A train activates an emergency brake when a Station Loop Coil (SLC) used for a stop-position determination function to determine whether the train has stopped at a stop target in a terminal becomes unable to be detected (non-detected state) before the train is determined to have stopped at a stop-position by the stop-position determination function after the SLC has been detected. Thus, the train can be prevented from colliding with a car stop disposed at an end of a track as a result of overrunning. In the terminal protection, an emergency brake or a service brake is activated also when a reception duration during which the SLC continues to be detected reaches a predetermined threshold time period, or when a traveling position of the train reaches a disposed position of the SLC but the SLC is not detected.