Gunnar Smith, författare på Prover - Engineering a Safer World Interlocking Design Automation to meet demand for complex digital train control Wed, 08 Apr 2026 07:42:05 +0000 en-US hourly 1 https://wordpress.org/?v=6.9.4 Case study: Automating data preparation for rail control systems https://www.prover.com/webinar/case-study-automating-data-preparation-for-rail-control-systems/ Tue, 24 Mar 2026 07:47:49 +0000 https://www.prover.com/?p=22623 How can rail projects move beyond manual data preparation? In this webinar, we show how Signaling Design Automation and formal verification enable a more controlled, efficient, and verifiable approach to generating and validating application data.

Inlägget Case study: Automating data preparation for rail control systems dök först upp på Prover - Engineering a Safer World.

]]>
LIVE WEBINAR

gunnar.smith

How automation and formal verification improve quality, efficiency, and safety

Live on April 14 at 15:00 CEST

Data preparation is one of the most time-consuming and error-prone parts of any rail control project. Generating, testing, and verifying the application data that configures a safety-critical system often requires extensive manual work, yet this phase rarely gets the attention it deserves.

In practice, a large share of project risk sits in the configuration data. While the generic application is designed to ensure system safety, errors in application data can still have major consequences. Too often, those errors are detected late in the project, when the cost of correction is higher, and the impact on delivery is greater.

In this webinar, we share how Signaling Design Automation and formal verification can transform data preparation across different rail control architectures, including CBTC, ERTMS, interlocking, and train protection systems. Through real-world use cases, we show how automation can reduce manual effort, improve data quality, and support safer, more efficient project delivery.

You’ll get a practical view of how Prover’s solutions are used by BHEPL to automate data preparation for KAVACH, India’s Automatic Train Protection system, and to verify engineering rules for ERTMS data, as well as what these experiences mean for future rail projects.

What you will learn:
  • Why spreadsheet- and document-based data workflows become a bottleneck in complex rail control projects
  • How automated data generation, simulation-based testing, and formal verification help detect errors earlier
  • How Prover iLock and Prover Certifier support application data generation, verification, and certification evidence across different system types
  • How this approach supports traceability, assurance evidence, and tool qualification in line with CENELEC EN 50716

Save my seat for April 14 webinar.

Speaker
Gunnar Smith Prover

Gunnar Smith
Chief Product Officer at Prover

Inlägget Case study: Automating data preparation for rail control systems dök först upp på Prover - Engineering a Safer World.

]]>
Simplified interlocking application engineering with Prover iLock for NEAT’s GeminiX platform https://www.prover.com/signaling-systems/simplified-interlocking-application-engineering-with-prover-ilock-for-neats-geminix-platform/ Mon, 03 Jun 2024 08:59:29 +0000 https://www.prover.com/?p=19309 Prover and NEAT have collaborated to demonstrate the benefits of using the Prover iLock tool suite for engineering interlocking applications executed on NEAT’s GeminiX platform.

Inlägget Simplified interlocking application engineering with Prover iLock for NEAT’s GeminiX platform dök först upp på Prover - Engineering a Safer World.

]]>

Prover and NEAT are together demonstrating the benefits of using the Prover iLock tool suite for engineering interlocking applications executed on NEAT’s GeminiX platform. GeminiX is a SIL-4 generic product consisting of a real-time OS, redundant CPUs, and I/O modules. Prover iLock is a desktop tool for producing fully documented, tested and verified application software for railway signaling systems.

The demonstration includes:

  • The Prover iLock process for generating the interlocking logic from generic specifications and graphical configuration data, with
    • simulation-testing based functional testing,
    • formal safety verification, and
    • generation of C-code for execution on the GeminiX platform.
  • Execution on the GeminiX platform:
    • cross-compilation and execution of the generated C-code using a dedicated SIL-4 task on GeminiX-OS,
    • configuration of I/O, and
    • connection to Prover iLock for real-time hardware in the loop testing, with visualization of generated test cases and manual interaction.

The safe function of the generated application logic (C-code) can be formally verified with the SIL-4 T2 sign-off verification tool Prover Certifier, certified by TÜV Nord.

The demonstration has been set up in NEAT’s lab, with the GeminiX hardware connected to Prover iLock via a communication link, to provide simulation of wayside objects and a control panel, as shown in this video:

Highlights of the GeminiX platform include:

  • A complete Platform Documentation Package and Application Conditions, which describe and certify the compliance for applications up to SIL4 according to the EN50126/128/129 and IEC61508 standards.
  • A HW 2oo2 diverse reference architecture, that can be made redundant for reliability.
  • A real-time OS-like environment, GeminiX–OS, certified as a SIL4 Generic Product on its own and also certified several times into clients’ products. It is independent from the specific hardware, and includes its own complete Documentation Package.
  • A VHDL Source Code, which implements diagnostic routines and generic I/O, independent from the specific hardware, certified as a SIL4 Generic Product.
  • Several Reference Designs, implemented using different CPUs (Intel, AMD, ARM, …) and different bus architectures.

Signaling Design Automation with Prover iLock is a more efficient approach to develop rail control software, rooted in an engineering process based on formal methods, modelling, and automation. In addition to enhancing the development process, it also paves the way for standardization and more open system, something that is key to drive down the long-term costs for rail control. With a development process that is not tied to a specific signaling vendor, the rail infrastructure managers can get in control of the life-cycle of their systems, and can address issues such as obsolescence with more flexibility. The combination of Signaling Design Automation with the GeminiX platform is a good example of how these benefits can be realized for an interlocking system.

Prover and NEAT will showcase their joint solution later this year at InnoTrans and you are also welcome to request a demonstration online or onsite. Please come visit NEAT and Prover at InnoTrans in Berlin, September 24-27, 2024. You will find NEAT in Hall 27, stand 140 and Prover in Hall 3.2, stand 130. Looking forward to seeing you there!

To learn more about signaling design automation with Prover iLock please visit www.prover.com, and more information on the GeminiX platform is available at www.neat.it or www.geminix.com.

How safe and efficient are your rail control systems? Let’s find out!

Inlägget Simplified interlocking application engineering with Prover iLock for NEAT’s GeminiX platform dök först upp på Prover - Engineering a Safer World.

]]>
Introducing the Formal Methods (FMs) Guidebook https://www.prover.com/webinar/introducing-formal-methods-guidebook/ Wed, 01 Nov 2023 13:16:12 +0000 https://www.prover.com/?p=18546 We cover the new Formal Methods (FMs) Guidebook from the Shift2Rail project. Learn more about when, why, and how you should use FMs in development of rail control systems.

Inlägget Introducing the Formal Methods (FMs) Guidebook dök först upp på Prover - Engineering a Safer World.

]]>
RECORDED WEBINAR

gunnar.smith

Recorded on November 11, 2023

When, why, and how to use FMs in development of rail control systems

The Formal Methods (FMs) Guidebook from the Shift2Rail project provides guidance on when, why, and how to use FMs for railway signaling, to facilitate understanding and to pave the way for wider use in the industry. In this webinar, we cover the main contents and recommendations in this new FMs Guidebook for the railway signaling industry, give examples and describe benefits that can be obtained.

The webinar introduce fundamental facts described in the guidebook:

  • The different roles of FMs in the life cycle, based on four high-level life cycles phases (mapping to well-known phases in applicable CENELEC standards)
  • The importance of a clearly defined purpose for FMs use in a project (it helps to understand the important factors, and to make informed decisions)
  • The five example purposes for FMs use described (with recommendations and task checklists for each purpose)
  • The generic, six-step process for FMs application (independent of purpose, life cycle phase, notations, and tools)

During the webinar, we describe examples of the generic FMs application process and guidebook recommendations. We also describe the recommended process to create high-quality tender requirements based on the use of FMs and a reference design, applied for interlocking logic.

Agenda:
  • What is the FMs Guidebook, and how to use it?

  • Motivation for formal methods and when to apply them

  • A formal methods use case: Tender requirements for interlocking logic

  • Conclusions from the FMs Guidebook

  • Questions & answers

Yes please, send me the recording!

Hosts
Gunnar Smith Prover

Gunnar Smith
Chief Product Officer, Prover

Arne Borälv Prover

Arne Borälv
Chief Strategy Officer, Prover

Inlägget Introducing the Formal Methods (FMs) Guidebook dök först upp på Prover - Engineering a Safer World.

]]>
Railway signaling with formal methods https://www.prover.com/webinar/railway-signaling-with-formal-methods/ Thu, 27 Apr 2023 07:05:51 +0000 https://stage.prover.com/?p=17614 Learn how formal methods can improve the development processes in rail control projects.

Inlägget Railway signaling with formal methods dök först upp på Prover - Engineering a Safer World.

]]>
RECORDED WEBINAR

gunnar.smith

Improving the development process

Railway signaling systems are safety-critical and complex, often with many hardware and software subsystems interacting together to provide the desired functionality and ensure safety. This means that the development processes also tend to become complex, and delivery schedules are often long and difficult to predict.

In this webinar, we look at how formal methods can improve development processes to give more predictable schedules, reduce effort with automation, improve overall quality, and efficiently prove system safety. We focus on how software tools, based on formal methods, can help developers by improving existing processes in smaller steps.

Using the signaling design automation tool Prover iLock, we demonstrate a few different usages of formal methods, that are easy to introduce into existing processes. This includes validation of requirements in generic applications, support in configuring specific applications, and formal verification of high-level safety requirements with visualization to help interpret the results.

Agenda:
  • Benefits of using formal methods

  • Formal method application areas with demonstration: Requirement specifications, configuration data, formal verification with visualization

  • Lessons learned, best practices, and recommendations

  • Questions & answers

Yes please, send me the recording!

Hosts
Gunnar Smith Prover

Gunnar Smith
Chief Product Officer, Prover

Gustav Zickert Prover

Gustav Zickert
Formal Methods Developer, Prover

Inlägget Railway signaling with formal methods dök först upp på Prover - Engineering a Safer World.

]]>
How to develop rail control software with signaling design automation and digital twins https://www.prover.com/guide/how-to-develop-rail-control-software-with-signaling-design-automation-and-digital-twins/ Fri, 23 Dec 2022 13:22:42 +0000 https://stage.prover.com/?p=12227 Learn how signaling design automation and digital twins will help your rail control project deliver on time and budget, illustrated with a real-life example.

Inlägget How to develop rail control software with signaling design automation and digital twins dök först upp på Prover - Engineering a Safer World.

]]>

gunnar.smith

In this guide you will learn:
  • What is Signaling Design Automation

  • How to overcome costly barriers in rail control projects

  • Using Digital Twins in the Specification Process

  • Developing Rail Control Software with above tools

Yes please, send me the guide!

Table of Content

  1. Introduction
  2. Signaling Design Automation and why You Need It
  3. Benefits of Signaling Design Automation
  4. Digital Twins in the Specification Process
  5. Developing Rail Control Software with Digital Twins and SDA
  6. Case study: Roslagsbanan
  7. Recommendations
Introduction

There is an easier route to rail control software development

How to Develop Rail Control Software with Signaling Design Automation and Digital Twins

In the endeavor to develop rail control software that meets demands for efficient rail transportation— both now and in the future— many of today’s infrastructure managers find themselves impeded by a number of frustrating roadblocks. These include long and unpredictable schedules, a general lack of control over systems, and dominant industry issues such as the current oligopoly of system suppliers.

Recognize these challenges?

As overwhelming as they may be, there is a solution that you as an infrastructure manager can use to overcome them and finally take control over your rail control software development projects. That solution is Signaling Design Automation (SDA) and Digital Twins, and they make it easier to procure, develop and maintain your system software while remaining adaptable to future possibilities.

What to expect from this guide

In this guide, we will run through the basics of how you, as an infrastructure manager, can use SDA and Digital Twins to develop rail control software. You will learn about the advantages of using these tools and how to use them in practice to gain the benefits in your software project. Finally, we will put all of our learnings into perspective with a real-life case study example, and then provide you with some recommendations you can move forward with. Let’s begin!

Fill out the form to read the full guide.

Inlägget How to develop rail control software with signaling design automation and digital twins dök först upp på Prover - Engineering a Safer World.

]]>
Modeling rail control systems with digital twins https://www.prover.com/webinar/modeling-rail-control-systems-with-digital-twins/ Mon, 17 Oct 2022 11:46:51 +0000 https://stage.prover.com/?p=13604 In this webinar, we look at how digital twins can be used in modeling rail control systems and present a case from Stockholm Metro.

Inlägget Modeling rail control systems with digital twins dök först upp på Prover - Engineering a Safer World.

]]>
RECORDED WEBINAR

gunnar.smith

Development of a digital twin for Stockholm Metro

Rail control systems are complex, have long life cycles, and often come with a legacy. When replacing, upgrading, and maintaining your system it is important to understand both how the current system works and how you want your future system to work. It is also critical that your supplier shares this understanding.

Creating a digital twin, or model, of your existing system can help you get this understanding, and doing it in a formal way will help formulate a clear and concise requirement specification for the procurement, development, and maintenance of a new system.

In this webinar, we look at how a combination of formal methods, digital twins, and Signaling Design Automation can help with this.

This is illustrated with a demonstration of a digital twin developed for the Stockholm Metro, and we discuss how this digital twin has simplified the preparation for tendering a new traffic management system.

Agenda:
  • What is a digital twin and why you need one
  • Formal models and specifications in a digital twin context
  • Demonstration: Development of a digital twin for Stockholm Metro
  • Lessons learned from the Stockholm Metro project
  • Questions & Answers

Yes please, send me the recording!

Hosts
Gunnar Smith Prover

Gunnar Smith
VP Sales, Prover

Jesper Carlström Prover

Jesper Carlström
Chief Product Officer, Prover

Inlägget Modeling rail control systems with digital twins dök först upp på Prover - Engineering a Safer World.

]]>
Case: Developing digital twins for the Stockholm Metro https://www.prover.com/modeling/case-developing-digital-twins-for-stockholm-metro/ Mon, 11 Jul 2022 07:56:05 +0000 https://www.prover.com/?p=6050 The Stockholm Metro was able to successfully validate the modularity of the proposed system and establish that it is feasible to replace the non-vital relays with a PLC system.

Inlägget Case: Developing digital twins for the Stockholm Metro dök först upp på Prover - Engineering a Safer World.

]]>

When the Stockholm Metro set out to upgrade their rail control system, they contacted us at Prover to assist with the transition.

Stockholm Metro’s system consists of a central traffic management system and a relay-based vital and non-vital signaling system distributed over several relay rooms. The plan is to replace the mechanical control panels used by the operators with a modern computerized traffic management system, as well as to replace the non-vital relays with a distributed PLC solution, and, at least for the time being, leave the vital relays intact.

In order to analyze the existing systems and validate this approach, a digital twin of the system was developed using formal methods. These formal methods included formal specifications with an emphasis on the interface, separation of configuration data and generic requirements, automated simulation-based testing, and formal safety verifications.

CLIENT: Stockholm Metro
LOCATION: Stockholm, Sweden
DATE: 2021-2022

Project goals

In this case, the Stockholm metro had three primary goals. The first was to discover any dependencies that would make it difficult to leave the vital relays untouched.The second was to identify any safety critical functions that are dependent on the existing non-vital relay or control panel design, to include such requirements in the specifications for the new systems. For example, physical wiring may prevent certain commands from being received simultaneously, or safety standards and best practices may have changed since the original system was commissioned. And finally, they wished to test out the concept in order to avoid any surprises that could delay the project and make it more expensive.

PROJECT START

At the start of this project, the Stockholm Metro’s architecture consisted of the following components: 

  • Physical maneuver panel – Push/pull buttons and switches for controls, lamps for indications 
  • Non-vital relays – Interface between panel and interlocking, with additional (non-safety related) logic 

Vital relays – Safety related signaling logic, locking of routes and points, signal aspects

END GOAL

The end goal of the project was a future architecture consisting of: 

  • A computerized traffic management system with an operator interface 
  • A set of PLCs with the same functionality as the current non-vital relays 
  • The vital relays from the original system left intact, interfacing with the PLCs

The solution in 6 steps

  1. Created a digital twin of existing system
  2. Carried out formal verification of the safety of the current system
  3. Automatically generated the PLC application software 
  4. Created a digital twin of the future system
  5. Replaced the model of the PLC with an actual PLC
  6. Replaced the model of the interlocking with the actual relay system

Results

Following this process, the Stockholm Metro was able to successfully validate the modularity of the proposed system and establish that it is feasible to replace the non-vital relays with a PLC system. They were also able to identify a few unexpected details in the existing system. 

Furthermore, the digital twin validation approach simplified the transition to the physical environment relay system–testing with the PLC installed in the field was conducted over the course of a single night. 

In the future, the Stockholm Metro can use the digital twin for preparing tenders, validation and verification, reproducing issues from field error reports/logs, replacing testing in the field, and training and documentation.

Inlägget Case: Developing digital twins for the Stockholm Metro dök först upp på Prover - Engineering a Safer World.

]]>
Developing specifications with digital twins https://www.prover.com/guide/developing-specifications-with-digital-twins/ Mon, 30 May 2022 13:37:36 +0000 https://stage.prover.com/?p=12276 Learn how you, as an infrastructure manager or system buyer, can use formal methods and digital twins to simplify the requirement specification phase and generate the high-quality specifications you need to accomplish your system goals and get your rail control project off to a better start. At the end of the guide, we will put all our learnings in perspective with a real-life example.

Inlägget Developing specifications with digital twins dök först upp på Prover - Engineering a Safer World.

]]>

gunnar.smith

In this guide you will learn:
  • A simplified procurement processes

  • Reducing the risk of misunderstandings and project delays

  • More predictably delivery schedules and costs

  • An efficient validation and verification process

Yes please, send me the guide!

Table of Content

  1. Introduction
  2. The importance of quality specifications
  3. Using digital twins in the tender process
  4. How to develop specifications using digital twins and formal methods
  5. Case study
Introduction

How to get your rail control project off to a better start

Developing Specifications with Digital Twins

Advancing the digital transformation is the key to meeting demands for efficient rail transportation, and one important enabler of this is the uptake of new fundamental technologies such as digital twins. In this guide, we focus on how the specification phase of rail control projects can be improved by using formal methods and digital twins. Getting the specifications right from the start, already at the tendering phase, will help you avoid costly specification missteps and, ultimately, carry out a more successful rail control project.

What’s a digital twin and how does it benefit the rail sector?

A digital twin is essentially a virtual, interactive replica of a real physical system, asset or process, including its real-time characteristics and behaviors. Applied to the railway sector, a digital twin encompasses the entire infrastructure – from stations, rolling stock, and signals, to the coordinating IT systems.

Infrastructure managers as well as remote repair crews and station staff stand to benefit from having a digital twin of a railway. With access to a real-time 3D representation of the entire railway infrastructure, maintenance and repairs can be performed faster, and more proactive decisions can be made to prevent safety hazards and costly mistakes, while improving overall efficiency.

But the digital twin is also immensely beneficial when put to use early on – before a railway’s system has even been specified – to ensure the right system is built in the first place.

Using digital twins to develop better rail control systems

Creating a digital twin at the start of a rail control project, before tendering begins, enables infrastructure managers to formulate and evaluate more precise system requirements and, ultimately, procure better systems at a more reasonable price.

At Prover we recommend developing a digital twin by using a process based on formal methods and design automation. This approach minimizes the effort required for development, and provides efficient tools for the simulation, validation and verification of requirement specifications.

Suppliers can use the digital twin as input for the detailed design, using automation tools for code generation, testing, and verification, and further shortening project schedules and reducing costs. The digital twin can then be used throughout the lifecycle of the rail control system, reducing costs related to upgrades and adding new features during the maintenance phase.

What to expect from this guide

In this guide, we will run through the basics of how you, as an infrastructure manager or system buyer, can use formal methods and digital twins to simplify the requirement specification phase and generate the high-quality specifications you need to accomplish your system goals and get your rail control project off to a better start. Finally, we will put all our learnings in perspective with a real-life example. Let’s begin!

Fill out the form to read the full guide.

Inlägget Developing specifications with digital twins dök först upp på Prover - Engineering a Safer World.

]]>
Developing rail control software with digital twins and signaling design automation https://www.prover.com/webinar/developing-rail-control-software-with-digital-twins-and-signaling-design-automation/ Thu, 05 May 2022 12:25:33 +0000 https://stage.prover.com/?p=13655 How to overcome challenges in delivering rail control software, using a formal development process called Signaling Design Automation.

Inlägget Developing rail control software with digital twins and signaling design automation dök först upp på Prover - Engineering a Safer World.

]]>
RECORDED WEBINAR

gunnar.smith

A smoother development process for rail control software

In the delivery of rail control projects, a key challenge is to fully understand the customer requirements and to deliver a system that meets these requirements in a timely manner. Moreover, it must be possible to maintain and upgrade the system throughout its lifetime, which is often expected to be at least 20 years.

In this webinar, we focus on how these challenges can be addressed in the delivery of rail control software, using a formal development process we call Signaling Design Automation (SDA).

The development effort is focused on the requirement phase and the design of a digital twin. The development can then be automated with tools for code generation, simulation-based testing, and formal safety verification.

The life cycle aspects are addressed already in the specifications, by introducing open interfaces and standard components, which reduces the costs related to obsolescence.

Agenda:
  • The concept of SDA and why we need it

  • Benefits for Infrastructure Managers and suppliers in using SDA
  • Using digital twins in developing and maintaining requirement specifications
  • A demonstration of SDA with Prover iLock
  • Recommendations and considerations when introducing SDA

Yes please, send me the recording!

Hosts
Gunnar Smith Prover

Gunnar Smith
Chief Product Officer, Prover

Fei Niu Prover

Fei Niu
Senior Developer, Prover

Inlägget Developing rail control software with digital twins and signaling design automation dök först upp på Prover - Engineering a Safer World.

]]>
Successful rail control projects with signaling design automation https://www.prover.com/guide/successful-rail-control-projects-with-signaling-design-automation/ Fri, 22 Apr 2022 14:17:16 +0000 https://stage.prover.com/?p=12333 At Prover, we’ve found the formula for a successful rail control project to be threefold: focus on the requirement specifications, use automation to develop the systems, and apply formal and automated methods to prove that requirements and safety are fulfilled. In this guide, we will walk you through how to use this formula - called Signaling Design Automation.

Inlägget Successful rail control projects with signaling design automation dök först upp på Prover - Engineering a Safer World.

]]>

gunnar.smith

In this guide you will learn:
  • Methods for safety verification

  • Obtaining the system you need at the best price

  • Overcoming common challenges

  • 4 steps to a successful rail control project

Yes please, send me the guide!

Table of Content

  1. Introduction
  2. Barriers to success
  3. Signaling design automation
  4. Formal specifications with digital twins
  5. Verification and safety certification
  6. Maintenance after revenue service start
Introduction

The demand for rail transportation capacity is growing, and the industry needs to step up

Successful rail control projects with SDA

If you want to enable safe and reliable rail transportation while making the best use of available infrastructure, implementing efficient rail control and signaling solutions is an essential piece of the puzzle.

The development of these software-based systems is critical in rail transport projects. Delays in delivery, acceptance and safety approvals add up to a highly negative impact on costs and schedules.

There is an obvious need to simplify the rail control solution development process and implement solutions that supply the industry with the tools and processes needed to meet the requirements and expectations of end customers.

How do you do that?

At Prover, we’ve found the formula for a successful rail control project to be threefold: focus on the requirement specifications, use automation to develop the systems, and apply formal and automated methods to prove that requirements and safety are fulfilled.

Not only does this formula generate high-quality software and guaranteed safety, but it can cut both your project time and costs by 50%. Together with more standardization, this paves the way for increased competition and reduced life cycle costs. And, ultimately, a better customer experience with increased traffic capacity and fewer delays.

In this guide, we will walk you through how to use this formula, which is called Signaling Design Automation, to overcome the most common barriers in rail control projects and work smarter to get on the proven track to success.

Fill out the form to read the full guide.

Inlägget Successful rail control projects with signaling design automation dök först upp på Prover - Engineering a Safer World.

]]>