CERTIFER 1 J.P PRONOSTP.OZELLO UCI ERTMS CONFERENCE BUDAPEST

CERTIFER 2 European legislation (1) Directive 96/48 : Interoperability of the trans-European high speed rail system Directive 01/16 : Interoperability of conventional European rail system Directive 2004/50 : Interoperability : modifying the directive 96/48 and the directive 01/16 STI CC 2002/731 modified by decision 2004/447 Directive 2004/49 : safety directive

CERTIFER 3 European legislation (2) T. S. I Directive Subset (40) Control command & Signalling Regulation field Standards (8)& Subset (30) Volontary field

CERTIFER 4 Interoperability constituent : EC declaration THE NOTIFIED BODIES notifies MEMBER STATE THE MANUFACTURER chooses draws up THE NOTIFIED BODY THE NOTIFIED BODY The constituent assess The conformity or the The conformity or the suitability for use The conformity or the The conformity or the suitability for use attests The EC certificate of conformity

CERTIFER 5 Interoperability constituants : Assessment method B Type -Examination -examines the technical documentation and design -examines the manufacturer process -carries out appropriate examinations and the type tests - issues a type-examination certification D Production QA -assess the quality system -carries out periodically audits - provides an audit report F Product verification -carries out the examinations and tests (for every IC or on a statistical basis) -provided certificate for the approved products or lots H2 Full QA with design examination -assess the quality system -examines design - issues a design examination certificate -carries out periodically audits - provides an audit report DESIGNDESIGN PRODUCTIONPRODUCTION

CERTIFER 6 Sub-system: EC verification procedure THE NOTIFIED BODIES the EC certificate of conformity notifies MEMBER STATE Adjudicating entity choose draws up the placing in service authorizes The notified body ‘E C’ verification ‘E C’ verification examines ‘E C ’ certificate issues National Safety Authority

CERTIFER 7 Sub-system : on board assembly FIS MMI LTM EURO- RADIO Kernel TIU FIS FFFIS Odometry ETCS On board EURO- RADIO RBC 1 Jur. recording BTM GSM R fixed network Radio infill unit GSM R Mobile Nation al Syste m EURO - RADI O ETCS Trackside FIS EURO- LOOP EUROBALISE Driver JRU Downloading tool Train STM

CERTIFER 8 Sub-system : trackside assembly BTM LTM ETCS on board EUROLOOP EUROBALISE EURO RADIO LTM STM INTERLOCKING Control Centre EURORADIO RBC 2 LEU Radio Infill unit KEY MANAGEMENT CENTRE FFFIS FIS GSM R Mobile GSM R fixed network FIS Trackside Assembly FIS EURO RADI O National System RBC 1

CERTIFER 9 Sub-system : Essential Requirements (safety) For the class A interfaces : STI : 10-9/h on board assembly, and for the trackside assembly level 2; corresponding to the level SIL4 EN50126, EN50128, EN50129 SUBSET-091, Supplier safety analysis, SUBSET-047 For the class B interfaces : national provisions

CERTIFER 10 Sub-system : Essential Requirements (safety)

CERTIFER 11 Sub-system : Essential Requirements (availability & reliability) EN50126 ISO9001 (maintenance quality) EEIG / RAM 96s126 v6

CERTIFER 12 Sub-system : Essential requirements (technical compatibility) Functional requirements (FRS et SRS EIRENE, FRS et SRS ETCS) Interface requirements (FFFIS and FIS) Physical environment and EMC Performance requirements Dimensioning requirements Health & environmental protection : No additional requirement to the ones already requested by applicable European regulation

CERTIFER 13 Sub-system : Assessment method On Board assembly SB and SD or SF same philosophy than for IC Trackside assembly module SG possible

CERTIFER 14 LGV Est NoBo & ISA trackside assessment Trackside CoCoSi LGV EE NoBo & ISA Report EC verification certificate for trackside assembly Generic Trackside ETCS for LGV (ERTMS-TVM430/SEI superimposed) NoBo & ISA Report Generic Network GSM-R NoBo Report Generic RBC NoBo&ISA report EC Certificate Specific Application Generic Application Generic Products Balise NoBo&ISA report EC Certificate LEU NoBo&ISA report EC Certificate Others Equipments ISA Report

CERTIFER 15 Generic Trackside ETCS for LGV NoBo & ISA assessment Audit & surveillance of QA (Quality Assurance) Cross acceptance of Interoperable Constituent certificates Compliance with TSI & national safety requirements (GAME principles) in all phases : specification / design / integration tests / validation tests Assessment of the documentation concerning:  Generic process of data preparation  Operation & maintenance ETCS is specified, designed, integrated, and validated by RFF/SNCF NoBo & ISA assessments are based on SH2 module

CERTIFER 16 Generic Trackside ETCS Integration & Validation Integration & validation step by step by CSEE / RFF / SNCF ANSALDO/CSEE tests in laboratory for Constituents Railway Trial Site in Valenciennes (France)  - laboratory level (ETCS Constituent + RBC + GSM-R + simulator (odometer, interlocking)  - Trial site in Valenciennes : Train equipped with ETCS + RBC + GSM-R + interlocking simulator, train speed up to 80 km/h Tests on LGV Interconnexion : Train equipped with ETCS on LGV, RBC in Valenciennes, train speed up to 160 km/h Tests on LGV EE : TGV POS equipped with ETCS on LGV EE, 7 RBC on LGV EE, train speed up to 350 km/h

CERTIFER 17 Generic GSM-R Network NoBo assessment Audit & surveillance of QA Compliance with TSI & national requirements in all phases : specification / design / integration tests / validation tests  Tools and process used for radio planning  RAM, architecture  Functional tests (on platform and pilot lines) GSM-R is specified, designed, integrated, and validated by RFF/SNCF NoBo assessment is based on SH2 module

CERTIFER 18 Trackside CoCoSi LGV EE NoBo & ISA assessment Audit & surveillance of the QA Compliance with TSI & national safety requirements (GAME principles) in all phases : specification / design / installation / validation tests  Telecommunication  Control centre  data preparation activities : interlocking, balise, RBC  Installation and test of conventional signalling products  Installation and test of ETCS constituents  Installation and tests of GSM-R equipments, radio coverage measurements  EMC compatibility measurements  Integration and Validation tests  Operational rules CoCoSi is specified, designed, installed, integrated, and validated by RFF/SNCF NoBo & ISA assessments are based on SH2 module

CERTIFER 19 Encountered difficulties Referential of constituents not always clear : ex SRS gather without distinguishing the requirements s-syst board, s-syst trackside, and constituents statute of FRS : referential s-syst or constituent ? Lots of requirements classified Mandatory, but not verifiable in certification (EN50126, 500km/h,....) The requirements of generic safety : safety requirements must be redefined for each constituent and by each manufacturer ==> ambiguity on the significance of EC certificate Difficulties to treat separately ON and ISA missions

CERTIFER 20 Certification Progress ERTMS Constituents or Sub-systems certified by CERTIFER: - LEU - Odometer - GSM-R Mobile, GSM-R GPH - EUROCAB Level 2 - RBC (in progress) - On Board ERTMS sub-system for TGV POS (in progress) - Trackside ETCS and GSM-R Network for LGV EE (in progress) - Trackside ETCS for L3 & L4 in Belgium (in progress) - GSM-R Network in Belgium (in progress)

CERTIFER 21 Data Source Railway Testing Centre Data Source RFF