What Is Signal Interlocking?

Signal interlocking is a fundamental safety technology in railway operations designed to prevent conflicting train movements. It coordinates signals and switches (known as points or turnouts) on the track so that only one train can be safely routed through a given section of track at a time. In its simplest form, interlocking ensures that when a signal shows a green or “proceed” aspect, all points along the route are correctly set and locked in position, and no other train can be sent into that same block of track. This system eliminates the possibility of head-on collisions, side-swipes, and rear-end collisions by enforcing strict rules of route availability. Modern interlocking systems can be purely mechanical, electromechanical, solid-state relay-based, or fully computer-based (often called “electronic interlocking”). Regardless of the technology, every system adheres to the same core safety principle: fail-safe design — any failure in the system must drive signals to a stop or red indication, never to a proceed aspect.

The Historical Evolution of Interlocking

The concept of interlocking dates back to the early days of railroading in the 19th century. Before interlocking, signalmen had to manually throw levers to set routes, and the coordination between signals and points depended entirely on human vigilance. Mistakes were frequent and often catastrophic. The first mechanical interlocking machine was patented by John Saxby in 1856 in the United Kingdom. His system used a series of mechanical levers, rods, and locking bars that physically prevented the signalman from pulling a lever for a route that would conflict with an already-set route. This simple but effective mechanism drastically reduced human error and quickly became standard practice.

By the early 20th century, electric relay interlocking was introduced, replacing many mechanical linkages with electrical relays. These relay-based interlocking systems were more compact and allowed control from a central cabin. The relays used a vital logic arrangement — meaning the electrical circuits themselves were designed to detect faults and enforce safety. This technology dominated railways worldwide for most of the 20th century.

Starting in the 1980s, computer-based interlocking systems emerged. These use specially designed “vital” processors with redundant, diverse software and hardware to perform the same logic functions as relay systems but with far greater flexibility, reduced maintenance, and advanced diagnostic capabilities. Today, solid-state interlocking (SSI) and computer-based interlocking (CBI) are widely deployed on high-speed and metro lines globally, often integrated with centralized traffic control systems.

Core Principles of Interlocking: Preventing Conflicting Movements

All interlocking systems, regardless of technology, rely on a set of fundamental principles derived from railway operation rules:

  • Route locking: When a route is set for a train, all points in that route are locked in position, and all opposing signals are held at stop. The route remains locked until the train has passed completely through the section.
  • Approach locking: Once a proceed signal is given, the route cannot be changed or released until the train either enters the block or a predetermined time has elapsed after the signal is cleared. This prevents a switch being thrown under a moving train.
  • Detection of points: The interlocking must physically detect that points are fully and correctly set before allowing a signal to clear. Any abnormal point position (e.g., not fully closed, not locked) forces signals to red.
  • Parallel and conflicting routes: The system contains a matrix of which routes conflict with each other. If two routes share a common section of track or requires the same point positions, they are defined as conflicting and cannot be set simultaneously.
  • Fail-safe logic: In relay systems, this is achieved by the stick circuit design where a permanent closed path is required to hold a signal at green; a loss of power or broken wire returns the circuit to a red state. In electronic systems, both hardware and software are designed with redundancy (e.g., 2-out-of-3 voting, diverse checks) to ensure any single failure leads to a restrictive condition.

These principles are encoded in international safety standards such as CENELEC EN 50129 and EN 50128, which govern the development of safety-critical railway software and hardware.

Types of Interlocking Systems

Mechanical Interlocking

These are the oldest and simplest forms. Levers in a control cabin are connected by rods and wires to signals and points. A set of mechanical locking bars physically prevents two conflicting levers from being operated at the same time. While robust and reliable, mechanical interlocking is labor-intensive to operate and maintain, and it is unsuitable for high-speed or long-distance control. It is still found in low-traffic rural lines and heritage railways.

Electrical Relay Interlocking

Using electrical relays and a complex network of wires, relay interlocking achieves the same logic without mechanical linkages. Relays are arranged in vital circuits that detect every condition. This system allows centralized control from a panel with illuminated track diagrams. It is the most widely deployed interlocking type in many legacy networks. However, its physical footprint and wiring complexity make it difficult to expand or modify.

Solid-State Interlocking (SSI)

Introduced in the 1980s, SSI replaces relays with solid-state electronic modules that simulate the relay logic. SSI systems are more compact, require less power, and include self-diagnostics. They are still used on many metro systems around the world.

Computer-Based Interlocking (CBI)

Modern CBI systems use general-purpose or specialized vital computers that run safety-critical software. The interlocking logic is stored in computer code, which can be easily modified for network changes. CBIs communicate with other systems (e.g., Train Control Centers, Automatic Train Protection) via digital networks like Ethernet and fiber optics. They provide extensive data logging, remote diagnostics, and integration with advanced signaling systems such as ETCS Level 2 and CBTC.

How Modern Computer-Based Interlocking Works

A typical CBI system consists of:

  • Vital Processors: Usually two or three independent processing units that execute the same interlocking application software and compare outputs. Any discrepancy forces a safe state.
  • Input/Output Modules: These interface with trackside equipment — point machines, signal lamps, track circuits (or axle counters) — through safety-rated communication channels (e.g., Profisafe, Safety-Related Ethernet).
  • Interlocking Application: The actual logic that defines route setting, locking, and release conditions. This is written in a high-level functional language (e.g., VHDL, structured text) and verified through rigorous testing.
  • Operator Control Interface: Dispatchers use a graphical display to set routes. The computer checks all safety conditions before executing the command. The system automatically enforces route locking and track occupancy detection.

When a train approaches, the interlocking receives data from track circuits (or axle counters) indicating the train’s position. It verifies that:

  • The requested route is unoccupied.
  • All points on the route are in the correct position and locked.
  • No conflicting route is in use.
  • If necessary, adjacent interlockings (for long routes) are coordinated.

Only then does it command the signals to clear (show a green or yellow aspect) and lock the route. As the train passes a signal, the interlocking recalculates and releases sections behind it, often automatically.

Importance in Preventing Accidents: Lessons from History

Signal interlocking has been credited with preventing countless accidents, but its absence or failure has also led to some of the worst railway disasters in history. For example, the 1914 train collision in the United States caused by a misaligned switch (a classic interlocking failure) could have been avoided if a proper interlocking system had been installed. More recently, in 1998, a serious incident in Eschede, Germany — though primarily a wheel failure — was exacerbated by the lack of interlocking for certain high-speed track layouts. Investigations always highlight the importance of interlocking reliability.

Conversely, well-implemented interlocking systems have been proven to stop potential collisions. In 2016, a passenger train in the Netherlands ran a red signal (SPAD) but was automatically stopped by the interlocking system’s route locking and possibly by a train protection system, preventing a potential head-on collision. The system immediately set all competing signals to danger once the SPAD was detected.

Data from the Rail Safety and Standards Board (UK) shows that modern interlocking technology has reduced signal-related incidents by more than 70% since the introduction of solid-state interlocking in the 1980s. This is a direct result of eliminating human error in point setting and signal selection.

External resources for further reading:

Integration with Train Control Systems

Signal interlocking does not work in isolation. It is the foundation upon which advanced train control systems are built. The European Train Control System (ETCS) — the core of ERTMS — communicates directly with computer-based interlocking to transmit movement authorities to trains. In ETCS Level 2, the interlocking manages the trackside signals and control of points, while the radio block centre (RBC) converts interlocking outputs into movement authorities that are sent to the train driver (or to automatic train operation). This integration ensures that even if a driver ignores a signal, the train will automatically brake before reaching a conflicting point. Similarly, Communication-Based Train Control (CBTC) used in modern metros couples interlocking with continuous train positioning and speed enforcement. The interlocking logic is often handled in software that receives train positions from radio signals and updates the control center.

This integration makes contemporary railways safer and more efficient. For instance, on high-speed lines with ETCS, the interlocking enables trains to run closer together safely, increasing throughput without reducing safety margins. The reliability of the interlocking hardware is paramount; therefore, modern CBIs are designed with dual redundancy and automatic failover, achieving extremely low failure rates.

Future Directions and Cyber Security

As interlocking systems become more connected, one growing concern is cybersecurity. A computer-based interlocking that is connected to a network (for remote diagnostics or updates) can potentially be attacked. Rail safety authorities now require cybersecurity assessments and air-gap protections for critical interlocking systems. Future interlocking designs will likely incorporate strong encryption, network segmentation, and intrusion detection to protect against malicious interference.

Another trend is the move toward object controller-based interlocking where the logic is distributed closer to the field devices, reducing cabling and increasing resilience. This model is common in large yards and modular signaling projects.

Despite these technological advances, the fundamental principle of interlocking — preventing conflicting movements through a fail-safe arrangement of switches and signals — remains as important today as it was 170 years ago.

Conclusion

Signal interlocking is the unsung hero of railway safety. By ensuring that only safe routes are set and that human errors are mitigated, it directly prevents catastrophic collisions and derailments. From mechanical levers to sophisticated computer systems, the evolution of interlocking technology has mirrored the growth of rail transportation, always prioritizing safety over convenience. Ongoing improvements in reliability, system integration, and cybersecurity will continue to make rail travel one of the safest modes of transport. For railway operators, investing in modern interlocking is not merely a regulatory requirement — it is a fundamental commitment to passenger and freight safety.

Ultimately, the significance of signal interlocking cannot be overstated: it is the silent guardian that keeps trains moving safely on their tracks, every minute of every day.