Train traffic control inspection device, train traffic control inspection method and program

A train traffic control inspection method of verifying an operation of a train traffic control system including an interlock system and a traffic control system, the train traffic control inspection method comprising:

• acquiring railroad topology information indicating a configuration of a railroad network in which a plurality of blocks are connected and which includes one or more branches, travel path information specifying a path of a train which travels in the railroad network on a combination of one or more routes for each train, route setting information in which conditions to be satisfied when a route request for reserving a path on which a train will travel is given are defined for each route, and interlock system operation information in which safe operation logics of the interlock system are defined;
• generating a state transition model for each of the train, the branch, the interlock system, and the traffic control system based on the acquired information;
• and
• determining whether a predetermined requirement is satisfied by each combination of states which is able to occur while transiting the present state in either the train, the branch, the interlocking system or the traffic control system to other states depending on the state transition caused in either the train, the branch, the interlocking system or the traffic control system based on the state transition models.

A program causing a computer of a train traffic control inspection device, which verifies an operation of a train traffic control system including an interlock system and a traffic control system, to serve as:

• information acquiring means configured to acquire railroad topology information indicating a configuration of a railroad network in which a plurality of blocks are connected and which includes one or more branches, travel path information specifying a path of a train which travels in the railroad network on a combination of one or more routes for each train, route setting information in which conditions to be satisfied when a route request for reserving a path on which a train will travel is given are defined for each route, and interlock system operation information in which safe operation logics of the interlock system are defined;
• state transition model generating means configured to generate a state transition model for each of the train, the branch, the interlock system, and the traffic control system based on the information acquired by the information acquiring unit;
• and
• state transition model inspecting means configured to determine whether a predetermined requirement is satisfied by each combination of states which is able to occur while transiting the present state in either the train, the branch, the interlocking system or the traffic control system to other states depending on the state transition caused in either the train, the branch, the interlocking system or the traffic control system based on the state transition models.