| ▲ | Pragmata 13 hours ago |
| Yeah and that's fucking ridiculous and a damning indictment of the glaring incompetence of train companies. If I can have reasonably accurate gps readings of my phone while I'm on the train, there is zero reason for train companies to not have systems that are at least as accurate. |
|
| ▲ | lxgr an hour ago | parent | next [-] |
| Does your phone's GPS work in a tunnel? What happens if GPS ever gets jammed (or worse, spoofed)? Aviation also doesn't exclusively rely on GNSS positioning, so why should train protection, given that it's also extremely safety critical? |
|
| ▲ | AnimalMuppet 7 hours ago | parent | prev | next [-] |
| Part of the problem is multiple tracks. Those tracks may be only 10 feet (3 m) apart. (I don't know if high-speed rail lines in Spain are that close, and I don't know if the line where the accident occurred was double track.) "Reasonably accurate GPS" trying to determine which track you're on at 150 mph is not as simple as you make it sound. Yeah, it can determine how far along the track you are. But when you get two trains moving toward each other, each at 150 MPH, do you really trust that GPS to tell you that they're on different tracks? |
| |
| ▲ | busywaiting 6 hours ago | parent | next [-] | | Trains can't change lanes without warning like a Nissan Altima on the Dan Ryan Expressway. The only way a train can move from one track to an adjacent track -- or get on the first track in the first place -- is if switches are set to allow the train onto that track. And on any modern high-speed line, those switches are centrally controlled by dispatch. Keeping track of which parallel track a train was on automatically was a solved problem a hundred years ago, using relays and lights and hard-wired logic. Adding computers and GPS greatly increases the precision with which dispatch knows position and speed along the track, but knowing which track has not changed in the last century. | | |
| ▲ | iggldiggl 2 hours ago | parent | next [-] | | Yes, but as long as the central signalling system is working, it already knows where the train is, with no need to involve GPS. (And where modern signalling and train protection systems need increased precision as compared to the granularity of track circuits/axle counter sections, the solution usually involves a combination of on-train odometry plus track balises at occasional intervals in order to reset any inaccuracies that might have accumulated.) What we're talking about here is some sort of TCAS-equivalent for the case where the central signalling is down – while it's easy to accurately localise trains with the aid of a central signalling system that authoritatively knows about the infrastructure layout, it's quite more difficult when you're trying to do the same thing in a decentralised, train-local fashion. | | |
| ▲ | 1718627440 2 hours ago | parent [-] | | Yep, that's what I was trying to convey as well. There also seems to be RCAS, but it sounds like a newly invented system. https://www.dlr.de/en/kn/research-transfer/projects/next-gen... | | |
| ▲ | iggldiggl 2 hours ago | parent [-] | | And as of now, I suppose that RCAS (or RCAS-like systems) is best suited for (especially minor) single track branch lines that don't currently have a full-scale signalling system already up-and-running, but instead still rely on "Timetable & Train Order" and similar systems. Single track means that at least outside of stations, collisions can be reliably identified without much danger of false positives (and for station areas you can just institute a blanket speed limit to compensate for the gap in RCAS coverage, which might not even be any lower than the speed limit required for traversing diverging/spring-operated/hand-operated points there anyway), and no already existing full-scale signalling system means that RCAS actually provides a significant safety benefit and is therefore likely worthwhile from a cost-benefit-analysis point of view, too, if you're actually regularly operating multiple trains simultaneously on that kind of infrastructure. Whereas on multi-track mainline railways avoiding false positives is much harder and normally you should already have proper signalling and train protection systems in place anyway, so the additional safety benefits of RCAS would be much more marginal. | | |
|
| |
| ▲ | pixl97 5 hours ago | parent | prev [-] | | >Trains can't change lanes without warning Oh, they can, but it's usually a very traumatic event. | | |
| |
| ▲ | esafak 7 hours ago | parent | prev [-] | | It's very easy since there is limited ability for trains to change tracks, so the location history of the train is a strong indicator of which track it is on. Even Google Maps can tell you which lane you are in since god knows when, and cars can freely change lanes. And that's just consumer software. For something commercial like a train they could trivially solve this problem with something more robust. But I'm not familiar with the Spanish system; how much of the engineering did they do? | | |
| ▲ | brookst 6 hours ago | parent | next [-] | | There are switches that move trains between tracks. Now you need every switch to report, keep a history of that. Many trains also separate and combine. Trains sometimes go backwards to be switched. It's not impossible. But handwaving GPS placement of trains at the correct location, direction, and track deserves more than a handwave as trivial. | | |
| ▲ | esafak 4 hours ago | parent | next [-] | | All of those failure modes can be accommodated. I fail to see anything here a competent engineer couldn't address. I speculate it's not a technical problem, but an operational and cultural one. This is not rocket science. | | |
| ▲ | 1718627440 3 hours ago | parent [-] | | But it must be also cheaper and more reliable than the current system, otherwise nobody is going to implement it. | | |
| ▲ | makethem6666688 an hour ago | parent [-] | | Two rtk receivers with LTE including a little battery backup would cost what, $2,000 per car tops? Presumably switches already report their position to somewhere. It's absolutely unacceptable for this problem exist in today's world. | | |
| ▲ | 1718627440 an hour ago | parent [-] | | > Presumably switches already report their position to somewhere. Yeah and this somewhere already knows whether a crash is going to happen. In which case your solution brings no benefit. You can't rely on the correctness of a system, which you want to make an alternative to, to help in the case the original system fails. This discussion focuses on a non-problem (granted partly due to an imprecise comment of mine). The system knows where all the trains are and also that a crash will happen, if the decision is made, that then indeed was made. What is needed is that the system needs to convince the operator there is still a problem, after it proved itself unreliable. My suggestion would be a log of the constraints the prover encountered while determining whether there is a conflict. This certainly already exists somewhere in the background, but I am not aware whether that is currently shown to operators in deployed systems. It does exist somewhat in the research systems we use in university. |
|
|
| |
| ▲ | 6 hours ago | parent | prev [-] | | [deleted] |
| |
| ▲ | lxgr an hour ago | parent | prev | next [-] | | HN does railway safety... The Dunning-Kruger level in this thread is ridiculous. As a passenger, I'm very glad software engineers haven't (fully) taken over aviation and railway safety yet. | |
| ▲ | AnimalMuppet 6 hours ago | parent | prev | next [-] | | Yes, it can tell you. How perfectly, though? Perfectly enough to bet 60 lives on? When Google Maps gets wrong what lane I'm in, nobody dies. It can be right 99% of the time, that's good enough. It's not good enough for a train system, though - at least, I suspect it's not. I'd want a lot more than "it works in my car" before I trusted it. | | |
| ▲ | californical 6 hours ago | parent [-] | | Can we just have it as an additional data point, on top of what we should already know from where the train should be from switching history? If we get 99% accuracy, is that enough to check with an operator “specify which track you are in, left or right” when the measured value is different than the expected? | | |
| ▲ | 1718627440 37 minutes ago | parent [-] | | In addition to that being unpractical, the train doesn't even know the state of switches, i.e. not whether it is on the same track as some other position. It's just that this is undecidable for a single train. (This is what my first comment was about, it's simply not known how to solve it on the level of a single train, likely because it is impossible.) However the answer for what to do if a train can't trust the network, is don't move. Or move by sight, which is limited to 40km/h for good reason. On the other hand this is a complete non-issue and solved for more than a century on the network level. So there is zero need to invent satellite or vision based train detection at worst even using statistical systems, when you can use deterministic systems, for example using the fact that a train is out of metal, so it's detectable by the train closing a electric circuit between the rails. Or using the sensors that are installed at every signal, switch or other positions for precisely this question. |
|
| |
| ▲ | kube-system 6 hours ago | parent | prev [-] | | Google maps gives me the directions for the express lanes when I'm in the normal lanes and vice versa like 50% of the time, and that's an order of magnitude greater error in distance than the distance between adjacent train tracks. And several orders of magnitude greater failure rate than is acceptable for a safety system. | | |
| ▲ | makethem6666688 an hour ago | parent [-] | | RTK is more than capable of figuring out what track you are on | | |
| ▲ | 1718627440 an hour ago | parent [-] | | It can be on the other track right now, but change to your track in the future. Or in other words, the topology of the network changes in operation. Whether the track you are on and the track another train is on, is the same or not is not decidable without knowing the current network state. |
|
|
|
|
|
| ▲ | giovannibajo1 13 hours ago | parent | prev | next [-] |
| Would that work in tunnels and forests too? |
| |
| ▲ | IAmBroom 5 hours ago | parent [-] | | Tunnels are controlled by a single block - only one train can ever be allowed access at once, period. Until the "current" occupant train is verifiably out of the tunnel, that block is forbidden to all. Forests are irrelevant; rail right-of-way contains no trees, and is wide enough to assure clear "view" of satellites. | | |
| ▲ | 1718627440 3 hours ago | parent | next [-] | | You are just answering how the current system actually works. This discussion was about how a hypothetical system works based on GPS or radar alone. | |
| ▲ | lxgr 38 minutes ago | parent | prev [-] | | > Tunnels are controlled by a single block - only one train can ever be allowed access at once, period. Absolute nonsense. Do you have any idea how long some tunnels are? | | |
| ▲ | 1718627440 26 minutes ago | parent [-] | | There are actually different definitions for what a block is. It can be both a section where you can decide for trains to enter or where you can change their sequence (Zugfolgeabschnitt vs. Zugmeldeabschnitt, don't know the English terms) Also it can be a physical implementation of any constraint between components of different stations. But yes there does not need to be a limitation on there only being a single train in a tunnel. |
|
|
|
|
| ▲ | 7 hours ago | parent | prev | next [-] |
| [deleted] |
|
| ▲ | 1718627440 13 hours ago | parent | prev [-] |
| > a damning indictment of the glaring incompetence of train companies. No, what I describe has nothing to do with the companies, that's the research state. It's just an indictment of you making bold statement about a subject, you don't now enough about. > I can have reasonably accurate gps readings of my phone Would you dare to cross on a rope over a deep valley, blind using only GPS readings of your phone? Because that's kind what you are suggesting, expect you also move a few hundred other people. |
| |
| ▲ | swiftcoder 12 hours ago | parent | next [-] | | > Would you dare to cross on a rope over a deep valley, blind using only GPS readings of your phone? Hang on, this is nothing at all like that - trains run on fixed tracks. The only bit of data we are interested in for collision avoidance is the linear offset along the track. Even the shittiest GPS fix of all-time would give a good-enough intersection with a fixed path to avoid crashing into a second stationary train in the open country-side (do you see any satellite line-of-sight blockers in the crash footage?) | | |
| ▲ | 1718627440 12 hours ago | parent [-] | | > The only bit of data we are interested in for collision avoidance is the linear offset along the track. So that is naive, but assuming that would be all that you need, with GPS you would also need the positions of all other trains. But why would you transmit all this information to every train, instead of just computing the collisions in a central node? (That's what is done now.) A better fit for what you suggest would be radar, and this does exist. [1] But that's where your original assumption is naive. You regularly pass other trains within <2m at high speeds, so linear offset is not all you need. [1] https://www.dlr.de/en/kn/research-transfer/projects/next-generation-train/rcas-railway-collision-avoidance-system
| | |
| ▲ | swiftcoder 10 hours ago | parent [-] | | > But why would you transmit all this information to every train, instead of just computing the collisions in a central node? Because central nodes can fail (as they did here, both human and machine), and providing this redundant data allows both the computer and the human-in-the-loop on the fast-moving chunk of steel to independently validate the decisions coming from the central node. > You regularly pass other trains within <2m at high speeds, so linear offset is not all you need. In this collision, both trains were on the same track. So while we obviously care about adjacency issues in the general case, this specific failure mode can be detected purely via a linear offset. | | |
| ▲ | 1718627440 9 hours ago | parent [-] | | You can and do have redundancy in the central node already. Also that's not what failed here. > In this collision, both trains were on the same track. Yeah, but how do you distinguish that? So when I understand you correctly, what you want is: Find another moving chunk of metal in the radius of 2km, which moves toward you, but not in a direct or ballistic trajectory, but in a arbitrary complicated trajectory, but which can lookup in a database. Also you are operating in the real world, so there are potentially houses, trees and mountains in between. I guess that would be possible, but it would be really expensive. Your best bet would be to adapt a missile detection and targeting system from the military. A system which does exist and is somewhat similar is RCAS (https://www.dlr.de/en/kn/research-transfer/projects/next-gen...). | | |
| ▲ | swiftcoder 8 hours ago | parent | next [-] | | > Yeah, but how do you distinguish that? By enumerating the tracks? I feel like you are intentionally trying to turn this into a spherical cow situation by insisting on solutions that work in an information vacuum. All of this sort of problem in the real world is solved by sensor fusion from multiple data sources. Trains are captive to a particular track - they can only change tracks at specific pre-determined junctions. With a pretty minimal sensor feed from each junction we can statically determine which track segment a given train is on. With GPS we can shrink that segment length down to a few kilometres. By sharing data persistently every single train can validate that central command-and-control is not about to run it into another train from behind... There cases which are genuinely challenging engineering problems (i.e. derailments that impinge on adjacent tracks), but this trivial case of bumper cars is not one of them. | | |
| ▲ | 1718627440 8 hours ago | parent [-] | | >> Yeah, but how do you distinguish that? > By enumerating the tracks? How do you distinguish that the <2km away detected moving train runs on your track on not on the one directly besides you? > Trains are captive to a particular track - they can only change tracks at specific pre-determined junctions. Yeah, but you do not know which one it runs on. Your entire point is that you do not trust the information the infrastructure knows. If you do allow to use information from the infrastructure, then why not use the sensors that already exist along the whole train network? It's also very unlikely that there is something electrically connecting the two rails of a track, that you would like to run over. So why wouldn't you trust that information, but some vague GPS signal? > we can statically determine But the current state of the art is, that you deterministically and provable know where a train is. Why would you use a more expensive, less safe system? The current focus to reduce errors in computing train conflicts is to prevent random bit flips due to radiation at the same time in three different computers running different software. > I feel like you are intentionally trying to turn this into a spherical cow situation The situation where you proposal makes sense, but the current system does not, is a spherical cow situation, that's my point. | | |
| ▲ | swiftcoder 7 hours ago | parent [-] | | > that you deterministically and provable know where a train is You are the one who framed this conversation as it not being solved how to deterministically know where a train is. Everyone else in here has been kindly suggest that if perfect information is unobtainable, then we should work with what we have | | |
| ▲ | 1718627440 6 hours ago | parent [-] | | Oh, I see how you could think that, without context. That's in fact not what I wanted to say. I meant that pretty literally. The infrastructure of course knows where the train is. > Trains are still not able to assess properly where they are, even using satellites and inside train sensors. Of course there is research on that, but it's still an unsolved problem. *Trains* on there own! This IS a hard problem, how to do that with any other infrastructure. It IS current research and not yet solved. That is for example relevant, if you want to be able to run trains at full speed <1m tolerance, so that you can have more than one train stopping at a station <60s. All while still not paying for infrastructure and maintaining backward compatibility with a century old trains. (I mean in the future you could use the same to also couple trains at full speed, but that's still sci-fi.) | | |
| ▲ | thaumasiotes 4 hours ago | parent [-] | | > That is for example relevant, if you want to be able to run trains at full speed <1m tolerance, so that you can have more than one train stopping at a station <60s. ...is that something you'd ever want? In general, it is, but the way it's handled is by having those trains stop on separate tracks. Running multiple trains through the same station track in under 60 seconds means that all passengers must embark and disembark in under 30 seconds. That's very tight. I would venture to say it's too tight and meeting this goal would make the trains worse. (And if passengers aren't getting on or off the train, then the train isn't stopping at a station.) | | |
|
|
|
| |
| ▲ | tancop 6 hours ago | parent | prev [-] | | Redundancy in a central node is an oxymoron. Safety critical systems need to work 100% of the time if any single node fails, and stop safely if there are multiple failures and it can't work properly. Doesn't matter if each individual node is 100% reliable by itself because connections fail too. | | |
| ▲ | 1718627440 2 hours ago | parent [-] | | You can still have redundancy in the computation, that isn't prevented by being in the same location. > Safety critical systems need to work 100% of the time Railway safety must be safe 100% of the time, but not available 100% of the time. Also the point of a signal box is to make decisions about the order of train assignment to track. You absolutely do not want multiple points of truths for that. |
|
|
|
|
| |
| ▲ | collabs 12 hours ago | parent | prev | next [-] | | The way I think of it, divide the tracks into segments. Before you put a train on a segment, you must ask a question - is there a train on it. There are only two answers possible, No, and something else. If it is something else, stop. Don't let the train on that segment. There are optimizations possible like make segments smaller etc but the original algorithm is trivial. If we can't figure things out, we make segments longer and we slow down the trains until we can. I am positive for a sufficiently large track segment and a sufficiently slow train, we can always answer the question with a no. | | | |
| ▲ | Pragmata 7 hours ago | parent | prev [-] | | who said anything about only using gps? I'm saying in addition to their current system! | | |
| ▲ | 1718627440 7 hours ago | parent [-] | | The exact comment I answered to. https://news.ycombinator.com/item?id=50287160 | | |
| ▲ | Pragmata 3 hours ago | parent [-] | | i don't see where it says they should use gps alone. In fact it even mentions starlink in addition to gps. >Even GPS + Starlink + 1 monitor (is that 50k€?) could have prevented this. My reading on that sentence was that even a simple setup would have been sufficient to prevent this. Not that it should be the only thing. | | |
| ▲ | 1718627440 2 hours ago | parent [-] | | My reading indicates, that "Even X could have prevented this." means that X is able to solve the issue on it's own. Otherwise X would in fact not prevent it. - I don't think X would actually work, without actually eventually recreating part of the current railway control system, and the current rail control system alone already works better. - I don't think another less reliable more costly safety system helps, when the current one already stated that there is a problem, and it was ignored. |
|
|
|
|