Digital Interlocking

Click for larger image

This application drawing illustrates a digital interlocking system and its connectivity to the management system and data center services. All connections are redundant, and Ethernet connections allow for unlimited distances. Power supply for local hardware is decentralized, eliminating the need for central peak power supplies.

The connections between network components are encrypted. Safety calculations are performed in the data center, not on-site, which is a significant shift from traditional signalling. Due to its digital connection to the data center, the control room can be located anywhere in the world.

When safety meets security in railway digitalisation

As the railway industry embraces digitalisation, Ethernet connectivity is extended to the very edge of the network. While this evolution enhances operational capabilities, it also introduces new cybersecurity risks. It’s essential to distinguish between two critical concepts: safety, which protects against unintentional accidents, and security, which defends against intentional threats.

Westermo believes these layers must remain distinct yet complementary. The safety layer ensures reliable, unaltered data transmission—vital for protecting lives. Above it sits the security layer, which is dynamic and frequently updated to counter evolving threats. This layered approach allows for continuous security improvements without disrupting certified safety functions or requiring new safety approvals.

To support this architecture, Westermo has implemented a robust patch management process. Through our dedicated service portal, we streamline vulnerability detection, firmware validation, and secure deployment. Updates are rigorously tested in homologated environments before being rolled out to operational systems, ensuring both safety and security remain uncompromised.