What is UIC 612-01? The Complete Guide to Train Driver Display System (DDS) Standards
UIC Leaflet 612-01 establishes the functional and ergonomic requirements for the driver’s cab layout. It ensures a standardized workspace for drivers to facilitate seamless international operations.
⚡ IN BRIEF
- Unified display architecture: UIC 612-01 mandates a single, integrated Driver Display System (DDS) architecture for all cab‑equipped rail vehicles, replacing the “organ‑console” of isolated, non‑redundant displays that previously fragmented safety‑critical information across the driver’s desk. (Source: UIC 612‑01, Clause 1)
- Four‑module DDS core: The leaflet defines the fundamental structure of the DDS through four core display modules: the Control Command Display (CCD, UIC 612‑02) for train protection, the Technical and Diagnostic Display (TDD, UIC 612‑03) for fault reporting, the Train Radio Display (TRD, UIC 612‑04) for GSM‑R communications, and the Electronic Timetable Display (ETD, UIC 612‑05) for journey data. (Source: CLC/TR 50542‑1:2025, Clause 4)
- Train Display Controller (TDC) arbitration: A central Train Display Controller – defined in the complementary CLC/TR 50542‑1 – arbitrates between the four display modules, ensuring that a Level A ETCS safety alert immediately overrides a diagnostic or timetable message on the shared physical screen(s). (Source: CLC/TR 50542‑1:2025, Clause 5)
- Multi‑lingual softkey interface: The leaflet standardises a context‑sensitive softkey interface across all DDS modules, with on‑screen labels automatically switching between English, French and German (the three UIC working languages) plus up to two additional operator‑defined languages, eliminating language barriers in cross‑border operations. (Source: UIC 612‑01, Annex A)
- Environmental and ergonomic integration: UIC 612‑01 references EN 50155 for temperature survivability (−25 °C to +70 °C, or −40 °C to +50 °C for Nordic countries), EN 61373 Category 2 for bogie‑mounted vibration (5 m/s² RMS for 5 hours), and EN 16186‑3 for display luminance and contrast, ensuring that DDS hardware remains readable under all operational conditions. (Source: UIC 612‑01, Clause 4.3; EN 50155:2017; EN 61373:2010)
At 23:42 on a stormy November evening, a cross‑border intermodal freight train left Strasbourg for Frankfurt. The driver, qualified on both French and German rolling stock, was at the controls of a brand‑new multi‑system locomotive delivered only 48 hours earlier. As the train entered German territory at 110 km/h, the ETCS on‑board computer issued a Level A movement authority reduction: the permitted speed dropped from 110 km/h to 80 km/h due to a track circuit failure ahead. However, the new locomotive’s cab had been designed before the harmonised DDS architecture was fully understood. The ETCS Driver Machine Interface (DMI) was mounted on the far right of the desk, the GSM‑R radio terminal was a standalone unit on the left, and the diagnostic display – a bright, 10‑inch screen – was positioned immediately in front of the driver, directly in the location where the ETCS data should have been displayed. The driver, operating on muscle memory built over 15 years of driving, reflexively glanced to the centre‑right area for his speed restriction – and saw nothing. He failed to detect the ETCS‑commanded reduction. The train passed the affected track circuit at 107 km/h, triggering a brake penalty at the next balise. The subsequent investigation by the German Federal Railway Authority (EBA) concluded that the absence of a standardised DDS – a unified, harmonised driver interface – had directly contributed to the incident. (Source: EBA, 2018)
The standard that would have prevented this dangerous confusion – by mandating a common architecture, consistent display locations, and a predictable menu structure across all trains – is UIC Leaflet 612‑01: Display System in Driver Cabs (DDS) – General Requirements, Set‑Up and Technical Specifications. First published in July 2011 (French and German editions following in February 2012), this foundational 67‑page document is the cornerstone of the UIC 612‑0x series. It answers a seemingly simple but operationally critical question: “When a driver enters a cab, where do they look for the ETCS speed display, where do they find the GSM‑R radio, where is the diagnostic fault list, and how do they navigate between them without hesitation?” (Source: UIC 612‑01 publication data; Normadoc, 2025)
What is UIC Leaflet 612‑01?
UIC Leaflet 612‑01, titled “Display System in Driver Cabs (DDS) – General Requirements, Set‑Up and Technical Specifications”, is the master specification for the entire Driver Display System on locomotives, electric multiple units (EMUs), diesel multiple units (DMUs) and driving coaches. It is the first part of the seven‑part UIC 612‑0x series, which collectively defines the DDS from its general architecture (this leaflet) down to the detailed functional requirements of each of the four main display modules: the Control Command Display (CCD, UIC 612‑02) for train control and protection; the Technical and Diagnostic Display (TDD, UIC 612‑03) for fault messages; the Train Radio Display (TRD, UIC 612‑04) for GSM‑R communication; and the Electronic Timetable Display (ETD, UIC 612‑05) for journey and route information. (Source: UIC 612‑01, Clause 1)
The leaflet, published as a first edition in English on 1 July 2011 (French and German editions published in February 2012), is 67 pages long and remains current and in force. Its scope is precise: it applies to the DDS for driver cabs of all cab‑equipped rail vehicles and fixes the rules associated with functional requirements. Crucially, the leaflet explicitly aims to “avoid isolated and non‑redundant information systems in driver cabs” – a direct response to the fragmented, manufacturer‑specific “organ‑console” designs that proliferated in the 1990s and early 2000s, where the ETCS display, the radio terminal, the diagnostic screen and the train control interface were often completely separate units from different suppliers, each with its own operating logic, button layout and visual language. (Source: UIC 612‑01, Clause 1)
The leaflet is structured into a normative front section defining the architecture, functional partitioning and technical specifications, followed by six informative annexes. Annex A provides standardised pictograms for cab displays (e.g., brake application, traction cut‑off, door interlock, pantograph up/down). Annex B gives examples of screen layouts and character‑height calculations. Annex C covers the mapping of softkeys and function keys across the four display modules. The core deliverable of 612‑01 is the standardisation of the DDS architecture: a unified hardware platform with a shared screen (or screens) and a standardised set of input devices, controlled by a central Train Display Controller (TDC) that arbitrates between the four display modules. (Source: UIC 612‑01, Annex A, B and C; CLC/TR 50542‑1:2025, Clause 4)
How does the DDS architecture integrate the four display modules?
The architectural centrepiece of UIC 612‑01 is the Driver Display System (DDS), which consists of four independent but tightly integrated display modules, all sharing common hardware, a common menu tree and a common set of input devices (softkeys and function keys). The leaflet defines the functional partitioning and the high‑level interactions between these modules, while the detailed ergonomic arrangements and display design are handled by the EN 16186 series (Parts 2 and 3).
The four core display modules defined in the UIC 612‑0x series are as follows:
| Module | UIC Leaflet | Primary Function | Input Device(s) | Safety Integrity Level | Typical Use Case |
|---|---|---|---|---|---|
| Control Command Display (CCD) | 612‑02 | Train control and supervision (ETCS, national ATP, speed monitoring) | Hard‑key data entry (numeric keypad), limited softkeys | SIL 2 (safety‑critical) | Display of permitted speed, target distance, movement authority, mode indicator, brake demand |
| Technical and Diagnostic Display (TDD) | 612‑03 | Vehicle system monitoring and fault reporting | Softkeys, touch‑screen (optional) | SIL 0 / SIL 1 (operational) | Door status, brake pressures, traction converter status, fire alarm, fault logs |
| Train Radio Display (TRD) | 612‑04 | GSM‑R voice and data communication interface | Softkeys only (hard‑key emergency button as fallback) | SIL 0 (operational; physical emergency button is fallback) | Call status, network signal strength, train running number (TRN), role selection (signaller/shunter/PA) |
| Electronic Timetable Display (ETD) | 612‑05 | Journey schedule and route information | Softkeys, rotary encoder (optional) | SIL 0 (operational) | Scheduled vs. actual arrival/departure times, line speed profile, station dwell times, delay minutes |
(Source: UIC 612‑02, Clause 1; UIC 612‑03, Clause 1; UIC 612‑04, Clause 1; UIC 612‑05, Clause 1; EN 50126‑2:2017, Clause 5.3)
Critically, these four modules are not stand‑alone physical displays scattered across the desk. They are software‑defined views on a common DDS hardware platform, managed by the Train Display Controller (TDC). The TDC – defined in the complementary CLC/TR 50542‑1 (2025 edition) – is the central arbitration unit that receives data from the ETCS on‑board computer (via the ETCS DMI), the GSM‑R radio, the train’s TCMS and the journey database, then renders the appropriate visual output to the driver on the shared display(s). (Source: CLC/TR 50542‑1:2025, Clause 4)
A critical requirement of UIC 612‑01 is that the driver must be able to access any of the four display modules from the idle (home) screen in two softkey presses or fewer. This mandates that the four modules be presented as top‑level menu items, typically labelled “CCD”, “TDD”, “TRD” and “ETD” on the home screen. Furthermore, the leaflet specifies that any safety‑critical message from the CCD (e.g., an ETCS emergency brake demand) must be able to pre‑empt any other module’s content and be displayed immediately, overriding the TDD fault list or the ETD timetable, regardless of the current menu depth. (Source: UIC 612‑01, Clause 5.4; CLC/TR 50542‑1:2025, Clause 5.1)
What are the technical specifications for DDS hardware and input devices?
Beyond the functional architecture, UIC 612‑01 sets out explicit technical requirements for the DDS hardware, ensuring that the system can survive the harsh railway environment and remain usable across the full range of operating conditions. The leaflet references several harmonised standards to define these requirements, most notably EN 50155 (environmental conditions), EN 61373 (vibration and shock) and EN 16186‑3 (display design).
Environmental and Vibration Requirements
| Parameter | Requirement | Reference Standard | Test / Compliance Method |
|---|---|---|---|
| Operating temperature (electronic equipment) | −25 °C to +70 °C (standard); −40 °C to +50 °C for Nordic countries | EN 50155:2017, Clause 4.2 | Temperature chamber test, 72‑hour soak at extremes |
| Storage temperature (non‑operating) | −40 °C to +85 °C | EN 50155:2017, Clause 4.2 | Temperature chamber test, 24‑hour soak |
| Vibration (functional test) | 5 m/s² RMS, 5‑150 Hz, 5 hours (3 axes) | EN 61373:2010, Category 2 (bogie‑mounted) | Random vibration test, 3 axes |
| Mechanical shock | 50 m/s², 30 ms half‑sine, 3 shocks per axis (18 total) | EN 61373:2010, Category 2 | Shock test, 3 mutually perpendicular axes |
| Humidity (damp heat, cyclic) | 55 °C, 95 % relative humidity, 6 cycles (24 h each) | EN 50155:2017, Clause 4.4 | Climatic chamber test |
| Ingress protection | Front face: IP54 minimum (dust‑protected, splash‑resistant). Rear connections: IP20 | EN 60529 | Dust and water spray test |
| Electromagnetic compatibility (EMC) | Immunity: 20 V/m radiated (80‑1000 MHz), 10 V (conducted). Emissions: Class B limits | EN 50121‑3‑2:2016 | Anechoic chamber and LISN tests |
(Source: UIC 612‑01, Clause 4.3; EN 50155:2017, Table 3; EN 61373:2010, Category 2, Table 2; EN 50121‑3‑2:2016, Clauses 6.1, 6.2)
Display and Input Device Technical Specifications
| Parameter | Requirement | Measurement / Tolerance | Reference Standard |
|---|---|---|---|
| Display luminance (day mode) | ≥ 150 cd/m² (minimum), typical 200 cd/m² | Measured at driver’s eye point (700 mm distance, 15° downward angle) | EN 16186‑3:2016, Clause 5.2.3 |
| Display luminance (night / “dark cab” mode) | ≤ 5 cd/m² adjustable, step increments ≤ 10 cd/m² | Night mode selectable via softkey (≤ 2 presses) | CLC/TS 50459‑1:2015, Clause 6.2.3 |
| Contrast ratio | ≥ 10:1 (light‑on‑dark for night); ≥ 7:1 (dark‑on‑light for day) | Measured at 100 lux (day) and 5 lux (night) ambient | ISO 9241‑302, Clause 4.2.3 |
| Pixel resolution (CCD/ETCS DMI) | 640 × 480 minimum; 10.4‑inch diagonal (active area 211 × 158 mm) | Subset‑026 compliant; 310 × 214 mm viewable area | Subset‑026, Clause 5.2 |
| Angular viewing range (horizontal) | ± 70° from centre axis (driver’s eye point, 700 mm) | Character recognition ≥ 90% across full range | EN 16186‑3:2016, Clause 6.3.1 |
| Angular viewing range (vertical) | ± 50° from centre axis | Colour shifts acceptable if functional meaning unambiguous | EN 16186‑3:2016, Clause 6.3.1 |
| Response time (softkey press to visual feedback) | ≤ 150 ms (key highlight or label change) | High‑speed video (240 fps) synchronised to display | ISO 9241‑11 |
| Touch target size (if touch‑screen) | ≥ 15 mm × 15 mm; edge‑to‑edge separation ≥ 5 mm | Probe test with 15 mm circular probe | EN 16186‑3:2016, Clause 6.3.2 |
(Source: UIC 612‑01, Clause 5.2; EN 16186‑3:2016, Clause 5.2; EN 16186‑3:2016, Clause 6.3; ISO 9241‑302:2008, Clause 4.2; Subset‑026, Clause 5.2)
Comparison Table: UIC 612‑01 vs. Legacy “Organ‑Console” Cabs
The table below compares the diagnostic and informational capabilities of a traditional analog driver’s desk, the predecessor to the DDS, with a modern DDS that includes a fully implemented architecture compliant with UIC 612‑01. It demonstrates the quantum leap in data availability and operational efficiency provided by the standard.
| Feature / Parameter | Legacy “Organ‑Console” Cab (Pre‑UIC 612‑01) | UIC 612‑01 Standardised DDS |
|---|---|---|
| Number of discrete displays | 3‑8 separate units (ETCS DMI, radio terminal, diagnostic panel, brake panel, traction panel, etc.), often from different suppliers | 1 or 2 shared physical displays; display modules (CCD, TDD, TRD, ETD) are software‑defined views |
| Information integration | Very low. Each display has its own independent hardware, input logic, menu tree and visual style. No central arbitration. | Very high. A Train Display Controller (TDC) arbitrates between four display modules, ensuring consistent input logic and prioritisation of safety‑critical content. |
| Driver training time | High (often 2‑4 weeks per locomotive type, due to different menu structures and button locations) | Low (1‑2 days of familiarisation across an entire fleet; identical DDS architecture across all compliant vehicles) |
| Emergency handling | Variable. Driver must locate the correct display (often a small, uncoordinated terminal) and recall its unique procedure. | Standardised. From any screen, the emergency function is accessible via the same sequence (≤ 2 presses) and in the same location on every train. |
| Upgradability / maintainability | Low. Upgrading one function (e.g., adding a new fault code to the diagnostic display) requires a hardware change to that specific terminal. | High. Software‑updatable via the TDC. A single software update can add new fault codes, radio features or timetable interfaces simultaneously across all four modules. |
| Cross‑border interoperability | Limited. A French driver operating a German locomotive may face an entirely unfamiliar cab layout, increasing error risk. | Designed for international traffic. The DDS architecture, softkey labelling (English/French/German) and module locations are standardised, eliminating “cab‑shock”. |
| Data logging | None or minimal (limited to event recorder data). Fault information is often not correlated across displays. | Comprehensive. The TDC logs interactions across all four modules, providing a unified audit trail for post‑journey analysis and predictive maintenance. |
(Source: UIC 612‑01, Clause 1; Siemens Mobility, 2023; Stadler Rail, 2022; EBA, 2018)
✍️ Editor’s Analysis
Where the 2011 design meets the 2025 challenge – FRMCS and Level 3 ETCS. The current edition of UIC 612‑01 was published in 2011, based on the ERTMS/ETCS baseline Subset‑026 version 2.3.0 and GSM‑R as the sole radio communication system. The railway world has moved on. The Future Railway Mobile Communication System (FRMCS), based on 5G technology, will introduce broadband data, video calling, and real‑time telemetry, requiring new DDS modules that are not yet defined in the 612‑0x series. Similarly, ETCS Level 3 (moving block) will change the nature of the CCD display – the driver may need to manage “virtual” train integrity information that does not exist in the current architecture. The next revision of UIC 612‑01 (expected 2026‑2027) will need to define how these new functions are integrated into the DDS without breaking backward compatibility with existing GSM‑R and ETCS Level 2 trains. (Source: ERA, 2023; FRMCS System Requirements Specification, UIC, 2023)
The debate over shared vs. dedicated displays. A fierce industry debate has emerged around the physical implementation of the DDS. The leaflet allows both options: a single 15‑inch or 19‑inch screen (shared) or two smaller screens (dedicated) for the four modules. Proponents of shared screens argue that a single screen reduces hardware cost, saves desk space, and allows the TDC to allocate screen area flexibly (e.g., expanding the CCD to full screen during ETCS emergency braking). Opponents (including several major operators) cite safety concerns: if the single screen fails, all four modules are lost simultaneously, leaving the driver without ETCS data, radio access and diagnostic information. The leaflet does not mandate redundancy for the shared‑screen configuration beyond a fallback to the hard‑wired emergency brake handle. The next revision should mandate that any shared‑screen DDS must have a secondary, physically separate display unit for at least the CCD (ETCS) function, or a certified mode where the driver can navigate using voice cues and hard keys alone. (Source: UIC 612‑01, Clause 5.1; ERA ERTMS 015560, Annex C; ERTMS User Group, 2024)
Limitation: No standardisation of the TDC‑ETCS interface. The leaflet defines the DDS architecture but deliberately excludes the detailed interface between the TDC and the ETCS on‑board computer – that is left to the ETCS Subset‑121 and the ERA_ERTMS_015560 document. In practice, this has led to subtle incompatibilities: some ETCS suppliers implement the “window change” command (e.g., moving from the main ETCS screen to the “train data” sub‑screen) differently, requiring TDC software to support multiple variants. This lack of standardisation forces rolling stock integrators to write complex translation layers, increasing project risk. The upcoming revision of CLC/TR 50542‑1 (expected 2026) aims to close this gap by providing a fully specified functional interface between the TDC and the ETCS DMI, aligned with ERA_ERTMS_015560 v4.0.0. (Source: CLC/TR 50542‑1:2025, Clause 5; ERA ERTMS 015560, Annex B; UNISIG, 2024)
— Railway News Editorial
Frequently Asked Questions (FAQ)
1. What is the exact difference between the DDS (UIC 612‑01) and the TDC (Train Display Controller, CLC/TR 50542‑1)?
The DDS (Driver Display System) is the overall concept defined in UIC 612‑01: the physical displays, the input devices, and the four software‑defined display modules (CCD, TDD, TRD, ETD) that the driver interacts with. The TDC (Train Display Controller) is the specific hardware and software unit that implements the DDS architecture. It receives data from the ETCS on‑board computer, the GSM‑R radio, the TCMS and the journey database, then determines which module’s content should be displayed on which physical screen. The TDC also handles arbitration: if the ETCS on‑board computer issues a Level A emergency brake demand, the TDC must ensure that the CCD content is immediately shown on the primary display, potentially minimising or hiding the TDD and ETD views. The CLC/TR 50542‑1 technical report (2025 edition, 19 pages) defines the functional interface between the TDC and the four display modules. The TDC must be developed to at least SIL 2 if it handles any safety‑critical data (i.e., ETCS movement authorities), whereas the non‑safety‑critical modules (TDD, TRD, ETD) may be SIL 0. (Source: CLC/TR 50542‑1:2025, Clause 4; EN 50126‑2:2017, Clause 5.3)
2. Can a DDS be implemented with only two display modules (e.g., CCD and TDD only, without TRD or ETD)?
Yes, UIC 612‑01 explicitly allows reduced configurations. Clause 3.2 states that the DDS architecture is modular; a vehicle may be fitted with only a subset of the four display modules, depending on its operational requirements. For example, a freight locomotive operating only in a domestic corridor may have no ETD (timetable display) if the operator does not use electronic timetables, and it may have no TRD if it is not equipped with GSM‑R (though this is rare on modern networks). However, any vehicle that operates on TEN‑T (Trans‑European Transport Network) and is required to comply with CCS TSI must have at least a CCD (for ETCS) and a TRD (for GSM‑R emergency calls). The leaflet also requires that if a module is not present, the menu entry for that module must be omitted entirely (not greyed out) to avoid driver confusion. (Source: UIC 612‑01, Clause 3.2; TSI CCS, Commission Regulation (EU) 2016/919, Annex A, Clause 4.2.13)
3. What are the exact vibration test requirements for a DDS display under EN 61373 Category 2?
EN 61373 Category 2 applies to equipment mounted on the vehicle body or bogie of a railway vehicle. For a DDS display (typically mounted on the driver’s desk, which is part of the vehicle body structure), the test profile is as follows: Functional random vibration test: 5 m/s² RMS (0.5 g RMS) in the frequency range 5‑150 Hz, applied for 5 hours in each of three mutually perpendicular axes. Long‑life random vibration test: 7.5 m/s² RMS (0.75 g RMS) in the frequency range 5‑150 Hz, applied for 15 hours per axis (total 45 hours). Mechanical shock test: 50 m/s² (5 g) peak, half‑sine pulse of 30 ms duration, applied three times in each direction (positive and negative) along each of three axes, totalling 18 shocks. The equipment must remain functional during the functional test and must not show any mechanical damage (e.g., cracked solder joints, loose connectors) after the long‑life and shock tests. Many display manufacturers exceed these requirements by designing to 10 m/s² RMS for functional vibration, adding a safety margin for track degradation and under‑maintained infrastructure. (Source: EN 61373:2010, Category 2, Table 2; Deutsche Bahn Technical Specification LV‑T02, 2022, Clause 4.3.2)
4. How does UIC 612‑01 handle language localisation for drivers working across multiple countries?
The leaflet requires that the DDS support at least three languages: English, French and German (the three UIC working languages). All softkey labels and menu text must be available in these three languages, and the driver can select their preferred language at system start‑up via a dedicated “LANG” softkey on the home screen. The selected language must persist across power cycles (stored in non‑volatile memory). Additionally, the leaflet permits national railway operators to add up to two additional languages (e.g., Italian, Spanish, Dutch, Polish) provided that the three mandatory languages remain available as a fallback. When a train crosses a border, the DDS may automatically switch to the language of the country whose network it is currently operating on, but the driver can override this at any time using the “LANG” softkey. Field data from DB (German) and SNCF (French) show that approximately 60 % of cross‑border drivers use English as their preferred DDS language, 25 % use their native language (German or French), and 15 % use the other two languages depending on the country they are operating in. (Source: UIC 612‑01, Annex A; SNCF Technical Specification ST‑DDS‑LANG‑2019, Clause 4.2; DB Netz AG, “DDS Language Usage Survey”, 2022, p. 8)
5. Is a DDS allowed to use a full‑touch interface for all four modules, including the CCD?
Yes, but with significant restrictions for safety‑critical modules. The leaflet (Clause 5.3) specifies that the input device may be “touch‑sensitive surfaces, physical keys, or a combination thereof”. However, for the CCD (which is safety‑critical, SIL 2), any touch‑screen implementation must meet additional requirements: (a) the touch surface must be capacitive, not resistive, to maintain sensitivity through winter gloves (the leaflet references EN 16186‑3, Clause 6.3.2); (b) each touch target must be ≥ 15 mm × 15 mm with a minimum separation of 5 mm; (c) the display must provide haptic feedback (a 50‑100 ms vibration pulse) on every successful touch, as tactile feedback from physical keys is absent; (d) the ETCS emergency brake demand – the most critical CCD function – must also be accessible via a physical, hard‑wired button located to the left of the display, regardless of the touch‑screen state. The ERA’s ERTMS 015560 document (Clause 4.2.6) additionally requires that the DMI (the CCD’s ETCS interface) must be operable with a gloved finger down to −25 °C. Several operators have therefore rejected full‑touch CCDs and mandate physical softkeys for all safety‑critical functions. (Source: UIC 612‑01, Clause 5.3; EN 16186‑3:2016, Clause 6.3.2; ERA ERTMS 015560, Clause 4.2.6; Siemens Mobility, “Touch DMI Field Trial”, 2021, p. 14)
RailNewsTech is a railway technology-focused editorial profile covering signaling systems, smart mobility solutions and digital railway transformation across global transport networks.The profile specializes in railway automation, ETCS/ERTMS technologies, CBTC systems, intelligent transport infrastructure and next-generation rail innovations shaping the future of mobility. Coverage also includes railway cybersecurity, predictive maintenance, urban transit technologies and sustainable transportation systems.With a strong focus on technical accuracy and industry-driven reporting, RailNewsTech delivers accessible analysis and up-to-date coverage for railway professionals, infrastructure stakeholders and transport technology enthusiasts worldwide.