WO2006000373A1 - Operating and display system for a motor vehicle - Google Patents

Operating and display system for a motor vehicle Download PDF

Info

Publication number
WO2006000373A1
WO2006000373A1 PCT/EP2005/006661 EP2005006661W WO2006000373A1 WO 2006000373 A1 WO2006000373 A1 WO 2006000373A1 EP 2005006661 W EP2005006661 W EP 2005006661W WO 2006000373 A1 WO2006000373 A1 WO 2006000373A1
Authority
WO
WIPO (PCT)
Prior art keywords
computer
display system
vehicle
operating
core
Prior art date
Application number
PCT/EP2005/006661
Other languages
German (de)
French (fr)
Inventor
Marcus Bösinger
Roland Pregizer
Original Assignee
Daimlerchrysler Ag
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Daimlerchrysler Ag filed Critical Daimlerchrysler Ag
Publication of WO2006000373A1 publication Critical patent/WO2006000373A1/en

Links

Classifications

    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B60—VEHICLES IN GENERAL
    • B60W—CONJOINT CONTROL OF VEHICLE SUB-UNITS OF DIFFERENT TYPE OR DIFFERENT FUNCTION; CONTROL SYSTEMS SPECIALLY ADAPTED FOR HYBRID VEHICLES; ROAD VEHICLE DRIVE CONTROL SYSTEMS FOR PURPOSES NOT RELATED TO THE CONTROL OF A PARTICULAR SUB-UNIT
    • B60W50/00—Details of control systems for road vehicle drive control not related to the control of a particular sub-unit, e.g. process diagnostic or vehicle driver interfaces
    • B60W50/04—Monitoring the functioning of the control system
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B60—VEHICLES IN GENERAL
    • B60W—CONJOINT CONTROL OF VEHICLE SUB-UNITS OF DIFFERENT TYPE OR DIFFERENT FUNCTION; CONTROL SYSTEMS SPECIALLY ADAPTED FOR HYBRID VEHICLES; ROAD VEHICLE DRIVE CONTROL SYSTEMS FOR PURPOSES NOT RELATED TO THE CONTROL OF A PARTICULAR SUB-UNIT
    • B60W50/00—Details of control systems for road vehicle drive control not related to the control of a particular sub-unit, e.g. process diagnostic or vehicle driver interfaces
    • B60W50/02—Ensuring safety in case of control system failures, e.g. by diagnosing, circumventing or fixing failures
    • B60W50/035—Bringing the control units into a predefined state, e.g. giving priority to particular actuators

Definitions

  • the invention relates to an operating and display system for a vehicle according to the preamble of patent claim 1.
  • control and display systems include, for example, optical and acoustic display units, such as screens, displays, speakers, etc., and manual input means and / or voice input means for operating vehicle components and / or vehicle applications, such as navigation, audio and / or communication systems, and displaying current ones States of the vehicle components and / or vehicle applications that are transmitted via various data bus systems such as MOST, CAN, etc.
  • optical and acoustic display units such as screens, displays, speakers, etc.
  • manual input means and / or voice input means for operating vehicle components and / or vehicle applications, such as navigation, audio and / or communication systems, and displaying current ones States of the vehicle components and / or vehicle applications that are transmitted via various data bus systems such as MOST, CAN, etc.
  • the object of the invention is to provide an operating and display system for a vehicle with high reliability and independent bus systems for the execution of various applications.
  • the invention achieves this object by providing an operating and display system for a vehicle having the features of patent claim 1.
  • a first computer core controls telematics applications and operating sequences
  • a second computer core decoupled from the first computer core controls a gateway functionality between different data bus systems and an evaluation of the vehicle functions.
  • the two computer cores each have a watchdog function, which ensure the failure and one of the computer cores process and / or display of safety-critical vehicle functions.
  • the respective watchdog function for example, recognize invalid operating states of the associated computer core, the necessary emergency running properties are realized to ensure that in case of failure of a computer core, especially safety-critical vehicle functions and / or vehicle applications can continue working.
  • the two computer cores are able to set each other in an emergency operation, for example, if one of the two computer cores detects a software problem of the other computer core.
  • the normal working computer core sets the failed arithmetic core in the emergency to work at least safety-critical requirements for the failed core computer. If, for example, the second computer core recognizes a software problem or a failure or a malfunction in the first computer core and if a safety-critical request is made to the first computer core to control the telematics applications via a first data bus, then the second computer core is able to run the first computer core in emergency mode to ensure an indication according to the safety-critical requirement. If, on the other hand, the first computer detects a software problem or a failure or a malfunction in the second computer core, then the first computer core sets the second computer core in emergency mode and issues a warning so that the communication on the data bus systems is not disturbed.
  • the first computer core comprises, for example, a main processor, a program memory, a graphics module with graphics processor, memory and MPEG decoder, an audio module and an operator interface.
  • the second computer core comprises, for example, a main processor, a program memory, a volatile memory, a CAN-Class-B interface, a CAN-Class-C interface and a MOST interface.
  • FIG. 1 is a block diagram of an exemplary embodiment of the architecture of a control and display system for a vehicle
  • FIG. 2 is a detailed block diagram of the control and display system of FIG. 1.
  • the architecture of the operating and display system 100 comprises two independent computer cores 10, 20, wherein a first computer core 10 controls telematics applications and operating sequences (HMI) and a second computer core 20 controls a gateway functionality between different data bus systems such as MOST 31, CAN C 32, CAN B 33 etc. ensures and takes over the evaluation of the sometimes safety-critical vehicle functions.
  • HMI telematics applications and operating sequences
  • a DVD drive 110 As further components of the operating and display system, a DVD drive 110, a navigation system 120 with a locating unit 122 and a TMC tuner (Traffic Massage Channel), a radio tuner 131, a memory card drive 132 and a Bluetooth unit 133 are shown by way of example .
  • TMC tuner Traffic Massage Channel
  • radio tuner 131 a memory card drive 132 and a Bluetooth unit 133
  • Fig. 1 By dividing the existing functionality of the operating and display system 100 on two decoupled computer cores 10, 20, which monitor each other's functionality, this is shown in Fig. 1 by the double arrow 80, is advantageously a higher reliability with simultaneous independence of the data bus systems for the execution of vehicle functions and Vehicle applications achieved.
  • the two computer cores 10, 20 each have a watchdog function 12, 22, for example, recognize invalid operating states of the associated computer core 10, 20 and realize the necessary emergency running properties to ensure that in case of failure of a computer core 10, 20 mainly safety-critical vehicle functions and / or vehicle applications can continue working.
  • the normally operating computer core 10 sets the failed arithmetic core 20 in emergency mode in order to process at least safety-critical requirements for the failed computer core 20.
  • the second computer core 20 for example, a software problem or a failure or malfunction in the first computer core 10 and a first data bus such as CAN C backbone 32 a safety-critical requirement to the first computer core 10 to control the telematics applications, then the second computer core 20th capable of emergency running the first computer core 10 to ensure display on one of the display units according to the safety-critical requirement.
  • the first computer core 10 comprises, for example, a main processor 11, a program memory 14, a first graphics module 40 with graphics processor 41, memory 42 and MPEG decoder 43, a second graphics module 50 with graphics processor 51, memory 52 and MPEG decoder 53, an audio module 70 and an operator interface 60 with an RS232 interface 61.
  • the operator interface 60 may be connected to a plurality of manual actuators, keyboards, keypads, etc. installed at various locations in the vehicle.
  • the first graphics module 40 controls, for example, a central screen in the front area of the vehicle and the additional second graphics module 50 controls, for example, a screen in the vehicle compartment area.
  • the graphics modules 40, 50 include digital RGBS outputs (eg, GVIF) for the external center screen and another screen that can be used to display the same content as the central screen on another screen.
  • An RGBS input allows the connection of an external video component.
  • the audio module 70 provides for the audio processing of the internal audio sources and makes them available via a telematics gateway, ie via the second computer core 20 on the MOST bus 31 for connected components (eg amplifiers).
  • the audio module 70 includes a stereo NF output, a stereo NF input and an SPDIF output (eg for Dolby digital).
  • the second computer core 20 comprises, for example, a main processor 21, a program memory 24, a volatile memory 23, a CAN-Class B interface 33, a CAN-Class-C interface 32 and a MOST interface 31.
  • the second computer core 20 for Vehicle functions forms the interface between telematics applications and the Vehicle world. It forms the gateway functionality between the CAN data buses 32, 33 and the MOST data bus 31.
  • the watchdog function 22 is able to detect invalid operating states and to provide specific remedial measures to ensure emergency running performance for safety-critical vehicle functions.
  • the second computer core 20 may reset the first computer core 10 so as to eliminate any hangers during the execution of telematics applications.
  • FIG. 2 shows a detailed block diagram of the operating and display system 100 from FIG. 1 for the representation of the components involved.
  • the operating and display system 100 comprises the telematics gateway 20, which is connected to the MOST ring 31, to the backbone CAN bus 32 and to the headunit CAN bus 33.
  • the MOST ring 31 connects associated MOST components 31.1, which include, for example, various amplifiers, sound systems, speech dialogue systems, television receivers, etc.
  • the head unit CAN 33 connects various optical display units such as a central screen 33.1 in the front area, several screens in the rear area 33.2, a central actuating means 33.5 in the front area, a central actuating means in the rear area 33.4, and other controls 33.3, 33, 6 with the head -Unit 10.
  • the backbone CAN bus 32 connects the telematics gateway 20 to the central gateway 32.2, which establishes a connection to the chassis CAN bus 32-B, the body CAN bus 32-A and the diagnostic CAN bus 32-C , As a further component, the instrument cluster 32.1 is connected to the backbone CAN bus 32.
  • various sensor systems 90 such as supply voltage monitoring, electronic ignition lock, blind spot monitoring, steering wheel control system, brake system, etc. interconnected.
  • various other sensor and actuator systems 95 such as camera control units, heating and air conditioning, overhead control unit, keyless go system, seat control systems, door control modules, multi-contour seat, seal adjustment, etc. are interconnected.
  • the diagnostic CAN bus connects the central gateway to a diagnostic interface 105 and / or a teleaidsystem 105.

Landscapes

  • Engineering & Computer Science (AREA)
  • Automation & Control Theory (AREA)
  • Human Computer Interaction (AREA)
  • Transportation (AREA)
  • Mechanical Engineering (AREA)
  • Fittings On The Vehicle Exterior For Carrying Loads, And Devices For Holding Or Mounting Articles (AREA)
  • Small-Scale Networks (AREA)

Abstract

The invention relates to an operating and display system for a motor vehicle with a processor architecture comprising a plurality of mutually independent processor cores (10, 20) and a plurality of bus systems (31, 32, 33) which control and display vehicle functions and/or vehicle applications. According to the invention, a first processor core (10) controls telematics applications and operating procedures, and a second processor core (20), which is independent of the first processor core (10), controls a gateway functionality existing between the bus systems (31, 32, 33) and a vehicle function analysis system, and the two processor cores (10, 20) monitor each other's functionalities.

Description

Bedien- und Anzeigesystem für ein Fahrzeug Operating and display system for a vehicle
Die Erfindung betrifft ein Bedien- und Anzeigesystem für ein Fahrzeug nach dem Oberbegriff des Patentanspruchs 1.The invention relates to an operating and display system for a vehicle according to the preamble of patent claim 1.
In modernen Fahrzeugen werden zunehmend multimediale Bediensysteme eingesetzt. Beispielhaft wird hier das Command- System in der Mercedes-Benz S-Klasse angegeben.In modern vehicles, multimedia operating systems are increasingly being used. By way of example, the command system in the Mercedes-Benz S-Class is given here.
Solche Bedien- und Anzeigesysteme umfassen beispielsweise optische und akustische Anzeigeeinheiten, wie Bildschirme, Displays, Lautsprecher usw., und manuelle Eingabemittel und/oder Spracheingabemittel zur Bedienung von Fahrzeugkomponenten und/oder Fahrzeugapplikationen wie Navigation-, Audio und/oder Kommunikationssystemen und zur Anzeige von aktuellen Zuständen der Fahrzeugkomponenten und/oder Fahrzeugapplikationen, die über verschiedene Datenbussysteme wie MOST, CAN usw. übertragen werden.Such control and display systems include, for example, optical and acoustic display units, such as screens, displays, speakers, etc., and manual input means and / or voice input means for operating vehicle components and / or vehicle applications, such as navigation, audio and / or communication systems, and displaying current ones States of the vehicle components and / or vehicle applications that are transmitted via various data bus systems such as MOST, CAN, etc.
Aufgabe der Erfindung ist es, ein Bedien- und Anzeigesystem für ein Fahrzeug mit einer hohen Betriebssicherheit und unabhängigen Bussystemen zur Ausführung von verschiedenen Applikationen zur Verfügung zu stellen. Die Erfindung löst diese Aufgabe durch Bereitstellung eines Bedien- und Anzeigesystems für ein Fahrzeug mit den Merkmalen des Patentanspruchs 1.The object of the invention is to provide an operating and display system for a vehicle with high reliability and independent bus systems for the execution of various applications. The invention achieves this object by providing an operating and display system for a vehicle having the features of patent claim 1.
Vorteilhafte Ausführungsformen und Weiterbildungen der Erfindung sind in den abhängigen Ansprüchen angegeben.Advantageous embodiments and further developments of the invention are specified in the dependent claims.
Erfindungsgemäß steuert ein erster Rechnerkern Telematikapplikationen und Bedienabläufe und ein vom ersten Rechnerkern entkoppelter zweiter Rechnerkern steuert eine Gatewayfunktionalität zwischen verschiedenen Datenbussystemen und eine Auswertung der Fahrzeugfunktionen. Durch die Aufteilung der vorhanden Funktionalität des Bedien- und Anzeigesystems auf zwei entkoppelte Rechnerkerne, die gegenseitig ihre Funktionalität überwachen wird in vorteilhafter Weise eine höhere Betriebssicherheit bei gleichzeitiger Unabhängigkeit der Datenbussysteme zur Ausführung von Fahrzeugfunktionen und Fahrzeugapplikationen erreicht.According to the invention, a first computer core controls telematics applications and operating sequences, and a second computer core decoupled from the first computer core controls a gateway functionality between different data bus systems and an evaluation of the vehicle functions. By dividing the existing functionality of the operating and display system on two decoupled computer cores, which monitor each other's functionality is achieved in an advantageous manner, a higher reliability with simultaneous independence of the data bus systems for the execution of vehicle functions and vehicle applications.
In Ausgestaltung des erfindungsgemäßen Bedien- und Anzeigesystems verfügen die beiden Rechnerkerne jeweils über eine Watchdog-Funktion, die bei Ausfall eines der Rechnerkerne Ablauf und/oder Anzeige von sicherheitskritischen Fahrzeugfunktionen sicherstellen. Durch die jeweilige Watchdog-Funktion, die beispielsweise ungültige Betriebszustände des zugehörigen Rechnerkerns erkennen, werden die erforderlichen Notlaufeigenschaften realisiert, um zu gewährleisten, dass bei Ausfall eines Rechnerkerns vor allem sicherheitskritische Fahrzeugfunktionen und/oder Fahrzeugapplikationen weiterarbeiten können. In weiterer Ausgestaltung des Bedien- und Anzeigesystems sind die beiden Rechnerkerne in der Lage, sich gegenseitig in einen Notlaufbetrieb zu setzen, wenn beispielsweise einer der beiden Rechnerkerne ein Softwareproblem des anderen Rechnerkerns erkennt. In einem solchen Notbetrieb setzt der normal arbeitende Rechnerkern den ausgefallenen Rechenerkern in den Notlauf, um wenigstens sicherheitskritische Anforderungen an den ausgefallenen Rechnerkern abzuarbeiten. Erkennt der zweite Rechnerkern beispielsweise ein Softwareproblem bzw. einen Ausfall oder eine Betriebsstörung beim ersten Rechnerkern und wird über einen ersten Datenbus eine sicherheitskritische Anforderung an den ersten Rechnerkern zur Steuerung der Telematikapplikationen gestellt, dann ist der zweite Rechnerkern in der Lage, den ersten Rechnerkern in Notlauf zu setzen, um eine Anzeige gemäß der sicherheitskritischen Anforderung sicherzustellen. Erkennt andererseits der erste Rechner ein Softwareproblem bzw. einen Ausfall oder eine Betriebsstörung beim zweiten Rechnerkern, dann setzt der erste Rechnerkern den zweiten Rechnerkern in den Notlaufbetrieb und gibt eine Warnung aus, damit die Kommunikation auf den Datenbussystemen nicht gestört wird.In an embodiment of the operating and display system according to the invention, the two computer cores each have a watchdog function, which ensure the failure and one of the computer cores process and / or display of safety-critical vehicle functions. By the respective watchdog function, for example, recognize invalid operating states of the associated computer core, the necessary emergency running properties are realized to ensure that in case of failure of a computer core, especially safety-critical vehicle functions and / or vehicle applications can continue working. In a further embodiment of the operating and display system, the two computer cores are able to set each other in an emergency operation, for example, if one of the two computer cores detects a software problem of the other computer core. In such an emergency operation, the normal working computer core sets the failed arithmetic core in the emergency to work at least safety-critical requirements for the failed core computer. If, for example, the second computer core recognizes a software problem or a failure or a malfunction in the first computer core and if a safety-critical request is made to the first computer core to control the telematics applications via a first data bus, then the second computer core is able to run the first computer core in emergency mode to ensure an indication according to the safety-critical requirement. If, on the other hand, the first computer detects a software problem or a failure or a malfunction in the second computer core, then the first computer core sets the second computer core in emergency mode and issues a warning so that the communication on the data bus systems is not disturbed.
In Ausgestaltung des erfindungsgemäßen Bedien- und Anzeigesystems umfasst der erste Rechnerkern beispielsweise einen Hauptprozessor, einen Programmspeicher, ein Grafikmodul mit Grafikprozessor, Speicher und MPEG-Decoder, ein Audiomodul und eine Bedienschnittstelle.In an embodiment of the operating and display system according to the invention, the first computer core comprises, for example, a main processor, a program memory, a graphics module with graphics processor, memory and MPEG decoder, an audio module and an operator interface.
In Ausgestaltung des erfindungsgemäßen Bedien- und Anzeigesystems umfasst der zweite Rechnerkern beispielsweise einen Hauptprozessor, einen Programmspeicher, einen flüchtigen Speicher, eine CAN-Class-B-Schnittstelle, eine CAN-Class-C-Schnittstelle und eine MOST-Schnittstelle.In an embodiment of the operating and display system according to the invention, the second computer core comprises, for example, a main processor, a program memory, a volatile memory, a CAN-Class-B interface, a CAN-Class-C interface and a MOST interface.
Vorteilhafte Ausführungsformen der Erfindung sind in den Zeichnungen dargestellt und werden nachfolgend beschrieben.Advantageous embodiments of the invention are illustrated in the drawings and will be described below.
Dabei zeigen: Fig. 1 ein Blockschaltbild eines Ausführungsbeispiels der Architektur eines Bedien- und Anzeigesystems für ein Fahrzeug, und Fig. 2 ein detailliertes Blockschaltbild des Bedien- und Anzeigesystems aus Fig. 1.1 is a block diagram of an exemplary embodiment of the architecture of a control and display system for a vehicle, and FIG. 2 is a detailed block diagram of the control and display system of FIG. 1.
Wie aus Fig. 1 ersichtlich ist umfasst die Architektur des Bedien- und Anzeigesystems 100 zwei voneinander unabhängige Rechnerkerne 10, 20, wobei ein erster Rechnerkern 10 Telematikapplikationen und Bedienabläufe (HMI) steuert und ein zweiter Rechnerkern 20 eine Gatewayfunktionalität zwischen verschiedenen Datenbussystemen wie MOST 31, CAN C 32, CAN B 33 usw. sicherstellt und die Auswertung der zum Teil sicherheitskritischen Fahrzeugfunktionen übernimmt. Als weitere Komponenten des Bedien- und Anzeigesystems sind beispielhaft ein DVD-Laufwerk 110, ein Navigationssystem 120 mit einer Ortungseinheit 122 und einem TMC-Tuner (Traffic Massage Channel) , ein Radio-Tuner 131, ein Speicherkartenlaufwerk 132 und eine Bluetooth-Einheit 133 dargestellt. Durch die Aufteilung der vorhanden Funktionalität des Bedien- und Anzeigesystems 100 auf zwei entkoppelte Rechnerkerne 10, 20, die gegenseitig ihre Funktionalität überwachen, dies ist in Fig. 1 durch den Doppelpfeil 80 dargestellt, wird in vorteilhafter Weise eine höhere Betriebssicherheit bei gleichzeitiger Unabhängigkeit der Datenbussysteme zur Ausführung von Fahrzeugfunktionen und Fahrzeugapplikationen erreicht. Die beiden Rechnerkerne 10, 20 verfügen jeweils über eine Watchdog-Funktion 12, 22, die beispielsweise ungültige Betriebszustände des zugehörigen Rechnerkerns 10, 20 erkennen und die erforderlichen Notlaufeigenschaften realisieren, um zu gewährleisten, dass bei Ausfall eines Rechnerkerns 10, 20 vor allem sicherheitskritische Fahrzeugfunktionen und/oder Fahrzeugapplikationen weiterarbeiten können.As can be seen from FIG. 1, the architecture of the operating and display system 100 comprises two independent computer cores 10, 20, wherein a first computer core 10 controls telematics applications and operating sequences (HMI) and a second computer core 20 controls a gateway functionality between different data bus systems such as MOST 31, CAN C 32, CAN B 33 etc. ensures and takes over the evaluation of the sometimes safety-critical vehicle functions. As further components of the operating and display system, a DVD drive 110, a navigation system 120 with a locating unit 122 and a TMC tuner (Traffic Massage Channel), a radio tuner 131, a memory card drive 132 and a Bluetooth unit 133 are shown by way of example , By dividing the existing functionality of the operating and display system 100 on two decoupled computer cores 10, 20, which monitor each other's functionality, this is shown in Fig. 1 by the double arrow 80, is advantageously a higher reliability with simultaneous independence of the data bus systems for the execution of vehicle functions and Vehicle applications achieved. The two computer cores 10, 20 each have a watchdog function 12, 22, for example, recognize invalid operating states of the associated computer core 10, 20 and realize the necessary emergency running properties to ensure that in case of failure of a computer core 10, 20 mainly safety-critical vehicle functions and / or vehicle applications can continue working.
Erkennt einer der beiden Rechnerkerne 10 beispielsweise ein Softwareproblem des anderen Rechnerkerns 20, dann kann er den anderen Rechnerkern 20 in einen Notlaufbetrieb setzen. In einem solchen Notbetrieb setzt der normal arbeitende Rechnerkern 10 den ausgefallenen Rechenerkern 20 in den Notlauf, um wenigstens sicherheitskritische Anforderungen an den ausgefallenen Rechnerkern 20 abzuarbeiten. Erkennt der zweite Rechnerkern 20 beispielsweise ein Softwareproblem bzw. einen Ausfall oder eine Betriebsstörung beim ersten Rechnerkern 10 und wird über einen ersten Datenbus z.B. CAN C Backbone 32 eine sicherheitskritische Anforderung an den ersten Rechnerkern 10 zur Steuerung der Telematikapplikationen gestellt, dann ist der zweite Rechnerkern 20 in der Lage, den ersten Rechnerkern 10 in Notlauf zu setzen, um eine Anzeige auf einer der Anzeigeeinheiten gemäß der sicherheitskritischen Anforderung sicherzustellen. Erkennt andererseits der erste Rechner 10 ein Softwareproblem bzw. einen Ausfall oder eine Betriebsstörung beim zweiten Rechnerkern 20, dann setzt der erste Rechnerkern 10 den zweiten Rechnerkern 20 in den Notlaufbetrieb und gibt eine Warnung aus, damit die Kommunikation auf den Datenbussystemen 31, 32, 33 nicht gestört wird. Wie aus Fig. 1 weiter ersichtlich ist, umfasst der erste Rechnerkern 10 beispielsweise einen Hauptprozessor 11, einen Programmspeicher 14, ein erstes Grafikmodul 40 mit Grafikprozessor 41, Speicher 42 und MPEG-Decoder 43, ein zweites Grafikmodul 50 mit Grafikprozessor 51, Speicher 52 und MPEG-Decoder 53, ein Audiomodul 70 und eine Bedienschnittstelle 60 mit einer RS232-Schnittstelle 61. An die Bedienschnittstelle 60 können mehrere manuelle Betätigungselemente, Tastaturen, Ziffernblöcke usw. angeschlossen sein, die an verschiedene Stellen im Fahrzeug eingebaut sind. Das erste Grafikmodul 40 steuert beispielsweise einen zentralen Bildschirm im Frontbereich des Fahrzeugs und das zusätzliche zweite Grafikmodul 50 steuert beispielsweise einen Bildschirm im Fahrzeugfondbereich. Die Grafikmodule 40, 50 umfassen digitale RGBS Ausgänge (z.B. GVIF) für den externen Zentralbildschirm und einen weiteren Bildschirm, mit dessen Hilfe auf einem weiteren Bildschirm derselbe Inhalt wie der des Zentralbildschirms dargestellt werden kann. Ein RGBS Eingang ermöglicht den Anschluss einer externen Videokomponente. Das Audiomodul 70 sorgt für die Audioverarbeitung der internen Audioquellen und stellt diese über ein Telematikgateway, d.h. über die zweiten Rechnerkern 20 auf dem MOST-Bus 31 für angeschlossene Komponenten (z.B. Amplifier) zur Verfügung. Das Audiomodul 70 umfasst einen Stereo NF Ausgang, einen Stereo NF Eingang und einen SPDIF Ausgang (z.B. für Dolby digital) .Detects one of the two computer cores 10, for example, a software problem of the other computer core 20, then he can put the other computer core 20 in a limp home mode. In such an emergency operation, the normally operating computer core 10 sets the failed arithmetic core 20 in emergency mode in order to process at least safety-critical requirements for the failed computer core 20. Detects the second computer core 20, for example, a software problem or a failure or malfunction in the first computer core 10 and a first data bus such as CAN C backbone 32 a safety-critical requirement to the first computer core 10 to control the telematics applications, then the second computer core 20th capable of emergency running the first computer core 10 to ensure display on one of the display units according to the safety-critical requirement. On the other hand recognizes the first computer 10 a software problem or a failure or a malfunction in the second computer core 20, then sets the first computer core 10, the second computer core 20 in the emergency mode and outputs a warning, so that the communication on the data bus systems 31, 32, 33 not disturbed. As can also be seen from FIG. 1, the first computer core 10 comprises, for example, a main processor 11, a program memory 14, a first graphics module 40 with graphics processor 41, memory 42 and MPEG decoder 43, a second graphics module 50 with graphics processor 51, memory 52 and MPEG decoder 53, an audio module 70 and an operator interface 60 with an RS232 interface 61. The operator interface 60 may be connected to a plurality of manual actuators, keyboards, keypads, etc. installed at various locations in the vehicle. The first graphics module 40 controls, for example, a central screen in the front area of the vehicle and the additional second graphics module 50 controls, for example, a screen in the vehicle compartment area. The graphics modules 40, 50 include digital RGBS outputs (eg, GVIF) for the external center screen and another screen that can be used to display the same content as the central screen on another screen. An RGBS input allows the connection of an external video component. The audio module 70 provides for the audio processing of the internal audio sources and makes them available via a telematics gateway, ie via the second computer core 20 on the MOST bus 31 for connected components (eg amplifiers). The audio module 70 includes a stereo NF output, a stereo NF input and an SPDIF output (eg for Dolby digital).
Der zweite Rechnerkern 20 umfasst beispielsweise einen Hauptprozessor 21, einen Programmspeicher 24, einen flüchtigen Speicher 23, eine CAN-Class-B-Schnittstelle 33, eine CAN-Class-C-Schnittstelle 32 und eine MOST-Schnittstelle 31. Der zweite Rechnerkern 20 für Fahrzeugfunktionen bildet die Schnittstelle zwischen Telematikapplikationen und der Fahrzeugwelt. Er bildet die Gatewayfunktionalität zwischen den CAN-Datenbussen 32, 33 und dem MOST-Datenbus 31. Die Watchdog-Funktion 22 ist in der Lage ungültige Betriebszustände zu erkennen und gezielt Abhilfe zu schaffen, um eine Notlaufeigenschaft für sicherheitskritische Fahrzeugfunktionen sicherzustellen. Der zweite Rechnerkern 20 kann den ersten Rechnerkern 10 zurücksetzen, um so eventuelle Hänger während der Ausführung von Telematikapplikationen zu beseitigen.The second computer core 20 comprises, for example, a main processor 21, a program memory 24, a volatile memory 23, a CAN-Class B interface 33, a CAN-Class-C interface 32 and a MOST interface 31. The second computer core 20 for Vehicle functions forms the interface between telematics applications and the Vehicle world. It forms the gateway functionality between the CAN data buses 32, 33 and the MOST data bus 31. The watchdog function 22 is able to detect invalid operating states and to provide specific remedial measures to ensure emergency running performance for safety-critical vehicle functions. The second computer core 20 may reset the first computer core 10 so as to eliminate any hangers during the execution of telematics applications.
Fig. 2 zeigt ein detailliertes Blockschaltbild des Bedien- und Anzeigesystems 100 aus Fig. 1 zur Darstellung beteiligter Komponenten. Wie aus Fig. 2 ersichtlich ist umfasst das Bedien- und Anzeigesystem 100 das Telematikgateway 20, das mit dem MOST-Ring 31, mit dem Backbone-CAN-Bus 32 und mit dem Headunit-CAN-Bus 33 verbunden ist. Der MOST-Ring 31 verbindet zugehörige MOST-Komponenten 31.1, die beispielsweise verschiedene Verstärker, Soundsysteme, Sprachdialogsysteme, Fernsehempfänger usw. umfassen. Der Head-Ünit-CAN 33 verbindet verschiedene optische Anzeigeeinheiten wie einen zentralen Bildschirm 33.1 im Frontbereich, mehrere Bildschirme im Fondbereich 33.2, ein zentrales Betätigungsmittel 33.5 im Frontbereich, ein zentrales Betätigungsmittel im Fondbereich 33.4, sowie weitere Bedienelemente 33.3, 33, 6 mit der Head-Unit 10.FIG. 2 shows a detailed block diagram of the operating and display system 100 from FIG. 1 for the representation of the components involved. As can be seen from FIG. 2, the operating and display system 100 comprises the telematics gateway 20, which is connected to the MOST ring 31, to the backbone CAN bus 32 and to the headunit CAN bus 33. The MOST ring 31 connects associated MOST components 31.1, which include, for example, various amplifiers, sound systems, speech dialogue systems, television receivers, etc. The head unit CAN 33 connects various optical display units such as a central screen 33.1 in the front area, several screens in the rear area 33.2, a central actuating means 33.5 in the front area, a central actuating means in the rear area 33.4, and other controls 33.3, 33, 6 with the head -Unit 10.
Der Backbone-CAN-Bus 32 verbindet das Telematikgateway 20 mit dem zentralen Gateway 32.2, welches eine Verbindung zum Chassis-CAN-Bus 32-B, zum Body-CAN-Bus 32-A und zum Diagnose- CAN-Bus 32-C herstellt. Als weitere Komponente ist das Kombiinstrument 32.1 mit dem Backbone-CAN-Bus 32 verbunden. Über den Chassis-CAN-Bus 32-B sind verschieden Sensorsysteme 90 wie beispielsweise Versorgungsspannungsüberwachung, elektronisches Zündschloss, Totwinkelüberwachung, Lenkradsteuersystem, Bremssystem usw. mit einander verbunden. Über den Body-CAN-Bus 32-A sind verschiedene weitere Sensor- und Aktuatorsysteme 95, wie beispielsweise Kamerasteuereinheiten, Heizungs- und Klimaanlage, Dachbedieneinheit, Keyless-Go-System, Sitzsteuersysteme, Türsteuermodule, Multikontursitz, Siegeleinstellung, usw. mit einander verbunden.The backbone CAN bus 32 connects the telematics gateway 20 to the central gateway 32.2, which establishes a connection to the chassis CAN bus 32-B, the body CAN bus 32-A and the diagnostic CAN bus 32-C , As a further component, the instrument cluster 32.1 is connected to the backbone CAN bus 32. About the chassis CAN bus 32-B are various sensor systems 90 such as supply voltage monitoring, electronic ignition lock, blind spot monitoring, steering wheel control system, brake system, etc. interconnected. Via the body CAN bus 32-A various other sensor and actuator systems 95, such as camera control units, heating and air conditioning, overhead control unit, keyless go system, seat control systems, door control modules, multi-contour seat, seal adjustment, etc. are interconnected.
Der Diagnose-CAN-Bus verbindet den zentralen Gateway mit einer Diagnoseschnittstelle 105 und/oder einem Teleaidsystem 105.The diagnostic CAN bus connects the central gateway to a diagnostic interface 105 and / or a teleaidsystem 105.
Durch die erfindungsgemäße Aufteilung der Telematikapplikationen und Bedienabläufe auf einen ersten Rechnerkern und der Gatewayfunktionalitäten zwischen den verschiedenen Datenbussystemen und der Fahrzeugfunktionsauswertung auf einen zweiten vom ersten Rechnerkern entkoppelten Rechnerkern wird in vorteilhafter Weise eine höhere Betriebssicherheit bei gleichzeitiger Unabhängigkeit der Datenbussysteme zur Ausführung von Fahrzeugfunktionen und Fahrzeugapplikationen erreicht. Due to the inventive division of the telematics applications and operations on a first computer core and the gateway functionalities between the various data bus systems and the vehicle function evaluation on a second computer core decoupled from the first computer core is achieved in an advantageous manner a higher reliability with simultaneous independence of the data bus systems for the execution of vehicle functions and vehicle applications.

Claims

Patentansprüche claims
1. Bedien- und Anzeigesystem für ein Fahrzeug mit einer Rechnerarchitektur, die mehrere von einander unabhängige Rechnerkerne (10, 20) und mehrere Bussysteme (31, 32, 33, 32-A, 32-B, 32-B, 32-C) umfasst, welche Fahrzeugfunktionen und/oder Fahrzeugapplikationen steuern und anzeigen, dadurch gekennzeichnet, dass ein erster Rechnerkern (10) Telematikapplikationen und Bedienabläufe steuert und ein vom ersten Rechnerkern (10) entkoppelter zweiter Rechnerkern (20) eine Gatewayfunktionalität zwischen den Bussystemen (31, 32, 33, 32-A, 32-B, 32-B, 32-C) und eine Auswertung der Fahrzeugfunktionen steuert, wobei die beiden Rechnerkerne (10, 20) gegenseitig ihre Funktionalität überwachen.1. Operating and display system for a vehicle with a computer architecture, the several independent computer cores (10, 20) and a plurality of bus systems (31, 32, 33, 32-A, 32-B, 32-B, 32-C) which control and display vehicle functions and / or vehicle applications, characterized in that a first computer core (10) controls telematics applications and operating sequences and a second computer core (20) decoupled from the first computer core (10) has a gateway functionality between the bus systems (31, 32, 33, 32-A, 32-B, 32-B, 32-C) and an evaluation of the vehicle functions controls, wherein the two computer cores (10, 20) monitor each other's functionality.
2. Bedien- und Anzeigesystem nach Anspruch 1, dadurch gekennzeichnet, dass beide Rechnerkerne (10, 20) jeweils über eine Watchdog-Funktion (12, 22) verfügen, die bei Ausfall eines der Rechnerkerne (10, 20) Ablauf und/oder Anzeige von sicherheitskritischen Fahrzeugfunktionen sicher stellen. 2. Control and display system according to claim 1, characterized in that both computer cores (10, 20) each have a watchdog function (12, 22), which in case of failure of one of the computer cores (10, 20) process and / or display ensure safety-critical vehicle functions.
3. Bedien- und Anzeigesystem nach Anspruch 1 oder 2, dadurch gekennzeichnet, dass sich die beiden Rechnerkerne (10, 20) gegenseitig in einen Notlaufbetrieb setzen können.3. Control and display system according to claim 1 or 2, characterized in that the two computer cores (10, 20) can set each other in an emergency operation.
4. Bedien- und Anzeigesystem nach einem der Ansprüche 1 bis 3, dadurch gekennzeichnet, dass der erste Rechnerkern (10) folgende Komponenten umfasst: - einen Hauptprozessor (11) , - einen Programmspeicher (13) , - ein Grafikmodul (40, 50) mit Grafikprozessor (41, 51) , Speicher (42, 52) und MPEG-Decoder (43, 53), - ein Audiomodul (70) und - eine Bedienschnittstelle (80) .4. Control and display system according to one of claims 1 to 3, characterized in that the first computer core (10) comprises the following components: - a main processor (11), - a program memory (13), - a graphics module (40, 50) graphics processor (41, 51), memory (42, 52) and MPEG decoder (43, 53), - an audio module (70) and - an operator interface (80).
5. Bedien- und Anzeigesystem nach einem der Ansprüche 1 bis 3, dadurch gekennzeichnet, dass der zweite Rechnerkern (20) folgende Komponenten umfasst: - einen Hauptprozessor (21) , - einen Programmspeicher (23) , - einen flüchtigen Speicher (24), - eine CAN-Class-B-Schnittstelle (32), - eine CAN-Class-C-Schnittstelle (33) und - eine MOST-Schnittstelle (31) . 5. Control and display system according to one of claims 1 to 3, characterized in that the second computer core (20) comprises the following components: - a main processor (21), - a program memory (23), - a volatile memory (24), a CAN Class B interface (32), a CAN Class C interface (33) and a MOST interface (31).
PCT/EP2005/006661 2004-06-24 2005-06-21 Operating and display system for a motor vehicle WO2006000373A1 (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
DE102004030508.0 2004-06-24
DE200410030508 DE102004030508A1 (en) 2004-06-24 2004-06-24 Operating and display system for a vehicle

Publications (1)

Publication Number Publication Date
WO2006000373A1 true WO2006000373A1 (en) 2006-01-05

Family

ID=34971301

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/EP2005/006661 WO2006000373A1 (en) 2004-06-24 2005-06-21 Operating and display system for a motor vehicle

Country Status (2)

Country Link
DE (1) DE102004030508A1 (en)
WO (1) WO2006000373A1 (en)

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2000036492A2 (en) * 1998-12-18 2000-06-22 Triconex Corporation Method and apparatus for processing control using a multiple redundant processor control system
DE10124027A1 (en) * 2001-05-16 2002-11-21 Continental Teves Ag & Co Ohg Method for operation of a microprocessor system equipped for execution of safety critical functions and uncritical functions, e.g. for a motor vehicle, in which safety critical and uncritical operations can be distinguished
WO2003050624A1 (en) * 2001-12-11 2003-06-19 Continental Teves Ag & Co. Ohg Multi-core redundant control computer system, computer network for applications that are critical with regard to safety in motor vehicles, and use thereof
DE10254284A1 (en) * 2002-06-10 2004-01-08 Robert Bosch Gmbh Method and device for a vehicle-related telematics service

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2000036492A2 (en) * 1998-12-18 2000-06-22 Triconex Corporation Method and apparatus for processing control using a multiple redundant processor control system
DE10124027A1 (en) * 2001-05-16 2002-11-21 Continental Teves Ag & Co Ohg Method for operation of a microprocessor system equipped for execution of safety critical functions and uncritical functions, e.g. for a motor vehicle, in which safety critical and uncritical operations can be distinguished
WO2003050624A1 (en) * 2001-12-11 2003-06-19 Continental Teves Ag & Co. Ohg Multi-core redundant control computer system, computer network for applications that are critical with regard to safety in motor vehicles, and use thereof
DE10254284A1 (en) * 2002-06-10 2004-01-08 Robert Bosch Gmbh Method and device for a vehicle-related telematics service

Also Published As

Publication number Publication date
DE102004030508A1 (en) 2006-01-12

Similar Documents

Publication Publication Date Title
DE69819889T2 (en) DISPLAY OF COMPUTER INFORMATION TO A DRIVER OF A VEHICLE
EP1883561B1 (en) Connection of personal terminals to the communication system of a motor vehicle
DE19853665B4 (en) Vehicle communication system and method for exchanging data in a motor vehicle
EP3094533B1 (en) Operation of a vehicle in accordance with the desire of a vehicle occupant
EP1781499B1 (en) Utility vehicle comprising several electric devices which are controlled by at least one electronic control device
DE102013222048A1 (en) Method and device for activating or deactivating an automatic driving function
DE10120465A1 (en) Arrangement for display and operation of vehicle functions, has removable module that substitutes for display and/or control functionality in vehicle, and adapter-type holder for module
EP2752036A1 (en) Motor vehicle
DE4039005A1 (en) Control system for vehicle - has central control unit and two controllers responding to driver-command sensors to control two sets of devices
EP1266281B1 (en) Electronic system
EP3546887A1 (en) Method for adjusting the operation of a vehicle, device for use in the process, motor vehicle and computer program
WO2018145916A1 (en) Operating device for a motor vehicle and method for operating an operating device
DE10159477B4 (en) Information system for vehicles
EP1972514A1 (en) Motor vehicle with an x-by-wire system and method for operating an x-by-wire system of a motor vehicle
WO2006000373A1 (en) Operating and display system for a motor vehicle
EP2222509B1 (en) Method for transmitting data between control devices in a vehicle
DE102011121108A1 (en) Method for outputting information such as display of menus to passengers in vehicle, involves coupling mobile devices to vehicle using interfaces, so that the mobile devices are assigned as portion of output system of vehicle
DE102009015364A1 (en) Assembly and/or service mode i.e. brake pad change mode, controlling method for brake system of vehicle, involves activating and/or controlling assembly and/or service mode over input-output components in diagnostic-free manner
DE10345013A1 (en) Driver assistance device for implementation of two or more driver assistance functions in a motor vehicle has at least a computer unit for execution of the necessary function calculations in a serial multiplexed manner
DE102009018682A1 (en) Control device for motor vehicle, has control unit which is arranged in common range from driver and front passenger and by which control operation is executable for communication device
WO2017186384A1 (en) Diagnostic device and method for filtering diagnostic commands
DE102022105729A1 (en) INTEGRATED ELECTRONIC BRAKING SYSTEM AND CONTROL METHOD THEREOF
EP1389392A2 (en) Multimedia system for a vehicle
DE102011102770A1 (en) Bus-adapted control device i.e. steering control device, for use in motor car, has host computer comprising memory for storing programs, and switching unit connected to memory for selecting program for communication with one of controllers
DE102009018586A1 (en) Computer system for motor vehicle, has central vehicle computer, which is connected with multiple operating units for displaying data by bus system and is connected with display by display-image data cable

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A1

Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BW BY BZ CA CH CN CO CR CU CZ DE DK DM DZ EC EE EG ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KM KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NA NG NI NO NZ OM PG PH PL PT RO RU SC SD SE SG SK SL SM SY TJ TM TN TR TT TZ UA UG US UZ VC VN YU ZA ZM ZW

AL Designated countries for regional patents

Kind code of ref document: A1

Designated state(s): GM KE LS MW MZ NA SD SL SZ TZ UG ZM ZW AM AZ BY KG KZ MD RU TJ TM AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IS IT LT LU MC NL PL PT RO SE SI SK TR BF BJ CF CG CI CM GA GN GQ GW ML MR NE SN TD TG

121 Ep: the epo has been informed by wipo that ep was designated in this application
NENP Non-entry into the national phase

Ref country code: DE

WWW Wipo information: withdrawn in national office

Country of ref document: DE

122 Ep: pct application non-entry in european phase