Physical Address
304 North Cardinal St.
Dorchester Center, MA 02124
IEC 62845 — Railway Applications: Radio Remote Control System of Traction Vehicles for Shunting
Standardized Wireless Control for Safe Locomotive Shunting Operations
IEC 62845:2015 establishes the requirements for radio remote control (RRC) systems used to control traction vehicles (locomotives) during shunting operations. Shunting — the process of assembling, disassembling, and moving rail vehicles within a yard or station — has traditionally required a driver in the cab and additional ground staff for coupling and signaling. Radio remote control eliminates the need for a dedicated driver in the cab by allowing a single operator on the ground to control locomotive movement wirelessly, improving both operational efficiency and safety by placing the operator where they have the best visual contact.
The standard applies to RRC systems where the operator carries a portable control unit that communicates via radio with an onboard receiver on the traction vehicle. The system must ensure that any loss of communication results in an automatic safe state (typically emergency brake application).
System Architecture and Functional Requirements
An IEC 62845-compliant RRC system comprises three primary elements: the operator control unit (OCU) — a portable transmitter with joystick, switches, and status display; the onboard unit (OBU) mounted on the traction vehicle that receives commands and interfaces with the locomotive control circuits; and the radio frequency (RF) communication link between them. The standard mandates a command/response protocol with cyclic redundancy checking (CRC) to detect transmission errors. Each command from the OCU must be acknowledged by the OBU, and the OCU must verify the acknowledgment before considering the command executed.
| Parameter | Requirement | Remarks |
|---|---|---|
| Communication range | ≥ 100 m (typical), defined by application | May extend to several km for yard operations |
| Latency | ≤ 500 ms command-to-execution | Critical for safe shunting response |
| Safety integrity | SIL 2 or equivalent per IEC 61508 | Depending on national regulations |
| Operating frequency | Nationally licensed ISM bands | Typically 434 MHz, 868 MHz, or 2.4 GHz |
| Lost communication timeout | ≤ 3 s before safe state | Emergency brake application |
Functional requirements include directional control (forward/reverse), throttle notch selection, brake application (including emergency brake), horn activation, and sander control. The OCU must provide continuous visual and/or audible feedback of system status, including battery level, radio link quality, and any fault conditions.
Safety Communication Protocol
The standard defines a layered safety approach. At the physical layer, the radio link must use a modulation scheme with adequate interference rejection — frequency hopping spread spectrum (FHSS) or digital narrowband modulation are common choices. At the data link layer, each message frame includes a preamble, synchronization word, command/response payload, and CRC. The safety layer implements a “vital” communication principle: any corrupted, delayed, or out-of-sequence message is discarded, and if no valid message is received within the defined timeout (typically 3 seconds), the OBU must autonomously initiate a safe shutdown sequence.
A key safety requirement is that a single fault in the RRC system must not lead to a hazardous condition. This means the OCU must have at least two independent processor channels that cross-compare commands before transmission, and the OBU must verify received commands through diverse decoding paths. Single-component failures must be detected and result in a safe-state transition.
Environmental and EMC Requirements
Railway environments impose severe conditions on portable electronic equipment. IEC 62845 specifies operating temperature ranges from −20 °C to +55 °C (with extended ranges for extreme climates), ingress protection of at least IP54 for the OCU (dust and splash water), and resistance to vibration per IEC 61373 (railway equipment shock and vibration). The EMC requirements follow IEC 62236 (railway EMC) standards, with particular attention to radiated emissions that could interfere with signaling systems, and immunity to the high electromagnetic fields present near traction power equipment.
For operators working in rain or snow, the IP54 requirement means the OCU can be used in most weather conditions without additional protective enclosures. However, in heavy rain or dusty environments, an IP65-rated unit or protective cover is recommended for extended reliability.
Engineering Design Insights
Implementing an IEC 62845-compliant RRC system requires careful antenna placement on both the OCU and the locomotive. The locomotive’s metal structure creates a Faraday cage effect that can attenuate radio signals significantly. Designers typically position the OBU antenna on the locomotive roof with a ground-plane counterpoise, while the OCU uses a half-wave whip or integrated planar antenna. Battery life of the OCU is another critical factor — the standard recommends at least one full shift (8 hours) of continuous operation, requiring careful power management in the portable unit.
Frequently Asked Questions
Q1: Can the same RRC system be used for main-line train operation?
No. IEC 62845 specifically addresses shunting (yard) operations. Main-line train control falls under different standards such as ERTMS/ETCS or national train control systems, which have additional requirements for speed supervision, ATP (Automatic Train Protection), and cab signaling.
No. IEC 62845 specifically addresses shunting (yard) operations. Main-line train control falls under different standards such as ERTMS/ETCS or national train control systems, which have additional requirements for speed supervision, ATP (Automatic Train Protection), and cab signaling.
Q2: What happens if two OCUs try to control the same locomotive?
The standard requires that each OBU be paired with exactly one active OCU at a time. A pairing/locking procedure prevents multiple OCUs from simultaneously controlling the same vehicle. Typically, the OBU accepts commands from only the OCU to which it has been logically coupled through a commissioning procedure.
The standard requires that each OBU be paired with exactly one active OCU at a time. A pairing/locking procedure prevents multiple OCUs from simultaneously controlling the same vehicle. Typically, the OBU accepts commands from only the OCU to which it has been logically coupled through a commissioning procedure.
Q3: How is the emergency stop function implemented?
The emergency stop must be implemented by both a dedicated physical button (red mushroom-head pushbutton) on the OCU and autonomously by the OBU upon loss of communication. The emergency stop command must be transmitted with higher priority than regular commands and must directly trigger the locomotive’s emergency brake application, bypassing any software-based slowdown logic.
The emergency stop must be implemented by both a dedicated physical button (red mushroom-head pushbutton) on the OCU and autonomously by the OBU upon loss of communication. The emergency stop command must be transmitted with higher priority than regular commands and must directly trigger the locomotive’s emergency brake application, bypassing any software-based slowdown logic.
Q4: Are there cybersecurity requirements in the standard?
While the 2015 edition does not mandate encryption, it requires that the RRC system have a unique identification code per system to prevent accidental cross-control between adjacent yards. For yards where intentional interference or spoofing is a concern, additional measures such as frequency hopping, encryption (AES-128 or better), and rolling code authentication are recommended as supplementary protections.
While the 2015 edition does not mandate encryption, it requires that the RRC system have a unique identification code per system to prevent accidental cross-control between adjacent yards. For yards where intentional interference or spoofing is a concern, additional measures such as frequency hopping, encryption (AES-128 or better), and rolling code authentication are recommended as supplementary protections.
