2002/731/EC: Commission Decision of 30 May 2002 concerning the technical specification for interoperability relating to the control-command and signalling subsystem of the trans-European high-speed rail system referred to in Article 6(1) of Council Directive 96/48/EC (Text with EEA relevance) (notified under document number C(2002) 1947)
Date: 2002-05-30
Institutions: European Commission
Subjects: harmonisation of standards, high-speed transport, rail transport, technical regulations, trans-European network, transport safety, vehicle parts

12.9.2002

EN

Official Journal of the European Communities

L 245/37

COMMISSION DECISION

of 30 May 2002

concerning the technical specification for interoperability relating to the control-command and
signalling subsystem of the trans-European high-speed rail system referred to in Article 6(1) of
Council Directive 96/48/EC

(notified under document number C(2002) 1947)

(Text with EEA relevance)

(2002/731/EC)

THE COMMISSION OF THE EUROPEAN COMMUNITIES,

(7)

Having regard to the Treaty establishing the European
Community,

Having regard to Council Directive 96/48/EC of 23 July 1996
on the interoperability of the trans-European high-speed rail
network (1), and in particular Article 6(1) thereof,

(8)

Whereas:

(1)

(2)

(3)

(4)

(5)

(6)

In accordance with Article 2(c) of Directive 96/48/EC,
the trans-European high-speed rail system is subdivided
These
functional
into
subsystems are described in Annex II to the Directive.

subsystems.

structural

or

In accordance with Article 5(1) of the Directive, each of
the
technical
specification for interoperability (TSI).

covered by a

subsystems

shall be

In accordance with Article 6(1) of the Directive, draft
TSIs shall be drawn up by the joint representative body.

to Article 21 of
The Committee set up pursuant
Directive 96/48/EC has
European
Association for Railway Interoperability (AEIF) as the
joint representative body in accordance with Article 2(h)
of the Directive.

appointed

the

The AEIF has been given a mandate to draw up a draft
TSI for the control-command and signalling subsystem
in accordance with Article 6(1) of the Directive. This
mandate was
established in accordance with the
procedure laid down in Article 21(2) of the Directive.

The AEIF has drawn up the draft TSI, together with an
introductory report containing a cost-benefit analysis as
provided for in Article 6(3) of the Directive.

(9)

(10)

the Member States,

The draft TSI has been examined by the representatives
of
the
Committee set up by the Directive, in the light of the
introductory report.

in the framework of

of

for

achieving

interoperability

the time of entry into force of this TSI,

the
As specified in Article 1 of Directive 96/48/EC,
the
conditions
system concern the
trans-European high-speed rail
design, construction, upgrading and operation of
the
infrastructures and rolling stock contributing to the
functioning of the system to be put into service after
the date of entry into force of the Directive. With regard
to the infrastructures and rolling stock already in service
at
the TSI
should be applied from the time when work is
envisaged on these infrastructures and rolling stock.
However, the degree to which the TSI is applied will
vary according to the scope and extent of the works
foreseen and the costs and the benefits generated by the
intended applications. In order for such partial works to
concur into achieving full interoperability, they need to
be underpinned by a coherent implementation strategy.
In this context, a distinction should be made between
upgrading,
maintenance-related
replacement.

renewal

and

to

apply

renewals

conventional

It is recognised that Directive 96/48/EC and the TSIs do
or maintenance-related
not
replacement. It is desirable however that the TSIs should
apply to renewals, as will be the case for the TSIs for
the
system under Commission
Directive 2001/16/EC (2). In the absence of a mandatory
requirement and taking into account the extent of the
renewal work, Member States are encouraged, where
they are able to do so, to apply the TSIs to renewals
and maintenance-related replacement.

rail

Existing high-speed lines and rolling stock are already
equipped with control-command and signalling systems
requirements of Directive
that meet
96/48/EC.
and
In order to
implemented according to national rules.

systems were

the
Such

developed

essential

(1) OJ L 235, 17.9.1996, p. 6.

(2) OJ L 110, 20.4.2001, p. 1.

L 245/38

EN

Official Journal of the European Communities

12.9.2002

it

those

existing

systems

requirements

implementation of

interoperable services,

of Directive 96/48/EC.

allow the operation of
is
necessary to develop interfaces between those existing
systems and new TSI compatible equipment. Basic
information concerning
is
provided in Annex B to the attached TSI. Given that
verification of interoperability has to be established by
reference to the TSIs, in accordance with Article 16(2)
is necessary, during the
of Directive 96/48/EC,
it
this
transition period between the publication of
Decision and the full
the TSI
attached, to lay down the conditions to be complied
with in addition to the attached TSI. For these reasons it
is necessary that each Member State informs the other
Member States and the Commission, for each one of the
systems mentioned in Annex B, of the technical rules in
use for achieving interoperability and meeting the
essential
In
addition, those rules being national, it is necessary that
each Member State informs the other Member States
the bodies it appoints for
and the Commission of
carrying out
the assessment of
conformity or suitability for use as well as the checking
procedure in use for verifying the interoperability of
subsystems within the meaning of Article 16(2) of
Directive 96/48/EC. Member States shall apply, as far as
possible,
the principles and criteria provided for in
Directive 96/48/EC for the implementation of Article
16(2)
in the case of those national rules. As to the
bodies in charge of those procedures, Member States
will make use, as far as possible, of bodies notified
The
under Article
Commission will
this
information (national rules, procedures, bodies in charge
these
of
procedures) and, where appropriate, will discuss with
the Committee the necessity of any measure to be
taken.

96/48/EC.
an analysis of

the procedure for

implementing

of Directive

procedures,

carry out

duration

20

of

The TSI, which is the subject of this Decision, does not
impose the use of specific technologies or technical
solutions except where this is strictly necessary for the
the trans-European high-speed rail
interoperability of
network.

allowed not to apply certain technical specifications. It
is therefore necessary that the Member States ensure
that an infrastructure register and a rolling stock register
are published and updated each year. These registers
the national
the main characteristics of
will set out
basic
(e.g.
infrastructure
parameters)
the
characteristics prescribed by the applicable TSIs. To this
end,
this Decision,
indicates precisely which information must appear in
the registers.

the
concordance with

the TSI, which is the subject of

rolling
their

and
and

stock

(14)

The application of the TSI which is the subject of this
Decision must take into account specific criteria relating
to technical and operational compatibility between the
infrastructures and the rolling stock to be placed in
service and the network into which they are to be
integrated. These compatibility requirements entail a
complex technical and economical analysis that is to be
done on a case-by-case basis. The analysis should take
into account:

(cid:151) the interfaces between the different
referred to in Directive 96/48/EC,

subsystems

(cid:151) the different categories of

lines and rolling stock

referred to in that Directive, and

(cid:151) the technical and operational environments of the

existing network.

That is why it is essential to establish a strategy for the
implementation of the TSI which is the subject of this
Decision, which should indicate the technical stages to
move
to a
from the present network conditions
situation where the network is interoperable.

The TSI, which is the subject of this Decision, is based
on best available expert knowledge at
the time of
preparation of the corresponding draft. Developments in
technology or
it
this TSI. Where
necessary to amend or supplement
appropriate, a review or updating procedure will be
initiated in accordance with Article 6(2) of Directive
96/48/EC.

requirements may make

social

(15)

In some cases, the TSI, which is the subject of this
Decision, allows a choice between different solutions,
making it possible to apply definitive or transitional
interoperable solutions that are compatible with the
existing situation.
In addition, Directive 96/48/EC
provides for special implementing provisions in certain
specific cases. Furthermore, in the cases provided for in
the Directive Member States must be
Article 7 of

adoption

traditional

The target system described in the attached TSI builds
upon computer-based technology with a life expectancy
significantly lower
railway
than current
signalling and telecommunication facilities. As such,
they call for a proactive rather than reactive deployment
strategy to avoid potential system obsolescence prior to
system deployment reaching maturity levels. In addition,
the
deployment
throughout the European rail network would give rise
overheads. The
and operational
to major
trans-European
coherent
development
implementation plan for
system would
the
contribute to a harmonious development of the whole
of the trans-European rail network in compliance with
the EU strategy for the TEN-transport network. Such a
plan should build upon the corresponding national

fragmented

target

costs

too

of

of

a

a

(11)

(12)

(13)

12.9.2002

EN

Official Journal of the European Communities

L 245/39

plans

should

provide

implementation
an
and
appropriate knowledge base for decision support by the
different stakeholders, in particular, by the Commission
in the allocation of financial support to railway projects.
The Commission will coordinate the development of
such a plan, in accordance with Article 155(2) of the
Treaty establishing the European Community.

(16)

The provisions of this Decision are in conformity with
the Committee set up by Directive
the opinion of
96/48/EC,

HAS ADOPTED THIS DECISION:

Article 1

the

relating to the (cid:145)control-command and signalling(cid:146)
The TSI
subsystem of
system
trans-European high-speed rail
referred to in Article 6(1) of Directive 96/48/EC is hereby
adopted by the Commission. The TSI is set out in the Annex
to the
to this Decision. The TSI
trans-European
infrastructure
rolling
high-speed rail system as defined in Annex I
to Directive
96/48/EC,
taking into account Article 2 and Article 3
hereunder.

applicable
the

fully
stock of

and

is

(cid:151) (cid:145)renewal(cid:146) means major work to replace a subsystem or part
of a subsystem which does not change the performance of
the subsystem,

(cid:151) (cid:145)maintenance-related replacement(cid:146) means replacement of
components
and
of
performances in the context of predictive or corrective
maintenance.

identical

function

parts

by

In the case of upgrading,

2.
the contracting entity will
submit a dossier describing the project to the Member State
concerned. The Member State will examine the dossier and,
taking into account the implementation strategy in Chapter 7
of the attached TSI, will (where appropriate) decide whether
the scale of the work requires the need for a new authorisation
for placing in service under Article 14 of Directive 96/48/EC.
Such authorisation for placing in service is necessary whenever
the level of safety may objectively be affected by the work
envisaged.

Where a new authorisation for placing in service under Article
14 of Directive 96/48/EC is necessary,
the Member State
decides whether:

Article 2

(a)

the project includes full application of the TSI, in which
case the subsystem will be subject to the EC verification
procedure in Directive 96/48/EC; or

1. With regard to the systems referred to in Annex B to the
the conditions to be complied with for the
attached TSI,
verification of
the interoperability within the meaning of
Article 16(2) of Directive 96/48/EC are the applicable technical
rules in use in the Member State which authorises the placing
in service of the subsystem concerned by this Decision.

Each Member State shall notify to the other Member
the

2.
States and to the Commission within six months of
notification of this Decision:

(cid:151) the list of the applicable technical rules mentioned under

Article 2(1),

(cid:151) the conformity assessment and checking procedures to be

applied with regard to the application of these rules,

(cid:151) the bodies it appoints for carrying out those conformity

assessment and checking procedures.

Article 3

1.

For the purposes of this Article:

(cid:151) (cid:145)upgrading(cid:146) means major work to modify a subsystem or
part of a subsystem which changes the performance of the
subsystem,

(b) full application of the TSI is not yet possible. In this case
the subsystem will not be in full conformity with the TSI
and the EC verification procedure in Directive 96/48/EC
shall be applied only in respect of the parts of the TSI
applied.

the Member State will

inform the
In these two cases
Committee set up pursuant
the
dossier including the parts of TSI being applied and the degree
of interoperability being achieved.

to Directive 96/48/EC of

In

3.
replacement, application of the attached TSI is voluntary.

and maintenance-related

renewal

case

the

of

Article 4

Member States shall establish a national implementation plan
of the attached TSI according with the criteria specified in its
Chapter 7. They shall forward this implementation plan to the
other Member States and the Commission not later than six
months after notification of this Decision.

L 245/40

EN

Official Journal of the European Communities

12.9.2002

Article 5

Article 7

Commission Decisions 1999/569/EC (3) and 2001/260/EC (4)
have no further effect from the date of entry into force of the
attached TSI.

This Decision is addressed to the Member States

Done at Brussels, 30 May 2002.

Article 6

The attached TSI shall enter
notification of this Decision.

into force six months after

For the Commission

Loyola DE PALACIO

Vice-President

(3) OJ L 216, 14.8.1999, p. 23.
(4) OJ L 93, 3.4.2001, p. 53.

12.9.2002

EN

Official Journal of the European Communities

L 245/41

TECHNICAL SPECIFICATION FOR INTEROPERABILITY RELATING TO THE CONTROL-COMMAND AND
SIGNALLING SUBSYSTEM

ANNEX

1. INTRODUCTION

1.1.

TECHNICAL SCOPE

This TSI concerns the control-command and signalling subsystem, which is one of the subsystems listed in
Annex II(1) to Directive 96/48/EC. It is referred to in this document as (cid:145)control-command(cid:146) or (cid:145)CC(cid:146).

This TSI is part of a set of six TSIs, which cover all the eight subsystems defined in the Directive. The
specifications concerning the (cid:145)users(cid:146) and (cid:145)environment(cid:146)
subsystems, which are necessary to ensure
interoperability of the trans-European high-speed rail system in compliance with the essential requirements,
are set out in the TSIs concerned.

More information about the control-command and signalling subsystem is given in Chapter 2.

1.2.

GEOGRAPHICAL SCOPE

The geographical scope of this TSI is the trans-European high-speed rail system as described in Annex I to
Directive 96/48/EC.

Reference shall be made in particular to the lines of the trans-European rail network described in Decision
No 1692/96/EC of the European Parliament and of the Council of 23 July 1996 on Community guidelines
for the development of the trans-European transport network or in any update to the same Decision as a
result of the revision provided for in Article 21 of that Decision.

1.3.

CONTENT OF THIS TSI

In accordance with Article 5(3) of and with Annex I(1)(b) to Directive 96/48/EC, this TSI:

(a)

specifies the essential requirements for the subsystems and their interfaces (Chapter 3);

(b) establishes the basic parameters described in Annex II(3) to that Directive, which are necessary to meet

the essential requirements (Chapter 4);

(c) establishes the conditions to be complied with to achieve the specified performances for each of the

following categories of line (Chapter 4):

(cid:151) category I: specially built high-speed lines equipped for speeds generally equal to or greater than

250 km/h,

(cid:151) category II: specially upgraded high-speed lines equipped for speeds of the order of 200 km/h,

(cid:151) category III: specially upgraded high-speed lines which have special

features as a result of
topographical, relief or town-planning constraints, on which the speed must be adapted to each
case;

(d) establishes implementing provisions in certain specific cases (Chapter 7);

(e) determines the interoperability constituents and interfaces which must be covered by European
specifications,
including European standards, which are needed in order to achieve interoperability
within the trans-European high-speed rail system while meeting the essential requirements (Chapter 5);

L 245/42

EN

Official Journal of the European Communities

12.9.2002

(f)

states, in each case under consideration, which of the modules defined in Decision 93/465/EEC or,
where appropriate, which specific procedures are to be used in order to assess either the conformity or
the suitability for use of the interoperability constituents, as well as (cid:145)EC(cid:146) verification of the subsystems
(Chapter 6).

2. SUBSYSTEM DEFINITION AND SCOPE

2.1.

GENERAL

Definition: control-command subsystem. The control-command subsystem is defined as that set of functions
and their implementation which allow the safe and predictable movement of rail traffic in order to meet
the desired operational activities.

Scope: The TSI control-command defines the essential requirements for those parts of the control-command
subsystem that have relevance to interoperability, and therefore are subject to EC declaration of verification.

The features of
trans-European high-speed rail system are determined by:

the control-command subsystem that are related to the interoperability of

the

(1)

the Functions that are essential for the safe control of the railway traffic, and that are essential for
operations, including those required under degraded conditions;

(2)

Interfaces,

(3)

the level of Performance required to meet the essential requirements.

The requirements on the necessary functions,
interfaces and performance are introduced in the
characterisation of control-command, which is described in section 4 where the supporting standards are
referenced.

2.2.

OVERVIEW

The interoperability of the trans-European high-speed rail network depends in part on the ability of the
on-board control-command equipment to work with the various trackside equipment installed upon it (1).

2.2.1.

INTEROPERABILITY

Technical interoperability ensures that the trains are able to run safely on the interoperable lines, receiving
the necessary control-command data from the trackside. Technical interoperability is obtained by providing
the trains with the correct functions,
interfaces and performance for the infrastructure over which the
service is to pass. Technical interoperability is the prerequisite for operational interoperability, in which the
driving is based on consistent information displayed in the cabs and is in accordance with signalling
principles defined for the high-speed network that are independent of the technology used.

2.2.2.

CLASSES OF CONTROL-COMMAND INTERFACES BETWEEN TRACK AND TRAIN

Interoperability of the control-command functions is to be founded upon the development of unified
specifications of the interfaces which provide for interoperability. In the meantime, the specification of the
interfaces presently used for interoperable services (termed class B) are subject to the requirements of this
TSI. Each class B specification shall be managed as follows. Member States have the responsibility to ensure
that during their life the class B systems are managed in the interests of interoperability, in particular any
changes to these specifications are to be managed such that interoperability is not prejudiced.

Two classes of control-command interfaces between track and train are defined:

class A: the unified control-command interfaces (cid:151) these interfaces are defined in Chapter 4. Annex A
includes the specifications that define the interoperability requirements of the class A control-command
interfaces,

(1) Assembly: because of the mobility of the on-board part, the control-command subsystem is divided in two parts: on-board assembly

and trackside assembly (see Figure 1 in Annex D).

12.9.2002

EN

Official Journal of the European Communities

L 245/43

class B: control-command interfaces and applications existing before entry into force of Directive 96/48/EC
limited to those described in Annex B. These can be implemented as STMs (2).

In order to achieve interoperability, the trains’ on-board control-command assembly will consist of:

(cid:151) the class A radio and data communication interfaces to the infrastructure, in case of operation with

class A Infrastructure,

(cid:151) the class B radio and data communication interfaces to the infrastructure, in case of operation with

class B infrastructure.

Section 7 describes the requirements for the transition phase from the class B interfaces to the class A
interfaces for radio and for signalling purposes.

2.2.3.

LEVELS OF APPLICATION

Control-command interfaces provide for the means of data transmission to, and sometimes from, the trains.
The class A specifications called up by this TSI provide options from which a project may choose the
means of transmission that meet its requirements. By convention, three levels of application are defined:

level 1: the data transmission requirement is met by intermittent (Eurobalise) and in some cases semi
continuous (Euroloop or radio infill) transmission along the track. The detection of trains is achieved by
track-based equipment, usually track circuits or axle counters. Information is communicated to the driver
from either the line side, or cab-signalling,

level 2: the data transmission requirement is met by radio (GSM-R) transmission along the track. For some
functions, the radio transmission requires complementing by intermittent (Eurobalise) transmission. The
detection of trains is achieved by track-based equipment, usually track circuits or axle counters. Information
is communicated to the driver by cab-signalling,

level 3: the data transmission requirement is met by radio (GSM-R) transmission along the track. For some
functions, the radio transmission requires complementing by intermittent (Eurobalise) transmission. The
detection of trains is achieved by train-based equipment reporting to the command-control data-processing
system. Information is communicated to the driver by cab-signalling.

The requirements of this TSI apply to all levels of application. The implementation issue is addressed in
Chapter 7. A train equipped with class A interfaces for a given level of application shall be able to operate
with that level of application and any lower one.

2.2.4.

NETWORK BORDERS

The localised interfaces between the trackside control-command systems of neighbouring railways shall
provide for the passage without restrictions of
trains operating the high-speed services between the
networks.

3. THE ESSENTIAL REQUIREMENTS OF THE CONTROL-COMMAND SUBSYSTEM

3.1.

GENERAL

Article 4(1) of Interoperability Directive 96/48/EC, requires that the trans-European high-speed rail system,
subsystems and their interoperability constituents meet the essential requirements set out in general terms
in Annex III to the Directive. The essential requirements are:

(cid:151) safety,

(cid:151) reliability and availability,

(cid:151) health,

(2) STM: the specific transmission module (STM) allows class A on-board equipment to operate on lines fitted with class B signalling by

using the class B data.

L 245/44

EN

Official Journal of the European Communities

12.9.2002

(cid:151) environmental protection,

(cid:151) technical compatibility.

requirements may be generally applicable to the whole
The Directive allows
trans-European high-speed rail system or be specific to each subsystem and its interoperability constituents.

the essential

that

3.2.

SPECIFIC ASPECTS FOR THE CONTROL-COMMAND SUBSYSTEM

The essential requirements are taken in turn, below. The requirements apply to all control-command
systems employing class A interfaces. The class B interfaces have specific features.

3.2.1.

SAFETY

Every project to which this specification is applicable shall put into effect the measures necessary to
demonstrate that the level of risk of an incident occurring that is within the scope of the control-command
systems is not higher than the objective required for the service. For this purpose, Annex A, index 1, shall
be used.

For class A equipment, the global safety objective for the subsystem is apportioned between the on-board
and trackside assemblies. For the safety-related part of one on-board assembly as well as for one trackside
assembly, the safety requirement for ETCS level 2 is: tolerable hazard rate of 10-9/hour (for random failures)
corresponding to safety integrity level 4 (preliminary value to be confirmed and to be extended for other
ETCS levels). The detailed requirements are specified in Annex A, index 2a.

it is the responsibility of the Member State to
For class B equipment used for high speed operation,
guarantee that appropriate safe speed enforcement is performed by the class B system, and to state the
speed limit.

3.2.2.

RELIABILITY AND AVAILABILITY

(a) For class A interfaces, the global reliability and availability objectives for the subsystem are apportioned
between the on-board and trackside assemblies. The requirements are specified in Annex A, index 2b.

(b) The quality of

the maintenance organisation for all systems comprising the control-command
subsystem shall ensure that the level of risk is controlled regarding constituent age and wear. The
quality of the maintenance shall ensure that safety is not prejudiced because of these activities. Annex
A, index 2c shall be applied.

3.2.3.

HEALTH

Precautions shall be taken to ensure that the materials used in and the design of control-command systems
do not constitute a health hazard to persons having access to them.

This TSI does not introduce any additional requirement to the ones already requested by applicable
European regulations.

3.2.4.

ENVIRONMENTAL PROTECTION

3.2.4.1.

The control-command systems, if subjected to excessive heat or fire, shall not exceed limits for the emission
of fumes or gases which are harmful to the environment.

3.2.4.2.

The control-command systems shall not contain substances which may during their normal use abnormally
contaminate the environment.

3.2.4.3.

The control-command systems shall be subject to the European legislation in force controlling the limits to
the emission of and the susceptibility to electromagnetic interference along the boundaries of railway
property.

12.9.2002

EN

Official Journal of the European Communities

L 245/45

This TSI does not introduce any additional requirement to the ones already required by applicable European
regulations.

3.2.5.

TECHNICAL COMPATIBILITY

compatibility includes

Technical
required to achieve
interoperability. In order to fulfil this essential requirement and achieve interoperability, the requirements of
section 4 of this TSI must be met in full.

and performances

functions,

interfaces

the

The requirements of technical compatibility are therefore presented in two categories:

(cid:151) the first category sets out

is
the general engineering requirements
environmental conditions, internal electromagnetic compatibility (EMC) within the railway boundaries,
and installation. These compatibility requirements are defined in this section;

interoperability,

that

for

(cid:151) the second category describes what

the control-command subsystem has to do in order that

interoperability is achieved. This category forms the major part of this interoperability specification.

3.2.5.1.

Engineering compatibility

3.2.5.1.1. Physical environmental conditions

(a) Systems complying with the class A interface requirements shall be capable of operating under the
climatic and physical conditions which exist along the relevant part of the trans-European high-speed
network (e.g. defined according to climatic zones). For this purpose Annex A, index 3, shall be used.

(b) The systems complying with the class B interface requirements shall conform at least to the physical
environmental specifications applying to the corresponding class B system, in order to be capable of
operating under the climatic and physical conditions which exist along the high-speed lines concerned.

3.2.5.1.2. Electromagnetic compatibility

The electromagnetic compatibility requirements (which include train detection requirements) are:

(a)

internal control-command compatibility

On-board and trackside control-command assemblies shall not interfere with each other.

Class A and class B systems shall not interfere with each other.

(b) Compatibility between the control-command subsystem and other TSI subsystems.

Class A control-command equipment shall not interfere with other TSI subsystems, nor be interfered
with by other TSI subsystems.

Neither the train operators nor the infrastructure controllers may install new systems which are not
compatible with class A control-command equipment emissions and susceptibility.

(c) Compatibility between the railway and systems external to the trans-European high-speed network

This TSI does not introduce any requirements additional to those specified by applicable European
regulations.

The following standards shall be applied:

(cid:151) Annex A, index 4a (emission and susceptibility limits of control-command electronic equipment),

(cid:151) Annex A, index 4b (immunity characteristics of train detection systems),

L 245/46

EN

Official Journal of the European Communities

12.9.2002

(cid:151) Annex A, indices 12a and 12b (emission and susceptibility limits of balise and loop interfaces),

(cid:151) Annex A, index 12c (emission and susceptibility limits of train radio interfaces).

3.2.5.2.

Control-command compatibility

Section 4, supported by Annexes A and B, defines the requirements for the interoperability of
control-command subsystem for each class of interface, class A and class B.

the

4. CHARACTERISATION OF THE SUBSYSTEM

The trans-European high-speed rail system, to which Directive 96/48/EC applies and of which the control-command
subsystem is a part, is an integrated system which requires the functions, interfaces and performance (all of which are
basic parameters) to be verified, in particular so as to ensure that the system is interoperable and that the essential
requirements are met. Annex A lists the mandatory European specifications for the class A functions, interfaces and
performance; Annex B lists the characteristics of
the class B systems and the responsible Member States. The
control-command characterisation is presented in the following order:

(cid:151) functions

(cid:151) interfaces internal to control-command

(cid:151) interfaces to other TSIs

(cid:151) performance.

The STMs, which enable the class A system to operate over class B infrastructure, are subject to the class B system
requirements. The implementation of the class A functions and interfaces and the transition to it from the class B
systems are subject to the requirements of section 7.

The TSI control-command describes the ERTMS characteristics, in accordance with the Directive 96/48/EC.

The basic parameters of the class B equipment are the subject of Annex B.

4.1.

BASIC PARAMETERS OF THE SUBSYSTEM (cid:151) CLASS A EQUIPMENT

4.1.1.

BASIC PARAMETERS OF THE SUBSYSTEM: INTERNAL FUNCTIONS

section specifies

This
interoperability. The ETCS functions required for interoperability are:

the functions of control-command class A equipment

that are essential

to

(cid:151) the cab-signalling function,

(cid:151) the automatic train protection function, comprising:

(cid:151) selecting the speed supervision mode,

(cid:151) defining and providing the intervention function,

(cid:151) setting the train characteristics,

(cid:151) proving train integrity (3) (note: rolling stock TSI is also concerned),

(cid:151) equipment health monitoring and failure mode support, comprising:

(cid:151) initialising the subsystem,

(cid:151) testing the subsystem in service,

(cid:151) testing the subsystem in depot,

(cid:151) providing failure mode support,

(3) Train integrity: the status of the completeness of the train according to operational rules.

12.9.2002

EN

Official Journal of the European Communities

L 245/47

(cid:151) exchanging data between the trackside assembly and the on-board assembly,

(cid:151) managing the STMs,

(cid:151) support to cab-signalling and automatic train protection, comprising:

(cid:151) supporting driving,

(cid:151) providing odometry,

(cid:151) recording data,

(cid:151) the vigilance function.

To achieve interoperability it
control-command and signalling subsystem. The principle followed is the definition of:

is not necessary to standardise all

the functions within the whole

(cid:151) trackside standard functions, able to read data from national interlocking and signalling systems and to

translate such data into standard messages for the trains,

(cid:151) standard interfaces for track-to-train and train-to-track communication,

(cid:151) on-board standard functions, ensuring that every train will react to data received from trackside in a

predictable way.

Only the above mentioned functionality is considered in this chapter.

The GSM-R functions required for interoperability are the voice and data communication between trackside
and on-board.

(cid:151) In Annex A, index 0a, the ETCS functional requirement specifications are indicated.

(cid:151) In Annex A, index 0b, the GSM-R functional requirement specifications are indicated.

The control-command functions are classified in three categories:

M: standard functions whose implementation is mandatory. For example: the ETCS end-of-movement

authority,

O: functions for which the implementation is optional, but if implemented a standard specification applies.

For example: GSM-R fax transmission,

N: functions of the national part of control-command. For example: interlocking functions.

The classification of the functions is indicated within the text of the ETCS FRS and the GSM-R FRS.

ETCS functions shall be implemented in accordance with the technical specifications indicated in Annex A,
indices 5, 6, 7, 8, 9, and their performance shall conform to indices 2 and 18.

The vigilance function shall be implemented on-board in accordance with Annex A,
Implementation may be:

index 10.

(cid:151) outside the ERTMS/ETCS, with an optional interface to the ERTMS/ETCS equipment on-board, or

(cid:151) inside the ERTMS/ETCS on-board equipment.

The infill data transmission function in ETCS level 1 applications is only mandatory on-board under the
conditions defined in section 7.

GSM-R radio functions shall be implemented in accordance with the technical specifications indicated in
Annex A, index 11.

L 245/48

EN

Official Journal of the European Communities

12.9.2002

4.1.2.

BASIC PARAMETERS OF THE SUBSYSTEM: INTERNAL INTERFACE

internal

interfaces are defined as

Definition:
those matters which concern two control-command
interoperability constituents or assemblies, and describe the functional, electrical and/or mechanical
conditions applying to the links between them. The voice and data transmission between the train and the
trackside are part of the internal interfaces.

This section specifies the functions of control-command class A internal interfaces which are essential for
interoperability.

4.1.2.1.

Interface between on-board and trackside assembly

(a) Radio communications with the train

Class A radio communication interfaces shall operate in the GSM-R bands, including the public bands
and those frequency bands that are exclusively allocated for use by the railways. Annex A, index 12,
shall apply to radio communications.

There shall be formalised procedures created which conform to the needs of a multilingual
environment.

(b) Balise and loop communications with the train

Class A balise and loop communication interfaces shall comply with Annex A, index 12.

4.1.2.2.

Interfaces between on-board interoperability constituents essential to interoperability

The data communications characteristics of each interface shall be such as to enable the requirements of the
functions and failure modes to be met.

(a) The interface between the class A radio and the cab-signalling/automatic train protection functions.

These requirements are specified in Annex A, index 13a.

(b) Access to data recorded on-board for regulatory purposes. Each Member State shall have access to the
recorded data that meets obligatory data-recording requirements for official and investigative purposes.
This interface and the data formats are specified in Annex A, index 13b.

(c) Odometry: the interface between the odometry function and ETCS on-board functions shall meet the

requirements of Annex A, index 13c.

(d) The STM interface: the interface between the class A functions and the STMs of Annex B is defined in

Annex A, index 6.

4.1.2.3.

Interfaces between trackside interoperability constituents essential to interoperability

(a) Between the class A radio system and the ERTMS/ETCS: these requirements are specified in Annex A,

index 14a.

(b) Between Eurobalise and the LEU: these requirements are specified in Annex A, index 14b.

(c) Between Euroloop and the LEU: these requirements are specified in Annex A, index 14c.

(d) Between the ERTMS/ETCS centres of neighbouring infrastructure controllers: these requirements are

specified in Annex A, index 14d.

4.1.2.4.

Key management

Safety related data transmitted via radio are protected by mechanisms that need cryptographic keys. The
infrastructure manager shall provide a management system that controls and manages the keys. A key
management interface is required:

(cid:151) between the key management systems of different infrastructure managers,

(cid:151) between the key management system and the on-board and track-side ETCS.

12.9.2002

EN

Official Journal of the European Communities

L 245/49

The security of key management affects the safety of the control-command subsystem. Therefore a security
policy is required for the key management system.

The requirements are specified in Annex A, index 15.

4.1.3.

INTERFACES TO OTHER CC EQUIPMENT

The control-command track-side functions addressed by this TSI shall be able to read information from
interlocking and other signalling systems and, depending upon the functions implemented, to transmit
information to them.

Standardisation of this interface is not necessary to achieve interoperability, therefore this interface is not
defined in European specifications.

4.2.

INTERFACES OF THE SUBSYSTEM TO OTHER SUBSYSTEMS

Definition: external interfaces are defined as those matters that concern two TSI subsystems.

4.2.1.

THE EXTERNAL CLASS A INTERFACES REQUIRED FOR INTEROPERABILITY

This section specifies the external interfaces of the control-command subsystem, as defined in this TSI, to
the other TSI subsystems that are essential to interoperability. For the energy TSI, there are indirect
requirements via the rolling stock TSI concerning in particular EMC. The external interfaces are:

the operations interfaces, comprised of:

A.

functional and procedural requirements, ergonomics, and understanding of the MMI;

B.

functional requirements of data-recording;

C.

role of radio, and understanding;

the rolling stock interfaces, comprised of:

A.

the guaranteed train braking performance and characteristics;

B.

compatibility between track-based systems and the rolling stock (ETCS Level 1 and 2);

C.

vehicle geometry and movement; the relationship of the antennae to the structure and kinematic
gauges and track-geometry, including vehicle behaviour;

D.

installation matters:

(cid:151) the physical environment,

(cid:151) electromagnetic compatibility (EMC) with the on-board electrical environment;

E.

train data interfaces:

(cid:151) brakes,

(cid:151) train integrity,

(cid:151) train length;

F.

Electromagnetic compatibility between rolling stock and infrastructure systems;

the infrastructure interfaces, comprised of:

installation requirements.

The relevant standards are referenced, and these are listed in Annex A. The following explanations cover
the major issues.

L 245/50

EN

Official Journal of the European Communities

12.9.2002

4.2.1.1.

The operation interfaces

The European high-speed network will be subject to unified operational requirements. These concern
principally the trains. For the purposes of interoperability, the class A control-command interfaces shall
provide the operators with the technical capability for:

A.

compatibility with the operational requirements.

A unified set of cab-equipment associated with the class A interfaces. This will include the facility to
enter the train characteristics as required by the automatic train protection logic.

The requirements for driving ergonomics.

Aid to limit misunderstanding due to differences in language (use of icons, formalised procedures);

B.

the use of data-recording;

C.

the use of radio for voice communication for operational purposes.

4.2.1.2.

Rolling stock interfaces

A. The train braking performance:

(i)

the rolling stock TSI defines the braking performance of interoperable trains;

(ii)

the class A control-command system shall provide the adaptability necessary to the real braking
performance of the rolling stock;

(iii) upon a call for the emergency brake, the rolling stock subsystem shall prevent traction being

applied. This requirement is promulgated in the rolling stock TSI.

B. Compatibility with track-based train detection:

(i)

the rolling stock shall have the characteristics necessary for the operation of train detection
systems. Annex A, index 16 shall be used;

(ii)

rail-mounted train detection systems shall have the characteristics necessary to be activated by
rolling stock which conforms to the rolling stock TSI.

C. Vehicle geometry and movement:

(i)

the on-board antennae shall be positioned such that the vehicle kinematic gauge is respected as
defined by the rolling stock TSI;

(ii)

the position of the antennae on the rolling stock shall be such that reliable data communication is
assured at the extremes of the track geometry capable of being traversed by the rolling stock. The
movement and behaviour of the rolling stock shall be taken into account.

D.

Installation matters:

(i)

environmental conditions. the resistance to the on-board physical environment is defined in Annex
A, index 3;

(ii) electromagnetic compatibility with the on-board electrical environment. To ensure that

the
on-board equipment for the control-command systems may be universally used for new rolling
stock accepted for operation upon the trans-European high-speed network, there shall be applied
to the electrical environment of
the interoperable
control-command system to electrical
interference a common specification of electromagnetic
compatibility as defined in Annex A, index 4a. Integration tests will be required;

the rolling stock and the susceptibility of

(iii) isolation of ETCS on-board equipment.

12.9.2002

EN

Official Journal of the European Communities

L 245/51

E. Data interfaces:

the following sets of data interfaces with the train are required by class A equipment:

(cid:151) brakes,

(cid:151) train integrity (ETCS level 3),

(cid:151) train length.

These interfaces shall be adaptable for rolling stock operating in multiple units.

The interface requirements between the radio communications and the rolling stock subsystem are
specified in Annex A,
index 11. The other interface requirements between the control-command
functions and the rolling stock subsystem are specified in Annex A, index 17.

F.

Electromagnetic compatibility between rolling stock and control-command trackside equipment: to
ensure that new rolling stock accepted for use on all or part of the trans-European high-speed network
will be compatible with the associated control-command infrastructure, there shall be a common
specification describing the limits to conducted and induced traction current as well as electromagnetic
field characteristics to be permitted; refer to Annex A, index 4b.

4.2.1.3.

Infrastructure interfaces

The infrastructure installation shall ensure that:

(a)

the train detection system respects the requirements quoted in 4.2.1.2(B), above;

(b)

the position of the antennae of the trackside subsystems is such that reliable data communication is
assured at the extremes of the track geometry capable of being traversed by the rolling stock. The
movement and behaviour of
the
communication antennae at the trackside shall not infringe the network’s structure gauge. The respect
of
the
infrastructure manager.

the rolling tock shall be taken into account. By definition,

the European high-speed network is a matter

the structure gauge requirement of

for

4.2.2.

THE EXTERNAL CLASS B INTERFACES REQUIRED FOR INTEROPERABILITY

Only the following class A requirements shall apply to external class B interfaces:

(cid:151) vehicle geometry and movement (see 4.2.1.2(C)),

(cid:151) EMC (see section 7).

All other requirements are to be found by reference to Annex B.

4.3.

SPECIFIED PERFORMANCE FOR INTEROPERABILITY

Class A systems have to fulfil technical performance requirements in accordance with Annex A, index 18.

Class B systems on interoperable trains have to offer all their available parameters and ranges of parameter
values for optimal train running; in particular speed and braking performance of trains must be made
usable by control-command braking parameters as far as economically reasonable.

4.4.

SPECIAL CASES: APPLICATION MODALITIES

This subject is addressed in Chapter 7.

5. INTEROPERABILITY CONSTITUENTS

Section 5 describes the interoperability constituents adopted for the control-command subsystem.

5.1.

CONTROL-COMMAND INTEROPERABILITY CONSTITUENTS

As described in section 2, the control-command subsystem is divided into two assemblies, trackside and
on-board. An interoperability constituent can only belong to one of these assemblies.

L 245/52

EN

Official Journal of the European Communities

12.9.2002

The interoperability constituents in the control-command subsystem are listed in Tables 5.1 and 5.2:

(cid:151) Table 5.1 lists the interoperability constituents of the control-command on-board assembly.

(cid:151) Table 5.2 lists the interoperability constituents of the control-command trackside assembly.

Column 1 lists line number,

Column 2 is the name of the interoperability constituent,

Column 2a lists remarks, if any,

Column 3 lists the interfaces which are internal to the control-command TSI subsystem; an asterisk in this

column indicates that a supporting European standard is not yet available,

Column 4 lists the interfaces to other TSI subsystems (external control-command interfaces),

Column 5 lists the characteristics to be assessed by reference to Annex A, which lists the relevant

European specifications including test requirements,

Column 6 lists the modules (see Annex E) to be applied for assessment.

For each interoperability constituent the reference to European specifications to be applied is given in
Annex A.

These interoperability constituents are specific to railway applications.

5.2.

GROUPING OF INTEROPERABILITY CONSTITUENTS

The control-command interoperability constituents defined in Tables 5.1 and 5.2 may be combined to form
a larger unit. The group is then defined by the functions of the integrated interoperability constituents and
the remaining inter-faces on the outside of the group. The groups are defined in Tables 5.1 and 5.2. Each
group has to be supported by European specifications. A group so formed is then to be considered as an
interoperability constituent.

The declaration of conformity for an interoperability constituent requires that each of its interfaces referred
to in Table 5 is supported by one or more European specifications. The specifications concerned will be
referenced by Annex A. As long as a European specification is not available to support an interface given in
Table 5, this interoperability constituent cannot be supported by a declaration of conformity. Therefore the
interoperability constituent concerned shall be integrated into a group of interoperability constituents for
which a declaration of conformity is then possible.

Table 5.1a

Basic interoperability constituents in the on-board control-command assembly

1

2

2a

3

4

5

Group No

Inter-operability constituent (IC)

Remarks

Control-command interfaces

Interfacing TSI subsystems

Characteristics to be assessed by
reference to Annex A

6

Module

1

ERTMS/ETCS on-board

(Part of the UNISIG
grouping of on-board ICs)

(a)

*Odometry

(b) External STM

(c) ERTMS/GSM-R
on-board

(d) *Safety information

recorder

(e) Euroloop (trackside)

(f) Eurobalise (trackside)

Rolling stock (see section
4.2 TSI control-command)

0a, 1, 2, 3, 4a, 5, 6, 7, 9,
10, 12a, 12b, 13, 17, 18

H2 or B with D or B with F

2

3

Safety platform (1) on-board (Part of the UNISIG

Not applicable

Not applicable

1, 2a, 2b

H2 or B with D or B with F

grouping of on-board ICs)

Safety information recorder

(Part of the UNISIG
grouping of on-board ICs)

(a)

*ERTMS/ETCS
on-board

Operational issue: recording
of safety information

0, 1, 2, 3, 4a, 9, 13b

H2 or B with D or B with F

(b) *ERTMS/GSM-R
on-board

(c) Safety information

downloading tool (not
being a
control-command IC).

4

Odometry

(Part of the UNISIG
grouping of on-board ICs)

*ERTMS/ETCS on-board

Rolling stock (see section
4.2 TSI control-command)

0a, 1, 2, 3, 4a, 8, 13c, 17,
18

H2 or B with D or B with F

.

.

1
2
9
2
0
0
2

E
N

O

f
f
i
c
i
a
l

J
o
u
r
n
a
l

o
f

t
h
e

E
u
r
o
p
e
a
n

C
o
m
m
u
n
i
t
i
e
s

L

2
4
5
/
5
3

1

2

2a

3

4

5

Group No

Inter-operability constituent (IC)

Remarks

Control-command interfaces

Interfacing TSI subsystems

Characteristics to be assessed by
reference to Annex A

6

Module

5

6

External STM

Interfaces only

ERTMS/ETCS on-board

Rolling stock (see section
4.2 TSI control-command)

0a, 1, 2, 3, 4a, 6

H2 or B with D or B with F

ERTMS/GSM-R on-board

Including radio MMI

(a) ERTMS/ETCS on-board

(b) ERTMS/GSM-R track-

side

(c)

*Safety information
recorder

Rolling stock (see section
4.2 TSI control-command)

0b, 2, 3, 4a, 11, 12c, 13a,
17

H2 or B with D or B with F

and operational issues:

(cid:151) radio operational
requirements,

(cid:151) drivers cab ergonomics,

(cid:151) operational rules,

(cid:151) operational language,

(cid:151) recording of safety
information.

(1) Definition of safety platform: a building block (generic product, independent of the application) made of hardware and base software (firmware and/or operating system and/or support tools), which can be used for building more
complex systems (generic applications, i.e. classes of applications). Its safety acceptance and approval shall be carried out on the basis of a (cid:145)generic product(cid:146) (i.e. independent of the application) safety case, as specified by standard ENV
50129.

An asterisk (*) indicates that initially a European standard for the interface will not be available.

Module H2 can be applied only when a sufficient degree of confidence in the ERTMS technologies exists through return of experience from commercial installations.

L

2
4
5
/
5
4

E
N

O

f
f
i
c
i
a
l

J
o
u
r
n
a
l

o
f

t
h
e

E
u
r
o
p
e
a
n

C
o
m
m
u
n
i
t
i
e
s

.

.

1
2
9
2
0
0
2

Table 5.1b

Groups of interoperability constituents in the on-board CC assembly

This table is an example to show the structure. Other groups may be proposed.

1

2

2a

3

4

5

Group number

Basic inter-operability
constituents (Basic ICs)

Remarks

CC interfaces

Interfacing TSI subsystems

Characteristics to be assessed by
reference to Annex A

6

Module

1

(a) Safety platform
on-board

(UNISIG grouping of
on-board ICs)

(b) ERTMS/ETCS on-board

(c) Safety information

recorder

(d) Odometry

(a) External STM

(b) ERTMS/GSM-R
on-board

(c) Euroloop (trackside)

(d) Eurobalise (trackside)

(e) Safety information
downloading tool

Rolling stock (see section
4.2 TSI control-command)

0a, 1, 2, 3, 4a, 5, 6, 7, 8, 9,
10, 12a, 12b, 13, 17, 18

H2 or B with D or B with F

and operational issues:

(cid:151) radio operational
requirements,

(cid:151) driver’s cab
ergonomics,

(cid:151) operational rules,

(cid:151) operational language,

(cid:151) recording of safety
information.

Module H2 can be applied only when a sufficient degree of confidence in the ERTMS technologies exists through return of experience from commercial installations.

.

.

1
2
9
2
0
0
2

E
N

O

f
f
i
c
i
a
l

J
o
u
r
n
a
l

o
f

t
h
e

E
u
r
o
p
e
a
n

C
o
m
m
u
n
i
t
i
e
s

L

2
4
5
/
5
5

Table 5.2a

Basic interoperability constituents in the trackside CC assembly

1

2

2a

3

4

5

Number

Inter-operability constituent (IC)

Remarks

CC interfaces

Interfacing TSI subsystems

Characteristics to be assessed by
reference to Annex A

6

Module

1

2

3

4

5

6

ERTMS/ETCS trackside

(RBC)

(a) ERTMS/ETCS trackside
(neighbour RBC)

(b) ERTMS/GSM-R
trackside

0a, 1, 2, 3, 4a, 5, 14a, 14d,
18

H2 or B with D or B with F

Eurobalise

Euroloop

LEU (Eurobalise)

LEU (Euroloop)

(Part of the UNISIG
grouping of trackside ICs)

Interface C and coding
strategy only

(cid:145)Interface C(cid:146) and coding
strategy only (Part of the
UNISIG grouping of
trackside ICs)

(a) ERTMS/ETCS on-board

Infrastructure

0a, 1, 2, 3, 4a, 12a, 14b

H2 or B with D or B with F

(b) LEU (Eurobalise)

(a) ERTMS/ETCS on-board

Infrastructure

0a, 1, 2, 3, 4a, 12b, 14c

H2 or B with D or B with F

(b) *LEU (Euroloop)

Eurobalise (trackside)

0a, 1, 2, 3, 4a, 12a, 14b

H2 or B with D or B with F

*Euroloop (trackside)

0a, 1, 2, 3, 4a, 12b, 14c

H2 or B with D or B with F

Safety platform trackside

Not applicable

Not applicable

1, 2a, 2b

H2 or B with D or B with F

An asterisk (*) indicates that initially a European standard for the interface will not be available.

Module H2 can be applied only when a sufficient degree of confidence in the ERTMS technologies exists through return of experience from commercial installations.

L

2
4
5
/
5
6

E
N

O

f
f
i
c
i
a
l

J
o
u
r
n
a
l

o
f

t
h
e

E
u
r
o
p
e
a
n

C
o
m
m
u
n
i
t
i
e
s

.

.

1
2
9
2
0
0
2

Table 5.2b

Groups of interoperability constituents in the trackside CC assembly

This table is an example to show the structure. Other groups may be proposed.

1

2

2a

3

4

5

Group number

Basic interoperability
constituents (basic ICs)

Remarks

CC interfaces

Interfacing TSI subsystems

Characteristics to be assessed by
reference to Annex A

6

Module

1

2

(a) Safety platform
trackside

(b) Eurobalise

(c) LEU (Eurobalise)

(a) Safety platform
trackside

(b) Euroloop

(c) LEU (Euroloop)

ERTMS/ETCS on-board

Infrastructure

0a, 1, 2, 3, 4a, 12a

H2 or B with D or B with F

ERTMS/ETCS on-board

Infrastructure

0a, 1, 2, 3, 4a, 12b

H2 or B with D or B with F

Module H2 can be applied only when a sufficient degree of confidence in the ERTMS technologies exists through return of experience from commercial installations.

.

.

1
2
9
2
0
0
2

E
N

O

f
f
i
c
i
a
l

J
o
u
r
n
a
l

o
f

t
h
e

E
u
r
o
p
e
a
n

C
o
m
m
u
n
i
t
i
e
s

L

2
4
5
/
5
7

L 245/58

EN

Official Journal of the European Communities

12.9.2002

6. ASSESSMENT OF CONFORMITY AND/OR SUITABILITY FOR USE AND EC DECLARATION OF
VERIFICATION

6.1.

INTEROPERABILITY CONSTITUENTS

6.1.1.

CONFORMITY AND SUITABILITY FOR USE ASSESSMENT PROCEDURES (MODULES)

This section deals with the EC declaration of conformity for the control-command interoperability
constituents.

An EC declaration of
control-command subsystem.

suitability for use is not

required for

interoperability constituents of

the

The assessment procedure for conformity of interoperability constituents as defined in Chapter 5 of this TSI
shall be carried out by application of modules as specified in Annex E to this TSI.

The specifications for the performance, interfaces and functions required of each class A interoperability
constituent are obtained by reference to Annex A. Tables 5.1a, 5.1b, 5.2a and 5.2b indicate for each
interoperability constituent the indices of Annex A to be applied. The tests and test tool requirements
which are mandatory to assess the conformity of the performance,
interfaces and functions of each
interoperability constituent are also obtained from these tables. Those European specifications to be applied
to the defined interoperability constituents are identified in point 5.1.

The conformity assessment shall
include safety, e.g. the demonstration that the application software is
implemented in a safety platform that has a prior declaration of conformity in a way that achieves safety
acceptance according to the Annex A,
index 1. This shall also include the demonstration that other
software modules possibly installed in the same platform do not interfere with ERTMS/ETCS application.

If interoperability constituents are combined into a group, the conformity assessment shall cover the
remaining interfaces and the functions of the integrated interoperability constituents as identified in point
5.2.

The independent assessment in the safety acceptance and approval process as described in Annex A, index
1 may be accepted by the notified body, without it being repeated.

6.1.1.1.

The specific transmission module (STM)

The STM has to meet national requirements, and its approval is a responsibility of the Member State as
stated in Annex B.

The verification of
the STM interface to the ERTMS/ETCS on-board and certain associated external
interfaces to the rolling stock TSI subsystem, as indicated in Table 5.1 require a conformity assessment
carried out by a notified body. The notified body shall verify that the Member State has approved the
national part of the STM.

6.1.1.2.

EC declaration of conformity

For each interoperability constituent or group of interoperability constituents, the content of the declaration
must conform to Annex IV to Directive 96/48/EC.

An interoperability constituent is the smallest item for which a declaration of conformity may be obtained.

6.1.2.

APPLICATION OF MODULES

6.1.2.1.

Assessment of conformity

For the assessment procedure of
the control-command subsystem the
manufacturer or his authorised representative established within the Community may choose the modules
according to the indications in Tables 5.1a, 5.1b, 5.2a and 5.2b.

interoperability constituents of

12.9.2002

EN

Official Journal of the European Communities

L 245/59

6.1.2.2.

Definition of assessment procedures

The assessment procedures are defined in Annex E to this TSI.

The module D may only be chosen where the manufacturer operates a quality system for production, final
product inspection and testing, approved and surveyed by a notified body.

The module H2 may only be chosen where the manufacturer operates a quality system for design,
production, final product inspection and testing, approved and surveyed by a notified body.

6.2.

CONTROL-COMMAND SUBSYSTEM

This section deals with EC declaration of verification of the control-command subsystem. As stated in
dection 2 the application of the control-command subsystem is treated as two assemblies:

(cid:151) the on-board assembly,

(cid:151) the trackside assembly.

For each assembly a declaration of verification is needed. The scope of the EC declaration of verification,
according to Directive 96/48/EC,
the interoperability
constituents that are part of the relevant subsystem. Tables 6.1 and 6.2 define the characteristics to be
verified, and reference European specifications to be applied.

includes the verification of

the integration of

The line specific implementation of the trackside assembly is defined in the register of infrastructure in
accordance with Annex C.

The train specific implementation for the on-board assembly is defined in the register of rolling stock in
accordance with Annex C.

The declaration of verification of trackside assembly and on-board assembly shall contain the information
upon which the content of the register of infrastructure/register of rolling stock is based. The registers shall
be verified and issued under the responsibility of the Member State which authorises the placing into
service of the assembly. Verification of the register of infrastructure and register of rolling stock means that
these are consistent with the formats given in Annex C and reflect the effective configuration of the
assembly.

The following requirements apply to both the on-board assembly and the trackside assembly. Each
assembly shall satisfy:

(cid:151) the EC verification requirements of Directive 96/48/EC (Annex VI),

(cid:151) the requirements on the EC declaration of verification of Directive 96/48/EC (Annex V).

The EC declaration of verification is the task of the awarding entity (this could be e.g. the infrastructure
manager or the train operator).

The declaration of verification of on-board and trackside assemblies, together with the certificates of
conformity,
is sufficient to ensure that an on-board assembly will operate with a trackside assembly
equipped with corresponding functions as defined in the register of rolling stock and in the register of
infrastructure without an additional subsystem declaration of verification.

The references to the integration procedures and the test requirements of the on-board and trackside
assemblies are specified in Annex A, indices 32 and 33.

Trackside assembly functional integration verification:

European specifications must be complemented by national specifications covering:

(cid:151) the description of the line, characteristics such as gradients, distances, positions of route elements and

balises/loops, locations to be protected,

(cid:151) the signalling data and rules required to be handled by the ERTMS system.

L 245/60

EN

Official Journal of the European Communities

12.9.2002

A notified body is required for that part of the control-command trackside assembly for which European
specifications are established.

The awarding entity may have the national elements of the trackside assembly assessed by an independent
body to ensure that the application of national specifications fulfils the essential requirements.

The awarding entity may chose to use a notified body for this purpose.

The awarding entity shall present to the Member State evidence of the correct integration of the part
described by the European specifications within control-command and signalling.

Assessment procedures (modules)

When requested by the adjudicating entity or
its authorised representative established within the
Community, the notified body undertakes the EC verification in accordance with Article 18(1) and Annex
VI to Directive 96/48/EC and in accordance with the provisions of the relevant modules as specified in
Annex E to this TSI.

the
Assessment procedures
control-command subsystem, list of specifications and descriptions of the testing procedures are indicated
in Tables 6.1 and 6.2 of this TSI.

the trackside and on-board assemblies of

the EC verification of

for

As far as specified in this TSI,
control-command subsystem shall
trans-European high-speed rail system.

the EC verification of
take account of

the trackside and on-board assemblies of
subsystems of
its

interfaces with other

the
the

The adjudicating entity shall draw up the EC declaration of verification for the trackside and on-board
the control-command subsystem in accordance with Article 18(1) of and Annex V to
assemblies of
Directive 96/48/EC.

The independent assessment in the safety acceptance and approval process as described in Annex A, index
1, may be accepted by the notified body, without it being repeated.

6.2.1.

APPLICATION OF MODULES

The adjudicating entity or its authorised representative established within the Community may choose for
the verification procedure of the on-board assembly of the control-command subsystem either:

(cid:151) the type-examination procedure (module SB) indicated in Annex E to this TSI for the design and
development phase in combination with either the production quality assurance procedure (module
SD) indicated in Annex E to this TSI for the production phase or the product verification procedure
(module SF) indicated in Annex E to this TSI, or

(cid:151) the full quality assurance with design examination procedure (module SH2 (4)) indicated in Annex E to

this TSI.

the verification procedure of

For
the control-command subsystem,
the trackside assembly of
adjudicating entity or its authorised representative established within the Community may choose either:

the

(cid:151) the unit verification procedure (module SG) indicated in Annex E to this TSI, or

(cid:151) the type-examination procedure (module SB) indicated in Annex E to this TSI for the design and
development phase in combination with either the production quality assurance procedure (module
SD) indicated in Annex E to this TSI for the production phase or the product verification procedure
(module SF) indicated in Annex E to this TSI, or

(cid:151) the full quality assurance with design examination procedure (module SH2) indicated in Annex E to

this TSI.

The module SH2 may be chosen only where all activities contributing to the subsystem project to be
verified (design, manufacturing, assembling,
to a quality system for design,
production, final product inspection and testing, approved and surveyed by a notified body.

installation) are subject

(4) Module SH2 can be applied only when a sufficient degree of confidence in the ERTMS technologies exists through return of

experience from commercial installations.

Table 6.1

Control-command verification requirements for on-board assembly

1

2

2a

3

4

5

Number

Description

Remarks

CC interfaces

Interfacing TSI subsystems

Characteristics to be assessed by
reference to Annex A unless
otherwise specified

1

2

3

4

Vigilance supervision

Internal as a function in
on-board control-command or
external in RS subsystem

If vigilance supervision is
external, then optional interface
to ERTMS/ETCS on-board may
exist

Rolling stock (brakes)

0, 1, 2, 3, 4a, 10

Train integrity supervision

Train detection

In the case, where the train is
configured for level 3, the train
integrity supervision function
must be supported via detection
equipment rolling stock-side

Requirements on rolling stock,
because of e.g. track circuits
and axle counters

ERTMS/ETCS on-board

Rolling stock

0, 1, 2, 3, 4a, 5, 17

Rolling stock (train detection
characteristics)

4b, 16

Key management

Security policy for key
management

(a) ERTMS/ETCS trackside

(b) ERTMS/ETCS on-board

15

.

.

1
2
9
2
0
0
2

E
N

O

f
f
i
c
i
a
l

J
o
u
r
n
a
l

o
f

t
h
e

E
u
r
o
p
e
a
n

C
o
m
m
u
n
i
t
i
e
s

L

2
4
5
/
6
1

1

2

2a

3

4

5

Characteristics to be assessed by
reference to Annex A unless
otherwise specified

34

32

+

integration test requirements for
a specific Annex B system must
be available in public domain
when that system is put on the
market for integration into an
on-board assembly.

1, 2

Number

Description

Remarks

CC interfaces

Interfacing TSI subsystems

5

Design, integration and
validation of the assembly

1.

2.

Engineering rules

All those implemented

Rolling stock

All those implemented

Functional integration test

Tests to confirm correct
functional operation of
inter-working of a new
combination of
interoperability constituents

Tests in the real
configuration

The notified body shall
verify that the integration
test requirements (issued by
the Member State) for
Annex B systems have been
met

The test includes the ability
of the down-loading tool to
read and display the safety
data recorded

Includes absence of unsafe
interaction between
interoperability constituents
(possibly due to national
add-ons)

3. The notified body shall

insure the completeness of
the safety approval process
including safety case

L

2
4
5
/
6
2

E
N

O

f
f
i
c
i
a
l

J
o
u
r
n
a
l

o
f

t
h
e

E
u
r
o
p
e
a
n

C
o
m
m
u
n
i
t
i
e
s

.

.

1
2
9
2
0
0
2

Table 6.2

Control-command verification requirements for trackside assembly

1

2

2a

3

4

5

Number

Description

Remarks

CC interfaces

Interfacing TSI subsystems

Characteristics to be assessed by
reference to Annex A unless
otherwise specified

1

2

ERTMS/GSM-R trackside

(a) ERTMS/GSM-R on-board

0, 12c, 14a,

(b) ERTMS/ETCS trackside

Rolling stock (train detection
characteristics)

4b, 16

Train detection, including
interference requirements from
conducted interference

Trackside requirements:

1.

2.

3.

lines with unknown
detection/interference cha-
racteristics cannot receive a
derogation,

they must be upgraded
before they can be declared
interoperable,

a notified body shall verify
that nominated trains meet
the requirements of a
derogation

3

Key management

Security policy for key
management

ERTMS/ETCS trackside

ERTMS/ETCS on-board

15

.

.

1
2
9
2
0
0
2

E
N

O

f
f
i
c
i
a
l

J
o
u
r
n
a
l

o
f

t
h
e

E
u
r
o
p
e
a
n

C
o
m
m
u
n
i
t
i
e
s

L

2
4
5
/
6
3

1

2

2a

3

4

5

Characteristics to be assessed by
reference to Annex A unless
otherwise specified

34

33

1, 2

Number

Description

Remarks

CC interfaces

Interfacing TSI subsystems

4

Design, integration and
validation of the assembly

1.

Engineering rules

All those implemented

All those implemented

2.

Functional integration test

Tests to confirm correct
functional operation of
interworking of a new
combination of
interoperability constituents

Tests in the real
configuration

The notified body shall
verify that the integration
test requirements (issued by
the Member State) for Annex
B systems have been met

Includes absence of unsafe
interaction between
interoperability constituents
(possibly due to national
add-ons)

3. The notified body shall

insure the completeness of
the safety approval process
including safety case.

L

2
4
5
/
6
4

E
N

O

f
f
i
c
i
a
l

J
o
u
r
n
a
l

o
f

t
h
e

E
u
r
o
p
e
a
n

C
o
m
m
u
n
i
t
i
e
s

.

.

1
2
9
2
0
0
2

12.9.2002

EN

Official Journal of the European Communities

L 245/65

7. IMPLEMENTATION OF THE TSI CONTROL-COMMAND

7.1.

PRINCIPLES AND DEFINITIONS

As specified in Article 1 of Directive 96/48/EC,
the
trans-European high-speed rail system concern projects for and the construction, upgrading and operation of
the infrastructure and rolling stock which contribute to the functioning of the system to be put into service
after the date of entry into force of the Directive.

the conditions to achieve the interoperability of

Regarding infrastructures and rolling stock already in service when this TSI enters into force, the TSI shall be
applied when works are planned; however, the degree of application of the TSI varies as a function of the
entity of such works.

In the case of control-command, the criteria defined in the following sections shall be applied.

7.2.

SPECIFIC ISSUES OF IMPLEMENTATION OF THE TSI CONTROL-COMMAND

7.2.1.

INTRODUCTION

7.2.1.1.

General migration criteria

It is recognised that ERTMS cannot be installed on all existing high-speed routes instantly for reasons which
include installation capability aspects and economic considerations.

(pre-unified) situation and the universal application of
In the transition period between the current
control-command class A interfaces (5), there will be a number of interoperability solutions in the framework
of this TSI, for both the European high-speed infrastructure including connecting lines and the European
high speed trains. The unified concept recognises this and provision is made for modules known as STMs
(specific transmission modules) to be added to the unified ERTMS system to enable a train fitted with
appropriate STMs to operate over existing pre-unified infrastructure; alternatively an infrastructure may be
equipped with both class A and class B (6) systems.

7.2.1.2.

Use of class B systems for interoperable trains

In a migration phase from pre-unified national systems to the unified system, if only part of the fleet is
equipped with an on-board system able to handle the unified system according to class A,
it may be
neces-sary to have both systems fully or partially installed on a stretch of line.

There is no functional link between the two on-board systems except to manage transitions during train
operation (and as required to satisfy the needs of the STMs for class B systems when STMs are used).

From a purely functional point, a system may also be built combining components from the unified and a
pre-unified system. An example is the combination of an ERTMS/ETCS system level 1 using Eurobalise as a
spot-transmission means and an infill function not based on a unified solution, but on a national system.
This solution requires a data link between the unified and the pre-unified system. Therefore, the solution is
not in accordance with either class A or class B. It cannot be declared interoperable.

There is, however, the possibility to use the combination as a national enhancement of an interoperable line.
This is only permitted if trains not equipped with the data link between both systems can operate either on
the unified or on the pre-unified system without information from the other system. If this is not possible,
the line cannot be declared interoperable for the control-command subsystem.

(5) Class A: see section 2.
(6) Class B: see section 2.

L 245/66

EN

Official Journal of the European Communities

12.9.2002

7.2.1.3.

Compatibility with other trains

An interoperable infrastructure may be used for
trains not compliant with the
requirements of this TSI, according to Article 5(4) of Directive 96/48/EC, provided this does not create
prejudice to the fulfilment of essential requirements.

the movement of

Such trains may use a class B signalling infrastructure, if existing. ERTMS/ETCS also offers the possibility of
sending information for an on-board class B apparatus via class A track-to-train communication. If this
in any case full ERTMS/ETCS functionality shall be installed trackside and the
solution is applied,
corresponding information shall be sent to the trains, to allow movement of interoperable trains. Trains
equipped with on-board class B systems modified to receive information from class A track-to-train
communication may not be declared interoperable.

7.2.1.4.

Registers

For every implementation of the control-command subsystem on a given line, Annex C gives the list of the
requirements for the on-board, to be addressed in the registers of infrastructure (TEN HS), indicating if these
requirements concern M (7) or O (8) functions. These registers of infrastructure (TEN HS) shall be made
available so that the constraints on train configuration may be known.

7.2.1.5.

Timing criteria

ETCS and GSM-R are computer-based systems with a life expectancy significantly lower than current
traditional railway signalling and telecommunication facilities. As such, they call for a proactive rather than
reactive deployment strategy to avoid potential system obsolescence prior to system deployment reaching
maturity levels.

Notwithstanding this fact, the adoption of a too-fragmented deployment throughout the European rail
network, mainly along the trans-European rail corridors, would give rise to major cost and operational
overheads resulting from the needs to ensure backward compatibility and interconnection with a diversity of
legacy facilities. Moreover, synergies in terms of time, cost and risk reduction might be reached by the
reconciliation of common elements of different national implementation strategies (cid:151) namely through joint
procurement initiatives, collaboration in system validation and certification activities.

This manifold background calls for the setting-up of a coherent trans-European implementation plan for
ERTMS (ETCS and GSM-R) that should contribute to an harmonious development of the whole of the
trans-European rail network in compliance with the EU strategy for the TEN-transport network. Such a plan
implementation plans and should provide an appropriate
should build upon the corresponding national
knowledge base for decision support to the different stakeholders (cid:151) in particular, to the Commission in the
allocation of financial support to railway infrastructure projects.

The emergence of a coherent European plan will necessarily require that the specific national implementation
plans are underpinned by the adoption of a set of common generic guiding implementation principles that
should be adhered to during its elaboration by the relevant railway authorities. Based on the criteria and
requirements expressed in the previous paragraphs and the strategic objectives stated above these principles
shall foresee:

Trackside installations

The fitting of ETCS or, respectively, GSM-R in the case of:

(cid:151) new installations of signalling or radio part of a CC assembly,

(cid:151) an upgrade of the signalling or the radio part of a CC assembly already in service that changes the

functions or the performance of the subsystem,

(7) M functions: see section 4.
(8) O functions: see section 4.

12.9.2002

EN

Official Journal of the European Communities

L 245/67

On-board installations

The fitting of ETCS (if necessary complemented by STMs) or GSM-R in rolling stock intended for use on a
line including at least a section equipped with class A interfaces (even if superimposed to a class B system),
in the case of:

(cid:151) new installations of signalling or radio part of a CC assembly,

(cid:151) an upgrade of the signalling or the radio part of a CC assembly already in service that changes the

functions or the performance of the subsystem,

Legacy systems:

The assurance that class B interfaces and functions are to remain as specified and that the Member State
concerned shall provide the information required for their application, in particular, the information relevant
to their approval.

Any non-adherence to these general principles in the elaboration of a national implementation plan should
be justified by the Member State concerned on the basis of a file setting out the principles it wishes not to
apply and the technical, administrative or economic reasons which justify the non-adherence.

Once a trans-European implementation plan is completed, all activities
related to installation of
control-command subsystems have to be justified by the contracting entities against this implementation
that are in force. Any proposed
plan in addition to all other applicable legislative requirements
non-adherence by a contracting entity should be justified in the dossier submitted to the Member State in
accordance with Article 3 of this TSI Decision.

Necessarily, the ERTMS implementation plan will be an evolving document that will have to be updated in
order to reflect the real evolution of the deployment throughout the European rail network.

7.2.1.6.

Competition criteria

Any action to allow the movement of interoperable trains on other infrastructures or the movement of
non-interoperable trains on interoperable infrastructures shall ensure that free competition between suppliers
is not prejudiced. Specially, knowledge about relevant interfaces between already installed equipment and
new equipment to be purchased shall be put at the disposal of all the interested suppliers.

7.2.2.

IMPLEMENTATION: INFRASTRUCTURE (STATIONARY EQUIPMENT)

The following requirements apply to the three categories of line defined in Article 5c of the Directive:

(cid:151) lines specially built for high speed,

(cid:151) lines specially upgraded for high speed,

(cid:151) lines specially upgraded for high speed which have special features as a result of topographical, relief or

town-planning constraints.

The following cases in points 7.2.2.1, 7.2.2.2 and 7.2.2.3 (according to Article 1 of the Directive) apply to
the abovementioned categories.

7.2.2.1.

Lines to be constructed

Lines to be constructed shall be equipped with the class A functions and interfaces according to the
specifications referenced in Annex A. The control-command infrastructure shall provide the class A
interfaces for the trains.

7.2.2.2.

Lines to be upgraded (re-signalled)

When control-command and signalling is upgraded, a line shall be equipped with the class A functions and
interfaces according to the specifications given in Annex A. The control-command infrastructure shall
provide the class A control-command interfaces for the trains in the same way as for lines to be constructed.

L 245/68

EN

Official Journal of the European Communities

12.9.2002

The upgrade may concern separately the GSM-R radio part, the ETCS part and the train detection part of the
control-command subsystem.

After the upgrade the existing class B equipment may remain in use simultaneously with class A according
to point 7.2.1.2.

Class B control-command equipment trackside EMC limits may remain in use until the control-command
subsystem is upgraded.

in which a certain line is equipped with both class A and class B control-command
The time interval
equipment is a trackside transition phase. During this transition phase, it is allowed to use existing class B
equipment on-board as a fallback arrangement to class A system: this does not allow an infrastructure
manager to require class B systems on-board the interoperable trains for running on such a line.

7.2.2.3.

Existing lines

Lines existing before the entry in force of Directive 96/48/EC and, by extension and according to Article 7 of
the Directive, lines belonging to a project which is at an advanced stage of development when this TSI is
published may be declared as interoperable in the sense of this TSI (see Chapter 6) when they fulfil the
requirements of the control-command subsystem described in this TSI.

The existing class B control-command equipment may remain in use (without installation of class A systems)
during its life cycle, under the conditions indicated in point 7.2.1.5.

Class B control-command equipment trackside EMC limits may remain in use until the control-command
subsystem is upgraded.

7.2.2.4.

Registers of infrastructure (TEN HS)

When a line is declared interoperable, the infrastructure manager shall provide railway undertakings with
class A and class B information written down in the registers of infrastructure (TEN HS), following Annex C
requirements.

In case European specifications for some interface between control-command and signalling and other
subsystems are not available at the moment of installation (e.g., electromagnetic compatibility between train
detection and RS), the corresponding characteristics and the standards applied shall be indicated in the
registers of infrastructure (TEN HS).

This shall be possible, in any case, only for the items listed in Annex C.

7.2.3.

IMPLEMENTATION: ROLLING STOCK (ON-BOARD EQUIPMENT)

for high speed shall be equipped with class A
Rolling stock specially built or upgraded (re-signalled)
interfaces for use on the trans-European high-speed network and shall ensure that the on-board functions,
interfaces and minimum performance required by this TSI are included according to the routes concerned as
described in Annex C.

Rolling stock equipment providing class A interfaces shall be able to accommodate additional modules
providing class B interfaces (STMs) as may be required by the awarding authority.

Rolling stock equipped with only class B systems shall be considered acceptable for use on interoperable
lines equipped with class B interfaces when it fulfils the requirements of the control-command subsystem
described in this TSI. The existing class B control-command equipment may remain in use during its life
cycle.

When running on a line which is equipped with both class A and class B systems, the class B systems may
act as fallback arrangement for the class A system if the train is equipped with both class A and class B
systems.

Class B control-command equipment on-board shall not interfere with other TSI subsystems nor with the
other equipment installed upon the infrastructure of the European high-speed network.

12.9.2002

EN

Official Journal of the European Communities

L 245/69

Class B control-command equipment on-board shall not be susceptible to emissions from other TSI
subsystems.

7.2.3.1.

Registers of rolling stock (TEN HS)

When a train is declared interoperable, the train specific implementation for the on-board assembly is
defined in the registers of rolling stock (TEN HS) following Annex C requirements.

In case European specifications for some interface between control-command and signalling and other
subsystems are not available at the moment of installation (e.g., electromagnetic compatibility between train
detection and rolling stock, climatic conditions and physical conditions in which the train can work,
geometric parameters of the train like length, maximal distance of axles in the train, length of the nose of
the first and of the last car of the train, braking parameters), the corresponding characteristics and the
standards applied shall be indicated in the registers of rolling stock (TEN HS).

This shall be possible, in any case, only for the items listed in Annex C.

7.2.4.

CONDITIONS UNDER WHICH (cid:145)O(cid:146) FUNCTIONS ARE REQUIRED

The (cid:145)O(cid:146) functions are required in the following cases:

1.

an ETCS level 3 trackside assembly requires train integrity supervision on-board;

2.

an ETCS level 1 trackside assembly with infill requires corresponding infill functionality on-board if the
release speed is set to zero for safety reasons (e.g. protection of danger points);

3. when ETCS requires data transmission by radio the data transmission services of GSM-R shall be

implemented.

7.2.5.

CHANGE CONTROL PROCEDURE

During the life cycle of
requirements must be managed in the interest of interoperability.

the control-command and signalling subsystem,

the evolution of

the TSI

Any evolution concerning class A and class B functions and interfaces must be controlled following a
procedure to be established by the joint representative body applying Article 6(2) of Directive 96/48/EC.

ANNEX A

SPECIFICATIONS FOR INTEROPERABILITY

This Annex deals with requirements of this TSI only.

ERTMS references are to be reviewed after the consolidation phase.

The complete text of a specification is relevant for this TSI, unless otherwise indicated.

The European specifications quoted in this TSI are grouped into two columns: (cid:145)European specifications defining basic parameters(cid:146) and (cid:145)Other European specifications(cid:146). To ensure interoperability, those European
specifications defining basic parameters must be fully applied in every implementation; alternative solutions to satisfy the essential requirements are not allowed.

GLOBAL REQUIREMENTS

Subject (1)

Scope (2)

European specifications defining
basic parameters

Other European specifications

Index No

Control-com-
mand TSI
paragraph
reference

0a

4.1.1

ETCS FRS

0b

4.1.1

GSM-R FRS

1

2

2a

3.2.1

Safety assurance

Informative documentation: prEN 50128

RAMS

Safety requirements

3.2.1
4.1.1

2b

3.2.2e

Reliability-availability- requirements

ERTMS/96s1266-(RAM chapter)
information

to be used as input

Informative documentation: EEIG 02S1266- version 6

2c

3.2b

Quality of maintenance

3

3.2.5.1.1
4.2.1.2d

Environmental physical conditions

The procedures
maintenance of control-command equipment
judged

against which the quality of

the
is to be

The minimum requirements
humidity, shock, vibration etc.
equipment shall respect
network.

upon

temperature,
that control-command
for use upon the high-speed

Informative documentation: EEIG 97S0665- version 5,
prEN50125-3

UIC ETCS FRS version
4.29
EEIG 99E5362 version
2.00

EIRENE FRS version 5.0

EN50126 September 1999

ENV50129 May 1998

ESROG
(reserved)

Reserved

ENV50129 May 1998

EN 50126 September 1999

EN 29000 and EN 29001

Reserved

EN 50125-1 September 1999
and EN 50155 November 1995

L

2
4
5
/
7
0

E
N

O

f
f
i
c
i
a
l

J
o
u
r
n
a
l

o
f

t
h
e

E
u
r
o
p
e
a
n

C
o
m
m
u
n
i
t
i
e
s

.

.

1
2
9
2
0
0
2

Index No

Control-com-
mand TSI
paragraph
reference

Subject (1)

Scope (2)

European specifications defining
basic parameters

Other European specifications

4

4a

3.2.5.1.2

Electromagnetic compatibility:

3.2.5.1.2
4.2.1.2d

Electromagnetic compatibility

ERTMS/97s0665- to be used as input document.

For on-board equipment:

For the purpose of EMC, frequency bands for intentional
transmission (Eurobalise, Euroloop, and GSM-R) are
excluded from the specifications indicated in this index.

Specific requirements
indicated in index 12a.

Specific requirements
indicated in index 12b.

for

the Eurobalise air-gap are

for

the Euroloop air-gap are

Specific requirements for GSM-R air-gap are indicated in
index 12c.

EN 50121-3-2, September 2000, tables 4 and
6 in clause 7. Clauses 4, 5, and 6 are
applicable for testing procedures.

EN 50121-3-2, September 2000, tables 7, 8,
and 9 in clause 8. Clauses 4, 5, and 6 are
applicable for testing procedures.

For trackside equipment:

EN 50121-4, September 2000, clause 5,

EN 50121-4, September 2000, clause 6.

4b

3.2.5.1.2b
4.2.1.2f

immunity characteristics of

The
detection systems

train

To ensure that train detection systems are not perturbed
by traction current.

(reserved)

(1) This is the subject addressed in the paragraph referenced in the TSI.
(2) This is a description of the intent of the standard required to support the TSI.

for European specification is contained in the

Input
report to TSI CC.

CONTROL COMMAND FUNCTIONS

Control-com-
mand TSI
paragraph
reference

Index No

5

Subject (1)

Scope (2)

European specifications defining
basic parameters

Other European specifications

Provision of cab-signalling logic and ATP
logic and associated functions.

5a

4.1.1

Normal operation

Scenarios ERTMS99E807 is input for test specifications

Informative documentation: Unisig subset-050-V200,
Unisig subset-030-V200, Unisig subset-031-V200, Unisig
subset-032-V200

Test requirements (to be
added in the next version
of this TSI)
Unisig subset-026-V222
Unisig subset-043-V200
Unisig subset-046-V200
Unisig subset-047-V200
Unisig subset
Unisig subset-054-V200
Unisig subset-055-V222

.

.

1
2
9
2
0
0
2

E
N

O

f
f
i
c
i
a
l

J
o
u
r
n
a
l

o
f

t
h
e

E
u
r
o
p
e
a
n

C
o
m
m
u
n
i
t
i
e
s

L

2
4
5
/
7
1

Index No

Control-com-
mand TSI
paragraph
reference

Subject (1)

Scope (2)

European specifications defining
basic parameters

Other European specifications

5b

4.1.1

Degraded operation

The system requirements in response to failures

Unisig subset-026-V222

ERTMS/97E832 to be used as
specification

input

for European

6

4.1.1
4.1.2.2

STM management

The functional and physical requirements on the STM
interface to the Class A system

KER compatibility is to be addressed

Informative documentation: Unisig
Unisig subset-059-V200

subset-058-V200

Unisig subset-035-V200
Unisig subset-026-V222
Unisig subset-056-V200
Unisig subset-057-V200

7

4.1.1

MMI
requirements.

driver

interface

functional

Unisig subset-033-V200
Unisig subset-026-V222
Unisig subset-035-V200

The functional specification for communication between
the driver and the on-board assembly. The driver’s
is required for driving e.g. cab
displays states what
signals, warning of
It includes the input
train characteristics, override functions,
functions e.g.
required for interoperable control-command purposes. It
also includes the display of text messages

intervention.

The cab signals define the minimum range of parameters
made available in the cab that together satisfy all the
circumstances that could be found upon the railways of
the European high-speed network and that
therefore
make a system common for the whole network feasible.
Such parameters would be permitted speed, target speed,
target distance, that are the basis of cab-signalling and
ATP.

L

2
4
5
/
7
2

E
N

O

f
f
i
c
i
a
l

J
o
u
r
n
a
l

o
f

t
h
e

E
u
r
o
p
e
a
n

C
o
m
m
u
n
i
t
i
e
s

Informative documentation: Cenelec WGA9D V21.DOC
12/04/2000, Cenelec WGA9D V05 DOC 27/03/2000,
Cenelec WGA9D V11.DOC 12/04/2000, Cenelec
WGA9D V06.DOC 12/01/2000, Cenelec WGA9D
Cenelec WGA9D
V08NS.DOC
V04.DOC 27/03/2000

27/03/2000

and

8

4.1.1

Odometry requirements

The functional requirements of the odometry subsystem
required to support the range of performance expected
of
the equipment providing the class A interfaces.
Location accuracy depends on odometry and the distance
between balises. The requirements for speed and distance
measurements on an interoperable train.

Note relation with index 6, STM

Unisig subset-041-V200

.

.

1
2
9
2
0
0
2

Index No

Control-com-
mand TSI
paragraph
reference

Subject (1)

Scope (2)

European specifications defining
basic parameters

Other European specifications

9

4.1.1

Requirements for the on-board recording
of operational data

The requirements for the choice of data parameters,
regularity, accuracy, validation checks for the purposes
of inspecting the proper driving of the train and the
behaviour of
the
safety related systems
requirements of the legal authorities in all Member States
can be met

such that

Unisig subset-026-V222
Unisig subset-027-V200

10

4.1.1

Vigilance
requirements

(dead

man’s)

system

The definition of a vigilance function so that the train
can operate acceptably on the European networks

to be aware of

Vigilance ensures that the driver is sufficiently alert (and
by implication sufficiently alert
the
signalling). If a timer is used, the timer can be reset by
other driver actions on the train controls,
traction
controller, brakes, cab warning acknowledgement. It can
be associated with a need to hold a lever in a given
position (dead man function). The functionality required
of the vigilance can be modified by the status of ATP
and any cab warning system

and

systems

cab warning

Vigilance, ATP
are
safety-related systems in the sense that they support the
driver and provide protection to the train in the event of
human inadequacy. The level of safety is determined by
all these systems, and they are interdependent
in the
sense that the presence or absence of one can affect the
the
functionality of
safety issues is facilitated by considering these systems to
be in the scope of control-command.

the others. The management of

11

4.1.1
4.2.1.2e

Radio

The definition of the radio system for voice and data
communication to and from the trains

UIC 641 is to be the basis for European specification

Eirene SRS
version 13
Test requirements (to be
added in the next version
of this TSI)

(1) This is the subject addressed in the paragraph referenced in the TSI.
(2) This is a description of the intent of the standard required to support the TSI.

.

.

1
2
9
2
0
0
2

E
N

O

f
f
i
c
i
a
l

J
o
u
r
n
a
l

o
f

t
h
e

E
u
r
o
p
e
a
n

C
o
m
m
u
n
i
t
i
e
s

L

2
4
5
/
7
3

INTERFACES BETWEEN ONBOARD AND TRACKSIDE ASSEMBLIES

Index No

Control-com-
mand TSI
paragraph
reference

Subject (1)

Scope (2)

European specifications defining
basic parameters

Other European specifications

12

12a

Data-transmission interfaces (cid:151) between
the train and the ground

3.2.5.1.2
4.1.2.1

Balise

With reference to the Article 21 Committee Decision
DV07, the details of the frequencies used are included in
the European specifications. Technical compatibility with
some class B systems requires the toggling function as
defined in the European specifications. This is to be
considered acceptable from the point of view of EMC

12b

3.2.5.1.2
4.1.2.1

Loop

Informative documentation: Unisig subset-050-V200

12c

3.2.5.1.2
4.1.2.1

Radio

With reference to the Article 21 Committee Decision
DV07, the details of the frequencies used are included in
the European specifications

(1) This is the subject addressed in the paragraph referenced in the TSI.
(2) This is a description of the intent of the standard required to support the TSI.
(3) The applicable up-link and tele-powering frequency ranges are defined in Unisig subset-036-V200.

Unisig subset-036-V200
EUROSIG/WP3.1.2.3
ABB007
ABB020
ABB009
GA0347
Test requirements (to be
added in the next version
of this TSI)

Unisig subset-043-V200
Unisig subset-044-V200
Unisig subset-045-V200
Test requirements (to be
added in the next version
of this TSI)

CEPT TR25-09
Test requirements (to be
added in the next version
of this TSI)

ETSI EN 300 330-1, V1.3.1 (July 2000), up
to and including sub-clause 7.2 (3)

ETSI GSM TS phase 2

L

2
4
5
/
7
4

E
N

O

f
f
i
c
i
a
l

J
o
u
r
n
a
l

o
f

t
h
e

E
u
r
o
p
e
a
n

C
o
m
m
u
n
i
t
i
e
s

.

.

1
2
9
2
0
0
2

INTERFACES ONBOARD BETWEEN CONTROL-COMMAND INTEROPERABILITY CONSTITUENTS

Index No

Control-com-
mand TSI
paragraph
reference

Subject (1)

Scope (2)

European specifications defining
basic parameters

Other European specifications

.

.

1
2
9
2
0
0
2

13

On-board data communication interfaces

data

interfaces

The
control-command
equipment supporting the cab signalling and automatic
train protection functions, and between these functions
and the train

between

13a

4.1.2.2

Radio

Note, Unisig
29.03.2000 are informative

subset-037-022A and

-023a

dated

Radio transmission FFFIS for Euroradio

13b

4.1.2.2

Train data
interface
operational data recorded on-board

for

analysis of

communications

The
high-speed network,
stored in the
readability across all interested parties

common
to the data analyser of

control-command systems

interface,

to
the
the data
to ensure

13c

4.1.2.2

Odometry interfaces

ERTMS/97e267 is
specification

to be the basis

for a European

A specification will not be available in the first step

(1) This is the subject addressed in the paragraph referenced in the TSI.
(2) This is a description of the intent of the standard required to support the TSI.

Unisig subset-026-V222
Unisig subset-034-V200
Unisig subset-047-V200
Unisig subset-037-V200
Unisig subset-093-V200
Morane A11T6001-3
(July 1998)
Unisig subset-048-V200
Unisig subset-049-V200

Unisig subset-027-V200

E
N

O

f
f
i
c
i
a
l

J
o
u
r
n
a
l

o
f

t
h
e

E
u
r
o
p
e
a
n

C
o
m
m
u
n
i
t
i
e
s

L

2
4
5
/
7
5

Control-com-
mand TSI
paragraph
reference

Index No

14

INTERFACES AT THE TRACKSIDE BETWEEN CONTROL-COMMAND INTEROPERABILITY CONSTITUENTS

Subject (1)

Scope (2)

European specifications defining
basic parameters

Other European specifications

Trackside data communication interfaces
between:

14a

4.1.2.3

ERTMS/GSMR and ERTMS/ETCS

14b

14c

14d

4.1.2.3

Eurobalise and LEU

4.1.2.3

Euroloop and LEU

4.1.2.3

ERTMS/ETCS and ERTMS/ETCS

(RBC-RBC-handover)

15

4.2.4

Key management

(1) This is the subject addressed in the paragraph referenced in the TSI.
(2) This is a description of the intent of the standard required to support the TSI.

Unisig subset-026-V222
Unisig subset-037-V200
Unisig subset-093-V200
Morane A11T6001-3
(July 1998)
Unisig subset-049-V200

Unisig subset-036-V200

Unisig subset-045-V200

Unisig subset-039-V200

Informative documentation: Unisig subset-051-V200,
Unisig subset-060-V111

Unisig subset-038-V200

L

2
4
5
/
7
6

E
N

O

f
f
i
c
i
a
l

J
o
u
r
n
a
l

o
f

t
h
e

E
u
r
o
p
e
a
n

C
o
m
m
u
n
i
t
i
e
s

.

.

1
2
9
2
0
0
2

Index No

Control-com-
mand TSI
paragraph
reference

16

4.2.1.2b

COMPATIBILITY (NOT EMC) BETWEEN TRAINS AND TRACK-CIRCUITS

Subject (1)

Scope (2)

European specifications defining
basic parameters

Other European specifications

Rolling stock characteristics necessary to
be
train-detection
with
systems

compatible

The specification that the rolling stock must respect in
order that
it will operate the train detection systems
correctly

See Annex A

To be completed, e.g., to take into account inductivity in
case of axleless wheelsets and minimum axleload

(1) This is the subject addressed in the paragraph referenced in the TSI.
(2) This is a description of the intent of the standard required to support the TSI.

DATA INTERFACES BETWEEN CONTROL-COMMAND AND ROLLING-STOCK

Index No

Control-com-
mand TSI
paragraph
reference

Subject (1)

Scope (2)

European specifications defining
basic parameters

Other European specifications

17

4.2.1.2e

Train interfaces

To cover all data concerned by interoperability that may
pass between the train and control-command equipment

Unisig subset-034-V200

(1) This is the subject addressed in the paragraph referenced in the TSI.
(2) This is a description of the intent of the standard required to support the TSI.

Index No

Control-com-
mand TSI
paragraph
reference

Subject (1)

CONTROL-COMMAND PERFORMANCE

Scope (2)

European specifications defining
basic parameters

Other European specifications

18

4.1.1
4.3

Performance required

Annexes
performance definitions of the high-speed network

I and IV to Directive 96/48/EC set out

Unisig subset-041-V200

(1) This is the subject addressed in the paragraph referenced in the TSI.
(2) This is a description of the intent of the standard required to support the TSI.

.

.

1
2
9
2
0
0
2

E
N

O

f
f
i
c
i
a
l

J
o
u
r
n
a
l

o
f

t
h
e

E
u
r
o
p
e
a
n

C
o
m
m
u
n
i
t
i
e
s

L

2
4
5
/
7
7

Index No

Control-com-
mand TSI
paragraph
reference

Subject (1)

Scope (2)

European specifications defining
basic parameters

Other European specifications

VERIFICATION REQUIREMENTS

32 (3)

6.2

On-board
requirements

assembly

integration

This shall be sufficient
assembly will operate
assemblies
considering
(subsystem-verification
options as indicated in the register of rolling stock)

to ensure that
correctly with the

the on-board
trackside
the

Unisig subset
(reserved)

Practical running tests have to be performed after the
installation of on-board control-command equipment

Special attention shall be given to electromagnetic
compatibility between CC and rolling stock

33

6.2

Trackside
requirements

assembly

integration

This shall be sufficient
assembly will operate
assemblies
considering
(subsystem verification
options as indicated in the register of infrastructure)

the trackside
to ensure that
correctly with the on-board
the

Unisig subset
(reserved)

34

35

Table 6.1
Table 6.2

Installation requirements

The engineering rules that apply when installing the
control-command assembly on-board and trackside
respectively

Unisig subset-040-V200

Glossary of terms and abbreviations

Unisig subset-023-V200

(1) This is the subject addressed in the paragraph referenced in the TSI.
(2) This is a description of the intent of the standard required to support the TSI.
(3) Index Nos 19 to 31 are intentionally deleted.

L

2
4
5
/
7
8

E
N

O

f
f
i
c
i
a
l

J
o
u
r
n
a
l

o
f

t
h
e

E
u
r
o
p
e
a
n

C
o
m
m
u
n
i
t
i
e
s

.

.

1
2
9
2
0
0
2

12.9.2002

EN

Official Journal of the European Communities

L 245/79

(SPECIFICATIONS FOR INTEROPERABILITY)

(cid:151) to be updated (cid:151)

Requirements from the control-command subsystem on the rolling stock subsystem upon obligatory
conditions to be fulfilled in order to support the operation of track circuits and treadles (including (cid:145)axle
counters(cid:146))

These requirements apply to interoperable high-speed trains according to Directive 96/48/EC and the TSI rolling stock.
The term wheelset shall apply to any pair of wheels, even without a common axle.

Electrical resistance between tyres of a wheelset (or parts of the wheels replacing the tyres) of an empty vehicle:

(cid:151) less than 0,01 Ohm when new or after re-tyring,

(cid:151) less than 0,1 Ohm after overhaul of wheel sets with tyred wheels (without replacement of the tyre).

Conditions for measurement:

(cid:151) voltage between 1,8 V and 2,0 V.

The distance between adjacent wheelsets must not exceed 17,5 m (16,4 m for running in the United Kingdom).

The distance between the front/end wheelset and the buffer head must not exceed 4,2 m.

L 245/80

EN

Official Journal of the European Communities

12.9.2002

ANNEX B

CLASS B

USE OF ANNEX B

This Annex presents the train-protection, control and warning systems and radio systems that predate the introduction
of the class A train control systems and radio systems and that are authorised for use on the European high-speed
network up to speed limits defined by the responsible Member State. These class B systems were not developed under
unified European specifications, and therefore there may be proprietary specification rights with their suppliers. The
provision and maintenance of these specifications shall not conflict with national regulations (cid:151) especially those
concerning patents.

During the transition phase in which these systems will be gradually replaced by the unified system, there will be a
need to manage the engineering specifications in the interests of interoperability. This is the responsibility of the
Member State concerned or its representative in cooperation with the respective system supplier in accordance with
point 7.2.1.5 of this TSI.

Train operators needing to install one or more of these systems on their trains shall refer to the appropriate Member
State. Annex C manages the corresponding geographical distribution of each system, requiring for each line a register
of infrastructure describing the equipment type and the associated operational arrangements. By means of the register
of infrastructure, the infrastructure manager ensures the coherence between the system and the rulebook under his
authority.

The Member State shall provide to the train operator the advice necessary to obtain a safe installation compatible with
the requirements of this TSI and Annex C.

The class B installations shall include the fallback arrangements, as required by Annex C.

For the class B systems, this Annex provides basic information. For each system listed, the Member State identified shall
guarantee that its interoperability is maintained and shall provide the information required for the purposes of its
application, in particular the information relevant to its approval.

PART 1: SIGNALLING

INDEX:

0. Use of Annex B

1. ASFA

2. ATB

3. BACC

4. Crocodile

5.

Ebicab

6.

Indusi/PZB

7. KVB

8.

LZB

9. RSDD

10. SELCAB

11. TBL

12. TPWS

13. TVM

14. ZUB 123

12.9.2002

EN

Official Journal of the European Communities

L 245/81

For information only, systems not used in Member States:

15. EVM

16. LS

17. ZUB 121

Remarks:

(cid:151) The selection of systems is based on the list elaborated in the EU research project EURET 1.2.

(cid:151) System 9 (RSDD) was accepted as an additional system in the TSI meeting on 26 February 1998 in Paris.

(cid:151) System 12 (TPWS) was accepted at the 26th AEIF Board meeting. TPWS on-board equipment includes the AWS

functions.

(cid:151) System 15 (EVM) is for information only, as Hungary is not a Member State.

(cid:151) System 16 (LS) is for information only, as the Czech Republic and the Slovak Republic are not Member States.

(cid:151) System 17 (ZUB 121) is for information only, as Switzerland is not a Member State.

(cid:151) It is accepted that systems 14 and 17 (ZUB 123 and ZUB 121) are not compatible for mechanical reasons and

therefore have individual descriptions.

ASFA

Description:

ASFA is a cab-signalling and ATP system installed on most lines of RENFE (1 676 mm), on metre gauge lines of FEVE,
and on the new European gauge NAFA line.

ASFA is found on all lines being considered for interoperability.

Track-to-train communication is based on magnetically coupled resonant circuits in such a way that nine different data
can be transmitted. A resonant circuit trackside is tuned to a frequency representing the signal aspect. The magnetically
coupled on-board PLL is locked to the trackside frequency. The system is safety related, not fail safe, but safe enough to
supervise the driver. It reminds the driver of the signalling conditions and obliges him to acknowledge restrictive
aspects.

The trackside and on-board units are of conventional design.

Main characteristics

(cid:151) Nine frequencies

range: 55 kHz to 115 kHz

(cid:151) Three different train categories can be selected on-board

(cid:151) Supervision:

(cid:151) acknowledgement of restrictive signal by driver within three seconds

(cid:151) continuous speed supervision (160 km/h or 180 km/h) after passing restrictive signal

(cid:151) speed check (60 km/h, 50 km/h or 35 km/h depending on train type) after passing a transponder 300 m in

rear of signal

(cid:151) train trip at signal at danger

(cid:151) line speed.

L 245/82

EN

Official Journal of the European Communities

12.9.2002

(cid:151) Reaction:

the emergency brake is called if any supervision is violated. The emergency brake can be released at standstill.

(cid:151) Responsible Member State: Spain

ATB

ATB exists in two basic versions: ATB first generation and ATB new generation.

Description of ATB First Generation:

ATB first generation is installed on the vast majority of lines of NS.

The system consists of coded track circuits of rather conventional design and a computerised (ACEC) or conventional
electronic (GRS) on-board equipment.

The data transmission between coded track circuits and on-board equipment is via inductively coupled air coil pick-up
antennae above the rails.

Main characteristics

(cid:151) Data transmission to trains:

(cid:151) 75 Hz carrier frequency

(cid:151) AM modulated speed codes

(cid:151) six speed codes (40, 60, 80, 130, 140) km/h

(cid:151) one exit code

(cid:151) No train characteristics on board (speed code from wayside)

(cid:151) Display to driver:

(cid:151) speed corresponding to speed code

(cid:151) gong in case of code change

(cid:151) bell in case the system requests brake application

(cid:151) Supervision:

(cid:151) speed (continuous)

(cid:151) Reaction:

the emergency brake is called in the case of overspeed and the driver does not react to an acoustic warning.

Responsible Member State: the Netherlands

Description of ATB new generation:

ATC system partially installed on lines of NS.

The system consists of trackside balises and on-board equipment. An infill function based on a cable loop is also
available.

The data transmission is between the active balise and an antenna on-board. The system is direction sensitive, the
balises are mounted between the rails with a small offset from the centre.

ATBNG on-board equipment is fully interoperable with ATB first generation trackside equipment.

12.9.2002

EN

Official Journal of the European Communities

L 245/83

Main characteristics

(cid:151) Data transmission to trains:

(cid:151) 100 kHz +/- 10 kHz (FSK)

(cid:151) 25 kbit/sec

(cid:151) 119 useful bits per telegram

(cid:151) Train characteristics as input by the driver:

(cid:151) train length

(cid:151) maximum train speed

(cid:151) train braking characteristics

(cid:151) Displays to the driver:

(cid:151) maximum line speed

(cid:151) target speed

(cid:151) target distance

(cid:151) braking curve

(cid:151) Supervision:

(cid:151) line speed

(cid:151) speed restrictions

(cid:151) stopping point

(cid:151) dynamic brake profile

(cid:151) Reaction:

(cid:151) optical pre warning

(cid:151) acoustic warning

The emergency brake is called in the case of movement supervision is violated or the driver does not react to an
acoustic warning.

(cid:151) Responsible Member State: the Netherlands

BACC

Description:

BACC is installed on all lines exceeding 200 km/h on the network of FS and other lines, which are most of the lines
under consideration for interoperability.

The system consists of conventional coded track circuits which operate at two carrier frequencies to deal with two train
classes. The on-board equipment is computerised.

The data transmission between coded track circuits and on-board equipment is via inductively coupled air coil pick-up
antennae above the rails.

Main characteristics

(cid:151) Data transmission to trains:

(cid:151) 50 Hz carrier frequency

(cid:151) AM modulated speed codes

(cid:151) five speed codes

L 245/84

EN

Official Journal of the European Communities

12.9.2002

(cid:151) 178 Hz carrier frequency

(cid:151) AM modulated speed codes

(cid:151) four additional speed codes

(cid:151) Two possible train categories on board (speed code from wayside)

(cid:151) Display to driver:

(cid:151) speed corresponding to speed code

(cid:151) signal aspect (one out of 10)

(cid:151) Supervision:

(cid:151) speed (continuous)

(cid:151) stopping point

(cid:151) Reaction:

Emergency brake in case of overspeed

(cid:151) Responsible Member State: Italy

Crocodile

Description:

Crocodile is installed on all major lines of RFF, SNCB and CFL. Crocodile is found on all lines under consideration for
interoperability.

The system is based on an iron bar in the track which is physically contacted by a brush on-board the train. The bar
carries a tension of +/- 20V from a battery depending on the signal aspect. There is an indication to the driver and the
driver has to acknowledge the warning. If not acknowledged, an automatic brake action is triggered. Crocodile does not
supervise any speed or distance. It only acts as a vigilance system.

The trackside and on-board units are of conventional design.

Main characteristics

(cid:151) DC powered bar (– 20 V)

(cid:151) No train characteristics on-board

(cid:151) Supervision:

acknowledgement by driver

(cid:151) Reaction:

the emergency brake is called if the warning is not acknowledged. The emergency brake can be released after
standstill.

(cid:151) Responsible Member States: Belgium, France, Luxembourg

Ebicab

Ebicab exists in two versions: Ebicab 700 and Ebicab 900.

Description of Ebicab 700:

Fail-safe standard ATP system in Sweden, Norway, Portugal and Bulgaria. Identical software in Sweden and Norway
enables cross-border trains without changing drivers or locomotives despite different signal systems and rules; different
software in Portugal and Bulgaria.

12.9.2002

EN

Official Journal of the European Communities

L 245/85

The system consists of track side, balises and signal encoders or serial communication with electronic interlocking, and
on-board computerised equipment.

The data transmission is between passive trackside balises (two to five per signal) and an on-board antenna underneath
the vehicle which also supplies the balise with energy when passing. The coupling between balise and on-board is
inductive.

Main characteristics

(cid:151) Energising balises:

(cid:151) 27,115 MHz

(cid:151) amplitude modulation for clock pulses

(cid:151) 50 kHz pulse frequency

(cid:151) Data transmission to trains:

(cid:151) 4,5 MHz

(cid:151) 50 kb/s

(cid:151) 12 useful bits of total 32 bits

(cid:151) Linking:

(cid:151) signals are linked

(cid:151) boards, e.g. warning and speed boards are not necessarily linked, 50 % unlinked balises are acceptable for fail

safety

(cid:151) Train characteristics can be input by the driver:

(cid:151) maximum train speed

(cid:151) train length

(cid:151) train braking characteristics

(cid:151) specific properties of train for either allowing overspeeding or enforcing slow driving on specific sections

(cid:151) surface conditions

(cid:151) Displays to the driver:

(cid:151) maximum line speed

(cid:151) target speed

(cid:151) advanced information on secondary targets for distance-to-go signalling or speed step signalling, five blocks

may be supervised

(cid:151) speed restrictions beyond first signal

(cid:151) time to service brake intervention, three warnings

(cid:151) faults in way side or vehicle equipment

(cid:151) value of last retardation

(cid:151) brake pipe pressure and current speed

(cid:151) information in last passed balise

(cid:151) auxiliary information

L 245/86

EN

Official Journal of the European Communities

12.9.2002

(cid:151) Supervision:

(cid:151) line speed, depending on overspeeding track capability and vehicle performance or enforcement of low speed

for specific trains

(cid:151) multiple targets including signal information without optical signals

(cid:151) permanent, temporary and emergency speed restrictions may be implemented with unlinked balises

(cid:151) stopping point

(cid:151) dynamic brake profile

(cid:151) level crossing and landslide detector status

(cid:151) shunting

(cid:151) roll-away protection

(cid:151) slip compensation

(cid:151) authorised passing signal at stop, 40 km/h is supervised until the next main signal

(cid:151) Reaction:

audible warning when > 5 km/h, service brake when > 10 km/h over-speed. The service brake can be released by
the driver when speed is within limits. Ebicab will brake sufficiently regardless of driver action. The emergency
brake is only used in a real emergency e.g. where service braking is not sufficient. Release of emergency brake can
occur when train is stationary.

(cid:151) Implemented options:

(cid:151) radio block system with (cid:145)ETCS Level 3 like(cid:146) functionality

(cid:151) train-to-track communication

(cid:151) Responsible Member States: Portugal, Sweden

Description of Ebicab 900:

The system consists of track-side, balises and signal encoders or serial communication with electronic interlocking, and
on-board computerised equipment.

The data transmission is between passive track side balises (two to four per signal) and an on-board antenna
underneath the vehicle which also supplies the balise with energy when passing. The coupling between balise and
on-board is inductive.

Main characteristics

(cid:151) Energising balises:

(cid:151) 27 MHz

(cid:151) amplitude modulation for clock pulses

(cid:151) 50 kHz pulse frequency

(cid:151) Data transmission to trains:

(cid:151) 4,5 MHz

(cid:151) 50 kb/s

(cid:151) 255 bits

(cid:151) Linking:

(cid:151) signals are linked

(cid:151) boards, e.g. warning and speed boards are not necessarily linked, 50 % unlinked balises are acceptable for fail

safety

12.9.2002

EN

Official Journal of the European Communities

L 245/87

(cid:151) Train characteristics can be input by the driver:

(cid:151) train identification

(cid:151) maximum train speed

(cid:151) train length

(cid:151) train braking characteristics

(cid:151) train speed type (only if the train speed is between 140 km/h to 300 km/h)

(cid:151) train pressurisation

(cid:151) Displays to the driver:

(cid:151) limit speed

(cid:151) target speed

(cid:151) overspeed

(cid:151) efficacy

(cid:151) ASFA alarm

(cid:151) brake rearmament

(cid:151) running past allowed

(cid:151) END

(cid:151) audible warning

(cid:151) braking pre-warning

(cid:151) red indicator

(cid:151) alphanumeric display

(cid:151) Supervision:

(cid:151) line speed, depending on overspeeding track capability and vehicle performance or enforcement of low speed

for specific trains

(cid:151) multiple targets including signal information without optical signals

(cid:151) permanent, temporary and emergency speed restrictions may be implemented with unlinked balises

(cid:151) stopping point

(cid:151) dynamic brake profile

(cid:151) level crossing and landslide detector status

(cid:151) shunting

(cid:151) roll away protection

(cid:151) slip compensation

(cid:151) authorised passing signal at stop, 40 km/h is supervised until the next main signal

(cid:151) Reaction:

Audible warning when > 3 km/h, service brake when > 5 km/h over-speed. The service brake can be released by
the driver when speed is within limits. Ebicab will brake sufficiently regardless of driver action.

(cid:151) Responsible Member State: Spain

L 245/88

EN

Official Journal of the European Communities

12.9.2002

Indusi/PZB

(Induktive Zugsicherung/Punktf(cid:246)rmige Zugbeeinflussung)

Description

ATP system which is installed on lines in Austria and Germany under consideration for interoperability.

Magnetically coupled resonant circuits trackside and on-board transmit one information out of three to the train. The
system is not considered fail safe, but safe enough to supervise the driver. It acts completely in background mode, that
means that is does not give the driver any indications about signal aspects, it only indicates that the train is supervised.

Main characteristics

(cid:151) Three frequencies:

(cid:151) 500 Hz

(cid:151) 1 000 Hz

(cid:151) 2 000 Hz

(cid:151) Train characteristics can be input by the driver:

braking characteristics (braking percentage and braking regime for three supervision categories)

(cid:151) Supervision:

(cid:151) hardware version (not for Germany):

(cid:151) 500 Hz: immediate speed supervision

(cid:151) 1 000 Hz: acknowledgement of restrictive signal aspect, speed supervision depends on type of train

(cid:151) 2 000 Hz: immediate stop

(cid:151) microprocessor version:

(cid:151) 500 Hz: immediate speed supervision and following braking curve supervision

(cid:151) 1 000 Hz: acknowledgement of restrictive signal aspect, speed supervision depends on program with
different braking curves, supervision by means of time and speed values for a limited distance; braking
curves (over time and distance) triggered by 1 000 Hz, additionally over distance triggered by 500 Hz

(cid:151) 2 000 Hz: immediate stop

(cid:151) Reaction:

the emergency brake is called if supervision is violated. The emergency brake can be released under special
conditions.

(cid:151) Responsible Member States: Austria, Germany

KVB

Description:

Standard ATP system in France on the network of RFF; technically similar to Ebicab; partially installed on high-speed
lines for some spot transmission and for supervision of temporary speed restrictions when speed levels are not
provided by TVM codes.

The system consists of trackside balises including signal encoders and on-board computerised equipment. The system is
an overlay system to conventional signalling equipment.

12.9.2002

EN

Official Journal of the European Communities

L 245/89

The data transmission is between passive trackside balises (two to nine per signal) and an on-board antenna underneath
the vehicle which also supplies the balise with energy when passing. The coupling between balise and on-board is
inductive. This data transmission is also used for spot information not related to ATP (doors, radio channels, etc.).

Characteristics

(cid:151) Energising balises:

(cid:151) 27,115 MHz

(cid:151) amplitude modulation for clock pulses

(cid:151) 50 kHz pulse frequency

(cid:151) Data transmission to trains:

(cid:151) 4,5 MHz

(cid:151) 50 kbit/sec

(cid:151) 12 useful bits (total 4 (cid:215) 8 bits) type analogue

(cid:151) 172 useful bits (total 256 bits) type digital

(cid:151) Except for trainsets, train characteristics must be input by the driver:

(cid:151) train category

(cid:151) maximum train speed

(cid:151) train length

(cid:151) train braking characteristics

(cid:151) Displays to the driver:

(cid:151) state of speed supervision

(cid:151) release speed

(cid:151) Supervision:

(cid:151) line speed

(cid:151) stopping point

(cid:151) dynamic brake profile

(cid:151) speed restrictions

(cid:151) Reaction:

Warning of
emergency brake is possible only when the train is stationary.

the driver. The emergency brake is called if movement supervision is violated. Release of

the

(cid:151) Responsible Member State: France

LZB

(Linienf(cid:246)rmige Zugbeeinflussung)

Description

ATC system which is installed on all lines in Germany exceeding 160 km/h, which are significant parts of the lines
under consideration for interoperability. LZB is also installed on lines in Austria and Spain.

L 245/90

EN

Official Journal of the European Communities

12.9.2002

The system consists of a trackside part, which again has the building parts:

(cid:151) adaptation to interlocking systems and respective data transmission

(cid:151) data processing and MMI in LZB centre

(cid:151) data transmission to and from other LZB centres

(cid:151) data transmission system to and from trains

The on-board equipment normally has an integrated Indusi function.

The data transmission between trackside and on-board is via trackside inductive cable loop and on-board ferrite
antennae.

Main characteristics

(cid:151) Data transmission to trains:

(cid:151) 36 kHz – 0,4 kHz (FSK)

(cid:151) 1 200 bit/sec

(cid:151) 83,5 steps per telegram

(cid:151) Data transmission from trains:

(cid:151) 56 kHz – 0,2 kHz (FSK)

(cid:151) 600 bit/sec

(cid:151) 41 steps per telegram

(cid:151) Train characteristics can be input by the driver:

(cid:151) train length

(cid:151) maximum train speed

(cid:151) train braking characteristics (braking percentage and braking regime)

(cid:151) Displays to the driver:

(cid:151) valid operating mode, status of data transmission

(cid:151) maximum permitted speed/actual speed on a two pointer speedometer

(cid:151) target speed

(cid:151) distance to target

(cid:151) auxiliary indications

(cid:151) Supervision:

(cid:151) line speed (maximum speed, temporary and permanent speed limitations)

(cid:151) maximum train speed

(cid:151) stopping point

(cid:151) direction of movement

(cid:151) dynamic speed profile

(cid:151) auxiliary functions, e.g. lowering of pantograph (see Annex C)

12.9.2002

EN

Official Journal of the European Communities

L 245/91

(cid:151) Reaction:

the emergency brake is called if the movement supervision is violated. The emergency brake can be released in case
of overspeed when speed is within limits.

(cid:151) LZB operating rules:

DB uses the system as fully safety-relevant automatic train control, wayside signals are not required; in the case
where wayside signals exist because of non-equipped trains, these signals are not valid for LZB-guided trains. LZB
is typically connected with automatic motor and brake control.

(cid:151) Responsible Member States: Austria, Germany, Spain

RSDD

(Ripetizione Segnali Discontinua Digitale)

Description

RSDD is an ATP system; it can be used alone or superimposed on the BACC infrastructure.

The on-board equipment is able to manage in a coordinated way information coming from the different sources.

The system consists of trackside balises and encoders, and an on-board antenna which also supplies the balise with
energy when passing. The coupling is inductive.

From the logical point of view, two kinds of balises exist: (cid:145)system balises(cid:146) containing information on the line ahead, and
(cid:145)signalling balises(cid:146) containing information on the signals aspect.

Three types of balises are foreseen, all using the same frequencies for up- and downlink, but with different capacity:

(cid:151) energising frequency:

27,115 MHz

(cid:151) data transmission to trains:

(cid:151) 4,5 MHz

(cid:151) 12/180 bit ASK modulation

(cid:151) 1 023 bit FSK modulation

(cid:151) train characteristics:

fixed train characteristics are loaded in maintenance facilities, while data depending on train composition are
inserted by the driver. Special balises are used to calibrate the on-board odometer system, before it can be used for
train supervision purposes.

(cid:151) Displays to the driver:

(cid:151) maximum permitted speed

(cid:151) target speed

(cid:151) actual train speed

(cid:151) advanced information on secondary targets

(cid:151) warnings before emergency brake intervention

(cid:151) auxiliary information

L 245/92

EN

Official Journal of the European Communities

12.9.2002

(cid:151) Supervision:

In normal condition (full supervision) the train controls the following characteristics:

(cid:151) line speed, depending on overspeeding track capability and vehicle performances

(cid:151) permanent and temporary speed restriction

(cid:151) level Crossing

(cid:151) stopping point

(cid:151) dynamic brake profile

(cid:151) shunting

If one or more characteristics of line cannot be sent to the on-board system (fault, etc.) it is possible to use the
system in partial supervision. In this case the MMI is switched off and the driver has to drive according to lineside
signals.

(cid:151) Reactions:

(cid:151) service brake

(cid:151) emergency brake

(cid:151) Responsible Member State: Italy

SELCAB

Description

ATC system which is installed on the high speed line Madrid-Seville as an extension of LZB in station areas. The
on-board equipment LZB 80 (Spain) can also process SELCAB information.

The data transmission between trackside and on-board is via semi-continuous trackside inductive loop and on-board
ferrite antennae.

Main characteristics

(cid:151) Data transmission to trains:

(cid:151) 36 kHz – 0,4 kHz (FSK)

(cid:151) 1 200 bit/sec

(cid:151) 83,5 steps per telegram

(cid:151) Train characteristics can be input by the driver:

(cid:151) train length

(cid:151) maximum train speed

(cid:151) train braking characteristics

(cid:151) Displays to the driver:

(cid:151) maximum permitted speed/actual speed as two pointer speedometer

(cid:151) target speed

(cid:151) distance to target

(cid:151) auxiliary indications

(cid:151) Supervision:

(cid:151) line speed

(cid:151) stopping point

12.9.2002

EN

Official Journal of the European Communities

L 245/93

(cid:151) direction of movement

(cid:151) dynamic brake profile

(cid:151) speed restrictions

(cid:151) Reaction:

the emergency brake is called if the movement supervision is violated. The emergency brake in the case of
overspeed can be released when the speed is within limits.

(cid:151) Responsible Member States: Spain, United Kingdom

TBL 1/2/3

Description

TBL is an ATC system partially installed on lines of NMBS/SNCB (presently: 1 200 beacons and 120 trainborne
lines for speeds higher than 160 km/h
equipment TBL1, 200 beacons and 300 trainborne equipment TBL2, all
equipped with TBL2).

The system consists of a trackside balise at each signal and an on-board equipment. The TBL1 is a warning system,
TBL2/3 is a cab signal system. For TBL2/3, there are in-fill balises, and an infill cable loop is also available.

The trackside part is designated TBL2 in case of interface to relay interlockings, and TBL3 in case of serial interface to
electronic interlocking.

The trainborne equipment is called TBL2. It includes the TBL2, the TBL1 and the Crocodile functions.

The data transmission is between the active balise and a set of air-coil antennae on-board. The system is direction
sensitive, the balises are mounted between the rails with a small offset from the centre.

Main characteristics

(cid:151) Data transmission to trains:

(cid:151) 100 kHz – 10 kHz (FSK)

(cid:151) 25 kbit/sec

(cid:151) 119 useful bits per telegram for TBL2/3

(cid:151) five useful decimal data on 40 bits per telegram for TBL1

(cid:151) Train characteristics as input by the driver (TBL2):

(cid:151) train length

(cid:151) maximum train speed

(cid:151) train braking characteristics (brake weight, type of train, isolations, other specific parameters)

(cid:151) language selection, identification parameters

(cid:151) Displays to the driver:

(cid:151) maximum speed (braking curve)

(cid:151) target speed

(cid:151) target distance

(cid:151) train speed

(cid:151) operating mode

(cid:151) auxiliary indications

L 245/94

EN

Official Journal of the European Communities

12.9.2002

(cid:151) Supervision:

(cid:151) line speed

(cid:151) speed restrictions (permanent and temporary)

(cid:151) specific restrictions for freight and other trains

(cid:151) stopping point

(cid:151) dynamic braking profile

(cid:151) direction of movement

(cid:151) vigilance of the driver

(cid:151) auxiliary functions (pantograph, radio commutation)

(cid:151) Reaction:

(cid:151) acoustic and optical warnings

(cid:151) the emergency brake is called when the movement supervision is violated or the driver does not acknowledge

the warning.

(cid:151) Responsible Member States: Belgium, United Kingdom

TPWS

Description

TPWS is to improve safety, principally at junctions. It includes the functionality of AWS, shown in italics. TPWS applies
to all lines considered to be interoperable.

The system assures the following functions.

Warning to the driver at standard braking distance of the following restrictive conditions:

(cid:151) signals not at clear

(cid:151) permanent speed restrictions

(cid:151) temporary speed restrictions

Train protection (predetermined train characteristics) under the following circumstances:

(cid:151) train exceeding permitted line speed at specified speed restrictions (speed trap)

(cid:151) train approaching a stop signal at excess speed (speed trap)

(cid:151) train passing a signal at danger (train stop)

The system is based on permanent magnets and coils generating fields in the track. The system is not considered fail
safe, but incorporates measures and principles to reduce the probability of misleading the driver as low as reasonably
practicable.

The TPWS indicates visually to the driver:

(cid:151) the state of the last magnet, clear or restrictive (the (cid:145)sunflower(cid:146) indicator),

(cid:151) that it is the cause of a brake application,

(cid:151) its fault/isolation status.

The TPWS controls are:

(cid:151) an acknowledgement button for the warning of a restrictive condition,

12.9.2002

EN

Official Journal of the European Communities

L 245/95

(cid:151) a button to pass a signal at danger valid only for a limited time after operation,

(cid:151) isolation controls.

The TPWS audio indications are:

(cid:151) a (cid:145)bell tone(cid:146) (cid:151) signal at clear,

(cid:151) a (cid:145)horn tone(cid:146) (cid:151) restrictive condition, that must be acknowledged.

The TPWS system interfaces to the train brake system and provides a full emergency brake application if:

(cid:151) the (cid:145)horn tone(cid:146) is not acknowledged within 2,5 seconds,

(cid:151) immediately the train passes the (cid:145)speed trap(cid:146) at excess speed,

(cid:151) imediately if the train passes a signal at danger.

The technology is not processor based, but this is not excluded.

Other characteristics:

(cid:151) Sequence of magnetic fields (North Pole, South Pole) to provide details of signal clear or not clear

(cid:151) One of a selection of sinusoidal electromagnetic fields in the region of 60 kHz for the speed trap and train stop

functions (up to eight frequencies used)

(cid:151) Train characteristics in terms of braking capacity are set by train wiring and give different maximum speeds at

speed traps; no train characteristics input presently in service, but can be envisaged

(cid:151) Driver acknowledgement of a restrictive condition required within 2,5 seconds, otherwise the emergency brakes are called

(cid:151) The emergency brake is releasable one minute after the brake has been applied provided the brake demand has

also been acknowledged

(cid:151) Responsible Member State: United Kingdom

TVM

Description

TVM is installed on high-speed lines of RFF. The older version TVM 300 is installed on the line Paris-Lyon (LGV SE)
and Paris-Tours/Le Mans (LGV A) lines; the later version TVM 430 on the line Paris-Lille-Calais (LGV N), on the SNCB
part towards Brussels, on the line Lyon-Marseilles/Nimes (LGV MediterranØe) and through the Eurotunnel. TVM 430 is
compatible with TVM 300.

TVM 300 and TVM 430 are based on coded track circuits as continuous transmission means and inductive loops or
balises (KVB or TBL type) as spot transmission means.

The data transmission between coded track circuits and on-board equipment is via inductively coupled air coil pick-up
antennae above the rails.

Main characteristics

(cid:151) Data transmission to trains via track circuits:

(cid:151) various carrier frequencies (1,7; 2,0; 2,3; 2,6) kHz

(cid:151) FSK modulated speed codes

(cid:151) 18 speed codes (TVM 300)

(cid:151) 27 bits (TVM 430)

L 245/96

EN

Official Journal of the European Communities

12.9.2002

(cid:151) Data transmission to trains via inductive loops:

(cid:151) TVM 300: 14 frequencies (1,3 to 3,8 kHz)

(cid:151) TVM 430: PSK modulated signal, 125 kHz, 170 bits

(cid:151) Train characteristics on board introduced on locomotives for hauled trains in Eurotunnel (not on TGV, where fixed

values are used)

(cid:151) Display to driver:

(cid:151) Speed orders associated to colour light aspects

(cid:151) Supervision:

(cid:151) speed (continuous)

(cid:151) braking triggering based on

(cid:151) stepping curve for TVM 300

(cid:151) parabolic curve for TVM 430

(cid:151) stopping point

(cid:151) Reaction:

the emergency brake is called in the case of overspeed.

(cid:151) Responsible Member States: Belgium, France

ZUB 123

Description

ATC system which is installed extensively on lines in Denmark under consideration for interoperability.

The system consists of the following parts:

trackside equipment:

(cid:151) a track coupling coil (transponder), which is mounted outside the rails,

(cid:151) in certain locations loops are used for in-fill purpose,

(cid:151) a signal interface board which scans and derives the information to be transmitted,

on-board equipment

(cid:151) the onboard unit with processing logic and receiving/transmitting equipment. It acts through a brake interface unit

on the brakes,

(cid:151) the vehicle coupling coil, mounted on the bogie, which receives data from the line,

(cid:151) the axle mounted odometer pulse generator which supplies information for the distance covered and the actual

speed,

(cid:151) the cab display and operating panel.

The ZUB 123 on-board equipment is considered fail safe.

Main characteristics

(cid:151) Three frequencies:

(cid:151) 50 kHz checking channel

(cid:151) 100 kHz energy channel

(cid:151) 850 kHz data channel

12.9.2002

EN

Official Journal of the European Communities

L 245/97

(cid:151) Data transmission modes:

(cid:151) Time-division multiplex for serial transmission of telegrams with up to 96 useful bits

(cid:151) On-board data processing:

(cid:151) vital computer processing (enhanced performance level)

(cid:151) Display to the driver:

(cid:151) maximum authorised speed

(cid:151) actual speed

(cid:151) target speed

(cid:151) target distance

(cid:151) Auxiliary indicators and buttons

Train data input:

(cid:151) encoder panel, or

(cid:151) directly into the on-board unit

(cid:151) Supervision:

(cid:151) line speed

(cid:151) stopping point

(cid:151) speed restrictions

(cid:151) dynamic brake profile

(cid:151) Reaction:

(cid:151) the emergency brake is called if the movement supervision is violated.

(cid:151) the emergency brake in the case of overspeed can be released when the speed is within a defined value limit.

(cid:151) Responsible Member State: Denmark

EVM

(For information only)

Description

EVM is installed on all main lines on the network of Hungarian State Railways (MAV). These lines are under
consideration for interoperability. The major part of locomotive fleet is equipped.

The trackside part of the system consists of coded track circuits which operate one carrier frequency for information
transmission. The carrier frequency is coded by 100 % amplitude modulation m using electronic encoder.

L 245/98

EN

Official Journal of the European Communities

12.9.2002

The data transmission between coded track circuits and on-board equipment is via inductively coupled air coil pick-up
antennae above the rails.

Main characteristics

(cid:151) Data transmission track to trains:

(cid:151) 75 Hz carrier frequency

(cid:151) amplitude modulated codes (100 %)

(cid:151) seven codes (six speed codes)

(cid:151) Display to driver:

(cid:151) cab signal

(cid:151) signal aspects: stop, permitted speed at the next signal

(15, 40, 80, 120, MAX), no transmission/failure,

shunting mode

(cid:151) Supervision:

(cid:151) speed limit

(cid:151) vigilance check every 1 550 m in case of vactual < vtarget,

(cid:151) vigilance check every 200 m in case of vactual > vtarget

(cid:151) stop aspect

(cid:151) shunting mode speed limitation

(cid:151) Reaction:

the emergency brake is triggered:

(cid:151) in the case of driver reaction missing

(cid:151) if the speed limit is still exceeded after vigilance signal

(cid:151) in case of a stop signal being passed with a speed exceeding 15 km/h

(cid:151) in shunting mode immediately after exceeding 40 km/h (the brake is activated in this case without any

acoustic signal)

(cid:151) Additional functions:

(cid:151) roll-away protection

(cid:151) comfort function (indication that the signal has been cleared when train is stationary)

(cid:151) Responsible State: Hungary

LS

(For information only)

Description

LS is installed on all main lines on the network of Czech Railways (CD) and Railways of the Slovak Republic (ZSR) and
on other lines with a speed exceeding 100 km/h. These lines are under consideration for interoperability.

The trackside part of the system consists of coded track circuits which operate one carrier frequency. The carrier
frequency is coded by 100 % amplitude modulation. Almost the entire fleet of locomotives is equipped by the on-board
equipment. The on-board part of the system has been upgraded and so the equipment is partly computerised.

12.9.2002

EN

Official Journal of the European Communities

L 245/99

The data transmission between coded track circuits and on-board equipment is via inductively coupled air coil pick-up
antennae above the rails.

Main characteristics

(cid:151) Data transmission to trains:

(cid:151) 75 Hz carrier frequency

(cid:151) AM modulated codes

(cid:151) four speed codes (including stop aspect)

(cid:151) Display to driver:

(cid:151) cab signal

(cid:151) signal aspects: stop, limited speed, caution (speed limit 100 km/h), full speed

(cid:151) Supervision:

(cid:151) speed limit/may be overridden by vigilance control

(cid:151) no distance supervision

(cid:151) Reaction:

(cid:151) emergency brake in case of missing driver reaction if speed limit is received

(cid:151) Responsible States: Czech Republic, Slovak Republic

ZUB 121

For information only

Description

ATC system which is installed extensively in Switzerland on lines by SBB and BLS under consideration for
interoperability.

The system consists of the following parts:

line equipment:

(cid:151) determine travel direction to be influenced

(cid:151) a track coupling coil (transponder), which is mounted inside the rails, lying off centre to coupling loop, which is
mounted inside the rails, laying off centre. A previous coupling coil determines travel direction to be influenced by
the following loop

(cid:151) a signal interface board which scans and derives the information to be transmitted (not fail safe)

on-board equipment:

(cid:151) the onboard unit with processing logic and receiving/transmitting equipment. It acts through a brake interface unit

on the brakes.

(cid:151) the vehicle coupling coil, mounted on the bogie, which receives data from the line. (With this equipment only

transmission track to train possible)

(cid:151) the axle-mounted odometer pulse generator, which supplies information for the distance covered, actual speed and

driving direction

(cid:151) the cab display and operating panel

(cid:151) an input/output interface to the train-borne radio unit or the integrated train-borne information system (IBIS) to

exchange vehicle data entered by the train driver

L 245/100

EN

Official Journal of the European Communities

12.9.2002

Characteristics

(cid:151) Three frequencies:

(cid:151) 50 kHz checking channel

(cid:151) 100 kHz energy channel

(cid:151) 850 kHz data channel

(cid:151) Data transmission modes:

(cid:151) Time-division multiplex for serial transmission of telegrams with up to 104 usable data bits

(cid:151) On-board data processing (not fail safe)

(cid:151) Single computer processing (supplementary performance level)

(cid:151) Display to the driver:

(cid:151) one four-digit LCD showing:

(cid:151) (cid:145)8 (cid:150) (cid:150) 8(cid:146): no monitoring or

(cid:151) (cid:145)8 8 8 8(cid:146): monitoring the maximum train speed or

(cid:151) (cid:145)(cid:150) (cid:150) (cid:150) (cid:150)(cid:146): monitoring the maximum authorised line speed or

(cid:151) (cid:145)6 0(cid:146): target speed or

(cid:151) (cid:145)I I I I(cid:146): information (cid:145)proceed(cid:146) received by a loop

(cid:151) Lamps and horn:

(cid:151) emergency brake applied

(cid:151) equipment failure

(cid:151) Buttons:

(cid:151) testing button

(cid:151) emergency stop reset

(cid:151) release button (together with (cid:145)Signum(cid:146) release button)

(cid:151) Train data input:

(cid:151) train-borne radio-operating panel is used

(cid:151) Supervision/commands:

(cid:151) line speed

(cid:151) stopping point

(cid:151) speed restrictions

(cid:151) dynamic brake profile

(cid:151) control of radio channels

(cid:151) Reaction:

(cid:151) the emergency brake is called if the threshold speed is reached

(cid:151) abort speed monitoring if movement supervision is violated

(cid:151) Responsible State: Switzerland

12.9.2002

EN

Official Journal of the European Communities

L 245/101

PART 2: RADIO

INDEX:

1. UIC Radio Chapter 1 to 4

2. UIC Radio Chapter 1 to 4 and 6

3. UIC Radio Chapter 1 to 4 and 6 and 7

Introduction to UK Systems

4. BR 1845

5. BR 1609

6.

FS ETACS and GSM

These systems are currently in use in Member States. For detailed information, reference has to be made to the register
of infrastructure as defined in Annex C.

UIC Radio Chapter 1 to 4

Description

This ground/train radio follows the technical regulations described in UIC code 751-3, third edition, 1.7.1984. It is a
minimum subset necessary for international railway traffic.

The UIC radio is an analogue radio, which consists of lineside and mobile (train-borne) equipment.

Radio systems following this basic subset allow for simplex and duplex voice communication and use of operating
signals (tones), but not for selective calls and for data transmission.

Main characteristics

(cid:151) Frequencies:

(cid:151) train to ground:

457,450 MHz..458,450 MHz.

(cid:151) ground to train:

(cid:151) band A: 467,400 MHz..468,450 MHz.

(cid:151) band B: 447,400 MHz..448,450 MHz (only to be used when band A is not available).

(cid:151) frequency spacing 25 kHz

(cid:151) duplex frequency couples 10 MHz apart

(cid:151) grouping of 4 channels, preferred 62 ... 65 for international traffic

(cid:151) agreement on frequencies used bilateral or multilateral

(cid:151) Sensitivity:

(cid:151) > 1 lV at > 20 dB signal-to-noise ratio (mobile)

(cid:151) > 2 lV (lineside)

(cid:151) Radiating power:

(cid:151) 6 W mobile

(cid:151) 6 W lineside

L 245/102

EN

Official Journal of the European Communities

12.9.2002

(cid:151) Antenna characteristics:

(cid:151) k/4 omnidirectional (mobile)

(cid:151) 4 m above rail (mobile)

(cid:151) omnidirectional or directional (lineside)

(cid:151) in tunnels leaky cables or very directional aerials (lineside)

(cid:151) terminating resistor 50 Ohms

(cid:151) Polarisation:

(cid:151) vertical

(cid:151) in tunnels, any polarisation

(cid:151) Frequency deviation:

(cid:151) < 1,75 kHz for operating tone

(cid:151) < 2,25 kHz for voice

(cid:151) Modes of operation:

(cid:151) mode 1, duplex mode

(cid:151) mode 2, semiduplex mode

(cid:151) Switchover of channels onboard

(cid:151) manually by input of channel number

(cid:151) automatic, depending on receiver voltage

(cid:151) Operating tones:

(cid:151) channel free:

2 280 Hz

(cid:151) listening:

1 960 Hz

(cid:151) pilot:

2 800 Hz

(cid:151) warning:

1 520 Hz

(cid:151) Responsible Member States: France, Germany, Luxembourg

UIC Radio Chapter 1 to 4 and 6

Description

This ground/train radio follows the technical regulations described in UIC code 751-3, third edition, 1.7.1984.

The UIC radio is an analogue radio, which consists of lineside and mobile (train-borne) equipment.

Radio systems following this basic subset allow for simplex and duplex voice communication and use of operating
signals (tones), and for selective calls and for data transmission.

Main characteristics

(cid:151) Frequencies:

(cid:151) train to ground:

457,450 MHz..458,450 MHz.

(cid:151) ground to train:

(cid:151) band A: 467,400 MHz..468,450 MHz.

(cid:151) band B: 447,400 MHz..448,450 MHz (only to be used when band A is not available).

12.9.2002

EN

Official Journal of the European Communities

L 245/103

(cid:151) frequency spacing 25 kHz

(cid:151) duplex frequency couples 10 MHz apart

(cid:151) grouping of 4 channels, preferred 62 ... 65 for international traffic

(cid:151) agreement on frequencies used bilateral or multilateral

(cid:151) Sensitivity:

(cid:151) > 1 lV at > 20 dB signal-to-noise ratio (mobile)

(cid:151) > 2 lV (lineside)

(cid:151) Radiating power:

(cid:151) 6 W mobile

(cid:151) 6 W lineside

(cid:151) Antenna characteristics:

(cid:151) k/4 omnidirectional (mobile)

(cid:151) 4 m above rail (mobile)

(cid:151) omnidirectional or directional (lineside)

(cid:151) in tunnels leaky cables or very directional aerials (lineside)

(cid:151) terminating resistor 50 Ohms

(cid:151) Polarisation:

(cid:151) vertical

(cid:151) in tunnels, any polarisation

(cid:151) Frequency deviation:

(cid:151) < 1,75 kHz for operating tone

(cid:151) < 2,25 kHz for voice

(cid:151) Modes of operation:

(cid:151) mode 1, duplex mode

(cid:151) mode 2, semi-duplex mode

(cid:151) Switchover of channels onboard

(cid:151) manually by input of channel number

(cid:151) automatic, depending on receiver voltage

(cid:151) Operating tones:

(cid:151) channel free:

2 280 Hz

(cid:151) listening:

(cid:151) pilot:

(cid:151) warning:

1 960 Hz

2 800 Hz

1 520 Hz

(cid:151) Telegram structure:

(cid:151) synchronisation header: 1111 1111 0010

(cid:151) 6-decimal train number BCD coded

L 245/104

EN

Official Journal of the European Communities

12.9.2002

(cid:151) two positions of information four bits each

(cid:151) 7 bit redundancy code, polynomial: 1110 000 1 (H = 4)

(cid:151) Telegram transmission:

(cid:151) 600 bits/sec

(cid:151) FSK, (cid:145)0(cid:146) = 1 700 Hz, (cid:145)1(cid:146) = 1 300 Hz

(cid:151) Messages (coding given in hexadecimal representation)

(cid:151) lineside to train:

(cid:151) speech

(cid:151) emergency stop

(cid:151) test

(cid:151) run faster

(cid:151) run slower

(cid:151) announcement by loudspeaker

(cid:151) written order

(cid:151) extension of telegram

08

09

00

04

02

0C

06

03

(cid:151) Train to lineside:

(cid:151) communication desired

(cid:151) acknowledgement of order

(cid:151) advice

(cid:151) test

(cid:151) train staff wish to communicate

(cid:151) telephone link desired

(cid:151) extension of telegram

08

0A

06

00

09

0C

03

(cid:151) Responsible Member States: Austria, Belgium, Denmark, Germany, the Netherlands, Norway, Spain

UIC Radio Chapter 1 to 4 and 6 and 7

Description

This ground/train radio follows the technical regulations described in UIC code 751-3, third edition, 1.7.1984. Chapter
7 of the edition of 1.1.1988.

The UIC radio is an analogue radio, which consists of lineside and mobile (trainborne) equipment.

Radio systems following this basic subset allow for simplex and duplex voice communication and use of operating
signals (tones), and for selective calls and for data transmission. The data transmission capabilities are extended. This
feature is not considered mandatory in the UIC leaflet. If it cannot be assured by bilateral or multilateral agreement, it
should be used on a national basis only.

Main characteristics

(cid:151) Frequencies:

(cid:151) Train to ground:

457,450 MHz..458,450 MHz

12.9.2002

EN

Official Journal of the European Communities

L 245/105

(cid:151) ground to train:

(cid:151) band A: 467,400 MHz..468,450 MHz.

(cid:151) band B: 447,400 MHz..448,450 MHz (only to be used when band A is not available).

(cid:151) frequency spacing 25 kHz

(cid:151) duplex frequency couples 10 MHz apart

(cid:151) grouping of 4 channels, preferred 62 ... 65 for international traffic

(cid:151) agreement on frequencies used bilateral or multilateral

(cid:151) Sensitivity:

(cid:151) > 1 lV at > 20 dB signal to noise ratio (mobile)

(cid:151) > 2 lV (lineside)

(cid:151) Radiating power:

(cid:151) 6 W mobile

(cid:151) 6 W lineside

(cid:151) Antenna characteristics:

(cid:151) k/4 omnidirectional (mobile)

(cid:151) 4 m above rail (mobile)

(cid:151) omnidirectional or directional (lineside)

(cid:151) in tunnels leaky cables or very directional aerials (lineside)

(cid:151) terminating resistor 50 Ohms

(cid:151) Polarisation:

(cid:151) vertical

(cid:151) in tunnels, any polarisation

(cid:151) Frequency deviation:

(cid:151) < 1,75 kHz for operating tone

(cid:151) < 2,25 kHz for voice

(cid:151) Modes of operation:

(cid:151) mode 1, duplex mode

(cid:151) mode 2, semi-duplex mode

(cid:151) Switchover of channels onboard:

(cid:151) manually by input of channel number

(cid:151) automatic, depending on receiver voltage

(cid:151) Operating tones:

(cid:151) channel free:

2 280 Hz

(cid:151) listening:

1 960 Hz

(cid:151) pilot:

2 800 Hz

(cid:151) warning:

1 520 Hz

L 245/106

EN

Official Journal of the European Communities

12.9.2002

(cid:151) Telegram structure:

(cid:151) sync. header: 1111 1111 0010

(cid:151) 6-decimal train number BCD coded

(cid:151) two positions of information four bits each

(cid:151) 7-bit redundancy code, polynomial: 1110 000 1 (H = 4)

(cid:151) Telegram transmission:

(cid:151) 600 bits/sec

(cid:151) FSK, (cid:145)0(cid:146) = 1 700 Hz, (cid:145)1(cid:146) = 1 300 Hz

(cid:151) Messages (coding given in hexadecimal representation)

(cid:151) lineside to train:

(cid:151) speech

(cid:151) emergency stop

(cid:151) test

(cid:151) run faster

(cid:151) run slower

(cid:151) announcement by loudspeaker

(cid:151) written order

(cid:151) extension of telegram

(cid:151) Train to lineside:

(cid:151) communication desired

(cid:151) acknowledgement of order

(cid:151) advice

(cid:151) test

(cid:151) train staff wish to communicate

(cid:151) telephone link desired

(cid:151) extension of telegram

08

09

00

04

02

0C

06

03

08

0A

06

00

09

0C

03

(cid:151) Extension of telegram (only if requested by code 03)

(cid:151) radiotelephone system with simultaneous digital message transmission

(cid:151) duplex exchange of voice information

(cid:151) duplex exchange of data messages of any length

(cid:151) simplex exchange of voice information between mobiles in the same radio section

(cid:151) speech-data time-division multiplexing (mobile to lineside):

(cid:151) 260 msec data transmission

(cid:151) 780 msec compressed speech

(cid:151) HDLC frame structure according to ISO for data transmission (lineside to mobile)

(cid:151) 1 200 bit/sec

(cid:151) FSK, (cid:145)0(cid:146) = 1 800 Hz, (cid:145)1(cid:146) = 1 200 Hz

(cid:151) Responsible Member State: France

12.9.2002

EN

Official Journal of the European Communities

L 245/107

Introduction to United Kingdom systems

The system called NRN (national radio network) is installed over the whole of the UK rail network including the
high-speed lines which are the backbone of the UK high-speed network. These consist of:

(cid:151) west coast main line (London-Glasgow)

(cid:151) east coast main line (London-Edinburgh)

(cid:151) Great Western main line (London-Bristol/South Wales)

The system called (cid:145)Cab secure(cid:146) is installed in high traffic suburban areas around London, Liverpool and Glasgow, some
of which may include lines forming part of the high-speed network. In addition, all main lines in the south-east,
including the existing channel tunnel route from the coast to London Waterloo, are equipped with the cab secure
system.

On lines where both systems exist, the main line passenger trains, plus freight and national trains are equipped with
Cab secure radio. Trains are not equipped with both types of radio.

BR 1845 issues G and H (lineside)

BR 1661 issue A (train-borne)

commonly called Cab secure radio

Description

This ground/train radio follows the technical regulations described in railtrack specifications (BR specification 1845
issues G and H and in BR 1661 issue A).

The Cab secure radio is an analogue radio, which consists of lineside and mobile (trainborne) equipment.

Radio systems following this basic subset allow for duplex voice communication and use of operating signals (tones),
and for selective calls and for data transmission.

Main characteristics

(cid:151) Frequencies:

(cid:151) train to ground:

448,34375..448,48125 MHz.
obtained.)

(cid:151) ground to train:

(Note: There are additional channels for which the information is to be

454,84375 MHz..454,98125 MHz.

(cid:151) frequency spacing 12,5 kHz

(cid:151) duplex frequency couples 6,5 MHz apart

(cid:151) agreement on frequencies used bilateral or multilateral

(cid:151) Sensitivity:

(cid:151) 1 lV at > 20 dB signal to noise ratio (mobile)

(cid:151) < 2 lV (lineside)

(cid:151) Radiating power:

(cid:151) 10 W mobile

(cid:151) 10 W lineside

L 245/108

EN

Official Journal of the European Communities

12.9.2002

(cid:151) Antenna characteristics:

(cid:151) k/4 omnidirectional (mobile)

(cid:151) 4 m above rail (mobile)

(cid:151) omnidirectional or directional (lineside)

(cid:151) in tunnels leaky cables or very directional aerials (lineside)

(cid:151) terminating resistor 50 Ohms

(cid:151) Polarisation:

(cid:151) vertical

(cid:151) in tunnels, horizontal

(cid:151) Frequency deviation:

(cid:151) 300 Hz for CTCSS tones

(cid:151) 1,5 kHz for data transmission

(cid:151) 1,75 kHz for emergency tone

(cid:151) < 2,5 kHz for voice

(cid:151) Modes of operation:

(cid:151) mode 1, duplex mode

(cid:151) Switchover of channels onboard:

(cid:151) manually by input of channel number

(cid:151) automatic, depending on message sent from control centre

(cid:151) Operating tones:

(cid:151) CTCSS: X, Y, Z, 203,5 Hz

(cid:151) emergency call: 1 520 Hz

(cid:151) Telegram structure:

(cid:151) synchronisation header: 00100011 11101011

(cid:151) information elements

(cid:151) signalling telegrams (three bytes)

(cid:151) message type (system free, system busy, general call, emergency acknowledgement, etc.)

(cid:151) area code

(cid:151) channel number

(cid:151) data telegrams (eight bytes)

(cid:151) message type (system free, system busy, general call, emergency acknowledgement, etc.)

(cid:151) area Code

(cid:151) channel number plus train number

in five decimal character or

four-alphanumeric character

BCD-coded format, or signal number (three bytes).

(cid:151) Train Stock number (6 digits) (three bytes)

(cid:151) 7(cid:150)bit redundancy code, polynomial: 110011011 (H = 4)

12.9.2002

EN

Official Journal of the European Communities

L 245/109

(cid:151) Telegram transmission:

(cid:151) 1 200 bit’s

(cid:151) FFSK, (cid:145)0(cid:146) = 1 800 Hz, (cid:145)1(cid:146) = 1 200 Hz

(cid:151) Messages (coding given in hexadecimal representation)

(cid:151) lineside to train:

(cid:151) test

(cid:151) speech

00

02

(cid:151) announcement by loudspeaker

04

(cid:151) wait at signal

(cid:151) emergency stop

(cid:151) change area, system free

(cid:151) change area, system busy

06

0A

0C

0E

(cid:151) train to lineside:

(cid:151) test

(cid:151) communication desired

(cid:151) set up signal number

(cid:151) emergency answer

(cid:151) busy

(cid:151) cancel call

(cid:151) DSD alarm

80

82

84

86

88

90

96

(cid:151) Responsible Member State: United Kingdom

BR 1609 issue 2

Commonly called national radio network (NRN)

Description

This ground/train radio follows the technical regulations described in Railtrack specification BR 1609, issue 2, August
1987.

The national radio network is an analogue radio which consists of lineside and mobile (train-borne) equipment.

Radio systems
simplex voice
following this basic subset allow for duplex voice communication (lineside),
communication (train-borne), broadcast mode and use of operating signals (tones), for selective calls and for data
transmission.

Main characteristics

(cid:151) Frequencies: sub-band 2 of the 174 MHz to 225 MHz band

(cid:151) 196,85 to 198,3 MHz train to ground

(cid:151) 204,85 to 206,3 MHz ground to train

(cid:151) frequency spacing 12,5 kHz

(cid:151) duplex frequency couples 8,0 MHz apart

(cid:151) not all the frequencies within the bands indicated are used

L 245/110

EN

Official Journal of the European Communities

12.9.2002

(cid:151) Sensitivity:

(cid:151) < 0,6 lV at 12 dB signal-to-noise ratio (mobile)

(cid:151) < 0,3 lV at 12 dB signal-to-noise ratio (lineside)

(cid:151) Radiating power:

(cid:151) > 25 W mobile

(cid:151) > 25 W lineside

(cid:151) Antenna characteristics:

(cid:151) k/4 omnidirectional (mobile)

(cid:151) 4 m above rail (mobile)

(cid:151) omnidirectional or directional (lineside)

(cid:151) terminating resistor 50 Ohms

(cid:151) no coverage in tunnels

(cid:151) Polarisation:

(cid:151) vertical

(cid:151) Modes of operation:

(cid:151) duplex mode (fixed to fixed)

(cid:151) simplex mode (fixed to mobile)

(cid:151) Switchover of channels on-board

(cid:151) manual input of common signalling channel. Most journeys in the UK are within one area and the driver

enters it at the start of the journey

(cid:151) automatic change to voice channel following a message sent from control centre

(cid:151) Audio frequency range:

(cid:151) 300 Hz ...2 500 Hz for speech

(cid:151) Frequency deviation:

(cid:151) < 2,5 kHz

(cid:151) Message transmission:

(cid:151) 1 200 bits/sec

(cid:151) FFSK, (cid:145)0(cid:146) = 1 800 Hz, (cid:145)1(cid:146) = 1 200 Hz

(cid:151) Message structure:

(cid:151) data modulation for all RF signalling shall conform to MPT1323 section 6, with message formats generally as

defined in MPT1327

(cid:151) Message types from a train:

(cid:151) complete number required. It will contain the identity of the radio. It is sent once after receipt of a (cid:145)channel

free(cid:146) telegram

(cid:151) clear-down

(cid:151) PTT telegram which is sent each time the transmitter is keyed. It gives the identity of the radio

(cid:151) auto-reply telegram when the radio is selectively called. It contains the identity of the radio

(cid:151) emergency call: It contains the identity of the radio. It does not require receipt of a free telegram

(cid:151) priority call

12.9.2002

EN

Official Journal of the European Communities

L 245/111

(cid:151) Message types to a train:

(cid:151) selective calling telegram: this initiates an auto-reply telegram

(cid:151) channel free telegram

(cid:151) go to channel telegram: this directs the radio to a particular channel, opens the loudspeaker and sounds an

alert tone

(cid:151) clear-down telegram: this clears the call, closes the loudspeaker and returns the radio to the call set-up channel

(cid:151) call fail telegram: this is the same as clear-down but also indicates call failure to the user

(cid:151) general call telegram: this is a special version of the (cid:145)go to channel instruction(cid:146)

(cid:151) Responsible Member State: United Kingdom

FS ETACS and GSM

Description

The solution for radio train-to-ground communication working today at FS is primarily based on the use of services
supplied by the public operator on the analogue (ETACS) and the digital (GSM) mobile cellular networks in the 900
MHz band. These networks have been implemented with an external subsystem, developed by the operator together
with FS in order to manage some special features as requested by FS, related for example to:

(cid:151) addressing of train and station calls through functional numbers in place of the terminal number

(cid:151) closed group features with specific barring conditions

(cid:151) configuration and handling of specialised databases directly by FS people to characterise access rights to services

for each kind of users, and so on.

Thanks to the wide radio coverage supplied by the two public cellular systems on the FS railway network, the general
train-to-ground communication needs can be satisfied in this way.

The additional features were negotiated and implemented by FS in cooperation with the public service provider. They
are implemented in highly reliable distributed computer systems. They are therefore part of the application layer in the
ISO/OSI layer model.

(cid:151) Responsible Member State: Italy

UIC Radio Chapter 1(cid:151)4 (TTT radio system installed at Cascais line)

Description

This ground/train radio follows the technical regulations described in UIC code 751-3, third edition, 1.7.1984. It is a
minimum subset necessary for international railway traffic.

The UIC radio is an analogue radio, which consists of lineside and mobile (train-borne) equipment.

Radio systems following this basic subset allow for simplex and half-duplex voice communication and use of operating
signals (tones), but not for selective calls and for data transmission:

Main characteristics

Frequencies:

(cid:151) Train to ground:

457,700 MHz..457,800 MHz.

(cid:151) Ground to train:

Band A: 467,625 MHz. 467,875 MHz

L 245/112

EN

Official Journal of the European Communities

12.9.2002

(cid:151) Frequency spacing 12,5 kHz

(cid:151) Duplex frequency couples 10 MHz apart

(cid:151) Grouping of four channels, preferred 62, 63, 73 and 75 for international traffic

Sensitivity:

(cid:151) > 1 mV at > 20 dB signal-to-noise ratio (mobile)

(cid:151) > 2 mV (lineside)

Radiating power:

(cid:151) 6 W mobile

(cid:151) 6 W lineside

Antenna characteristics:

(cid:151) k/4 omnidirectional (mobile)

(cid:151) 4 m above rail (mobile)

(cid:151) omnidirectional or directional (lineside)

(cid:151) in tunnels leaky cables or helical antennas (lineside)

(cid:151) terminating resistor 50 Ohms

Polarisation:

(cid:151) vertical

(cid:151) in tunnels, any polarisation

Frequency deviation:

(cid:151) 0,9 *0,05 kHz for operating tone

(cid:151) < 2,3 kHz for voice

Modes of operation:

(cid:151) mode 1, half-duplex mode

(cid:151) mode 1, simplex mode

Switchover of channels on board:

(cid:151) manually by input of group number

(cid:151) automatic inside the group, depending on receiver voltage

Operating tones:

(cid:151) channel free:

2 280 Hz

(cid:151) listening:

1 960 Hz

(cid:151) pilot:

2 800 Hz

(cid:151) warning:

1 520 Hz

Responsible Member State: Portugal

12.9.2002

EN

Official Journal of the European Communities

L 245/113

TTT Radio System CP_N

Description

This TTT radio system is a tailored one, designed for voice and data communications and according CP requirements.

The CP_N radio is an analogue radio, which consists of lineside and mobile (train-borne) equipment.

Radio system use digital selective call (according MPT 1 327(cid:151)1 200 bit/s FFSK) and 50 baud subaudio FSK for base
station signalling.

The radio allows simplex and half-duplex voice communication and half-duplex for selective calls and for data
transmission.

Main characteristics

Frequencies:

(cid:151) train to ground:

457,700 MHz..457,800 MHz.

(cid:151) ground to train:

Band A: 467,625 MHz. 467,875 MHz

(cid:151) frequency spacing 12,5 kHz

(cid:151) duplex frequency couples 10 MHz apart

(cid:151) grouping of four channels, preferred 62, 63, 73 and 75 for international traffic

Sensitivity:

(cid:151) 1 mV at > 20 dB signal to noise ratio (mobile)

(cid:151) 2 mV (lineside)

Radiating power:

(cid:151) 6 W mobile

(cid:151) 6 W lineside

Antenna characteristics:

(cid:151) k/4 omnidirectional (mobile)

(cid:151) 4 m above rail (mobile)

(cid:151) omnidirectional or directional (lineside)

(cid:151) in tunnels leaky cables or helical antennas (lineside)

(cid:151) terminating resistor 50 Ohms

Polarisation:

(cid:151) vertical

(cid:151) in tunnels, any polarisation

RF Modulation:

(cid:151) radiomodem 1 200b/s, FM

(cid:151) radiomodem (Tx only) 50 baud subaudio, FM

(cid:151) voice in PM

L 245/114

EN

Official Journal of the European Communities

12.9.2002

Frequency deviation:

(cid:151) 1,75 kHz for FFSK (1 200 bit/s)

(cid:151) 0,3 kHz for FSK (50 baud)

(cid:151) < 2,3 kHz for voice

Modes of operation:

(cid:151) mode 1, half-duplex mode

(cid:151) mode 1, simplex mode

Switchover of channels onboard

(cid:151) manually by input of group number

(cid:151) automatic inside the group, depending on receiver voltage

Telegram structure:

(cid:151) according MPT 1327

Telegram transmission:

(cid:151) 1 200 bits/sec

(cid:151) FFSK, (cid:145)0(cid:146) = 1 800 Hz, (cid:145)1(cid:146) = 1 200 Hz

Responsible Member State: Portugal

12.9.2002

EN

Official Journal of the European Communities

L 245/115

ANNEX C

LINE-SPECIFIC CHARACTERISTICS AND TRAIN-SPECIFIC CHARACTERISTICS FOR LINES AND TRAINS
DECLARED AS INTEROPERABLE, AND RESULTING REQUIREMENTS

1. General requirements

As stated in section 7, the line-specific characteristics defined in this Annex shall be included in the register of
infrastructure by the infrastructure manager of lines declared as interoperable by the responsible Member State (Article
14 of Directive 96/48/EC) in the frame of the trans-European high-speed rail system (Annex I to Directive 96/48/EC).

As stated in section 7, the train-specific characteristics defined in this Annex shall be included in the register of rolling
stock by the train operator of trains declared as interoperable in the frame of the trans-European high-speed rail system
(Annex I to Directive 96/48/EC).

As stated in section 6.2, as a precondition for operating a train, the corresponding register of rolling stock and register
of infrastructure have to be cross-checked for the sake of interoperability.

Annex C deals with those aspects of the control-command assemblies which are covered neither by Annex A nor by
Annex B, and with the options permitted for class A and class B systems and interfaces (see Figure 1).

2. Register of infrastructure

This TSI allows some options of equipment, functions and infrastructure-related values. In addition, where European
specifications do not cover the whole control-command trackside assembly, special requirements in the context of
existing technical systems and in particular the use of specific operational requirements are possible and are the
responsibility of the infrastructure controller.

Such information concerns for example:

(cid:151) choices in the frame of technical compatibility requirements listed in Annex A,

(cid:151) choices in the frame of technical compatibility requirements listed in Annex B,

(cid:151) EMC-values (because of the use of equipment which is not covered by European specification referred to by TSIs,

for instance axle-counter systems),

(cid:151) climatic conditions and physical conditions along the line.

This information has to be available for and used by the train operators in the form of a line specific handbook
(register of infrastructure) which can also contain other particularities of other TSIs (e.g., the TSI operation contains in
the rule book Annex B systems and degraded modes)

The register of infrastructure may be specific to one line or a group of lines having the same characteristics.

The objective is that the requirements and characteristics stated in the register of infrastructure and in the register of
rolling stock accord with the TSIs; particularly they must not be a hindrance to interoperability.

3. Register of rolling stock

In the frame of this TSI, for the train operator, some choices of equipment, functions and values related to the type of
train are foreseen.
the whole onboard assembly
control-command the infrastructure controller needs additional information concerning the use of class B systems, and
the characteristics of the train which are relevant for trackside non-class B systems. This information concerns, for
example:

In addition, because European specifications do not cover

(cid:151) choices in the frame of technical compatibility requirements listed in Annex A,

(cid:151) choices in the frame of technical compatibility requirements listed in Annex B,

(cid:151) EMC values (because of

the use on the lines concerned of equipment which is not covered by European
specification referred to by TSIs, for instance track circuits being sensitive to traction currents and their harmonics
and axle-counters systems being sensitive to electromagnetic fields),

L 245/116

EN

Official Journal of the European Communities

12.9.2002

(cid:151) geometric and electrical parameters of the train such as length, maximal distance of axles in the train, length of the
nose of the first and of the last car of the train, maximal electrical resistance between the wheels of an axle (in
context with Annex A, item 16, because of the track-circuit design arrangement),

(cid:151) braking parameters for class A system,

(cid:151) braking parameters for class B systems,

(cid:151) general braking parameters,

(cid:151) types of brakes,

(cid:151) eddy current brake installed,

(cid:151) magnetic brake installed,

(cid:151) climatic conditions and physical conditions in which the train is specified to operate.

This information has to be available for and to be used by the infrastructure managers by means of a train specific
handbook (register of rolling stock) which can also address the possibility of or the need for auxiliary functions for the
train to be manageable or to be managed by control-command, e.g., for passage of neutral sections, speed reduction in
special circumstances depending of the train and line characteristics (tunnels) and particularities of other TSIs.

The register of rolling stock can be specific to one train or a category of trains having the same characteristics

4. Lists of specific characteristics and requirements

The following list is the mandatory requirement for the register of infrastructure and for the register of rolling stock in
order to describe sufficiently the specific characteristics and requirements, and to facilitate interoperability. The list deals
only with technical issues, the operational issues are contained in the TSI operation.

The requirements may be satisfied by the application of a standard. In this case, the reference concerned must be given
in these handbooks.

Otherwise, any special requirements (methods of measurement) must be inserted into or appended to the register of
rolling stock and the register of infrastructure.

For class B systems, the measures implemented in the context of the responsible Member State given in Annex B apply.
The register of infrastructure shall include the following items:

(cid:151) responsible Member State,

(cid:151) name of Annex B system,

(cid:151) version and placing-into-service date,

(cid:151) speed restrictions and other class B specific conditions/requirements, due to system limitations,

(cid:151) further details according to the lists below.

List of specific technical characteristics and the requirements associated with an interoperable line (from A to
B) and with an interoperable train (type xyz)

No

1

Line (register of infrastructure)

Train (register of rolling stock)

(a) ERTMS/ETCS level of application, optional
functions installed lineside and required
on-board, and version number including the
placing-in-service date,

(b) ERTMS/GSM-R radio, optional functions as

specified in the FRS, and the version number
including placing-in-service date.

(a) ERTMS/ETCS level of application, optional

functions installed and version number including
placing-in-service date,

(b) ERTMS/GSMR radio, optional functions

according to the FRS and version number
including placing-in-service date.

12.9.2002

EN

Official Journal of the European Communities

L 245/117

No

2

Indicate for:

Line (register of infrastructure)

Train (register of rolling stock)

Indicate for:

(a) each class B train protection, control and

(a) each class B train protection, control and

warning system; and

warning system; and

(b) each class B radio system;

(b) each class B radio system;

installed on the interoperable line, the versions
(including period of validity, and if there is a need
for more than one system to be active
simultaneously).

installed on the interoperable train, the versions
(including period of validity) and if there is a need of
more than one system to be active simultaneously).

3

For ERTMS/ETCS level 1 with infill function:

For ERTMS/ETCS level 1 with infill function:

which technical implementation is required of rolling
stock

which technical implementation is used.

4

5

6

7

8

9

10

Special technical conditions required to switch over
between different class B train protection, control
and warning systems.

Special conditions implemented on-board to switch
over between different class B train protection,
control and warning systems.

Special technical conditions required to switch over
between different radio systems.

Special conditions implemented on-board to switch
over between different radio systems.

Technical degraded modes of:

Available technical degraded modes for:

(a) ERTMS/ETCS;

(a) ERTMS/ETCS;

(b) class B train protection, control and warning

(b) class B train protection, control and warning

systems;

(c) ERTMS/GSM-R;

(d) class B radio systems;

(e)

lineside signalling.

systems;

(c) ERTMS/GSM-R;

(d) class B radio systems.

Speed limits applied because of limited braking
performance, e.g. because of braking distances
available and because of gradients:

(a)

(b)

to ERTMS/ETCS operating modes;

to class B train protection, control and warning
systems.

National technical rules for operating class B systems,
relevant for the trains.

Susceptibility of infrastructure-side control-command
and signalling to emission from trains in terms of
electromagnetic compatibility with respect to
admission of trains. To be specified where available
according to European standards (prEN 50238 and
other future standards (cid:151) to be defined) to meet
safety and reliability/availability targets.

Permissibility to use Eddy-current brake (types)

Permissibility to use magnetic brake (types)

(a) Speed limits related to train characteristics and to

be supervised by control-command,

(b) Braking characteristics input data for

ERTMS/ETCS and class B train protection,
control-and-warning systems.

Electromagnetic emission of the train with respect to
admission of the train in terms of electromagnetic
compatibility. To be specified where available
according to European standards (prEN 50238 and
other future standards (cid:151) to be defined) to meet
safety and reliability/availability targets.

Eddy-current brake installed (type)

Magnetic brake installed (type)

Climatic conditions and physical conditions along the
line (to be described in accordance with Annex A,
index 3).

Climatic conditions and physical conditions in which
the on-board assembly can work (to be described
according to Annex A, index 3).

The requirements for technical solutions concerning
implemented derogations according Directive
96/48/EC have to be described.

The rules for technical solutions concerning
implemented derogations according Directive
96/48/EC have to be described.

ANNEX D

TSI CC (high-speed rail system) (cid:151) Figure 1

This figure shows the principle only

L

2
4
5
/
1
1
8

E
N

O

f
f
i
c
i
a
l

J
o
u
r
n
a
l

o
f

t
h
e

E
u
r
o
p
e
a
n

C
o
m
m
u
n
i
t
i
e
s

.

.

1
2
9
2
0
0
2

12.9.2002

EN

Official Journal of the European Communities

L 245/119

MODULES FOR EC DECLARATION OF CONFORMITY AND EC DECLARATION OF SUBSYSTEM
VERIFICATION

ANNEX E

Module B (type-examination)

Conformity assessment of interoperability constituents

1.

2.

This module describes that part of the procedure by which a notified body ascertains and attests that a type,
representative of the production envisaged, meets the provisions of the TSI that apply to it.

The application for the type-examination must be lodged by the manufacturer or his authorised representative
established within the Community with a notified body of his choice.

The application must include:

(cid:151) the name and address of the manufacturer and, if the application is lodged by the authorised representative,

his name and address in addition,

(cid:151) a written declaration that the same application has not been lodged with any other notified body,

(cid:151) the technical documentation, as described in point 3.

The applicant must place at the disposal of the notified body a specimen representative of the production
envisaged and hereinafter called (cid:145)type(cid:146). A type may cover several versions of the interoperability constituent
provided that the differences between the versions do not affect the provisions of the TSI.

The notified body may request further specimens if needed for carrying out the test programme.

If no type tests are requested within the type-examination procedure (see point 4.4), and the type is sufficiently
defined by the technical documentation, as described in point 3., the notified body may agree,
that no
specimens are placed at its disposal.

3.

The technical documentation must enable the conformity of the interoperability constituent with the provisions
of the TSI to be assessed. It must, as far as relevant for such assessment, cover the design, manufacture and
operation of the product. The technical documentation must contain:

(cid:151) a general type-description,

(cid:151) conceptual design and manufacturing drawings and schemes of components, subassemblies, circuits, etc.,

(cid:151) descriptions and explanations necessary for the understanding of said drawings and schemes and the

operation of the product,

(cid:151) conditions of

integration of

the interoperability constituent

in its system environment

(subassembly,

assembly, subsystem) and the necessary interface conditions,

(cid:151) conditions for use and maintenance of the interoperability constituent (restrictions of running time or

distance, wear limits, etc.),

(cid:151) a list of the technical specifications, against which the conformity of the interoperability constituent is to be

assessed (relevant TSI and/or European specification with relevant clauses),

(cid:151) descriptions of the solutions adopted to meet the requirements of the TSI in cases where the European

specifications referred to in the TSI have not been applied in full (*),

(cid:151) results of design calculations made, examinations carried out, etc.,

(cid:151) test reports.

4.

The notified body must:

4.1.

examine the technical documentation,

4.2.

if a design review is requested in the TSI, perform an examination of the design methods, the design tools and
the design results to evaluate their capability to fulfil the requirements for conformity for the interoperability
constituent at the completion of the design process,

(*) This clause is not applicable to the European specifications that are used to define basic parameters. These are indicated in Annex A.

L 245/120

EN

Official Journal of the European Communities

12.9.2002

4.3.

4.4.

4.5.

4.6.

4.7.

if a review of the manufacturing process is requested in the TSI, perform an examination of the manufacturing
process devised for manufacturing the interoperability constituent, to evaluate its contribution to product
conformity, and/or examine the review carried out by the manufacturer at the completion of the design process,

if type tests are requested in the TSI, verify that the specimen(s) has (have) been manufactured in conformity
with the technical documentation, and carry out or have carried out the type tests in accordance with the
provisions of the TSI and the European specification referred to in the TSI,

identify the elements which have been designed in accordance with the relevant provisions of the TSI and the
European specification referred to in the TSI, as well as the elements which have been designed without
applying the relevant provisions of those European specifications (*),

perform or have performed the appropriate examinations and necessary tests in accordance with points 4.2.,
4.3. and 4.4. to establish whether, where the appropriate European specification referred to in the TSI have not
been applied, the solutions adopted by the manufacturer meet the requirements of the TSI (*).

perform or have performed the appropriate examinations and necessary tests in accordance with points 4.2.,
4.3. and 4.4.
to establish whether, where the manufacturer has chosen to apply the relevant European
specification, these have actually been applied,

4.8.

agree with the applicant the location where the examinations and necessary tests will be carried out.

5.

Where the type meets the provisions of the TSI, the notified body must issue a type-examination certificate to
the applicant. The certificate must contain the name and address of the manufacturer, conclusions of the
examination, conditions for its validity and the necessary data for identification of the approved type.

The time period of validity shall be no longer than three years.

A list of the relevant parts of the technical documentation must be annexed to the certificate and a copy kept
by the notified body.

the manufacturer or his authorised representative established within the Community is denied an EC

If
type-examination certificate, the notified body must provide detailed reasons for such denial.

Provision must be made for an appeals procedure.

6.

7.

8.

9.

10.

The applicant must inform the notified body that holds the technical documentation concerning the EC
type-examination certificate of all modifications to the approved product which must receive additional
approval where such changes may affect the conformity with the requirements of the TSI or the prescribed
conditions for use of the product. This additional approval is given in the form of an addition to the original
type-examination certificate, or a new certificate will be issued after withdrawal of the old certificate.

If no modifications as under point 6 have been made, the validity of an expiring certificate can be extended for
another period of validity. The applicant will apply for such a prolongation by a written confirmation that no
such modifications have been made, and the notified body issues a prolongation for another period of validity
as in point 5, if no contrary information exists. This procedure can be repeated.

Each notified body must communicate to the other notified bodies the relevant information concerning the
type-examination certificates it has withdrawn or refused.

The other notified bodies will receive copies of the type-examination certificates issued and/or their additions on
request. The annexes to the certificates must be kept at the disposal of the other notified bodies.

The manufacturer or his authorised representative established within the Community must keep with the
technical documentation copies of the EC type-examination certificates and their additions for a period of 10
years after the last product has been manufactured Where neither the manufacturer nor his authorised
representative is established within the Community,
the obligation to keep the technical documentation
available is the responsibility of the person who places the product on the Community market.

(*) This clause is not applicable to the European specifications that are used to define basic parameters. These are indicated in Annex A.

12.9.2002

EN

Official Journal of the European Communities

L 245/121

Module D (production quality assurance)

Conformity assessment of interoperability constituents

1.

2.

3.

This module describes the procedure whereby the manufacturer or his authorised representative established
within the Community who satisfies the obligations of point 2 ensures and declares that the interoperability
constituent concerned is in conformity with the type as described in the EC type-examination certificate and
satisfies the requirements of the Directive 96/48/EC and of the TSI that apply to it.

The manufacturer must operate an approved quality system for production, final product inspection and testing
as specified in point 3 and is subject to monitoring as specified in point 4.

Quality system

3.1.

The manufacturer must lodge an application for assessment of his quality system with a notified body of his
choice, for the interoperability constituents concerned.

The application must include:

(cid:151) all relevant

information for the product category representative for the interoperability constituents

envisaged,

(cid:151) the documentation concerning the quality system,

(cid:151) the technical documentation of the approved type and a copy of the type-examination certificate.

3.2.

The quality system must ensure compliance of the interoperability constituents with the type as described in the
EC type-examination certificate and with the requirements of Decision 96/48/EC and of the TSI that apply to
them. All the elements, requirements and provisions adopted by the manufacturer shall be documented in a
systematic and orderly manner in the form of written policies, procedures and instructions. The quality system
documentation must permit a consistent interpretation of the quality programmes, plan, manuals and records.

It must contain in particular an adequate description of:

(cid:151) the quality objectives and the organisational structure,

(cid:151) responsibilities and powers of the management with regard to product quality,

(cid:151) the manufacturing, quality control and quality assurance techniques, processes and systematic actions that

will be used,

(cid:151) the examinations and tests that will be carried out before, during and after manufacture, and the frequency

with which they will be carried out,

(cid:151) the quality records, such as inspection reports and test data, calibration data, qualification reports of the

personnel concerned, etc.,

(cid:151) the means to monitor the achievement of the required product quality and the effective operation of the

quality system.

3.3.

The notified body must assess the quality system to determine whether it satisfies the requirements referred to
in point 3.2. It presumes conformity with these requirements in respect of quality systems that implement the
relevant harmonised standard. This harmonised standard shall be EN ISO 9001 (cid:150) December 2000, completed if
is
necessary to take into consideration the specificity of
implemented.

the interoperability constituent

for which it

The audit must be specific for the product category, which is representative for the interoperability constituent.
The auditing team must have at least one member experienced as an assessor in the product technology
concerned. The evaluation procedure must include an inspection visit to the manufacturer’s premises.

The decision must be notified to the manufacturer. The notification must contain the conclusions of the
examination and the reasoned assessment decision.

3.4.

The manufacturer must undertake to fulfil the obligations arising out of the quality system as approved and to
uphold it so that it remains adequate and efficient.

The manufacturer or his authorised representative established within the Community shall keep the notified
body that has approved the quality system informed of any intended updating of the quality system.

L 245/122

EN

Official Journal of the European Communities

12.9.2002

The notified body must evaluate the modifications proposed and decide whether the amended quality system
will still satisfy the requirements referred to in point 3.2 or whether a re-assessment is required.

It must notify its decision to the manufacturer. The notification must contain the conclusions of
examination and the reasoned assessment decision.

the

3.5.

Each notified body must communicate to the other notified bodies the relevant information concerning the
quality system approvals which it has withdrawn or refused.

3.6.

The other notified bodies will receive copies of the quality system approvals issued on request.

4.

Surveillance of the quality system under the responsibility of the notified body

4.1.

4.2.

The purpose of surveillance is to make sure that the manufacturer duly fulfils the obligations arising out of the
approved quality system.

The manufacturer must allow the notified body entrance for inspection purposes to the locations of
manufacture,
in
particular:

inspection and testing, and storage and must provide it with all necessary information,

(cid:151) the quality system documentation,

(cid:151) the quality records, such as inspection reports and test data, calibration data, qualification reports of the

personnel concerned, etc.

4.3.

The notified body must periodically carry out audits to make sure that the manufacturer maintains and applies
the quality system and must provide an audit report to the manufacturer.

The frequency of the audits shall be at least once a year.

4.4.

Additionally the notified body may pay unexpected visits to the manufacturer. During such visits the notified
body may carry out, or cause to be carried out, tests to verify that the quality system is functioning correctly, if
necessary. The notified body must provide the manufacturer with a visit report and, if a test has taken place,
with a test report.

5.

The manufacturer must, for a period of 10 years after the last product has been manufactured, keep at the
disposal of the national authorities:

(cid:151) the documentation referred to in the second indent of point 3.1,

(cid:151) the updating referred to in point 3.4,

(cid:151) the decisions and reports from the notified body which are referred to in the final paragraph of point 3.4,

points 4.3 and 4.4.

6.

The manufacturer or his authorised representative established within the Community must draw up the EC
declaration of conformity of the interoperability constituent.

The content of this declaration has to include at least the information indicated in the Directive 96/48/EC,
Annex IV(3) and Article 13(3). The EC declaration of conformity and the accompanying documents must be
dated and signed.

The declaration must be written in the same language of the technical file and must contain the following:

(cid:151) the Directive references (Directive 96/48/EC and other directives, to which the interoperability constituent

may be subject),

(cid:151) the name and address of

the manufacturer or his authorised representative established within the
Community (give trade name and full address and in the case of authorised representative also give the
trade name of the manufacturer or constructor),

(cid:151) description of interoperability constituent (make, type, etc.),

(cid:151) description of the procedure (module) followed in order to declare conformity,

(cid:151) all of the relevant descriptions met by the interoperability constituent and in particular its conditions of use,

12.9.2002

EN

Official Journal of the European Communities

L 245/123

(cid:151) name and address of the notified body(ies) involved in the procedure followed in respect of conformity and
date of examination certificates together with the duration and conditions of validity of the certificate,

(cid:151) reference to this TSI and any other applicable TSI and where appropriate reference to European

specification,

(cid:151) identification of

signatory having received power

to engage the manufacturer or his authorised

representative established within the Community.

The certificates to be referred to are:

(cid:151) the quality system approval and surveillance reports indicated in points 3 and 4,

(cid:151) the type-examination certificate and its additions.

7.

The manufacturer or his authorised representative established within the Community must keep a copy of the
EC declaration of conformity for a period of 10 years after the last interoperability constituent has been
manufactured.

Where neither the manufacturer nor his authorised representative is established within the Community, the
obligation to keep the technical documentation available is the responsibility of the person who places the
interoperability constituent on the Community market.

Module F (product verification)

Conformity assessment of interoperability constituents

1.

2.

3.

This module describes that part of the procedure whereby a manufacturer or his authorised representative
established within the Community checks and attests that the interoperability constituent concerned and subject
to the provisions of point 3 is in conformity with the type as described in the EC type-examination certificate
and satisfies the requirements of the Directive 96/48/EC and of the TSI that apply to it.

The manufacturer must take all measures necessary in order that the manufacturing process ensures conformity
of the interoperability constituents with the type as described in the EC type-examination certificate and with
the requirements of the Directive 96/48/EC and of the TSI that apply to them.

The notified body must carry out the appropriate examinations and tests in order to check the conformity of
the interoperability constituent with the type as described in the type-examination certificate and with the
requirements of the TSI either by examination and testing of every interoperability constituent as specified in
point 4 or by examination and testing of interoperability constituents on a statistical basis, as specified in point
5, at the choice of the manufacturer.

4.

Verification by examination and testing of every interoperability constituent

4.1.

All products must be individually examined and appropriate tests as set out
in the relevant European
specifications referred to in the TSI or equivalent tests shall be carried out in order to verify their conformity
with the type as described in the type-examination certificate and the requirements of the TSI that apply to
them (*).

4.2.

The notified body must draw up a written certificate of conformity for the approved products relating to the
tests carried out.

4.3.

The manufacturer or his authorised representative must ensure that he is able to supply the notified body’s
certificates of conformity on request.

5.

Statistical verification

5.1.

The manufacturer must present his interoperability constituents in the form of homogeneous lots and shall take
all measures necessary in order that the manufacturing process ensures the homogeneity of each lot produced.

(*) This clause is not applicable to the European specifications that are used to define basic parameters. These are indicated in Annex A.

L 245/124

EN

Official Journal of the European Communities

12.9.2002

5.2.

5.3.

5.4.

All interoperability constituents must be available for verification in the form of homogeneous lots. A random
sample shall be drawn from each lot. Interoperability constituents in a sample shall be individually examined
and appropriate tests as set out in the relevant European specification referred to in Article 10 of Directive
96/48/EC, or equivalent tests, shall be carried out to ensure their conformity with the requirements of the
Directive 96/48/EC and of the TSI which apply to them and to determine whether the lot is accepted or
rejected (*).

The statistical procedure must use appropriate elements (statistical method, sampling plan, etc.), depending on
the characteristics to be assessed, as specified in the TSI which apply to them.

In the case of accepted lots, the notified body shall draw up a written certificate of conformity relating to the
tests carried out. All
those
interoperability constituents from the sample which were found not to be in conformity.

interoperability constituents in the lot may be put on the market except

If a lot is rejected, the notified body or the competent authority must take appropriate measures to prevent the
putting on the market of that lot. In the event of frequent rejection of lots, the notified body may suspend the
statistical verification.

5.5.

The manufacturer or his authorised representative established within the Community must ensure that he is able
to supply the notified body’s certificates of conformity on request.

6.

The manufacturer or his authorised representative established within the Community must draw up the EC
declaration of conformity of the interoperability constituent.

The content of this declaration has to include at least the information indicated in Directive 96/48/EC, Annex
IV(3) and Article 13(3). The EC declaration of conformity and the accompanying documents must be dated and
signed.

The declaration must be written in the same language of the technical file and must contain the following:

(cid:151) the Directive references (Directive 96/48/EC and other directives, to which the interoperability constituent

may be subject),

(cid:151) the name and address of

the manufacturer or his authorised representative established within the
Community (give trade name and full address and in the case of authorised representative also give the
trade name of the manufacturer or constructor),

(cid:151) description of interoperability constituent (make, type, etc.),

(cid:151) description of the procedure (module) followed in order to declare conformity,

(cid:151) all of the relevant descriptions met by the interoperability constituent and in particular its conditions of use,

(cid:151) name and address of the notified body(ies) involved in the procedure followed in respect of conformity and
date of examination certificates together with the duration and conditions of validity of the certificate,

(cid:151) reference to this TSI and any other applicable TSI and where appropriate reference to European

specification,

(cid:151) identification of

signatory having received power

to engage the manufacturer or his authorised

representative established within the Community.

The certificates to be referred to are:

(cid:151) the EC type-examination certificate and its additions,

(cid:151) the certificate of conformity as mentioned under point 4 or 5.

7.

The manufacturer or his authorised representative established within the Community must keep a copy of the
EC declaration of conformity for a period of 10 years after the last interoperability constituent has been
manufactured.

Where neither the manufacturer nor his authorised representative is established within the Community, the
obligation to keep the technical documentation available is the responsibility of the person who places the
interoperability constituent on the Community market.

(*) This clause is not applicable to the European specifications that are used to define basic parameters. These are indicated in Annex A.

12.9.2002

EN

Official Journal of the European Communities

L 245/125

Module H2 (1) (full quality assurance with design examination)

Conformity assessment of interoperability constituents

1.

2.

3.

This module describes the procedure whereby a notified body carries out an examination of the design of an
interoperability constituent and the manufacturer or his authorised representative established within the
Community who satisfies the obligations of point 2, ensures and declares that the interoperability constituent
concerned satisfies the requirements of the Directive 96/48/EC and of the TSI that apply to it.

The manufacturer must operate an approved quality system for design, manufacture and final product
inspection and testing as specified in point 3 and shall be subject to surveillance as specified in point 4.

Quality system

3.1.

The manufacturer must lodge an application for assessment of his quality system with a notified body.

The application must include:

(cid:151) all relevant

information for

the product category representative for

the interoperability constituent

envisaged,

(cid:151) the quality system’s documentation.

3.2.

The quality system must ensure compliance of the interoperability constituent with the requirements of the
Directive 96/48/EC and of the TSI that apply to it. All the elements, requirements and provisions adopted by
the manufacturer must be documented in a systematic and orderly manner in the form of written policies,
procedures and instructions. This quality system documentation shall ensure a common understanding of the
quality policies and procedures such as quality programmes, plans, manuals and records.

It must contain in particular an adequate description of:

(cid:151) the quality objectives and the organisational structure,

(cid:151) responsibilities and powers of the management with regard to design and product quality,

(cid:151) the technical design specifications, including European specifications, that will be applied, and, where the
European specifications referred to in Article 10 of Directive 96/48/EC will not be applied in full, the
means that will be used to ensure that the requirements of the Directive and of the TSI that apply to the
interoperability constituent will be met (*),

(cid:151) the design control and design verification techniques, processes and systematic actions that will be used

when designing the interoperability constituents pertaining to the product category covered,

(cid:151) the corresponding manufacturing, quality control and quality assurance techniques, processes and

systematic actions that will be used,

(cid:151) the examinations and tests that will be carried out before, during and after manufacture, and the frequency

with which they will be carried out,

(cid:151) the quality records, such as inspection reports and test data, calibration data, qualification reports of the

personnel concerned, etc.,

(cid:151) the means to monitor the achievement of the required design and product quality and the effective

operation of the quality system.

The quality policies and procedures shall cover in particular the assessment phases, as design review, review of
manufacturing process and type tests, as they are specified in the TSI
for different characteristics and
performances of the interoperability constituent.

3.3.

The notified body must assess the quality system to determine whether it satisfies the requirements referred to
in point 3.2. It shall presume compliance with these requirements in respect of quality systems that implement
the relevant harmonised standard. This harmonised standard shall be EN ISO 9001 (cid:151) December 2001,
completed if necessary to take into consideration the specificity of the interoperability constituent for which it is
implemented.

(1) Module H2 can be applied only when a sufficient degree of confidence in the ERTMS technologies exists through return of

experience from commercial installations.

(*) This clause is not applicable to the European specifications that are used to define basic parameters. These are indicated in Annex A.

L 245/126

EN

Official Journal of the European Communities

12.9.2002

The audit must be specific for the product category, which is representative for the interoperability constituent.
The auditing team must have at least one member experienced as an assessor in the product technology
concerned. The evaluation procedure shall include an assessment visit to the manufacturer’s premises.

The decision must be notified to the manufacturer. The notification must contain the conclusions of the
examination and the reasoned assessment decision.

3.4.

The manufacturer must undertake to fulfil the obligations arising out of the quality system as approved and to
uphold it so that it remains adequate and efficient.

The manufacturer or his authorised representative must keep the notified body that has approved the quality
system informed of any intended updating of the quality system.

The notified body must evaluate the modifications proposed and decide whether the amended quality system
will still satisfy the requirements referred to in point 3.2 or whether a reassessment is required.

It must notify its decision to the manufacturer. The notification shall contain the conclusions of
examination and the reasoned assessment decision.

the

4.

Surveillance of the quality system under the responsibility of the notified body

4.1.

4.2.

The purpose of surveillance is to make sure that the manufacturer duly fulfils the obligations arising out of the
approved quality system.

The manufacturer must allow the notified body entrance for inspection purposes to the locations of design,
manufacture,
in
particular:

inspection and testing, and storage, and shall provide it with all necessary information,

(cid:151) the quality system documentation,

(cid:151) the quality records as foreseen by the design part of the quality system, such as results of analyses,

calculations, tests, etc.,

(cid:151) the quality records as foreseen by the manufacturing part of the quality system, such as inspection reports

and test data, calibration data, qualification reports of the personnel concerned, etc.

4.3.

The notified body must periodically carry out audits to make sure that the manufacturer maintains and applies
the quality system and shall provide an audit report to the manufacturer.

The frequency of the audits shall be at least once a year.

4.4.

Additionally the notified body may pay unexpected visits to the manufacturer. At the time of such visits, the
notified body may carry out tests or have them carried out in order to check the proper functioning of the
quality system where necessary; it must provide the manufacturer with a visit report and, if a test has been
carried out, with a test report.

5.

The manufacturer must, for a period of 10 years after the last product has been manufactured, keep at the
disposal of the national authorities:

(cid:151) the documentation referred to in the second indent of the second subparagraph of point 3.1,

(cid:151) the updating referred to in the second subparagraph of point 3.4,

(cid:151) the decisions and reports from the notified body which are referred to in the final subparagraph of point

3.4, and points 4.3 and 4.4.

6.

Design examination

6.1.

6.2.

The manufacturer must lodge an application for examination of the design of the interoperability constituent
with a notified body.

The application must enable the design, manufacture and operation of the interoperability constituent to be
understood, and shall enable conformity with the requirements of Directive 96/48/EC and of the TSI to be
assessed.

12.9.2002

EN

Official Journal of the European Communities

L 245/127

It must include:

(cid:151) the technical design specifications, including European specifications, that have been applied,

(cid:151) the necessary supporting evidence for their adequacy,

in particular where the European specifications
referred to in Article 10 of Directive 96/48/EC have not been applied in full. This supporting evidence must
include the results of tests carried out by the appropriate laboratory of the manufacturer or on his
behalf (*).

6.3.

The notified body must examine the application and where the design meets the provisions of the TSI that
apply to it must issue a design examination certificate to the applicant. The certificate shall contain the
conclusions of the examination, conditions for its validity, the necessary data for identification of the approved
design and, if relevant, a description of the product’s functioning.

The time period of validity shall be no longer than three years.

6.4.

6.5.

The applicant must keep the notified body that has issued the design examination certificate informed of any
modification to the approved design. Modifications to the approved design must receive additional approval
from the notified body that issued the design examination certificate where such changes may affect the
conformity with the requirements of the TSI or the prescribed conditions for use of the product. This additional
approval is given in the form of an addition to the original design examination certificate.

If no modifications as under point 6.4 have been made, the validity of an expiring certificate can be extended
for another period of validity. The applicant will apply for such a prolongation by a written confirmation that
no such modifications have been made, and the notified body issues a prolongation for another period of
validity as in point 6.3 if no contrary information exists. This procedure can be repeated.

7.

Each notified body must communicate to the other notified bodies the relevant information concerning the
quality system approvals and the design examination certificates which it has withdrawn or refused.

The other notified bodies will receive copies, on request, of:

(cid:151) the quality system approvals and additional approvals issued, and

(cid:151) the design examination certificates and additions issued.

8.

The manufacturer or his authorised representative established within the Community must draw up the EC
declaration of conformity of the interoperability constituent.

The content of this declaration has to include at least the information indicated in Directive 96/48/EC, Annex
IV(3) and Article 13(3). The EC declaration of conformity and its accompanying documents must be dated and
signed.

The declaration must be written in the same language of the technical file and must contain the following:

(cid:151) the Directive references (Directive 96/48/EC and other directives to which the interoperability constituent

may be subject),

(cid:151) the name and address of

the manufacturer or his authorised representative established within the
Community (give trade name and full address and in the case of authorised representative also give the
trade name of the manufacturer or constructor),

(cid:151) description of interoperability constituent (make, type, etc.),

(cid:151) description of the procedure (module) followed in order to declare conformity,

(cid:151) all of the relevant descriptions met by the interoperability constituent and in particular its conditions of use,

(cid:151) name and address of the notified body(ies) involved in the procedure followed in respect of conformity and
date of examination certificates together with the duration and conditions of validity of the certificate,

(cid:151) reference to this TSI and other applicable TSI and where appropriate to European specifications,

(cid:151) identification of

signatory having received power

to engage the manufacturer or his authorised

representative established within the Community.

(*) This clause is not applicable to the European specifications that are used to define basic parameters. These are indicated in Annex A.

L 245/128

EN

Official Journal of the European Communities

12.9.2002

The certificates to be referred to are:

(cid:151) the quality system approval and surveillance reports indicated in points 3 and 4,

(cid:151) the design examination certificate and its additions.

9.

The manufacturer or his authorised representative established within the Community must keep a copy of the
EC declaration of conformity for a period of 10 years after the last interoperability constituent has been
manufactured.

Where neither the manufacturer nor his authorised representative is established within the Community, the
obligation to keep the technical documentation available is the responsibility of the person who places the
interoperability constituent on the Community market.

Module SB (type-examination)

EC verification of control-command subsystem (**)

1.

This module describes the part of the EC verification procedure whereby a notified body checks and certifies at
the request of an adjudicating entity or its authorised representative established within the Community, that a
type of a control-command subsystem, representative for the production envisaged,

(cid:151) complies with this TSI and any other applicable TSI, which demonstrates that the essential requirements of

the Directive 96/48/EC have been met,

(cid:151) complies with the other regulations deriving from the Treaty.

2.

The adjudicating entity or its authorised representative established within the Community must lodge an
application for EC verification (through type-examination) of the subsystem with a notified body of his choice.

The application includes:

(cid:151) name and address of the adjudicating entity or its authorised representative

(cid:151) the technical documentation, as described in point 3.

3.

The applicant must place at the disposal of the notified body a specimen of the subsystem representative of the
production envisaged and hereinafter called (cid:145)type(cid:146).

A type may cover several versions of the subsystem provided that the differences between the versions do not
affect the provisions of the TSI.

The notified body may request further specimens if needed for carrying out the test programme.

If so required for specific test or examination methods and specified in the TSI or in the European specification
referred to in Article 10 of Directive 96/48/EC, also a specimen or specimens of a subassembly or assembly or
a specimen of the subsystem in a pre-assembled condition has to be delivered.

The technical documentation must enable the design, manufacture, installation and operation of the subsystem
to be understood, and shall enable conformity with the provisions of Directive 96/48/EC and of the TSI to be
assessed. It must, as far as relevant for such assessment, cover the design, manufacture and operation of the
subsystem.

It must include:

(cid:151) a general description of the subsystem, overall design and structure,

(cid:151) the Infrastructure or rolling stock register (as appropriate), including all indications as specified in the TSI,

(cid:151) conceptual design and manufacturing drawings and schemes of components, subassemblies, assemblies,

circuits, etc.,

(cid:151) descriptions and explanations necessary for the understanding of said drawings and schemes and the

operation of the product,

(**) This module applies to both on-board and trackside control-command assemblies.

12.9.2002

EN

Official Journal of the European Communities

L 245/129

(cid:151) the technical design specifications, including European specifications, that have been applied,

(cid:151) the necessary supporting evidence for their adequacy, in particular where European specifications referred

to in Article 10 of Directive 96/48/EC and the relevant clauses have not been applied in full (*),

(cid:151) a list of the interoperability constituents, to be incorporated into the subsystem,

(cid:151) technical documentation as regards the manufacturing and the assembling of the subsystem,

(cid:151) a list of manufacturers, involved in the subsystem’s design, manufacturing, assembling and installation,

(cid:151) conditions for use and maintenance of the subsystem (restrictions of running time or distance, wear limits,

etc.),

(cid:151) a list of the European specifications referred to in Article 10 of Directive 96/48/EC or in the technical

design specification,

(cid:151) results of design calculations made, examinations carried out, etc.,

(cid:151) test reports.

If the TSI is requiring further information for the technical documentation, this has to be included.

4.

The notified body must:

4.1.

examine the technical documentation,

4.2.

4.3.

4.4.

4.5.

4.6.

if a design review is requested in the TSI, perform an examination of the design methods, the design tools and
the design results to evaluate their capability to fulfil the requirements for conformity for the subsystem at the
completion of the design process,

type tests are requested in the TSI, verify that

the subsystem or of assemblies or
if
subassemblies of
type tests, has (have) been manufactured in
conformity with the technical documentation, and carry out or have carried out the type tests in accordance
with the provisions of the TSI and the European specifications concerned,

the subsystem, required for carrying out

the specimen(s) of

identify the elements which have been designed in accordance with the relevant provisions of the TSI and the
European specifications referred to in Article 10 of Directive 96/48/EC, as well as the elements which have been
designed without applying the relevant provisions of those European specifications (*);

perform or have performed the appropriate examinations and necessary tests in accordance with points 4.2 and
4.3 to establish whether, where the appropriate European specifications referred to in the TSI have not been
applied, the solutions adopted meet the requirements of the TSI (*);

perform or have performed the appropriate examinations and necessary tests in accordance with points 4.2 and
4.3 to establish whether, where the relevant European specifications have been chosen, these have actually been
applied;

4.7.

agree with the applicant the location where the examinations and necessary tests will be carried out.

5.

Where the type meets the provisions of Directive 96/48/EC and of the TSI, the notified body must issue an EC
type-examination certificate to the applicant. The certificate must contain the name and address of
the
adjudicating entity and the manufacturer(s), conclusions of the examination, conditions for its validity and the
necessary data for identification of the approved type.

The time period of validity shall be no longer than three years.

A list of the relevant parts of the technical documentation must be annexed to the certificate and a copy kept
by the notified body.

the adjudicating entity or its authorised representative established within the Community is denied a

If
type-examination certificate, the notified body must provide detailed reasons for such denial.

Provision must be made for an appeals procedure.

(*) This clause is not applicable to the European specifications that are used to define basic parameters. These are indicated in Annex A.

L 245/130

EN

Official Journal of the European Communities

12.9.2002

6.

7.

8.

9.

The applicant must inform the notified body that holds the technical documentation concerning the EC
type-examination certificate of all modifications to the approved subsystem which must receive additional
approval where such changes may affect the conformity with the requirements of Directive 96/48/EC and the
TSI or the prescribed conditions for use of the subsystem. This additional approval is given in the form of an
addition to the original EC type-examination certificate, or a new certificate will be issued after withdrawal of
the old certificate.

If no modifications as under point 6 have been made, the validity of an expiring certificate can be extended for
another period of validity. The applicant will apply for such a prolongation by a written confirmation that no
such modifications have been made, and the notified body issues a prolongation for another period of validity
as in point 5, if no contrary information exists. This procedure can be repeated.

Each notified body must communicate to the other notified bodies the relevant information concerning the EC
type-examination certificates it has withdrawn or refused.

The other notified bodies will receive copies of the type-examination certificates issued and/or their additions on
request. The annexes to the certificates must be kept at the disposal of the other notified bodies.

10.

The adjudicating entity or its authorised representative established within the Community must keep with the
technical documentation copies of type-examination certificates and their additions throughout the service life
of the subsystem, it must be sent to any other Member State who so requests.

Module SD (production quality assurance)

EC verification of control-command subsystem (**)

1.

2.

This module describes the EC verification procedure whereby a notified body checks and certifies, at the request
of an adjudicating entity or
that a
control-command subsystem, for which already an EC type-examination certificate has been issued by a notified
body:

its authorised representative established within the Community,

(cid:151) complies with this TSI and any other applicable TSI, which demonstrates that the essential requirements of

Directive 96/48/EC have been met,

(cid:151) complies with the other regulations deriving from the Treaty and may be put into service.

The notified body is carrying out the procedure, under the condition, that the adjudicating entity and the
manufacturers involved are satisfying the obligations of point 2.

For the subsystem, being subject of the EC verification procedure, the adjudicating entity must contract only
with manufacturers, whose activities contributing to the subsystem project
to be verified (manufacturing,
assembling, installation) are subject to an approved quality system for manufacture and final product inspection
and testing as specified in point 3 and which shall be subject to surveillance as specified in point 4.

The term (cid:145)manufacturer(cid:146) also includes companies:

(cid:151) responsible for the whole subsystem project (including in particular responsibility for subsystem integration

(main contractor),

(cid:151) performing assembling (assemblers) and installation of the subsystem.

The main contractor responsible for the whole subsystem project (including in particular responsibility for
subsystem integration), must operate in any case an approved quality system for manufacture and final product
inspection and testing, as specified in point 3 and which shall be subject to surveillance as specified in point 4.

In the case, that the adjudicating entity is directly involved in the production (including assembling and
installation), or that the adjudicating entity itself is responsible for the whole subsystem project (including in
particular responsibility for subsystem integration),
it has to operate an approved quality system for those
activities, as specified in point 3 and subject to surveillance as specified in point 4.

3.

Quality system

3.1.

The manufacturer(s) involved and, if involved the adjudicating entity must lodge an application for assessment
of their quality system with a notified body of their choice.

(**) This module applies to both on-board and trackside control-command assemblies.

12.9.2002

EN

Official Journal of the European Communities

L 245/131

The application must include:

(cid:151) all relevant information for the subsystem envisaged,

(cid:151) the quality system’s documentation.

(cid:151) the technical documentation of the approved type and a copy of the type-examination certificate, issued

after the completion of the type-examination procedure of module SB.

For manufacturers, only involved in a part of the subsystem project, the information is only requested for that
specific relevant part.

3.2.

For the main contractor the quality system must ensure overall compliance of the subsystem with the type as
described in the type-examination certificate and overall compliance of the subsystem with the requirements of
the TSI. For other manufacturers (subsuppliers) the quality system has to ensure compliance of their relevant
contribution to the subsystem with the type as described in the type-examination certificate and with the
requirements of the TSI.

All the elements, requirements and provisions adopted by the applicants must be documented in a systematic
and orderly manner in the form of written policies, procedures and instructions. This quality system
documentation shall ensure a common understanding of the quality policies and procedures such as quality
programmes, plans, manuals and records.

It must contain in particular an adequate description of the following items for all applicants:

(cid:151) the quality objectives and the organisational structure,

(cid:151) the corresponding manufacturing, quality control and quality assurance techniques, processes and

systematic actions that will be used,

(cid:151) the examinations, the checking and tests that will be carried out before, during and after manufacture,

assembling and installation and the frequency with which they will be carried out,

(cid:151) the quality records, such as inspection reports and test data, calibration data, qualification reports of the

personnel concerned, etc.,

and for the main contractor:

(cid:151) responsibilities and powers of the management with regard to overall subsystem quality,

including in

particular the subsystem integration management.

The examinations, tests and checking shall cover all of the following stages:

(cid:151) structure of subsystem,

including,

in particular, civil-engineering activities, constituent assembly,

final

adjustment,

(cid:151) final testing of the subsystem,

(cid:151) and, where specified in the TSI, the validation under full operation conditions.

3.3.

The notified body referred to in point 3.1 must assess the quality system to determine whether it satisfies the
requirements referred to in point 3.2. It shall presume compliance with these requirements in respect of quality
systems that implement the relevant harmonised standard. This harmonised standard shall be EN ISO 9001 (cid:150)
December 2000, completed if necessary to take into consideration the specificity of the subsystem for which it
is implemented.

The audit shall be specific for the subsystem concerned, taking into consideration the specific contribution of
the applicant to the subsystem. The auditing team must have at least one member experienced as an assessor in
the subsystem technology concerned. The evaluation procedure shall
to the
applicant’s premises.

include an assessment visit

The decision must be notified to the applicant. The notification must contain the conclusions of
examination and the reasoned assessment decision.

the

3.4.

The manufacturer(s) and if involved the adjudicating entity must undertake to fulfil the obligations arising out
of the quality system as approved and to uphold it so that it remains adequate and efficient.

They must keep the notified body that has approved the quality system informed of any intended updating of
the quality system.

L 245/132

EN

Official Journal of the European Communities

12.9.2002

The notified body must evaluate the modifications proposed and decide whether the amended quality system
will still satisfy the requirements referred to in point 3.2 or whether a reassessment is required.

It must notify its decision to the applicant. The notification shall contain the conclusions of the examination
and the reasoned assessment decision.

4.

Surveillance of the quality system(s) under the responsibility of the notified body(ies)

4.1.

The purpose of surveillance is to make sure that the manufacturer(s) and, if involved the adjudicating entity duly
fulfil the obligations arising out of the approved quality system.

4.2.

4.3.

The notified body as referred to under point 3.1 must have permanent access for inspection purposes to the
locations of building sites, production workshops, locations of assembling and installation, storage areas and,
where appropriate, prefabrication or testing facilities and, more general, to all premises which it considers
necessary for its task, in accordance with the applicant’s specific contribution to the subsystem project.

The manufacturer(s) and, if involved the adjudicating entity or its authorised representative established within
the Community must send the notified body referred to under point 3.1 (or have sent it) all the documents
needed for that purpose and in particular the implementation plans and technical records concerning the
subsystem (as far as relevant for the specific contribution of the applicant to the subsystem), in particular:

(cid:151) the quality system documentation, including the particular means implemented to ensure that:

(cid:151) (for the main contractor) overall responsibilities and powers of the management for the compliance of

the whole entire subsystem are sufficiently and properly defined,

(cid:151) the quality systems of each manufacturer are correctly managed for achieving integration at subsystem

level,

(cid:151) the quality records as foreseen by the manufacturing part (including assembling and installation) of the
quality system, such as inspection reports and test data, calibration data, qualification reports of the
personnel concerned, etc.

4.4.

The notified body(ies) must periodically carry out audits to make sure that the manufacturer(s) and, if involved
the adjudicating entity maintain and apply the quality system and must provide an audit report to them.

The frequency of the audits shall be at least once a year, with at least one audit during the time period of
performing relevant activities (manufacture, assembling or installation) for the subsystem being the subject of
the EC verification procedure mentioned under point 6.

4.5.

Additionally the notified body(ies) may pay unexpected visits to the sites mentioned under point 4.2 of the
applicant(s). At the time of such visits, the notified body may conduct complete or partial audits and may carry
out or cause to be carried out tests, in order to check the proper functioning of the quality system where
necessary. It must provide the applicant(s) with an inspection report and also, if an audit has been carried out,
with an audit report, and, if a test has been carried out with a test report.

5.

The manufacturer(s) and,
subsystem has been manufactured, keep at the disposal of the national authorities:

if involved the adjudicating entity must, for a period of 10 years after the last

(cid:151) the documentation referred to in the second indent of the second subparagraph of point 3.1,

(cid:151) the updating referred to in the second subparagraph of point 3.4,

(cid:151) the decisions and reports from the notified body which are referred to in the final subparagraph of point

3.4, and points 4.4 and 4.5.

6.

EC verification procedure

6.1.

The adjudicating entity or its authorised representative established within the Community must lodge an
application for EC verification of the subsystem (through production quality assurance), including coordination
of the surveillance of the quality systems as under point 6.5, with a notified body of its choice. The adjudicating
entity or his authorised representative within the Community must inform the manufacturers involved of this
choice and of the application.

12.9.2002

EN

Official Journal of the European Communities

L 245/133

6.2.

The application must enable the design, manufacture, assembling, installation and operation of the subsystem to
be understood, and shall enable conformity with the requirements of Directive 96/48/EC and the TSI to be
assessed.

It must include:

(cid:151) the technical documentation regarding the approved type, including the type-examination certificate, as

issued after completion of the procedure defined in module SB, and, if not included in this documentation:

(cid:151) the technical design specifications, including European specifications, that have been applied,

(cid:151) the necessary supporting evidence for their adequacy, in particular where the European specifications
referred to in Article 10 of Directive 96/48/EC have not been applied in full (*). This supporting
evidence must include the results of tests carried out by the appropriate laboratory of the manufacturer
or on his behalf.

(cid:151) the infrastructure or rolling stock register (as appropriate), including all indications as specified in the TSI,

(cid:151) the technical documentation as regards the manufacturing and the assembling of the subsystem,

(cid:151) a list of the interoperability constituents, to be incorporated into the subsystem,

(cid:151) a list of all manufacturers, involved in the subsystem’s design, manufacturing, assembling and installation,

(cid:151) the demonstration, that all stages, as mentioned under point 3.2, are covered by quality systems of the

manufacturers and/or of the adjudicating entity involved and the evidence of their effectiveness,

(cid:151) indication of the notified body(ies), responsible for the approval and surveillance of these quality systems.

6.3.

6.4.

The notified body must examine the application concerning the validity of the type-examination and the
type-examination certificate.

The notified body must then examine, if all stages of the subsystem as mentioned in the last subparagraph of
point 3.2 are sufficiently and properly covered by the approval and surveillance of the quality system(s) of the
applicant(s).

If the conformity of the subsystem with the type as described in the EC type-examination certificate and the
compliance of the subsystem with the requirements of the Directive 96/48/EC and the TSI is based on more
than one quality system, it has to examine in particular:

(cid:151) if the relations and interfaces between the quality systems are clearly documented,

(cid:151) and if overall responsibilities and powers of the management for the compliance of the whole entire

subsystem for the main contractor are sufficiently and properly defined.

6.5.

The notified body responsible for the EC verification, if not carrying out the surveillance of the quality system(s)
concerned as under point 4, must coordinate the surveillance activities of any other notified body responsible
for that task, in order to ensure that correct management of interfaces between the different quality systems in
view of subsystem integration has been performed. This coordination includes the right of the notified body
responsible for the EC verification:

(cid:151) to receive all documentation (approval and surveillance), issued by the other notified body(ies),

(cid:151) to witness the surveillance audits as under point 4.4,

(cid:151) to initiate additional audits as under point 4.5 under its responsibility and together with the other notified

body(ies).

6.6. Where the subsystem meets the requirements of Directive 96/48/EC and the TSI, the notified body must then,
the quality system(s), draw up the
based on the type-examination and the approval and surveillance of
certificate of EC verification intended for the adjudicating entity or its authorised representative established
within the Community, which in turn draws up the EC declaration of verification intended for the supervisory
authority in the Member State within which the subsystem is located and/or operates.

(*) This clause is not applicable to the European specifications that are used to define basic parameters. These are indicated in Annex A.

L 245/134

EN

Official Journal of the European Communities

12.9.2002

The EC declaration of verification and the accompanying documents must be dated and signed. The declaration
must be written in the same language of the technical file and must contain at least the information included in
Annex V to Directive 96/48/EC.

6.7.

The notified body shall be responsible for compiling the technical file that has to accompany the EC declaration
of verification. The technical file has to include at least the information indicated in Directive 96/48/EC, Article
18(3), and in particular as follows:

(cid:151) all necessary documents relating to the characteristics of the subsystem,

(cid:151) list of interoperability constituents incorporated into the subsystem,

(cid:151) copies of the EC declarations of conformity and, where appropriate, of the EC declarations of suitability for
use, which said constituents must be provided in accordance with Article 13 of the Directive, accompanied,
where appropriate, by the corresponding documents (certificates, quality system approval and surveillance
documents) issued by the notified bodies on the basis of the TSI,

(cid:151) all elements relating to the conditions and limits for use,

(cid:151) all elements relating to the instructions concerning servicing, constant or routine monitoring, adjustment

and maintenance,

(cid:151) the EC type-examination certificate for the subsystem and the accompanying technical documentation,

(cid:151) certificate of EC verification of

the notified body as mentioned under point 6.5, accompanied by
corresponding calculation notes and countersigned by itself, stating that the project complies with the
Directive and the TSI, and mentioning, where appropriate, reservations recorded during performance of the
activities and not withdrawn; the certificate should also be accompanied by the inspection and audit reports
drawn up in connection with the verification, as mentioned under points 4.4 and 4.5 and in particular:

(cid:151) the infrastructure or rolling stock register (as appropriate), including all indications as specified in the TSI.

The complete records accompanying the certificate of EC verification must be lodged with the adjudicating
entity or its authorised representative in support of the certificate of EC verification issued by the notified body
and must be attached to the EC declaration of verification drawn up by the adjudicating entity intended for the
supervisory authority.

The adjudicating entity or its authorised representative within the Community must keep a copy of the records
throughout the service life of the subsystem; it must be sent to any other Member State which so requests.

Module SF (product verification)

EC verification of control-command subsystem (**)

This module describes the EC verification procedure whereby a notified body checks and certifies at the request
of an adjudicating entity or
that a
control-command subsystem, for which already an EC type-examination certificate has been issued by a notified
body:

its authorised representative established within the Community,

(cid:151) complies with this TSI and any other applicable TSI, which demonstrates that the essential requirements of

Directive 96/48/EC have been met,

(cid:151) complies with the other regulations deriving from the Treaty and may be put into service.

The adjudicating entity or its authorised representative established within the Community must lodge an
application for EC verification (through product verification) of the subsystem with a notified body of his
choice.

7.

8.

1.

2.

The application includes:

(cid:151) name and address of the adjudicating entity or its authorised representative,

(cid:151) the technical documentation.

(**) This module applies to both on-board and trackside control-command assemblies.

12.9.2002

EN

Official Journal of the European Communities

L 245/135

3.

4.

5.

Within that part of the procedure the adjudicating entity or his authorised representative established within the
Community checks and attests that the subsystem concerned is in conformity with the type as described in the
EC type-examination certificate and satisfies the requirements of Directive 96/48/EC and the TSI that apply to
them.

The adjudicating entity must take all measures necessary in order that the manufacturing process (including
assembling and integration of interoperability constituents) ensures conformity of the subsystem with the type
as described in the EC type-examination certificate and with the requirements that apply to them.

The technical documentation must enable the design, manufacture, installation and operation of the subsystem
to be understood, and shall enable conformity with the type as described in the type-examination certificate and
the requirements of the Directive and the TSI to be assessed.

It must include:

(cid:151) the type-examination certificate and its accompanying documents and additions, and, as far as not included

in the documents accompanying the EC type-examination certificate,

(cid:151) a general description of the subsystem, overall design and structure,

(cid:151) the infrastructure or rolling stock register (as appropriate), including all indications as specified in the TSI,

(cid:151) conceptual design and manufacturing drawings and schemes of subassemblies, circuits, etc.,

(cid:151) technical documentation as regards the manufacturing and the assembling of the subsystem,

(cid:151) the technical design specifications, including European specification, that have been applied,

(cid:151) the necessary supporting evidence for their adequacy, in particular where European specification have not

been applied in full (*),

(cid:151) a list of the interoperability constituents, to be incorporated into the subsystem,

(cid:151) a list of manufacturers, involved in the subsystem’s design, manufacturing, assembling and installation,

(cid:151) a list of the European specification

If the TSI is requiring further information for the technical documentation, this has to be included.

6.

The notified body must carry out the appropriate examinations and tests in order to check the conformity of
the subsystem with the type as described in the EC type-examination certificate and with the requirements of
Directive 96/48/EC and the TSI by examination and testing of every subsystem, manufactured as a serial
product, as specified under point 4.

7.

Verification by examination and testing of every subsystem (as a serial product)

7.1.

The notified body must carry out the tests, examinations and verifications, to ensure conformity subsystem as
serial products with the essential requirements of the Directive and of the TSI. The examinations, tests and
checking shall extend to the following stages as provided for in the TSI:

(cid:151) structure of subsystem, including constituent assembly and overall adjustments,

(cid:151) final testing of the subsystem,

(cid:151) and, whenever specified in the TSI, the validation under full operational conditions.

7.2.

All subsystems (as serial products) must be individually examined and appropriate tests and verifications as set
out in the TSI and in the relevant European specifications (or equivalent tests (*)) shall be carried out in order to
verify their conformity with the type as described in the type-examination certificate and the requirements of
the TSI that apply to them.

8.

9.

The notified body may agree with the adjudicating entity the locations where the tests will be carried out and
may agree that final testing of the subsystem and, whenever required in the TSI, tests or validation under full
operating conditions, are carried out by the adjudicating entity under direct supervision and attendance of the
notified body.

The notified body must have permanent access for testing and verification purposes to production workshops,
locations of assembling and installations, and where appropriate, prefabrication and testing facilities in order to
carry out its tasks as provided for in the TSI.

(*) This clause is not applicable to the European specifications that are used to define basic parameters. These are indicated in Annex

A.

L 245/136

EN

Official Journal of the European Communities

12.9.2002

10. Where the subsystem meets the requirements of Directive 96/48/EC and the TSI, the notified body must then,
based on the tests, verifications and checkings carried out on all serial products as indicated in point 7 and
required in the TSI and in the European specification referred to in Article 10 of Directive 96/48/EC, draw up
the certificate of EC verification intended for the adjudicating entity or its authorised representative established
within the Community, which in turn draws up the EC declaration of verification intended for the supervisory
authority in the Member State where the subsystem is located and/or operates. The EC declaration of
verification and the accompanying documents must be dated and signed. The declaration must be written in the
same language of the technical file and must contain at least the information included in Annex V to Directive
96/48/EC.

11.

The notified body shall be responsible for compiling the technical file that has to accompany the EC declaration
of verification. The technical file has to include at least the information indicated in Directive 96/48/EC, Article
18(3), and in particular as follows:

(cid:151) all necessary documents relating to the characteristics of the subsystem,

(cid:151) the infrastructure or rolling stock register (as appropriate), including all indications as specified in the TSI,

(cid:151) list of interoperability constituents incorporated into the subsystem,

(cid:151) copies of the EC declarations of conformity and, where appropriate, of the EC declarations of suitability for
use, which said constituents must be provided in accordance with Article 13 of the Directive, accompanied,
where appropriate, by the corresponding documents (certificates, quality system approval and surveillance
documents) issued by the notified bodies on the basis of the TSI,

(cid:151) all elements relating to conditions and limits for use,

(cid:151) all elements relating to the instructions concerning servicing, constant or routine monitoring, adjustment

and maintenance,

(cid:151) EC type-examination certificate and accompanying technical documentation,

(cid:151) certificate of EC verification of

the notified body as mentioned under point 10, accompanied by
corresponding calculation notes and countersigned by itself, stating that the project complies with the
Directive and the TSI, and mentioning, where appropriate, reservations recorded during performance of
activities and not withdrawn; the certificate should also be accompanied, if relevant, by the inspection and
audit reports drawn up in connection with the verification.

12.

The complete records accompanying the certificate of EC verification must be lodged with the adjudicating
entity or its authorised representative in support of the certificate of EC verification issued by the notified body
and must be attached to the EC declaration of verification drawn up by the adjudicating entity intended for the
supervisory authority.

13.

The adjudicating entity or its authorised representative within the Community must keep a copy of the records
throughout the service life of the subsystem; it must be sent to any other Member State which so requests.

Module SG (Unit verification)

EC verification of control-command subsystem (**)

1.

This module describes the EC verification procedure whereby a notified body checks and certifies, at the request
of an adjudicating entity or
that a
control-command subsystem:

its authorised representative established within the Community,

(cid:151) complies with this TSI and any other applicable TSI, which demonstrates that the essential requirements of

Directive 96/48/EC have been met,

(cid:151) complies with the other regulations deriving from the Treaty and may be put into service.

2.

The adjudicating entity or its authorised representative established within the Community must lodge an
application for EC verification (through unit verification) of the subsystem with a notified body of his choice.

The application includes:

(cid:151) the name and address of the adjudicating entity or its authorised representative

(cid:151) the technical documentation.

(**) This module applies to the trackside control-command assembly.

12.9.2002

EN

Official Journal of the European Communities

L 245/137

3.

The technical documentation must enable the design, manufacture, installation and operation of the subsystem
to be understood, and shall enable conformity with the requirements of the TSI to be assessed.

It must include:

(cid:151) a general description of the subsystem, overall design and structure,

(cid:151) the infrastructure register, including all indications as specified in the TSI,

(cid:151) conceptual design and manufacturing drawings and schemes of subassemblies, circuits, etc.,

(cid:151) technical documentation as regards the manufacturing and the assembling of the subsystem,

(cid:151) the technical design specifications, including European specifications, that have been applied,

(cid:151) the necessary supporting evidence for their adequacy, in particular where European specifications have not

been applied in full (*),

(cid:151) a list of the interoperability constituents, to be incorporated into the subsystem,

(cid:151) a list of manufacturers, involved in the subsystem’s design, manufacturing, assembling and installation,

(cid:151) a list of the European specifications.

If the TSI is requiring further information for the technical documentation, this has to be included.

The notified body must examine the application, and carry out the appropriate tests and verifications as set out
in the TSI and/or in the European specifications referred to in the TSI, to ensure conformity with the essential
requirements of the Directive as provided for in the TSI. The examinations, tests and checking shall extend to
the following stages as provided for in the TSI:

(cid:151) overall design,

(cid:151) structure of subsystem, including, in particular and when relevant, civil-engineering activities, constituent

assembly, overall adjustments,

(cid:151) final testing of the subsystem,

(cid:151) and, whenever specified in the TSI, the validation under full operational conditions.

The notified body may agree with the adjudicating entity the locations where the tests will be carried out and
may agree that final subsystem tests and, whenever required in the TSI, tests in full operating conditions, are
carried out by the adjudicating entity under direct supervision and attendance of the notified body.

The notified body must have permanent access for testing and verification purposes to the locations of design,
building sites, production workshops,
locations of assembling and installations, and where appropriate,
prefabrication and testing facilities in order to carry out its tasks as provided for in the TSI.

Where the subsystem meets the requirements of the TSI, the notified body must then, based on the tests,
verifications and checkings carried out as required in the TSI and in the European specifications referred to in
the TSI, draw up the certificate of EC verification intended for the adjudicating entity or its authorised
representative established within the Community, which in turn draws up the EC declaration of verification
intended for the supervisory authority in the Member State where the subsystem is located and/or operates. The
EC declaration of verification and the accompanying documents must be dated and signed. The declaration must
be written in the same language as the technical file and must contain at least the information included in
Annex V to Directive 96/48/EC.

The notified body shall be responsible for compiling the technical file that has to accompany the EC declaration
of verification. The technical file has to include at least the information indicated in Directive 96/48/EC, Article
18(3), and in particular as follows:

(cid:151) all necessary documents relating to the characteristics of the subsystem,

(cid:151) list of interoperability constituents incorporated into the subsystem,

4.

5.

6.

7.

8.

(*) This clause is not applicable to the European specifications that are used to define basic parameters. These are indicated in Annex

A.

L 245/138

EN

Official Journal of the European Communities

12.9.2002

(cid:151) copies of the EC declarations of conformity and, where appropriate, of the EC declarations of suitability for
use, which said constituents must be provided in accordance with Article 13 of the Directive, accompanied,
where appropriate, by the corresponding documents (certificates, quality system approval and surveillance
documents) issued by the notified bodies on the basis of the TSI,

(cid:151) all elements relating to conditions and limits for use,

(cid:151) all elements relating to the instructions concerning servicing, constant or routine monitoring, adjustment

and maintenance,

(cid:151) certificate of EC verification of

the notified body as mentioned under point 7, accompanied by
corresponding calculation notes and countersigned by itself, stating that the project complies with the
Directive and the TSI, and mentioning, where appropriate, reservations recorded during performance of
activities and not withdrawn; the certificate should also be accompanied, if relevant, by the inspection and
audit reports drawn up in connection with the verification,

(cid:151) the infrastructure register, including all indications as specified in the TSI.

9.

The complete records accompanying the certificate of EC verification must be lodged with the adjudicating
entity or its authorised representative in support of the certificate of EC verification issued by the notified body
and must be attached to the EC declaration of verification drawn up by the adjudicating entity intended for the
supervisory authority.

10.

The adjudicating entity or its authorised representative within the Community must keep a copy of the records
throughout the service life of the subsystem; it must be sent to any other Member State who so request.

Module SH2 (2) (full quality assurance with design examination)

EC verification of the control-command subsystem (**)

1.

This module describes the EC verification procedure whereby a notified body checks and certifies, at the request
of an adjudicating entity or
that a
control-command subsystem:

its authorised representative established within the Community,

(cid:151) complies with this TSI and any other applicable TSI, which demonstrates that the essential requirements of

Directive 96/48/EC have been met,

(cid:151) complies with the other regulations deriving from the Treaty and may be put into service.

The notified body is carrying out the procedure, including a design examination of the subsystem under the
condition, that the adjudicating entity and the manufacturers involved are satisfying the obligations of point 2.

2.

For the subsystem, being subject of the EC verification procedure, the adjudicating entity must contract only
with manufacturers, whose activities contributing to the subsystem project to be verified (design, manufacturing,
assembling, installation) are subject to an approved quality system for design, manufacture and final product
inspection and testing as specified in point 3, and which shall be subject to surveillance as specified in point 4.

The term (cid:145)manufacturer(cid:146) also includes companies:

(cid:151) responsible for the whole subsystem project (including in particular responsibility for subsystem integration

(main contractor),

(cid:151) performing design services or studies (e.g. consultants),

(cid:151) performing assembling (assemblers) and installation of the subsystem. For manufacturers, performing only
assembling and installation, a quality system for manufacture and final product inspection and testing is
sufficient.

The main contractor responsible for the whole subsystem project (including in particular responsibility for
subsystem integration), must operate in any case an approved quality system for design, manufacture and final
product inspection and testing, as specified in point 3 and which shall be subject to surveillance as specified in
point 4.

(2) Module SH2 can be applied only when a sufficient degree of confidence in the ERTMS technologies exists through return of

experience from commercial installations.

(**) This module applies to both on-board and trackside control-command assemblies.

12.9.2002

EN

Official Journal of the European Communities

L 245/139

that

In the case,
the adjudicating entity is directly involved in the design and/or production (including
assembling and installation), or that the adjudicating entity itself is responsible for the whole subsystem project
(including in particular responsibility for subsystem integration), it has to operate an approved quality system
for those activities, as specified in point 3 and subject to surveillance as specified in point 4.

3.

Quality system

3.1.

The manufacturer(s) involved and, if involved, the adjudicating entity must lodge an application for assessment
of their quality system with a notified body of their choice.

The application must include:

(cid:151) all relevant information for the subsystem envisaged,

(cid:151) the quality system’s documentation.

For manufacturers, only involved in a part of the subsystem project, the information is only requested for that
specific relevant part.

3.2.

For the main contractor the quality system must ensure overall compliance of
the subsystem with the
requirements of Directive 96/48/EC and the TSI. For other manufacturers (subsuppliers) the quality system has
to ensure compliance of their relevant contribution to the subsystem with the requirements of the TSI.

All the elements, requirements and provisions adopted by the applicants must be documented in a systematic
and orderly manner in the form of written policies, procedures and instructions. This quality system
documentation shall ensure a common understanding of the quality policies and procedures such as quality
programmes, plans, manuals and records.

It must contain in particular an adequate description of the following items for all applicants:

(cid:151) the quality objectives and the organisational structure,

(cid:151) the corresponding manufacturing, quality control and quality assurance techniques, processes and

systematic actions that will be used,

(cid:151) the examinations, the checking and tests that will be carried out before, during and after manufacture,

assembling and installation and the frequency with which they will be carried out,

(cid:151) the quality records, such as inspection reports and test data, calibration data, qualification reports of the

personnel concerned, etc.,

for the main contractor and for the subsuppliers (only as far as relevant for their specific contribution to the
subsystem project):

(cid:151) the technical design specifications, including European specifications, that will be applied and, where the
European specifications referred to in Article 10 of Directive 96/48/EC will not be applied in full, the
means that will be used to ensure that the requirements of the TSI that apply to the subsystem will be
met (*),

(cid:151) the design control and design verification techniques, processes and systematic actions that will be used

when designing the subsystem,

(cid:151) the means to monitor the achievement of the required design and subsystem quality and the effective

operation of the quality system).

and for the main contractor:

(cid:151) responsibilities and powers of the management with regard to overall design and subsystem quality,

including in particular the subsystem integration management.

The examinations, tests and checking shall cover all of the following stages:

(cid:151) overall design,

(cid:151) structure of subsystem,

including,

in particular, civil-engineering activities, constituent assembly,

final

adjustment,

(cid:151) final testing of the subsystem,

(*) This clause is not applicable to the European specifications that are used to define basic parameters. These are indicated in Annex A.

L 245/140

EN

Official Journal of the European Communities

12.9.2002

(cid:151) and, where specified in the TSI, the validation under full operation conditions.

3.3.

The notified body referred to in point 3.1 must assess the quality system to determine whether it satisfies the
requirements referred to in point 3.2. It shall presume compliance with these requirements in respect of quality
systems that implement the relevant harmonised standard. This harmonised standard shall be EN ISO 9001 (cid:151)
December 2000, completed if necessary to take into consideration the specificity of the subsystem for which it
is implemented.

For applicants, which are only involved in assembling and installation, the harmonised standard shall be EN ISO
9001 (cid:151) December 2000, completed if necessary to take into consideration the specificity of the subsystem for
which it is implemented.

The audit shall be specific for the subsystem concerned, taking into consideration the specific contribution of
the applicant to the subsystem. The auditing team must have at least one member experienced as an assessor in
to the
the subsystem technology concerned. The evaluation procedure shall
applicant’s premises.

include an assessment visit

The decision must be notified to applicant. The notification must contain the conclusions of the examination
and the reasoned assessment decision.

3.4.

The manufacturer(s) and, if involved the adjudicating entity must undertake to fulfil the obligations arising out
of the quality system as approved and to uphold it so that it remains adequate and efficient.

They must keep the notified body that has approved their quality system informed of any intended updating of
the quality system.

The notified body must evaluate the modifications proposed and decide whether the amended quality system
will still satisfy the requirements referred to in point 3.2 or whether a re-assessment is required.

It must notify its decision to the applicant. The notification shall contain the conclusions of the examination
and the reasoned assessment decision.

4.

Surveillance of the quality system(s) under the responsibility of the notified body(ies)

4.1.

The purpose of surveillance is to make sure that the manufacturer(s) and if involved the adjudicating entity duly
fulfil the obligations arising out of the approved quality system.

4.2.

4.3.

The notified body(ies) as referred to under point 3.1 must have permanent access for inspection purposes to the
locations of design, building sites, production workshops, locations of assembling and installation, storage areas
and, where appropriate, prefabrication or testing facilities and, more general, to all premises which it considers
necessary for its task, in accordance with the applicant’s specific contribution to the subsystem project.

The manufacturer(s) and, if involved the adjudicating entity or its authorised representative established within
the Community must send the notified body referred to under point 3.1 (or have sent it) all the documents
needed for that purpose and in particular the implementation plans and technical records concerning the
subsystem (as far as relevant for the specific contribution of the applicant to the subsystem), in particular:

(cid:151) the quality system documentation, including the particular means implemented to ensure that:

(cid:151) (for the main contractor) overall responsibilities and powers of the management for the compliance of

the whole entire subsystem are sufficiently and properly defined,

(cid:151) the quality systems of each manufacturer are correctly managed for achieving integration at subsystem

level,

(cid:151) the quality records as foreseen by the design part of the quality system, such as results of analyses,

calculations, tests, etc.,

(cid:151) the quality records as foreseen by the manufacturing part (including assembling and installation) of the
quality system, such as inspection reports and test data, calibration data, qualification reports of the
personnel concerned, etc.

12.9.2002

EN

Official Journal of the European Communities

L 245/141

4.4.

The notified body(ies) must periodically carry out audits to make sure that the manufacturer(s) and, if involved
the adjudicating entity maintain and apply the quality system and shall provide an audit report to them.

The frequency of the audits shall be at least once a year, with at least one audit during the time period of
performing relevant activities (design, manufacture, assembling or installation) for the subsystem being the
subject of the EC verification procedure mentioned under point 6.

4.5.

Additionally the notified body(ies) may pay unexpected visits to the sites mentioned under point 4.2 of the
applicant(s). At the time of such visits, the notified body may conduct complete or partial audits, in order to
check the proper functioning of the quality system where necessary; it must provide the applicant(s) with an
inspection report and, if an audit has been carried out, with an audit report.

5.

The manufacturer(s) and,
subsystem has been manufactured, keep at the disposal of the national authorities:

if involved the adjudicating entity must, for a period of 10 years after the last

(cid:151) the documentation referred to in the second indent of the second subparagraph of point 3.1,

(cid:151) the updating referred to in the second subparagraph of point 3.4,

(cid:151) the decisions and reports from the notified body which are referred to in the final subparagraph of point

3.4, and points 4.4 and 4.5.

6.

EC verification procedure

6.1.

The adjudicating entity or its authorised representative established within the Community must lodge an
application for EC verification of the subsystem (through full quality assurance with design examination),
including coordination of surveillance of the quality systems as under points 4.4 and 4.5, with a notified body
of its choice. The adjudicating entity or its authorised representative established within the Community must
inform the manufacturers involved of his choice and of the application.

6.2.

The application must enable the design, manufacture,
installation and operation of
understood, and shall enable conformity with the requirements of the TSI to be assessed.

the subsystem to be

It must include:

(cid:151) the technical design specifications, including European specifications, that have been applied,

(cid:151) the necessary supporting evidence for their adequacy,

in particular where the European specifications
referred to in the TSI have not been applied in full (*). This supporting evidence must include the results of
tests carried out by the appropriate laboratory of the manufacturer or on his behalf,

(cid:151) the infrastructure or rolling stock register (as appropriate), including all indications as specified in the TSI,

(cid:151) the technical documentation as regards the manufacturing and the assembling of the subsystem,

(cid:151) a list of the interoperability constituents, to be incorporated into the subsystem,

(cid:151) a list of all manufacturers, involved in the subsystem’s design, manufacturing, assembling and installation,

(cid:151) the demonstration, that all stages, as mentioned under point 3.2, are covered by quality systems of the

manufacturer(s) and/or of the adjudicating entity involved, and the evidence of their effectiveness,

(cid:151) indication of the notified body(ies), responsible for the approval and surveillance of these quality systems.

6.3.

The notified body must examine the application concerning the design examination and where the design meets
the provisions of Directive 96/48/EC and of the TSI that apply to it must issue a design examination report to
the applicant. The report shall contain the conclusions of the design examination, conditions for its validity, the
necessary data for identification of the design examined and,
if relevant, a description of the subsystem’s
functioning.

6.4.

The notified body must, concerning the other stages of the EC verification examine,
if all stages of the
subsystem as mentioned under point 3.2 are sufficiently and properly covered by the approval and surveillance
of quality system(s).

(*) This clause is not applicable to the European specifications that are used to define basic parameters. These are indicated in Annex A.

L 245/142

EN

Official Journal of the European Communities

12.9.2002

If the compliance of the subsystem with the requirements of the TSI is based on more than one quality system,
it has to examine in particular:

(cid:151) if the relations and interfaces between the quality systems are clearly documented,

(cid:151) and if overall responsibilities and powers of the management for the compliance of the whole entire

subsystem for the main contractor are sufficiently and properly defined.

6.5.

The notified body responsible for the EC verification, if not carrying out the surveillance of the quality system(s)
concerned as under point 4, must coordinate the surveillance activities of any other notified body responsible
for that task, in order to be ensured that correct management of interfaces between the different quality systems
in view of subsystem integration has been performed. This coordination includes the right of the notified body
responsible for the EC verification,

(cid:151) to receive all documentation (approval and surveillance), issued by the other notified body(ies),

(cid:151) to witness the surveillance audits as under point 4.4,

(cid:151) to initiate additional audits as under point 4.5 under its responsibility and together with the other notified

body(ies).

6.6. Where the subsystem meets the requirements of Directive 96/48/EC and the TSI, the notified body must then,
based on the design examination and the approval and surveillance of the quality system(s), draw up the
certificate of EC verification intended for the adjudicating entity or its authorised representative established
within the Community, which in turn draws up the EC declaration of verification intended for the supervisory
authority in the Member State within which the subsystem is located and/or operates.

The EC declaration of verification and the accompanying documents must be dated and signed. The declaration
must be written in the same language as the technical file and must contain at least the information included in
Annex V to Directive 96/48/EC.

6.7.

The notified body shall be responsible for compiling the technical file that has to accompany the EC declaration
of verification. The technical file has to include at least the information indicated in Directive 96/48/EC, Article
18(3), and in particular as follows:

(cid:151) all necessary documents relating to the characteristics of the subsystem,

(cid:151) list of interoperability constituents incorporated into the subsystem,

(cid:151) copies of the EC declarations of conformity and, where appropriate, of the EC declarations of suitability for
use, which said constituents must be provided in accordance with Article 13 of the Directive, accompanied,
where appropriate, by the corresponding documents (certificates, quality system approval and surveillance
documents) issued by the notified bodies on the basis of the TSI,

(cid:151) all elements relating to the conditions and limits for use,

(cid:151) all elements relating to the instructions concerning servicing, constant or routine monitoring, adjustment

and maintenance,

(cid:151) certificate of EC verification of

the notified body as mentioned under point 6.6, accompanied by
corresponding calculation notes and countersigned by itself, stating that the project complies with the
Directive and the TSI, and mentioning, where appropriate, reservations recorded during performance of the
activities and not withdrawn; the certificate should also be accompanied by the inspection and audit reports
drawn up in connection with the verification, as mentioned under point 4.4 and 4.5,

(cid:151) the infrastructure or rolling stock register (as appropriate), including all indications as specified in the TSI.

7.

8.

The complete records accompanying the certificate of EC verification must be lodged with the adjudicating
entity or its authorised representative in support of the certificate of EC verification issued by the notified body
and must be attached to the EC declaration of verification drawn up by the adjudicating entity intended for the
supervisory authority.

The adjudicating entity or its authorised representative within the Community must keep a copy of the records
throughout the service life of the subsystem; it must be sent to any other Member State which so requests.