The EN 17997 standard describes the simulation of functional variations, up to the failure of parts of a braking system, in order to assess whether the train can still be brought to a halt. To this end, 10 billion random braking scenarios are calculated in the configured braking system.
NEXTRAIL develops and validates a T3 tool for use in a process with SIL classification > 0 in compliance with the processes and specifications described in EN 50716.
Before entering into software development, a requirements specification for software development is derived from the EN 17997 standard. The standard also defines suitable test procedures for testing the correctness of the application. These are included in the test plan.
A software architecture is designed to ensure that, despite the considerable number of simulation runs, the runtime of the software remains below 20 minutes.
Implementation is carried out iteratively based on the software requirements.
The component tests are performed automatically and further developed in each iteration together with the software.
The software verification tests are performed fully automatically in a cloud environment using the procedures defined in EN 17997. To ensure that the environment in later use is identical to the one used in the test, the execution environment is created using program code (Infrastructure as Code, IaC), the application is started automatically and the results are also saved automatically.
By using IaC, the subsequent validation phase can ensure that the software is started in a defined environment and under defined initial conditions – under exactly the same boundary conditions as later in productive use.
Tool qualification (in the form of tool validation) is supported by NEXTRAIL Austria.
The tool will be used productively for the first time in the second half of 2025 in collaboration with a European vehicle manufacturer.
