DE10026923B4 - Control system for airport lighting systems - Google Patents

Abstract

Control system for aerodrome lighting systems for controlling, regulating and / or monitoring of Aktorik- and / or sensor elements of Flugplatzbefeuerungsgeräten, characterized in that it comprises a central redundant control device to which input and output devices and by means of at least one interface via a likewise redundantly formed bus system at least one decentralized control device which can be connected to the actuator and / or sensor elements of airfield lighting devices can be connected, the central and / or decentralized control device each consisting of a redundantly designed programmable logic control device having two processor modules as master and backup device,
With high-speed coupling for data exchange and adjustment between the two processor modules,
- with an error reaction in case of failure of one of the two processor modules,
With a synchronization between both processor modules,
- with a self-test of the two processor modules,
- with a localization of system-internal errors of the two processor modules,
- and with a passivation of defective processor boards.

Description

The The present invention relates to a guidance system for airport lighting installations for controlling, regulating and / or monitoring of actuator and / or sensor elements of airfield lighting devices.

lighting systems Include all lighting aids that ensure safe flight operation and aircraft taxiing around an airport To ensure darkness and / or poor visibility. It is under between approach lights, gliding angle fire, side row fire, Threshold fire, runway fire, runway fire, Kennfeuer, Distinguished danger fire, obstruction fire and turning fire.

To International guidelines and recommendations require air bases to operate at night or worse Be equipped with airfield lighting systems. At the approach, at the landing, at the start and during of rolling serve lighting equipment to the pilot as optical Navigation aid. Lighting systems for major airports include various lighting appliances, which the marking of the approach sector, the runways, the Runways and aprons serve. Furthermore, additional equipment used, for example, taxiway signs, parking aids, wind direction indicator and the same. Both the devices as well as the plants are separately switchable, whereby also each individual Plant may include different switchable lighting devices. So includes the approach lights, for example, approach lightning for visual highlighting Approach Centerline and Threshold, high-performance firing for approach, Threshold and runway end, precision approach slip angle fire for high Light outputs and sharp red-white transition and the like.

The individual firing systems usually extend over several Kilometers and require a corresponding cable network. The single ones lighting equipment become common serially operated to intensity differences the connected lighting equipment at the beginning and end of the line, which in parallel-operated lighting appliances due to the fact that in these cable lengths given high voltage drop would be given. To a break of the series circuit formed by the series connected loads in case of failure of a single consumer, d. H. a lamp, to prevent The individual lamps are each via a lamp or series circuit transformer provided. The lamp transformers for feeding the light sources the lighting equipment are connected in series in the series circuit and with a constant Power operated. The transformers therefore have current transformer character with a fixed, specifiable current transmission ratio.

The luminous intensity The lighting equipment must be connected at all times during take-off or landing the aircraft prevailing visibility can be adjusted. The Adjust the light intensity is carried out by means of control and regulating devices, which are available on the part of the lighting systems in addition to lamps as lighting devices. A once set intensity value must be independent of mains voltage fluctuations or the failure of individual lamps in the series circuit kept constant become. To keep the current constant in series circuits of lighting systems on airfields Constant current controller are used, in addition to the above Demands international guidelines and recommendations and in particular comply with country-specific requirements have to. In addition to these control and regulating devices include lighting systems as a lighting device about that In addition, lamp failure detection and / or insulation monitoring devices. Lamp failure detection systems ensure, that the failure of lamps detected in lighting systems and eliminated can be. In general, irrespective of Se rienkreisstrom and whose waveform controls the individual lamp failures in thyristor Series circuits detected and reported. The commonly used lamp failure signaling devices Report the first and all other failed lamps one Lighting system.

The usually characterized by long cable lengths series circuits for airport lights, which predominantly in the ground and in damp shafts are housed due to high operating voltages of such circuits to ground easily lead to insulation faults in case of defects. The consequence of such Insulation fault is the reduction of the operating current with double earth fault and thus the lamp brightness of firing devices close the fault, which leads in extreme cases to the failure of the lamps. Insulation monitoring equipment detect the insulation resistance of an aerodrome lighting series circuit both in operation and in the off state. It will a stabilized DC voltage independent of the operating voltage fed into the series circuit and the resulting current the resistance is determined. The measured resistance value indicates a measure of error, which within a predefinable limit a message to initiate of disposal measures outputs.

The various firing devices such as constant current regulators, lamp failure detection systems and insulation monitoring systems for airfield lighting have to a variety of signals for driving and feedback of operating conditions with replace the controller. These signals must be via cable and corresponding plug or clamp connections the individual firing devices on the part of Control device available be put. So far, the firing devices had to use parallel interfaces with multi-core cables and corresponding plug or clamp connections with the central control device or upstream decentralized Control devices are connected. The connection of the individual firing devices with the Control device requires a considerable installation and material costs. This assembly and Material costs increased in particular with redundant design of the connections at least by a factor of 2, with corresponding firing devices and control devices via appropriate Signal inputs and outputs feature have to, which allow a redundant connection.

• – die Ein- beziehungsweise Ausschaltung aller Aktorik- und/oder Sensorikelemente der Flugplatzbefeuerungsgeräte,
• – die Einstellung der erforderlichen Helligkeitsstufen der Flugplatzfeuer von einer zentralen beziehungsweise einer dezentralen Steuereinrichtung aus,
• – die Rollführung mittels Sensoren, beispielsweise Induktionsschleifen in den Rollbahnen,
• – die Überwachung aller Aktorik- und/oder Sensorikelemente der Flugplatzbefeuerungsgeräte und Anzeige der Betriebszustände seitens einer zentralen und/oder einer dezentralen Steuereinrichtung.

For control, regulation and / or monitoring of aerodrome lighting systems by a central control device, for example by a tower, or by decentralized control devices, for example by the different lighting devices, in a directly on-site the lighting devices arranged waiting, it is necessary both with the Aktorik- and sensor elements of the firing devices to be able to communicate as well as the monitoring signals of all parts of the plant down to actor and / or sensor element level corresponding to link and display or log. The following tasks are to be performed by the control system of the aerodrome lighting system:

• The activation or deactivation of all actuator and / or sensor elements of the airport lighting devices,
• The setting of the required brightness levels of the airport fire from a central or a decentralized control device,
• The rolling guide by means of sensors, for example induction loops in the runways,
• - The monitoring of all Aktorik- and / or sensor elements of the Flugplatzbefeuerungsgeräte and display the operating conditions by a central and / or a decentralized control device.

• – Programmschaltungen der Befeuerung aufgrund einer vorgegebenen Landerichtung eines Flugzeuges seitens einer Steuereinrichtung der Flugsicherung,
• – die Entgegennahme manueller Steuerbefehle seitens Eingabeeinheiten der Steuereinrichtungen,
• – Zulässigkeitsüberprüfungen sämtlicher Eingaben und Rückweisungen unzulässiger Eingaben,
• – die Anzeige aktivierter Funktionen,
• – die Ansteuerung von Leistungseinheiten der Befeuerungsgeräte, beispielsweise von Konstantstromreglern,
• – die Überwachung der Betriebszustände einzelner Befeuerungsgeräte,
• – die Auswertung von Meldungen angeschlossener Überwachungssysteme wie Lampenausfallüberwachungssysteme, Isolationsüberwachungssysteme sowie sonstiger Sensorikelemente,
• – Eigenüberwachung des Leitsystems und der Kommunikationseinrichtungen, wie Bussysteme und dergleichen,
• – automatischer Wiederanlauf des Leitsystems nach Störungsbeseitigung sowie Netzausfällen und dergleichen.

The following system services are required in detail:

• Program switching of firing on the basis of a predetermined landing direction of an aircraft by an air traffic control control device,
• The receipt of manual control commands from input units of the control devices,
• - admissibility checks of all entries and rejections of inadmissible entries,
• - the display of activated functions,
• The control of power units of the firing devices, for example of constant current regulators,
• The monitoring of the operating conditions of individual lighting appliances,
• - the evaluation of messages from connected monitoring systems such as lamp failure monitoring systems, insulation monitoring systems and other sensor elements,
• Self-monitoring of the control system and the communication devices, such as bus systems and the like,
• - Automatic restart of the control system after troubleshooting and power failures and the like.

To the Switching on / off the various devices have been common Switch or button and for the display light emitting diodes or incandescent used, which by means of parallel wiring to the Aktorik- and / or Sensor elements of the lighting devices were performed. Furthermore, embodiments are known the computer-aided Control devices included and between centralized and decentralized Control devices have optical fiber connections, for example between a tower and different substations. From the decentralized Control devices, for example a substation, to the Aktorik- and / or sensor elements but then again a parallel wiring Use. All previously known control systems for airport lighting systems are specifically geared to the respective location. Otherwise are Redundancies only exceedingly consuming realizable.

From the publication DE 197 50 560 A1 For example, there are known a method and apparatus for maintaining a series circuit of lighting installations at aerodromes and the like, and a method and apparatus for lamp failure indication in such a series of lighting installations. In order to enable a swapping out of the open-loop and closed-loop control electronics of a constant-current regulator, a method is proposed for keeping the series circuit current of lighting systems on aerodromes and the like constant, on the secondary side of a transformer connected in series on the secondary side In order to provide a control value for controlling a primary side of the supply transformer arranged, provided for adjusting the secondary-side series circuit current provided Tyristorstellers is supplied to the supply of lamps provided supply transformer a current proportional to the series circuit current as the actual value and digitally converted.

The Utility Model DE 299 12 811 U1 discloses a decentralized airport control system wherein individual firing units are associated with lighting circuits, a plurality of lighting circuits form a firing group, and different firing groups are combined into a firing area, and wherein the control system is formed of a plurality of decentralized control units each associated with a firing circle.

From the utility model DE 298 23 494 U1 is a lighting system, z. As airport or street lighting system, obstacle warning light, obstacle, warning and signal light or the like, known. There is a device for monitoring, control and regulation of their light sources or groups of light sources, each having at least one light emitting unit, which is associated with a transmitter / receiver device with a microcontroller, via a power supply line and a router to a control center, which sends a / Receiving part and a control computer has, connected and from there with control commands be aufschlagbar be. The microcontroller of each lamp unit are components of a decentralized control device, the application-specific components, eg. B. switching, monitoring and adjustment, has.

The patent US 5,426,429 relates to an airport lighting system in which each lighting unit is provided with an electronic unit having a controller, a monitoring unit and a module for supplying energy to the light source of the lighting unit, and for monitoring the operation of the lighting unit, each lighting unit individually from a control center for the airfield is addressable. Each lighting electronics unit has a unique address block associated with the lighting unit or its associated lighting group, so that when the electronics unit is placed in a location, the lighting unit automatically receives its unique address.

Of the The present invention is in consideration of this prior art the task is based, a control system of the type mentioned to improve overall a better overall function, a higher one Safety, easy expandability and especially easy and cost-effective Way a redundant design of the control system down to can be realized on Aktorik- and / or sensor element level.

• – mit einer Hochgeschwindigkeitskopplung zum Datenaustausch und -abgleich zwischen den beiden Prozessorbaugruppen,
• – mit einer Fehlerreaktion bei Ausfall einer der beiden Prozessorbaugruppen,
• – mit einer Synchronisation zwischen beiden Prozessorbaugruppen,
• – mit einem Selbsttest der beiden Prozessorbaugruppen,
• – mit einer Lokalisierung von systeminternen Fehlern der beiden Prozessorbaugruppen,
• – und mit einer Passivierung defekter Prozessorbaugruppen.

For the technical solution of this object, a control system for aerodrome lighting systems for controlling, regulating and / or monitoring Aktorik- and / or sensor elements of aerodrome lighting devices is provided with the present invention, which is characterized in that it has a central redundant control device to which A - And output devices and by means of at least one interface via a likewise redundantly formed bus system at least one decentralized, with the Aktorik- and / or sensor elements of Flugplatzbefeuerungsge devices connectable controller is connectable, wherein the central and / or decentralized control device consists of a redundant memory programmable controller , which has two processor modules as master and backup device,

• With high-speed coupling for data exchange and adjustment between the two processor modules,
• - with an error reaction in case of failure of one of the two processor modules,
• With a synchronization between both processor modules,
• - with a self-test of the two processor modules,
• - with a localization of system-internal errors of the two processor modules,
• - and with a passivation of defective processor boards.

Advantageously, the central and / or decentralized control device is a programmable logic controller, preferably a SIMATIC, particularly preferably of the type S5-155H or S7-400H, wherein the decentralized control device is a redundant control device. The core of the control according to the invention is thus the commercially available redundant control device SIMATIC S5-155H / S7-400H, the company Siemens, on the part of the central and / or decentralized control device advantageously to commercial computing devices (PC's), input and output devices, advantageously touch-screen Control stations, monitoring monitors and the like is added. By the inventive interface Advantageously, decentralized control devices can be connected via the redundantly designed bus system, so that these control, regulation and / or monitoring of the same by the decentralized control device for controlling, regulating and / or monitoring actuator and / or sensor elements of airfield lighting devices connected to the decentralized control device , According to the invention, the components of the control system are present redundantly, so that in case of failure of a component of the operation can be continued without interruption. By switching operations in the control system, for example when switching a redundant connection via the bus system or when switching the redundant control means of a so-called "Master" - on a standby CPU advantageously the switching state of Aktorik- and / or sensor elements of airfield lighting devices is not changed.

The Use commercially available Control devices, such as bus systems, interfaces, input and output devices and the like, which are each redundant in their functions are trained to ensure that the control system is highly available. About that In addition, the use of commercial control equipment, Bus systems, interfaces and the like that the control system on simple and inexpensive Way is expandable and finally, that the control system according to the invention using commercially available Facilities easier to certify, for example, after DIN or the like.

According to one advantageous embodiment of the invention comprises the interface for the bus coupling of the control devices, communication processors, which the use of optical fibers as a transmission medium enable. By doing so leaves a redundant bus coupling from the central control device build up to decentralized control facilities. The data transmission advantageously takes place by means of Ethernet networks and / or PROFIBUS networks, advantageously in different topologies, for example as Ring.

According to one specific embodiment of the invention will be used to operate, for example for switching on and / or off the Aktorik- and / or sensor elements of airfield lighting devices touch-screen control panels used that changed Tasks exceed can be easily adapted by means of appropriate software changes.

According to one Advantageous proposal of the invention are messages and / or message images on large color flat monitors displayable, whereby the display by means of appropriate software changes changed Adjust the tasks of the control system.

According to one particularly advantageous embodiment of the invention is used to increase security the control devices advantageously a fault-tolerant Control device used, more preferably a SIMATIC S7-400H Siemens, which can be used in so-called "hot stand-by technology", on the one hand the availability the controller to increase and on the other hand, the reliability of Control device. For this purpose, the use is for the SIMATIC S7-400H a safety assessment provided.

The decentralized control devices for the serial control and monitoring the Aktorik- and / or sensor elements of the Flugplatzbefeuerungsgeräte such as lighting constant current regulator, Lamp failure detection systems, insulation detection systems and the like, and its serial redundant bus coupling to the central control device, for example, on the part of the tower, which advantageously over two Fiber Optic Rings done, make sure that even if a coupling fails, the entire data exchange between the central and a decentralized control device guaranteed is.

According to one further particularly advantageous embodiment of the invention the decentralized control devices provide an interface to the connection a mobile, portable Re cheneinrichtung, for example a Laptop, allowing a control, regulation and / or monitoring is made possible by the central control device on site.

• – graphische Darstellung des Befeuerungs- und Systemzustands,
• – Einzelanzeigen für jeden Stromkreis mit Zustands-Regler, Lampenausfälle und Isolationszustand,
• – Ermitteln, Anzeigen und Speichern von Betriebszeiten der einzelnen Befeuerungskreise,
• – Einzelanzeige des Zustands der Sensorikelement-Auswertegeräte (Schleifen, Kameras, IR-Schranken etc.),
• – Speichern und Anzeigen von Störmeldungen sowie Ausdrucken der Störmeldungen mit Datum und Uhrzeit,
• – Aufzeichnen und Speichern aller Schaltzustände der Befeuerungsgeräte über längere Zeiträume,
• – Ausdrucken ausgewählter Zustände auf einem Protokolldrucker,
• – Verwaltungsfunktionen wie passwortgeschützter Zugriff und Datensicherung.

The coupling to the Aktorik- and / or sensor elements of Flugplatzbefeuerungsgeräte, such as constant current regulator, induction loops and the like is done by the decentralized control devices. The decentralized control devices are coupled via the bus system with the central control device and by means of the central control device connected input and output devices, advantageously based on standard high-performance computers with color monitor and pointer operation via mouse and one or more fault message printers, tax, regular and / or monitored. The following functions are fulfilled:

• - graphical representation of the lighting and system status,
• - individual displays for each circuit with status controller, lamp failures and insulation state,
• - determining, displaying and storing operating hours of the individual lighting circuits,
• - Individual display of the status of the sensor element evaluation devices (loops, cameras, IR barriers, etc.),
• - Saving and displaying of fault messages as well as printing the fault messages with date and time,
• Recording and storing all switching states of the lighting devices over long periods of time,
• - Printing selected states on a log printer,
• - Administrative functions such as password-protected access and data backup.

• – Einsatz von handelsüblichen bewährten Industriesteuerungen (SIMATIC S5/S7),
• – Einsatz von handelsüblichen bewährten Bussystemen und Lichtwellenleiter-Technik,
• – Aufbau von preiswerten komplexen Steuer- und Überwachungssystemen,
• – preiswerter redundanter Steuerungsaufbau,
• – Flexibilität des gesamten Leitsystems, insbesondere bei der Realisierung geänderter Aufgabenstellungen oder Anlagenerweiterungen,
• – Anwendbarkeit für Klein-, Mittel- als auch für Großanlagen, beispielsweise Ergänzung und Adaption,
• – durch offengelegte Busstruktur anschaltbar an bestehende Fremdsysteme,
• – Aufbau von fehlertoleranten Systemen mit hoher Verfügbarkeit (99,99%) in Verbindung mit sicherheitsgerichteter Technik,
• – Aufbau von Bedienhierarchien mittels Passwörtern und dergleichen,
• – Speicherung von Bedien- und Überwachungsdaten, beispielsweise zur Erstellung von Statistiken,
• – einfachste Erweiterbarkeit der Steuereinrichtungen, insbesondere durch Modularisierung der Software.

This type of arrangement of the control system has the following advantages:

• - Use of commercially proven industrial controllers (SIMATIC S5 / S7),
• - Use of commercially proven bus systems and optical fiber technology,
• - building inexpensive complex control and monitoring systems,
• - inexpensive redundant control structure,
• - Flexibility of the entire control system, in particular when implementing changed tasks or system extensions,
• - Applicability for small, medium and large-scale installations, for example supplementation and adaptation,
• - connectable to existing third-party systems by means of a disclosed bus structure,
• - Construction of fault-tolerant systems with high availability (99.99%) in conjunction with safety-related technology,
• - creation of operating hierarchies by means of passwords and the like,
• - storage of operating and monitoring data, for example for the production of statistics,
• - Easiest expandability of the control devices, especially through modularization of the software.

The Inventive control system creates by combining commercially available components and assemblies a complete control, regulation and logging system for Control, regulation and / or monitoring of actuator and / or sensor elements of airfield lighting devices.

Further Details, features and advantages of the invention will become apparent below explained in more detail with reference to the embodiments illustrated in the figures. there demonstrate:

1 in a schematic representation of the structure of a control system according to the invention;

2 a schematic diagram of a circuit redundant input modules with error locating device;

3 a schematic diagram of the wiring of redundant output modules with error locating devices;

4 in a schematic representation of the coupling to the central control device via an interface unit;

5 in a schematic diagram input and output devices to the central control device;

6 in a schematic representation of the construction principle of the central control device,

7 in a schematic representation of the line concept bus-controlled control devices, as well as lamp failure detection and insulation failure detection systems and

8th in a schematic representation of a structure of a decentralized control device.

1 shows a control system (BLS) for an airport lighting system based on the automation system Siemens, SIMATIC S5, supplemented with PCs for lighting control, regulation and / or monitoring.

• – Zwei Monitore zur Anzeige des gesamten Betriebszustandes mit Mausbedienung (PID) für Rollführung in der Towerkanzel (zentrale Steuereinrichtung),
• – Drei Touchscreen (TID) Bedien- und Anzeigeeinheiten in der Towerkanzel,
• – Neuer redundanter Steuerrechner SIMATIC S5-155H (Befeuerungsraum, Ebene 5) zur Verknüpfung und Weitergabe der Steuerbefehle und Meldungen an die Unterstationen (z. B. Nord- und Südbahn) inkl. Rollführungsfunktionen,
• – Redundante Steuerrechner SIMATIC S5-155H in drei Befeuerungsstationen Nord zur Weitergabe der Befehle an die Befeuerungsanlage und Rückmeldungen aus der Befeuerungsan lage an den Tower inkl. Lampenausfallmeldungen, Isolationsmeldungen sowie die Verarbeitung von Sensorsignalen und Meldung an den Tower,
• – Redundante Kopplung in LWL-Technik im Ring zwischen folgenden Gebäuden:
• – Ein neuer Tower – Station Nord-West – Station Feuerwehr – Station Nord-Ost – neuer Tower. Jede redundante Kopplung erfolgt so, dass die Verbindung über zwei getrennte Wege läuft; so dass auch bei Auftrennung des LWL-Rings an einer Stelle noch eine Verbindung bestehen bleibt,
• – Vier neue LWL-Verbindungen Neuer Tower – Alter Tower. Im alten Tower werden diese Kopplungen über Repeater auf die bestehenden LWL-Verbindungen zu den Stationen Süd-West und Süd-Ost umgesetzt,
• – Warte mit zwei Arbeitsplätzen, LWL-gekoppelt zu neuem Tower,
• – Schnittstelleneinheit zu ANBLF (DFS) für Nord- und Südbahn,
• – Ortssteuerung in drei neuen Nordstationen über tragbaren PC (Laptop),
• – Ergänzung der SIMATIC-Steuerung in einer bestehenden Station Süd-Ost.

In the present case, it consists of the following system parts:

• - Two monitors for displaying the entire operating state with mouse control (PID) for rolling guidance in the tower pulpit (central control device),
• - Three touch screen (TID) control and display units in the tower pulpit,
• - New redundant control computer SIMATIC S5-155H (lighting room, level 5) for linking and transferring the control commands and messages to the substations (eg north and south tramways) incl.
• - Redundant control computer SIMATIC S5-155H in three North lighting stations for forwarding the commands to the lighting system and feedback from the lighting system to the tower including lamp failure messages, insulation messages as well as the processing of sensor signals and message to the tower,
• - Redundant coupling in fiber optic technology in the ring between the following buildings:
• - A new tower - station north-west - station fire station - station north-east - new tower. Each redundant coupling is done so that the connection runs in two separate ways; so that even if the fiber optic ring is separated at one point, a connection still remains,
• - Four new fiber optic connections New Tower - Old Tower. In the old tower, these connections are implemented via repeaters to the existing fiber-optic links to the stations south-west and south-east,
• - Waiting with two workstations, fiber optic coupled to new tower,
• - Interface unit to ANBLF (DFS) for north and south runway,
• - Local control in three new northern stations via portable PC (laptop),
• - Supplementing the SIMATIC controller in an existing South-East station.

• – Die Ansteuerung aller Anlagenteile zur Ein/Ausschaltung und Einstellung der Helligkeitsstufen vom Tower,
• – Rollführung mittels Sensoren (Induktionsschleifen etc.), TXC- und STB-Kreisen,
• – Die Überwachung aller Anlagenteile und Anzeige der Betriebszustände im Tower, dezentralen Warten (Vor-Ort), sowie in einer Nebenwarte.

The tasks of the control system are:

• - The control of all system components for switching on / off and setting the brightness levels of the tower,
• - Roll guidance by means of sensors (induction loops, etc.), TXC and STB circuits,
• - The monitoring of all plant components and display of operating conditions in the tower, decentralized maintenance (on-site), as well as in a side room.

• – Programmschaltungen der Befeuerung aufgrund der vorgegebenen Landerichtung und Betriebsstufe I/II/III vom z. B. ANBLF System der DFS,
• – Entgegennahme der manuellen Steuerbefehle von den Touchscreen-Bedieneinheiten (TID) oder den Monitor-/Maus-Bedienungen (PID) in der Towerkanzel,
• – Zulässigkeitsprüfung aller Eingabebefehle und Rückweisung unzulässiger Befehle,
• – Anzeige der ausgelösten Funktionen in den Meldebildern,
• – Ansteuerung der Leistungseinheiten (Regler) der Befeuerung,
• – Überwachung des Betriebszustandes der Befeuerung,
• – Automatisches Schalten von TXC- und STB-Kreisen auf Basis von Sensormeldungen, vorangewählten Rollrouten und kreuzungsspezifischen Verknüpfungen (Rollführung) sowie Schalten STB an der S/L über eine Zeitschaltung,
• – Generierung von Fehlermeldungen bei Störungen in der Befeuerung,
• – Auswertung der Meldungen von den angeschlossenen Überwachungssystemen, • Lampenausfallüberwachung • Isolationsüberwachung • Sensoren
• – Eigenüberwachung des Steuerungssystems und der Kommunikationseinrichtungen,
• – Automatischer Wiederanlauf des Systems nach Störungsbeseitigung, sowie nach Netzausfällen.

In detail, the following system services are provided:

• - program switching of firing on the basis of the given landing direction and stage I / II / III of z. B. ANBLF system of DFS,
• - Receive the manual control commands from the touch screen control units (TID) or the monitor / mouse operations (PID) in the tower pulpit,
• - admissibility check of all input commands and rejection of illegal commands,
• - display of the triggered functions in the message screens,
• - control of the power units (controller) of the lighting,
• - monitoring the operating status of the lights,
• Automatic switching of TXC and STB circuits on the basis of sensor messages, pre-selected taxi routes and intersection-specific links (taxi guidance) as well as switching STB on the S / L via a timer,
• - generation of error messages in case of disturbances in the lighting,
• - Evaluation of the messages from the connected monitoring systems, • Lamp failure monitoring • Insulation monitoring • Sensors
• - self-monitoring of the control system and the communication equipment,
• - Automatic restart of the system after troubleshooting, as well as after power failures.

In the towerkanzel are z. B. three TID (touch screen) keypads, connected to a PC in the lighting room, level 5, as well as two PID consisting of flat monitor 20.1 '' and Mouse operation, connected to a PC in the lighting room, level 5th

• a) Steuerrechner Kernstück der Steuerung ist das redundante System SIMATIC S5-155H ergänzt um PC's, an dem die drei TID und die zwei PID in der Towerkanzel, die Schnittstelle ANBLF, die Warte und die Stationen Nord- und Südbahn angeschlossen sind. Alle wichtigen Systemkomponenten sind doppelt vorhanden, so dass bei Ausfall einer Komponente der Betrieb ohne Unterbrechung weitergeführt werden kann. Durch Umschaltvorgänge im System, z. B. beim Umschalten einer redundanten Koppelstrecke oder beim Umschalten des redundanten Steuerrechners von der Master- auf die Reserve-CPU wird der Schaltzustand der Befeuerungsanlage nicht verändert. Die Buskopplung der Stationen Nord-West, Nord-Ost und Feuerwehr an den Steuerrechner Tower erfolgt über zwei Kommunikationsprozessoren CP so dass eine redundante Kopplung zu jeder Station entsteht. Die Übertragung der Daten erfolgt z. B. mit dem Protokoll PROFUBUS nach EN50170, Volume 2 mit 1,5 Mbits.
• b) Ansteuerung Beacon
• c) Ansteuerung Hindernisfeuer neuer Tower
• d) Unterbrechungsfreie Stromversorgung (USV) mit einer Stützzeit von 60 Minuten (ohne Stützung Beacon).

In the lighting room, level 5 are:

• a) Control computer At the heart of the control system is the redundant SIMATIC S5-155H system, supplemented by PCs, to which the three TIDs and the two PIDs in the tower pulpit, the ANBLF interface, the control room and the north and south tram stations are connected. All important system components are duplicated, so that if one component fails, operation can be continued without interruption. Through switching operations in the system, eg. As when switching a redundant coupling path or when switching the redundant control computer from the master to the reserve CPU, the switching state of the lighting system is not changed. The bus coupling of the stations north-west, north-east and fire brigade to the control computer tower via two communication processors CP so that a redundant coupling to each station is created. The transmission of the data takes place z. Eg with the protocol PROFUBUS according to EN50170, volume 2 with 1.5 Mbits.
• b) Control beacon
• c) driving obstacle fire new tower
• d) Uninterruptible power supply (UPS) with a support time of 60 minutes (without Beacon support).

in the Rack space on level 1 are the two interface units to ANBLF the north and south piste. ANBLF (AlphaNumerical Operating Level and Runway Remote Control System) is a computerized DV system of DFS.

These two interface units, executed in SIMATIC ET200M technology, will be mounted in DFS racks in level 1 of the new tower and over a redundant fiber optic link to the control computer in the firing room, Level 5, docked.

The Coupling between the interface units and the ANBLF computer the DFS is realized with 24V signals. The lighting computer ANBLF hereby signals the current operating status or receives control commands for the Category switching.

• • Redundanter Steuereinheit SIMATIC S5-155H mit den Kopplungsbaugruppen für die Ansteuerung und Überwachung der Befeuerungsregler, Erfassung der Lampenausfälle (LAM) und des Isolationszustandes (ISO) der Serienstromkreise.
• • Redundante, serielle Profibuskopplung zum Steuerungsrechner Tower über zwei LWL-Ringe, so dass bei Ausfall einer Kopplung der volle Datenaustausch zwischen Tower und Station gewährleistet ist.
• • Schnittstelle für die Vorortsteuerung jedes einzelnen Systems sowie jedes einzelnen Stopbars und TXC-Abschnitts der jeweiligen Station über einen Laptop.
• • Kopplung zu den Auswertegeräten der Induktionsschleifen (Sensorsystem).

The construction of the three lighting stations north-west, north-east and fire brigade of the northern runway is basically the same. They consist of:

• • Redundant control unit SIMATIC S5-155H with the coupling modules for control and monitoring of the lighting controllers, detection of lamp failures (LAM) and the isolation state (ISO) of the series circuits.
• • Redundant, serial Profibus coupling to the control computer tower via two fiber optic rings, so that full communication between the tower and the station is ensured in the event of a coupling failure.
• • Interface for the local control of each individual system as well as each individual stopbar and TXC section of the respective station via a laptop.
• • Coupling to the evaluation devices of the induction loops (sensor system).

Of the technical structure of the two existing lighting stations the south slope (south west and South-East) is known in principle from the prior art.

It However, circular extensions take place (here 18 circles and 7 loops) in the station south-east through an additional cabinet and software adjustments for a new one Control concept in cooperation with the northern runway.

• a) wie bisherige Technik Südpiste (zusätzliches Erweiterungsgerät, angekoppelt an vorhandenes Zentralgerät S5-135U; Ansteuerung der Regler über DE/DA; LAM-Erfassung über DE/DA),
• b) Aufbau mit der Technik der Nordpiste (S5-155H; Busregler; S7-LAM-/ISO-Erfassungseinheit.

The following variants for the construction are possible:

• a) as previous technology south runway (additional expansion unit, coupled to existing central unit S5-135U, control of the controller via DE / DA, LAM detection via DE / DA),
• b) Construction with the technique of the north runway (S5-155H; bus controller; S7-LAM / ISO detection unit.

The Waiting is over a separate bus to the lighting computer in the lighting room, Level 5 docked. It is based on high performance PC's with color monitor, Pointer operation via mouse over Menus and printers.

• – Grafische Darstellung des Befeuerungs- und Systemzustands,
• – Einzelanzeigen für jeden Stromkreis mit Zustands-Regler, Lampenausfälle und Isolationszustand,
• – Ermitteln, Speichern und Anzeigen von Betriebszeiten der einzelnen Befeuerungskreise,
• – Einzelanzeige des Zustands der Sensor-Auswertegeräte (Schleifen etc.),
• – Speichern und Anzeigen von Störmeldungen; Ausdrucken der Störmeldungen mit Datum/Uhrzeit,
• – Aufzeichnen und Speichern aller Schaltzustände der Befeuerung für einen Zeitraum von mindestens 7 Tagen,
• – Ausdrucken ausgewählter Zustände auf einem Protokolldrucker,
• – Verwaltungsfunktionen wie passwortgeschützter Zugriff und Datensicherung.

Essentially, the control fulfills the following functions:

• - Graphical representation of the lighting and system status,
• - individual displays for each circuit with status controller, lamp failures and insulation state,
• - determining, storing and displaying operating hours of the individual lighting circuits,
• - individual display of the status of the sensor evaluation devices (grinding etc.),
• - Save and display fault messages; Print the fault messages with date / time,
• - record and store all firing conditions for a period of at least 7 days,
• - Printing selected states on a log printer,
• - Administrative functions such as password-protected access and data backup.

• – Zeit von einer Eingabe im Tower bis zur Quittierung oder Zurückweisung: < 0,5 s
• – Zeit von der Eingabe eines Befehls im Tower bis zur Ausgabe des Ansteuersignals an die Regler in einer Befeuerungsstation: < 1 s
• – Zeit von der Rückmeldung eines Reglers oder Induktionsschleife bis zur Informationsausgabe auf den TID und PID im Tower: < 2 s
• – Bei CATIII-Betrieb: Zeit von der Netzwiederkehr nach Spannungsausfall bis der „alte„ Befeuerungszustand wieder ansteht: < 1 s
• – Umschaltzeiten von redundanten Einheiten, z. B. bei Teilausfällen des Steuerrechners im Tower in denen das System keine Steuerbefehle ausführt: < 0,5 s

The control system has the following reaction times:

• - Time from input in the tower to acknowledgment or rejection: <0.5 s
• - Time from the input of a command in the tower to the output of the control signal to the controllers in a lighting station: <1 s
• - Time from the feedback of a controller or inductive loop to the information output to the TID and PID in the tower: <2 s
• - For CATIII operation: Time from mains recovery after power failure until the "old" firing state is restored: <1 s
• - Switchover times of redundant units, eg. For example, in the case of partial failures of the control computer in the tower in which the system does not execute any control commands: <0.5 s

The above times are used by the system at any time and at maximum system load maintained.

Core pieces of the The present control system consists of the four redundant control systems SIMATIC S5-155H in the lighting room level 5 new tower and in the new stations north-west, north-east and fire (north).

All important system components are duplicated in this system, so that in case of failure of a component of the operation without interruption continued can be.

The System S-155-H consists of two central units, each with its own CPU, power supply and own memory. The application program is stored in both central units.

Over a High-speed coupling, both CPUs exchange data for event-synchronous Processing of the user program, whereby one of the two central devices (ZG) the role of the master takes over.

The other central device (ZG) is the reserve and receives the input signals, processes the same program as the master ZG, but no output signals (hot-standby). In case of failure of Master ZGs takes over the reserve ZG bumpless the company.

At the central devices are about system-internal high-speed couplings two expansion devices connected, which the communication or I / O modules to the control panels, Record stations etc.

In this highly available System concept, the operation of the lighting system remains undisturbed when a Central device, a channel of the communication modules or digital peripherals fails. losses are recognized immediately and reported to the control room.

• • Redundanter (2-kanaliger) Aufbau von Zentralprozessorbaugruppen, Speicher, Spannungsversorgungen, Teile der Peripherieansteuerungen und Kommunikationskomponenten.
• • Datenaustausch und Synchronisation der beiden Prozessorbaugruppen.
• • Fehlerüberwachung, Fehlermeldung und Tolerierung von Ausfällen.
• • Schnelle Übernahme der Steuerung durch Reserveglieder ohne Informationsverluste oder Fehlsteuerungen bei Ausfällen (im ms-Bereich).
• • Das System muss auch dann mit hoher Wahrscheinlichkeit weiterarbeiten, wenn durch einen oder mehrere Fehler Teile der Steuerung ausfallen.

Due to the very high requirement for availability and thus for the reliability of a control and monitoring system for lighting control of a commercial airport, the control system fulfills the following requirements:

• • Redundant (2-channel) structure of central processor boards, memory, power supplies, parts of peripheral controllers and communication components.
• • Data exchange and synchronization of the two processor modules.
• • Error monitoring, error message and tolerancing of failures.
• • Quick takeover of the control by spare elements without loss of information or malfunctions in the event of failures (in the ms range).
• • It is highly likely that the system will continue to operate if one or more parts of the controller fail.

These Requirements are based on the example of the invention Control Leipzig / Halle Airport through the automation system S5-155H meets, which operates according to the "master-slave principle" in "hot-stand-by mode".

The Operation of the highly available Automation system S5-155H is similar to an "OR" link, i. H. the System is in continuous operation ("non-stop" operation) if at least one of the both central devices works without errors.

Therefore can repair or replace a defective hardware component without interrupting process control and monitoring comes.

• • Datenaustausch und -abgleich zwischen den beiden Prozessorbaugruppen
• • Fehlerreaktion bei Ausfall einer Prozessorbaugruppe (Master-Slave-Umschaltung auf das Reservegerät)
• • Synchronisation der beiden Prozessorbaugruppen
• • Selbsttest (Fehlersuchbetrieb)
• • Lokalisierung von systeminternen Fehlern wie z. B. Busfehler, Speicherfehler ... und Peripheriefehlern (E/A-Baugruppen, Kommunikationsprozessoren ...)
• • Passivierung (= Deaktivierung) defekter S5-Baugruppen

The two central devices each contain the processor module CPU 948R. The operating system (Firmware) of this module supports the following system functions:

• • Data exchange and adjustment between the two processor modules
• • Error reaction in the event of a processor module failure (master-slave switchover to the backup device)
• • Synchronization of the two processor modules
• • self-test (troubleshooting)
• • Localization of intrinsic errors such as: Bus errors, memory errors ... and peripheral errors (I / O modules, communication processors ...)
• • Passivation (= deactivation) of defective S5 modules

Basically works the system S5-155H according to the master-slave principle in the so-called "hot stand-by" operation.

In In this operating mode of the automation system, a subdevice, the master device, performs the process. The second "reserve device", the slave is running in the "inflated" state with, receives at every so-called "synchronization point the current data of the master and checks whether the master device is still operational.

Recognizes the reserve a total failure of the master device, so it takes over after a bum-free Switching over (about 5-30 ms) as the new master controller. This switching occurs without loss of information.

in the subsequent "solo operation" leads this new master device the process alone; The failed subdevice is in the stop state and is no longer involved in the firing control. It will reported as failed and can then be exchanged.

• • Geschalteter Peripherieaufbau: Das Mastergerät kontrolliert den Prozessablauf, während das Reservegerät lediglich in Bereitschaft mitläuft. Im Falle eines Fehlers übernimmt das Reservegerät sofort die Steuerung.
• • Zweikanaliger Aufbau: Beide Teilgeräte kontrollieren parallel den Prozessablauf. Auch das Reservegerät gibt Ausgangssignale aus und liest Eingangssignale ein.

The interaction between the two subunits varies depending on the configuration of the periphery:

• • Switched peripheral setup: The master device controls the process flow while the backup device is only in standby mode. In the event of a fault, the reserve device takes over control immediately.
• • Dual-channel design: Both sub-devices monitor the process flow in parallel. The reserve device also outputs output signals and reads in input signals.

• • das gleiche Anwenderprogramm
• • die gleichen Datenbausteine
• • die gleichen Prozessabbildinhalte der Peripheriebaugruppen und
• • die gleichen Empfangspufferinhalte der verwendeten Kommunikationsprozessoren

This readiness of the fast and automatic master-slave switching is called "hot-stand-by" operation, which means that both subunits need to exchange data quickly and reliably, and the S5-155H processor modules get over the central device coupling

• • the same user program
• • the same data blocks
• • the same process image contents of the I / O modules and
• The same receive buffer contents of the communication processors used

Thereby becomes the reserve device always kept on the same data as the master device, so that it is immediately ready to take over the control in the event of a fault.

For bumpless master-slave switching a synchronization of the two subunits is required. It will be the current process data is exchanged (the reserve is "updated") and compared with each other. This ensures that that both subunits over the same database.

The synchronization method used in the S5-155H is "event-driven synchronization":
The synchronization occurs for all events that would lead to a different internal state in the two subunits, z. B. different process images, times or communication data. It ensures that bumpless master-slave switching is possible at any time: no output signal is changed by the switchover and communication with the communication processors takes place without loss of information. These synchronization points also check whether both subunits process the same program instruction. In the case of inequality, the reserve device goes to the stop state with the error message "Synchronization error" (only one subunit available).

The S5-155H automation system supports non-stop operation of the redundantly operated systems Hardware components through multiple self-tests. These check the state of the hardware (CPU, peripherals) and make comparisons between the two subunits. It is determined which modules are faulty and must be replaced.

• • interner S5-Bus
• • Kopplungen der Teilgeräte
• • Fehlerlokalisierungseinrichtung
• • Peripheriebaugruppen
• • Zentralbaugruppen
• • Speicherbaugruppen

The following components are tested in detail:

• • internal S5 bus
• • Couplings of the subunits
• • Error locating device
• • I / O modules
• • Central modules
• • Memory modules

Everyone Errors detected by the self-test will be reported by the test software.

ever The operating modes of the central devices are followed by the following test programs carried out:

Self-test at startup

At the Run through each subdevice Completely all Self-tests. If an error is already detected here, then the faulty one subunit in the stop state.

Self-test in the program cycle

During the cyclic processing of the user program subdivides the operating system the self-test functions into individual short periods of 5 ms ("time slices"). In a user program cycle (S5 program) will be one or more these time slices (parameterizable in the system configuration) processed in the background until an error is detected.

Self-test in troubleshooting mode

at an error that can not be assigned to a particular sub-AG can, the reserve device goes in the troubleshooting mode. This operation is called when the Operating system when comparing the RAM or process image of the outputs one Difference and thus detects a non-localizable error. In troubleshooting mode, the self-test is performed as a whole; he takes about 10 to 30 seconds. The master device continues to operate in "solo mode".

The Localization device is used for error detection and fault localization with two-channel digital input and digital output modules.

For each of these Assemblies is a localization input (L-DE) and a localization output (L-DA) intended. Together they form the localization facility.

With Help of the "L-DA" (group care) Depending on the type of module to be tested either the supply voltage or load voltage (digital output modules) or the signal generator supply (digital input modules) switched off.

Of the Localization input "L-DE" is used to read back the state of the localization outputs "L-DA".

The 2 and 3 show these two principles of redundant input and output.

For one uninterrupted operation, the fault diagnosis does not have fault only detect, but also locate, so that the faulty assembly can be passivated (deactivated).

This Passivation happens with the redundant output modules Switching off the load voltage with the help of the localization outputs. In order to If one output module fails, the supply voltage is not other modules is switched off, is for each redundant output module a separate localization output (L-DA) is provided.

The signal states of defective input modules or communication processors are used in the further process control ignored and not read.

• – Test, Diagnose Hardware und Software
• – Ändern von Software
• – Laden neuer Softwarestände
• – Erstellen von Sicherungskopien

The S5-155H system has service interfaces that allow the following functions to be performed with a service device ("PC / PG" or telephone socket and modem):

• - Test, diagnostics hardware and software
• - Change software
• - Loading new software versions
• - Creating backup copies

The tower has three identical workstations, each consisting of a TID, as in 1 to recognize. The three TIDs contain the control and display functionalities for the Placer (PL), for the Rollotsen (PB) and the redundancy workstation (RUN). In the present case, the TIDs have the following technical data: Dimensions: 350 × 240 × 70 mm (W × H × D), Display / Touch Screen size: 12.1, Brightness: 4 to 800 cd / m ² , brightness manually adjustable, viewing angle: 120 ° vertical, 110 ° horizontal; mittenabgleichbar

• – Auf den drei TID sind jeweils identische Bedien- und Anzeigeebenen vorhanden:
• – 08/26 (PL-Nord)
• – 10/28 (PL-Süd)
• – Taxi (PB Nord, Süd)
• – Übersicht (Übersichtsanzeige Nord und Süd)

Hardware function buttons: 5 pieces (TID on / off, cleaning mode on / off, 2 buttons for brightness adjustment, 1 button for horn volume). Installation: In the customer's own tilt frame.

• - Identical operating and display levels exist on the three TIDs:
• - 08/26 (PL North)
• - 10/28 (PL South)
• - Taxi (PB North, South)
• - Overview (Overview North and South)

The both PID operating and display stations in the tower pulpit, each consisting of a 20.1 '' flat monitor with mouse (pointer), serve to the clear Display and other functions of the lighting control. Furthermore here are all Levels of TID available. The overview display (Main picture) shows the current status of lighting in graphical form Form, on a background with positional representation, of the both S / L and the taxiways.

The flat monitor has the following technical data: Installation dimensions: 488 × 399 × 112 (W × H × D) Screen size: 20.1 '' Resolution: 1280 × 1024 pixels Refresh rate: minute 70 Hz Display technology: LCD color display, TFT Service: disconnected, connection to the monitor via cable

• a) Monitoranzeige Übersichtsanzeige des aktuellen Befeuerungszustandes Nord und Süd in grafischer Form inkl. Anzeige der Rollobjekte (Flugzeuge) bei Sensorbetrieb.
• b) Die vier Ebenen des TID (siehe 3.1) – 08/2610/28 – Taxi – Übersicht
• c) Eingabe der Sperrung von Rollwegsabschnitten,
• d) Definition von Rollprogrammen (0–6),
• e) Organisatorische Funktion, z. B. Passwortvorgaben.

The following displays (WINDOWS) and functions are available on the PID:

• a) Monitor display Overview display of the current lighting status North and South in graphical form including display of the roller objects (aircraft) during sensor operation.
• b) The four levels of TID (see 3.1) - 08/2610/28 - Taxi overview
• c) entering the blocking of taxiway sections,
• d) definition of rolling programs (0-6),
• e) Organizational function, eg. B. password specifications.

It are two interface units ANBLF (one each for north and south piste) built in the rack space level 1 in the modular ET200M technology and via a redundant Profibus fiber optic connection coupled to the control computer in the firing room. The transmission protocol is PROFIBUS-DP according to EN 50170; the transmission rate is at least 1.5 Mbit / sec.

In the S5-155H, two communication processors IM 308-C and in the two ANBLF interface units each have an intelligent Profibus interface IM 153-3 for data processing the redundant coupling links.

At these connections are over Bus connector digital 24 V input and output modules for implementing the 24 V interface connection connected to the ANBLF computer of DFS.

The The signals described below apply to each S / L train, ie. H. there is for North and southern train depending on a separate signal interface ANBLF at the central control device.

ANBLF signals from the BLS:

ANBLF records and links all the signals needed to perform a requested operating level and determines the actual available operating level. - Number of signals: 17 - signal voltage: 12-24V (DC) (the signal voltage comes from the control and monitoring system of the lighting) - signal definition: 0 → Contact open 1 → Contact closed - Communication direction: only to ANBLF

Further ANBLF signals to / from BLS

These signals relate to the operating level and the landing direction. - Number of signals from ANBLF to BLS: 7 - Number of signals from BLS and ANBLF: 4 - signal voltage: 12-24 V (DC) (the signal voltage comes from the BLS) - signal definition: 0 → contact opened 1 → contact closed - Communication direction: in both directions

Note: The to be transferred Signals are only valid if the validity bit 1 is.

4 shows the coupling of the interface unit to the lighting computer of the central control device in the new tower.

In the controller S5-155H Tower will be used for the airport beacon (BEC) following control and feedback signals connected redundantly to digital input / output modules: For control In the S5-155H, two control outputs ("on" / "off") are provided for the firing. These two outputs (24 V) are - by Diodes decoupled - summarized and continued to an adhesive relay (Remanzrelais). Thus, the switching state remains BEC also exist in case of total failure of the lighting computer.

In order to localize an error in a drive signal, an error localization device is implemented in the control and monitoring system. signals 1 control signal BEC pot. free contact 1 feedback BEC ON Signal voltage +24 V

The following signals are provided for the obstruction lights (OBS) on the new tower. The control signal is constructed in hardware so that the obstacle lights are automatically turned on in case of total failure of the control computer. signals 1 control signal OBS pot. free contact 1 feedback OBS ON Signal voltage +24 V

Of the Control computer SIMATIC S5-155H in the new tower is equipped with a uninterruptible power supply (UPS). In case of failure the power supply, the lighting computer must still for at least 60 minutes over the UPS is functional be.

The connection to the five PCs with the software for the TID and PID workstations takes place - as in the 1 and 5 shown with a redundant SINEC H1 bus connection (Ethernet).

Of the Failure of a bus system (eg communication CP in S5-155H; the line; Failure of a CPU) has no effect on the functionality jobs.

The coupling between the lighting stations north-east, north-west, fire and tower takes place, as in 1 shown redundantly over two fiber optic rings. All couplings are bus couplings.

On The coupling paths to the stations become the PROFIBUS protocol according to EN 50170, volume 2 with a transmission speed driven by at least 1.5 Mbit / sec.

The Processing of data transport via the two bus systems are implemented by SIMATIC communications processors CP 5431 executed, which work parallel to the CPU and thus relieve the CPU of coupling tasks.

The Implementation of the electr. RS485 Profibus lines on the two Redundant optical fiber optic rings are made with "Optical Link Modules" (OLM) Voltage supply of these modules is redundant.

The two redundant fiber optic rings are designed with 10/125 μm monomode fibers. If one of the two coupling links fails, the other takes over the entire data exchange. Redundant couplings: • Tower - Station North-West • Tower - Station North-East • Tower - station fire department

The Connection to the existing stations South-West and South-East continues with the existing redundant fiber-optic point-to-point couplings.

For this will be four new fiber pairs (10/125 micron fibers) from the new tower relocated to the old tower, in the old tower each with two Fiber optic converters to the existing fiber optic network (50/125 micron fibers) to the south stations coupled.

The serial data transmission between the tower and the main control room with the SINEC H1 bus system (acc IEEE 802.3 Ethernet) an optical fiber link.

The Processing of the H1 data transport is done with the communications processors SIMATIC CP 1430 executed, which works parallel to the CPU and thus the CPU of coupling tasks relieved.

• – Fehler- und Störungsanalyse
• – Fehlerbehebung
• – Softwareerweiterungen (Update-Service)

In the new tower, a teleservice unit is installed with which the lighting control system (BLS) can be maintained remotely over the telephone network. With this teleservice, the following functions can be performed on the S5 lighting stations:

• - Error and fault analysis
• - Troubleshooting
• - Software Extensions (Update Service)

6 shows the structure principle of the central control device SIMATIC, S5-155H, on the part of the tower.

The Control units of the three stations North-West, Fire Brigade and North-East Like the tower, they are realized on the basis of a SIMATIC S5-155H. The Profibus couplings over to the new tower redundant optical fiber couplings.

The control of the current controller and detection of the controller feedback takes place via a redundant (two-channel) Profibus-DP coupling (bus controller). In case of total failure of an S5 control, the Coupling controller in the controller the switching state.

The Lamp failures, the insulation state and the current actual value of the series circuits are detected by coprocessor units based on SIMATIC S7-300 and over Transfer a redundant Profibus connection to the S5-155H control unit.

In All stations are equipped with sensor evaluation units for recording Rolling on the taxiways and the slopes. The signals of Evaluation devices - in particular the busy messages of the sensor loops - are two-channeled by the Control unit S5-155H read and processed redundantly.

to Local control of systems and individual circuits as well as their condition monitoring is a service unit on a PC basis (Laptop) available.

7 shows in a basic representation the connection of bus-controlled regulator devices (constant current regulator, as well as lamp failure and insulation monitoring systems). In this bus concept, the controllers are not controlled via individual digital outputs with adhesive relay modules and the messages are individually read in with digital inputs, but are coupled via a redundant Profibus. The controllers convert these control commands into current stages for the series circuits. For monitoring, the controller sends alarm signals via the bus, which are read in by the control and monitoring system and evaluated for error and operating messages.

For the regulated Circuits Nordpiste will continue to be type 6SF51 (like in the southern runway) used. Only the setpoint module is against a Profibus module exchanged. Power and control parts remain unchanged. The Operation and displays on the front panel of the 6SF51 controller remain unchanged.

The Bus coupling is designed redundantly, i. H. in case of failure of one Of the two Profibusse remains the control and monitoring of the controller of the S5-155H single-channel. Switching to the intact Bus is bumpless within a few milliseconds. The failure will be in the waiting room reported. In case of total failure of the S5 control or total failure of the Control (both bus systems failed), the switching state held on the Profibus module of the controller (remanence function).

The The S5-155H is connected to the controller bus with two communication connections IM 308C in separate central units.

Of the Data exchange between the S5 and a controller takes place via the redundant controller bus. The data exchange is bidirectional by the following interface signals:

Control signals from the S5 to the bus controller

• 1. Steuersignal „Helligkeitsstufe" Mit einem Steuerbyte wird die geforderte Helligkeitsstufe an den Regler übertragen. Die Anzahl der Stufensignale je Regler richtet sich nach der geforderten Helligkeitsstufung des Systems:

APH, RSR, RCL, TDZ, PAPI REH (incl. THR und RWE) 5 Stufensignale 1%, 3%, 10%, 30%, 100% TXC: 3 Stufensignale 1%, 10%, 100% STB: 3 Stufensignale 10%, 30%, 100% APL, SFL, REL, SIG 1 Stufensignal 100%

• 2. Steuersignal „Regler Ein" Mit diesem Steuerbit wird der Regler in der durch das Steuerbyte „Helligkeitsstufe" vorgewählten Intensität eingeschaltet.
• 3. Steuersignal „Regler Reset" Mit diesem Steuerbit kann der Regler nach einer Abschaltung durch die Überwachungsfunktionen „Überstrom" oder „Istwertausfall" rückgesetzt werden („Remote-Reset").

The following control signals are transmitted from the S5-155H via the controller bus to the two interfaces of the controller:

• 1. Control signal "Brightness level" A control byte transmits the required brightness level to the controller The number of level signals per controller depends on the required brightness level of the system:

APH, RSR, RCL, TDZ, PAPI REH (including THR and RWE) 5 step signals 1%, 3%, 10%, 30%, 100% TXC: 3 step signals 1%, 10%, 100% STB: 3 step signals 10%, 30%, 100% APL, SFL, REL, SIG 1 step signal 100%

• 2. "Control On" control signal This control bit switches on the controller in the intensity preselected by the "brightness level" control byte.
• 3. Control signal "Controller reset" With this control bit, the controller can be reset after a shutdown by the monitoring functions "Overcurrent" or "Actual value failure"("Remotereset").

Message signals from the bus controller to the S5

 Of the Regulator turns over a redundant controller bus (Profibus-DP) six message signals available, the from the control and monitoring system be evaluated.

• 1. Meldesignal Betriebsmeldung („I") Signalzustand „1" zeigt an, dass der Regler einen Strom abgibt. Ist das Ansteuersignal auf „1" und das Signal Betriebsmeldung geht innerhalb einer Überwachungszeit von ca. 1 Sekunde auf den Signalzustand „1", geht das Steuer- und Überwachungssystem davon aus, dass der Regler ordnungsgemäß arbeitet. Signalzustand „0" zeigt an, dass der Regler keinen Strom abgibt. Ist das Ansteuersignal auf „0" und das Signal Betriebsmeldung geht innerhalb einer Überwachungszeit von ca. 1 Sekunde auf den Signalzustand „0", geht das Steuer- und Überwachungssystem davon aus, dass der Regler ordnungsgemäß abgeschaltet ist.
• 2. Meldesignal Istwertausfall („I0") Signalzustand „1" zeigt an, dass trotz Ansteuerung (Sollwert steht an; Reglerfreigabe; Lastschütz Ein) kein Serienkreisstrom fließt. Dies führt zur Abschaltung des Reglers und zur Meldung „Istwertausfall". Signalzustand „0" zeigt an, dass der Regler nicht durch Istwertausfall abgeschaltet wurde.
• 3. Meldesignal Überstrom („I >") Signalzustand „1" zeigt an, dass der Effektivwert des Serienkreisstromes mehrmals innerhalb eines bestimmten Zeitrasters den am Regler einstellbaren Grenzwert überschritten hat. Daraufhin wird im Regler die Reglersperre aktiviert und das Lastschütz abgeschaltet. Signalzustand „0" zeigt an, dass der Regler nicht durch Überstrom abgeschaltet wurde.
• 4. Meldesignal „Ort" („F/0"): Signalzustand „1" zeigt an, dass der Regler auf Ortsbetrieb geschaltet ist. Die Ansteuersignale von der S5-155H werden ignoriert. Die Fehlerauswertung ist nicht aktiv. Signalzustand „0" zeigt an, dass der Regler auf Fernsteuerung geschaltet ist. Die Anwahl der Betriebsstufen erfolgt über die Ansteuersignale der S5-155H. Die Fehlerauswertung ist aktiv.
• 5. Meldesignale Busfehler („BF1"/„BF2") Signalzustand „1" zeigt an, dass der Regler auf einer seiner zwei Busschnittstellen Übertragungsfehler feststellt („BF1" bzw. „BF2" je nach Schnittstelle). Der Ausfall beider Schnittstellen wird von der S5-155H erkannt. Signalzustand „0" zeigt an, dass die Profibusschnittstellen des Reglers fehlerfrei arbeiten.

Each alarm signal is read in by two channels via this controller bus from two Profibus interface IM308C in expansion units of the S5-155H.

• 1. Signal signal Operational signal ("I") Signal state "1" indicates that the controller is supplying a current. If the control signal is set to "1" and the signal Operational signal goes to the signal state "1" within a monitoring time of approx. 1 second, the control and monitoring system assumes that the controller is working properly. Signal state "0" indicates that the controller is not giving any current, if the control signal is set to "0" and the signal Operational signal goes to the signal state "0" within a monitoring time of about 1 second, the control and monitoring system assumes that that the controller is switched off properly.
• 2. Signal signal actual value failure ("I0") Signal state "1" indicates that despite activation (set value is on, controller enable, load contactor on) no series circuit current is flowing. This leads to the shutdown of the controller and to the message "Actual value failure." Signal state "0" indicates that the controller was not switched off by actual value failure.
• 3. Signal signal overcurrent ("I>") Signal state "1" indicates that the RMS value of the series circuit current has exceeded the adjustable limit on the controller several times within a certain time frame. The controller inhibit is then activated in the controller and the load contactor is switched off. Signal state "0" indicates that the controller was not switched off by overcurrent.
• 4. Signaling signal "Location"("F / 0"): Signal state "1" indicates that the controller is switched to local mode The control signals from the S5-155H are ignored The error evaluation is not active Signal state "0" shows on that the controller is switched to remote control. The operation levels are selected via the control signals of the S5-155H. The error evaluation is active.
• 5. Signal signals bus error ("BF1" / "BF2") Signal state "1" indicates that the controller detects transmission errors on one of its two bus interfaces ("BF1" or "BF2" depending on the interface) Signal state "0" indicates that the Profibus interfaces of the controller are working faultlessly.

Evaluation of the message signals regulator

• 1) Stufenanwahl und System Ein/Aus 0: Stufenanwahl = 0 oder Ein/Aus = 0, 1:Stufenanwahl > 0 und Ein/Aus = 1
• 2) Auswertung ca. 1 s nach Schaltvorgang X: Zustand ohne Bedeutung o.k: in Ordnung

The control signal signals are evaluated by the lighting computers as follows: CONTROL MESSAGES Circuit activation 1) Actual value exists overcurrent Istwertausfall Remote (not location) Circle status 2) 1 1 0 0 1 OK 1 0 X X 1 error 1 X 1 X 1 error 1 X X 1 1 error 0 0 0 0 1 OK 0 1 X X 1 error X X X X 0 Location message no error

• 1) Step selection and System On / Off 0: Step selection = 0 or On / Off = 0, 1: Level selection> 0 and On / Off = 1
• 2) Evaluation approx. 1 s after switching operation X: Status without meaning ok: in order

For monitoring the lamp failures, isolation states and actual current values of the series circuits, coprocessor units based on a SIMATIC S7-300 are used, which are connected to the respective station lighting computer via a redundant Profibus (FDL protocol) (cf. 7 ).

For the lamp failure message new modules are available, their measured values over a PLC (S7-300) are read out. The measuring principle corresponds the well-known LAM module d. h., via an open-ended lamp transformer a measurement window is formed by the measured values voltage and Time to be recorded. The program in the S7 determines the Number of failed lamps based on during commissioning determined reference values.

Around a step monitoring via a independent Allow current measurement (see draft standard IEC61 820), the LAM module also uses the Rms value of the secondary current captured and over the S7 is coupled to the S5-155H controller.

to easier commissioning the LAM modules are no longer adjusted, but the program in the S7 registers and saves the values for one at the push of a button Reference point. About one connectable Laptop, can the values are read out and saved. When replacing a LAM module, no new adjustment must be made (reference values saved in the S7). With a necessary replacement of the S7, all Reference values / parameters from the laptop can be loaded back into the 57.

About one In the LAM / ISO cabinet built-in PC with flat screen, can at any time the current readings are retrieved.

For insulation measurement, modules are also available which are also connected to the S7 (cf. 7 ).

With These new modules in conjunction with the evaluation program ISO in the S7, a much larger measuring range is covered (5 kΩ to 200 MΩ, optional 999 MΩ) and this at a higher resolution (12 Bit) than the known ISO scanner (5 bits).

In order to can be precise on the control room (PC), the insulation value is displayed in a histogram be (insulation value over currently). As with LAM, there is a display of the current measured values on the built-in flat screen.

For commissioning is a program available on the laptop.

• – Weniger Verkabelung in der Station und daraus resultierend einfacherer Ausbau. Die Steuerung muss bei Änderungen und Ergänzungen der Befeuerung in der Regel nur softwaremäßig ergänzt werden.
• – Isolationsmessung mit Messbereich von 5 kΩ bis 200 MΩ (optional bis 999 MΩ) mit einer Auflösung von mindestens 12 Bit (bisher 5 Bit).
• – Lampenausfallmessung mit sehr ähnlichem Messprinzip wie bisherige LAM Baugruppe aber mit automatischer Ermittlung der kreisspezifischen Parameter bei der Inbetriebnahme. Sicherung der Referenzparameter in einem Laptop, mit der Möglichkeit der Rückladung.
• – Weniger Platzbedarf für Steuerung und LAM/ISO-Schränke
• – Vom Regler unabhängige zweite Strommessung (Effektivwert) zur Überwachung der Stufenströme (= Helligkeit).

The following advantages over the LAM / ISO concept of the south runway are given, for example:

• - Less cabling in the station and the resulting simpler expansion. As a rule, the control system only has to be supplemented with software in the event of changes and additions to the lighting.
• - Insulation measurement with measuring range from 5 kΩ to 200 MΩ (optional up to 999 MΩ) with a resolution of at least 12 bits (previously 5 bits).
• - Lamp failure measurement with a very similar measuring principle to the previous LAM module but with automatic determination of the circle-specific parameters during commissioning. Backup of the reference parameters in a laptop, with the possibility of recharging.
• - Less space required for control and LAM / ISO cabinets
• - Secondary current measurement independent of the controller (rms value) for monitoring the step currents (= brightness).

The Control of the flash firing takes place in the stations north-west and north-east over a pulse generator, the one from the control and monitoring system and is turned off. The sweep frequency is fixed (not switchable).

For monitoring, the pulse generator emits message signals that are read in by the control and monitoring system. The coupling between the S5-155H control unit and the pulse generators is via 24 V signals.

control:

For the control the pulse generator with the control signal "pulse generator on" are in the S5-155H respectively two drive outputs ("On" / "Off") provided. These two outputs (24 V) are - by Diodes decoupled - summarized and continued to an adhesive relay (Remanzrelais). Thus, the switching state remains SFL also exist in a total failure of the lighting computer.

to Localization of a fault in a drive signal is in the control and surveillance system one Error localization realized.

feedback SFL:

Of the Pulse generator for the flash firing provides 6 signaling signals that from the control and monitoring system be evaluated.

• 1. Meldesignal „Betriebsmeldung": Signalzustand „1" zeigt an, dass der Impulsgeber arbeitet. Ist das Ansteuersignal auf „1" und das Signal „Betriebsmeldung geht innerhalb einer Überwachungszeit von ca. 1 Sekunde auf den Signalzustand „1", geht das Steuer- und Überwachungssystem davon aus, dass der Impulsgeber ordnungsgemäß arbeitet.
• 2. Meldesignal „Fern/Ort": Signalzustand „1" zeigt an, dass der Impulsgeber auf Ortsbetrieb geschaltet ist. Die Ansteuersignale von der S5-155H-Relaisbaugruppe werden ignoriert. Signalzustand „0" zeigt an, dass der Impulsgeber auf Fernsteuerung geschaltet ist. Die Anwahl der Betriebsstufen erfolgt über die Ansteuersignale der S5-155H-Relaisbau-gruppe.
• 3. Meldesignal „Betriebsbereit": Signalzustand „1" zeigt an, dass Spannung vorhanden und der Impulsgeber betriebsbereit ist. Signalzustand nicht betriebsbereit ist.
• 4. Meldesignal „„0" zeigt an, dass keine Spannung vorhanden oder der Impulsgeber Fehler TIL" (Schwellenblitz): Signalzustand „1" zeigt an, dass ein Fehler am Schwellenblitz aufgetreten ist und beide Lampen abgeschaltet sind. Signalzustand „0" zeigt an, dass kein Fehler an den Lampen der Schwellenblitze vorliegt.
• 5. Meldesignal „1. Schwelle" (LAM-Warnung): Signalzustand „1„ zeigt an, dass die erste, am Impulsgeber einstellbare Schwelle für Lampenausfall erreicht ist. Signalzustand „0„ zeigt an, dass die erste Schwelle für Lampenausfall noch nicht erreicht ist.
• 6. Meldesignal „2. Schwelle" (LAM-Alarm): Signalzustand „1" zeigt an, dass die zweite, am Impulsgeber einstellbare Schwelle für Lampenausfall erreicht ist. Signalzustand „0" zeigt an, dass die zweite Schwelle für Lampenausfall noch nicht erreicht ist.

Auswertung der Meldesignale vom Steuer- und Überwachungssystem: Ansteuerung (Ein = 1, Aus = 0) Meldesignal Betriebsmeldung Meldesignal Betriebsbereit Meldesignal Fern/Ort Auswertung 0 0 1 0 in Ordnung 1 1 1 0 in Ordnung 0 1 x 0 Fehler 1 0 x 0 Fehler x x 0 0 Fehler x x x 1 keine Feh lerauswertung, nur Anzeige: "Kreis auf Ort". Each alarm signal is applied redundantly (two-channel) to the inputs of the S5-155H. To localize a signal failure, an error localization in the control unit S5-155H is realized.

• 1st signal "Operational message": Signal state "1" indicates that the pulse generator is working. If the control signal is set to "1" and the signal "Operational message goes to the signal state" 1 "within a monitoring time of approx. 1 second, the control and monitoring system assumes that the pulse generator is working properly.
• 2. Signal signal "Remote / Local": Signal state "1" indicates that the pulse generator is switched to local mode. The drive signals from the S5-155H relay module are ignored. Signal state "0" indicates that the pulse generator is switched to remote control The operating stages are selected via the control signals of the S5-155H relay module.
• 3. Signal signal "ready for operation": Signal state "1" indicates that voltage is present and the pulse generator is ready for operation. Signal state is not ready.
• 4. "0" signal indicates that there is no voltage or the Pulse Generator TIL "Error: Signal State" 1 "indicates that a fault has occurred on the Threshold Flash and both lamps are turned off Signal State" 0 "indicates in that there is no fault with the lamps of the threshold flashes.
• 5. Signaling signal "1. Threshold "(LAM warning): Signal state" 1 "indicates that the first threshold for lamp failure that can be set on the pulse generator has been reached Signal state" 0 "indicates that the first threshold for lamp failure has not yet been reached.
• 6. Signaling signal "2. Threshold "(LAM alarm): Signal state" 1 "indicates that the second threshold for lamp failure that can be set on the pulse generator has been reached. Signal state "0" indicates that the second threshold for lamp failure has not yet been reached.

Evaluation of the signaling signals from the control and monitoring system: Control (On = 1, Off = 0) Message signal Operational message Message signal ready for operation Signaling signal remote / location evaluation 0 0 1 0 okay 1 1 1 0 okay 0 1 x 0 error 1 0 x 0 error x x 0 0 error x x x 1 no mistake Reader evaluation, display only: "Kreis auf Ort".

For obstacle fire (OBS) are used in the lighting computers of stations North-West, Fire brigade and north-east each have two digital control outputs and ten feedback inputs are provided.

The Control voltage for control and feedback of the decentralized OL control switchgear is 60V DC. These control and message signals are in an additional Control cabinet "Obstacle fire" on the S5 input and output levels of 24 V DC implemented. In addition will be the two S5 drive outputs OBS-1 / OBS-2 reproduced.

Control by S5:

The The obstacle lighting is controlled by two redundant control signals the S5. The two exits (24 V) are - through Diodes decoupled - summarized and continued to two coupling relays. These coupling relays become in terms of hardware, that in case of total failure of the control computer, the obstacle lights be turned on automatically.

The Both control signals are now obstruction lights in the control cabinet each for the control of 5 obstacle fire groups multiplied and converted to 60 V DC.

feedback at S5

The 60 V feedback The 10 obstacle fire groups become obstruction lighting in the control cabinet implemented on potential-free contacts and the lighting computer S5-155H with 24 V DC signal voltage redundantly read.

Evaluation of the message signals from the control and monitoring system:

For each of the 10 obstacle fire groups, the evaluation is carried out in the lighting computer according to the following scheme: control signal report signal Evaluation group 1-10 0 0 okay 1 1 okay 0 1 error 1 0 error

The Evaluation after a switching operation "OBS-On" or "OBS-Off" takes place after a delay time of about 20 seconds.

A fault will only be dropped off in the main and side room. Be in the tower OBS error not output.

Disturbances remain persist until the cause of the fault is fixed again. Bind the lighting computers of the stations then these obstruction fire groups automatically back into the monitoring one.

The following redundant signals are provided for the wind direction display in the stations North-West and North-East. signals 1 control signal WDI pot. free contact 1 feedback WDI ONE Signal voltage +24 V

to Realization of the processes during CATIII taxiing to the runway, the protection of stop bars and the block circuits on the Taxiways, is the detection of blind objects with a sensor system needed.

• – Sensoren (Induktionsschleifen), eingelassen in den Roll bahnen und Start-/Landepisten
• – Auswertegeräten in den Stationen zur Bildung der Belegtsignale (Induktionsschleife belegt)

This consists essentially of:

• - Sensors (induction loops), embedded in the rolling tracks and take-off / landing runways
• - Evaluation devices in the stations for the formation of the occupancy signals (induction loop occupied)

• a) Verhalten der Sensoren: Ein Rollobjekt, das eine Sensorschleife überfährt, löst je nach Rollablauf und Objektbeschaffenheit einen oder mehrere Belegtimpulse an diesem Sensor aus.
• b) Belegen von Sicherheitssensoren: Beim Überfahren von Kreuzungen und Einmündungen können von einem Objekt keine Sicherheitssensoren belegt werden, die sich seitlich zur befahrenen Strecke befinden.
• c) Übergang zwischen TXC-Blöcken: Die Sensoren sind zu den TXC-Blöcken so anzuordnen, dass sich genau am Übergang eines TXC-Blocks zum anderen ein Sensor befindet. Ein möglicher Versatz muss so klein sein, dass ein Objekt den vor einem TXC-Block befindlichen Sensor nicht belegt, wenn es direkt vor diesem TXC-Block stoppt.
• d) Zur eindeutigen Erfassung von Rollobjekten muss folgendes erfüllt sein: d1) Der Mindestabstand zwischen zwei aufeinanderfolgenden Rollobjekten muss so groß sein, dass ein Sensor vom nachfolgenden Objekt erst belegt wird, wenn dieser vom vorausfahrenden Sensor „freigeschaltet" ist (dies ist aufgrund des Verhaltens der Sensoren nach a) notwendig; ein Objekt erzeugt ggf. mehrere Belegtimpulse). Die Freischaltung eines Sensors erfolgt, wenn das vorausfahrende Objekt einen hinreichend weit entfernten 2. Sensor belegt. Für den Abstand dieser zwei Sensoren gilt: – Jedes Objekt muss zwischen diese beiden Sensoren passen, wobei nur an einem ein Belegtsignal erzeugt wird. – Zwischen diesen beiden Sensoren muss sich ein vollständiger TXC-Abschnitt (Block) befinden, der als Schleppe geschaltet werden kann. d2) Für die unter d1) stehende Betrachtung ist der sensoraktive Teil der sensoraktive Teil erzeugt eine Belegtmeldung) eines Rollobjektes von Bedeutung.

The evaluation of the data provided by the sensor elements is based on the following:

• a) Behavior of the sensors: A blind object that passes over a sensor loop triggers one or more busy pulses on this sensor depending on the rolling process and the condition of the object.
• b) Occupation of safety sensors: When crossing intersections and junctions, an object can not occupy safety sensors that are located laterally to the route traveled.
• c) Transition between TXC blocks: The sensors are to be arranged to the TXC blocks so that there is a sensor just at the junction of one TXC block to the other. A possible offset must be so small that an object does not occupy the sensor in front of a TXC block if it stops directly in front of this TXC block.
• d) For clear detection of blind objects the following must be fulfilled: d1) The minimum distance between two successive blind objects must be such that a sensor is not occupied by the following object until it has been "released" by the preceding sensor (this is due to behavior) The sensors according to a) are necessary, an object possibly generates several busy pulses.) The activation of a sensor takes place when the preceding object occupies a sufficiently far distant sensor 2. For the distance of these two sensors: - Each object must be between these two Sensors fit, with only one signal being generated at one of them - Between these two sensors there must be a complete TXC section (block) that can be switched as a train d2) For the consideration under d1), the sensor-active part is the sensor-active part generates a occupancy message) of a blind object of importance.

• 4 Belegtsignale (an ein Auswertegerät können max. 4 Schleifen angeschlossen werden). Ein Belegtsignal meldet „1" (24 V), wenn ein Objekt (Flugzeug) über eine zugehörige Schleife fährt, ansonsten „0". Wenn eine Schleife defekt ist, pulst das Belegtsignal mit ca. 1 Hz und das Signal „Fehler" ist „1".
• 1 Signal „Betrieb" Dieses Signal ist „1" (24 V), wenn die Auswertekarte des Geräts ordnungsgemäß arbeitet.
• 1 Signal „Fehler" Dieses Signal ist „1" (24 V), wenn eine oder mehrere Schleifen einen Defekt aufweisen.

Each evaluation card of the sensor elements has the following message signals to the control unit S5-155H in the station:

• 4 occupancy signals (a maximum of 4 loops can be connected to an evaluation unit). A busy signal indicates "1" (24 V) when an object (aircraft) is traveling through an associated loop, otherwise "0". If a loop is faulty, the busy signal pulses at approximately 1 Hz and the signal "Error" is "1".
• 1 "Operation" signal This signal is "1" (24 V) if the evaluation card of the device is working properly.
• 1 "Error" signal This signal is "1" (24 V) if one or more loops are defective.

All Signals from the sensor system become dual-channel on the S5-155H of the stations hung up. About the Error localization in the S5-155H, a defective input is detected and reported.

For the on-site diagnosis and local control is a service unit (laptop) provided.

These Service unit is used to control the lighting systems and observation of operating conditions (Controller, LAM, ISO and sensors) of a station. This laptop can connected to the S5-155H control units during operation become. The software on the laptop recognizes independently which control unit (north-east, fire brigade or north-west) connected them is.

The Ads and tax options in each station refer to all lighting and sensor systems this station and are also in total failure of the coupling to the tower still fully functional. The ads are over a window system, i. H. multiple ads (images) can be simultaneously open and their location on the screen. The operation will performed with a mouse.

The service equipment is designed as a portable Pentium PC (laptop). As the operating system is Windows NT used.

It The following operating and display levels (Windows) are provided:

Overview:

In the lighting overview The status (On / Off / Location / Error) of all systems of the respective Station shown in a window.

circular window

circular window show all status data selected Circles (knobs, LAM, ISO).

sensor window

Busy messages and fault conditions of the sensor loops (if detected by the S5-155H) are displayed in the sensor image. Note: Further details on the system status of the sensor loops can be read out of the sensor acquisition devices with the Honeywell sensor software.

Controlling the lighting (local control)

With the service unit can Lighting systems are controlled in the station where the service unit is docked has been. The prerequisite is that an operator with tax authorization has a password has registered.

With The service unit may include any approach, S / L system and each STB / TXC section and the other systems can be switched on and off individually (as far as available in the respective station). The brightness setting each system can also be chosen become. Operation is via the mouse by selecting on / off buttons on the screen (window).

Other functions

• - Log in / out
• - Change passwords

- End of program

8th shows the basic structure of a decentralized control device, here a SIAMTIC type S5-155H.

The waiting are based on a PC with a connection to the tower as well as monitor, printer and UPS (cf. 1 ).

• – Grafische Darstellung des Befeuerungs- und Systemzustands,
• – Einzelanzeigen für jeden Stromkreis mit Zustand Regler, LAM und ISO,
• – Einzelanzeige des Zustands der Sensor-Auswertegeräte (Schleifen),
• – Berechnen und Anzeigen der Betriebszeiten für Lampen und Regler,
• – Eingeben von Grenzwerten und Parameter,
• – Statusanzeigen der ANBLF-Meldungen,
• – Speichern und Anzeigen von Störmeldungen für einen Zeitraum von mindestens 7 Tage. Ausdrucken der Störmeldungen mit Datum/Uhrzeit,
• – Speichern und Anzeigen aller Betriebszustände der Befeuerung für einen Zeitraum von mindestens 7 Tage,
• – Ausdrucken ausgewählter Betriebszustände auf einem Protokolldrucker.
• – Verwaltungsfunktionen wie passwortgeschützter Zugriff und Datensicherung.

In summary, the following services are provided:

• - Graphical representation of the lighting and system status,
• - individual displays for each circuit with state controller, LAM and ISO,
• - individual display of the status of the sensor evaluation devices (loops),
• - calculating and displaying the operating times for lamps and regulators,
• - entering limits and parameters,
• - Status displays of the ANBLF messages,
• - Saving and displaying fault messages for a period of at least 7 days. Print the fault messages with date / time,
• - storing and displaying all operating conditions of the lighting for a period of at least 7 days,
• - Printout of selected operating states on a log printer.
• - Administrative functions such as password-protected access and data backup.

• – Farbmonitor 20'' mit Grafikkarte, Auflösung 1024 × 768 Bildpunkte
• – Farbdrucker mit Einzelblatteinzug für Protokolle
• – Matrixdrucker mit Endlospapier als Störmeldedrucker
• – Funkuhr für die Zeit- und Datumssynchronisation
• – Maus und Tastatur

The displays are color-coded in a Window system, the operation is carried out in a user-friendly manner via menus with the mouse.
PC Pentium II 450 MHz
With:

• - Color monitor 20 '' with graphics card, resolution 1024 × 768 pixels
• - Color printer with single sheet feeder for logs
• - Dot matrix printer with continuous paper as error message printer
• - Radio clock for the time and date synchronization
• - Mouse and keyboard

WINDOWS NT operating system

SINEC H1 coupling to the tower with fiber optic converter (OLM) visualization system.

The System is over a UPS for minute Buffered for 10 min. After that the computer is automatically shut down. When the mains voltage returns, the system will run automatically high again.

Of the Screen is used to display all operating data, operating states, error messages as well as operator input.

The Display is via a window system, d. H. multiple ads (images) can be simultaneously open and be moved in their position on the screen.

The Operation is carried out with the mouse.

• – Titelleiste
• – Meldezeile
• – Bildbereich
• – Bildumschalttasten

The screen is divided into several sections as follows:

• - Title bar
• - Message line
• - Image area
• - Image switching buttons

In the graphical overview The state of the entire lighting system is clearly displayed in graphic form shown.

• – Piste N/S
• – Rollwege
• – Vorfeld

The picture contains:

• - Piste N / S
• - taxiways
• - apron

The Slope lighting is indicated in a circle, the display for taxiways Stopbarren and apron system way.

For every station be in case of network failure and in emergency mode warning indicators are displayed, which are normal Network operation are not visible.

The states of a lighting system are indicated by colors: Status display OUT Gray ONE system dependent Error not acknowledged Magenta / gray flashing Error acknowledged magenta (not flashing) Circle on location, not acknowledged White / gray flashing Circle on location, acknowledged White (not flashing)

The ON state of each firing system is shown as follows: system colour SFL White APH White RSR red TDZ White RCL White DEER White REL White THR green RWE red PAPI Red White TXC green TXE blue STB red SEN brown

The Picture selection buttons each indicate a group error condition that formed from all the mistakes that will be displayed in this image. If an error occurs, the key color changes from gray to magenta.

Select circle picture with mouse

The graphical overview image also serves for easy selection of the detailed signal display in the circle picture. For this only the graphic symbol of the lighting system has to be used selected with the left mouse button become.

at Selecting with the right mouse button will make a list of all systems from which a circular image is selected for opening.

It can a maximum of two circle images can be opened at the same time.

For each Approach and runway system as well as for every STB and TXC section as well as other systems, is a picture (Window) with the associated Circuits available. The circle image (window) contains all existing information of the circuits of a system.

The Circular image can be achieved by "touching" the top Edge can be moved with the mouse on the screen.

from Circular picture is over other windows also allow the entry of circular data.

The individual circular images can in a selection window over her name or over the graphical overview picture selected become.

The Images contain the following ads:

• • System data - Marking of the system ¹⁾ - Control of the system ¹⁾
• • Controller data - remote / location ¹⁾ - set brightness level ¹⁾ - controller feedback ¹⁾ - controller operating time ²⁾
• • Lamp data - Number of defective lamps ¹⁾ - Number of lamps per circuit ¹⁾ - Lamp operating time ²⁾ - Maintenance interval ³⁾ - Relative lamp load ³⁾ - LAM limit values ³⁾ - LAM status (OK, partial, total failure) ¹⁾
• • Insulation data - ISO actual value [kOhm] - ISO limit values ³⁾ - ISO state (OK, partial, total failure) ¹⁾

• 1. Daten werden angezeigt
• 2. Daten werden angezeigt und können zurückgesetzt werden
• 3. Daten werden angezeigt und können eingegeben werden

The identifiers of the individual information have the following meaning:

• 1. Data is displayed
• 2. Data is displayed and can be reset
• 3. Data is displayed and can be entered

Some Circles and special systems are unregulated and therefore have none Lamp and insulation data as well as controller data and controller operating times.

Similar to in the overview picture can also from the loop image of the displayed system using be changed in the selection list.

The Operating times of all circuits are calculated and stored.

The Operating times are calculated in two ways:

Absolute total operating time

The absolute total operating time (controller operating time) of a circle is the "real" operating time of the circle.

Rated operating time

The evaluated operating time since last maintenance, in the text as rated operating time or lamp operating time is the Sum of the operating times of a circuit since the last maintenance.

at In regulated circles, the turn-on times of the circles before the Add with the inverse of the lamp life percentage multiplied by the respective brightness level. That means it at the indicated operating times to evaluated operating times is.

Example:

The System Runway operates in brightness level 3. The system will 0.5 hours on. As relative lamp load for stage 3 of Circle 1 (Runway) is 80% saved.

During the operating time of circuit 1, the following value is added during this switch-on time: 0.5 h × 0.80 = 0.4 h

The Operating times are always updated as long as the computer is turned on is.

at Unregulated circles become the switch-on times of the respective circle simply added. This means, The actual operating time of the lamps is displayed.

In the status overview of the control system (window), will control the firing with the control computers in all stations and the couplings graphically so that the state of the system is captured at a glance can be.

at disorders in a control computer or a coupling, the associated symbol flashes.

Should not all components fit on a picture, the individual will Stations distributed over several pictures. The couplings between the Stations are then additional in an overview picture shown.

The Monitoring system monitors the lighting system. If it detects a malfunction, then a Error message generated for stored for at least 30 days (ultimately limited by storage space) displayed and printed.

to Display on the screen are the "message line" and the image (window) "message list".

error messages are also printed on the printer as a message sequence log.

All Error messages must be acknowledged by the operator.

All Error messages are stored on magnetic disk. error messages are always detected when the computer is turned on.

• – Teilausfall (Überschreitung Schwelle 1) Diese Fehlermeldungen sind ein Hinweis für die Wartung, dass Handlungsbedarf besteht.
• – Totalausfall = Alarm (Überschreitung Schwelle 2) Diese Fehler sind so gravierend, dass der Betrieb mindestens eines Befeuerungssystems nicht mehr voll gewährleistet ist und sind als kritische Fehler zu betrachten.

The system knows two levels of errors:

• - Partial failure (threshold 1 exceeded) These error messages indicate that maintenance is required.
• - total failure = alarm (exceeding threshold 2) These errors are so serious that the operation of at least one firing system is no longer fully guaranteed and must be considered critical.

in the Picture (window) "Message list" are those in the computer stored error messages.

The The display is in list form, with the errors displayed Represent section of the stored errors. The registration list can be rolled to show all errors one after the other.

• – Datum und Uhrzeit Fehler erkannt/quittiert/behoben
• – Zustand erkannt/quittiert/behoben
• – Kreisbezeichnung
• – Systemkennzeichnung (falls anwendbar)
• – Störort (Station)
• – Fehlerkategorie (Teilausfall/Totalausfall)

The following data is displayed for each error:

• - Date and time Error detected / acknowledged / eliminated
• - Status recognized / acknowledged / remedied
• - Circle name
• - System identification (if applicable)
• - Disturbance (Station)
• - Error category (partial failure / total failure)

It can all errors of a display or all stored errors at once be acknowledged.

The Message list can be printed out (see also printer output).

The Message list has two display types: current and archive. In the Current list only visible errors are visible. In the archive view all detected errors are visible, with separate entries for the states detected, acknowledged and corrected.

The Message line is independent from the selected one Picture (window) visible at any time.

The message line is used to give the operator the last error detected - regardless of the selected th picture - to display.

In the message line will display the same information as the error as in the entry list.

• – Stromkreisfehler
• – Fehler im Steuer- und Überwachungssystem

The error messages that are recognized and displayed in the control room can essentially be assigned as follows:

• - Circuit error
• - Error in the control and monitoring system

• a) Reglerfehler
• b) Lampenausfälle Bei der Lampenausfallüberwachung werden zwei Fehlerstufen unterschieden. Die erste Stufe ist der "Teilausfall" (Grenzwert 1), die zweite Stufe ist der "Totalausfall" (Grenzwert 2).
• c) Isolationszustand Gleiche Funktion wie bei Lampenausfälle
• d) Lampenbetriebszeit

Circular errors are to be understood as errors which clearly relate to a circuit of the lighting system.

• a) Controller error
• b) Lamp failures There are two error levels for lamp failure monitoring. The first stage is the "partial failure" (limit 1), the second stage is the "total failure" (limit 2).
• c) Insulation state Same function as with lamp failures
• d) Lamp operating time

This Error marks the passing the lamp operating time. It is displayed when the operating time counter for the lamps a circle a higher one Value as the stored maintenance interval (see circle image).

If the lamps can be replaced, the operation counter can again reset to zero be (see circle picture). This clears the "operating time" error.

• – Stromversorgung
• – Lüfter
• – S5-interne Batterie
• – CPU
• – Kommunikationsbaugruppe
• – Ein-/Ausgabebaugruppe

The fault, control and monitoring system includes all failures in the control and monitoring system:

• - Power supply
• - Fan
• - S5 internal battery
• - CPU
• - Communication module
• - Input / output module

Of the Switching state of all circuits, systems of firing and signals of the Sensorsystems, are recorded with date and time and in one Database for saved for at least 7 days. If necessary, signals in a curve window be displayed or printed.

• – Anwahl aller Systeme und Helligkeitsstufen einschließlich Schaltabschnitte TXC und STB
• – Alle ANBLF-Meldungen
• – Rückmeldung aller Regler (ok oder Fehler)
• – LAM-Istwerte
• – ISO-Istwerte

The following signals are stored:

• - Selection of all systems and brightness levels including switching sections TXC and STB
• - All ANBLF messages
• - Feedback of all controllers (ok or error)
• - LAM actual values
• - ISO actual values

The Actual values for LAM, ISO and brightness level are displayed in a curve.

The Selection of the systems, the ANBLF messages and other operating messages be similar to the Error messages are output in list form.

• – Meldeliste
• – Lampenausfallprotokoll
• – Betriebszeitenprotokoll
• – Betriebszustände über der Zeit

In the main waiting are, as in 1 shown, two printers connected. The following lists and logs are printed on these printers:

• - Entry list
• - Lamp failure log
• - Operating time log
• - Operating conditions over time

• – Datum und Uhrzeit Fehler erkannt/quittiert/behoben
• – Zustand erkannt/quittiert/behoben
• – Kreisbezeichnung
• – Systemkennzeichnung (falls anwendbar)
• – Störort (Station)
• – Fehlerkategorie (Teilausfall/Totalausfall)

The message list is printed continuously when an error is detected, acknowledged and corrected. Each page of the message list is printed with a page header. For each error the following information is ge prints:

• - Date and time Error detected / acknowledged / eliminated
• - Status recognized / acknowledged / remedied
• - Circle name
• - System identification (if applicable)
• - Disturbance (Station)
• - Error category (partial failure / total failure)

On Request becomes a log of all current lamp failure data printed. The expression is based on systems and their associated circle numbers sorted. Each page is headed, the day of the week and date of expression. The pages are numbered. On request, a log the operating times of the controllers and the lamps of all circuits. The expression is sorted by system and the associated circle numbers. Each page is headed, the day of the week and the date of the expression. The pages are numbered.

The Function "Login" serves to the Operator to release certain functions of the program.

Of the Operator must enter a secret password to log in to the computer to register.

By the mechanism of "logging in" is prevented that unauthorized operator or stranger important functions of the Program can, because they do not know the secret passwords.

The Logout feature is the counterpart to log in. Logging off the operator will clear all shared features locked again.

Next the user "supervisor", which has all system resources to disposal have to stand set up the other user (user) with their access rights become. Furthermore receives every user a password.

• – Parameter ändern/Werte rücksetzen
• – Befeuerung steuern

The following rights are provided:

• - Change parameters / reset values
• - control firing

a Users can all, part or none of these rights. One Users without one of these access rights can open all images (windows) but do not change any data.

in the Normal operation, the data on a built-in computer Hard disk stored.

The stored data is automatically stored at fixed intervals on the hard disk outsourced (CSV file). From there, the operator can download the files on a DOS or ZIP disk secure and z. B. be further processed with Excel / Access.

Should there is a defect in the computer to the loss of this data, so can the data from the DOS or ZIP disk back to the computer become.

In addition will be entered parameters and settings of the lighting on the S5 side and kept on the PC, so that in case of error the last one existing condition can be restored.

Should The computer must be shut down before the program is finished.

These Function is password protected and can only be authorized by it Persons triggered become.

Claims (7)

Control system for aerodrome lighting systems for controlling, controlling and / or monitoring Aktorik- and / or sensor elements of aerodrome lighting devices, characterized in that it comprises a central redundant control device, to which input and output devices and with At least one interface via a likewise redundantly formed bus system at least one decentralized, connectable to the Aktorik- and / or sensor elements of Flugplatzbefeuerungsgeräten controller is connectable, wherein the central and / or decentralized control device consists of a redundant memory programmable controller, the two processor modules as With a high-speed coupling for data exchange and adjustment between the two processor modules, with an error response in case of failure of one of the two processor modules, with a synchronization between the two processor modules, with a self-test of the two processor modules, with one Localization of system-internal errors of the two processor modules, - and with passivation of defective processor modules. Guidance system according to claim 1, characterized in that that it has a switched peripheral structure, wherein the master device controls the process flow while a backup standby mitläuft and in the event of a fault immediately takes over the control. Guidance system according to claim 1, characterized in that that it has a two-channel structure, with both subunits in parallel control the process flow and also the reserve device outputs output signals and read in input signals. Control system according to Claims 1 to 3, characterized the interface comprises communication processors. Guidance system according to one of claims 1 to 4, characterized that the bus system is an Ethernet or a PROFIBUS network. Guidance system according to one of Claims 1 to 5, characterized that it can be adapted to existing control systems. Guidance system according to one of claims 1 to 6, characterized that by additional decentralized control devices is modularly expandable.