VCS: Vigilance Control System

The SIL 2 Vigilance Control System monitors the train driver’s activity to support safe train operation.

Continuous supervision ensures rapid intervention when the driver fails to respond within the required timeframe.

It is also known as the dead man’s switch or driver safety device.

COMPLIANCE:

SIL 2, EN 50126, EN 50716 (previously EN 50128), EN 50129, IRS 50641

Technical Specification for Vigilance Control System

Build your Vigilance Control System from the following modules

The Vigilance Control System includes a Central Processing Unit (CPU), I/O modules, a power supply and a rack. Click on an image to explore related content.

Central Processing Units

I/O Modules

Power Supplies

Racks

Modular Concept

The modules below are the minimum required for a Vigilance Control System. Additional modules available for expanded functionality, if required. Hover over each area to view a brief description or click to access the full module page.

Application Software

The Vigilance Control System application software is built on an open-source Linux platform and is coded in C and C++.

All Vigilance Control System software is built by EKE-Electronics. This protects the SIL 2 certification, which requires tools, processes and knowledge about how to produce SIL Safety applications.

How does the Vigilance Control System work?

Driver activity is monitored through a pedal, a dedicated button, or another configured action.

The system follows a predefined schedule using T1, T2, and T3 intervals.

At each interval, the driver must perform a defined action.

If there is no response, an action is triggered.

System activated: The system is activated when the train is operating above 10 km/h.
Vigilance notification: The driver must perform an action.
Alarm light: If there is no activity after T1, the alarm light blinks.
Alarm bell: If there is no response within T2, the alarm bell rings.
Emergency brake: If no response within T3, the emergency brake is applied. Automatic braking also engages if the Vigilance Control System loses power.

Vigilance Control System Customisations

The Vigilance Control System can be easily customised if different alarms or a modified setup is needed.

Adjustable interval timings

The interval values can be modified to align vigilance checks with specific operational needs

Well‑configured timing reduces unnecessary alarms while maintaining safety performance.

Customisable alarm levels

Alarm thresholds can be adapted to suit environmental conditions and operational requirements.

Relevant alarms support driver awareness and help avoid unnecessary distractions.

Minimum speed threshold adjustment

Operators can modify the activation speed for vigilance checks. They are only triggered when the train is operating above this speed threshold.

A tailored threshold prevents unwanted activations during low‑speed manoeuvres.

Extending functionality

The Vigilance Control System operates as a standalone solution or as part of a wider EKE‑Trainnet® installation.

Modular architecture supports additional I/O channels by adding modules or selecting a larger rack.

The system can act as an event recorder. It can record event data and signals, store vigilance status, and transmit messages when paired with suitable wayside communication equipment.

Why Choose EKE-Electronics for your Vigilance Control System?

EKE’s Vigilance Control System extends beyond basic monitoring capability. It offers a range of customisable features and the flexibility to meet your specific needs.