01.09.2026
Safe and non-safe functions up to SIL2
The new LION SafeCCU vehicle controller from LÜTZE TRANSPORTATION enables the parallel control of safe and non-safe functions up to SIL2 in a single device.
Rail technology specialist LÜTZE TRANSPORTATION is expanding its modular LION bus system (LÜTZE Input Output Network), used in rail vehicles worldwide, with another programmable logic controller: the LION SafeCCU (Compact Control Unit) for applications up to safety integrity level SIL2. The LION SafeCCU allows safe and non-safe I/O modules to be connected via the L-Bus². Safe and non-safe functions can therefore be operated and configured in parallel in the controller without interference, ensuring that the program sections do not affect one another. Up to 32 modules can be connected to the controller in as many as three rows. Each LION SafeCCU vehicle controller comes standard with either an MVB (Multifunction Vehicle Bus) interface with Safe Data Transmission Layer (SDTv2) or a TRDP (Train Real-Time Data Protocol) interface with SDTv2.
Fig: LION SafeCCU controls safe and non-safe functions up to SIL2 in parallel in a single device
| Download Photo |
LÜTZE TRANSPORTATION offers the LION SafeCCU with a second fieldbus interface. There are three CAN bus versions available: CAN 2.0, CANopen Master, and CANopen Slave. The CAN bus interfaces are particularly suitable for diagnostic and communication purposes, with an integrated relay that can be switched in the event of a fault depending on the user’s requirements. The LION SafeCCU also features DualHoming. If a switch or network cable fails, the second Ethernet interface automatically takes over communication. In addition, the LION SafeCCU has another M12 connection for integrating customer-specific modules via a proprietary fieldbus.
The new LION SafeCCU has two internal sections: one safe and one non-safe. These sections are configured with different programming environments.The advantage of this separation is that the safe section, for example, can be certified by TÜV and then fixed, while the non-safe section still allows for flexible customization. Non-safe applications such as communication protocols can therefore be modified without affecting the safe section. The safe section of the CPU controls the I/O modules via the L-Bus² and is responsible for reading and writing the I/O data. The safe and non-safe sections are connected by dual-ported memory (DPM), which enables data exchange between the two sections.
The new LION SafeCCU is equipped with a wide-range power supply (24–110 V DC). Thanks to the modular versatility of the LION product family, the controller can be flexibly configured and adapted to specific applications. The new controller complies with all relevant railway standards, including EN 50126, EN 50128, EN 50129, EN 45545, EN 50155, and EMC 06. It meets protection class IP20 and is designed for operation in temperatures from -40 °C to +70 °C (OT4, operating temperature class 4).
Characters: 2,969 incl. spaces
Lütze Transportation GmbH at InnoTrans 2026
22 – 25 September 2026
Hall 27 | Booth 650
