Russell Hill subway accident
Encyclopedia
The 1995 Russell Hill subway accident was a deadly train crash that occurred in Toronto
, Ontario
, Canada on the Yonge-University-Spadina subway line of the Toronto subway and RT
on August 11, 1995. Three people were killed and 30 were taken to hospital with injuries when one train rear-ended another train. The subway line was shut down for five days following the incident. Investigations found that human error and a design flaw in the mechanical safety devices caused this accident. It remains the deadliest subway accident in Canadian history.
and Dupont stations
. There were between 200 to 300 passengers on the two trains, of whom three were killed and 30 taken to hospital with injuries; about 100 more later filed injury claims against the TTC. Many of the seriously injured were extracted from the twisted remains of the most damaged subway cars by rescue workers who worked through the evening under extremely hot and humid conditions. Of the four crew members, three were taken to hospital with injuries.
which failed to protect the train due to a design error.
s without cab signaling. Thus drivers are expected to remember each signal aspect and act accordingly until they receive new information from the following signal. The following description is limited to aspects relevant to the accident.
Some signals are "automatic" and have a single head that shows one of the three basic colors. Red means stop and stay (until presented with a less restrictive signal aspect), yellow means that the next signal is red and the driver should prepare to stop, and green means that the next signal is not red and it is safe to proceed at normal speed.
"Interlocking" or "home" signals have a double head and show two colored lights. The top light has the same meaning as that of an automatic signal. The second light is red if the top light is red; otherwise it shows yellow if the switch
es are set for a secondary route, and green for the main route or if no relevant switches exist. Thus the combination yellow over green means the same as a single yellow.
At locations such as downgrades, curves, and switches, the same signals additionally serve to enforce speed limits. A system called "grade timing", and is indicated by an additional "lunar white" light below the one or two colored lights previously mentioned. The white light means that the next signal is red (or double red) only because of grade timing, and if the train approaches at the proper speed, the signal will clear to a less restrictive aspect before the train gets there. If the train goes too fast, it will pass the red signal and be stopped by the train stop
.
In 1995 the second signal did not provide any confirmation that it was about to change and the operator was expected to remember the previous signal aspect correctly. With the tolerant attitudes of management, it had become common practice for operators to travel at the fastest speed that the system allowed, passing the signals at the same instant they were clearing.
A long downgrade would therefore have several consecutive grade-timing sections. If all the signals were automatic and no trains were present, the first signal would be yellow over white, followed by a series of red over whites, and finally a red. When the train approaches each red over white signal, it would clear to yellow over white and the train stop would be lowered; and the final red signal would clear to green. Interlocking signals can also take part in grade timing, with aspects such as yellow over green over white (meaning the same as yellow over white).
From St. Clair West to Dupont the subway runs continuously downhill and grade timing is used. The signal at the end of St. Clair West station, SP77/X38, is an interlocking signal and therefore shows yellow over green over white whenever there is nothing to delay a train. As Jeffrey's train passed the signal, however, it was showing yellow over green. He should have stopped at the following signal, SP71, which was red because another train was occupying the block ahead.
After the accident Jeffrey said he remembered SP77/X38 as yellow over white (actually an impossible aspect for that signal) therefore he must have either "misremembered" it at the time, or else have been fooled by some reflection off the signal head into thinking he had seen the usual yellow over green over white. In any case, he believed that grade timing was in use and so approached signal SP71 at the same speed as he would normally drive on this section.
After this Jeffrey did not remember what he had seen, but it is easy to reconstruct the events. When the train passed SP71 without him seeing it change, he must have assumed that he had passed it just as it cleared. He continued coasting downhill, still thinking that he was under grade timing and violated the signal, without realizing that if this was true, the signal would have shown red over white as he approached.
He must therefore have expected the third signal, (the SP65) to clear in the same way. Again it was showing red, not red over white, but Jeffrey repeated his mistake and violated the signal. He braked only when he actually saw the train just ahead (it was stopped at the next signal, SP53); and that was much too late.
(News media accounts of the accident often say that Jeffrey "passed three red lights." This count includes the repeater signal provided in advance of SP65 because a curve in the tunnel interferes with sighting. Drivers are not expected to stop at the repeater even if it is red.)
" consists of a T-shaped arm placed just outside the right-hand rail near each signal (except a repeater). If the signal is red (or double red), with or without a lunar white, the trip arm rises enough for its crossbar to strike a "trip valve" or "tripcock" lever on the bottom of a train's first car as it passes; and by doing so triggers the emergency brakes of the train.
On the relevant class of trains
, the trip valve is located near the centre of the right side of the leading bogie
, where its position in relation to the rail is well controlled.
Wismer and Becker, Inc., the contractors who installed the signal system on the Spadina line portion of the subway, chose to use an Ericsson
train stop that was designed to have the trip arm located in the middle of the track. A subcontractor, Gayle Manufacturing, designed a mechanical extension that would allow the device to drive a trip arm in its actual position outside of the rail.
What was not realized was that the mechanism they designed (when the trip arm was raised) did not have the clearance specified for the train and therefore would not have the desired effect of activating the train's emergency braking system.
When both the trip arm, and trip valve were new, this did not matter. The train did not fill its entire clearance envelope, and the trip arm would contact the trip valve normally. However, with normal wear of the wheels and rails, and with the train rounding a curve at speed (and therefore riding off-centre) it was another matter. The first wheel on the right-hand side of the train hit a bolt in the mechanism attached to the trip arm and knocked the arm down. It would then rise again, but too late: with the train moving quickly, the trip valve, just a few feet behind the wheel, would already have gone past, thus making the train stop useless for ensuring signal compliance.
The 18 recommendations were taken by the TTC and turned into a 236 point 'Due Diligence Checklist' of items to be addressed. Each year the Toronto Transit Commission receives a report on the outstanding items. As of the August 2009 update only 2 of the 236 points have yet to be addressed. The two outstanding items relate to a speed control system that is currently being implemented that will reduce the dependence on signals for speed indication.
In 1997 and 1998, the behaviour of the signals themselves was changed. Now, when a signal is red (or double red) only because of grade timing, the (top) red light flashes during the last few seconds before it clears. The trip arm remains up during this phase, but the flashing red confirms to the driver that there was a lunar white on entry to the section and that the signal can be expected to clear at any moment. Jeffrey's mistaken interpretation of the red signal SP71 would no longer be possible.
Toronto
Toronto is the provincial capital of Ontario and the largest city in Canada. It is located in Southern Ontario on the northwestern shore of Lake Ontario. A relatively modern city, Toronto's history dates back to the late-18th century, when its land was first purchased by the British monarchy from...
, Ontario
Ontario
Ontario is a province of Canada, located in east-central Canada. It is Canada's most populous province and second largest in total area. It is home to the nation's most populous city, Toronto, and the nation's capital, Ottawa....
, Canada on the Yonge-University-Spadina subway line of the Toronto subway and RT
Toronto subway and RT
The Toronto subway and RT is a rapid transit system in Toronto, Ontario, Canada, consisting of both underground and elevated railway lines, operated by the Toronto Transit Commission . It was Canada's first completed subway system, with the first line being built under Yonge Street, which opened in...
on August 11, 1995. Three people were killed and 30 were taken to hospital with injuries when one train rear-ended another train. The subway line was shut down for five days following the incident. Investigations found that human error and a design flaw in the mechanical safety devices caused this accident. It remains the deadliest subway accident in Canadian history.
Overview
At 6:02 p.m. on August 11, 1995, a subway train running southbound on the Yonge-University Spadina line ran into the rear of a stationary train halfway between St. Clair WestSt. Clair West (TTC)
St. Clair West is a station on the Yonge–University–Spadina line of the subway system in Toronto, Ontario, Canada. It is at 370 St. Clair Avenue West between Bathurst Street and Tweedsmuir Avenue. The sports field of St. Michael's College School is directly above the length of the station; a...
and Dupont stations
Dupont (TTC)
Dupont is a station on the Yonge–University–Spadina line of the subway in Toronto, Ontario, Canada. It is located on Spadina Road at 278 Dupont Street....
. There were between 200 to 300 passengers on the two trains, of whom three were killed and 30 taken to hospital with injuries; about 100 more later filed injury claims against the TTC. Many of the seriously injured were extracted from the twisted remains of the most damaged subway cars by rescue workers who worked through the evening under extremely hot and humid conditions. Of the four crew members, three were taken to hospital with injuries.
Direct causes
The accident had two direct causes: first the inexperienced driver, Robert Jeffrey, who mistook the signals, and the train stopTrain stop
Part of a railway signalling system, a train stop or trip stop is a train protection device that automatically stops a train if it attempts to pass a signal when the signal aspect and operating rules prohibit such movement, or if it attempts to pass at an excessive speed.- Basic operation :The...
which failed to protect the train due to a design error.
Signals
The TTC subway uses conventional wayside signalRailway signal
A signal is a mechanical or electrical device erected beside a railway line to pass information relating to the state of the line ahead to train/engine drivers. The driver interprets the signal's indication and acts accordingly...
s without cab signaling. Thus drivers are expected to remember each signal aspect and act accordingly until they receive new information from the following signal. The following description is limited to aspects relevant to the accident.
Some signals are "automatic" and have a single head that shows one of the three basic colors. Red means stop and stay (until presented with a less restrictive signal aspect), yellow means that the next signal is red and the driver should prepare to stop, and green means that the next signal is not red and it is safe to proceed at normal speed.
"Interlocking" or "home" signals have a double head and show two colored lights. The top light has the same meaning as that of an automatic signal. The second light is red if the top light is red; otherwise it shows yellow if the switch
Railroad switch
A railroad switch, turnout or [set of] points is a mechanical installation enabling railway trains to be guided from one track to another at a railway junction....
es are set for a secondary route, and green for the main route or if no relevant switches exist. Thus the combination yellow over green means the same as a single yellow.
At locations such as downgrades, curves, and switches, the same signals additionally serve to enforce speed limits. A system called "grade timing", and is indicated by an additional "lunar white" light below the one or two colored lights previously mentioned. The white light means that the next signal is red (or double red) only because of grade timing, and if the train approaches at the proper speed, the signal will clear to a less restrictive aspect before the train gets there. If the train goes too fast, it will pass the red signal and be stopped by the train stop
Train stop
Part of a railway signalling system, a train stop or trip stop is a train protection device that automatically stops a train if it attempts to pass a signal when the signal aspect and operating rules prohibit such movement, or if it attempts to pass at an excessive speed.- Basic operation :The...
.
In 1995 the second signal did not provide any confirmation that it was about to change and the operator was expected to remember the previous signal aspect correctly. With the tolerant attitudes of management, it had become common practice for operators to travel at the fastest speed that the system allowed, passing the signals at the same instant they were clearing.
A long downgrade would therefore have several consecutive grade-timing sections. If all the signals were automatic and no trains were present, the first signal would be yellow over white, followed by a series of red over whites, and finally a red. When the train approaches each red over white signal, it would clear to yellow over white and the train stop would be lowered; and the final red signal would clear to green. Interlocking signals can also take part in grade timing, with aspects such as yellow over green over white (meaning the same as yellow over white).
From St. Clair West to Dupont the subway runs continuously downhill and grade timing is used. The signal at the end of St. Clair West station, SP77/X38, is an interlocking signal and therefore shows yellow over green over white whenever there is nothing to delay a train. As Jeffrey's train passed the signal, however, it was showing yellow over green. He should have stopped at the following signal, SP71, which was red because another train was occupying the block ahead.
After the accident Jeffrey said he remembered SP77/X38 as yellow over white (actually an impossible aspect for that signal) therefore he must have either "misremembered" it at the time, or else have been fooled by some reflection off the signal head into thinking he had seen the usual yellow over green over white. In any case, he believed that grade timing was in use and so approached signal SP71 at the same speed as he would normally drive on this section.
After this Jeffrey did not remember what he had seen, but it is easy to reconstruct the events. When the train passed SP71 without him seeing it change, he must have assumed that he had passed it just as it cleared. He continued coasting downhill, still thinking that he was under grade timing and violated the signal, without realizing that if this was true, the signal would have shown red over white as he approached.
He must therefore have expected the third signal, (the SP65) to clear in the same way. Again it was showing red, not red over white, but Jeffrey repeated his mistake and violated the signal. He braked only when he actually saw the train just ahead (it was stopped at the next signal, SP53); and that was much too late.
(News media accounts of the accident often say that Jeffrey "passed three red lights." This count includes the repeater signal provided in advance of SP65 because a curve in the tunnel interferes with sighting. Drivers are not expected to stop at the repeater even if it is red.)
Train stop
The "trip" or "train stopTrain stop
Part of a railway signalling system, a train stop or trip stop is a train protection device that automatically stops a train if it attempts to pass a signal when the signal aspect and operating rules prohibit such movement, or if it attempts to pass at an excessive speed.- Basic operation :The...
" consists of a T-shaped arm placed just outside the right-hand rail near each signal (except a repeater). If the signal is red (or double red), with or without a lunar white, the trip arm rises enough for its crossbar to strike a "trip valve" or "tripcock" lever on the bottom of a train's first car as it passes; and by doing so triggers the emergency brakes of the train.
On the relevant class of trains
H-series (Toronto Subway car)
The H-series rapid transit cars are a subway car model built from 1965 to 1990 for the Toronto Transit Commission in Toronto, Ontario, Canada. From 1965 to 1975, the cars were built by Hawker Siddeley Canada and later by its new owner the Urban Transportation Development Corporation...
, the trip valve is located near the centre of the right side of the leading bogie
Bogie
A bogie is a wheeled wagon or trolley. In mechanics terms, a bogie is a chassis or framework carrying wheels, attached to a vehicle. It can be fixed in place, as on a cargo truck, mounted on a swivel, as on a railway carriage/car or locomotive, or sprung as in the suspension of a caterpillar...
, where its position in relation to the rail is well controlled.
Wismer and Becker, Inc., the contractors who installed the signal system on the Spadina line portion of the subway, chose to use an Ericsson
Ericsson
Ericsson , one of Sweden's largest companies, is a provider of telecommunication and data communication systems, and related services, covering a range of technologies, including especially mobile networks...
train stop that was designed to have the trip arm located in the middle of the track. A subcontractor, Gayle Manufacturing, designed a mechanical extension that would allow the device to drive a trip arm in its actual position outside of the rail.
What was not realized was that the mechanism they designed (when the trip arm was raised) did not have the clearance specified for the train and therefore would not have the desired effect of activating the train's emergency braking system.
When both the trip arm, and trip valve were new, this did not matter. The train did not fill its entire clearance envelope, and the trip arm would contact the trip valve normally. However, with normal wear of the wheels and rails, and with the train rounding a curve at speed (and therefore riding off-centre) it was another matter. The first wheel on the right-hand side of the train hit a bolt in the mechanism attached to the trip arm and knocked the arm down. It would then rise again, but too late: with the train moving quickly, the trip valve, just a few feet behind the wheel, would already have gone past, thus making the train stop useless for ensuring signal compliance.
Inquest
The jury at the coroner's inquest produced 18 recommendations:- Reform of the Railways Act (1950) to provide oversight of the Toronto Transit Commission.
- The TTC should submit to an independent safety audit every two years, beyond that done by APTA. This independent agency will be set up under the revised Railway Act.
- Completion of the "Due Diligence Checklist" of deficiencies identified by the TTC.
- The Province and Metro commit to a "State of Good Repair" funding policy; repair to take precedence over new works (see Sheppard line); future capital funding based on the State of Good Repair. The jury indicated that underfunding since the mid-1980s has contributed to the deterioration of the system and had jeopardized the safety of the Toronto Transit Commission.
- Improvements to the Operations Training Centre starting with the hiring of an accredited adult training specialist. The updated training package should include at least: realistic pass / fail grading, annual refresher for all operators, emphasis on the meaning of the signal system, route supervisory accompaniment for at least one day of complete runs after training completion.
- An updated Operations Training Centre to include a suitable subway simulator.
- A comprehensive review of the signal system with emphasis in the following areas: Lunar Whites, removal of signal identification markers, consistent placement of signal aspects, progressive speed control, expansion of IPHC to identify headway and train separation, all trip valves activated and relocation of reset.
- Elimination of auto key-by facility and implementation of raised trip arm immediately after train has passed.
- Advanced implementation of the new subway communications system.
- Improved communication within the organisation.
- A new Transit Control Centre including the updating of the skills of TTC staff.
- The current Transit Control Centre should only be responsible for Operations. Such things as intrusion alarms, facility maintenance, public information, media relations and other related concerns should be handled by an adjacent facility.
- Emergency response exercise every five years with "everybody". Yearly reviews by the Safety department
- Improved predictive and preventative maintenance with computer assist where applicable.
- Review of equipment procurement with respect to quality control. The procurement of cheap equipment (the Ericsson train stops) is a misuse of resources and a serious safety issue.
- Traceable design criteria and standards for track, signal and subway cars. No modifications without approval of design review authority.
- Train operators and the TTC must identify signal malfunctions by signal identification numbers. Review of the discipline system to allow for signal malfunctions. Operators reporting for duty to meet an inspector so that "State of the road" information can be passed on. Rookie operators not to be scheduled together.
- The office of the Chief Coroner is to convene a press conference one year hence to provide all parties with an update on the implementation of these recommendations.
The 18 recommendations were taken by the TTC and turned into a 236 point 'Due Diligence Checklist' of items to be addressed. Each year the Toronto Transit Commission receives a report on the outstanding items. As of the August 2009 update only 2 of the 236 points have yet to be addressed. The two outstanding items relate to a speed control system that is currently being implemented that will reduce the dependence on signals for speed indication.
The direct causes corrected
The TTC acted quickly following the accident to repair the defective modified Ericsson train stops. They also began requiring drivers to traverse grade-timing sections at a speed that would allow them to actually see the red signal change before they left the section.In 1997 and 1998, the behaviour of the signals themselves was changed. Now, when a signal is red (or double red) only because of grade timing, the (top) red light flashes during the last few seconds before it clears. The trip arm remains up during this phase, but the flashing red confirms to the driver that there was a lunar white on entry to the section and that the signal can be expected to clear at any moment. Jeffrey's mistaken interpretation of the red signal SP71 would no longer be possible.