EKE at RSN - 4th July 2024

EKE-Trainnet® Safety Applications

Safety Integrity Level (SIL) is an indicator of the relative risk-reduction provided by a safety function. EKE-Electronics develops SIL functions to make your trains,  trams and metros safer and more reliable. EKE-Electronics has expertise in designing and manufacturing systems with Safety Integrity Level (SIL) functions. We have developed systems up to SIL 2 for various safety functions, including speed measurement, temperature measurement and door operation.

Why implementing safety functionalities?

The development of Safety Integrity Levels fulfils the need for more approachable and systematic safety management. The SIL probabilistic approach helps to determine the risks associated with a safety function, system or component and to set an acceptable risk level for it. 

Safety Integrity Levels

The systems covered under functional safety are designed to automatically prevent dangerous failures or to control them when they occur. It helps us to design a system that can execute specific functions correctly, even under non-intended use (or sometimes even misuse).

Functional safety is the part of the overall safety of a system or piece of equipment that depends on automatic protection operating correctly in response to its inputs or failure in a predictable manner (fail-safe). The automatic protection system should be designed to properly handle likely human errors, systematic errors, hardware failures and operational/environmental stress.

The main hazards to mitigate with EKE-Trainnet safety applications are derailment, collision, fire, personal damage, material damage and environmental pollution. Our solutions are determining and analysing causes e.g. overspeeding, mislocated train, equipment failures related to wheels, bearings, brakes or doors as well as human errors. In addition, EKE designs control measures deriving safety requirements like warnings and alarms, speed limitations, traction disabling, emergency brakes or cutting power to mention a few. 


Four Safety Integrity Levels are defined, ranging from SIL 1 to SIL 4. SIL 4 provides the lowest functional failure rate and is reserved for highly critical safety functions that may cause severe casualties and must be prevented at all costs. SIL 4 provides the lowest functional failure rate and is reserved for highly critical safety functions that may cause severe casualties and must be prevented at all costs.

For most safety functions in a train, SIL-1 or SIL-2 will provide acceptable risk levels. No matter the level, SIL functions contribute to making your trains safer.

The SIL notion results directly from the IEC 61508 standard. For the rail industry, CENELEC has developed the EN 50126, EN 50128 and EN 50129 standards which were derived from the IEC 61508 to meet railway-specific requirements. EKE-Electronics Ltd’s functional safety solutions comply with these standards.

Four Safety Integrity Levels are defined, ranging from SIL 1 to SIL 4:

10-5 – 10-6
10-6 – 10-7
10-7 – 10-8
10-8 – 10-9
*TFFR: Tolerable Functional Failure Rate per hour


Bringing flexibility by enabling customized door opening based on platform and safety requirements. The EKE-Trainnet Automatic Selective Door Operation (ASDO) is developed to improve passenger operation at stations where the platforms are shorter than the trains. ASDO enables an automatic check of the train’s position and the platform configuration so only the doors that can be safely opened are released. Passenger comfort and safety are enhanced while allowing for shorter stops at stations.

The EKE-Trainnet Physical Prevention of Over-Speeding (PPOS) system prevents trams from over-speeding. It allows the operator to set speed limits over the whole network by using trackside beacons and/or Global Navigation Satellite System (GNSS) together with distance measuring. The PPOS reads the speed limits from balises positioned on the tram tracks. If a tram is over-speeding, the system automatically applies service brakes, stops the tram, and sends an alarm to the Control room.

The EKE-Trainnet Correct Side Door Enabling (CSDE) provides safe passenger access to trains and platforms. The system opens only the doors on the correct side of the train, in appropriate places. CSDE supports three operating modes: manual, semi-automatic and fully automatic door operation. CSDE ensures the correct location and side of the train based on trackside beacons, Global Navigation Satellite System (GNSS) and distance measuring.

The EKE-Trainnet Automated Pantograph Control (APCO) system is used for the automated power change-over. The EKE-Trainnet APCO is a change-over function which provides location-based control for switching power feed from the catenary to the battery by controlling the pantograph directly or via the Train Control and Management System (TCMS).

The EKE-Trainnet VCS increases train safety by checking the train driver vigilance at all times. When the driver experiences a loss of consciousness, death or any physical issues preventing him to react, the train is automatically stopped.

The EKE-Trainnet Train Speed and Distance Monitoring, Measurement and Display systems analyse different speed measurements such as train speed in bogie and wheelset, display the values to the train crew and provide an alternative speed source.

The EKE-Trainnet Fire Detection sub-system Monitoring reads fire detection signals from locomotives and coaches and displays the information to the train crew.

The EKE-Trainnet Safety Communication Management system ensures safe data communication throughout the train and enables centrally managed networked safety functions.

Supervision of passenger alarm activation: Through the train’s safety circuits (alarm) and TCMS communication the equipment receives the activation of the passenger alarm when the train is at the platform or when leaving the platform.

The EKE-Trainnet Brake Pipe Pressure Monitoring scans the status of the main brake pipe pressure of the brake system, inform the driver and if necessary activates the protective actions.

Supervision of Traction Enabling: the function decides whether it is safe to enable traction, based on the status of traction manipulation devices, train speed and door status.