Industries · Railway & Rolling Stock
Controller firmware, EN 50128 and EN 50716 verification evidence, on-target test and trace, and power electronics benches for rolling stock and signalling teams. Engineering led from Bengaluru.
Controller firmware, EN 50128 and EN 50716 verification evidence and on-target test for onboard controllers, signalling and rolling stock software.
Every onboard controller, braking system and train management unit runs safety-related embedded software, and so does the signalling equipment beside the track. The CENELEC railway software standards, EN 50128 and EN 50716, cover both the software development lifecycle and the qualification of the compilers and libraries used to build it. EN 50716:2023 replaces EN 50128:2011 in the BSI catalogue, and the standard a project is assessed against is set by the programme and its assessor.
GSAS engineers the controller firmware and produces the verification evidence as the code is written. Static analysis with Klocwork and Perforce QAC enforces MISRA C:2023 and project coding rules, and SEGGER J-Link PRO and J-Trace PRO provide real-time debug and trace on the Arm Cortex-R and Cortex-M targets used in train control units, door controllers and traction inverters.
For signalling and interlocking software, where the highest safety integrity levels apply, the work follows the V-model from requirements traceability to tests run on the target, with the tool classification and qualification documentation the assessor reviews. The safety case, the assessment and the certification stay with the customer and an assessor independent of the team that produced the evidence.
Each card lights the part of the train or the trackside system that service touches, from the controller firmware to the bench that tests the traction drive.
Board support, real-time kernels and drivers for train control units, door controllers and traction controllers.
The verification evidence an independent assessor reviews, produced as the code is written.
A real-time kernel that keeps safety functions apart from everything else on the processor.
Tests that pass on a host still have to pass on the real core, every build.
Benches that drive and measure the power stage the controller firmware runs.
Workshops on your codebase, so the team owns the rules and the evidence after GSAS leaves.
Each stage leaves something the independent assessor or the next team can check. The safety case, the assessment and the approval stay independent of the team that produces the evidence.
01
Rules and tools agreed before the first commit
02
Findings reach the developer who made the change
03
Evidence packaged for the independent assessor
Each service above is a full practice at GSAS. These are the pages that describe it in depth.
GSAS is a value added distributor/reseller for these products. We have a dedicated FAE team ready to help you with custom built solutions matching your needs.
Perforce Klocwork Klocwork by Perforce is a scalable SAST tool for C, C++, C#, Rust, Java, JavaScript, Python, and Kotlin, built for DevSecOps with incremental analysis, MISRA, CERT, and CWE enforcement, and TUV SUD certified ISO 26262 and IEC 61508 tool qualification. Deployed and supported across India by GSAS. 
Perforce Perforce QAC MISRA compliance analysis tool for C and C++ with qualification kits for automotive and safety-critical certification. India pricing and local support from GSAS. 
SEGGER J-Link PRO Professional JTAG/SWD debug probe with USB and Ethernet connectivity, supporting Arm Cortex-M/A/R and RISC-V architectures. India pricing and local support from GSAS. 
SEGGER J-Trace PRO Trace probe for Arm and RISC-V with USB 3.0, 64 MB trace buffer, and continuous streaming trace. Local stock and support across India, GSAS. A chip shows a published qualification scope where one exists, and the bare standard name where none does.
| Tool | Applicable Standards |
|---|---|
| Klocwork (Perforce) | IEC 61508 up to SIL 4MISRA C:2023EN 50716 up to SW-SIL 4EN 50128 |
| Perforce QAC | IEC 61508 up to SIL 4MISRA C:2023EN 50716 up to SW-SIL 4EN 50128 |
| Arm Compiler for Embedded FuSa | IEC 61508 SIL 3 (qualified releases)EN 50716 SIL 4 (qualified releases) |
| embOS-Safe (SEGGER) | IEC 61508 SIL 3 |
| TESSY (Razorcat) | IEC 61508 (T2 support tool)EN 50128 (T2 support tool) |
A rolling stock subsystem, signalling software or a component for someone else’s train.
01
Onboard controllers and subsystems
Firmware for train control units, door controllers and brake controllers on Cortex-R and Cortex-M, with EN 50128 and EN 50716 verification evidence produced alongside the code.
02
The highest integrity levels
Coding-standard enforcement, unit tests with structural coverage, tool documentation and safety-kernel integration for software whose integrity level is set by your safety analysis.
03
Inverters and drive electronics
Controller firmware and the benches that test it: regenerative DC sources for the motor-drive DC bus, automated waveform measurement and production test stations.
Tell us the subsystem, the integrity level and the standard it is assessed against. GSAS replies from Bengaluru with scope and a proposal: firmware, verification evidence, on-target test and benches.
GSAS provides onboard controller firmware on Cortex-R and Cortex-M, EN 50128 and EN 50716 verification evidence, safety-kernel integration, on-target test and trace, traction and power electronics benches, and training for rail software teams. Engineering is led from Bengaluru.
Yes. GSAS enforces MISRA C:2023 with deviation records, writes requirements-based unit tests with structural coverage, runs them on the target, and prepares the tool classification and qualification documentation. The safety case and the assessment stay with your process and your independent assessor.
No. GSAS works on the development side, producing the engineering and the verification evidence. Assessment and certification stay independent of the team that produces that evidence.
The BSI catalogue records BS EN 50716:2023 as replacing BS EN 50128:2011, so EN 50716 is the current railway software reference. Which one a project is assessed against is set by the programme and its assessor, and GSAS produces evidence for either.
Yes. GSAS builds benches with regenerative DC sources that absorb motor-drive braking energy, automates oscilloscope measurement of the power stage, and designs production test stations for the controller boards.
Yes. GSAS is a value added distributor/reseller for the static analysis, debug and trace tools on this page, and its engineers use the same tools on customer projects.
Blog
How to pick between FAT32 and exFAT in SEGGER emFile for Indian railway, industrial and genset data logging programmes, with Journaling, interop, and per-file size limits explained.
How Indian industrial and railway firmware teams use SEGGER emFile with raw NAND flash, ECC, wear-levelling, bad-block management, power-fail safety, and RDSO-grade data retention.
