MH50C
duagon SAFE CONTROL Vital System Controller
Main Features
- For Applications up to SIL4 (EN5012x) or SIL3 (IEC61508)
- Certified safe CPU board with 3 CPUs
- Safe I/O boards
- QNX safe operating system available
- Certification packages available
- Extensible by distributed safe I/O boxes connected via real-time Ethernet
- Optional MVB, RS232, RS422, RS485, CAN, GPS
- Compact 40 HP application-ready system
- Rack-mounted or wall-mounted
- For rolling stock and wayside applications
MH50C is a central controller of the duagon SAFE CONTROL (d-SC) System. It is a modular system platform usable for safety-critical train applications like train control, automatic train operation (ATO) and automatic train protection (ATP) up to SIL 4 (EN5012x) or SIL3 (IEC61508).
Modular I/O Configuration
Being based on modular 40 HP CompactPCI, the system is always configured with a safe system CPU, a real-time Ethernet card, a power supply unit and a shelf controller. Other cards are added as built-to-order (BTO) options or by the user. The safe I/O cards support the common I/O requirements requested in trains.
The composition of safe CPU card, safe train I/Os and interfaces, such as MVB, CAN or serial interfaces to connect to legacy train equipment makes the controller ideal for use in safety-critical rolling stock applications.
Application-Ready, Open Platform
The MH50C is an application-ready, open platform. This means that the user adds his application based on the basic operating system and driver software.
Part of duagon SAFE CONTROL System
d-SC is a modular SIL 4 certifiable family of CompactPCI-based standard products usable for every kind of safety-critical railway application - from a single function to the main control system of the train. It can be configured to control anything in the train that requires functional safety with requirements from SIL 1 up to SIL 4.
d-SC communicates via standard real-time Ethernet and can be configured to interface to any type of consist fieldbus network like MVB, CANopen, Profinet etc. This makes it easy to integrate into a TCN network as well as into regionally different Train Control Systems like ETCS, CTCS, ATCS or Klub-U. The high level of flexibility of d-SC results in significant cost and time savings during computerization of the train.
Certification and Standards Compliance
d-SC components come with certification packages and complete support for the safe operating system QNX, including safe protocols, and provides the technical possibility to run a safety PLC, again saving cost and time for implementation and for certification of the final system. d-SC is developed according to EN 50128 and EN 50129 standards and complies with the environmental requirements for railway applications: shock, vibration, humidity, dust, isolation, PSU hold-up times, EMC regulations etc.
Mounting and Cooling Options
The system can be wall or rack-mounted, and is cooled using an additional fan tray at the bottom of the system. Cooling is independent of the mounting position.
- Modular design, built-to-order configuration
- Slot and backplane set-up of the system
- 1 PSU slot
- 1 CompactPCI PlusIO system slot
- 6 CompactPCI peripheral slots
- 1 CompactPCI peripheral slot reserved for F305
- F75P CPCI 3U Board
- Configurable: no
- 3x Intel Atom E680T (1.6 GHz), 2x 512 MB, 1x 1 GB DDR2 DRAM, 6 HP, front: 1 VGA, 2 USB, 2 Fast Ethernet (RJ45), -40°C to +85°C, air-cooled, conformal coating
- Mass Storage
- SSD mSATA, 8 GB, -40°C to +85°C
- F305 CPCI 3U Board
- Configurable: no
- 4 Fast Ethernet (M12); rear: real-time Ethernet (EBUS); -40°C to +85°C, conformal coating
- K1, K2 or K7 d-SC I/O Board
- Configurable: yes
- Possible in CompactPCI slots: 1, 2, 3, 4, 5, 6
- Possible Configurations
- D215 CPCI 3U Board
- Configurable: yes
- Possible in CompactPCI slots: 1
- Possible Configurations
- MVB ESD+ Device, Process and Message Data, -40°C to +70°C, conformal coating
- MVB ESD+ Bus Administrator, Process and Message Data, -40°C to +70°C, conformal coating
- MVB EMD Device, Process and Message Data, -40°C to +70°C, conformal coating
- MVB EMD Bus Administrator, Process and Message Data, -40°C to +70°C, conformal coating
- F215 CPCI 3U Board
- Configurable: yes
- Possible in CompactPCI slots: 1 to 2, 2 to 3
- 8 HP FPGA-based universal interface for direct connection of 2x CAN (first slot), 2x UART and 1x 8-bit GPIO (second slot) at front as standard FPGA content plus space for user-defined functions, -40°C to +85°C, interface SA-Adapters to be ordered separately
- Possible Configurations
- PU20 or PU21 PSU 3U
- Configurable: yes
- 120 W, 3U 6 HP PSU, wide range input 24 to 110 V DC, 24 V DC nom., output 12 V / 5 V / 3.3 V DC, -40°C to +85°C, conformal coating (PU20)
- 120 W, 3U 6 HP PSU, wide range input 100 to 240 V AC, output 12 V / 5 V / 3.3 V DC, -40°C to +85°C, conformal coating (PU21)
- One power inlet connector
- Supply voltage
- 24 V, 36 V, 48 V, 72 V, 96 V, 110 V DC nominal; 14.4 to 154 V max. (EN 50155)
- 24 V, 36 V, 48 V DC nominal; 16.8 to 60 V (= 0.7 x Un, min. to 1.25 x Un, max.)(EN 62368)
- Power interruption class S2 (10 ms) (EN 50155)
- Power consumption
- 60 W typ. (barebone configuration and 2x K1, 2x K2, 2x K7)
- 100 W max.
- Dimensions
- (W) 222 mm, (D) 261 mm, (H) 177 mm max.
- (W) 214 mm, (D) 225 mm, (H) 177 mm max. without ground contact, ejector handles and connectors
- 4U, 40 HP
- Mounting Possibilities
- Wall/flat surface
- Rack in 19" cabinet
- Two systems side-by-side to build a single 19" chassis
- Cooling concept
- Air-cooled, forced convection with fan tray at system bottom
- Weight
- 5.7 kg (barebone configuration and 2x K1, 2x K2, 2x K7)
- International Protection Rating (IEC 60529): IP20
- Compliance level: The product is tested and qualified on product model level. Compliance varies between different product models.
- Operating temperature: -40 °C to +70 °C (EN 50125-3:2003, class T2, cubicle, with class T2 maximum extended by 5 °C)
- Storage temperature: -40 °C (EN 60068-2-1:2007, Ab) to +85 °C (EN 60068-2-2:2007, Bb)
- Altitude: +3000m max. (EN 50125-3:2003, class AX)
- Humidity: 100 % RH max. (EN 50125-3:2003, shelter N.C.C., class T1/T2/TX) Non-condensing
- Pollution degree: EN 50124-1:2017, class PD3
- Overvoltage category: EN 50124-1:2017, class OV1
- Shock: 11 ms @ 20 m/s² (EN 50125-3:2003, in a switch cabinet 1 m to 3 m from the track)
- Vibration: 2.3 m/s² (EN 50125-3:2003, in a switch cabinet 1 m to 3 m from the track)
- Electrical safety
- EN 50124-1:2017
- EN 62368-1:2014 + AC:2015
- EMC emission
- EN 50121-4:2016
- EN 61000-6-4:2007 + A1:2011
- EN IEC 61000-6-4:2019
- EMC immunity: EN 50121-4:2016
- Fire protection: for compliance to EN 62368-1:2014 + AC:2015 a fire enclosure is required
- Compliance level
- The product is tested and qualified on product model level. Compliance varies between different product models.
- The product is prepared for use in EN 50155 systems. Some parameters are system-dependent and are specified on system level.
- Operating temperature: -40 °C to +70 °C, +85 °C for 10 min (EN 50155:2021, class OT4, ST1)
- Rapid temperature variations: EN 50155:2021, class H1, no requirements
- Storage temperature: -40 °C (EN 50155:2021) to +85 °C (EN 60068-2-2, Bb)
- Altitude: +3000 m max. (EN 50125-1:2014, class AX)
- Pollution degree: EN 50124-1:2017, class PD2
- Overvoltage category: EN 50124-1:2017, class OV1
- Humidity: +55 °C and +25 °C, 100 % RH max. (EN 50155:2021)
- Shock: 30 ms @ 50 m/s² (EN 61373:2010/AC:2017-09, vehicle body, cat. 1, class B)
- Vibration: 10 min @ 2.02 m/s² (functional) and 5 h @ 11.44 m/s² (long-life) (EN 61373:2010/AC:2017-09, vehicle body, cat. 1, class B, double acceleration)
- Electrical safety
- EN 50155:2021
- EN 50153:2014 + A1:2017 + A2:2020
- EN 50124-1:2017
- EN ISO 13732-1:2008
- Fire protection: EN 45545-2:2020, EL9, HL3
- EMC emission: EN 50121-3-2:2016 + A1:2019
- EMC immunity: EN 50121-3-2:2016 + A1:2019
- Protective coatings: EN 50155:2021, class PC2 (Any PCB protected on both sides) except mSATA SSD assembled on F75P
- Useful life: 20 years (EN 50155:2021, class L4)
- The system uses components which may have a shorter useful life. For details contact duagon.
- Certifiable up to SIL 4 according to EN 50129/EN 50128 and up to SIL 3 according to IEC 61508, depending on I/O board configuration
- Hazard rate for safety functions <= 1E-9 / h
- System maintains safe state after a failure
- 31804 h predicted @ 40 °C according to IEC/TR 62380 (RDF 2000)(barebone configuration with fans)
- 108413 h predicted @ 40 °C according to IEC/TR 62380 (RDF 2000)(barebone configuration without fans)
- I/O Domain
- Linux
- Safe Domain
- QNX
- PACY (Process Data Framework for Cyclic Applications)
Standard Models
The product consists of the 40 HP basic system including backplane and mounting rails and provides:
- 1 slot for PSU
- 1 CompactPCI PlusIO slot for the CPU board
- 6 CompactPCI peripheral slots
- 1 CompactPCI peripheral slot reserved for F305
The barebone configuration comprises a number of standard, non-configurable components such as the PSU and CPU board. I/O boards are completely configurable. The Technical Data list all components that can be implemented in the system. Choose the functionality you need and contact duagon's sales team to verify which board combinations are feasible.
Accessories - Miscellaneous
QNX
(PDF, 763 KB)
(PDF, 369 KB)
(PDF, 357 KB)
(PDF, 369 KB)
(PDF, 985 KB)
(PDF, 595 KB)
(PDF, 712 KB)
(PDF, 575 KB)
(PDF, 552 KB)
(PDF, 633 KB)
(PDF, 857 KB)
(PDF, 459 KB)
(PDF, 570 KB)