EP2439722B1 - Method for inspecting pixel-formated display data for display on a screen of a display device in a vehicle - Google Patents
Method for inspecting pixel-formated display data for display on a screen of a display device in a vehicle Download PDFInfo
- Publication number
- EP2439722B1 EP2439722B1 EP10009934.0A EP10009934A EP2439722B1 EP 2439722 B1 EP2439722 B1 EP 2439722B1 EP 10009934 A EP10009934 A EP 10009934A EP 2439722 B1 EP2439722 B1 EP 2439722B1
- Authority
- EP
- European Patent Office
- Prior art keywords
- data
- safety
- relevant
- display data
- pixel
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Revoked
Links
Images
Classifications
-
- G—PHYSICS
- G09—EDUCATION; CRYPTOGRAPHY; DISPLAY; ADVERTISING; SEALS
- G09G—ARRANGEMENTS OR CIRCUITS FOR CONTROL OF INDICATING DEVICES USING STATIC MEANS TO PRESENT VARIABLE INFORMATION
- G09G3/00—Control arrangements or circuits, of interest only in connection with visual indicators other than cathode-ray tubes
- G09G3/006—Electronic inspection or testing of displays and display drivers, e.g. of LED or LCD displays
-
- G—PHYSICS
- G09—EDUCATION; CRYPTOGRAPHY; DISPLAY; ADVERTISING; SEALS
- G09G—ARRANGEMENTS OR CIRCUITS FOR CONTROL OF INDICATING DEVICES USING STATIC MEANS TO PRESENT VARIABLE INFORMATION
- G09G2330/00—Aspects of power supply; Aspects of display protection and defect management
- G09G2330/12—Test circuits or failure detection circuits included in a display system, as permanent part thereof
-
- G—PHYSICS
- G09—EDUCATION; CRYPTOGRAPHY; DISPLAY; ADVERTISING; SEALS
- G09G—ARRANGEMENTS OR CIRCUITS FOR CONTROL OF INDICATING DEVICES USING STATIC MEANS TO PRESENT VARIABLE INFORMATION
- G09G2340/00—Aspects of display data processing
- G09G2340/02—Handling of images in compressed format, e.g. JPEG, MPEG
-
- G—PHYSICS
- G09—EDUCATION; CRYPTOGRAPHY; DISPLAY; ADVERTISING; SEALS
- G09G—ARRANGEMENTS OR CIRCUITS FOR CONTROL OF INDICATING DEVICES USING STATIC MEANS TO PRESENT VARIABLE INFORMATION
- G09G2358/00—Arrangements for display data security
-
- G—PHYSICS
- G09—EDUCATION; CRYPTOGRAPHY; DISPLAY; ADVERTISING; SEALS
- G09G—ARRANGEMENTS OR CIRCUITS FOR CONTROL OF INDICATING DEVICES USING STATIC MEANS TO PRESENT VARIABLE INFORMATION
- G09G2380/00—Specific applications
- G09G2380/10—Automotive applications
-
- G—PHYSICS
- G09—EDUCATION; CRYPTOGRAPHY; DISPLAY; ADVERTISING; SEALS
- G09G—ARRANGEMENTS OR CIRCUITS FOR CONTROL OF INDICATING DEVICES USING STATIC MEANS TO PRESENT VARIABLE INFORMATION
- G09G5/00—Control arrangements or circuits for visual indicators common to cathode-ray tube indicators and other visual indicators
- G09G5/36—Control arrangements or circuits for visual indicators common to cathode-ray tube indicators and other visual indicators characterised by the display of a graphic pattern, e.g. using an all-points-addressable [APA] memory
Definitions
- the present invention relates to a method for checking pixel-formatted display data for display on a screen of a display device in the vehicle.
- the cabs are increasingly equipped with display devices, which have screens that are equipped based on the LCD (Liquid Cristal Display) technology. Accordingly, safety-related basic data, such as the speed, the temperature, the pressure, the oil level or the state of the brake system must be displayed digitally on the screen of the display device in the cab.
- LCD Liquid Cristal Display
- the safety requirements for safety-relevant hardware and software are defined in rail traffic by the safety standards EN 50126, EN 50128 and EN 50129.
- the representation of the speed, for example, on the screen of the display device is classified according to the intended safety standard as safety level SIL ("safety-integrity level") - 2, while the monitoring of the brake system must meet the safety level SIL-4.
- the SIL-2 safety level means that the user of the display device must be informed in rail traffic as soon as the SIL-2 safety level is not met. However, the safety system itself does not have to be a measure to be hit. In the case of the safety requirement for safety level SIL-4, for example, the brake system as a safety system must react immediately.
- the focus is placed on the security level SIL-2, so that safety-related basic data, such as the speed on the screen of the display device are displayed correctly.
- the publication EP 2 273 369 A1 is referred to in Article 54 (3) and discloses a method of displaying security-related information on a display device, comprising the steps of: inputting at least one input to a computing unit; computationally processing the input variable in the computer unit into an image data sequence which maps the input variable; Forwarding the image data sequence to a display device and displaying the image data sequence on the display device; Supplying the image data sequence to a test unit; Performing a security check by computationally creating a check code for the image data sequence; Comparing the verification code with a plurality of existing comparison codes; Assigning the thus determined comparison code to a corresponding possible value of the input variable; and comparing it with the value of the input to produce either a positive or negative test result to cause a safety-related response.
- the publication WO 2009/050106 A1 is regarded as the closest prior art and discloses a test device for checking the validity of display signals related to a given image, comprising means for obtaining image data from the display signals, means for determining a check value of the image data and a comparator unit for comparing the image data determined test value with an image-related, stored test value, wherein in the event that the two test values agree, a validity of the display signals is detected.
- the publication DE 10 2005 011 942 discloses a method for error disclosure when applying a security-relevant display with a first, driven via a first data source display element and a second, driven via a second data source display element for displaying a detected measured value.
- the first display element is concealed relative to the second display element, and in the absence of overlap of the two display elements, an error disclosure to the user.
- the publication DE 10 2004 039 498 discloses a method for monitoring the state of an LCD display, in particular the frozen state of this display, wherein the attachment of a light sensor takes place in a small area in which the display control computer generates a specific, alternating bit pattern and the output signal of the light sensor to the input of a independent controller leads.
- the controller receives the bit pattern data from the control computer and compares it with the bit pattern from the light sensor. If there is a mismatch between the bit pattern received from the control computer and the bit pattern from the light sensor, an alarm is triggered.
- the present invention is therefore based on the object of providing a method for monitoring security-relevant pixel-formatted display data, which enables both rapid and reliable monitoring of the security-relevant display data and, in the event of an error or interruption, discloses this to a user.
- the object is achieved by the method according to claim 1.
- An inventive method is used to check pixel-formatted display data, which by means of a Calculator generated from security-related basic data and supplied to the display on a screen of a display device, in particular a LCD (Liquid Cristal Display) monitor in the cab of a vehicle, the screen.
- the security-relevant pixel-formatted display data are tapped in front of the screen and converted in a monitor by means of a compressor into security-relevant compressed display data and fed to a verifier.
- a reference data set with predefined, safety-relevant compressed reference display data is stored in a memory of the monitor.
- the safety-related basic data in the supervisor determine which predefined safety-related compressed reference display data from the reference data record is supplied to the verifier.
- the verifier compares the predefined safety-related compressed reference display data supplied with it and the safety-relevant compressed display data with one another and, if the verification fails, reveals this to a user by means of a first signal on the display device.
- the advantage of such a method is the rapid evaluation of exclusively security-relevant pixel-formatted display data, since the compressor considerably reduces the data volume and the reviewer already has compressed reference display data available for the comparison.
- Another advantage is the double protection of the security relevant basic data to be evaluated: On the one hand, the pixel formatted display data is generated by the computer and the supervisor is compressed and on the other hand, the current safety relevant basic data in a second path
- the compressor reduces a color depth of the pixel-formatted display data, in particular from an 18-bit or 24-bit color level over an 8-bit gray level to a gray level of less than 8 bits per pixel.
- This has the advantage that the pixel-formatted display data has a smaller data volume.
- the review of the security-relevant pixel-formatted display data is accelerated and the necessary computing power is reduced.
- the compressor further reduces a resolution of a multi-pixel subfield to a pixel, such that the pixel formatted display data is present as compressed display data.
- This causes a further reduction of the data volume of the security-relevant pixel-formatted display data.
- the advantage with this type of compression of the pixel-formatted display data is that the distance, also called Hamming distance, can be chosen between two security-relevant pixel-formatted display data in such a way that the probability of a false verification result is minimized or reduced below the permissible value.
- the checker controls a signal lamp, in particular an LED, in particular, to form a second signal on the display device such that it is lit or flashing.
- the reviewer switches on a backlight of the screen and, if there is no match, forms the first signal.
- the safety-related basic data is supplied to a controller in the monitor in order to read the memory and to supply the corresponding predefined safety-related reference display data to the reviewer.
- the memory is stored in a storage medium, in particular a flash.
- a storage medium in particular a flash. This has the advantage that data can be stored directly in the monitor, which can be accessed very quickly or from which the data can be read quickly.
- the basic data in addition to the security-relevant basic data, the basic data also has non-safety-relevant basic data, so that the computer generates pixel-formatted display data from the security-relevant and non-safety-relevant basic data. This causes that in a screen page selected by the user, both security-related and non-security-relevant display data of the selected screen page the
- the tapped pixel-formatted display data is fed to a region filter and filtered out of these the non-safety-relevant pixel-formatted display data, so that the reviewer performs the check exclusively on the basis of the security-relevant pixel-formatted display data.
- This has the effect that the non-safety-relevant display data has no relevance for checking the security-relevant display data and thus the reviewer has to evaluate a smaller volume of data.
- the computer when generating the pixel-formatted display data, the computer integrates a screen control signal, such as a start-of-line signal, and a window filter filters out of the tapped pixel-formatted display data this screen control signal.
- a screen control signal such as a start-of-line signal
- a window filter filters out of the tapped pixel-formatted display data this screen control signal.
- the pixel-formatted display data are converted by means of a data converter of serial LVDS data into parallel video data, in particular into an RGB color space with a color depth of 18 bits or 24 bits.
- the LVDS data are so-called low voltage differential signals, which are currently suitable for LCD monitors as a data format to display pixel-formatted display data for display.
- parallel video data such as RGB666 video data
- RGB666 video data does not require conversion by the data converter.
- RGB666 video signals can be fed directly to the window filter, compressor or regional filter.
- additional hardware is saved, which leads accordingly to the cost reduction of the hardware.
- An in Fig. 1 exemplified display device 10 which is intended for use in the cab of a vehicle, in particular a rail vehicle, provides basic data 12 in a form suitable for the particular application on a screen 14.
- the screen 14 has controls 16, by means of which a user of the display device 10, depending on the situation in which the vehicle is located, can bring a selected screen page 18 on the screen 14 of the display device 10 for display. For example, in a railway station, the position of the doors can be selected as the screen page 18, while the speed of the vehicle can be displayed on another selected screen page 18 while driving.
- signal lamps 19 mounted on the screen 14, in particular LEDs 20, 22, 24, 26, status information can be displayed to the user.
- an optical marker 28 and the identification of a security-relevant region 13 and a non-safety-relevant region 15 are shown in the screen 14 in the screen page 18. The operation of these elements will be described in detail in connection with the description of Fig. 5 and Fig. 6 explained.
- the basic data 12 which are to be displayed on the screen 14 are transmitted via a fieldbus system such as the CAN bus, the MVB (Multi-Vehicular Bus System). or transmitted via an Ethernet data line to a computer 30 in the display device 10.
- the computer 30 visualizes the basic data 12 on the screen 14 by converting the basic data 12 into pixel-formatted display data 32 by means of software.
- the software can be executed, for example, on an operating system in the computer 30, such as Linux.
- safety-relevant basic data 34 such as, for example, the speed
- basic safety data 36 such as the fill level of a water tank, for example.
- the safety-related basic data 34 must meet the safety level SIL-2, as stated in the introduction. They must also be transmitted in accordance with safety level SIL-2.
- the computer 30 itself does not meet the safety requirements of rail traffic, since the conversion of safety-related basic data 34 in pixel-formatted display data 32 only the security level SIL-0 (dotted areas shown in FIG Fig. 1 ) Fulfills. Thus, the pixel-formatted display data 32 must be tapped before delivery to the screen 14 of the display device 10 and in a monitor 38, the security level SIL-2 (unshaded areas shown in FIG Fig. 1 ), be tested.
- the pixel-formatted display data 32 are converted into compressed display data 44 by means of a compression method 42. Only the security-relevant pixel-formatted display data 46 in FIG security-related compressed display data 48 converted.
- the monitor 38 also has the same security-related basic data 34 as the computer 30.
- a memory 50 of the monitor 38 stores a reference data record 52 with predefined, safety-relevant compressed reference display data 54.
- the safety-relevant basic data 34 determine in the monitor 38 which predefined safety-relevant compressed reference display data 54 from the reference data set 52 are supplied to the checker 40.
- the memory 50 can be stored in a storage medium, in particular in a flash.
- the predefined safety-related compressed reference display data 54 and safety-related compressed display data 48 supplied to the checker 40 are compared with one another. After an evaluation 56 of this review, corresponding signaling is then initiated.
- the monitor 38 has outputs 58, 60, 62, 64, 66 for initiating the corresponding signaling.
- a mismatch between the safety-relevant compressed pixel-formatted display data 48 and the safety-relevant compressed reference display data 54 during the check this is indicated to the user by means of a first signal 68 on the display device 10, in particular by the signal lamps 19.
- the SIL-2 LED 24 or optionally the marker LED 26 or an external device 70 can be used for the signaling.
- the computer 30, the result of the failed check signaled is another error disclosure in the case of a faulty check.
- Another error disclosure in the case of a faulty check is the switching off of the backlight 23 by the monitor 38.
- the in Fig. 2 shown monitor 38 receives, as to Fig. 1 executed, the same safety-related basic data 34 as the computer 30, which generates 34 pixel-formatted display data 32 from the safety-related basic data.
- the pixel-formatted display data 32 tapped before being fed to the screen 14 of the display device 10 are likewise fed to the monitor 38.
- a module 72 'integrated in the display device 10 or in the monitor 38 which is referred to as the AIM (Display Integrity Module) 72, is part of the supervisor 38 and is responsible for the processing of the safety-related basic data 34 and the pixel-formatted display data 32
- AIM 72 may be implemented as a FPGA (Field Programmable Gate Array), DSP (Digital Signal Processor), CPU (Central Processing Unit), or ASIC (Application Specific Intergrated Circuit).
- the data to be read by the AIM 72 must be pre-converted in the case of a data format incompatible with the AIM 72.
- configuration data 76 such as reference data 78 and / or initialization parameters 80, can be transmitted to the AIM 72 and stored in the memory 50.
- these configuration data 76 typically must first pass through a controller 81, especially if the configuration data 76 is not AIM 72 compliant.
- AIM 72 compatible data may be RGB666 data 91 as in Fig. 2 shown in dashed lines.
- AIM 72 device-specific configuration data 76 ' such as a timer 82 or a reset function 84, can be sent by the configurator 74 directly to the AIM 72.
- the reference data record 52 is stored in the memory 50 in configuration mode 74 'with predefined, safety-relevant compressed reference display data 54.
- the configuration data 76 and initialization parameters 80 are read from the respective hardware components of the supervisor 38 and AIM 72, respectively, pre-resetting the AIM 72 and checking the memory 50 to ensure that no Error in the memory 50 is present.
- the tapped, pixel-formatted display data 32 as well as the safety-related basic data 34 can now be read by the AIM 72.
- the pixel-formatted display data 32 may be so-called serial LVDS (Low Voltage Differential Signal) data 93 which is not compatible with the AIM 72 data format, these pixel-formatted display data 32 may need to be converted to parallel video data 92 (this path is by means of a data converter 90) in Fig. 2 shown).
- the data converter 90 in particular uses 18-bit and 24-bit LVDS pixel-formatted display data 32 as input data accepted.
- the resolution and color depth of the video data 92 can be adjusted.
- the data converter 90 may be applied either as part of the AIM 72 on the FPGA or ASIC, or separately (dashed in Fig.2 ) may be arranged in the monitor 38 by the ASIC or FPGA.
- the video data 92 generated by the data converter 90 from the pixel-formatted display data 32 are fed to a window filter 94.
- the window filter 94 detects the video data 92, which were generated for the user-selected screen page 18 and should be displayed on the screen 14 of the display device 10.
- All inactive pixel-formatted display data 96 and so-called screen control signals 98, such as a start-of-line signal 98 ', are filtered out by the window filter 94.
- the non-displayed area for screen pages 18, in particular the area for the screen control signals 98 can be defined.
- pixel-formatted display data 32 are further processed by a compressor 100.
- the compressor 100 reduces the color depth of individual pixels and / or summarizes several pixels in a pixel, as clearly shown in FIG Fig. 3 shown and in detail in the description of the figures Fig. 3 is explained.
- the compression rate for the reduction of the color depth and the reduction of the resolution can be set in configuration mode 74 '.
- the security-relevant regions 13 (see FIG Fig. 1 ) on the screen side 18 and which exclusively have the security-relevant compressed pixel-formatted display data 48 are filtered out by means of a region filter 104.
- the region filter 104 filters out all the captured pixel-formatted display data 32 except for the security-relevant display data 46, which are located in the security-relevant regions 13.
- corresponding regions 106 are in Fig. 5 for security-relevant screen pages 108.
- the position of the security-relevant regions 13 on predefined screen pages 18 can be determined by means of an identification number.
- the sequence of the above-mentioned filters can be arbitrarily selected in the compression method 42.
- the video data 92 after the window filter 94 receive a new filtering by the region filter 104 and then only the compressor 100 is used.
- the checker 38 would receive from the compressor 100 exclusively safety-relevant compressed display data 48 in the corresponding safety-relevant regions 13.
- the safety-relevant compressed display data 48 located in the safety-relevant regions 13 are supplied to the checker 40 in separate registers 112. Subsequently, the verifier 40 compares the safety-relevant compressed display data 48 with the safety-related compressed reference display data 54, which was determined by the safety-related basic data 34 and supplied to the verifier 38 from the memory 50 in the operating mode 89.
- An intermediate register 114 between the verifier 40 and the evaluation 56 allows a kind of buffering of the comparison results from the verifier 38. This may be necessary if, for example, a speed of 26 km / h is changed to another speed 27 km / h and the computer accordingly Time is required to bring this new speed on the screen 14 of the display device 10 for presentation. Even when changing the screen page 18, the computer requires time to implement the representation, so that the buffering is necessary here. Since the check lasts about 20 ms, which is too fast for the human eye, the buffer 114 also serves the user so that he can view the pixel-formatted display data 32 on the screen 14 sufficiently long to perceive it correctly.
- Fig. 3 the speed of the vehicle of 26 km / h is displayed in the form of pixel-formatted display data 32 in the safety-relevant region 13. That is, the pixel-formatted display data 32 have been pre-filtered by the window filter 94 and the region filter 104, respectively, so that they are arranged on the screen side 18 in the relevant security-relevant region 13.
- This first state 115 corresponds to the state after the data conversion from serial LVDS 93 into parallel video data 92 or after the direct supply of, for example, RGB666 data 91, so that either 18-bit or 24-bit video data 92 is present.
- a first compression step 116 the color depth is reduced from 18 bits or 24 bits over an 8 bit gray level to a gray level smaller than 8 bits, in particular to a 1 bit black and white stage per pixel (in FIG Fig. 3 , second state view from above).
- a second compression step 118 multiple pixel subfields 120, as in FIG Fig. 4 shown reduced to 1 pixel.
- the advantage with this type of compression of the pixel-formatted display data 32 is that the distance, also called Hamming distance, can be selected between two security-relevant pixel-formatted display data 46 in such a way that the probability of a false check result is minimized or reduced below the permissible value ,
- the latter can, for example, provide the defective security-relevant region 13 with an "X", as in FIG Fig. 3 shown in dashed lines.
- the reviewer 38 recognizes the region 106 marked "X" by the computer and accepts that the security-related base data 34 in this region 106 is faulty.
- the compression method 42 takes into account the perception of the human eye, where errors of individual pixels are generally of no relevance.
- the marking of security-relevant screen pages 108 and non-security-relevant screen pages 110 can take place by means of the optical marker 28, as in FIG Fig. 5 and Fig. 6 shown.
- the computer 30 converts the safety-related basic data 34 supplied to it and the basic data 36 which is not relevant to safety, that is to say the basic data 12 of a selected screen page 18, into pixel-formatted display data 32.
- the corresponding pixel-formatted display data 32 are then supplied to the screen 14 for display.
- a first optical marker 122 can be integrated into the pixel-formatted display data 32, as in FIG Fig. 5 shown.
- a second optical marker 124 can be integrated into the pixel-formatted display data 32, as in FIG Fig. 6 shown.
- the first optical marker 122 and the second optical marker 124 have information features with which the monitor 38 can distinguish the security-relevant screen pages 108 from the non-security-relevant screen pages 110.
- the monitor 38 In configuration mode 74 ', if the optical marker 28 is to be used, the monitor 38 must be programmed with appropriate marker reference data. Accordingly, in the ready state, the supervisor 38 may compare the optical marker 28 with marker reference data during the review. On the one hand, if the monitor 38 determines that the second optical marker 124 is present, the check is turned off. However, if the monitor 38 determines that the first optical marker 122 is present, or if there is no match between the optical marker 28 and the marker reference data, a check is made.
- the optical marker 28 consists of a sequence of predefined pixel patterns 130 and is located in particular at a predefined location in the security-relevant screen 108, as in Fig. 5 or in the non-security-relevant screen page 110, as in Fig. 6 shown.
- the second optical marker 124 has a different sequence of pixel patterns 130 than the first optical marker 122.
- the sequence and the time interval of a pixel pattern 130 are monitored by the monitor 38. If there is no match of correct sequence 128 and / or time interval 132 of the pixel pattern 130 with marker reference data, the supervisor 38 performs the control.
- the signal 68 is sent to the display device 10 to indicate to the user that and which optical marker 28 is present (see Fig. 5 and Fig.6 ). This can be done, for example, by switching on the marker LED 26 and / or an external device 70, as related to Fig. 1 explained.
- the computer 30 receives a set of predefined screen pages 18 which can be selected by the user, and the supervisor 38 receives the reference data set 78 discussed in the upper sections and the initialization parameters 80 (see FIG Fig. 2 ).
- the desired screen page 18 may be selected on the screen 14 of the display device 10 by the user.
- the backlight 23 and the SIL-2 LED 24 are turned off.
- the error can also be signaled to the computer 30 so that it notes, for example, an "X" on the faulty safety-relevant region 13, instead of a speed, as in FIG Fig. 3 shown.
- the SIL-2 LED 24 lights up and the backlight 23 remains lit.
- the SIL-2 LED 24 and the SIL-2 LED 24 are identical to each other.
- Marker LED 26 combined in one LED, so that the latter is always turned on when both the conditions for switching on the marker LED 26 as well as the conditions for switching on the SIL-2 LED 24 are met.
Landscapes
- Engineering & Computer Science (AREA)
- Physics & Mathematics (AREA)
- Computer Hardware Design (AREA)
- General Physics & Mathematics (AREA)
- Theoretical Computer Science (AREA)
- Control Of Indicators Other Than Cathode Ray Tubes (AREA)
Description
Die vorliegende Erfindung betrifft ein Verfahren zur Überprüfung von pixelformatierten Displaydaten zur Darstellung auf einem Bildschirm eines Anzeigegerätes im Fahrzeug.The present invention relates to a method for checking pixel-formatted display data for display on a screen of a display device in the vehicle.
In modernen Fahrzeugen, insbesondere Schienenfahrzeugen, sind die Führerstände zunehmend mit Anzeigegeräten ausgestattet, welche Bildschirme aufweisen, die auf Basis der LCD (Liquid Cristal Display) Technologie ausgestattet sind. Entsprechend müssen sicherheitsrelevante Basisdaten, wie beispielsweise die Geschwindigkeit, die Temperatur, der Druck, der Ölstand oder der Zustand des Bremssystems, digital auf dem Bildschirm des Anzeigegerätes im Führerstand angezeigt werden.In modern vehicles, especially rail vehicles, the cabs are increasingly equipped with display devices, which have screens that are equipped based on the LCD (Liquid Cristal Display) technology. Accordingly, safety-related basic data, such as the speed, the temperature, the pressure, the oil level or the state of the brake system must be displayed digitally on the screen of the display device in the cab.
Die Sicherheitsanforderungen für sicherheitsrelevante Hardware und Software werden im Schienenverkehr durch die Sicherheitsnormen EN 50126, EN 50128 und EN 50129 definiert. Die Darstellung der Geschwindigkeit, beispielsweise, auf dem Bildschirm des Anzeigegerätes wird gemäss der vorgesehenen Sicherheitsnorm als Sicherheitsstufe SIL ("safety-integrity level")-2 eingestuft, während die Überwachung des Bremssystems die Sicherheitstufe SIL-4 erfüllen muss.The safety requirements for safety-relevant hardware and software are defined in rail traffic by the safety standards EN 50126, EN 50128 and EN 50129. The representation of the speed, for example, on the screen of the display device is classified according to the intended safety standard as safety level SIL ("safety-integrity level") - 2, while the monitoring of the brake system must meet the safety level SIL-4.
Die Sicherheitsstufe SIL-2 besagt, dass der Benutzer des Anzeigegerätes im Schienenverkehr informiert werden muss, sobald die Sicherheitsstufe SIL-2 nicht erfüllt ist. Jedoch muss vom Sicherheitssystem selbst keine Massnahme getroffen werden. Bei der Sicherheitsanforderung für die Sicherheitsstufe SIL-4 hingegen muss beispielsweise das Bremssystem als Sicherheitssystem sofort reagieren.The SIL-2 safety level means that the user of the display device must be informed in rail traffic as soon as the SIL-2 safety level is not met. However, the safety system itself does not have to be a measure to be hit. In the case of the safety requirement for safety level SIL-4, for example, the brake system as a safety system must react immediately.
Bei vorliegender Erfindung wird der Fokus auf die Sicherheitsstufe SIL-2 gelegt, so dass sicherheitsrelevante Basisdaten, wie beispielsweise die Geschwindigkeit auf dem Bildschirm des Anzeigegerätes richtig angezeigt werden.In the present invention, the focus is placed on the security level SIL-2, so that safety-related basic data, such as the speed on the screen of the display device are displayed correctly.
Die Druckschrift
Die Druckschrift
Die Druckschrift
Die Druckschrift
Ein weiteres Verfahren zur Darstellung von sicherheitsrelevanten Basisdaten an Bildschirmen von Anzeigegeräten wird in Dokument
Bei der Überwachung von Bildschirmseiten auf digitalen Anzeigegeräten, welche sicherheitsrelevante pixelformatierte Displaydaten aufweisen, besteht die Gefahr, dass auch nichtsicherheitsrelevante pixelformatierte Displaydaten mitgeprüft werden. Dies hat zur Folge, dass einem Überwacher ein enormes Datenvolumen zugeführt wird. Entsprechend hat der Überwacher einen erhöhten Leistungsaufwand, um die Daten auszuwerten. Dies wiederum führt zu erhöhten Kosten für die Hardware.When monitoring screen pages on digital display devices which have security-relevant pixel-formatted display data, there is a risk that non-security-relevant pixel-formatted display data will also be checked. This has the consequence that an enormous data volume is supplied to a supervisor. Accordingly, the supervisor has an increased effort to evaluate the data. This in turn leads to increased costs for the hardware.
Der vorliegenden Erfindung liegt daher die Aufgabe zugrunde, ein Verfahren zur Überwachung von sicherheitsrelevanten pixelformatierten Displaydaten zur Verfügung zu stellen, welches sowohl eine schnell als auch eine zuverlässige Überwachung der sicherheitsrelevanten Displaydaten ermöglicht und beim Auftreten eines Fehlers oder Unterbruchs dies einem Benutzer offenbart.The present invention is therefore based on the object of providing a method for monitoring security-relevant pixel-formatted display data, which enables both rapid and reliable monitoring of the security-relevant display data and, in the event of an error or interruption, discloses this to a user.
Die Aufgabe wird gelöst durch das Verfahren gemäss Anspruch 1.The object is achieved by the method according to
Ein erfindungsgemässes Verfahren dient zur Überprüfung von pixelformatierten Displaydaten, welche mittels eines Rechners aus sicherheitsrelevanten Basisdaten generiert und zur Darstellung auf einem Bildschirm eines Anzeigegerätes, insbesondere einem LCD (Liquid Cristal Display) Monitor im Führerstand eines Fahrzeuges, dem Bildschirm zugeführt werden. Dabei werden die sicherheitsrelevanten pixelformatierten Displaydaten vor dem Bildschirm abgegriffen und in einem Überwacher mittels eines Kompressors in sicherheitsrelevante komprimierte Displaydaten umgewandelt und einem Überprüfer zugeführt. In einem Speicher des Überwachers ist ein Referenzdatensatz mit vordefinierten sicherheitsrelevanten komprimierten Referenzdisplaydaten gespeichert. Die sicherheitsrelevanten Basisdaten im Überwacher bestimmen, welche vordefinierten sicherheitsrelevanten komprimierten Referenzdisplaydaten aus dem Referenzdatensatz dem Überprüfer zugeführt werden. Der Überprüfer vergleicht die ihm zugeführten vordefinierten sicherheitsrelevanten komprimierten Referenzdisplaydaten und die sicherheitsrelevanten komprimierten Displaydaten miteinander und offenbart bei fehlender Übereinstimmung der Überprüfung dies einem Benutzer mittels eines ersten Signals am Anzeigegerät.An inventive method is used to check pixel-formatted display data, which by means of a Calculator generated from security-related basic data and supplied to the display on a screen of a display device, in particular a LCD (Liquid Cristal Display) monitor in the cab of a vehicle, the screen. The security-relevant pixel-formatted display data are tapped in front of the screen and converted in a monitor by means of a compressor into security-relevant compressed display data and fed to a verifier. A reference data set with predefined, safety-relevant compressed reference display data is stored in a memory of the monitor. The safety-related basic data in the supervisor determine which predefined safety-related compressed reference display data from the reference data record is supplied to the verifier. The verifier compares the predefined safety-related compressed reference display data supplied with it and the safety-relevant compressed display data with one another and, if the verification fails, reveals this to a user by means of a first signal on the display device.
Vorteil eines derartigen Verfahrens ist die schnelle Auswertung von ausschliesslich sicherheitsrelevanten pixelformatierten Displaydaten, da der Kompressor das Datenvolumen erheblich reduziert und dem ĂśberprĂĽfer schon komprimierte Referenzdisplaydaten fĂĽr den Vergleich zur VerfĂĽgung stehen. Ein weiterer Vorteil ist die doppelte Absicherung der zu evaluierenden sicherheitsrelevanten Basisdaten: Einerseits werden die pixelformatierten Displaydaten ĂĽber den Rechner generiert und den Ăśberwacher komprimiert und andererseits werden ĂĽber einen zweiten Pfad die aktuellen sicherheitsrelevanten Basisdaten imThe advantage of such a method is the rapid evaluation of exclusively security-relevant pixel-formatted display data, since the compressor considerably reduces the data volume and the reviewer already has compressed reference display data available for the comparison. Another advantage is the double protection of the security relevant basic data to be evaluated: On the one hand, the pixel formatted display data is generated by the computer and the supervisor is compressed and on the other hand, the current safety relevant basic data in a second path
Ăśberwacher dem Speicher zugefĂĽhrt und die korrespondierenden Referenzdisplaydaten im Ăśberwacher zum Vergleich bereit gestellt.Supervisor supplied to the memory and provided the corresponding reference display data in the monitor for comparison.
Bei einer bevorzugten AusfĂĽhrungsform reduziert der Kompressor eine Farbtiefe der pixelformatierten Displaydaten, insbesondere von einer 18 bit bzw. 24 bit Farbstufe ĂĽber eine 8 bit Graustufe auf eine Graustufe kleiner 8 bit pro Pixel. Dies hat den Vorteil, dass die pixelformatierten Displaydaten ein geringeres Datenvolumen aufweisen. Somit wird die ĂśberprĂĽfung der sicherheitsrelevanten pixelformatierten Displaydaten beschleunigt und die notwendige Rechenleistung gesenkt.In a preferred embodiment, the compressor reduces a color depth of the pixel-formatted display data, in particular from an 18-bit or 24-bit color level over an 8-bit gray level to a gray level of less than 8 bits per pixel. This has the advantage that the pixel-formatted display data has a smaller data volume. Thus, the review of the security-relevant pixel-formatted display data is accelerated and the necessary computing power is reduced.
Vorzugsweise reduziert der Kompressor weiter eine Auflösung eines mehrere Pixel aufweisenden Teilfeldes auf ein Pixel, so dass die pixelformatierten Displaydaten als komprimierte Displaydaten vorliegen. Dies bewirkt eine weitere Reduktion des Datenvolumens der sicherheitsrelevanten pixelformatierten Displaydaten. Der Vorteil bei dieser Art von Komprimierung der pixelformatierten Displaydaten ist der, dass der Abstand, auch Hamming Distanz genannt, zwischen zwei sicherheitsrelevanten pixelformatierten Displaydaten so gewählt werden kann, dass die Wahrscheinlichkeit eines falschen Überprüfungsresultats minimiert wird, respektive unter den zulässigen Wert reduziert wird.Preferably, the compressor further reduces a resolution of a multi-pixel subfield to a pixel, such that the pixel formatted display data is present as compressed display data. This causes a further reduction of the data volume of the security-relevant pixel-formatted display data. The advantage with this type of compression of the pixel-formatted display data is that the distance, also called Hamming distance, can be chosen between two security-relevant pixel-formatted display data in such a way that the probability of a false verification result is minimized or reduced below the permissible value.
Bei einer bevorzugten Ausführungsform steuert der Überprüfer bei Übereinstimmung der vordefinierten sicherheitsrelevanten komprimierten Referenzdisplaydaten mit den sicherheitsrelevanten komprimierten Displaydaten zur Bildung eines zweiten Signals am Anzeigegerät eine Signallampe an, insbesondere eine LED, insbesondere derart, dass sie leuchtet oder blinkt. Dies hat den Vorteil, dass dem Benutzer sofort angezeigt wird, wie der Status der Überprüfung ist, so dass dieser falls nötig entsprechende Massnahmen ergreifen kann.In a preferred embodiment, if the predefined, safety-relevant compressed reference display data match the safety-relevant compressed display data, the checker controls a signal lamp, in particular an LED, in particular, to form a second signal on the display device such that it is lit or flashing. This has the advantage that the user is immediately shown what the status of the check is, so that the latter can take appropriate measures if necessary.
Vorzugsweise schaltet der Überprüfer bei Übereinstimmung der vordefinierten sicherheitsrelevanten komprimierten Referenzdisplaydaten mit den sicherheitsrelevanten komprimierten Displaydaten zur Bildung des zweiten Signals am Anzeigegerät eine Hintergrundbeleuchtung des Bildschirms ein und bei fehlender Übereinstimmung zur Bildung des ersten Signals aus.Preferably, if the predefined safety-relevant compressed reference display data matches the safety-relevant compressed display data for forming the second signal on the display device, the reviewer switches on a backlight of the screen and, if there is no match, forms the first signal.
Bei einer bevorzugten AusfĂĽhrungsform werden die sicherheitsrelevanten Basisdaten einem Kontroller im Ăśberwacher zugefĂĽhrt, um den Speicher auszulesen und die entsprechenden vordefinierten sicherheitsrelevanten Referenzdisplaydaten dem ĂśberprĂĽfer zuzufĂĽhren.In a preferred embodiment, the safety-related basic data is supplied to a controller in the monitor in order to read the memory and to supply the corresponding predefined safety-related reference display data to the reviewer.
Bei einer bevorzugten Ausführungsform ist der Speicher in einem Speichermedium, insbesondere einem Flash, abgelegt. Dies hat den Vorteil, dass direkt im Überwacher Daten abgelegt werden können, auf welche sehr schnell zugegriffen werden kann bzw. aus welchem schnell die Daten gelesen werden können.In a preferred embodiment, the memory is stored in a storage medium, in particular a flash. This has the advantage that data can be stored directly in the monitor, which can be accessed very quickly or from which the data can be read quickly.
Bei einer bevorzugten Ausführungsform weisen die Basisdaten zusätzlich zu den sicherheitsrelevanten Basisdaten auch nichtsicherheitsrelevante Basisdaten auf, so dass der Rechner aus den sicherheitsrelevanten und nichtsicherheitsrelevanten Basisdaten pixelformatierte Displaydaten generiert. Dies bewirkt, dass bei einer durch den Benutzer ausgewählten Bildschirmseite sowohl sicherheitsrelevante als auch nichtsicherheitsrelevante Displaydaten der ausgewählten Bildschirmseite demIn a preferred embodiment, in addition to the security-relevant basic data, the basic data also has non-safety-relevant basic data, so that the computer generates pixel-formatted display data from the security-relevant and non-safety-relevant basic data. This causes that in a screen page selected by the user, both security-related and non-security-relevant display data of the selected screen page the
Ăśberwacher zugefĂĽhrt werden.Supervisor be supplied.
Vorzugsweise werden die abgegriffenen pixelformatierten Displaydaten einem Regionenfilter zugefĂĽhrt und von diesen die nichtsicherheitsrelevanten pixelformatierten Displaydaten herausgefiltert, so dass der ĂśberprĂĽfer die ĂśberprĂĽfung ausschliesslich auf Basis der sicherheitsrelevanten pixelformatierten Displaydaten durchfĂĽhrt. Dies bewirkt, dass die nichtsicherheitsrelevanten Displaydaten keine Relevanz fĂĽr die ĂśberprĂĽfung der sicherheitsrelevanten Displaydaten haben und somit der ĂśberprĂĽfer ein geringeres Datenvolumen auswerten muss.Preferably, the tapped pixel-formatted display data is fed to a region filter and filtered out of these the non-safety-relevant pixel-formatted display data, so that the reviewer performs the check exclusively on the basis of the security-relevant pixel-formatted display data. This has the effect that the non-safety-relevant display data has no relevance for checking the security-relevant display data and thus the reviewer has to evaluate a smaller volume of data.
Bei einer bevorzugten AusfĂĽhrungsform integriert der Rechner bei der Generierung der pixelformatierten Displaydaten ein Bildschirmsteuersignal, wie beispielsweise ein Zeilenanfangssignal, und ein Fensterfilter filtert aus den abgegriffenen pixelformatierten Displaydaten dieses Bildschirmsteuersignal heraus. Dies hat den Vorteil, dass Daten, welche die ĂśberprĂĽfung nicht betreffen, vorab herausgefiltert werden.In a preferred embodiment, when generating the pixel-formatted display data, the computer integrates a screen control signal, such as a start-of-line signal, and a window filter filters out of the tapped pixel-formatted display data this screen control signal. This has the advantage that data that does not affect the check, are filtered out in advance.
Bei einer weiteren erfindungsgemäss bevorzugten Ausführungsform werden die pixelformatierten Displaydaten mittels eines Datenwandlers von seriellen LVDS Daten in parallele Videodaten, insbesondere in einen RGB Farbraum mit einer Farbtiefe von 18 bit oder 24 bit, umgewandelt. Bei den LVDS Daten handelt es sich um sogenannte Low Voltage Differential Signals, welche gerade für LCD Monitore als Datenformat geeignet sind, um pixelformatierte Displaydaten zur Anzeige zu führen.In a further preferred embodiment according to the invention, the pixel-formatted display data are converted by means of a data converter of serial LVDS data into parallel video data, in particular into an RGB color space with a color depth of 18 bits or 24 bits. The LVDS data are so-called low voltage differential signals, which are currently suitable for LCD monitors as a data format to display pixel-formatted display data for display.
Bei einer weiteren erfindungsgemäss bevorzugten Ausführungsform erfordern parallele Videodaten, wie beispielsweise RGB666 Videodaten, keine Umwandlung mittels des Datenwandlers. Dies hat den Vorteil, dass RGB666 Videosignale direkt dem Fensterfilter, Kompressor oder Regionenfilter zugeführt werden können. Dies hat den weiteren Vorteil, dass zusätzliche Hardware eingespart wird, was entsprechend zur Kostenreduktion der Hardware führt.In another preferred embodiment of the invention, parallel video data, such as RGB666 video data, does not require conversion by the data converter. This has the advantage that RGB666 video signals can be fed directly to the window filter, compressor or regional filter. This has the further advantage that additional hardware is saved, which leads accordingly to the cost reduction of the hardware.
Besonders bevorzugte Ausführungsformen der Erfindung werden im Folgenden anhand der Zeichnung erläutert.Particularly preferred embodiments of the invention are explained below with reference to the drawing.
Es zeigen rein schematisch:
- Fig. 1
- ein Blockschaltbild eines Anzeigegerätes zur Überprüfung von pixelformatierten Displaydaten mittels eines Überwachers,
- Fig. 2
- ein Blockschaltbild des Ăśberwachers im Detail,
- Fig. 3
- ein Komprimierverfahren fĂĽr die Umwandlung von pixelformatierten Displaydaten in komprimierte Displaydaten am Beispiel einer Geschwindigkeit eines Fahrzeugs,
- Fig. 4
- ein Auflösungsreduktionsverfahren bei dem ein mehrere Pixel aufweisendes Teilfeld auf 1 bit reduziert wird,
- Fig. 5
- eine sicherheitsrelevante Bildschirmseite unter optionaler Verwendung eines ersten optischen Markers,
- Fig. 6
- eine nichtsicherheitsrelevante Bildschirmseite unter optionaler Verwendung eines zweiten optischen Markers.
- Fig. 1
- a block diagram of a display device for checking pixel-formatted display data by means of a monitor,
- Fig. 2
- a block diagram of the supervisor in detail,
- Fig. 3
- a compression method for the conversion of pixel-formatted display data into compressed display data using the example of a speed of a vehicle,
- Fig. 4
- a resolution reduction method in which a multi-pixel subfield is reduced to 1 bit,
- Fig. 5
- a security-relevant screen page with optional use of a first optical marker,
- Fig. 6
- a non-security-relevant screen page with optional use of a second optical marker.
Ein in
Der Bildschirm 14 weist Bedienelemente 16 auf, mittels derer ein Benutzer des Anzeigegerätes 10, je nach Situation, in welcher sich das Fahrzeug befindet, eine gewählte Bildschirmseite 18 auf dem Bildschirm 14 des Anzeigegerätes 10 zur Darstellung bringen kann. Beispielsweise kann in einem Bahnhof die Stellung der Türen als Bildschirmseite 18 ausgewählt werden, wohingegen während der Fahrt die Geschwindigkeit des Fahrzeugs auf einer anderen gewählten Bildschirmseite 18 dargestellt werden kann. Mittels am Bildschirm 14 angebrachten Signallampen 19, insbesondere LED's 20, 22, 24, 26 können dem Benutzer Statusinformationen dargestellt werden.The
Weiter ist im Bildschirm 14 in der Bildschirmseite 18 ein optischer Marker 28 sowie die Kennzeichnung einer sicherheitsrelevanten Region 13 und einer nichtsicherheitsrelevanten Region 15 gezeigt. Die Funktionsweise dieser Elemente wird im Detail im Zusammenhang mit der Beschreibung der
Die Basisdaten 12, welche auf dem Bildschirm 14 zur Darstellung gelangen sollen, werden über ein Feldbussystem wie beispielsweise den CAN-Bus, den MVB (Multi-Vehical-Bussystem) oder über eine Ethernetdatenleitung an einen Rechner 30 im Anzeigegerät 10 übermittelt. Der Rechner 30 visualisiert die Basisdaten 12 am Bildschirm 14, indem mittels einer Software die Basisdaten 12 in pixelformatierte Displaydaten 32 umgewandelt werden. Die Software kann beispielsweise auf einem Betriebssystem im Rechner 30, wie beispielsweise Linux, ausgeführt werden.The basic data 12 which are to be displayed on the
Bei den Basisdaten 12 kann zwischen sicherheitsrelevanten Basisdaten 34, wie beispielsweise der Geschwindigkeit, und nichtsicherheitsrelevanten Basisdaten 36, wie beispielsweise dem FĂĽllstand eines Wassertanks, unterschieden werden. Die sicherheitsrelevanten Basisdaten 34 mĂĽssen die Sicherheitsstufe SIL-2 erfĂĽllen, wie in der Einleitung ausgefĂĽhrt. Sie mĂĽssen auch entsprechend der Sicherheitsstufe SIL-2 ĂĽbermittelt werden.In the basic data 12, it is possible to distinguish between safety-relevant
Der Rechner 30 selbst genügt nicht den Sicherheitsanforderungen des Schienenverkehrs, da die Umwandlung von sicherheitsrelevanten Basisdaten 34 in pixelformatierte Displaydaten 32 lediglich die Sicherheitsstufe SIL-0 (punktiert dargestellte Flächen in
Vor der ĂśberprĂĽfung der pixelformatierten Displaydaten 32 in einem ĂśberprĂĽfer 40 des Ăśberwachers 38 werden die pixelformatierten Displaydaten 32 mittels eines Komprimierverfahrens 42 in komprimierte Displaydaten 44 umgewandelt. Dabei werden ausschliesslich die sicherheitsrelevanten pixelformatierten Displaydaten 46 in sicherheitsrelevante komprimierte Displaydaten 48 umgewandelt.Before checking the pixel-formatted
Dem Ăśberwacher 38 stehen ausserdem die gleichen sicherheitsrelevanten Basisdaten 34 zur VerfĂĽgung wie dem Rechner 30. In einem Speicher 50 des Ăśberwachers 38 ist ein Referenzdatensatz 52 mit vordefinierten sicherheitsrelevanten komprimierten Referenzdisplaydaten 54 gespeichert. Die sicherheitsrelevanten Basisdaten 34 bestimmen im Ăśberwacher 38, welche vordefinierten sicherheitsrelevanten komprimierten Referenzdisplaydaten 54 aus dem Referenzdatensatz 52 dem ĂśberprĂĽfer 40 zugefĂĽhrt werden. Der Speicher 50 kann in einem Speichermedium, insbesondere in einem Flash, abgelegt sein.The
Die dem Überprüfer 40 zugeführten, vordefinierten sicherheitsrelevanten komprimierten Referenzdisplaydaten 54 und sicherheitsrelevanten komprimierten Displaydaten 48 werden miteinander verglichen. Nach einer Auswertung 56 dieser Überprüfung werden anschliessend entsprechende Signalisierungen eingeleitet. Der Überwacher 38 weist Ausgänge 58, 60, 62, 64, 66 für die Einleitung der entsprechenden Signalisierungen auf.The predefined safety-related compressed reference display data 54 and safety-related
Im Falle einer fehlenden Übereinstimmung von den sicherheitsrelevanten komprimierten pixelformatierten Displaydaten 48 mit den sicherheitsrelevanten komprimierten Referenzdisplaydaten 54 bei der Überprüfung, wird dies dem Benutzer mittels eines ersten Signals 68 am Anzeigegerät 10, insbesondere durch die Signallampen 19, kenntlich gemacht. Dabei können beispielsweise die SIL-2 LED 24 bzw. optional die Marker LED 26 oder ein externes Gerät 70 für die Signalisierung verwendet werden. Es kann optional auch dem Rechner 30 das Ergebnis der fehlgeschlagenen Überprüfung signalisiert werden. Eine weitere Fehleroffenbarung bei fehlerhafter Überprüfung ist das Abschalten der Hintergrundbeleuchtung 23 durch den Überwacher 38.In the event of a mismatch between the safety-relevant compressed pixel-formatted
Der in
Ein im Anzeigegerät 10 bzw. im Überwacher 38 integriertes Modul 72', welches fortan als AIM (Anzeige-Integritäts-Modul) 72 bezeichnet wird, ist Bestandteil des Überwachers 38 und zuständig für die Verarbeitung der sicherheitsrelevanten Basisdaten 34 und der pixelformatierten Displaydaten 32. Das AIM 72 kann insbesondere als FPGA (Field Programmable Gate Array), DSP (Digital Signal Processor), CPU (Central Processing Unit) oder als ASIC (Application Specific Intergrated Circuit) ausgeführt sein.A module 72 'integrated in the
Die Daten, welche vom AIM 72 gelesen werden sollen, müssen im Falle eines zum AIM 72 inkompatiblen Datenformats vorab umgewandelt werden. Mittels eines Konfigurators 74 können Konfigurationsdaten 76, wie beispielsweise Referenzdaten 78 und/oder Initialisierungsparameter 80, an das AIM 72 übermittelt und im Speicher 50 gespeichert werden. Jedoch müssen diese Konfigurationsdaten 76 in der Regel zunächst einen Kontroller 81 durchlaufen, insbesondere dann, wenn die Konfigurationsdaten 76 nicht AIM 72 kompatibel sind. Zum AIM 72 kompatible Daten können beispielsweise RGB666 Daten 91 sein, wie in
Beim erfindungsgemässen Verfahren wird vorzugsweise der Referenzdatensatz 52 im Konfigurationsmodus 74' mit vordefinierten sicherheitsrelevanten komprimierten Referenzdisplaydaten 54 im Speicher 50 gespeichert.In the method according to the invention, preferably the reference data record 52 is stored in the
Beim Wechseln vom Konfigurationsmodus 74' in einen Lademodus, werden die Konfigurationsdaten 76 und Initialisierungsparameter 80 von den jeweiligen Hardwarekomponenten des Ăśberwachers 38 bzw. AIM 72 gelesen, wobei vorab das AIM 72 zurĂĽckgesetzt und der Speicher 50 ĂĽberprĂĽft wird, um sicher zu gehen, dass kein Fehler im Speicher 50 vorliegt.When switching from configuration mode 74 'to a load mode, the configuration data 76 and initialization parameters 80 are read from the respective hardware components of the
Im Betriebsmodus 89 des Überwachers 38, bzw. des AIM 72, können nun die abgegriffenen, pixelformatierten Displaydaten 32 ebenso wie die sicherheitsrelevanten Basisdaten 34 vom AIM 72 gelesen werden. Da die pixelformatierten Displaydaten 32 beispielsweise sogenannte serielle LVDS (Low Voltage Differential Signals) Daten 93 sein können, welche nicht kompatibel mit dem AIM 72 Datenformat sind, müssen diese pixelformatierten Displaydaten 32 allenfalls mittels eines Datenwandlers 90 in parallele Videodaten 92 umgewandelt werden (dieser Pfad ist in
Wie in
Die vom Datenwandler 90 aus den pixelformatierten Displaydaten 32 erzeugten Videodaten 92 werden einem Fensterfilter 94 zugeführt. Der Fensterfilter 94 erkennt die Videodaten 92, welche für die vom Benutzer ausgewählte Bildschirmseite 18 generiert wurden und auf dem Bildschirm 14 des Anzeigegerätes 10 zur Darstellung gelangen sollen. Alle nicht aktiven pixelformatierten Displaydaten 96 und sogenannte Bildschirmsteuerungssignale 98, wie beispielsweise ein Zeilenanfangssignal 98', werden vom Fensterfilter 94 herausgefiltert. Im Konfigurationsmodus 74' kann der nicht angezeigte Bereich für Bildschirmseiten 18, insbesondere der Bereich für die Bildschirmsteuersignale 98, festgelegt werden.The video data 92 generated by the data converter 90 from the pixel-formatted
Es ist auch denkbar, dass vor dem Bildschirm 14 des Anzeigegerätes 10 parallele Videodaten 92, wie beispielsweise RGB666 Daten 91, abgegriffen werden, welche keine Datenumwandlung erfordern und direkt dem Fensterfilter 94 zugeführt werden können, wie in
Die nun auf die Bildschirmseite 18 reduzierten, pixelformatierten Displaydaten 32 werden mittels eines Kompressors 100 weiterverarbeitet. Der Kompressor 100 verringert die Farbtiefe einzelner Pixel und/oder fasst mehrere Pixel in einem Pixel zusammen, wie anschaulich in
Da im Kompressor 100 die sicherheitsrelevanten pixelformatierten Displaydaten 46 und die nichtsicherheitsrelevanten pixelformatierten Displaydaten 102 komprimiert wurden, mĂĽssen die sicherheitsrelevanten Regionen 13 (siehe
Es ist zu bemerken, dass die Abfolge der oben genannten Filter beim Komprimierverfahren 42 beliebig gewählt werden kann. Somit ist es auch denkbar, dass die Videodaten 92 nach dem Fensterfilter 94 eine erneute Filterung durch den Regionenfilter 104 erhalten und dann erst der Kompressor 100 zum Einsatz kommt. Entsprechend würden dem Überprüfer 38 aus dem Kompressor 100 ausschliesslich sicherheitsrelevante komprimierte Displaydaten 48 in den entsprechenden sicherheitsrelevanten Regionen 13 zugeführt.It should be noted that the sequence of the above-mentioned filters can be arbitrarily selected in the
Die in den sicherheitsrelevanten Regionen 13 befindlichen, sicherheitsrelevanten komprimierten Displaydaten 48 werden dem ĂśberprĂĽfer 40 in separaten Registern 112 zugefĂĽhrt. Anschliessend vergleicht der ĂśberprĂĽfer 40 die sicherheitsrelevanten komprimierten Displaydaten 48 mit den sicherheitsrelevanten komprimierten Referenzdisplaydaten 54, welche durch die sicherheitsrelevanten Basisdaten 34 bestimmt und dem ĂśberprĂĽfer 38 aus dem Speicher 50 im Betriebsmodus 89 zugefĂĽhrt wurden.The safety-relevant
Ein Zwischenregister 114 zwischen dem Überprüfer 40 und der Auswertung 56 erlaubt eine Art Pufferung der Vergleichsergebnissen aus dem Überprüfer 38. Dies kann notwendig sein, wenn beispielsweise zwischen einer Geschwindigkeit 26 km/h auf eine andere Geschwindigkeit 27 km/h gewechselt wird und der Rechner entsprechend Zeit benötigt, um diese neue Geschwindigkeit auf dem Bildschirm 14 des Anzeigegerätes 10 zur Darstellung zu bringen. Auch beim Wechseln der Bildschirmseite 18 benötigt der Rechner Zeit, um die Darstellung umzusetzen, so dass auch hier die Pufferung notwendig ist. Da die Überprüfung etwa 20 ms dauert, was für das menschliche Auge zu schnell ist, dient der Zwischenspeicher 114 ebenso auch dem Benutzer, damit dieser die pixelformatierten Displaydaten 32 auf dem Bildschirm 14 ausreichend lang betrachten kann, um diese korrekt wahrzunehmen.An intermediate register 114 between the
Die vom Zwischenspeicher 114 an die Auswertung 56 weitergereichten, durch den ĂśberprĂĽfer 40 geprĂĽften, sicherheitsrelevanten Regionen 106 fĂĽhren zu der Signalisierung seitens des Ăśberwachers 38, wie im Zusammenhang mit
In
In einem ersten Kompressionsschritt 116 wird die Farbtiefe von 18 bit bzw. 24 bit ĂĽber eine 8 bit Graustufe auf eine Graustufe kleiner als 8 bit, insbesondere auf eine 1 bit Schwarzweissstufe pro Pixel, reduziert (in
In einem zweiten Kompressionsschritt 118 werden mehrere Pixel aufweisende Teilfelder 120, wie in
Der Vorteil bei dieser Art von Komprimierung der pixelformatierten Displaydaten 32 ist der, dass der Abstand, auch Hamming Distanz genannt, zwischen zwei sicherheitsrelevanten pixelformatierten Displaydaten 46 so gewählt werden kann, dass die Wahrscheinlichkeit eines falschen Überprüfungsresultats minimiert wird, respektive unter den zulässigen Wert reduziert wird.The advantage with this type of compression of the pixel-formatted
Bei Zufuhr ungĂĽltiger sicherheitsrelevanter Basisdaten 34 an den Rechner 30, kann dieser beispielsweise die fehlerhafte sicherheitsrelevante Region 13 mit einem "X" versehen, wie in
Es ist zu bemerken, dass das Komprimierverfahren 42 die Wahrnehmung des menschlichen Auges, wo Fehler einzelner Pixel in der Regel keine Relevanz haben, berĂĽcksichtigt.It should be noted that the
In einer weiteren bevorzugten AusfĂĽhrungsform der vorliegenden Erfindung kann die Kennzeichnung von sicherheitsrelevanten Bildschirmseiten 108 und nichtsicherheitsrelevanten Bildschirmseiten 110 mittels des optischen Markers 28 erfolgen, wie in
Wie im Zusammenhang mit
Für den Fall, dass die gewählte sicherheitsrelevante Bildschirmseite 108 die sicherheitsrelevanten pixelformatierten Displaydaten 46 aufweist, kann in die pixelformatierten Displaydaten 32 ein erster optischer Marker 122 integriert werden, wie in
Für den Fall, dass die gewählte nichtsicherheitsrelevante Bildschirmseite 110 ausschliesslich nichtsicherheitsrelevante pixelformatierte Displaydaten 102 aufweist, kann in die pixelformatierten Displaydaten 32 ein zweiter optischer Marker 124 integriert werden, wie in
Der erste optische Marker 122 und der zweite optische Marker 124 weisen Informationsmerkmale auf, mit welchen der Ăśberwacher 38 die sicherheitsrelevanten Bildschirmseiten 108 von den nichtsicherheitsrelevanten Bildschirmseiten 110 unterscheiden kann.The first
Im Konfigurationsmodus 74' müssen dem Überwacher 38, falls der optische Marker 28 verwendet werden soll, entsprechende Markerreferenzdaten einprogrammiert werden. Dementsprechend kann der Überwacher 38 im betriebsbereiten Zustand den optischen Marker 28 während der Überprüfung mit Markerreferenzdaten vergleichen. Falls einerseits der Überwacher 38 feststellt, dass der zweite optische Marker 124 vorhanden ist, wird die Überprüfung ausgeschaltet. Falls jedoch der Überwacher 38 feststellt, dass der erste optische Marker 122 vorhanden ist, oder bei fehlender Übereinstimmung zwischen dem optischen Marker 28 und den Markerreferenzdaten wird eine Kontrolle durchgeführt.In configuration mode 74 ', if the
Der optische Marker 28 besteht aus einer Abfolge vordefinierter Pixelmuster 130 und befindet sich insbesondere an einer vordefinierten Stelle in der sicherheitsrelevanten Bildschirmseite 108, wie in
Stellt der Überwacher 38 fest, dass der optische Marker 28 vorhanden ist, wird das Signal 68 an das Anzeigegerät 10 gesendet, um dem Benutzer anzuzeigen, dass und welcher optische Marker 28 vorhanden ist (siehe
Vor Inbetriebnahme des erfindungsgemässen Anzeigegerätes 10 müssen sämtliche Konfigurationsdaten 74' dem Überwacher 38 und dem Rechner 30 zugeführt werden. Der Rechner 30 erhält einen Datensatz an vordefinierten Bildschirmseiten 18, welche vom Benutzer ausgewählt werden können, und der Überwacher 38 erhält den in den oberen Abschnitten besprochenen Referenzdatensatz 78 und die Initialisierungsparameter 80 (siehe
Im Betrieb kann die gewünschte Bildschirmseite 18 auf dem Bildschirm 14 des Anzeigegerätes 10 durch den Benutzer ausgewählt werden.In operation, the desired screen page 18 may be selected on the
Für den Fall, dass ausschliesslich nichtsicherheitsrelevante Displaydaten 102 auf der gewählten Bildschirmseite 110 angezeigt werden und ein zweiter optischer Marker 124 beim Vergleich mit Markerreferenzdaten eine Übereinstimmung aufweist, wird die Überprüfung ausgeschaltet.In the event that only non-safety-
Für den Fall, dass sicherheitsrelevante Displaydaten 46 auf der gewählten Bildschirmseite 108 angezeigt werden und somit der erste optische Marker 122 erkannt wurde, sowie bei fehlender Übereinstimmung des ersten optischen Markers 122 mit Markerreferenzdaten, wird die Kontrolle durchgeführt. Bei Feststellen einer fehlerhaften Kontrolle wird die Hintergrundbeleuchtung 23 und die SIL-2 LED 24 ausgeschaltet.In the event that security-
FĂĽr den Fall, dass die Bildschirmseiten 18 keinen optischen Marker 28 aufweisen, wird fĂĽr sicherheitsrelevante Bildschirmseiten 108 und nichtsicherheitsrelevante Bildschirmseiten 110 immer eine ĂśberprĂĽfung durchgefĂĽhrt.In the event that the screen pages 18 have no
Wenn bei einer sicherheitsrelevanten Region 13 bei der ĂśberprĂĽfung eine fehlerhafte Ăśbereinstimmung auftritt, werden die Hintergrundbeleuchtung 23 und die SIL-2 LED 24 ausgeschaltet. Optional kann der Fehler auch dem Rechner 30 signalisiert werden, so dass dieser auf der fehlerhaften sicherheitsrelevanten Region 13, anstelle einer Geschwindigkeit beispielsweise ein "X" vermerkt, wie in
Wenn bei einer sicherheitsrelevanten Region 13 eine einwandfreie ĂśberprĂĽfung durchgefĂĽhrt wurde, leuchtet die SIL-2 LED 24, und die Hintergrundbeleuchtung 23 bleibt eingeschaltet.If a proper check has been performed on a safety-
Bei einer weiteren bevorzugten AusfĂĽhrungsform der vorliegenden Erfindung sind die SIL-2 LED 24 und dieIn another preferred embodiment of the present invention, the SIL-2
Marker LED 26 in einer LED kombiniert, so dass letztere immer dann eingeschaltet ist, wenn sowohl die Bedingungen zum Einschalten der Marker LED 26 wie auch die Bedingungen zum Einschalten der SIL-2 LED 24 erfĂĽllt sind.
Claims (12)
- Method for checking pixel-formatted display data which, on the one hand, are generated from safety-relevant basic data (32) using a computer (30) and, for display on a screen (14) of a display device (10), in particular an LCD monitor in the driver's cab of a vehicle, are supplied to the screen (14),- in which the safety-relevant pixel-formatted display data (32), on the other hand, are tapped off upstream of the screen (14) and are converted into safety-relevant compressed display data (48) in a monitoring means (38) using a compressor (100) and are supplied to a checking means (40),- in which a reference data record (52) having predefined safety-relevant compressed reference display data (54) is stored in a memory (50) of the monitoring means (38), and the safety-relevant basic data (34) in the monitoring means (38) determine which predefined safety-relevant compressed reference display data (54) from the reference data record (52) are supplied to the checking means (40),- the checking means (40) compares the predefined safety-relevant compressed reference display data (54) supplied to it and safety-relevant compressed display data (48) with one another, and- in the absence of a match, this is disclosed to a user on the display device (10) using a first signal (68).
- Method according to Claim 1, characterized in that the compressor (100) reduces a colour depth of the pixel-formatted display data (32), in particular from an 18-bit or 24-bit colour shade, via an 8-bit grey shade, to a grey shade of less than 8 bits per pixel.
- Method according to Claim 2, characterized in that the compressor (100) reduces a resolution of a subfield (120) having a plurality of pixels to one pixel, with the result that the pixel-formatted display data (32) are in the form of compressed display data (48).
- Method according to one of Claims 1 to 3, characterized in that, if the predefined safety-relevant compressed reference display data (54) and the safety-relevant compressed display data (48) match, the checking means (40) controls a signal lamp (19), in particular an LED, in particular in such a manner that it lights up or flashes, in order to form a second signal (69) on the display device (10).
- Method according to Claim 4, characterized in that, if the predefined safety-relevant compressed reference display data (54) and the safety-relevant compressed display data (48) match, the checking means (40) switches on backlighting (23) of the screen (14) in order to form the second signal (69) on the display device (10) and, in the absence of a match, switches off the backlighting (23) in order to form the first signal (68) on the display device (10).
- Method according to one of Claims 1 to 5, characterized in that the safety-relevant basic data (32) are supplied to a controller (81) in the monitoring means (38) in order to read the memory (50) and to supply the corresponding predefined safety-relevant reference display data (54) to the checking means (40).
- Method according to one of Claims 1 to 6, characterized in that the memory (50) is stored in a storage medium, in particular a flash.
- Method according to one of Claims 1 to 7, characterized in that, in addition to the safety-relevant basic data (34), the basic data (12) also have non-safety-relevant basic data (36), with the result that the computer (30) generates pixel-formatted display data (32) from the safety-relevant basic data (34) and non-safety-relevant basic data (36).
- Method according to Claim 8, characterized in that the pixel-formatted display data (32) which have been tapped off are supplied to a region filter (104) and the non-safety-relevant pixel-formatted display data (102) are filtered therefrom, with the result that the checking means (40) carries out the check solely on the basis of the safety-relevant pixel-formatted display data (46).
- Method according to one of Claims 1 to 9, characterized in that, when generating the pixel-formatted display data (32), the computer (30) integrates a screen control signal (98), for example a line start signal (98'), and a window filter (94) filters this screen control signal (98) from the pixel-formatted display data (32) which have been tapped off.
- Method according to one of Claims 1 to 10, characterized in that the pixel-formatted display data (32) are converted from serial LVDS data (93) into parallel video data (92), in particular into an RGB colour space with a colour depth of 18 bits or 24 bits, using a data converter (90).
- Method according to one of Claims 1 to 11, characterized in that the parallel video data (92), for example parallel RGB666 video data (91), do not require conversion using the data converter (90).
Priority Applications (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
EP10009934.0A EP2439722B1 (en) | 2010-09-20 | 2010-09-20 | Method for inspecting pixel-formated display data for display on a screen of a display device in a vehicle |
BRPI1105104-3A BRPI1105104A2 (en) | 2010-09-20 | 2011-09-19 | process for verifying pixel-formatted display data for presentation on a display of a pointing device on a vehicle |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
EP10009934.0A EP2439722B1 (en) | 2010-09-20 | 2010-09-20 | Method for inspecting pixel-formated display data for display on a screen of a display device in a vehicle |
Publications (2)
Publication Number | Publication Date |
---|---|
EP2439722A1 EP2439722A1 (en) | 2012-04-11 |
EP2439722B1 true EP2439722B1 (en) | 2013-06-19 |
Family
ID=43627025
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
EP10009934.0A Revoked EP2439722B1 (en) | 2010-09-20 | 2010-09-20 | Method for inspecting pixel-formated display data for display on a screen of a display device in a vehicle |
Country Status (2)
Country | Link |
---|---|
EP (1) | EP2439722B1 (en) |
BR (1) | BRPI1105104A2 (en) |
Families Citing this family (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
DE102013012679A1 (en) | 2013-07-31 | 2015-02-05 | Deuta-Werke Gmbh | Method and device for displaying a safety-relevant state |
ES2619190T3 (en) * | 2014-12-30 | 2017-06-23 | Matthias Auchmann | Method and system for the secure display of information relevant to security |
WO2018041777A1 (en) * | 2016-08-31 | 2018-03-08 | Siemens Aktiengesellschaft | Monitoring a display of an operator compartment of a means of transportation |
DE102016217518A1 (en) | 2016-09-14 | 2018-03-15 | Robert Bosch Gmbh | Device and method for monitoring a non-display of a predetermined image, in particular a warning symbol, in a display of a display device |
IT202200006290A1 (en) * | 2022-03-30 | 2023-09-30 | Hitachi Rail Sts S P A | VERIFICATION GROUP, TO VERIFY THE RELIABILITY OF VEHICLE INFORMATION VISIBLE ON A VIDEO SCREEN, PARTICULARLY FOR A RAIL VEHICLE |
Family Cites Families (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
DE10252124B4 (en) | 2002-11-04 | 2006-11-09 | Siemens Ag | Device for displaying speed in vehicles |
US7057630B2 (en) * | 2003-01-24 | 2006-06-06 | Microsoft Corporation | System and method for determining display subsystem compliance |
DE102004039498A1 (en) | 2004-08-14 | 2006-02-23 | Deuta-Werke Gmbh | Thin film transistor/LCD display`s frozen condition monitoring method, involves comparing bit pattern data with light sensor signals using controller, which produces alarm or switches off computer, when it determines discrepancy |
DE102005011942A1 (en) | 2005-03-14 | 2006-09-21 | Deuta-Werke Gmbh | Error displaying method, involves controlling display units using data sources for representing determined measuring value, where one display unit is covered by another display unit |
DE102006017422A1 (en) * | 2005-11-12 | 2007-05-16 | Diehl Aerospace Gmbh | Method for monitoring the control of image representations, in particular from security-relevant raw data |
DE102006004226A1 (en) * | 2005-12-20 | 2007-06-21 | Vossloh Information Technologies Gmbh | Method and arrangement for the safe monitoring and evaluation of operating states of at least one traffic control system and their use |
DE102007048608A1 (en) * | 2007-10-10 | 2009-04-16 | Robert Bosch Gmbh | A test device, display device and method for checking validity of display signals |
-
2010
- 2010-09-20 EP EP10009934.0A patent/EP2439722B1/en not_active Revoked
-
2011
- 2011-09-19 BR BRPI1105104-3A patent/BRPI1105104A2/en not_active IP Right Cessation
Also Published As
Publication number | Publication date |
---|---|
EP2439722A1 (en) | 2012-04-11 |
BRPI1105104A2 (en) | 2013-01-22 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
EP2439722B1 (en) | Method for inspecting pixel-formated display data for display on a screen of a display device in a vehicle | |
EP2273369B1 (en) | Method for presenting safety-relevant information on a display device and device for carrying out the method | |
EP2698618B1 (en) | Method and device for evaluating a quality of a headlamp | |
EP2833349B1 (en) | Method and device for representing a safety-relevant state | |
WO2009080018A1 (en) | Method for diagnosing an electronic display device | |
DE102013110840B4 (en) | Device and method for diagnosing LEDs in an LED array system | |
DE102005010671B4 (en) | Device for monitoring the function of a display element | |
DE102008025530B4 (en) | Device for testing the function of a lighting device of a motor vehicle | |
EP0645711A1 (en) | Method for operating a data display unit and devices for carrying out this method | |
DE102016202620A1 (en) | Device and method for monitoring a spatial area, in particular in the environment or inside a vehicle | |
DE102015219496A1 (en) | Method for determining the functionality of a driver assistance system of a vehicle, device, driver assistance system, motor vehicle | |
EP3711292B1 (en) | Test method for a camera system, control unit of the camera system, camera system, and vehicle having such a camera system | |
EP3555738A1 (en) | Method for verifying a validity of image data | |
EP2439644B1 (en) | Method for marking screen pages that are secure and not secure on a display device using an optical marker | |
DE102013211708B3 (en) | Test method for a screen in a vehicle | |
DE102012014493B4 (en) | Method and device for the redundant detection of a direction of rotation | |
DE102011051188B4 (en) | Matrix-addressed display system | |
DE102015012889B4 (en) | Display device and method for checking display content | |
EP1802489B1 (en) | Method and device for controlling a motor vehicle lighting | |
WO2018041777A1 (en) | Monitoring a display of an operator compartment of a means of transportation | |
DE102018205144B3 (en) | Test method for detecting error frames in high-resolution headlamps | |
WO2019179712A1 (en) | Method and device for protected display of an operation-relevant image content for the representation on a display in a motor vehicle | |
DE102012012728A1 (en) | Apparatus for recovering display information, has evaluation device that is designed, such that control information and measured drive signals are evaluated to recover display information | |
DE102022113271B4 (en) | Method for operating a vehicle interior monitoring system, control device, vehicle interior monitoring system and vehicle | |
DE102013019512A1 (en) | Checking the installation position of axle modulators based on disturbances in speed signals |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
AK | Designated contracting states |
Kind code of ref document: A1 Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO SE SI SK SM TR |
|
AX | Request for extension of the european patent |
Extension state: BA ME RS |
|
PUAI | Public reference made under article 153(3) epc to a published international application that has entered the european phase |
Free format text: ORIGINAL CODE: 0009012 |
|
17P | Request for examination filed |
Effective date: 20121003 |
|
GRAP | Despatch of communication of intention to grant a patent |
Free format text: ORIGINAL CODE: EPIDOSNIGR1 |
|
GRAP | Despatch of communication of intention to grant a patent |
Free format text: ORIGINAL CODE: EPIDOSNIGR1 |
|
GRAS | Grant fee paid |
Free format text: ORIGINAL CODE: EPIDOSNIGR3 |
|
GRAA | (expected) grant |
Free format text: ORIGINAL CODE: 0009210 |
|
INTG | Intention to grant announced |
Effective date: 20130425 |
|
AK | Designated contracting states |
Kind code of ref document: B1 Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO SE SI SK SM TR |
|
REG | Reference to a national code |
Ref country code: GB Ref legal event code: FG4D Free format text: NOT ENGLISH |
|
REG | Reference to a national code |
Ref country code: CH Ref legal event code: NV Representative=s name: PATENTANWAELTE SCHAAD, BALASS, MENZL AND PARTN, CH Ref country code: CH Ref legal event code: EP |
|
REG | Reference to a national code |
Ref country code: AT Ref legal event code: REF Ref document number: 618038 Country of ref document: AT Kind code of ref document: T Effective date: 20130715 |
|
REG | Reference to a national code |
Ref country code: IE Ref legal event code: FG4D Free format text: LANGUAGE OF EP DOCUMENT: GERMAN |
|
REG | Reference to a national code |
Ref country code: DE Ref legal event code: R096 Ref document number: 502010003685 Country of ref document: DE Effective date: 20130814 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: LT Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20130619 Ref country code: FI Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20130619 Ref country code: NO Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20130919 Ref country code: SI Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20130619 Ref country code: ES Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20130930 Ref country code: SE Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20130619 Ref country code: GR Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20130920 |
|
REG | Reference to a national code |
Ref country code: LT Ref legal event code: MG4D |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: HR Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20130619 Ref country code: BG Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20130919 |
|
REG | Reference to a national code |
Ref country code: NL Ref legal event code: VDEP Effective date: 20130619 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: LV Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20130619 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: CZ Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20130619 Ref country code: CY Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20130821 Ref country code: PT Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20131021 Ref country code: IS Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20131019 Ref country code: SK Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20130619 Ref country code: EE Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20130619 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: PL Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20130619 Ref country code: NL Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20130619 Ref country code: RO Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20130619 |
|
PLBI | Opposition filed |
Free format text: ORIGINAL CODE: 0009260 |
|
BERE | Be: lapsed |
Owner name: PIXY A.G. Effective date: 20130930 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: CY Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20130619 |
|
26 | Opposition filed |
Opponent name: DEUTA-WERKE GMBH Effective date: 20140319 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: DK Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20130619 Ref country code: MC Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20130619 |
|
PLAX | Notice of opposition and request to file observation + time limit sent |
Free format text: ORIGINAL CODE: EPIDOSNOBS2 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: IT Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20130619 |
|
REG | Reference to a national code |
Ref country code: DE Ref legal event code: R026 Ref document number: 502010003685 Country of ref document: DE Effective date: 20140319 |
|
REG | Reference to a national code |
Ref country code: FR Ref legal event code: ST Effective date: 20140530 |
|
REG | Reference to a national code |
Ref country code: IE Ref legal event code: MM4A |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: IE Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20130920 Ref country code: BE Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20130930 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: FR Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20130930 |
|
PLAF | Information modified related to communication of a notice of opposition and request to file observations + time limit |
Free format text: ORIGINAL CODE: EPIDOSCOBS2 |
|
PLBB | Reply of patent proprietor to notice(s) of opposition received |
Free format text: ORIGINAL CODE: EPIDOSNOBS3 |
|
GBPC | Gb: european patent ceased through non-payment of renewal fee |
Effective date: 20140920 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: SM Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20130619 |
|
PLAY | Examination report in opposition despatched + time limit |
Free format text: ORIGINAL CODE: EPIDOSNORE2 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: TR Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20130619 Ref country code: MT Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20130619 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: MK Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20130619 Ref country code: HU Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT; INVALID AB INITIO Effective date: 20100920 Ref country code: LU Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20130920 Ref country code: GB Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20140920 |
|
PLAT | Information related to reply to examination report in opposition deleted |
Free format text: ORIGINAL CODE: EPIDOSDORE3 |
|
PLBC | Reply to examination report in opposition received |
Free format text: ORIGINAL CODE: EPIDOSNORE3 |
|
PLAT | Information related to reply to examination report in opposition deleted |
Free format text: ORIGINAL CODE: EPIDOSDORE3 |
|
PLBC | Reply to examination report in opposition received |
Free format text: ORIGINAL CODE: EPIDOSNORE3 |
|
PGFP | Annual fee paid to national office [announced via postgrant information from national office to epo] |
Ref country code: DE Payment date: 20160921 Year of fee payment: 7 Ref country code: CH Payment date: 20160823 Year of fee payment: 7 |
|
REG | Reference to a national code |
Ref country code: AT Ref legal event code: MM01 Ref document number: 618038 Country of ref document: AT Kind code of ref document: T Effective date: 20150920 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: AT Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20150920 |
|
RDAF | Communication despatched that patent is revoked |
Free format text: ORIGINAL CODE: EPIDOSNREV1 |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: THE PATENT HAS BEEN GRANTED |
|
REG | Reference to a national code |
Ref country code: DE Ref legal event code: R064 Ref document number: 502010003685 Country of ref document: DE Ref country code: DE Ref legal event code: R103 Ref document number: 502010003685 Country of ref document: DE |
|
RDAG | Patent revoked |
Free format text: ORIGINAL CODE: 0009271 |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: PATENT REVOKED |
|
REG | Reference to a national code |
Ref country code: CH Ref legal event code: PLX |
|
27W | Patent revoked |
Effective date: 20170714 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: LI Free format text: LAPSE BECAUSE OF THE APPLICANT RENOUNCES Effective date: 20130619 Ref country code: CH Free format text: LAPSE BECAUSE OF THE APPLICANT RENOUNCES Effective date: 20130619 |
|
REG | Reference to a national code |
Ref country code: AT Ref legal event code: MA03 Ref document number: 618038 Country of ref document: AT Kind code of ref document: T Effective date: 20170714 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: AL Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20130619 |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: PATENT REVOKED |