Abstract: An end of train device (100) suitable of use on a railway vehicle includes an enclosure (110), one or more accelerometers (180) positioned inside the enclosure (110) and providing accelerometer data of a railway vehicle (230) when travelling on a railway track (240), and a tracking device (185) positioned inside the enclosure (110) and providing location data, wherein the accelerometer data and location data are analyzed to determine a condition of the railway track (240). Further, a track monitoring system (200) and a method (300) for continuous monitoring of railway tracks (240) are provided.

Abstract: An automatic train communications system includes a plurality of electronic train devices and a multi-channel communications network, wherein each electronic train device comprises a radio module configured to support a plurality of communications protocols and a plurality of frequency bands, and select a communications protocol and/or a frequency band from the plurality of communications protocols and frequency bands based on at least one performance criterium to reliably communicate with one or more electronic train devices via the multi-channel communications network.

Abstract: A micro data capture device can be configured to operate as a unidirectional connection from a first computing device to a second computing device. The micro data capture device can include a data capture side comprising a first universal serial bus (USB) interface configured to connect to the first computing device so as to extract data from the first computing device. The micro data capture device can further include a monitoring apparatus comprising an interceptor configured to copy data from the data capture side so as to define the unidirectional connection. Further, the micro data capture device can define a data storage side comprising a second USB interface configured to connect to the second computing device so as to transfer data to the second computing device. The data storage side can be configured to receive data from the data storage side via the monitoring apparatus. In some cases, the data capture side has only volatile memory, and the data storage side includes non-volatile memory.

Abstract: An apparatus for monitoring a protected network using unidirectional communication includes a sending unit coupled to one or more devices of the protected network for obtaining network data related to protected network status. The apparatus further includes an eavesdropping unit with an interceptor configured to intercept the requested data within the sending unit via a loop connection between input and output interfaces of the sending unit. The interceptor and the loop connection are inductively coupled and configured for unidirectional communication from the sending unit to the receiving unit. A receiving unit is coupled to the eavesdropping unit for receiving the duplicated data and forwarding the duplicated data to an evaluation system located in a low security external network. A reconfigurable application layer includes at least one modular application configured to operate security related functions that support intrusion detection.

Abstract: An automatic train communications system includes a plurality of electronic train devices and a multi-channel communications network, wherein each electronic train device comprises a radio module configured to support a plurality of communications protocols and a plurality of frequency bands, and select a communications protocol and/or a frequency band from the plurality of communications protocols and frequency bands based on at least one performance criterium to reliably communicate with one or more electronic train devices via the multi-channel communications network.

Abstract: In an industrial system, a data capture apparatus can be configured to operate as a unidirectional communication connection between a private network and a public network. The data capture apparatus can be further configured to collect raw data from the private network. The raw data can define a data distribution. The data capture apparatus can be further configured, based on the data distribution of the raw data, to generate anonymized or synthetic data that represents the raw data. The anonymized data can be transmitted over the unidirectional communication connection to a receiver machine of the data capture apparatus. In some cases, the receiver machine can send the anonymized data to an analysis system within the public network, such that the raw data can be analyzed by the analysis system, based on the anonymized data that represents the raw data, without the analysis system obtaining the raw data.

Abstract: A transmission device for transmitting data between a first network and a second includes: a first unidirectional transmission unit which is coupled to the first network and is configured to exclusively receive data transmitted from the first network to the transmission device, a second unidirectional transmission unit which is coupled to the second network and is configured to exclusively send data from the transmission device to the second network, and an identification unit which is located between the first unidirectional unit and the second unidirectional unit and which is configured to receive the data received by the first unidirectional transmission unit and to identify anomalies in the received data. The provided transmission device achieves the reliable, optimized identification of anomalies in the first network and increases security in the identification unit against manipulation and against attacks or intrusion attempts from the second network.

Abstract: In an industrial system, a data capture apparatus can be configured to operate as a unidirectional communication connection between a private network and a public network. The data capture apparatus can be further configured to time stamp data, for instance digitally sign data with a time stamp, so as ensure data integrity over the unidirectional communication connection, while maintaining physical isolation between the private network and public network.

Abstract: An apparatus for monitoring a protected network using unidirectional communication includes a sending unit coupled to one or more devices of the protected network for obtaining network data related to protected network status. The apparatus further includes an eavesdropping unit with an interceptor configured to intercept the requested data within the sending unit via a loop connection between input and output interfaces of the sending unit. The interceptor and the loop connection are inductively coupled and configured for unidirectional communication from the sending unit to the receiving unit. A receiving unit is coupled to the eavesdropping unit for receiving the duplicated data and forwarding the duplicated data to an evaluation system located in a low security external network. A reconfigurable application layer includes at least one modular application configured to operate security related functions that support intrusion detection.

Abstract: A micro data capture device can be configured to operate as a unidirectional connection from a first computing device to a second computing device. The micro data capture device can include a data capture side comprising a first universal serial bus (USB) interface configured to connect to the first computing device so as to extract data from the first computing device. The micro data capture device can further include a monitoring apparatus comprising an interceptor configured to copy data from the data capture side so as to define the unidirectional connection. Further, the micro data capture device can define a data storage side comprising a second USB interface configured to connect to the second computing device so as to transfer data to the second computing device. The data storage side can be configured to receive data from the data storage side via the monitoring apparatus. In some cases, the data capture side has only volatile memory, and the data storage side includes non-volatile memory.

Abstract: In an industrial system, a data capture apparatus can be configured to operate as a unidirectional communication connection between a private network and a public network. The data capture apparatus can be further configured to collect raw data from the private network. The raw data can define a data distribution. The data capture apparatus can be further configured, based on the data distribution of the raw data, to generate anonymized or synthetic data that represents the raw data. The anonymized data can be transmitted over the unidirectional communication connection to a receiver machine of the data capture apparatus. In some cases, the receiver machine can send the anonymized data to an analysis system within the public network, such that the raw data can be analyzed by the analysis system, based on the anonymized data that represents the raw data, without the analysis system obtaining the raw data.

Abstract: In an industrial system, a data capture apparatus can be configured to operate as a unidirectional communication connection between a private network and a public network. The data capture apparatus can be further configured to time stamp data, for instance digitally sign data with a time stamp, so as ensure data integrity over the unidirectional communication connection, while maintaining physical isolation between the private network and public network.

Abstract: An end of train device (100) suitable of use on a railway vehicle includes an enclosure (110), one or more accelerometers (180) positioned inside the enclosure (110) and providing accelerometer data of a railway vehicle (230) when travelling on a railway track (240), and a tracking device (185) positioned inside the enclosure (110) and providing location data, wherein the accelerometer data and location data are analyzed to determine a condition of the railway track (240). Further, a track monitoring system (200) and a method (300) for continuous monitoring of railway tracks (240) are provided.

Abstract: A railroad system including a wayside inspector system responsive to data originated from a real-time train tracking system, such as GPS or PTC is provided. The data from the real-time train tracking system includes data indicative of a respective train en route to a respective crossing. The data is further indicative of a respective direction of travel on a respective railway track of the respective train en route to the respective crossing. Disclosed embodiments offer a technical solution involving no physical sensing devices on the railway tracks for detection of the respective train en route to the respective crossing. This solution is effective for automated testing and reporting of timely activation of crossing warning equipment based on the data originated from the real-time train tracking system.

Abstract: A railroad system including a wayside inspector system responsive to data originated from a real-time train tracking system, such as GPS or PTC is provided. The data from the real-time train tracking system includes data indicative of a respective train en route to a respective crossing. The data is further indicative of a respective direction of travel on a respective railway track of the respective train en route to the respective crossing. Disclosed embodiments offer a technical solution involving no physical sensing devices on the railway tracks for detection of the respective train en route to the respective crossing. This solution is effective for automated testing and reporting of timely activation of crossing warning equipment based on the data originated from the real-time train tracking system.

Abstract: The invention relates to a method of controlling railroad train movement over a layout of railroad track that is defined geographically using a linear network of geographic control objects which includes signals, switches and track blocks. Each signal has signal control hardware and software logic, which logic includes an address, representation of signal condition, and the ability to initiate a change in signal condition. Each switch has switch control hardware and software logic, which logic includes an address, representation of switch condition, and the ability to initiate a change in switch condition. Each track block has hardware and software logic, which logic includes an address and a representation of track block occupancy condition. The method is specifically directed to establishing communication between each signal logic, switch logic, and track logic, and only its next adjacent logic neighbors regardless of whether it be signal logic, switch logic, or track logic.