The menTCS Approach
menTCS - the MEN Train Control System is the first computer system ever, in the history of the railway industry, that is based on defined open standards for hardware, software and communication. Modularity makes it configurable for every control function inside and outside the train – and scalable to any required safety level from SIL 2 up to SIL 4.
The use of digital technology has transformed the way modern railways work today. To meet the challenges of railway digitalization, embedded computer systems must be built around open standards like EN 50155, especially for safety-related functions in order to make rail transport means for passengers and freight sustainably competitive and safe. menTCS is application-ready and allows the immediate start of the application development, giving the user complete control over the functionality of the entire system. The benefits include:
- Open safe platform with SIL 4 from the start
- One platform for wayside and rolling stock
- Reduced development cost and obsolescence risk
- Standard open source software interfaces for flexible and easy installation of applications
- No proprietary end application for non-restrictive use
- Open communication extensions allow integration in all existing railway applications
- Future-proof solution providing the same functionality without time limitation
- Open standards ensure independence of single supplier
- Pre-certified hardware for fast time-to-market and low certification risk
menTCS supports vital safety-critical railway application requirements. For all non-vital train IT applications, please visit the menRDC information page.
menTCS Controller Components
- SIL 4 modular Train Control System menTCS
- Certified safe CPU board with 3 CPUs
- Certified safe I/O boards
- QNX safe operating system available
- Certification packages available
- Extensible by distributed safe I/O boxes connected via real-time Ethernet
- Optional MVB, RS232, RS422, RS485, CAN, GPS
- Compact 40 HP application-ready system
- Rack-mounted or wall-mounted
- SIL 4 modular Train Control System menTCS
- Certified safe CPU board with 3 CPUs
- Certified safe I/O boards
- QNX safe operating system available
- Certification packages available
- Optional MVB, RS232, RS422, RS485, CAN, GPS
- IP65 / NEMA-4 protected housing
- For rolling stock and wayside applications
- AAR S-9401 compliant housing concept - functional product only available in project context
- SIL 4 modular Train Control System menTCS
- Certified safe I/O boards
- QNX safe operating system available
- Certification packages available
- Distributed safe I/O and controller boxes connected via real-time Ethernet
- Compact 40 HP housing for remote locations
- Full EN 50155 compliance
- Rack-mounted or wall-mounted
- 2x Intel Atom E6xx, 512 MB DDR2 RAM (each) for onboard dual redundancy
- 1x Intel Atom E6xx, 1 GB DDR2 for I/O
- Independent supervisors for each block
- Fail-safe board architecture
- Clustering of two F75P to raise availability
- Event logging
- Certifiable up to SIL 4 (with report from TÜV SÜD)
- SIL 4 certification packages available for hardware and software (QNX)
- Developed according to EN 50129, EN 50128 and IEC 61508
- 8 digital outputs, 24 V, 48 V, 72 V, 96 V, 110 V
- 300 mA per channel, 1200 mA total
- High-side switch outputs (load to ground)
- Optical isolation from other cards
- Fail-safe board architecture
- Certifiable up to SIL 4 (with report from TÜV SÜD)
- Developed acc. to EN 50129, EN 50128, IEC 61508
- Extensive supervision functions
- EN 50155 fully compliant
- 16 digital inputs, 24 V, 48 V, 72 V, 96 V, 110 V
- 1 to 10 mA, pulsed
- Optical isolation from other cards
- Fail-safe board architecture
- Certifiable up to SIL 4 (with report from TÜV SÜD)
- Developed acc. to EN 50129, EN 50128, IEC 61508
- Extensive supervision functions
- EN 50155 fully compliant
- -40°C to +85°C (qualified components)
- Four frequency inputs, four signals each
- Quadrature encoded signal input, 0.1 Hz to 30 kHz
- Voltage supply of connected sensors
- Optical isolation from other cards
- Fail-safe board architecture
- Certifiable up to SIL 4 (with report from TÜV SÜD)
- Developed acc. to EN 50129, EN 50128, IEC 61508
- Extensive supervision functions
- EN 50155 fully compliant
- 8 digital outputs, 24 V, 48 V, 72 V, 96 V, 110 V
- 300 mA per channel, 1200 mA total
- Low-side switch outputs (load to supply voltage)
- Optical isolation from other cards
- Fail-safe board architecture
- Certifiable up to SIL 4 (with report from TÜV SÜD)
- Developed acc. to EN 50129, EN 50128, IEC 61508
- Extensive supervision functions
- EN 50155 fully compliant
The menTCS Modular System
General Information
menTCS is an open and modular railway computer platform based exclusively on standard hardware and software. It is certifiable up to SIL 4 in its single parts and complies with the EN 50155 and EN 50125-3 / EN 50121-4 railway standards.
The train control system is designed to operate in rolling-stock applications such as Automatic Train Control (ATO) and Automatic Train Protection (ATP) as well as in wayside applications like interlocking systems. The modular Train Control System from MEN consists of the safe controller, the safe I/O functions and the communication interfaces to the "outside" world.
Its modular configuration enables the menTCS system to communicate with other train systems like service or diagnosis units via any type of wired or wireless interface. Additionally, fieldbus interfaces can be implemented to connect into other networks like MVB, CAN, Profinet etc. This makes it easy to integrate into a TCN network as well as into regionally different Train Control Systems like PTC, ETCS, CTCS, ATCS or Klub-U.
Let MEN design your individual safe computer system based on our long-standing experience in the realization of mission-critical electronics.
Systems with Single Building Blocks
The heart of the modular MEN Train Control System is the menTCS controller which delivers state-of-the art computing performance based on x86 PC technology. The menTCS controller consists of a safe part and what is called an “unsafe” (general purpose) part. The menTCS controller can be used as a standalone device and in combination with up to 63 remote I/O boxes.
MH50C - menTCS Safe System Controller SIL 2 to SIL 4
KT8 - menTCS Safe Remote I/O Box SIL 2 to SIL 4
Downloads & Media
Downloads (PDF)
Brochure: menTCS – MEN Train Control System
Brochure: Solutions for Rail and Public Transport
Presentation: menTCS Family Overview
Overview Chart: menTCS Products
Case Study: MEN and QNX Software Systems (Log in)
Application Note: menTCS Prototype (on request)
menTCS MEN Train Control System - Frequently Asked Questions (log in)
menTCS MEN Train Control System - Detailed Questions & Answers (on request)
White Paper: Smart Railway Solutions with SIL-Level COTS Components