b) Loss of Track-side ATO/ATP Function
The design of the track-side signalling system has fully redundancy and hence a single failure of a track-side signalling sub-system will not impair ATO operation. In the event of a double failure involving region automatic train operation (RATO) or region automatic train protection (RATP), all trains travelling in the region can still be tracked by the axle-counter secondary train detection system and all communicating trains in the area will be protected from entering the occupied axle-counter sections