The method of claim 1, wherein the end of train unit is disconnected from a train when the first wireless message is transmitted.

A communications system for a train comprising: a head of train device located near a front of a train; an end of train (EOT) unit mounted on a rear of a train, the EOT unit including a transducer connectable for fluid communication with an air brake pipe of the train, the EOT unit further including an end-of-train marker light, the EOT unit further including a GPS receiver, the EOT unit being configured for wireless communication with the head of train device; an EOT unit monitoring station located off the train, the EOT unit monitoring station being configured for wireless communication with the end of train device; and a central station located off the train and connected to the EOT unit monitoring station via a land based communication system; wherein the EOT unit is configured to transmit wirelessly periodic messages to the head of train device, the periodic messages including a brake pipe pressure measured by the transducer; wherein the EOT unit is further configured to transmit wirelessly a location message including a location of the EOT unit to the EOT unit monitoring station, the location being based on information from the GPS receiver; and wherein the EOT unit monitoring station is configured to transmit the location of the EOT unit to the central station. view more

A method for controlling a train, the method comprising: obtaining a position of the train from a positioning system located on the train; identifying a configurable device in a database located on the train as a next configurable device the train will approach, the database including position information for a plurality of configurable devices, the database further including an identifier for each of the configurable devices; determining a proximity of the train to the next configurable device; comparing the proximity to a threshold; transmitting an interrogation message to the next configurable device when the proximity is below a threshold; receiving a response to the interrogation message, the response including an identifier associated with a configurable device and a configuration of the configurable device; allowing the train to pass the configurable device if the response is received within a first period of time, the identifier included in the response matches the identifier associated with the configurable device of interest, and the configuration included in the response is acceptable; and taking corrective action otherwise. view more

The system of claim 1, further comprising: a positioning system, the positioning system being in communications with the control unit and being configured to provide position information to the control unit; and a database, the database including a plurality of locations for a plurality of configurable devices; wherein the control unit is further configured to perform the steps of identifying a configurable device in the database which is a next device which the train will pass based on information from the positioning system; and obtaining an identifier from the database associated with the device identified in the identifying step. view more

A control system for a railway vital application system, comprising: a first controller having an external bilateral communications interface capable of sending and receiving a vital systems message within a railway vital application system, the message including a security code and vital data; a second controller having an external communications interface capable of receiving a vital systems message, but incapable of sending a vital systems message that is generated within the second controller, the second controller having a security code generator; and an inter-controller communications pathway coupling the first and second controllers; wherein the first and second controllers respectively receive an input vital systems message including input vital systems data and an input security code, verify the input message integrity and generate output vital systems data, the second controller generates an output security code and sends it to the first controller, and the first controller sends an output vital systems message including the output vital systems data and the second controller output security code for use within the railway vital application system. view more

A control system for a railway safety critical application system, comprising: at least one controller executing first and second tasks; the first task having an external bilateral communications interface capable of sending and receiving a safety critical systems message within a railway safety critical application system, the message including a security code and safety critical data; the second task having an external communications interface capable of receiving a safety critical systems message, but incapable of sending a safety critical systems message that is generated within the second task, the second task having a security code generator; and an inter-task communications pathway coupling the first and second tasks; wherein the first and second tasks respectively receive an input safety critical systems message including input safety critical systems data and an input security code, verify the input message integrity and generate output safety critical systems data, the second task generates an output security code and sends it to the first task, and the first task sends an output safety critical systems message including the output safety critical systems data and the second task output security code for use within the railway safety critical application system. view more