Evaluation of the On-Line Testing Features of a Fail-Safe Railway Control System