Abstract: A train control system comprising a vital brake interface unit that is disposed between the train control processors and the braking system. The brake interface unit ensures that any failure in the control processors or the interface itself is detectable and, when detected, causes the system to fail safely (i.e., the train's brakes are applied). By virtue of the use of redundant circuitry paths, the vital braking interface unit enables real-time verification of system circuitry without actually applying the train's brakes.

Abstract: A system and method for onboard train detection is disclosed. In some embodiments, the train detection function is segregated into a safety-critical head-of-train determination, a safety-critical end-of-train (or length-of-train) determination, and a safety-critical train integrity function. By supplementing the train detection and integrity functions with information on system latencies, guard zones, processing delays and a determination of safe braking distance, the method and system provides safety-critical onboard positive train separation information. This information is transmitted to a control center and used to determine safe separation distance between trains.