automatic train control

Automatic train control (ATC) is a safety system that monitors train speed and signal aspects, then applies the brakes automatically if the driver fails to respond to a warning or approaches a danger signal. Unlike passive systems that only alert the crew, ATC actively intervenes to prevent overspeed and signal-passed-at-danger (SPAD) incidents. The system sits between the track signalling infrastructure and the train's brake control, making independent decisions about deceleration without waiting for human input.

ATC systems typically work through track-mounted equipment that transmits speed restrictions and signal status to a receiver on the train. As the train passes a location, it receives data about the next signal aspect and the maximum safe speed for the section ahead. The on-board equipment calculates the braking rate needed to comply with these limits. If the driver does not begin reducing speed in time, the system triggers a penalty brake application: a full service brake or, in some systems, an emergency brake that applies maximum deceleration.

Common implementations and variants

British Rail developed one of the earliest systems, Automatic Warning System (AWS), which sounds an alarm in the cab and applies a penalty brake after a few seconds if the driver does not acknowledge a yellow signal aspect. European systems such as the Train Protection and Warning System (TPWS) and European Rail Traffic Management System (ERTMS) function similarly but with varying degrees of sophistication. ERTMS Level 3 dispenses with lineside signals entirely, communicating continuous speed profiles directly to the train. Older steam-era railways used mechanical systems with ramps and trip arms; modern systems use inductive loops, ballast-mounted transmitters, or radio transponders.

The penalties for system failure are severe. A failure of ATC components often triggers a service brake application, speed restriction, or line closure because the train is no longer deemed safe to operate at normal speeds. Drivers must be trained to recognize penalty brake events and understand that they indicate a system malfunction or a genuine signal aspect they missed. The system requires regular testing: track-side equipment must transmit data reliably, and on-board receivers must decode it without error under all weather conditions.

ATC sits at the boundary between signalling and traction control. It does not replace the signalling system; it enforces it. The name reflects its core function: control that applies automatically, without operator intervention, triggered by external conditions. Modern heavy rail networks regard ATC as mandatory infrastructure; freight and regional lines without it typically operate at reduced line speeds. The system has reduced SPAD incidents substantially but cannot prevent all collisions, particularly those caused by track defects, mechanical failures, or operational errors that occur before the train reaches a danger signal.