Division 6.2.1 APPLICATION OF MODULES

United Kingdom

The adjudicating entity or its authorised representative established within the Community may choose for the verification procedure of the on-board assembly of the control-command subsystem either:

the type-examination procedure (module SB) indicated in Annex E to this TSI for the design and development phase in combination with either the production quality assurance procedure (module SD) indicated in Annex E to this TSI for the production phase or the product verification procedure (module SF) indicated in Annex E to this TSI, or
the full quality assurance with design examination procedure (module SH2^f1) indicated in Annex E to this TSI.

For the verification procedure of the trackside assembly of the control-command subsystem, the adjudicating entity or its authorised representative established within the Community may choose either:

the unit verification procedure (module SG) indicated in Annex E to this TSI, or
the type-examination procedure (module SB) indicated in Annex E to this TSI for the design and development phase in combination with either the production quality assurance procedure (module SD) indicated in Annex E to this TSI for the production phase or the product verification procedure (module SF) indicated in Annex E to this TSI, or
the full quality assurance with design examination procedure (module SH2) indicated in Annex E to this TSI.

The module SH2 may be chosen only where all activities contributing to the subsystem project to be verified (design, manufacturing, assembling, installation) are subject to a quality system for design, production, final product inspection and testing, approved and surveyed by a notified body.

Table 6.1

Control-command verification requirements for on-board assembly

Number	Description	Remarks	CC interfaces	Interfacing TSI subsystems	Characteristics to be assessed by reference to Annex A unless otherwise specified
1	2	2a	3	4	5
1	Vigilance supervision	Internal as a function in on-board control-command or external in RS subsystem	If vigilance supervision is external, then optional interface to ERTMS/ETCS on-board may exist	Rolling stock (brakes)	0, 1, 2, 3, 4a, 10
2	Train integrity supervision	In the case, where the train is configured for level 3, the train integrity supervision function must be supported via detection equipment rolling stock-side	ERTMS/ETCS on-board	Rolling stock	0, 1, 2, 3, 4a, 5, 17
3	Train detection	Requirements on rolling stock, because of e.g. track circuits and axle counters		Rolling stock (train detection characteristics)	4b, 16
4	Key management	Security policy for key management	(a) ERTMS/ETCS trackside (b) ERTMS/ETCS on-board		15
5	Design, integration and validation of the assembly	1.. Engineering rules 2.. Functional integration test Tests to confirm correct functional operation of inter-working of a new combination of interoperability constituents Tests in the real configuration The notified body shall verify that the integration test requirements (issued by the Member State) for Annex B systems have been met The test includes the ability of the down-loading tool to read and display the safety data recorded Includes absence of unsafe interaction between interoperability constituents (possibly due to national add-ons) 3.. The notified body shall insure the completeness of the safety approval process including safety case	All those implemented	Rolling stock All those implemented	34 32 + integration test requirements for a specific Annex B system must be available in public domain when that system is put on the market for integration into an on-board assembly. 1, 2

Number	Description	Remarks	CC interfaces	Interfacing TSI subsystems	Characteristics to be assessed by reference to Annex A unless otherwise specified
Table 6.2
Control-command verification requirements for trackside assembly
1	2	2a	3	4	5
1	ERTMS/GSM-R trackside		(a) ERTMS/GSM-R on-board (b) ERTMS/ETCS trackside		0, 12c, 14a,
2	Train detection, including interference requirements from conducted interference	Trackside requirements: 1.. lines with unknown detection/interference characteristics cannot receive a derogation, 2.. they must be upgraded before they can be declared interoperable, 3.. a notified body shall verify that nominated trains meet the requirements of a derogation		Rolling stock (train detection characteristics)	4b, 16
3	Key management	Security policy for key management	ERTMS/ETCS trackside ERTMS/ETCS on-board		15
4	Design, integration and validation of the assembly	1.. Engineering rules 2.. Functional integration test Tests to confirm correct functional operation of interworking of a new combination of interoperability constituents Tests in the real configuration The notified body shall verify that the integration test requirements (issued by the Member State) for Annex B systems have been met Includes absence of unsafe interaction between interoperability constituents (possibly due to national add-ons) 3.. The notified body shall insure the completeness of the safety approval process including safety case.	All those implemented	All those implemented	34 33 1, 2

Annotations

Footnotes

f1: Module SH2 can be applied only when a sufficient degree of confidence in the ERTMS technologies exists through return of experience from commercial installations.

Notes on Division 6.2

Textual amendments

F1: Deleted by Commission Decision of 23 July 2012 amending Decisions 2002/731/EC, 2002/732/EC, 2002/733/EC, 2002/735/EC and 2006/66/EC and repealing Decision 2002/730/EC concerning technical specifications for interoperability (notified under document C(2012) 4982) (Text with EEA relevance) (2012/462/EU).
F2: Substituted by Commission Decision of 23 July 2012 amending Decisions 2002/731/EC, 2002/732/EC, 2002/733/EC, 2002/735/EC and 2006/66/EC and repealing Decision 2002/730/EC concerning technical specifications for interoperability (notified under document C(2012) 4982) (Text with EEA relevance) (2012/462/EU).