Title of Invention

METHOD AND ARRANGEMENT FOR THE RELIABLE MONITORING AND EVALUATION OF OPERATING STATES OF AT LEAST ONE TRAFFIC CONTROL SYSTEM, AND USE OF THE SAME

Abstract

The invention relates to a method and an arrangement (10) for the reliable monitoring and evaluation of operating states of at least one traffic control system (12, 12', 12", 12'"), especially at least one control device (14, 14', 14", 14'") of an electronic signal box (16, 16', 16", 16"') for railborne traffic, comprising two specific communicating data processing devices (30, 30') which each comprise a unit (32, 32') for receiving and processing acquired data and/or information relating to an operating state of the at least one control device (14, 14', 14", 14'"), a unit (33, 33') for visualising the received and processed data and/or information relating to the operating state on a screen (26, 26', 26'', 26'", 26"") or the like, a unit (36, 36') for the pixel-precise generation of an image signal, according to DVI (Digital Visual Interface) standard, from the received and processed data and/or information relating to the operating state, and an image signal comparison device (38) for comparing and evaluating the two DVI image signals with each other, for producing or suppressing a pulse or a signal in response to the evaluation of the comparison between the two DVI image signals, and for forwarding the same from the image signal comparison device (38) to the two data processing devices (30,30') for further operation and/or control of the at least one control device (14, 14', 14", 14'") or for blocking the further operation and/or control of the at least one control device (14, 14', 14" 14" ). The invention also relates to the use of the same.

Full Text

PCT-application PCT/EP2006/012256 November, 26 2007 Applicant: Vossloh In formation Technologies GmbH Our ref: VIT-013-PCT Gr/ge (New) Description The invention relates to a method and an arrangement for the safe monitoring and evaluation of operating states of at le- ast one traffic control system, especially at least one con- trol device of an electronic railway control centre for rail- borne traffic, and the use of the same. Such methods and arrangements are generally known with the safe operation and remote control of such a traffic control system requiring a safe operator station. According to prior art, a distinction is made essentially between switching me- thods, read-back methods and single-channel read-back meth- ods. The switching method is based on switching between two graphic systems by means of a switch followed by a comparison of two message graphics. The switching and comparison takes place cyclically with specific timing. The safety of the switching method depends almost exclusively on operating per- sonnel. The read-back method is based on comparison of two message graphics by means of a graphic system, with the two message graphics being retrieved, or "read back" to the data processing device for comparison between them, after they are displayed on a screen or similar. A read-back of this kind leads to a certain time delay. A marked disadvantage with such a read-back is the associated danger of loss of data and/or information on the path from the screen or similar back to the data processing device, with the safety require- ments thus being influenced. Finally, the single-channel read-back method is based on reactive safety by a single- channel electronic structure. In other respects, the same AMENDED PAGE disadvantages as with the read-back method can be observed with a single-channel read-back method. The read-back method or the single-channel read-back method requires extremely powerful hardware and software as well as a very great storage capacities, not least because of the comparison, from the memories of the two message images as a whole. However, the processing times are frequently unsatisfactorily too long. The latter methods also have the disadvantage that, be- cause of the very large storage capacities required, the mes- sage graphics to be compared with each other are in general not completely compared, but instead are only compared by segments, which in turn can impair safety. Finally, the lat- ter methods also require a "secure computer" which further- more very disadvantageously increases the construction and costs of arrangements for performing these methods. WO 2004/110845 A1 describes a method for the safe monitoring and evaluation of operating states of at least one traffic control system, especially of at least one control device of an electronic railway control centre for rail-borne traffic. By this method data and/or information on an operating state are obtained by means of the at least one control device. This method bases on the principle of a so-called "safe operator station". Data and/or information referring to dif- ferent operating states of a railway control center are de- tected by different sensors and supplied to a "safe operator station" known per se. The "safe operator station" preferably comprises three computers, which process the data and/or in- formation delivered by the sensors independently from each other and transmit them to an operating interface via inter- connection of an interface in form of two outputs. Both the outputs, however, are only transmitted to the operating in- terface in case, if two of the three computers have a corre- sponding output value. Both the outputs then are subjected an additional method of monitoring and evaluation by the or in the operating interface, respectively. AMENDED PAGE From EP 0 856 792 A2 is known a method for a safe display on a screen, basing on the so-called read-back method. Two message graphics are compared by a graphic system. Upon having displayed on the screen both message graphics are brought back or read back to the data processing device, to compare them with each other. The object of the invention is therefore to provide a method and an arrangement for the safe monitoring and evaluation of operating states of at least one traffic control system, by means of which the above disadvantages can be prevented, which is of particularly simple design, fast in operation and at the same time reliable, with outstanding immunity and sys- tem stability, and furthermore very cost effective, and also to provide for its use. The object is achieved with respect to a technical method in a surprisingly simple manner by the features of Claim 1. According to this, by the embodiment of the method according to the invention for the safe monitoring and evaluation of operating states of at least one traffic control system, es- pecially at least one control device of an electronic railway control centre for rail-borne traffic, com- AMENDED PAGE b) simultaneous transmission of the obtained or detected data and/or information on the operating state from the at least one control device through two independent channels to two separate data processing devices communicating with each other; c) receiving and processing, by the two data processing devices, of the obtained or detected data and/or information on the operating state of the at least one control device; d) visualizing of the received and processed data and/or information on the operating state on a screen or similar by at least one of the two data processing devices; e) pixel-accurate generation of a video signal according to the DVI (Digital Visual Interface) standard (referred to in the following as "DVI video signal") from the received and processed data and/or information on the operating state, in each case by means of the two data processing devices, and transmitting of the two DVI video signals from the two data processing devices to a video signal comparison device; f) comparing with each other and evaluating the two DVI video signals by means of the video signal comparison device; and g) generating or suppressing of a pulse or signal in response to the evaluation of the comparison between the two DVI video signals, as well as forwarding of said signal or pulse from the video signal comparison device to the two data processing devices for further operation and/or control of the at least one control device, or for blocking the further operation and/or control of the at least one control device; a method which is of a particularly simple design and can also be directly addressed and therefore operates quickly for the secure monitoring and evaluation of operating states of at least one traffic control system is achieved overall. In this context, it is a quite special advantage that, in addition to the essential aspect of a high operating safety and reliability, the method according to the invention compares and evaluates always exclusively the bit streams of two video signals according to the DVI (Digital Visual Interface) standard. The comparison of data and/or information in accordance with steps e) and f) takes place by means of the bit stream of the two video signals according to the DVI (Digital Visual Interface) standard and, in fact, online and parallel to the visualization of the obtained and processed data and/or information on the operating state on the screen or similar in accordance with step d) . The DVI standard, which is largely based on the Video Electronics Standards Association and was implemented in practice by the DDWG (Digital Display Working Group), is in this case not used for visualizing the obtained and processed data and/information on the operating state on the screen or similar, but is instead used for the actual comparison with each other and evaluation of the two DVI video signals. Simultaneity of the release of image data for online data comparison can be achieved by the method according to the invention. Furthermore, the requirements for an extremely powerful hardware and software - as in the previous prior art - can be substantially reduced without adversely affecting the operating safety and reliability. Also, with the method according to the invention, a "secure computer", such as with previously known methods, is not necessary. The method according to the invention can in fact even be achieved using three conventional, commercially available data processing devices or computers, for example with standardized personal computers, of which, if possible, two should be by the same manufacturer and to the same specification and with the same equipment (hardware and software versions). Because of this, these two data processing devices or computers can be two "non-secure computers" or "non-safe computers", respectively, or "non-reliable computers", respectively. The video signal comparison can be realized by means of a data processing device or computer which is arranged between the two data processing devices or computers of approximately similar design and differs from the two data processing devices or computers of approximately similar design, with respect to manufacturer, specification and equipment. On the other hand, the operating safety and reliability of the method according to the invention can be further substantially increased if previous high-performance hardware and software as well as quite large storage capacities are used unchanged. Compared with methods known from prior art, the method according to the invention is further distinguished in that comparison of the two DVI video signals in their entirety is possible in a simple and fast manner. With the method according to the invention, the operating safety and reliability can be still further improved compared with conventional methods, which are based merely on a comparison of reduced data and/or information amounts. Not least, this also results at the same time in a remarkably cost-effective method for the safe monitoring and evaluation of operating states of at least one traffic control system, because its immunity and system stability remains high without impairment even in the event of any adaptation of the hardware and software or possible reduction in the storage capacities. Further quite advantageous details of the method according to the invention for the safe monitoring and evaluation of operating states of at least one traffic control system are described in Claims 2 to 26. Furthermore, with regard to a technical device, this object is achieved in a surprisingly simple manner by the features of Claim 27. By means of the inventive embodiment of the inventive arrangement for the safe monitoring and evaluation of operating states of at least one traffic control system, especially of at least one control device of an electronic railway control centre for rail-borne traffic, comprising two separate data processing devices communicating with each other connected to each other, each of which having a device for receiving and processing obtained data and/or information on an operating state of the at least one control device, a device for visualizing the obtained and processed data and/or information on the operating state on a screen or similar and a device for the pixel-accurate generation of a visual signal in accordance with the DVI (Digital Visual Interface) standard from the obtained and processed data and/or information on the operating state, and a video signal comparison device for comparing and evaluating the two DVI video signals with respect to each other as well as for the generation or suppression of a pulse or signal in response to the evaluation of the comparison between the two DVI video signals and also forwarding of same from the video signal comparison device to the two data processing devices for further operation and/or control of the at least one control device, or for blocking the further operation and/or control of the at least one control device, an overall arrangement is achieved which is of particularly simple design and furthermore can be directly addressed and therefore operates quickly. At the same time, a high operating reliability is guaranteed with the arrangement according to the invention because only the bit streams of two DVI video signals are compared with each other and evaluated. Of quite particular importance for all of this is that comparison of the two DVI video signals is based on their digital protocol, which does not differ during the identical image processing of the two parallel-operating data processing devices. By the way, the requirements of an extremely high-performance hardware and software - as required in the previous prior art - can be substantially reduced, without impairment of the operating safety and reliability. On the contrary, the operating safety and reliability of the arrangement according to the invention can be still substantially increased if previous high- performance hardware and software as well as substantially large storage capacities are used unchanged. Not least, as a result of this, a very cost-effective arrangement for the safe monitoring and evaluation of operating states of at least one traffic control system can be obtained at the same time, because its immunity and system stability is maintained without restriction even in the event of any adaptation of the hardware or software or possible reduction in the storage capacities. In other respects, the aforementioned advantages of the method according to the invention can be obtained in a similar manner by the inventive arrangement. Quite particular advantageous design details of the inventive arrangement for the safe monitoring and evaluation of operating states of at least one traffic control system are described in Claims 28 to 48. Finally, the scope of the invention according to Claim 4 9 enables a method or an arrangement according to the invention to be used for the remote operation and/or remote control of at least one electronic railway control centre for rail-borne traffic, especially for rail and railway traffic, especially for railways, rubber-tyred metro systems, monorail systems or overhead systems, more especially, for example, on regional lines, by means of a safe operator station at a central location. Further advantages, features and details of the invention are given in the following description of preferred embodiments and examples of the invention as well as by way of the drawings. The drawings are as follows: Fig. 1 a schematic representation of an embodiment of an arrangement according to the invention for the safe monitoring and evaluation of operating states of a traffic control system; Fig. 2 a schematic representation of an embodiment of an arrangement according to the invention for the safe monitoring and evaluation of operating states of four traffic control systems; Fig. 3 an enlarged view of a schematic representation of the embodiment of the arrangement according to the invention for the safe monitoring and evaluation of operating states of at least one traffic control system (not illustrated) corresponding to Figs. 1 and 2; Fig. 4 a schematic representation of a device according to the invention for the synchronization of two DVI video signals as a component of the embodiment of the arrangement according to the invention in Fig. 3; Fig. 5 a schematic representation of a device according to the invention for redundant switching between at least one screen connected to each of the two data processing devices as a component of the embodiment of the arrangement according to the invention in Fig. 3; Fig. 6 a schematic representation of communication between a safe operator station at a central location and four electronic railway control centres; and Fig. 7 a schematic representation of communication between a safe operator station at a central location and several electronic railway control centres over an expanded, greater distance. In the following description of various embodiments of the arrangement 10 according to the invention, similar components that correspond to each other are each provided with identical reference numbers. The inventive method and/or the arrangement 10 according to the invention is/are provided for the safe monitoring and evaluation of operating states of at least one traffic control system 12, 12', 12", 12"', especially of at least one control device 14, 14', 14' , 14'', for example in the form of a railway control centre computer, of an electronic railway control centre 16, 16', 16', 16'' for rail-borne traffic, especially for rail and railway traffic, especially railways, rubber-tyred metro systems, monorail systems or overhead systems. In a very advantageous manner, the inventive method and the arrangement 10 according to the invention serve for the remote operation and/or remote control of at least one electronic railway control centre 16, 16', 16', 16'' for rail-borne traffic, with regional lines being particularly preferred, by means of a safe operator station 18 for the operating or control personnel, for example a traffic superintendent, at a central location or in the control centre. In this case, the term "remote operation" means control over a shorter range and/or locally. The term "remote control",, on the other hand, means control over a longer range and/or from a different location. The embodiment of the inventive arrangement 10 shown in Fig. 1 is designed for the safe monitoring and evaluation of operating states of the traffic control system 12 or of the control device 14 of the electronic railway control centre 16. The arrangement 10 and the traffic control system 12 or the control device 14 of the electronic railway control centre 16 communicate with each other, as explained in more detail in the following, by means of two independent channels 20, 20'. Communication is carried out via an Ethernet in each case for each independent channel. Closed networks corresponding to EN50159-1 are preferably used for this purpose. Because such networks allow the implementing of several communication partners, it is possible without difficulty to expand the arrangement 10 according to the invention for the secure monitoring and evaluation of operating states from just one traffic control system 12, as shown in Fig. 1, to a plurality thereof. Fig. 2 shows an example of an embodiment of the inventive arrangement 10, which serves for the safe monitoring and evaluation of operating states of a total of four traffic control systems 12, 12', 12', 12'', i.e., accordingly of four control devices 14, 14', 14', 14 '' of the electronic railway control centres 16, 16', 16', 16''. According to Figs. 1 and 2, the operator station 18, for example, consists of a mouse 22, a keyboard 24, a mouse/keyboard converter 25, at least one to preferably four screens 26, 26', 26', 26'', monitors or similar data viewing devices, such as, for example, CRT (Cathode Ray Tube), TFT (Thin Film Transistor) screens or also a beamer, etc., for process visualization, and a printer 28. Data and/or information that varies according to its safety relevance is displayed, for monitoring and evaluation, on the screens 26, 26', 26', 26''. For the display of safety- relevant contents, the screen 26 is designed as an CRT (Cathode Ray Tube) screen. The screen 26 is thus able to meet technical signaling requirements. In contrast, the screens 26', 26', 26'' can be designed as TFT (Thin Film Transistor) screens for the display of content which has little or no safety relevance. Any disadvantageous effects of specific storage device defects, such as can occur with TFT screens, are precluded by the use of the screen 26 for the display of safety-relevant contents. For example, in the case of remote operation and/or remote control of the at least one electronic railway control centre 16, 16', 16', 16'' for rail-borne traffic, a line image can be schematically displayed on the screen 26, also called a magnifier, likewise line images can be schematically displayed on the screens 26', 26', also called area overviews, and operator actions, fault messages, etc. can be schematically displayed on the screen 26'', also called a communication display. Without explaining in more detail, a further mouse 22', a further keyboard 24' and one or more further screen(s) 26'' can be provided as a fallback level. As can furthermore be seen in Fig. 2, the implementing of an optional local operator station 18' is also conceivable, for example in the form of a personal computer or notebook. The operator station 18', shown as an example in Fig. 2, is assigned to the control device 14' of the railway control centre 16'. The operator station 18' is activated in place of the central operator station 18 only if required, i.e., for example, in the event of failure of the communication link with the control device 14, 14', 14' , 14'' or a serious fault at the central operator station 18. A collision between the two operator stations 18, 18' is safely avoided in that, as a fundamental principle, only one of the two operator stations 18, 18' can be connected at any one time. Fig. 3 shows a detailed representation of an embodiment of such an arrangement 10 according to the invention for the safe monitoring and evaluation of operating states of at least one traffic control system 12, 12', 12', 12''. The arrangement 10 according to the invention comprises two separate, i.e., separated from each other, data processing devices 30, 30' that operate independently and parallel with each other. The two data processing devices 30, 30' are (essentially) of identical design. Furthermore, the two data processing devices 30, 30' have the same system components that are largely of the same configuration. However, certain differences in the configuration of the system components are - if desirable or advantageous - completely possible and permissible. Although the two data processing devices 30, 30' operate largely asynchronously, they are operated virtually synchronously in that the instructions of the operating personnel, input by the mouse 22 and keyboard 24, are doubled, interference-free, beforehand. One of the essential objects of the two data processing devices 30, 30' is to generate (message) images on the screens 26, 26', 26', 26'' and, as shown in Fig. 5, to process, in the reverse direction, the instructions of the operating personnel, input by the mouse 22 and keyboard 24, for the control devices 14, 14', 14 ' , 14''. According to Fig. 3, four screens 26, 26', 26', 26'' are therefore equally assigned to each of the two data processing devices 30, 30'. The screens 26, 26', 26", 26'' of the data processing device 30 are in this case in operation. The control of the screens 26, 26', 26', 26'' of the data processing device 30' is in contrast provided as a fallback level and is not brought into operation until a fault or failure of one or more control (s) of the screens 26, 26', 26', 26'' of the data processing device 30 occur (s). The data processing devices 30, 30' each have a device 32, 32' for receiving and processing obtained data and/or information on an operating state of the at least one control device 14, 14', 14', 14'' . The data and/or information is to be visualized by the data processing device 30 or 30', i.e., in the case of the embodiment of the data processing device 30 shown in Fig. 3, on the respective connected, associated screens 26, 26', 26', 26'', 26'', especially on screen 26. Furthermore, the data processing devices 30, 30' each have a device 33, 33' for visualizing or displaying data and/or information on the operating state of the at least one control device 14, 14', 14', 14'', which has been previously obtained and processed by the device 32, 32', on the screen 26, 26', 26', 26'', 26'' or similar. In the exemplary embodiment of the arrangement. 10 according to the invention shown in Figs. 1 to 3 and 5, the devices 33, 33' are each designed as a VGA (Video Graphics Array) graphics card. The devices 33, 33' are each connected to a storage device 34, 34' in which the previously obtained and processed data and/or information for visualization is stored, and to the screen(s) 26, 26', 26', 26'', 26'' via corresponding interfaces and lines 35, 35'. Furthermore, the data processing devices 30, 30' are each provided with a device 36, 36' for the pixel-accurate generation of a DVI video signal. The devices 36, 36' for the pixel-accurate generation of the DVI video signal are in this case each designed as a DVI graphics card, which is also connected to the storage device 34, 34'. The storage device 34, 34' can, for example, be an image storage device of an (analogue or digital) graphics card or an external image storage device (not illustrated). Without being shown in detail, the storage device 34, 34' can accordingly also of course be a component of the device 33, 33' for the visualization or display of data and/or information and/or of the device 36, 36' for the pixel- accurate generation of a DVI video signal itself. Furthermore, the arrangement 10 according to the invention comprises a video signal comparison device 38 for comparing with each other and evaluating the two DVI video signals. The video signal comparison device 38 is embodied as a separate personal computer. The video comparison device 38 is connected to the two data processing devices 30, 30'. In this case, the video comparison device 38 and the device 36, 36' for the pixel- accurate generation of the DVI video signal or the DVI graphics card are preferably connected, directly in each case, via suitable interfaces and lines 40, 40'. The video signal comparison device 38 is additionally provided for generating or suppressing a pulse or signal in response to the evaluation of the comparison between the two DVI video signals. The video signal comparison device 38 then forwards this pulse or signal, if not already suppressed, to the two data processing devices 30, 30', in order to continue to operate and/or control the at least one control device 14, 14', 14' , 14'' or in order to block the further operation and/or control of the at least one control device 14, 14', 14' , 14''. The positive result of the comparison of a matching DVI video signal can cumulatively or alternatively be displayed at the same time on the screen 26 and/or on one of the further screens 26', 26', 26'", 26''. As can be seen in Fig. 3, the two data processing devices 30, 30' communicate with each other and/or furthermore also with the video comparison device 38 via an Ethernet 42, especially an Ethernet/LAN (Local Area Network) connection. The device 32, 32' for receiving and processing the obtained data and/or information on the operating state of the at least one control device 14, 14', 14', 14'' preferably comprises an input buffer (not shown in detail). An appended time stamp verifies the updatedness of the respective sequence number. The device 32, 32' which, amongst other things, is provided for the verification of the sequence number of the protocols of the data and/or information on one hand comprises a device 44, 44' for checking the logical progression of the sequence number in a first test step (A). On the other hand, the device 32, 32' comprises a device 4 6, 46' for comparing the sequence number, and therefore the matching of the data and/or information between the two data processing devices 30, 30', in a first test step (B). Without being shown in detail, the device 32, 32' for receiving and processing the obtained data and/or information on the operating state of the at least one control device 14, 14', 14' , 14'' is furthermore assigned a device which monitors said device in a specified cycle. In order to enable parallel operation of the two data processing devices 30, 30', the two data processing devices 30, 30' are therefore cyclically synchronized, functionally and logically, via the Ethernet 42. By means of the synchronization is achieved that instructions are transmitted synchronously on two channels from and to the control devices 14, 14', 14', 14'' and the two DVT video signals are synchronously generated in the opposite direction. A comparison of the protocols with a minimum propagation time difference is thus ensured. The mouse/keyboard converter 25 mentioned in the introduction is provided to enable the interference-free doubling of instructions of the operating personnel input by mouse 22, 22' and keyboard 24, 24' for processing for the two-channel system. With respect to the signal doubling, it should be noted that two data processing devices 30, 30' or computer systems running asynchronously can be operated virtually synchronously via one operator interface. (USB (Universal Serial Bus)) signals from the mouse 22, 22' and keyboard 24, 24' are forwarded to the mouse/keyboard converter 25. The mouse/keyboard converter 25 makes the (USB) signals available at two (USB) interfaces for the data processing devices 30, 30'. The doubling of the operator inputs achieves a decoupling of the different computer operating cycles at the same time. But this also means that the mouse/keyboard converter 25 has its own processor which receives and processes the (USB) signals. A further task of the mouse/keyboard converter 25 is the conversion of the relative inputs of the (USB) mouse 22, 22' into absolute values for the mouse position. In this way, the data processing devices 30, 30' are supplied with identical absolute values for the respective mouse position, so that the video signal comparison device 38 cannot respond due to different positions of the mouse 22, 22'. In order, at the start of the arrangement 10 or during a run- up of the data processing devices 30, 30', not to stop at the operating system request of a disconnected mouse 22, 22' and/or keyboard 24, 24', the outputs of the mouse/keyboard converter 25 are connected in such a way that, if a mouse/keyboard converter 25 is not active, they reflect the galvanic values of a mouse 22, 22' and keyboard 24, 24'. If the mouse/keyboard converter 25 is active, the equivalent values are replaced by the true values. With the embodiment of the inventive arrangement 10 shown in Fig. 3, the two data processing devices 30, 30' are furthermore each provided with a process database 48, 48' or similar. The process database 48, 48' is used to accept or to pick up and store processed data and/or information on the operating state of the at least one control device 14, 14', 14', 14'' on one hand and to accept or to pick up and store data and/or information on a topology of the traffic control system 12, 12', 12', 12'' or a part thereof on the other hand. For example, the topology of railway stations along a rail-borne traffic route such as especially a track or railway line, for example a regional line, with line images showing .symbols for points, signals and all other track system elements can be stored. The process database 48, 48' is connected to the storage device 34, 34' in order to enable a continuous verification between the data and/or information in the process database 48, 48' and in the storage device 34, 34'. The data and/or information of the process database 48, 48' is held in video signal formats and can thus be directly used to generate the video signal. This also enables a fast switching between the screens 26, 26', 26' ', 26'' and thus between the operating states of various control devices 14, 14', 14', 14'', without a time lag. The video signal comparison device 38, which, as shown in Fig. 3, serves to perform a second test step, is in this embodiment of the inventive arrangement 10 provided with a device 50 for synchronizing the two data processing devices 30, 30' with each other. Here, the device 50 has an element for specifying the timing of the screen refresh frequency (not illustrated) and an element for cyclically requesting the two data processing devices 30, 30' to visualize the current data and/or information (also not illustrated). Despite the preceding synchronization of the two data processing devices 30, 30' with each other, an asynchronicity of the two DVI video signals is, as before, to be assumed. In addition, the video signal comparison device 38 therefore has a device 52 for synchronizing the two DVI video signals themselves, whose function and operation is schematically explained in Fig. 4. The device 52 for synchronizing the two DVI video signals comprises a buffer (not shown in detail), especially a circular buffer. The buffer or circular buffer, respectively, in this case has a storage capacity sufficient for at least one DVI video signal, and preferably for three DVI video signals. Furthermore, the device 52 for synchronization of the two DVI video signals is provided with a device for marking the two DVI video signals at a corresponding point within the respective DVI video signal (also not illustrated). This device comprises an element for generating two triggers to be applied to the two DVI video signals. As will be described in more detail, with reference to Fig. 4, in conjunction with the description of the inventive method, the device 52 for synchronizing the two DVI video signals also has an element for shifting the two DVI video signals to and against each other and an element for bringing the identifiers of the two DVI video signals into coincidence with each other at a corresponding point (not shown in detail). In addition to a device for comparing with each other and evaluating the two DVI video signals (also not shown in detail), the video signal comparison device 38 also has a device 54 for generating or suppressing a pulse or signal in response to the evaluation of the comparison between the two DVI video signals. An update reporting device (not illustrated) is assigned to the two data processing devices 30, 30', in order to notify the operating personnel of a blockage of the data and/or information regarding the operating state of the at least one control device 14, 14', 14', 14'' and/or a barring of the further operation and/or control of the at least one control device 14, 14', 14', 14''. The blocking or barring can be notified to the operating personnel, for example, by means of images or corresponding (acoustic and/or visual) warning signs on one of the further two screens 26', 26'. As shown in Fig. 5, a device 56 for redundant switching is assigned to the two data processing devices 30, 30', with the device 56 being connected to the two data processing devices 30, 30' and controllable by means of which at least one screen 26, 26', 26', 26'' can be addressed in each case. Although the two data processing devices 30, 30' generate corresponding parallel images, which can be visualized on the screens 26, 26', 26', 26'', the display on the screens 26, 26', 26', 26'' is supplied from only one of the two data processing devices 30 or 30'. By means of the device 56 for redundant switching, which in this embodiment, for example, operates on a mechanical basis, switching to the particular passive screens 26, 26', 26', 26'' comprising of the printer 28 is possible. With a multi-area structure, i.e., if several control devices 14, 14', 14', 14'' are connected together, as shown schematically in Figs. 2 and 6, an Ethernet switching device 58, 58' is preferably connected between them in a star point configuration in order to avoid a collision between data and/or information that originates from at least one further control device 14, 14', 14' , 14'' and is transmitted simultaneously. The star point is formed in each case by the Ethernet circuit device 58, 58' arranged between each of the control devices 14, 14', 14', 14'' on one hand and the operator station 18 on the other hand in the two independent channels 20, 20', thus providing an own port. Collision-free operation of point-to-point connections is thus ensured. Precluding a collision between data and/or information enables a full duplex operation to be achieved during the transmission of useful data. With control devices 14, 14', 14 ' , 14'' which are geographically farer apart, for example, more than 15 km, at least one repeater device 60, 60' or a so-called repeater, respectively, is connected between the two independent channels 20, 20'. Such repeater devices 60, 60' are shown, for instance, in Fig. 7. The acquired data and/or information on the operating state can thus be repeated and forwarded. If the geographical distance is greater, an additional processing of the data and/or information is advantageous, perhaps even necessary. Whereas a repeater device 60, 60' merely undertakes a hardware-type amplification of the respective signals and therefore amplifies the dispersions of the signals, a demodulation followed by modulation takes place during the processing of the signals. All dispersions of the amplified signals can thus be eliminated. Such processing of the signals subject to dispersion is carried out by means of a processing device of a secure computer. The method according to the invention is explained in detail using the inventive arrangement 10 shown in Figs. 1 to 7, as follows: As shown in Figs. 1 and 2, data and/or information of an operatincj state of the at least one traffic control system 12, 12', 12', 12'' or of the at least one control device 14, 14', 14', 14'' of an electronic railway control centre 16, 16', 16', 16'' for rail-borne traffic is first acquired by the control device 14, 14', 14', 14''. The acquired data and/or information on the operating state is then transmitted simultaneously from the control device 14, 14', 14', 14'' via the two independent channels 20, 20' by means of optical fibre conductors, especially monomode glass fibres, if necessary via the at least one repeater device 60, 60' or the at least one so-called repeater, respectively, and/or via the at least one processing device to the two data processing devices 30, 30' communicating with each other. Communication between the control device 14, 14', 14', 14'' and the two data processing devices 30, 30' takes place in each case via an Ethernet 20, 20'. The acquired data and/or information on the operating state of the at least one control device 14, 14', 14' , 14'' is obtained and processed by the two data processing devices 30, 30' for its visualization on a screen 26, 26', 26', 26'' or similar monitor. This takes place by means of the device 32, 32' for receiving and processing data and/or information. To process the obtained data and/or information on the operating state of the at least one control device 14, 14', 14', 14'' by the two data processing devices 30, 30', a verification of a sequence number of the protocols of the data and/or information is carried out. The device 32, 32', which, for example, can be formed as an input buffer, is provided for this purpose. The function of the device 32, 32' or of the input buffer is, among other things, to smooth the asynchronicity of the data and/or information so that only matching data and/or information on the operating state or state data is accepted in the process database 48, 48'. For this purpose, the data and/or information is stored in the device 32, 32'. As can be seen from Fig. 3, during the verification of the sequence number of the protocols of the data and/or information, their logical progression is checked in a first test step (A) by the device 44, 44'. In a second test step (B) , the sequence number between the two data processing devices 30, 30' is then checked by the device 46, 46', which is arranged downstream of the device 44, 44'. If on one hand the logical progression of the sequence number is shown to be logical by the device 44, 44' and on the other hand matching of the sequence number between the two data processing devices 30, 30' is determined by the device 4 6, 46', the matching data and/or information on the operating state of the at least one control device 14, 14', 14', 14'' is marked with a release mark and returned to the respective adjacent data processing device 30 or 30'. The data and/or information marked with the release mark is then shifted into the process database 48, 48' by the device 32, 32' or the input buffer. Simultaneously, data and/or information on a topology of the traffic control system 12, 12', 12', 12'', or part thereof, is stored together in the process database 48, 48'. From the data and/or information on the operating state of the at least one control device 14, 14', 14', 14'' stored in the process database 48, 48' and the data and/or information on the topology of the traffic control system 12, 12', 12', 12'', or part thereof, video signals or a (message) image to be visualized is/are then generated and forwarded to the storage device 34, 34', for example, to the image storage device of a graphics card or also to an external image storage device (not illustrated). The device 33, 33' for visualizing or displaying data and/or information in turn accesses the storage device 34, 34' in order to forward the video signals or the (message) image via the relevant interfaces and lines 35, 35' to the screen 26, 26', 26', 26'' for their display. Parallel to this, the respective DVI video signal is generated by the two data processing devices 30, 30' from the data and/or information on the operating state of the at least one control device 14, 14', 14', 14'' which has been suitably processed and then entered in the process database 48, 48' and from the data and/or information which reflects the topology of the traffic control system 12, 12', 12', 12'', or part thereof, and is entered in the process database 48, 48'. The two DVI video signals are generated by the device 36, 36', which, for example, is designed as a DVI graphics card. The device 36, 36' accesses the storage device 34, 34' equally for this purpose. In other words, the visualization and display of the data and/or information on the screen 26, 26', 26', 26'' takes place at the same time but separately, online and parallel to the comparison of the data and/or information, on the basis of the two DVI video signals provided or generated by the two data processing devices 30, 30'. Separate from each other in this respect merely means that it is absolutely possible to display the data and/or information on the screen 26, 26', 26' , 26'' by means of video signals in accordance with a standard which differs from the DVI standard, for example, according to the VGA standard. To the contrary, the data and/or information on the operating state of the at least one control device 14, 14', 14', 14'' is blocked, provided it has been determined by the device 44, 44' that the logical progression of the sequence number is missing and/or if the device 46, 46' has detected that there is no matching of the sequence number between the two data processing devices 30, 30'. Before such a blocking, the data and/or information on the operating state of the at least one control device 14, 14', 14', 14'' is, as a precaution, subject to another verification. In doing so, the data and/or information that remains in the device 32, 32' for receiving and processing the data and/or information or in the input buffer is provided with timestamps and checked obsolescence. After 500 ms, the data and/or information on the operating state is transmitted at least one more time from the at least one control device 14, 14', 14', 14'' to the two data processing devices 30, 30'. In the case of a renewed verification leading to the same result and blocking of the data and/or information on the operating state of the at least one control device 14, 14', 14', 14'' taking place, the blocking is notified at the same time via an update reporting device. The blocking may be displayed to the operating personnel by means of images or corresponding (acoustic and/or visual) warning signs on one of the further two screens 26', 26'. The verification of the sequence number of the protocols of the data and/or information is preferably carried out in a specified cycle. A monitoring device or watchdog is provided for this purpose. For example, the verification can take place in a poling cycle of 50 ms. The data and/or information on the operating state is then requested by the two data processing devices 30, 30', in a 50 ms cycle, from the at least one control device 14, 14', 14', 14'' and transmitted to said control device. The pixel-accurate generated DVI video signal of each of the two data processing devices 30, 30' is then applied via the lines 40, 40' of the two data processing devices 30, 30' to the corresponding interface of the video signal comparison device 38. The two DVI video signals are compared with each other and evaluated, as follows, by the video signal comparison device 38. For the comparison of the two DVI video signals by the video signal comparison device 38, the two data processing devices 30, 30' are first synchronized with each other by the device 50 of the video signal comparison device 38. In doing so, the timing of the screen refresh frequency is predetermined and the two data processing devices 30, 30' are cyclically requested to visualize the current data and/or information. Both processes take place through the video signal comparison device 38 itself. According to Fig. 4, a synchronization of the two DVI video signals, which is performed by the device 52 of the video signal comparison device 38, is furthermore carried out to compare the two DVI video signals with each other. The two DVI video signals are entered in a buffer, especially a ring buffer, of the video signal comparison device 38, for this purpose. By means of the device 52, the two DVI video signals are then provided with an identifier or identification, respectively, at a corresponding point within the respective DVI video signal. Each DVI video signal, which describes one pixel of an image, consists of a 2-bit control code, 6-bit check code and 24-bit colour code. For their identification, the two DVI video signals are provided with two triggers at a point corresponding to each other. The two triggers are applied specifically to the clock signals of the two control codes of the two DVI video signals to mark the start or end of an image. Following this, the two DVI video signals are shifted in a first direction, for example, to the right, towards each other or against each other, until the identifiers of the two DVI video signals coincide at a point corresponding to each other. If agreement between the two DVI video signals compared with each other is found during the comparison or check, a pulse or signal, for example, for release is generated by the video signal comparison device 38 and is sent to the two data processing devices 30, 30'. A pulse or signal of this kind therefore represents a virtual confirmation. The display on the screen 26 of the data and/or information provided by means of the device 33, 33' is retained. A continuing unhindered operation and/or control of the at least one control device 14, 14', 14', 14'' by the operating personnel is therefore possible. If, however, a deviation is found between the two DVI video signals compared with each other, the two DVI video signals are shifted in a second direction, opposite to the first direction, for example, to the left, towards or against each other, until again the identifiers of the two DVI video signals coincide at a point corresponding to each other. If also in this case a deviation is found between the two DVI video signals compared with each other, a pulse or a signal for blocking the further operation and/or control of the at least one control device is set by the video signal comparison device 38. As an alternative to this, it is equally conceivable that the video signal comparison device 38 does not set a pulse or signal for blocking, but instead merely suppresses the pulse or signal that has been sent to enable, and thus confirm, the existing display of the data and/or information on the screen 26. Such a blocking of the further operation and/or control of the at least one control device 14, 14', 14', 14'' can ultimately be notified to the operating personnel by means of an update reporting device. The blocking can be presented to the operating personnel, for example, by means of images or corresponding (acoustic and/or visual) warning signs on one of the further two screens 26', 26'. The present invention is not limited to the presented embodiment of the arrangement 10. For instance, it is conceivable that the storage device 34, 34', which in the exemplary embodiment shown is configured as an image storage device of a graphics card or can also be embodied by an external storage device or image storage device (not illustrated), be replaced by the process database 48, 48'. The process database 48, 48' would in this respect take over the function of the storage device 34, 34', which at the same time would bring about a further simplification of the construction of the arrangement 10. Furthermore, it is possible, without complications, to configure the devices 33, 33' in any other graphics format - i.e., analogue or digital. In this respect, a DVI graphics card or also an HDTV (High Definition Television) graphics card could equally be used, for example, instead of the VGA graphics card, such as is shown in the example of an embodiment of the arrangement 10 in Figs. 1 to 3 and 5. Particularly where a DVI graphics card is used as device 33, 33' for visualizing the data and/or information, the overall construction of the arrangement 10 could be further simplified. With such a constructive arrangement, it would be possible to do away with a separate device 36, 36' for pixel-accurate generating of a DVI video signal. Its function would in any case also be taken over by the device 33, 33'. PCT-application PCT/EP2006/012256 November, 26 2007 Applicant: Vossloh Information Technologies GmbH Our ref: VIT-013-PCT Gr/ge (New) Claims 1. Method for the safe monitoring and evaluation of operat- ing states of at least one traffic control system (12, 12', 12', 12''), especially of at least one control de- vice (14, 14', 14', 14'') of an electronic railway con- trol centre (16, 16', 16', 16'') for rail-borne traf- fic, comprising the following steps: a) obtaining data and/or information on an operating state by means of the at least one control device (14, 14', 14', 14''); b) simultaneous transmission of the obtained data and/or information on the operating state of the at least one control device (14, 14', 14', 14'') via two in- dependent channels (20, 20') to two separate data processing devices (30, 30') communicating with each other; c) receiving and processing the obtained data and/or in- formation on the operating state of the at least one control device (14, 14', 14', 14'') by means of the two data processing devices (30, 30'); d) visualizing the received and processed data and/or information on the operating state on a screen (26, 26', 26', 26'', 26'') or similar by at least one of the two data processing devices (30, 30'); e) pixel-accurate generation of a video signal according to the DVI (Digital Visual Interface) standard from the received and processed data and/or information on the operating state, in each case by means of the two data processing devices (30, 30'), and transmitting AMENDED PAGE the two DVI video signals from the two data process- ing devices (30, 30') to a video signal comparison device (38); f) comparing with each other and evaluating the two DVI video signals by means of the video signal comparison device (38); and g) generating or suppressing a pulse or signal in re- sponse to the evaluation of the comparison between the two DVI video signals, as well as forwarding of said pulse or signal from the video signal comparison device (38) to the two data processing devices (30, 30') for further operation and/or control of the at least one control device (14, 14', 14', 14'')/ or for blocking the further operation and/or control of the at least one control device (14, 14', 14', 14 '') . 2. Method according to Claim 1, characterized in that the obtained data and/or information on the operating state is simultaneously transmitted from the at least one con- trol device (14, 14', 14', 14'' ) to the two data proc- essing devices (30, 30') by means of an Ethernet (20, 20') in each case. 3. Method according to Claim 1 or 2, characterized in that the obtained data and/or information on the operating state is transmitted simultaneously from the at least one control device (14, 14', 14' , 14'' ) to the two data processing devices (30, 30') for avoidance of a collision with data and/or information transmitted simultaneously from at least one further control device (14, 14', 14', 14' ' ') , with an interconnected Ethernet circuit device (58) . 4. Method according to any of Claims 1 to 3, characterized in that the obtained data and/or information on the oper- ating state is transmitted simultaneously from the at AMENDED PAGE least one control device (14, 14', 14', 14' ' ' ) to the two data processing devices (30, 30') with at least one repeater device for the reproduction and forwarding of the acquired data and/or information on the operating state, and/or a processing device for demodulation fol- lowed by modulation. 5. Method according to any of Claims 1 to 4, characterized in that the obtained data and/or information on the oper- ating state is simultaneously transmitted from the at least one control device (14, 14', 14', 14' ' ' ) to the two data processing devices (30, 30'} by means of optical fibre conductors. 6. Method according to any of Claims 1 to 5, characterized in that a verification of a sequence number of the proto- cols of the data and/or information is carried out for the processing of the obtained data and/or information on the operating state of the at least one control device (14, 14', 14' ', 14 ' ' ') by the two data processing devices (30, 30'). 7. Method according to Claim 6, characterized in that the data and/or information on the operating state of the at least one control device (14, 14', 14' ' , 14'') is stored in an input buffer of the respective data processing de- vice (30, 30') for verification of the sequence number of the protocols of the data and/or information. 8. Method according to Claim 6 or 7, characterized in that during the verification of the sequence number of the protocols of the data and/or information their logical progression is checked. 9. Method according to any of Claims 6 to 8, characterized in that during the verification of the sequence number of the protocols of the data and/or information the sequence AMENDED PAGE number of the two data processing devices (30, 30') is compared. 10. Method according to any of Claims 6 to 9, characterized in that, during the determination of the logical progres- sion of the sequence number and if the sequence number between the two data processing devices (30, 30') match, the data and/or information on the operating state of the at least one control device (14, 14', 14', 14 ' ' ' ) is shifted into a process database (48, 48') or similar of the respective data processing device (30, 30'), in which both data and/or information on a topology of the traffic control system (12, 12', 12', 12''), or part thereof, is stored. 11. Method according to any of Claims 1 to 10, characterized in that the respective DVI video signal is generated by the two data processing devices (30, 30'), preferably by an appropriate DVI graphics card, from the processed data and/or information on the operating state of the at least one control device (14, 14', 14', 14''), especially shifted into the process database (48, 48') or similar, and from the data and/or information on the topology of the traffic control system (12, 12', 12' ', 12''), or part thereof, stored in the process database (48, 48') or similar. 12. Method according to any of Claims 6 to 9, characterized in that the data and/or information on the operating state of the at least one control device (14, 14', 14 ' ' , 14'') is blocked if a logical progression of the se- quence number is not determined and/or the sequence num- ber between the two data processing devices (30, 30') does not match. 13. Method according to Claim 12, characterized in that the data and/or information on the operating state of the at AMENDED PAGE least one control device (14, 14', 14' ' , 14'') is trans- mitted at least one more time by the at least one control device (14, 14', 14' ', 14'') and subject to a further verification before blocking. 14. Method according to Claim 12 or 13, characterized in that a blocking of the data and/or information on the operat- ing state of the at least one control device (14, 14', 14', 14'') is notified by means of an update reporting device. 15. Method according to any of Claims 6 to 14, characterized in that the verification of the sequence number of the protocols of the data and/or information is carried out in a specified and monitored cycle, especially monitored by a watchdog device. 16. Method according to any of Claims 1 to 15, characterized in that, for a comparison by the video signal comparison device (38) of the two DVI video signals supplied by the two data processing devices (30, 30'), the two data proc- essing devices (30, 30') are synchronized with each o- ther, with the timing of the screen refresh frequency be- ing predetermined by the video signal comparison device (38) and the two data processing devices (30, 30'} being cyclically requested for visualization of the current data and/or information. 17. Method according to any of Claims 1 to 16, characterized in that, for comparison by the video signal comparison device (38) of the two DVI video signals supplied by the two data processing devices (30, 30'), a synchronization of the two DVI video signals is carried out. 18. Method according to Claim 17, characterized in that the two DVI video signals supplied by the two data processing devices (30, 30') are read into a buffer, especially a AMENDED PAGE ring buffer, of the video signal comparison device (38) for synchronization and provided with an identifier at a point corresponding to each other within the respective DVI video signal. 19. Method according to Claim 18, characterized in that two triggers are applied to the two DVI video signals at a point corresponding to each other for identification of the two DVI video signals. 20. Method according to Claim 19, characterized in that the two triggers are applied to the clock signals of the two control codes of the two DVI video signals for marking the start or the end of an image. 21. Method according to any of Claims 17 to 20, characterized in that the two DVI video signals are shifted in a first direction towards or against each other until the identi- fiers of the two DVI video signals coincide at a point corresponding to each other. 22. Method according to any of Claims 1 to 21, characterized in that, if the two DVI video signals compared with each other are found to match, a pulse or a signal is gener- ated by the video signal comparison device (38) and sent to the two data processing devices (30, 30') for further operation and/or control of the at least one control de- vice (14, 14' , 14', 14 '') . 23. Method according to any of Claims 17 to 21, characterized in that, if a deviation is found between the two DVI video signals compared with each other, the two DVI video signals are shifted in a second direction towards or against each other, opposite to the first direction, un- til the identifiers of the two DVI video signals coincide at a point corresponding to each other. AMENDED PAGE 24. Method according to any of Claims 1 to 23, characterized in that, if a deviation is again found between the two DVI video signals compared with each other, a pulse or a signal for blocking the further operation and/or control of the at least one control device (14, 14', 14' ', 14'') is set by the video signal comparison device (38). 25. Method according to Claim 24, characterized in that a blocking of the further operation and/or control of the at least one control device (14, 14', 14' ', 14'') is no- tified by means of an update reporting device. 26. Method according to any of Claims 1 to 25, characterized in that instructions of the operating personnel, input by mouse (22, 22') and keyboard (24, 24'), for processing for the two-channel system are doubled, interference- free, by a mouse/keyboard converter (25). 27. Arrangement for the safe monitoring and evaluation of op- erating states of at least one traffic control system (12, 12', 12', 12''), especially of at least one con- trol device (14, 14', 14", 14'') of an electronic rail- way control centre (16, 16', 16', 16'') for rail-borne traffic, especially for the performance of the method in accordance with one of the preceding claims, comprising two separate data processing devices (30, 30') communi- cating with each other, each of which having a device (32, 32') for receiving and processing obtained data and/or information on an operating state of the at least one control device (14, 14', 14', 14''), a device (33, 33') for visualizing the obtained and processed data and/or information on the operating state on a screen (26, 26', 26', 26'', 26'') or similar and a device (36, 36') for the pixel-accurate generation of a video signal in accordance with the DVI (Digital Visual Inter- face) standard from the obtained and processed data and/or information on the operating state, and a video AMENDED PAGE signal comparison device (38) for comparing and evaluat- ing the two DVI video signals with each other as well as for generating or suppressing a pulse or signal in re- sponse to the evaluation of the comparison between the two DVI video signals and also forwarding of it from the video signal comparison device (38) to the two data proc- essing devices (30, 30') for further operation and/or control of the at least one control device (14, 14', 14', 14''), or for blocking the further operation and/or control of the at least one control device (14, 14' , 14' ', 14 ' ' ' ) . 28. Arrangement according to Claim 27, characterized in that the two data processing devices (30, 30') are essentially identical to each other, in particular of identical de- sign. 29. Arrangement according to Claim 27 or 28, characterized in that the two data processing devices (30, 30') each have at least one common screen (26, 26', 26', 26'', 26'') which is connected to a device (56) for redundant switch- ing and can be controlled through the device (33, 33') for visualization of the obtained and processed data and/or information on the operating state, particularly a storage device (34, 34'), preferably an image storage de- vice of a graphics card, of the two data processing de- vices (30, 30' ). 30. Arrangement according to any of Claims 27 to 29, charac- terized in that the two data processing devices (30, 30') communicate with each other and/or with the video signal comparison device (36) by means of an Ethernet (42), par- ticularly an Ethernet/LAN (Local Area Network) connec- tion. 31. Arrangement according to any of Claims 27 to 30, charac- terized in that the device (32, 32') for receiving and AMENDED PAGE processing the obtained data and/or information on the operating state is designed as an input buffer. 32. Arrangement according to Claim 30 or 31, characterized in that the device (32, 32') for receiving and processing the obtained data and/or information on the operating state comprises a device (44, 44') for checking the logi- cal progression of the sequence number. 33. Arrangement according to any of Claims 30 to 32, charac- terized in that the device (32, 32') for receiving and processing the obtained data and/or information on the operating state comprises a device (46, 46') for compar- ing the sequence number between the; two data processing devices (30, 30'). 34. Arrangement according to any of Claims 30 to 33, charac- terized in that a device is assigned to the device (32, 32') for receiving and processing the obtained data and/or information on the operating state, for its moni- toring in a specified cycle. 35. Arrangement according to any of Claims 27 to 34, charac- terized in that the two data processing devices (30, 30') each comprise a process database (48, 48') or similar for receiving and saving processed data and/or information on the operating state of the at least one control device (14, 14', 14', 14'') and data and/or information on a topology of the traffic control system (12, 12', 12' ' , 12''), or a part thereof. 36. Arrangement according to any of Claims 27 to 35, charac- terized in that the device (33, 33') for visualizing the data and/or information is designed as an analogue graph- ics card, especially as a VGA (Video Graphics Array) graphics card, or as a digital graphics card, especially as a DVI graphics card or HDTV (High Definition TeleVi- AMENDED PAGE sion) graphics card. 37. Arrangement according to any of Claims 27 to 36, charac- terized in that the device (36, 36') for the pixel- accurate generation of the DVI video signal is designed as a DVI graphics card. 38. Arrangement according to any of Claims 27 to 37, charac- terized in that the two data processing devices (30, 30') are connected directly to the video signal comparison de- vice (38) in-each case via the device (36, 36') for the pixel-accurate generation of a DVI video signal, espe- cially the DVI graphics card. 39. Arrangement according to any of Claims 27 to 38, charac- terized in that the video signal comparison device (38) is provided with a device (50) for synchronizing the two data processing devices (30, 30') with each other, com- prising an element for predetermining the timing of the screen refresh frequency and an element for cyclically requesting the two data processing devices (30, 30') for visualization of the current data and/or information. 40. Arrangement according to any of Claims 27 to 39, charac- terized in that the video signal comparison device (38) comprises a device (52) for synchronizing the two DVI video signals. 41. Arrangement according to Claim 40, characterized in that the device (52) for synchronizing the two DVI video sig- nals comprises a buffer, especially a ring buffer, and a device for marking the two DVI video signals at a point corresponding to each other within the respective DVI video signal. 42. Arrangement according to Claim 41, characterized in that the buffer, especially the ring buffer, has a storage ca- AMENDED PAGE pacity for at least one DVI video signal, especially three DVI video signals. 43. Arrangement according to Claim 41 or 42, characterized in that the device for marking the two DVI video signals at a point corresponding to each other comprises an element for generating two triggers to be applied to the two DVI video signals. 44. Arrangement according to any of Claims 41 to 43, charac- terized in that the device (52) for synchronizing the two DVI video signals has an element for shifting the two DVI video signals towards or against each other and an ele- ment bringing the identifiers of the two DVI video sig- nals mutually into coincidence at a point corresponding to each other. 45. Arrangement according to any of Claims 27 to 44, charac- terized in that the video signal comparison device (38) comprises a device for comparing and evaluating the two DVI video signals. 46. Arrangement according to any of Claims 27 to 45, charac- terized in that the video signal comparison device (38) comprises a device (54) for generating or suppressing an impulse or signal in response to the evaluation of the comparison between the two DVI video signals. 47. Arrangement according to any of Claims 27 to 46, charac- terized in that an update reporting device for notifica- tion of a blocking of the data and/or information on the operating state of the at least one control device (14, 14 ', 14' ', 14'') and/or a barring of the further opera- tion and/or control of the at least one control device (14, 14', 14', 14'') is assigned to the two data proc- essing devices (30, 30'). AMENDED PAGE Arrangement according to any of Claims 27 to 47, charac- terized in that a mouse/keyboard converter (25) communi- cating with the data processing devices (30, 30') for the interference-free doubling of instructions of the operat- ing personnel input by means of the mouse (22, 22') and keyboard (24, 24') is assigned to the data processing de- vices (30, 30' ). Use of the method and/or arrangement according to any of the preceding claims for the remote operation and/or re- mote control of at least one electronic railway control centre for rail-borne traffic, especially for rail and railway traffic, preferably for railways, rubber-tired metro systems, monorail systems or overhead systems, par- ticularly preferred on regional lines, by means of a safe operator station at a central location. The invention relates to a method and an arrangement (10) for the reliable monitoring and evaluation of operating states of at least one traffic control system (12, 12', 12", 12'"), especially at least one control device (14, 14', 14", 14'") of an electronic signal box (16, 16', 16", 16"') for railborne traffic, comprising two specific communicating data processing devices (30, 30') which each comprise a unit (32, 32') for receiving and processing acquired data and/or information relating to an operating state of the at least one control device (14, 14', 14", 14'"), a unit (33, 33') for visualising the received and processed data and/or information relating to the operating state on a screen (26, 26', 26', 26'", 26"") or the like, a unit (36, 36') for the pixel-precise generation of an image signal, according to DVI (Digital Visual Interface) standard, from the received and processed data and/or information relating to the operating state, and an image signal comparison device (38) for comparing and evaluating the two DVI image signals with each other, for producing or suppressing a pulse or a signal in response to the evaluation of the comparison between the two DVI image signals, and for forwarding the same from the image signal comparison device (38) to the two data processing devices (30,30') for further operation and/or control of the at least one control device (14, 14', 14", 14'") or for blocking the further operation and/or control of the at least one control device (14, 14', 14" 14" ). The invention also relates to the use of the same.

Documents:

02895-kolnp-2008-abstract.pdf

02895-kolnp-2008-claims.pdf

02895-kolnp-2008-correspondence others.pdf

02895-kolnp-2008-description complete.pdf

02895-kolnp-2008-drawings.pdf

02895-kolnp-2008-form 1.pdf

02895-kolnp-2008-form 3.pdf

02895-kolnp-2008-form 5.pdf

02895-kolnp-2008-international exm report.pdf

02895-kolnp-2008-international publication.pdf

02895-kolnp-2008-international search report.pdf

02895-kolnp-2008-others.pdf

02895-kolnp-2008-pct priority document notification.pdf

02895-kolnp-2008-pct request form.pdf

2895-KOLNP-2008-(17-04-2014)-ABSTRACT.pdf

2895-KOLNP-2008-(17-04-2014)-ASSIGNMENT.pdf

2895-KOLNP-2008-(17-04-2014)-CLAIMS.pdf

2895-KOLNP-2008-(17-04-2014)-CORRESPONDENCE.pdf

2895-KOLNP-2008-(17-04-2014)-DESCRIPTION (COMPLETE).pdf

2895-KOLNP-2008-(17-04-2014)-DRAWINGS.pdf

2895-KOLNP-2008-(17-04-2014)-FORM-1.pdf

2895-KOLNP-2008-(17-04-2014)-FORM-2.pdf

2895-KOLNP-2008-(17-04-2014)-FORM-3.pdf

2895-KOLNP-2008-(17-04-2014)-FORM-5.pdf

2895-KOLNP-2008-(17-04-2014)-FORM-6.pdf

2895-KOLNP-2008-(17-04-2014)-OTHERS.pdf

2895-KOLNP-2008-(17-04-2014)-PA.pdf

2895-KOLNP-2008-(17-04-2014)-PETITION UNDER RULE 137.pdf

2895-KOLNP-2008-(25-06-2014)-ASSIGNMENT.pdf

2895-KOLNP-2008-(25-06-2014)-FORM-1.pdf

2895-KOLNP-2008-(25-06-2014)-FORM-2.pdf

2895-KOLNP-2008-(25-06-2014)-FORM-3.pdf

2895-KOLNP-2008-(25-06-2014)-FORM-5.pdf

2895-KOLNP-2008-(25-06-2014)-PA.pdf

2895-KOLNP-2008-ASSIGNMENT.pdf

2895-KOLNP-2008-CORRESPONDENCE-1.1.pdf

2895-kolnp-2008-form 18.pdf

2895-KOLNP-2008-FORM 3-1.1.pdf

2895-KOLNP-2008-GPA.pdf

abstract-02895-kolnp-2008.jpg