Why this environment matters
Security for railway interlocking workstations extends beyond passwords and network firewalls. The system lets authorised staff configure, monitor and maintain logic that prevents conflicting train movements, while malicious configuration changes or compromised engineering tools could undermine route locking and signal dependencies. NØNOS could be evaluated as an execution layer that verifies software identity, limits device access and avoids unnecessary long-lived state.
The security challenge
Transport systems often operate continuously, depend on specialised protocols and must preserve safe fallback behaviour while interacting with many operators, contractors and external data sources. In railway interlocking workstations, the decisive risk is that malicious configuration changes or compromised engineering tools could undermine route locking and signal dependencies. Even strong perimeter controls may not help once authorised software, a vendor tool or a valid user session has been compromised. Internal permission boundaries must remain enforceable after initial access.
How the capsule model could help
For this system, NØNOS could run engineering, file-transfer and validation tools in separate signed capsules with no direct access to live interlocking assets unless explicitly authorised. The design would combine least-privilege device access, rapid recovery to a known state, signed operational software and compartmentalised protocol handlers. The intended result would be a set of small trust boundaries instead of one large operating environment where every service inherits broad ambient access.
Deployment requirements
NØNOS would need to sit beside, or be engineered into, existing certified systems without weakening deterministic behaviour, fail-safe modes, independent protection or operator procedures.
Current public-beta limitations, hardware support and application availability must be assessed before any pilot. Neither this use case nor an industry source establishes NONOS certification or a current customer deployment.
Who could buy or integrate it?
- Rail infrastructure managers procuring engineering workstations
- Signalling vendors integrating maintenance environments
- Rail maintenance contractors standardising authorised service tools
Industry examples: Alstom, Siemens Mobility. These are research prospects, not represented as NONOS customers, partners or endorsers.