of control K - A - A - TO103 res0: The train is moving in a tunnel K - C - A - A - A - P - TO104 res0: The train is moving slowly K - A - A - A - A - A - P - TO105 res0: The train is moving quickly K - A - A - A - A - A - A - P - TO106 res0: The train is moving in a curve K - C - A - A - A - A - A - A - P - TO107 res0: Train is moving on a fly-over K - C - - A - A - A - A - A - A - P - TO108 res0: The train is standing still in a tunnel K - B - B - B - B - B B - B - - TO120 res0: Out-of-profile train is moving A - TO121 res0: Goods train is moving K - A - A - A - TO122 res0: Track is slippery K - P - P - P - - TO101 res0: The train is moving with dangerous goods TO102 res0: The train is moving out of control TO103 res0: The train is moving in a tunnel TO104 res0: The train is moving slowly TO105 res0: The train is moving quickly TO106 res0: The train is moving in a curve TO107 res0: Train is moving on a fly-over TO108 res0: The train is standing still in a tunnel TO120 res0: Out-of-profile train is moving TO121 res0: Goods train is moving TO122 res0: Infrastructure is slippery GPHAT-167-Com The following table describes this matrix in more detail. GPHAT-204-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 116 of 152

119 State A Conflicting state Condition Hazard type TO105 res0: The train is moving quickly TO83 dev1: is located in the area Train moves area user s HazE TO105 res0: The train is moving quickly TO61 dev4: rolls between Y and X Normal railway traffic exceeds its allowed space, and crosses the route of other railway traffic TO105 res0: The train is moving quickly TO61 dev5: rolls beyond X Normal railway traffic exceeds its allowed space, and crosses the route of other railway traffic TO105 res0: The train is moving quickly TO61 dev6: rolls before Y Normal railway traffic exceeds its allowed space, and crosses the route of other railway traffic TO105 res0: The train is moving quickly TO67 dev0: in state S' Train is moving o fast for the infrastructure concerned hazp TO105 res0: The train is moving quickly TO67 dev1: state is not changed (still in state S) Train is moving o fast for the infrastructure concerned hazp TO105 res0: The train is moving quickly TO67 dev2: is changed in different state (S") Train crosses infrastructure that is in an unintended hazf TO107 res0: Train is moving on a flyover TO121 res0: Goods train is moving Train A approaches train B HazA TO105 res0: The train is moving quickly TO71 dev1: are not switched the required Train crosses infrastructure that is in an unintended hazf TO105 res0: The train is moving quickly TO61 dev1: is located before Y Normal railway traffic exceeds its allowed space, and crosses the route of other railway traffic TO105 res0: The train is moving quickly TO105 res0: The train is moving quickly TO83 dev2: is located in an other area Train moves area user s HazE TO92 dev0: is moving wards X Train A crosses or approaches the route of train B HazA Copyright (c) 2003 UIC / Euro-Interlocking Page 117 of 152

120 GPHAT-205-Com State A Conflicting state Condition Hazard type TO105 res0: The train is moving quickly TO83 dev1: is located in the area Train moves area user s HazE TO105 res0: The train is moving quickly TO61 dev4: rolls between Y and X Normal train moves past its allowed space, and crosses the route of another train TO105 res0: The train is moving quickly TO61 dev5: rolls beyond X Normal train moves past its allowed space, and crosses the route of another train TO105 res0: The train is moving quickly TO61 dev6: rolls before Y Normal train moves past its allowed space, and crosses the route of another train TO105 res0: The train is moving quickly TO67 dev0: in state S' Train is moving o fast for the infrastructure hazp TO105 res0: The train is moving quickly TO67 dev1: state is not changed (still in state S) Train is moving o fast for the infrastructure hazp TO105 res0: The train is moving quickly TO67 dev2: is changed in different state (S") Train traverses infrastructure that is in the wrong hazf TO107 res0: Train is moving on a flyover TO121 res0: Goods train is moving Train A approaches train B HazA TO105 res0: The train is moving quickly TO71 dev1: are not switched the required Train traverses infrastructure that is in the wrong hazf TO105 res0: The train is moving quickly TO61 dev1: is located before Y Normal train moves past its allowed space, and crosses the path of another train TO105 res0: The train is moving quickly TO105 res0: The train is moving quickly TO83 dev2: is located in an other area Train moves area user s HazE TO92 dev0: is moving wards X Train A crosses or approaches the route of train B HazA Copyright (c) 2003 UIC / Euro-Interlocking Page 118 of 152

121 GPHAT-207-Com State A Conflicting state Condition Hazard type TO105 res0: The train is moving quickly TO27 dev2: spped in different than Z The spot at which train A is unintentionally standing still, crosses or lies on the path of train B hazb TO105 res0: The train is moving quickly TO37 dev0: is located on the track between the trains Train moves shunter s HazE TO105 res0: The train is moving quickly TO61 dev3: stands still Train A approaches train B TO105 res0: The train is moving quickly TO37 dev2: is located on the track not between the trains Train moves shunter s HazE TO105 res0: The train is moving quickly TO61 dev2: is located beyond X A normal train moves past its allowed space, and crosses the path of another train TO105 res0: The train is moving quickly TO105 res0: The train is moving quickly TO105 res0: The train is moving quickly TO105 res0: The train is moving quickly TO105 res0: The train is moving quickly TO45 dev0: is located next the track near the train Is standing o close the track HazE TO45 dev1: is located in the track near the train Train moves shunter s HazE TO45 dev3: is located in the track but somewhere else than near the train Train moves shunter s HazE TO54 dev0: is located in the area Train moves area user s HazE TO54 dev2: is located in a different area Train moves area user s HazE TO105 res0: The train is moving quickly TO61 dev0: is located between Y and X A normal train moves past its allowed space, and crosses the path of a non-regular train TO121 res0: Goods train is moving TO37 dev0: is located on the track between the trains Train moves shunter s HazE Copyright (c) 2003 UIC / Euro-Interlocking Page 119 of 152

122 GPHAT-208-Com State A Conflicting state Condition Hazard type TO105 res0: The train is moving quickly TO120 res0: Out-ofprofile train is moving TO121 res0: Goods train is moving TO121 res0: Goods train is moving TO121 res0: Goods train is moving TO37 dev1: is not located on the track between the trains Is standing o close the track HazE TO45 dev3: is located in the track but somewhere else than near the train Train moves within shunter s profile HazE TO27 dev1: is not spped in Z Train A crosses or approaches the path of train B HazC TO92 dev2: is moving wards something else than X Train A crosses or approaches the path of train B HazA TO102 res0: The train is moving out of control Train A crosses or approaches the path of train B HazA TO120 res0: Out-ofprofile train is moving TO27 dev0: is spped at Z The spot at which train A is unintentionally standing still, is in the path of train B HazB TO120 res0: Out-ofprofile train is moving TO27 dev1: is not spped in Z Train A (an out-of-profile train) enters the profile of train B HazC TO120 res0: Out-ofprofile train is moving TO27 dev2: spped in different than Z The spot at which train A is unintentionally standing still, is on the path of train B HazB TO120 res0: Out-ofprofile train is moving TO121 res0: Goods train is moving TO120 res0: Out-ofprofile train is moving TO121 res0: Goods train is moving TO37 dev0: is located on the track between the trains Train moves within shunter s profile HazE TO92 dev0: is moving wards X Train A crosses or approaches the route of train B HazA TO45 dev1: is located in the track near the train Train moves within shunter s profile HazE TO83 dev2: is located in an other area Train moves area user s HazE Copyright (c) 2003 UIC / Euro-Interlocking Page 120 of 152

123 GPHAT-209-Com State A Conflicting state Condition Hazard type TO120 res0: Out-ofprofile train is moving TO120 res0: Out-ofprofile train is moving TO54 dev0: is located in the area Train moves within area user s profile HazE TO54 dev2: is located in a different area Train moves within area user s profile HazE TO120 res0: Out-ofprofile train is moving TO61 dev0: is located between Y and X Normal train moves past its allowed space, and enters the profile of an out-of-profile train TO120 res0: Out-ofprofile train is moving TO61 dev1: is located before Y Normal train moves past its allowed space, and enters the profile of an out-of-profile train TO120 res0: Out-ofprofile train is moving TO61 dev2: is located beyond X Normal train moves past its allowed space, and enters the profile of an out-of-profile train TO120 res0: Out-ofprofile train is moving TO61 dev3: stands still The spot at which train A is unintentionally standing still, lies within the path of train B TO120 res0: Out-ofprofile train is moving TO61 dev4: rolls between Y and X Normal train moves past its allowed space, and enters the profile of an out-of-profile train TO120 res0: Out-ofprofile train is moving TO37 dev2: is located on the track not between the trains Train moves in shunter s profile HazE TO121 res0: Goods train is moving TO61 dev3: stands still The spot at which train A is unintentionally standing still, intersects with the path of train B TO102 res0: The train is moving out of control TO121 res0: Goods train is moving TO83 dev1: is located in the area Train moves area user s HazE TO37 dev2: is located on the track not between the trains Train moves shunter s HazE GPHAT-210-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 121 of 152

124 State A Conflicting state Condition Hazard type TO121 res0: Goods train is moving TO121 res0: Goods train is moving TO121 res0: Goods train is moving TO121 res0: Goods train is moving TO45 dev1: is located in the track near the train Train moves shunter s HazE TO45 dev3: is located in the track but somewhere else than near the train Train moves shunter s HazE TO54 dev0: is located in the area Train moves area user s HazE TO54 dev2: is located in a different area Train moves area user s HazE TO121 res0: Goods train is moving TO61 dev0: is located between Y and X A normal train moves past its allowed space, and crosses the route of another train TO121 res0: Goods train is moving TO92 dev1: is not moving wards X The spot at which train A is unintentionally standing still, lies on the path of train B HazB TO121 res0: Goods train is moving TO61 dev2: is located beyond X A normal train moves past its allowed space, and crosses the route of another train TO121 res0: Goods train is moving TO27 dev2: spped in different than Z The spot at which train A is unintentionally standing still, lies on the path of train B HazB TO121 res0: Goods train is moving TO61 dev4: rolls between Y and X A normal train moves past its allowed space, and crosses the route of another train TO121 res0: Goods train is moving TO61 dev5: rolls beyond X A normal train moves past its allowed space, and crosses the route of another train TO121 res0: Goods train is moving TO61 dev6: rolls before Y A normal train moves past its allowed space, and crosses the route of another train GPHAT-211-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 122 of 152

125 State A Conflicting state Condition Hazard type TO121 res0: Goods train is moving TO67 dev1: state is not changed (still in state S) Train traverses infrastructure that is in the wrong hazf TO121 res0: Goods train is moving TO67 dev2: is changed in different state (S") Train traverses infrastructure that is in the wrong hazf TO121 res0: Goods train is moving TO71 dev1: are not switched the required Train traverses infrastructure that is in the wrong hazf TO121 res0: Goods train is moving TO83 dev1: is located in the area Train moves area user s HazE TO121 res0: Goods train is moving TO61 dev1: is located before Y A normal train moves past its allowed space, and crosses the path of another train TO104 res0: The train is moving slowly TO67 dev2: is changed in different state (S") Train traverses infrastructure that is in the wrong hazf TO122 res0: Infrastructure is slippery TO27 dev1: is not spped in Z Train traverses infrastructure that is slippery a normal degree hazp TO104 res0: The train is moving slowly TO61 dev0: is located between Y and X A normal train moves past its allowed space, and crosses the path of another train TO104 res0: The train is moving slowly TO61 dev1: is located before Y A normal train moves past its allowed space, and crosses the path of another train TO104 res0: The train is moving slowly TO61 dev2: is located beyond X A normal train moves past its allowed space, and crosses the path of another train TO104 res0: The train is moving slowly TO61 dev3: stands still Train A approaches train B TO104 res0: The train is moving slowly TO61 dev4: rolls between Y and X A normal train moves past its allowed space, and crosses the path of another train Copyright (c) 2003 UIC / Euro-Interlocking Page 123 of 152

126 GPHAT-212-Com State A Conflicting state Condition Hazard type TO104 res0: The train is moving slowly TO61 dev5: rolls beyond X A normal train moves past its allowed space, and crosses the path of another train TO104 res0: The train is moving slowly TO54 dev0: is located in the area Train moves area user s HazE TO104 res0: The train is moving slowly TO67 dev1: state is not changed (still in state S) Train traverses infrastructure that is in the wrong HazF TO104 res0: The train is moving slowly TO45 dev3: is located in the track but somewhere else than near the train Train moves shunter s HazE TO104 res0: The train is moving slowly TO71 dev1: are not switched the required Train traverses infrastructure that is in the wrong hazf TO104 res0: The train is moving slowly TO104 res0: The train is moving slowly TO104 res0: The train is moving slowly TO104 res0: The train is moving slowly TO104 res0: The train is moving slowly TO102 res0: The train is moving out of control TO83 dev1: is located in the area Train moves area user s HazE TO83 dev2: is located in an other area Train moves area user s HazE TO92 dev0: is moving wards X Train A crosses or approaches the route of train B HazA TO92 dev1: is not moving wards X Train A approaches train B HazB TO92 dev2: is moving wards something else than X Train A crosses or approaches the route of train B HazA TO92 dev0: is moving wards X Train A crosses or approaches the route of train B HazA TO104 res0: The train is moving slowly TO61 dev6: rolls before Y A normal train moves past its allowed space, and crosses the path of another train hazh Copyright (c) 2003 UIC / Euro-Interlocking Page 124 of 152

127 GPHAT-213-Com State A Conflicting state Condition Hazard type TO108 res0: The train is standing still in a tunnel TO107 res0: Train is moving on a flyover TO107 res0: Train is moving on a flyover TO107 res0: Train is moving on a flyover TO107 res0: Train is moving on a flyover TO108 res0: The train is standing still in a tunnel TO108 res0: The train is standing still in a tunnel TO108 res0: The train is standing still in a tunnel TO104 res0: The train is moving slowly TO108 res0: The train is standing still in a tunnel TO122 res0: Infrastructure is slippery TO105 res0: The train is moving quickly Train A approaches train B HazB TO104 res0: The train is moving slowly Train A approaches train B HazA TO105 res0: The train is moving quickly Train A approaches train B HazA TO106 res0: The train is moving in a curve Train A approaches train B HazA TO107 res0: Train is moving on a flyover Train A approaches train B HazA TO120 res0: Out-of-profile train is moving Train A approaches train B HazB TO101 res0: The train is moving with dangerous goods Train A approaches train B hazk TO103 res0: The train is moving in a tunnel Train A approaches train B HazB TO54 dev2: is located in a different area Train moves area user s HazE TO104 res0: The train is moving slowly Train A approaches train B HazB TO34 dev0: is pressing against train B Is pressing firmly against train B HazG Copyright (c) 2003 UIC / Euro-Interlocking Page 125 of 152

128 GPHAT-214-Com State A Conflicting state Condition Hazard type TO108 res0: The train is standing still in a tunnel TO106 res0: The train is moving in a curve Train A approaches train B HazB TO104 res0: The train is moving slowly TO27 dev0: is spped at Z The spot at which train A is intentionally standing still, lies on the path of train B HazB TO104 res0: The train is moving slowly TO27 dev1: is not spped in Z The spot at which train A is intentionally standing still, lies on the path of train B HazC TO104 res0: The train is moving slowly TO27 dev2: spped in different than Z The spot at which train A is intentionally standing still, lies on the path of train B hazb TO104 res0: The train is moving slowly TO104 res0: The train is moving slowly TO104 res0: The train is moving slowly TO108 res0: The train is standing still in a tunnel TO37 dev0: is located on the track between the trains Train moves shunter s HazE TO37 dev2: is located on the track not between the trains Train moves shunter s HazE TO45 dev1: is located in the track near the train Train moves shunter s HazE TO121 res0: Goods train is moving Train A approaches train B HazB TO102 res0: The train is moving out of control TO61 dev3: stands still Train A approaches train B TO104 res0: The train is moving slowly TO102 res0: The train is moving out of control TO102 res0: The train is moving out of control Two trains approach each other HazA TO37 dev2: is located on the track not between the trains Train moves shunter s HazE Copyright (c) 2003 UIC / Euro-Interlocking Page 126 of 152

129 GPHAT-215-Com State A Conflicting state Condition Hazard type TO102 res0: The train is moving out of control TO102 res0: The train is moving out of control TO102 res0: The train is moving out of control TO102 res0: The train is moving out of control TO45 dev1: is located in the track near the train Train moves shunter s HazE TO45 dev3: is located in the track but somewhere else than near the train Train moves shunter s HazE TO54 dev0: is located in the area Train moves area user s HazE TO54 dev2: is located in a different area Train moves area user s HazE TO102 res0: The train is moving out of control TO61 dev0: is located between Y and X Normal train moves past its allowed space, and crosses the path of another train TO102 res0: The train is moving out of control TO27 dev2: spped in different than Z The spot at which train A is unintentionally standing still, crosses the path of train B hazb TO102 res0: The train is moving out of control TO61 dev2: is located beyond X Normal train moves past its allowed space, and crosses the path of another train TO102 res0: The train is moving out of control TO27 dev1: is not spped in Z Train A crosses or approaches the path of train B hazc TO102 res0: The train is moving out of control TO61 dev4: rolls between Y and X Normal train moves past its allowed space, and crosses the path of another train hazh TO102 res0: The train is moving out of control TO61 dev5: rolls beyond X TO102 res0: The train is moving out of control TO61 dev6: rolls before Y Normal train moves past its allowed space, and crosses the path of another train Normal train moves past its allowed space, and crosses the path of another train TO102 res0: The train is moving out of control TO67 dev1: state is not changed (still in state S) Train traverses infrastructure that is in the wrong HazF Copyright (c) 2003 UIC / Euro-Interlocking Page 127 of 152

130 GPHAT-216-Com State A Conflicting state Condition Hazard type TO102 res0: The train is moving out of control TO67 dev2: is changed in different state (S") Train traverses infrastructure that is in the wrong hazf TO102 res0: The train is moving out of control TO71 dev1: are not switched the required Train traverses infrastructure that is in the wrong HazF TO120 res0: Out-ofprofile train is moving TO67 dev1: state is not changed (still in state S) Train traverses infrastructure that is in the wrong hazf TO102 res0: The train is moving out of control TO61 dev1: is located before Y A normal train moves past its allowed space, and crosses the path of another train TO108 res0: The train is standing still in a tunnel TO27 dev1: is not spped in Z Train B moves past its allowed space and enters the space where train A is unintentionally standing still hazb TO122 res0: Infrastructure is slippery TO61 dev0: is located between Y and X Train traverses infrastructure that is slippery a normal degree hazp TO122 res0: Infrastructure is slippery TO61 dev1: is located before Y Train traverses infrastructure that is slippery a normal degree hazp TO122 res0: Infrastructure is slippery TO61 dev2: is located beyond X Train traverses infrastructure that is slippery a normal degree hazp TO122 res0: Infrastructure is slippery TO61 dev4: rolls between Y and X Train traverses infrastructure that is slippery a normal degree hazp TO122 res0: Infrastructure is slippery TO61 dev5: rolls beyond X Train traverses infrastructure that is slippery a normal degree hazp Copyright (c) 2003 UIC / Euro-Interlocking Page 128 of 152

131 GPHAT-217-Com State A Conflicting state Condition Hazard type TO122 res0: Infrastructure is slippery TO61 dev6: rolls before Y Train traverses infrastructure that is slippery a normal degree hazp TO122 res0: Infrastructure is slippery TO92 dev0: is moving wards X Train traverses infrastructure that is slippery a normal degree hazp TO102 res0: The train is moving out of control TO37 dev0: is located on the track between the trains Train moves shunter s HazE TO122 res0: Infrastructure is slippery TO102 res0: The train is moving out of control Train traverses infrastructure that is slippery a normal degree hazp TO102 res0: The train is moving out of control TO83 dev2: is located in an other area Train moves area user s HazE TO108 res0: The train is standing still in a tunnel TO61 dev0: is located between Y and X A normal train is unintentionally standing still in a special purpose area, and intersects with the path of another train TO108 res0: The train is standing still in a tunnel TO61 dev1: is located before Y Train B approaches or crosses train A TO108 res0: The train is standing still in a tunnel TO61 dev2: is located beyond X A train crosses the path of or approaches of a normal train that is unintentionally stationary TO108 res0: The train is standing still in a tunnel TO61 dev4: rolls between Y and X Train B approaches train A TO108 res0: The train is standing still in a tunnel TO61 dev5: rolls beyond X Train B approaches train A Copyright (c) 2003 UIC / Euro-Interlocking Page 129 of 152

132 GPHAT-218-Com State A Conflicting state Condition Hazard type TO108 res0: The train is standing still in a tunnel TO61 dev6: rolls before Y Train B approaches train A TO102 res0: The train is moving out of control TO27 dev0: is spped at Z The spot at which train A is intentionally standing still, intersects with the path of train B HazB TO122 res0: Infrastructure is slippery TO92 dev2: is moving wards something else than X Train traverses infrastructure that is slippery a normal degree hazp TO107 res0: Train is moving on a flyover TO107 res0: Train is moving on a flyover TO106 res0: The train is moving in a curve TO106 res0: The train is moving in a curve TO106 res0: The train is moving in a curve TO106 res0: The train is moving in a curve TO106 res0: The train is moving in a curve TO37 dev0: is located on the track between the trains Train approaches or collides with shunter HazE TO61 dev2: is located beyond X Train A approaches or crosses the path of train B TO83 dev2: is located in an other area Train approaches or collides with area user HazE TO92 dev0: is moving wards X Train A approaches or crosses train B HazA TO92 dev1: is not moving wards X Train A approaches or crosses train B hazb TO92 dev2: is moving wards something else than X Train A approaches or crosses train B HazC TO102 res0: The train is moving out of control Train A approaches or crosses train B HazC TO107 res0: Train is moving on a flyover TO27 dev0: is spped at Z The spot at which train A is intentionally standing still, is located on a flyover, and lies on the path of train B HazB Copyright (c) 2003 UIC / Euro-Interlocking Page 130 of 152

133 GPHAT-219-Com State A Conflicting state Condition Hazard type TO106 res0: The train is moving in a curve TO71 dev1: are not switched the required Train traverses infrastructure that is in the wrong HazF TO107 res0: Train is moving on a flyover TO27 dev2: spped in different than Z The spot at which train A is unintentionally standing still, is located on a flyover, and lies on the path of train B HazB TO106 res0: The train is moving in a curve TO67 dev2: is changed in different state (S") Train traverses infrastructure that is in the wrong HazF TO107 res0: Train is moving on a flyover TO107 res0: Train is moving on a flyover TO107 res0: Train is moving on a flyover TO107 res0: Train is moving on a flyover TO107 res0: Train is moving on a flyover TO107 res0: Train is moving on a flyover TO103 res0: The train is moving in a tunnel TO107 res0: Train is moving on a flyover TO37 dev2: is located on the track not between the trains Train approaches or collides with shunter HazE TO45 dev1: is located in the track near the train Train approaches or collides with shunter HazE TO45 dev3: is located in the track but somewhere else than near the train Train approaches or collides with shunter HazE TO54 dev0: is located in the area Train approaches or collides with area user HazE TO54 dev2: is located in a different area Train approaches or collides with area user HazE TO61 dev0: is located between Y and X Train A approaches or crosses the path of train B TO102 res0: The train is moving out of control Train A approaches or crosses the path of train B HazC TO27 dev1: is not spped in Z Train A approaches or crosses the path of train B HazC Copyright (c) 2003 UIC / Euro-Interlocking Page 131 of 152

134 GPHAT-220-Com State A Conflicting state Condition Hazard type TO106 res0: The train is moving in a curve TO61 dev0: is located between Y and X Train A approaches or crosses the path of train B TO120 res0: Out-ofprofile train is moving TO61 dev5: rolls beyond X A normal train moves past its allowed space, and enters the profile of an out-of-profile train TO106 res0: The train is moving in a curve TO27 dev1: is not spped in Z Train A approaches or crosses the path of train B HazC TO106 res0: The train is moving in a curve TO27 dev2: spped in different than Z The spot at which train A is unintentionally standing still, is located in a curve, and lies on the path of train B HazB TO106 res0: The train is moving in a curve TO106 res0: The train is moving in a curve TO106 res0: The train is moving in a curve TO106 res0: The train is moving in a curve TO106 res0: The train is moving in a curve TO106 res0: The train is moving in a curve TO37 dev0: is located on the track between the trains Train approaches or collides with shunter HazE TO37 dev2: is located on the track not between the trains Train approaches or collides with shunter HazE TO45 dev1: is located in the track near the train Train approaches or collides with shunter HazE TO45 dev3: is located in the track but somewhere else than near the train Train approaches or collides with shunter HazE TO83 dev1: is located in the area Train approaches or collides with area user HazE TO54 dev2: is located in a different area Train approaches or collides with area user HazE TO107 res0: Train is moving on a flyover TO61 dev3: stands still The spot at which train A is unintentionally standing still, is located on a flyover, and lies on the path of train B Copyright (c) 2003 UIC / Euro-Interlocking Page 132 of 152

135 GPHAT-221-Com State A Conflicting state Condition Hazard type TO106 res0: The train is moving in a curve TO106 res0: The train is moving in a curve TO61 dev1: is located before Y Train A approaches or crosses the path of train B TO61 dev2: is located beyond X Train A approaches or crosses the path of train B TO106 res0: The train is moving in a curve TO61 dev3: stands still The spot at which train A is unintentionally standing still, is located in a curve, and lies on the path of train B TO106 res0: The train is moving in a curve TO61 dev4: rolls between Y and X Train A approaches or crosses the path of train B TO106 res0: The train is moving in a curve TO61 dev5: rolls beyond X Train A approaches or crosses the path of train B TO106 res0: The train is moving in a curve TO61 dev6: rolls before Y Train A approaches or crosses the path of train B TO106 res0: The train is moving in a curve TO67 dev1: state is not changed (still in state S) Train traverses infrastructure that is in the wrong hazf TO106 res0: The train is moving in a curve TO54 dev0: is located in the area Train approaches or collides with area user HazE TO101 res0: The train is moving with dangerous goods TO67 dev1: state is not changed (still in state S) Train traverses infrastructure that is in the wrong hazk TO107 res0: Train is moving on a flyover TO101 res0: The train is moving with dangerous goods TO61 dev1: is located before Y Train A approaches or crosses the path of train B TO54 dev2: is located in a different area Train moves area user s HazE Copyright (c) 2003 UIC / Euro-Interlocking Page 133 of 152

136 GPHAT-222-Com State A Conflicting state Condition Hazard type TO101 res0: The train is moving with dangerous goods TO61 dev0: is located between Y and X A normal train moves past its allowed space, and crosses the path of a train with dangerous goods hazk TO101 res0: The train is moving with dangerous goods TO61 dev1: is located before Y A normal train moves past its allowed space, and crosses the path of a train with dangerous goods hazk TO101 res0: The train is moving with dangerous goods TO61 dev2: is located beyond X A normal train moves past its allowed space, and crosses the path of a train with dangerous goods hazk TO101 res0: The train is moving with dangerous goods TO61 dev3: stands still The spot at which train A is unintentionally standing still, lies on the path of train B hazk TO101 res0: The train is moving with dangerous goods TO61 dev4: rolls between Y and X A normal train moves past its allowed space, and crosses the path of a train with dangerous goods hazk TO101 res0: The train is moving with dangerous goods TO45 dev3: is located in the track but somewhere else than near the train Train moves shunter s HazE TO101 res0: The train is moving with dangerous goods TO61 dev6: rolls before Y A normal train moves past its allowed space, and crosses the path of a train with dangerous goods hazk TO101 res0: The train is moving with dangerous goods TO45 dev1: is located in the track near the train Train moves shunter s HazE TO101 res0: The train is moving with dangerous goods TO67 dev2: is changed in different state (S") Train traverses infrastructure that is in the wrong hazk TO101 res0: The train is moving with dangerous goods TO71 dev1: are not switched the required Train traverses infrastructure that is in the wrong hazk Copyright (c) 2003 UIC / Euro-Interlocking Page 134 of 152

137 GPHAT-223-Com State A Conflicting state Condition Hazard type TO101 res0: The train is moving with dangerous goods TO101 res0: The train is moving with dangerous goods TO101 res0: The train is moving with dangerous goods TO83 dev1: is located in the area Train moves area user s HazE TO83 dev2: is located in an other area Train moves area user s HazE TO92 dev0: is moving wards X Train A crosses or approaches the path of train B hazk TO101 res0: The train is moving with dangerous goods TO92 dev1: is not moving wards X The spot at which train A is unintentionally standing still, lies on the path of train B hazk TO101 res0: The train is moving with dangerous goods TO92 dev2: is moving wards something else than X Train A crosses or approaches the route of train B hazk TO101 res0: The train is moving with dangerous goods TO61 dev5: rolls beyond X A normal train moves past its allowed space, and crosses the path of a train with dangerous goods hazk TO107 res0: Train is moving on a flyover TO107 res0: Train is moving on a flyover TO92 dev1: is not moving wards X Train A approaches or crosses the path of train B hazb TO61 dev4: rolls between Y and X Train A approaches or crosses the path of train B TO107 res0: Train is moving on a flyover TO61 dev5: rolls beyond X Train A approaches or crosses the path of train B TO107 res0: Train is moving on a flyover TO61 dev6: rolls before Y Train A approaches or crosses the path of train B TO107 res0: Train is moving on a flyover TO67 dev1: state is not changed (still in state S) Train traverses infrastructure that is in the wrong hazf Copyright (c) 2003 UIC / Euro-Interlocking Page 135 of 152

138 GPHAT-224-Com State A Conflicting state Condition Hazard type TO107 res0: Train is moving on a flyover TO67 dev2: is changed in different state (S") Train traverses infrastructure that is in the wrong HazF TO107 res0: Train is moving on a flyover TO107 res0: Train is moving on a flyover TO101 res0: The train is moving with dangerous goods TO107 res0: Train is moving on a flyover TO103 res0: The train is moving in a tunnel TO107 res0: Train is moving on a flyover TO107 res0: Train is moving on a flyover TO71 dev1: are not switched the required Train traverses a point that is in the wrong HazF TO83 dev1: is located in the area Train approaches or collides with area user HazE TO54 dev0: is located in the area Train moves area user s HazE TO92 dev0: is moving wards X Train A approaches or crosses the path of train B HazA TO92 dev2: is moving wards something else than X Train A approaches or crosses the path of train B HazA TO92 dev2: is moving wards something else than X Train A approaches or crosses the path of train B HazC TO102 res0: The train is moving out of control Train A approaches or crosses the path of train B HazC TO101 res0: The train is moving with dangerous goods TO27 dev0: is spped at Z The spot at which train A is intentionally standing still, intersects with the path of train B hazk TO101 res0: The train is moving with dangerous goods TO27 dev1: is not spped in Z Train A approaches or crosses the path of B hazk Copyright (c) 2003 UIC / Euro-Interlocking Page 136 of 152

139 GPHAT-225-Com State A Conflicting state Condition Hazard type TO101 res0: The train is moving with dangerous goods TO27 dev2: spped in different than Z The spot at which train A is unintentionally standing still, lies on the path of train B hazk TO101 res0: The train is moving with dangerous goods TO101 res0: The train is moving with dangerous goods TO107 res0: Train is moving on a flyover TO104 res0: The train is moving slowly TO37 dev0: is located on the track between the trains Train moves shunter s HazE TO37 dev2: is located on the track not between the trains Train moves shunter s HazE TO83 dev2: is located in an other area Train approaches or collides with area user HazE TO104 res0: The train is moving slowly Train A approaches train B HazA TO106 res0: The train is moving in a curve TO120 res0: Out-of-profile train is moving Train A approaches or intersects with the profile of train B HazA TO103 res0: The train is moving in a tunnel TO122 res0: Infrastructure is slippery Train traverses infrastructure that is slippery a normal degree hazp TO103 res0: The train is moving in a tunnel TO103 res0: The train is moving in a tunnel TO103 res0: The train is moving in a tunnel Train A crosses or approaches the route of train B HazA TO121 res0: Goods train is moving Train A crosses or approaches the route of train B HazA TO104 res0: The train is moving slowly TO120 res0: Out-of-profile train is moving Train A approaches or intersects with the profile of train B HazA TO104 res0: The train is moving slowly TO101 res0: The train is moving with dangerous goods Train A approaches train B hazk Copyright (c) 2003 UIC / Euro-Interlocking Page 137 of 152

140 GPHAT-226-Com State A Conflicting state Condition Hazard type TO104 res0: The train is moving slowly TO122 res0: Infrastructure is slippery Train traverses track that is slippery a normal degree hazp TO103 res0: The train is moving in a tunnel TO104 res0: The train is moving slowly TO120 res0: Out-of-profile train is moving Train A approaches or crosses the profile of train B HazA TO121 res0: Goods train is moving Train A approaches train B HazA TO122 res0: Infrastructure is slippery TO121 res0: Goods train is moving Train traverses track that is slippery a normal degree hazp TO105 res0: The train is moving quickly TO105 res0: The train is moving quickly TO120 res0: Out-of-profile train is moving Train A approaches or crosses the profile of train B HazA TO101 res0: The train is moving with dangerous goods Train A approaches train B hazk TO105 res0: The train is moving quickly TO122 res0: Infrastructure is slippery Train traverses track that is slippery a normal degree hazp TO105 res0: The train is moving quickly TO105 res0: The train is moving quickly TO105 res0: The train is moving quickly TO103 res0: The train is moving in a tunnel Train A approaches train B HazA TO121 res0: Goods train is moving Train A approaches train B HazA TO104 res0: The train is moving slowly Train A approaches train B HazA TO106 res0: The train is moving in a curve TO27 dev0: is spped at Z The spot at which train A is intentionally standing still, is located in a curve, and lies on the path of train B HazB TO104 res0: The train is moving slowly TO103 res0: The train is moving in a tunnel Train A approaches train B HazA Copyright (c) 2003 UIC / Euro-Interlocking Page 138 of 152

141 GPHAT-227-Com State A Conflicting state Condition Hazard type TO101 res0: The train is moving with dangerous goods TO101 res0: The train is moving with dangerous goods TO101 res0: The train is moving with dangerous goods Train A crosses or approaches the path of train B hazk TO120 res0: Out-of-profile train is moving Train A crosses or approaches the path of train B hazk TO120 res0: Out-ofprofile train is moving TO67 dev2: is changed in different state (S") Train traverses infrastructure that is in the wrong hazf TO120 res0: Out-ofprofile train is moving TO71 dev1: are not switched the required Train traverses infrastructure that is in the wrong hazf TO120 res0: Out-ofprofile train is moving TO120 res0: Out-ofprofile train is moving TO120 res0: Out-ofprofile train is moving TO83 dev1: is located in the area Train enters the profile of an area user HazE TO83 dev2: is located in an other area Train enters the profile of an area user HazE TO92 dev0: is moving wards X Train A crosses or approaches the path of train B HazA TO120 res0: Out-ofprofile train is moving TO92 dev1: is not moving wards X The spot at which train A is unintentionally standing still, lies within the profile of the path of train B HazB TO103 res0: The train is moving in a tunnel TO101 res0: The train is moving with dangerous goods Train A crosses or approaches the path of train B hazk TO120 res0: Out-ofprofile train is moving TO120 res0: Out-of-profile train is moving Train A, an out-of-profile train, enters the profile of train B HazA TO106 res0: The train is moving in a curve TO101 res0: The train is moving with dangerous goods Train A approaches train B hazk Copyright (c) 2003 UIC / Euro-Interlocking Page 139 of 152

142 GPHAT-228-Com State A Conflicting state Condition Hazard type TO102 res0: The train is moving out of control TO120 res0: Out-of-profile train is moving Train A approaches or intersects with the profile of train B HazA TO102 res0: The train is moving out of control TO101 res0: The train is moving with dangerous goods Train A crosses or approaches the path of train B hazk TO121 res0: Goods train is moving TO120 res0: Out-of-profile train is moving Train A approaches or intersects with the profile of train B HazA TO121 res0: Goods train is moving TO121 res0: Goods train is moving TO101 res0: The train is moving with dangerous goods Train A crosses or approaches the path of train B hazk TO121 res0: Goods train is moving Train A crosses or approaches the path of train B HazA TO122 res0: Infrastructure is slippery TO120 res0: Out-of-profile train is moving Train traverses track that is slippery a normal degree hazp TO122 res0: Infrastructure is slippery TO101 res0: The train is moving with dangerous goods Train traverses track that is slippery a normal degree hazk TO120 res0: Out-ofprofile train is moving TO92 dev2: is moving wards something else than X Train A, an out-of-profile train, enters the profile of train B HazA TO103 res0: The train is moving in a tunnel TO61 dev5: rolls beyond X Train A approaches or crosses the path of train B TO105 res0: The train is moving quickly TO103 res0: The train is moving in a tunnel TO105 res0: The train is moving quickly Train A approaches train B HazA TO45 dev3: is located in the track but somewhere else than near the train Train approaches or collides with shunter HazE Copyright (c) 2003 UIC / Euro-Interlocking Page 140 of 152

143 GPHAT-229-Com State A Conflicting state Condition Hazard type TO103 res0: The train is moving in a tunnel TO103 res0: The train is moving in a tunnel TO103 res0: The train is moving in a tunnel TO103 res0: The train is moving in a tunnel TO103 res0: The train is moving in a tunnel TO103 res0: The train is moving in a tunnel TO103 res0: The train is moving in a tunnel TO54 dev0: is located in the area Train approaches or collides with area user HazE TO54 dev2: is located in a different area Train approaches or collides with area user HazE TO61 dev0: is located between Y and X TO61 dev1: is located before Y Train A approaches or crosses path of train B TO61 dev2: is located beyond X Train A approaches or crosses path of train B TO45 dev1: is located in the track near the train Train approaches or collides with shunter HazE TO61 dev4: rolls between Y and X Train A approaches or crosses path of train B hazh TO103 res0: The train is moving in a tunnel TO45 dev0: is located next the track near the train The shunter is standing in the tunnel, o close the track HazE TO103 res0: The train is moving in a tunnel TO61 dev6: rolls before Y Train A approaches or crosses the path of train B hazh TO103 res0: The train is moving in a tunnel TO67 dev1: state is not changed (still in state S) Train traverses infrastructure that is in the wrong hazf TO103 res0: The train is moving in a tunnel TO67 dev2: is changed in different state (S") Train traverses infrastructure that is in the wrong HazF TO103 res0: The train is moving in a tunnel TO71 dev1: are not switched the required Train traverses infrastructure that is in the wrong HazF Copyright (c) 2003 UIC / Euro-Interlocking Page 141 of 152

144 GPHAT-230-Com State A Conflicting state Condition Hazard type TO103 res0: The train is moving in a tunnel TO103 res0: The train is moving in a tunnel TO103 res0: The train is moving in a tunnel TO83 dev1: is located in the area Train approaches or collides with area user HazE TO92 dev0: is moving wards X Train A approaches or crosses path of train B HazA TO92 dev1: is not moving wards X Train A approaches or crosses path of train B hazb TO103 res0: The train is moving in a tunnel TO61 dev3: stands still Train A approaches train B TO108 res0: The train is standing still in a tunnel TO92 dev0: is moving wards X The spot at which train A is unintentionally standing still, lies on the path of train B hazb TO106 res0: The train is moving in a curve TO122 res0: Infrastructure is slippery Train traverses track that is slippery a normal degree hazp TO106 res0: The train is moving in a curve TO106 res0: The train is moving in a curve TO106 res0: The train is moving in a curve TO106 res0: The train is moving in a curve TO106 res0: The train is moving in a curve TO103 res0: The train is moving in a tunnel Train A approaches train B HazA TO121 res0: Goods train is moving Train A approaches train B HazA TO104 res0: The train is moving slowly Train A approaches train B HazA TO105 res0: The train is moving quickly Train A approaches train B HazA TO106 res0: The train is moving in a curve Train A approaches train B HazA TO107 res0: Train is moving on a flyover TO120 res0: Out-of-profile train is moving Train A approaches or intersects with the profile of train B HazA Copyright (c) 2003 UIC / Euro-Interlocking Page 142 of 152

145 GPHAT-231-Com State A Conflicting state Condition Hazard type TO103 res0: The train is moving in a tunnel TO45 dev2: is located near the track but somewhere else than near the train The shunter is standing in the tunnel, o close the track HazE TO107 res0: Train is moving on a flyover TO122 res0: Track is slippery Train traverses track that is slippery a normal degree hazp TO120 res0: Out-ofprofile train is moving TO61 dev6: rolls before Y Normal train moves past its allowed space, and enters the profile of an out-of-profile train TO108 res0: The train is standing still in a tunnel TO108 res0: The train is standing still in a tunnel TO103 res0: The train is moving in a tunnel TO103 res0: The train is moving in a tunnel TO103 res0: The train is moving in a tunnel TO103 res0: The train is moving in a tunnel TO103 res0: The train is moving in a tunnel TO107 res0: Train is moving on a flyover TO92 dev2: is moving wards something else than X Train B approaches train A hazb TO102 res0: The train is moving out of control Train B approaches train A hazb TO27 dev0: is spped at Z hazb TO27 dev1: is not spped in Z Train A approaches or crosses the path of train B HazC TO27 dev2: spped in different than Z HazB TO37 dev0: is located on the track between the trains Train approaches or collides with shunter HazE TO37 dev2: is located on the track not between the trains Train approaches or collides with shunter HazE TO101 res0: The train is moving with dangerous goods Train A approaches train B HazK Copyright (c) 2003 UIC / Euro-Interlocking Page 143 of 152

146 GPHAT-168-Com 7 Further analyses GPHAT-364-Com 7.1 Introduction GPHAT-368-Com The previous chapters focused on hazard identification at a generic process level. GPHAT-169-Com The analysis presented in this document provides insight in hazards involved in running an interlocking system in its environment. GPHAT-170-Com The hazards list resulting from the application of this document forms the basis for deriving the functional safety requirements be implemented in the interlocking system or procedures. To ensure traceability, the identified hazards need be linked functional requirements (for example in DOORS). This allows rigorous verification and validation at the end of the process. GPHAT-365-Com 7.2 Process description GPHAT-370-Com This describes an abstract hazard analysis. This analysis is at the highest level: the process level. This document therefore presents a guideline process descriptions that can serve in defining p-level hazards (chapter 2). In addition the guideline, this document presents an example, close the Euro-Interlocking scope, of the train movement process and its associated hazards (Chapter 3 6). GPHAT-371-Com The following figure shows how every level below the process level contributes the higher levels, and thus indirectly the mission of enabling rail traffic move safely within an appropriate time frame. GPHAT-372-Com Copyright (c) 2003 UIC / Euro-Interlocking Page 144 of 152

147 Copyright (c) 2003 UIC / Euro-Interlocking Page 145 of 152