Why this environment matters
The trust boundary for metro platform screen door controllers matters because the system synchronises platform barriers with train arrival and door opening. The operational threat is specific: false commands, sensor spoofing or remote compromise could create passenger entrapment, falls or prolonged station shutdowns. A NØNOS-based design could reduce ambient authority and make the system easier to reset, inspect and attest.
The security challenge
Transport systems often operate continuously, depend on specialised protocols and must preserve safe fallback behaviour while interacting with many operators, contractors and external data sources. For this system, the primary attack path is that false commands, sensor spoofing or remote compromise could create passenger entrapment, falls or prolonged station shutdowns. Conventional general-purpose hosts often place parsers, management tools, network services and privileged drivers in one broad trust domain, allowing a flaw in a low-value feature to reach a high-consequence function.
How the capsule model could help
NØNOS could be placed at the operator, gateway, edge or application-compute layer and configured to separate train-detection, door actuation, obstacle sensing and remote maintenance services with tightly scoped hardware capabilities. The most relevant controls are rapid recovery to a known state, signed operational software, compartmentalised protocol handlers and attested operator sessions. This would make privileges explicit: a service that reads a sensor, displays data or contacts a cloud API would not automatically be able to issue a physical command or use a signing key.
Deployment requirements
NØNOS would need to sit beside, or be engineered into, existing certified systems without weakening deterministic behaviour, fail-safe modes, independent protection or operator procedures.
Current public-beta limitations, hardware support and application availability must be assessed before any pilot. Neither this use case nor an industry source establishes NONOS certification or a current customer deployment.
Who could buy or integrate it?
- Metro authorities commissioning platform barrier systems
- Platform-door manufacturers embedding controller software
- Station systems integrators coordinating doors and signalling
Industry examples: Knorr-Bremse, Wabtec. Organisations shown illustrate the industry. No NONOS customer, partner or endorsement relationship is implied.