<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Publishing DTD v1.3 20210610//EN" "JATS-journalpublishing1-3.dtd">
<article article-type="research-article" dtd-version="1.3" xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xml:lang="ru"><front><journal-meta><journal-id journal-id-type="publisher-id">sustain</journal-id><journal-title-group><journal-title xml:lang="ru">Надежность</journal-title><trans-title-group xml:lang="en"><trans-title>Dependability</trans-title></trans-title-group></journal-title-group><issn pub-type="ppub">1729-2646</issn><issn pub-type="epub">2500-3909</issn><publisher><publisher-name>RAMS Journal Limited liability company</publisher-name></publisher></journal-meta><article-meta><article-id pub-id-type="doi">10.21683/1729-2646-2021-21-1-38-44</article-id><article-id custom-type="elpub" pub-id-type="custom">sustain-407</article-id><article-categories><subj-group subj-group-type="heading"><subject>Research Article</subject></subj-group><subj-group subj-group-type="section-heading" xml:lang="ru"><subject>ФУНКЦИОНАЛЬНАЯ БЕЗОПАСНОСТЬ. ТЕОРИЯ И ПРАКТИКА</subject></subj-group><subj-group subj-group-type="section-heading" xml:lang="en"><subject>FUNCTIONAL SAFETY. THE THEORY AND PRACTICE</subject></subj-group></article-categories><title-group><article-title>О функциональной безопасности сложной технической системы управления с цифровыми двойниками</article-title><trans-title-group xml:lang="en"><trans-title>On the functional safety of a complex technical control system with digital twins</trans-title></trans-title-group></title-group><contrib-group><contrib contrib-type="author" corresp="yes"><name-alternatives><name name-style="eastern" xml:lang="ru"><surname>Шубинский</surname><given-names>И. Б.</given-names></name><name name-style="western" xml:lang="en"><surname>Shubinsky</surname><given-names>I. B.</given-names></name></name-alternatives><bio xml:lang="ru"><p>Игорь Борисович Шубинский – доктор технических наук, профессор, заместитель руководителя НТК </p><p>ул. Нижегородская, д. 27, стр.1, Москва</p><p> </p></bio><bio xml:lang="en"><p>Igor B. Shubinsky, Doctor of Engineering, Professor, Deputy Director of Integrated Research and Development Unit</p><p>27, bldg 1 Nizhegorodskaya St., 109029, Moscow</p><p> </p></bio><email xlink:type="simple">igor-shubinsky@yandex.ru</email><xref ref-type="aff" rid="aff-1"/></contrib><contrib contrib-type="author" corresp="yes"><name-alternatives><name name-style="eastern" xml:lang="ru"><surname>Шебе</surname><given-names>Хендрик</given-names></name><name name-style="western" xml:lang="en"><surname>Schabe</surname><given-names>Hendrik</given-names></name></name-alternatives><bio xml:lang="ru"><p>Хендрик Шебе – доктор физико-математических наук, заведующий отделом анализа рисков и опасностей</p><p>Кельн</p></bio><bio xml:lang="en"><p>Hendrik Schäbe, Dr. rer. nat. habil., Head of Risk and Hazard Analysis</p><p>Cologne</p><p> </p></bio><email xlink:type="simple">schaebe@de.tuv.com</email><xref ref-type="aff" rid="aff-2"/></contrib><contrib contrib-type="author" corresp="yes"><name-alternatives><name name-style="eastern" xml:lang="ru"><surname>Розенберг</surname><given-names>Е. Н.</given-names></name><name name-style="western" xml:lang="en"><surname>Rozenberg</surname><given-names>E. N.</given-names></name></name-alternatives><bio xml:lang="ru"><p>Ефим Наумович Розенберг – профессор, доктор технических наук, первый заместитель Генерального директора </p><p>ул. Нижегородская, д. 27, стр.1, Москва</p></bio><bio xml:lang="en"><p>Efim N. Rozenberg, Professor, Doctor of Engineering, First Deputy Director General</p><p>27, bldg 1 Nizhegorodskaya St., 109029, Moscow</p></bio><email xlink:type="simple">info@vniias.ru</email><xref ref-type="aff" rid="aff-1"/></contrib></contrib-group><aff-alternatives id="aff-1"><aff xml:lang="ru"><institution>АО «НИИАС»</institution><country>Россия</country></aff><aff xml:lang="en"><institution>JSC NIIAS</institution><country>Russian Federation</country></aff></aff-alternatives><aff-alternatives id="aff-2"><aff xml:lang="ru"><institution>TÜV Rheinland InterTraffic</institution><country>Германия</country></aff><aff xml:lang="en"><institution>TÜV Rheinland InterTraffic</institution><country>Germany</country></aff></aff-alternatives><pub-date pub-type="collection"><year>2021</year></pub-date><pub-date pub-type="epub"><day>24</day><month>03</month><year>2021</year></pub-date><volume>21</volume><issue>1</issue><fpage>38</fpage><lpage>44</lpage><permissions><copyright-statement>Copyright &amp;#x00A9; Шубинский И.Б., Шебе Х., Розенберг Е.Н., 2021</copyright-statement><copyright-year>2021</copyright-year><copyright-holder xml:lang="ru">Шубинский И.Б., Шебе Х., Розенберг Е.Н.</copyright-holder><copyright-holder xml:lang="en">Shubinsky I.B., Schabe H., Rozenberg E.N.</copyright-holder><license xml:lang="ru" license-type="creative-commons-attribution" xlink:href="https://creativecommons.org/licenses/by/4.0/" xlink:type="simple"><license-p>Данная работа распространяется под лицензией Creative Commons Attribution 4.0.</license-p></license><license xml:lang="en" license-type="creative-commons-attribution" xlink:href="https://creativecommons.org/licenses/by/4.0/" xlink:type="simple"><license-p>This work is licensed under a Creative Commons Attribution 4.0 License.</license-p></license></permissions><self-uri xlink:href="https://www.dependability.ru/jour/article/view/407">https://www.dependability.ru/jour/article/view/407</self-uri><abstract><p>Цель данной статьи заключается в оценке преимуществ применения технологии цифровых двойников по сравнению со стандартными подходами построения безопасносй двухканальной системы. </p><sec><title>Методы</title><p>Методы. Система описывается с помощью Марковской модели. Эта модель позволяет определить количественные характеристики безопасности при наличии в системе защитных отказов. </p></sec><sec><title>Результаты</title><p>Результаты. Выведены основные количественные показатели безопасности системы как среднее время до опасного отказа и среднее время до защитного отказа, а также количественные соотношения основных и дополнительных затрат для партии продукции. </p></sec><sec><title>Заключение</title><p>Заключение. Преобразование исходного объекта в систему с цифровыми двойниками позволяет значительно снизить интенсивность опасных отказов. Данный эффект может быть получен не только с помощью технологии цифровых двойников, но и вследствие переводов системы в состояния защитных отказов при каждом событии несовпадения результатов работы исходного объекта и/или цифровых двойников. Установлено, что среднее время до защитного отказа системы при этих условиях не меньше среднего времени до отказа исходного объекта. Это означает, что при достижении высокой эффективности повышения безопасности есть возможность сохранить надежность системы на уровне не ниже уровня надежности исходного объекта. Введение в состав системы цифровых двойников – это новый, еще не апробированный подход к обеспечению безопасности системы. Решение о целесообразности дополнительных затрат принимают совместно заказчик и разработчик системы. При этом надо учитывать, что при большой партии изготавливаемых технических систем нивелируется влияние дополнительных затрат и сохраняется эффект значительного повышения безопасности  систем.</p></sec></abstract><trans-abstract xml:lang="en"><p>The Aim of this paper is to evaluate the advantages of digital twin technology as compared with the conventional approaches to the design of a vital two-channel system. </p><sec><title>Methods</title><p>Methods. The system is described with a Markovian model. This model allows defining the quantitative safety characteristics if the system is affected by right-side failures. </p></sec><sec><title>Results</title><p>Results. The system’s primary quantitative safety indicators were identified as the mean time to wrong-side failure and mean time to right-side failure along with the quantitative relations of the prime and additional costs for a batch of products. </p></sec><sec><title>Conclusion</title><p>Conclusion. Transforming the initial item into a system with digital twins allows significantly reducing the rate of wrong-side failures. This effect may be obtained not only with the use of digital twins, but also as the result of the system transitioning into the state of right-side failure in each event of discrepancy betwin the initial item and/or the digital twins. It has been established that the mean time to right-side failure under such conditions is not less than the mean time to failure of the initial item. That means that highly efficient measures for safety improvement allow maintaining the system dependability at a level not lower than that of the initial item. The introduction of digital twins into a system is a new, not yet tested way of ensuring system safety. The decision on the benefits of additional costs is taken by the customer and system developer together. At the same time, it must be taken into consideration that in case of large batches of manufactured technical systems, the effect of additional costs is reduced and the effect of significantly improved safety is maintained.</p></sec></trans-abstract><kwd-group xml:lang="ru"><kwd>цифровой двойник</kwd><kwd>функциональная безопасность</kwd><kwd>система управления</kwd></kwd-group><kwd-group xml:lang="en"><kwd>digital twin</kwd><kwd>functional safety</kwd><kwd>control system</kwd></kwd-group></article-meta></front><back><ref-list><title>References</title><ref id="cit1"><label>1</label><citation-alternatives><mixed-citation xml:lang="ru">IEC 61508, Functional safety of electrical/electronic/ programmable electronic safety-related systems, 2010.</mixed-citation><mixed-citation xml:lang="en">IEC 61508, Functional safety of electrical/electronic/ programmable electronic safety-related systems, 2010.</mixed-citation></citation-alternatives></ref><ref id="cit2"><label>2</label><citation-alternatives><mixed-citation xml:lang="ru">EN 50128, Railway applications – Communication, signalling and processing systems – Software for railway control and protection systems, 2011.</mixed-citation><mixed-citation xml:lang="en">EN 50128, Railway applications – Communication, signalling and processing systems – Software for railway control and protection systems; 2011.</mixed-citation></citation-alternatives></ref><ref id="cit3"><label>3</label><citation-alternatives><mixed-citation xml:lang="ru">EN 50129, Railway applications – Communication, signalling and processing systems – Safety related electronic systems for signalling, 2018.</mixed-citation><mixed-citation xml:lang="en">EN 50129, Railway applications – Communication, signalling and processing systems – Safety related electronic systems for signalling; 2018.</mixed-citation></citation-alternatives></ref><ref id="cit4"><label>4</label><citation-alternatives><mixed-citation xml:lang="ru">Schabe H. The Safety Philosophy behind CENELEC Rails Standards, Proceedings ESREL 2002,.Lyon, March 19-21, 2002. P. 788-790.</mixed-citation><mixed-citation xml:lang="en">Schabe H. The Safety Philosophy behind CENELEC Rails Standards. In: Proceedings of ESREL 2002. Lyon; March 19-21, 2002; 788-790.</mixed-citation></citation-alternatives></ref><ref id="cit5"><label>5</label><citation-alternatives><mixed-citation xml:lang="ru">Hirao Y. Watanabe I. Safety technologies and management of railway signalling in Japan. Signal + Draht. 2000. №5.</mixed-citation><mixed-citation xml:lang="en">Hirao Y., Watanabe I. Safety technologies and management of railway signalling in Japan. Signal + Draht 2000; 5.</mixed-citation></citation-alternatives></ref><ref id="cit6"><label>6</label><citation-alternatives><mixed-citation xml:lang="ru">Сапожников В.В., Сапожников Вл.В., Христов Х.А. и др. Методы построения безопасных микроэлектронных систем железнодорожной автоматики / Под ред. Сапожникова Вл.В. М.: Транспорт. 1995. 272 с.</mixed-citation><mixed-citation xml:lang="en">Sapozhnikov V.V., Sapozhnikov Vl.V., Khristov Kh.A., Gavzov D.V. Sapozhnikov Vl.V., editor. [Design methods of vital computer-based railway automatics]. Moscow: Transport; 1995. (in Russ.)</mixed-citation></citation-alternatives></ref><ref id="cit7"><label>7</label><citation-alternatives><mixed-citation xml:lang="ru">Shubinsky I.B., Sheabe X. On the definition of functional reliability, Proceedings of the ESREL 2013, Safety, Reliability and Risk Analysis: Beyond the Horizon</mixed-citation><mixed-citation xml:lang="en">Shubinsky I.B., Shaebe H. On the definition of functional reliability. In: Steenbergen et al., editors. Proceedings of the ESREL 2013, Safety, Reliability and Risk Analysis: Beyond the Horizon. Taylor &amp; Francis Group; London; 2014; 3021-3027. ISBN 978-1-138-00123-7.</mixed-citation></citation-alternatives></ref><ref id="cit8"><label>8</label><citation-alternatives><mixed-citation xml:lang="ru">– Steenbergen et al. (Eds) 2014 Taylor &amp; Francis Group, London, ISBN 978-1-138-00123-7. P. 3021-3027.</mixed-citation><mixed-citation xml:lang="en">Shubinsky I.B., Shaebe H., Rozenberg E.N. A short study on rebooting safe computers and the impact on safety. In: proceedings of ESREL 2009, Reliability, Risk and Safety;1:175-178.</mixed-citation></citation-alternatives></ref><ref id="cit9"><label>9</label><citation-alternatives><mixed-citation xml:lang="ru">Shubinsky I.B., Sheabe X., Rozenberg E.N. A short study on rebooting safe computers and the impact on safety, ESREL 2009, Proceedings Reliability, Risk and Safety, vol. 1. P. 175-178</mixed-citation><mixed-citation xml:lang="en">Braband J. A practical guide to safety analysis methods. Railway Signalling + Telecommunication 2001;9:41-45.</mixed-citation></citation-alternatives></ref><ref id="cit10"><label>10</label><citation-alternatives><mixed-citation xml:lang="ru">Braband J. A practical guide to safety analysis methods/ Signal+Draht International. 2001.</mixed-citation><mixed-citation xml:lang="en">Gulker J., Schaebe H. Physical Principles of Safety. In: Proceedings of ESREL 2006, Safety, Reliability and Risk Analysis; Balkema, Rotterdam;2:1045-1050.</mixed-citation></citation-alternatives></ref><ref id="cit11"><label>11</label><citation-alternatives><mixed-citation xml:lang="ru">Gulker J., Schabe H. Physical Principles of Safety. In ESREL 2006 ProceedingsSafety Reliability and Risk analysis, vol. 2. Rotterdam: Balkema, 2006. P. 1045–1050.</mixed-citation><mixed-citation xml:lang="en">Dmitriev V.M., Gandzha T.V., Zaychenko T.N. Technique of stratification and integration of computer models of complex technical controlled system. Informatika i sistemy upravleniya 2016;4(50). (in Russ.)</mixed-citation></citation-alternatives></ref><ref id="cit12"><label>12</label><citation-alternatives><mixed-citation xml:lang="ru">Дмитриев В.М., Ганджа Т.В., Зайченко Т.Н. Методика стратификации и интеграции компьютерной модели сложной технической управляемой системы // Информатика и системы управления. 2016. № 4(50).</mixed-citation><mixed-citation xml:lang="en">Batraev V.V., Kudriashov S.V., Popov P.A., Rozenberg E.N., Rozenberg I.N., Shukhina E.E., Shubinsky</mixed-citation></citation-alternatives></ref><ref id="cit13"><label>13</label><citation-alternatives><mixed-citation xml:lang="ru">Батраев В.В, Кудряшов С.В., Попов П.А., Розенберг Е.Н., Розенберг И.Н., Шухина Е.Е., Шубинский И.Б. Двухканальная система для регулирования движения железнодорожных транспортных средств. Патент РФ № 2726243. 2020. Бюл. № 19.</mixed-citation><mixed-citation xml:lang="en">I.B. [Dual-channel system for railway vehicle traffic regulation]. Patent RF no. 2726243. 2020. Bul. no. 19. (in Russ.)</mixed-citation></citation-alternatives></ref><ref id="cit14"><label>14</label><citation-alternatives><mixed-citation xml:lang="ru">Гнеденко Б.В., Коваленко Б.В. Введение в теорию массового обслуживания, М.: Наука, 1987.</mixed-citation><mixed-citation xml:lang="en">Gnedenko B.V., Kovalenko B.V. [Introduction into the queueing theory]. Moscow: Nauka, 1987. (in Russ.)</mixed-citation></citation-alternatives></ref><ref id="cit15"><label>15</label><citation-alternatives><mixed-citation xml:lang="ru">Шубинский И.Б. Структурная надежность информационных систем. Методы анализа. М.: Журнал Надежность, 2012. 212 с.</mixed-citation><mixed-citation xml:lang="en">Shubinsky I.B. [Functional dependability of information systems. Analysis methods]. Moscow: Dependability Journal; 2012. (in Russ.)</mixed-citation></citation-alternatives></ref><ref id="cit16"><label>16</label><citation-alternatives><mixed-citation xml:lang="ru">Mason Samuel J. Feedback Theory – Further Properties of Signal Flow Graphs // Proceedings of the IRE. 1956. Vol. 44. No. 7. P. 920–926. doi:10.1109/jrproc.1956.275147</mixed-citation><mixed-citation xml:lang="en">Mason S.J. Feedback theory – Further properties of signal flow graphs. In: Proceedings of the IRE;44:920-926. doi:10.1109/jrproc.1956.275147.</mixed-citation></citation-alternatives></ref><ref id="cit17"><label>17</label><citation-alternatives><mixed-citation xml:lang="ru">Григелионис Б.И. О точности приближения композиции процессов восстановления пуассоновским процессом // Литов. матем. сб. 1962. Т. 2. № 2. С. 135-143.</mixed-citation><mixed-citation xml:lang="en">Grigelionis B.I. [On the accuracy of Poisson approximation a composition of recovery processes]. Litovsky matematichesky sbornik 1962;2(2):135-143.</mixed-citation></citation-alternatives></ref><ref id="cit18"><label>18</label><citation-alternatives><mixed-citation xml:lang="ru">Погожев И.Б. Оценка отклонения потока отказов в аппаратуре многофазового использования от пуассоновского потока // Кибернетику – на службу коммунизму, Т. 2. М.: Энергия, 1964. С. 228-245</mixed-citation><mixed-citation xml:lang="en">Pogozhev I.B. [Estimation of failure flow deviation from the Poisson fl in assessment of multiphase use equipment]. In: [Cybernetics to the benefit of communism. Volume 2]. Moscow: Energia; 1964. (in Russ.)</mixed-citation></citation-alternatives></ref><ref id="cit19"><label>19</label><citation-alternatives><mixed-citation xml:lang="ru">Назаров А.А., Лапатин И.Л. Ассимптотические пуассоновские МАР-потоки // Известия Томского государственного университета. (Управление, вычислительная техника и информатика). 2010. № 4(13). С. 72-78.</mixed-citation><mixed-citation xml:lang="en">Nazarov A.A., Lapatin I.L. [Asymptotic Poisson MAP flows]. Tomsk State University Journal 2010;413:72-(in Russ.)</mixed-citation></citation-alternatives></ref><ref id="cit20"><label>20</label><citation-alternatives><mixed-citation xml:lang="ru">Braband, J. Gall, H., Schäbe, H., Proven in Use for Software: Assigning an SIL Based on Statistics in: Handbook of RAMS in Railway systems – Theory and Practice, Qamar Mahboob, Enrico Zio (Eds.), 2018, Boca Raton, Taylor and Francis, Chapter 19. P. 337-350.</mixed-citation><mixed-citation xml:lang="en">Braband J., Gall H., Schäbe H. Proven in use for software: assigning an SIL based on statistics. In: Mahboob Q., Zio E., editors. Handbook of RAMS in Railway systems – Theory and Practice. Boca Raton, Taylor and Francis; 2018. P. 337-350.</mixed-citation></citation-alternatives></ref><ref id="cit21"><label>21</label><citation-alternatives><mixed-citation xml:lang="ru">EN 50159 Railway applications Communication, signaling and processing systems Safety-related communication in transmission systems, 2010.</mixed-citation><mixed-citation xml:lang="en">EN 50159 Railway applications Communication, signalling and processing systems. Safety-related communication in transmission systems; 2010.</mixed-citation></citation-alternatives></ref></ref-list><fn-group><fn fn-type="conflict"><p>The authors declare that there are no conflicts of interest present.</p></fn></fn-group></back></article>
