SK1702006A3 - LED light and method for safe LED light control - Google Patents

Abstract

In the present invention, there is disclosed a LED lamp of outdoor light signaling system in a railway safety hardware, said LED lamp being intended for a crossing interlocking device and/or for station and section blocking wherein such lamp is provided with LEDs (4) distributed in sections (9) and the lamp comprises control and supervising circuits and a power source (11) functioning as a feeding section. The invented LED lamp is divided into three independent and electrically separated sections (9) of LEDs (4), wherein light of even two sections (9) of LEDs is sufficient for meeting the required optical properties of the LED lamp at maintenance of safety for allowing and inhibiting signs. Each LED section (9) has an independent supply circuit (12); each LED section (9) comprises three independent supervisions. Output signals of each independent supervision are applied to another control circuit of the LED sections (9). Each LED section (9) is provided with a feed breaking element (1) of each adjacent section (9). There is also disclosed a method for safe control of the above-described LED lamp wherein the method comprises execution of functionality check of the LEDs (4) and functionality check of control and supervision electronics of each section of the LED lamp. The LED lamp functionality check is carried out by continuously checking each circuit of the LEDs (4) and simultaneously by the three independent supervisions as well as by a continuous check of the functionality of the control and supervision electronics of each section (9) of the LED lamp. During the checks, there is detected each individual fault occurred in one of the circuits comprising a LED lamp control circuit, a LED lamp supervision circuit, a power supply (11) circuit and a LEDs (4) circuit. Subsequently, the detection of a fault is transmitted in a safe manner to a superior system for indication thereof. At the same time, the LED lamp remains fully functional according to appropriate standards at maintaining safety principles for both allowing and inhibiting signs.

Description

Technical field

BACKGROUND OF THE INVENTION The present invention relates to an LED light fixture for external light signaling in railway signaling technology, in particular intended for transit signaling and / or stationary and track-side signaling, with LEDs divided into sections, including control and control circuits and a power supply as a power supply.

The invention also relates to a method for safely controlling an LED luminaire, in which the functionality of the LEDs is checked and the functionality of the control and monitoring electronics of each section of the luminaire is checked.

BACKGROUND OF THE INVENTION

Currently used exterior signaling lights within Czech Railways are almost exclusively incandescent. The light bulb, as a light source for security devices, appears to be disadvantageous because of the very low reliability given by its own design and lighting principle. For safety reasons, this feature is eliminated in two possible ways:

In a transit security device, i. of the filament lamp, double-filament lamps are used. If the main filament of the bulb is burnt, it will automatically switch to the replacement filament.

In other areas of external signaling of the railway signaling equipment, i. in the case of a single lamp filament, the principle of illumination of the less permissive feature shall be used in the lights.

Also a considerable factor in the use of incandescent lamps is the relatively high energy intensity of such a light source.

In most cases, the controls and the entire logic of supervision of incandescent lamps are located away from light signals or warning devices. The relevant electronics are created in older types of devices by relay circuits, or in newer types by combination of processor systems in combination with contact or contactless interface. When checking the light intensity of the bulbs, the principle of supervision of the current passing through the bulb is used. In addition, optical detectors located in luminaires are commonly used in warning lamps, the outputs of which give information on the luminaires' lighting. Based on this input information, the relay or processor logic evaluates the function of the luminaires and in the event of a lamp filament failure the luminaire switches the corresponding filament lamp to the substitute filament, at warnings, or to the light-emitting light of the less permissive sign.

Due to the smallest voltage drop distributed over long distances, the power supply of incandescent light fixtures is solved by an alternating voltage of 230V / 50 Hz. This voltage is then transformed by a transformer placed in the heel or near the signal to the supply voltage of a particular signal lamp of the 12V / 20W type.

The rated power supply to the incandescent lamp luminaires is derived from the logic supply voltage, either relay or processor, controlling the 24V, DC signaling units. Double-filament warning lamps are then 2x 12V, 20W.

For the above-mentioned reasons, the first luminaires with LEDs are appearing within České dráhy (Czech Railways). So far, these are only speed indicators, which are numbers (character) or band (symbol). Control of lighting of this light is solved by connecting or disconnecting the power supply. Its supervision consists of one current relay, which in case of insufficient current, by its drop-out, indicates unsatisfactory state of the luminaire during illumination. The principally wiring of LEDs within this luminaire is classic series-parallel, with direct interaction of individual LEDs.

Abroad, the production of LED lights for railway signaling equipment is engaged in eg. Alstom, Ansaldo, Safetran, Westinghouse, Percept and others.

These luminaires usually make use of a series-parallel combination of individual LEDs, in some manufacturers divided into two parallel sections with independent power supply and control. For maximum compatibility with incandescent lamps, their operation is solved by connecting the power supply when the light is on or by disconnecting the power supply when the light goes out. The supply voltage of these foreign luminaires varies according to individual manufacturers, with the possibility of supplying direct or alternating voltage according to the luminaire type. The power supply and therefore the control of these foreign LED lamps is usually only two-wire and non-redundant.

The control of the LED light illumination of products of these foreign companies is preferably solved by controlling the total current of the light fitting with low sensitivity and thus detecting failure of up to a large number of LEDs. Great emphasis is therefore placed on the reliability of the LED itself. Of course, when two parallel LED sections are powered by two independent sources, the failure of each of these sources is detected.

A common feature of the above mentioned LED control and supervision systems is their indisputable increase in reliability over incandescent lamps, based on the generally valid and physically based fact that the lamp has far less reliability than the reliability of even a larger number of LEDs, in this case of 200 pieces. forming one lamp. However, there is no desirable increase in availability, ie readiness, compared to incandescent lamps. This is only a 1 in 1 ("1oo1") system with partial power monitoring of the LED function. Furthermore, only the principle of switching contact or contactless light remote commanding with decision, tripping and diagnostic logic located in a remote object is used here. This entails great demands for sufficient cabling, which has a significant impact on the overall cost of the signaling device.

For example, Westinghouse Brake & Signal Holdings Ltd., GB patent application EP 132 4641 addresses the task of electrically arranging and monitoring the LED lamp current. The light of the signal, which is intended solely as a direct replacement of the incandescent light of the signal, in terms of power and control, shall consist of at least two separate LED arrays with their own control circuits connected in parallel. As current flows through these LED fields, a load resistor is automatically connected in parallel to the luminaire supply, which causes the LED luminaire to be drawn off as if it were incandescent. The evaluation of the functionality of the luminaire by the current relays is the same as for the incandescent lamp. The circuit of automatic connection of the load resistor consists of a pair of optocouplers for one LED field. Inconsistent function of LED fields, i. If one or more LED fields are not lit, it is evaluated by a separate relay as a "non-urgent alarm". This evaluation circuit is not a "fail-safe" circuit. Therefore, the main emphasis is placed on the evaluation of the non-illumination of any LED field by an observer, e.g. strojvodcom. For this reason, the arrangement of the individual LED fields within the luminaire must be such that the failure of any of them can be recognized by the human eye.

The advantage of this solution is the possibility of simple replacement of the LED lamp by the existing incandescent lamp without the need to modify the control and supervision circuits of the signal lamp. The principle of this solution is based on the same LED lamp consumption as the incandescent lamp, so there is no energy saving. Another drawback mentioned in the present invention is that the nature of the supervisory circuit is less reliable than the circuit used to evaluate the illumination of incandescent lamps. Another disadvantage is safety based on the human factor, where the supervisory circuit of the LED light evaluation is not "fail-safe", a circuit with intrinsic safety. The driver only identifies the illumination of one LED field by visual observation. In the event of a failure of the LED field, the optical parameters on the signal lantern are obviously not met.

In the Czech utility model no. 14 134 Owner Betamont s. r. o., SK describes the wiring of an electronic supervisory circuit for passing alarm systems, which solves the task of supplying and checking the warning lights of the LEDs. The LED matrix is divided into two independent series strings. Each of them is powered by a separate power supply. The control of the luminous intensity of LEDs consists in monitoring the current flowing through a series of LEDs. safe level circuit. The current in each branch is monitored separately. The current control is complemented by a voltage check between the two LED branches with another safe level circuit. Current monitoring of both LED strings and voltage monitoring are evaluated together in the safety circuit of the logic product, whose static output signal serves to drive the resulting control relay of the safety group I. The static output signal is only generated when all inputs are excited by the safe level circuit output signals, i. by controlling the LED current of both branches and by checking the voltage.

Likewise, this solution allows the LED lamp to be replaced by a incandescent lamp, without requiring any modifications to the control circuits of the warning lamps, but with the necessity of minimal adjustments in the circuits of monitoring the lighting of the warning lamps.

The disadvantage of this solution is the low availability of the alert. The first failure of the LED light means a failure condition. A further disadvantage is the static supervision output signal at the time the both warning lamps are lit, resulting in poor information reliability. The wiring is solved only by the warning lights, while the supply voltage is only 12V with the specified unspecified allowed range.

In Japanese patent no. 2000172986, owner of Nippon Signal Co. Ltd., JP is described a solution for a fault light detector capable of detecting a fault, i. Disconnecting the LEDs and reducing their glow caused by their aging. LED lights for signaling are connected in parallel. In each serial branch there is a LED for monitoring the luminance of signaling LEDs. This monitoring LED is from the same production series as the signaling LED. The monitoring LED is located on the same substrate as the signaling LEDs. The luminous intensity of the monitoring LED is sensed, in principle in the form of an optocoupler, by an evaluation circuit. If it is assumed that all these LEDs will consistently age due to the same manufacturing technology and their luminous intensity will decrease equally over time, the luminous intensity of the signaling LEDs is thus determined or estimated and thus their luminous intensity level is determined. In case of interruption of any LED in the serial branch, the monitoring LED will not light, which is also detected by the evaluation circuit. The output of the evaluation circuits of all series LED strings is combined in a single gate whose output is connected to a signaling relay.

It is only a simple supervision of the power supply of several LED strings and it is monitored whether the fart is flowing or not. It is also estimated to reduce the luminance of LEDs due to their aging. The designed circuit does not address the indication of the short circuit of the diodes (s) of each series branch, nor does it increase the availability of the luminaires in any way. The LED circuit is not solved by the fail safe principle.

SUMMARY OF THE INVENTION

The above-mentioned disadvantages are eliminated or substantially reduced by the proposed intelligent LED lamp according to the invention, which is characterized in that the LED lamp is divided into three independent and electrically separated LED sections, where the light of only two sections is sufficient to meet the respective standards concerning the optical characteristics of the luminaire, while maintaining safety for the permitting and prohibiting signs. Each of the three LED sections has an independent power circuit, each LED section includes three independent supervisions, each independent supervision output is supplied to a control circuit of another LED section, and each control circuit is provided with a power cut-off element for adjacent LED sections.

The main advantage of the present invention is that this intelligent LED lamp operates on the "2oo3" system principle, i. two out of three.

The advantage of this intelligent LED luminaire according to the present invention is that it significantly increases the availability or readiness of external light signaling in rail traffic (A _s = 0.999999), both with respect to road users in the crossing safety device and with respect to for railway transport at station, line and crossing signaling equipment,

- increases the functional reliability of traffic lights and warning lights,

- limits the overall cabling costs of security devices,

- reduce the cost of maintaining traffic lights and warning lights,

- allows connection to modern security management systems,

- takes over and safely addresses the functions of control, supervision and supervision of the illumination of each individual lamp from the master systems.

Advantageously, the independent supervision is at least one current supervision, which in the simplest way allows control of the LED illumination. Independent supervision may also be voltage supervision or optical supervision.

The independent supervision may be at least one LED control and monitoring circuit, which is an optimal combination of another LED control and control function in one circuit.

Independent supervision can also be created by two LED current supervision and one LED control and monitoring circuit, which is a convenient arrangement for a rail LED lamp.

Preferably, the control circuit is a control processor that associates the control functions of evaluating all the supervisory elements. The control circuit can also be formed from discrete semiconductor circuits or relay circuits.

In a particular long-term tested and preferred embodiment, the independent current supervision has output to the control processor of the first adjacent LED section, the second independent current supervision has output to the control processor of the second adjacent LED section, and the LED control and monitoring circuit creates LED control of its own LED section . This ensures independent control and independent evaluation of the status of all LED diodes.

The cut-off element for the power supply of the LED sections is the block of the disconnection of the LED power supply. Such a tripping element prevents the confusion of a confusing light signal which may lead to a dangerous traffic situation, e.g. to spontaneously light up a more permitting feature.

Each of the three sections is equipped with two-way data communication with the superior system, serving for the transmission of command and diagnostic information.

Advantageously, the data communication is physically redundant with the concurrent active state, which leads to an increased readiness of the LED lamp.

Each LED section has a control circuit equipped with bidirectional cross communication to enable communication with the control circuits of the two remaining two LED sections.

The power supply is connected to two power supply systems that ensure the stability of the LED luminaire. Thus, the LED luminaire is adapted to power from two independent external power assemblies, resulting in increased availability of the device.

The principle of the method of safe control of this intelligent LED lamp according to the invention is that it is performed by inspecting the LEDs divided into three independent and electrically separated sections, continuously and simultaneously by three independent supervisors and simultaneously by checking the functionality of the control and supervisory electronics of each LED section. These checks detect any one fault occurring in one of the circuits including the LED lamp control circuit, the LED lamp control circuit, the source circuit, and the LED circuit. Subsequently, the detection of this fault is safely transmitted to the master system for its indication. The LED luminaire remains fully functional according to the relevant standards, while maintaining the safety principles for both the permitting and prohibiting sign.

The main advantage of this method according to the invention is that the illumination of only two sections is sufficient to satisfy the relevant standards regarding the optical properties of the LED lamp, and thus any one fault which has arisen will not cause the whole LED lamp to fail.

The division of the LEDs into three electrically separated sections guarantees the independence of the sections. Continuous and simultaneous LED checks ensure safe LED lamp monitoring. Fault detection of one section is transmitted to the master system where it is indicated and evaluated. It is essential that failure of one section of LEDs does not cause failure of the entire luminaire.

It is advantageous to maintain the independence of the function information of each LED when the function of the LEDs in each section is controlled and supervised by a separate control circuit based on information from the master system and diagnostic information from that section and both adjacent sections.

For consistent independence and to ensure the safe functioning of the LED lamp, it is advantageous for the control circuit, from three independent sources, to obtain information about the function of each LED of any one section from three sections, from the control and monitoring function of the LEDs of that one section. cross-sectional communication with the control circuit of the next arbitrary section of the two remaining sections and two-way cross-sectional communication with the control circuit of the remaining last third section. Each control circuit of one arbitrary section receives information transmitted by bi-directional transverse communication about the function of the LEDs of the two remaining sections from the current supervision of these adjacent sections. The function of each LED is evaluated independently in all three control circuits, with the resultant data being exchanged via two-way cross communication.

Regardless of the information from the master system in the event of failure of one section of the LED enabling the character, or even without the control circuit information of the two remaining sections, these control circuits disconnect the power supply to the LEDs of the detected fault. This ensures that the power of each LED section is switched off by the control circuit of the adjacent section without logical matching of the remaining sections, so that only one section of the LED of the permitting sign is inadvertently lit.

Regardless of the information from the master system in the event of a failure of one section of the LED forbidden sign after the control circuit information of the two remaining sections matches, these control circuits disconnect the power supply to the detected section LEDs. In case of unwanted illumination of one section of the LED lamp prohibiting the character, it is thus possible to switch off the power supply of the LEDs of this section after the logical match of the control circuits of the remaining sections. It is impossible to switch off only one section of LEDs due to failure of any control circuit.

The control circuit communicates bidirectionally with the superior system exclusively via secure data communication that is physically redundant with the concurrent active state. This ensures the transmission of the necessary signals even after the interruption of one of the communication lines.

Each section of the LED luminaire is powered separately to maintain the "2oo3" system, i. two out of three.

The power supply creates three separate power supply circuits of the LED lamp sections from the two input power supplies, and failure of any one of the two input power supplies results in the failure of only one of the three separate power supply circuits of the LED lamp sections, the optimal solution for 2oo3 system selection.

BRIEF DESCRIPTION OF THE DRAWINGS

An exemplary embodiment of the invention is described in detail below and illustrated by means of the schematic drawings, in which FIG. 1 is a block diagram of one section of an LED lamp; and FIG. 2 block diagram of the LED luminaire.

DETAILED DESCRIPTION OF THE INVENTION

In FIG. 1 schematically shows an exemplary block diagram of one of the three sections 9 of an intelligent LED lamp, with a power supply of 1 LEDs 4, and with two series-wise current supervision 3 LEDs. The outputs 2 of the current supervision 3 are fed to adjacent LED sections 9 (Fig. 2). The control of the LEDs 4 of the section 9 of the LED provides a control and monitoring circuit 5 which communicates with the control processor 7. Based on the transverse communication 6 and the outputs 2 of the current supervision 3 LEDs, the control circuit, preferably the control processor 7 section 9 LEDs. Two-way communication 8 with the master system controls the operation of the entire LED section 9.

In FIG. 2 shows the interconnection of all three sections 9. The sections 9 are interconnected by transverse communication 6, on the other hand by the outputs 2 of the current supervision 3 of the LEDs and by the control of the block 13 of the disconnection of LEDs. The power circuits 12 of the LED sections 9 are formed in the source H from two independent power systems 10.

All LEDs 4 of a single LED lamp are divided into three independent LED sections 9 and are arranged in such a way that the illumination of only two of the three LED sections 9 ensures that all requirements of the relevant standards for the optical properties of the lamp are met. The LEDs 4 are controlled by the LED control and monitoring circuits 5, enabling each other to independently power one section 9 of the LEDs 4. Thus, any fault, i. disconnecting or short-circuiting any LED 4 will not affect the illumination of the other LEDs 4 and thus their optical and reliable parameters. These LED control circuits 5 also allow monitoring of their functionality. Any failure of the connected LED 4, i. each section 9 of the LED has its own independent control processor 7. The independent control processor 7 processes the command information coming from the master system 8 e.g. “turn on light”, “turn on light”, “turn off light” commands, etc. At the same time, the independent control processor 7 further processes the information from the 5g circuitry

At the same time, the independent control processor 7 also processes the information from the transverse communication 6 between all three control processors 7 as well as the information from the current monitoring outputs 3 of the LEDs of the two adjacent LED sections 9. The current supervision 3 of the LEDs senses the total current drawn of the respective section 9 of the LEDs. By processing all of this information, the function and instantaneous status information of each individual LED 4, each control and monitoring circuit 5, and each control processor 7 is unambiguously detected.

Due to the failure of the decision-making or triggering part of the device consisting of the control processor 7 and the LED control and monitoring circuits 5, the corresponding LED section 9 of the enabling lamp, e.g. The signal at the time when it is to be extinguished, it is possible for each control processor 7 to permanently disconnect the power supply of the LEDs 4 of the adjacent sections 9 by the block 13 of the power supply of the LEDs 4 in the lighting fixture.

In order to prevent the switching off of more than one section 9 of the LED lamp of the prohibiting sign, for example, due to the failure of the decision-making or triggering part of the device formed by the control processor 7 and the LED control and monitoring circuits 5. the label is only allowed by the two control processors 7 only after their match, i. after the logic product, permanently disconnect the power supply of the LEDs 4 of the third section 9 in the lamp forbidding by the block 13 of the power supply of the LEDs 4.

The power supply of the individual LED sections 9, including the control and supervisory electronics, is designed separately, that is, the output of the power supply block 11 is three independent power circuits 12 of the LED sections 9. The two applied input voltages of power systems 10, i. if necessary, different or uniform supply systems of any combination of AC and / or DC are transformed within the power supply H into three output circuits 12 of LED sections 9, in such a way that a failure of the input voltage of any supply system 10 results in only 1/3 failure the output power circuits 12 of the LED sections 9, whereby all the requirements of the relevant standards for the optical properties of the luminaire are thus maintained. The functionality of the individual power supply unit circuitry 11 is constantly tested by the control processors 7 of the individual LED sections 9.

The command information of the incoming communication 8 with the master system, e.g. "Turn on the light", turn on the oscillating light ", turn off the light" etc. and at the same time diagnostic information sent to the superior communication system 8 e.g. “Light on”, “light off”, “trouble-free”, “fault” and its type, etc. they are transmitted exclusively via data communication 8. This communication 8 is physically redundant, representing two independent links, with a concurrent active state.

An exemplary particular embodiment is one of a number of possible embodiments. Other embodiments within the scope of the claims are also possible.

Industrial usability

Pass-through interlocks are red and white LED warning lamps.

The station and trackside signaling equipment shall include the red, yellow, green, blue and white LED lights of the main lights (ie drive-in, departure, road, sectional and covering lights), main beacon signs, main beacon repeaters, marginal beacons, repeater beacons beacons, catch beacons, repeating beacons, and runners.

Claims (19)

1. Outdoor light signaling LED luminaire for railway signaling equipment, intended in particular for passing signaling and / or station and line signaling equipment, with LEDs (4) divided into sections (9), comprising control and supervision circuits and a source (11) as well as a power supply part, characterized in that: - is divided into three independent and electrically separated LED sections (9), whereby the light of the two LED sections (9) is also sufficient to meet the required optical characteristics of the LED lamp, while maintaining safety for the enabling and prohibiting features, - each LED section (9) has an independent power supply circuit (12), - each LED section (9) contains three independent controls, the output of each independent supervision is fed to a different control circuit of the LED sections (9); and - each LED section (9) is provided with a power cut-off element (1) of each adjacent section (9). LED lamp according to claim 1, characterized in that the independent supervision is at least one current supervision (3). LED lamp according to claim 1, characterized in that the independent supervision is at least one LED control and monitoring circuit (5). LED lamp according to claim 1, characterized in that the control circuit is a control processor (7). LED lamp according to claim 1, characterized in that the switching-off element of the power supply (1) is an LED power-off block (13) of each of the adjacent LED sections (9), controlled from the control circuits of both adjacent LED sections (9). LED lamp according to claim 1, characterized in that each LED section (9) has its control circuit equipped with bidirectional data communication (8) with a master system. LED lamp according to claim 6, characterized in that the data communication (8) is physically redundant with the concurrent active state. LED lamp according to claim 1, characterized in that each LED section (9) has a control circuit equipped with bidirectional transverse communication (6), not allowing communication with the control circuits of the two remaining sections (9). LED lamp according to claim 1, characterized in that the power supply (11) is connected to two power supply systems (10). LED lamp according to claim 2 or 3, characterized in that three independent sightings are provided two current supervision (3) LEDs, and - one LED control and monitoring circuit (5). LED lamp according to claim 10, characterized in that: - one of the independent current supervision (3) LEDs has its output (2) connected to the control circuit of one adjacent LED section (9), - the remaining second independent current supervision (3) has an output (2) fed to the control circuit of the remaining second adjacent LED section (9), - an LED control and monitoring circuit (5) for generating LED control (4) of the LED section itself (9) is connected to the control circuit of the LED section itself (9), and - two current supervision outputs (2) of the remaining two LED sections (9) are fed to this control circuit. LED lamp according to claim 1, characterized in that the switching-off element (1) of the LEDs (4) is an LED-blocking block (13). A method for safely controlling an LED lamp according to claims 1 to 12, wherein the LED function (4) is checked and the control and supervisory electronics of each section of the LED lamp is checked, characterized in that the LED lamp is checked - checking each LED circuit (4) continuously and simultaneously with three independent supervisions, and - at the same time by continuously checking the functionality of the control and supervisory electronics of each section (9) of the LED lamp, - these checks detect any one fault occurring in one of the circuits, including the LED control circuit, the LED control circuit, the source circuit (11) and the LED circuit (4), - the detection of this failure is then safely transmitted to the master system for its indication, - the LED luminaire remains fully functional in accordance with the relevant standards, while maintaining the safety principles for the permitting and prohibiting sign. Method according to claim 13, characterized in that the function of the LEDs (4) in each section (9) is controlled and supervised by a separate control circuit, based on the information from the master system and the diagnostic information from that section (9) and both. the remaining sections (9). Method according to claim 14, characterized in that the control circuit from three independent sources acquires information about the function of each LED (4) of any one section (9) from three sections (9), namely - from the LED control circuit (5) of this one section (9), - two-way cross communication (6) with the control circuit of another arbitrary section (9) of the two remaining LED sections (9), - two-way cross communication (6) with the control circuit of the remaining last third LED section (9), - wherein each control circuit of one arbitrary section (9) receives information transmitted by two-way cross communication (6) about the function of the LEDs (4) of the two remaining sections (9) of the LEDs (3) of these adjacent sections (9). Method according to claim 13, characterized in that, irrespective of the information from the master system, in case of failure of one section (9) of the LED permitting feature, or even without the control circuit information of the two remaining sections (9), these control circuits disconnects the power supply (1) of the LEDs (4) of the detected fault section (9). Method according to claim 13, characterized in that, irrespective of the information from the master system, in the event of failure of one section (9) at the LED of the prohibiting sign, after the control circuit information of the two remaining sections (9) matches. supplying (1) the LEDs (4) of the section (9) with a detected fault. Method according to claim 13, characterized in that the control circuit communicates bidirectionally with the superior system exclusively via a secure bidirectional data communication (8), which is preferably physically redundant with the concurrent active state. Method according to claim 13, characterized in that the power supply (11) forms three separate power supply circuits (12) for two separate LED lamp sections (9) from two input power systems (10), wherein the failure of any one of the two of the input power systems (10) results in the failure of only one of the three separate power circuits (12) of the LED lamp sections (9), so that the LED lamp remains fully functional.