EP2833349B1 - Procédé et dispositif de représentation d'un état relevant de la sécurité - Google Patents

Procédé et dispositif de représentation d'un état relevant de la sécurité Download PDF

Info

Publication number
EP2833349B1
EP2833349B1 EP14178345.6A EP14178345A EP2833349B1 EP 2833349 B1 EP2833349 B1 EP 2833349B1 EP 14178345 A EP14178345 A EP 14178345A EP 2833349 B1 EP2833349 B1 EP 2833349B1
Authority
EP
European Patent Office
Prior art keywords
comparison
test
result
image data
pixels
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
EP14178345.6A
Other languages
German (de)
English (en)
Other versions
EP2833349A1 (fr
Inventor
Rudolf Dr. Ganz
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Deuta Werke GmbH
Original Assignee
Deuta Werke GmbH
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Deuta Werke GmbH filed Critical Deuta Werke GmbH
Priority to PL14178345T priority Critical patent/PL2833349T4/pl
Publication of EP2833349A1 publication Critical patent/EP2833349A1/fr
Application granted granted Critical
Publication of EP2833349B1 publication Critical patent/EP2833349B1/fr
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • G—PHYSICS
    • G09—EDUCATION; CRYPTOGRAPHY; DISPLAY; ADVERTISING; SEALS
    • G09G—ARRANGEMENTS OR CIRCUITS FOR CONTROL OF INDICATING DEVICES USING STATIC MEANS TO PRESENT VARIABLE INFORMATION
    • G09G3/00—Control arrangements or circuits, of interest only in connection with visual indicators other than cathode-ray tubes
    • G09G3/006—Electronic inspection or testing of displays and display drivers, e.g. of LED or LCD displays
    • G—PHYSICS
    • G09—EDUCATION; CRYPTOGRAPHY; DISPLAY; ADVERTISING; SEALS
    • G09G—ARRANGEMENTS OR CIRCUITS FOR CONTROL OF INDICATING DEVICES USING STATIC MEANS TO PRESENT VARIABLE INFORMATION
    • G09G2330/00—Aspects of power supply; Aspects of display protection and defect management
    • G09G2330/10—Dealing with defective pixels
    • G—PHYSICS
    • G09—EDUCATION; CRYPTOGRAPHY; DISPLAY; ADVERTISING; SEALS
    • G09G—ARRANGEMENTS OR CIRCUITS FOR CONTROL OF INDICATING DEVICES USING STATIC MEANS TO PRESENT VARIABLE INFORMATION
    • G09G2330/00—Aspects of power supply; Aspects of display protection and defect management
    • G09G2330/12—Test circuits or failure detection circuits included in a display system, as permanent part thereof
    • G—PHYSICS
    • G09—EDUCATION; CRYPTOGRAPHY; DISPLAY; ADVERTISING; SEALS
    • G09G—ARRANGEMENTS OR CIRCUITS FOR CONTROL OF INDICATING DEVICES USING STATIC MEANS TO PRESENT VARIABLE INFORMATION
    • G09G2380/00—Specific applications
    • G09G2380/10—Automotive applications

Definitions

  • the invention generally relates to the field of safety technology.
  • the invention relates to a method and a device for reliably displaying a safety-relevant state with a display, in particular with a TFT screen.
  • a computer taking account of state information, creates an image data stream which contains representation values, in particular color values. These serve to drive the individual pixels of the display, i. to display an image, and are forwarded to the display in the image stream.
  • the image data stream is supplied to a test unit for performing a computational safety test.
  • This relates to a surveillance area, which comprises at least a plurality of pixels, usually a plurality of pixels, of the respective image to be displayed.
  • a generic method and a corresponding device are, for example, from the international patent application WO 2012/003872 A1 or European patents EP 2 353 089 B1 and EP 2 273 369 B1 previously known.
  • the computational security check is performed by deterministic calculation of a check code taking into account the representation values of all pixels within the monitoring area, ie by a data reduction of all image data concerning the monitoring area to a considerably reduced check code in the data volume. Based on this check code, an inference is made to a possible input variable and its comparison with the actual input variable, which can represent a state information, for example.
  • Related methods are also out EP 2 254 039 B1 or off DE 3 411 015 C2 known.
  • EP 0 584 895 A2 Another method, namely the signaling technically safe display traffic information, is in EP 0 584 895 A2 disclosed.
  • a checking routine the stored color value of a selected pixel of a symbol to be checked is read out and compared with the date for the relevant element. at Inequality of the color value and the comparison value, an error message is generated.
  • a selected pixel for example the vertex of a symbol known in its coordinates, is supplied from the memory to a comparator. Only if the operating state represented by the color value of this single pixel exactly matches the actual operating state does the comparator provide a positive comparison result.
  • this type of check has the disadvantage that certain fault modes can not be detected and, on the other hand, that imperceptible, only minor faults generate an error message that is in principle unnecessary.
  • the US 2007/0046680 A1 discloses an aircraft display system with improved availability of information.
  • the graphic is redundantly generated on two channels.
  • the check for example on the basis of checksums, can trigger a reaction for the purpose of tolerance to short-term interference pulses only if the same error is detected over several image repetition cycles.
  • a safety-related condition is to be signaled in a simple manner.
  • a control lamp depending on their luminous color, such as green or red, an operating state signaled and easily monitored by the user.
  • the correct function of the lamp is checked by a measurement of the lamp current to ensure safety.
  • the method is characterized by a method according to the preamble
  • claim 1 is characterized in that firstly a reference value which is valid for all pixels of the monitoring area is determined, for example by the test unit or a secure control computer, and that the test unit stores this reference value.
  • the test unit based on the image data stream, computationally determines a result variable and, for this purpose, subjects each pixel to a selection of pixels of the monitoring area of a test sequence.
  • the selection of the pixels for the test sequence comprises at least every other pixel of the monitored monitoring area and consists in the simplest case of all pixels of the surveillance area.
  • the test unit performs a comparison operation between at least one display value of the respective pixel, ie the pixel currently being examined in the test sequence, and the predetermined, stored reference value and forms a comparison result from this comparison operation. Furthermore, the test unit takes into account the respective comparison result to the current pixel, in order to be able to computationally determine the result variable. This consideration can be made in particular by incrementally increasing or decreasing the result variables depending on the respective comparison result. If necessary, the test sequence can extend over more than one image frame (English frame) or screen refresh. Finally, the invention provides that, after the test sequence has been performed, the result variable that has been computationally determined from the individual comparison results generated by image-wise comparison with a threshold value.
  • This comparison is made by the test unit itself or externally after output of the result variables by the test unit and is used to form either a positive or negative result of the safety test. This overall result can then be used to trigger a safety-related Reaction, for example, to issue a warning signal or to a safety shutdown of the display, are used.
  • the device is therefore characterized in that it comprises a test unit in which a reference value valid for all pixels of the monitoring area is stored and the test unit is designed to carry out a test sequence starting from the image data stream, such that the test unit successively for each Pixels of a selection comprising at least every second of the pixels of the monitoring area a comparison operation between at least one representation value, in particular a color value, performs the currently considered in the sequence pixel and the stored reference value and forms a comparison result. Furthermore, the test unit takes into account the respective comparison result for the purpose of computational determination of the result variables, for example by incrementally increasing or decreasing them.
  • the test unit can output the result variable or even compare it with a threshold value. Based on this, externally or through the test unit, the formation of a positive or negative result of the safety test can take place.
  • the threshold value for the result variable is determined such that a positive result of the safety check is already established when a predetermined proportion of the selection of pixels taken for the test sequence meets the comparison criterion of the comparison operation and this proportion is less than 100%.
  • EMC-induced changes in the image data stream can lead to insignificant changes in the individual Lead image, which the viewer can not recognize, are excluded in a simple manner.
  • a positive test result can be formed, for example, if instead of 100% of the pixels, 90% of the pixels have a desired color value.
  • the solution according to the invention is particularly easy to implement in the case of a digital image data stream, but in principle can also be used in an analog-controlled display.
  • the monitoring area can be specified variable to the test unit or can be stored in this fixed.
  • the term "surveillance area" means contiguous sets of individual pixels with respect to the image to be displayed, and includes any geometric shapes in the image to be displayed, in particular, but not limited to, polygonal or elliptical areas, including rectangular or circular areas.
  • all pixels of the predetermined monitoring range of the test sequence according to the invention are subjected. However, it is also possible to make a selection with a smaller number of pixels, but subject at least every other pixel to the comparison operation and consideration in the result variable.
  • An essential feature of the solution according to the invention is the fact that a plurality of pixels or pixels of the monitored area to be tested are compared with at least one of their display values for driving the display with one or only a few predetermined reference values.
  • the solution according to the invention also makes possible the complementary approach of recognizing maximum staining. It can thus be ensured, for example, that in the monitoring area a certain area proportion in the color green is only displayed if the status information corresponds to a safe operating state.
  • the comparison operation according to the invention can be implemented in different ways. Particularly simple is an identity comparison of a digital representation value with a digital reference value which has the same word length as the representation value. However, the comparison operation may also be performed as an inequality comparison. In particular, when it is to be checked whether the representation values for the individual pixels lie within a certain tolerance range, the comparison operation can be performed as a comparison, depending on whether the reference value represents an upper or lower limit value, that is currently in the test sequence considered representation value is smaller, less than / equal to, greater than / equal to, or greater than the reference value. Tolerance comparison is also technically easy to implement in other ways.
  • only a portion of the bits of the representation value that is of higher significance in the bit value may be compared to a reference value of lesser word length for identity. Due to the restriction to the higher-order bits, a tolerance for slight deviations, for example in the case of different color values of a hue, can be realized in a simple manner. Apart from the inequality comparison, which optionally uses upper and lower reference values, typically only one reference value is needed for the entire selection of items to be checked Pixels from the surveillance area.
  • test unit or the method can provide parallel or simultaneous execution of several test sequences relating to several separate or partially overlapping monitoring areas.
  • test sequence can be repeated individually for each screen layout or screen refresh. However, in order to reduce the required computing power and / or to introduce a temporal test tolerance, the test sequence can also extend over more than one image structure and preferably has a repetition rate in the range of human detectable, typically less than 30 Hz. The repetition rate of the test sequence can be expedient for a surveillance area, the 1 / n fraction of the refresh rate f.
  • the representation of an image comprises a color area whose color is determined by the computer depending on the state information.
  • the color surface can symbolize a control or warning light or represent the background of a security-relevant, dynamically variable display, such as a tachometer.
  • the threshold value for the result variable is determined as proposed according to the invention (see above).
  • the test sequence is the stepwise Increase or decrease a pixel counter.
  • the threshold value for forming the result of the security check can be determined as a function of the pixel counter, for example as a percentage of the tested total number of pixels.
  • the threshold value therefore does not have to be specified separately, but is automatically determined by the test sequence, depending on the size of the monitoring area and the selection made for the pixels to be tested.
  • the reference value valid for all pixels of the monitored area to be checked and / or the monitored area to be tested itself are also determined by the test unit. This is preferably done as a function of the status information which is supplied to the test unit for the determination of the reference value and / or the monitoring area.
  • the color values for the primary colors of a color space are used as display values in the image data stream.
  • at least one color value, preferably all color values are then subjected as representation value to each pixel of the comparison operation according to the invention.
  • the comparison operation in the test sequence can be carried out in particular as a tolerance comparison, for example, if the actual pixel under consideration in all or one of its color values, in absolute or relative terms, is more than a certain percentage of a target color value as the reference value different.
  • the color-by-color comparison operation may be performed by considering the individual color values.
  • This type of comparison operation allows e.g. Also, consideration of different color settings by the performing computer, for example, depending on user preferences and still recognizes the desired hues.
  • the test sequence according to the invention can extend over each individual image structure. To reduce the computing power or energy saving, it may be provided, for example, that the test sequence only extends over regularly intermittent image structures in the sense of a sampling. In certain applications, a safety-related check is already ensured if, for example, every second image buildup is correct. Accordingly, it is sufficient in these cases not to examine the image directly but at regular intervals to examine it.
  • An intermittent execution of the test sequence also allows the verification of a flashing display area.
  • a further test sequence is preferably provided, which extends in comparison to the abovementioned intermittent image structures on this alternately intermittent image structures and performs a comparison operation with a further, additionally stored reference value.
  • the state information is determined by a signal-technically secure control computer and, on the one hand, supplied to the computer, which generates the image data stream, and, on the other hand, to the test unit.
  • test unit For retrofitting existing systems, it is particularly appropriate to run the test unit as a separate module separate from the display and separate from the computer. For safety reasons, it is expedient if the test unit for connection to the image data line, in particular parallel to the display, has a read-only input, and thus can not change the image data stream.
  • test unit is conveniently implemented using an FPGA or ASIC. These can be readily configured or programmed to perform a method with the features described above.
  • the test unit expediently has, in addition to an input for the status information and the input for connection to the image data line, also an output for outputting the result of the safety test.
  • This output can be connected, for example, to the fail-safe control computer for the purpose of initiating a safety-related reaction.
  • the invention also relates to a test unit for use in a device according to one of the embodiments described above, and finally also to the use of the device according to the invention in a vehicle, in particular in a rail vehicle.
  • FIG. 1 shows the basic structure of a safety device 2 for carrying out the method according to the invention, for example in the cab of the railcar of a train.
  • the safety device 2 which is designated as a whole by 2, consists essentially of a commercially available PC 4, which generates image data as a representative computer and hereby activates a display consisting of a TFT panel or TFT display 6.
  • the TFT display is connected via an image data line 8, e.g. of the LVDS type, connected to the PC 4 for driving the individual pixels via a sequential image data stream, such that line by line and ultimately page by page, an image is constructed and displayed by the TFT display 6.
  • the safety device 2 comprises a test unit 10, which consists of microprocessors and, inter alia, an FPGA 12.
  • state information which characterizes a safety-relevant system state is supplied to the PC 4 and the test unit 10 via the data connection designated by the reference numeral 14. This value is taken into account within the PC 4 when creating the image data.
  • image data are supplied as a serial image data stream via the image data line 8 to the TFT display 6.
  • safety-relevant information eg a speedometer similar to a tachometer
  • a demarcated portion of the PC TFT displays 6 shown which is to be monitored as a monitoring area 16 safety.
  • the displayed image including the security-relevant information in the monitoring area 16 is "pre-rendered" and thus predefined.
  • the monitoring area hatched with a background in a warning color, for example in red, yellow or orange can be deposited.
  • the corresponding background should be displayed when the status information via the data connection 14, in particular from a signal-technically secure control computer 20, signals a critical condition (eg immediate stop with a red background, stop at the next possible opportunity with an orange background or maintenance required with a yellow background).
  • a critical condition eg immediate stop with a red background, stop at the next possible opportunity with an orange background or maintenance required with a yellow background.
  • the invention now makes it possible in a simple, reliable and efficient manner to check such monitoring areas 16 as to whether the state to be displayed is actually displayed correctly.
  • the image data stream fed via the LVDS image data line 8 to the TFT display 6 is tapped without change by the FPGA 12 of the test unit 10 via the read-back line 18 and a read-only input.
  • the FPGA 12 subjects the image data to the surveillance area 16 of a security audit.
  • the RGB color values ie in each case 24 bits to each of the selected pixels or pixels of the monitoring area, are successively read in pixel by pixel from the read-back line into a FIFO memory, eg a simple shift register 22 with no feedback with a width of 24 bits.
  • the contents of the shift register are compared with a reference color value stored in a register 24 contained in the FPGA. If all bits to the respective RGB color value, or as with the circuit in FIG.2 testable in the sense of a tolerance comparison, the higher-order ones Bit are identical to the reference color value, a success counter 26 is increased by one value.
  • a pixel counter (not shown) can be increased for each pixel tested or selected within the monitoring area 16.
  • test sequence e.g. After a complete screen refresh, it is then checked how high the proportion of those pixels of the monitoring area 16 is that is actually displayed with the color corresponding to the state information.
  • the test unit 10 If a predefinable threshold, which may also correspond to a proportion of the pixels, e.g. a proportion between 80% and 99%, the test unit 10 generates an output signal, e.g. to the secure control computer 20 which indicates the result of the security check, i. whether or not the color area is displayed correctly enough. For this purpose, the count of the success counter 26 is read out as the result variable after each test sequence.
  • a colored deposit of the tachometer does not have an exact color but a certain hue without requiring and checking an exact pixel-by-pixel match. This is in principle equal to the activation of a warning lamp whose display is monitored by current measurement.
  • FIG.2 shows a circuit that can easily exclude single pixel error as a safety-related error criterion. This is done in two stages, first by a tolerance comparison, which for each of the three RGB color values in the shift register 22 only the four most significant bits (Engl. Most significant bits) with a 4bit wide Compare reference value that is unchanged or fixed in register 24 for all pixels of the monitoring area 16.
  • a second step it is checked whether the result variable determined as counter result by the counter 26 represents a sufficient, predetermined proportion of the pixels in the monitoring area 16, eg 85% if about 10% of the pixels do not serve as background, but to display other information, eg to show the speedometer in FIG.1 , At the same time, the variable presentation of information, which has no actual background, can be included without affecting the result of the safety check.
  • FIG.3 shows an embodiment in which the color display to be tested takes place instead of by the PC 4 or in addition to the PC 4, by another, code-based test module 30 in the pixel data line.
  • This code-based test module 30 may have a structure according to EP2353089B1 respectively.
  • EP2273369B1 or according to EP2254039B1 exhibit.
  • a test unit 10 according to the present invention is connected downstream of the test module 30 and, according to the present invention, checks whether a safety-relevant display by the code-based test unit 30 is carried out correctly.
  • test unit 10 takes place at the same time to display an image on the display 16. This is achieved with little effort by serial processing of the data stream from the image data line 8 in a test sequence according to the invention. For this purpose, the computing power of commercially available FPGA is sufficient.
  • the test unit 10 can also use other suitable processor-like components instead of an FPGA 12, e.g. use an ASIC.
  • the comparison operation instead of a purely serial processing can also be realized multi-channel, ie with several parallel-fed individual shift registers correspondingly smaller bit width.
  • the test unit 12 can generate an output signal for the purpose of initiating a safety-related reaction, in particular for switching off the display or output of a warning signal, as a function of the test result.
  • the monitoring area 16 is in the picture shown after FIG.1 suitably rectangular, but may have any geometry and does not have to consist of contiguous pixels.
  • a display 6 any type of technical device can be used in the security device 2 and within the scope of the invention with which any information can be represented visually detectable by controlling individual pixels (English pixel).

Landscapes

  • Engineering & Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • Computer Hardware Design (AREA)
  • General Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • Image Processing (AREA)

Claims (14)

  1. Procédé pour représenter un état relatif à la sécurité au moyen d'un affichage (6), comprenant les étapes de
    créer un flux de données d'image moyennant un processeur (4) prenant en compte une information d'état, le flux de données d'image contenant des valeurs de représentation, en particulier des valeurs de couleur; transférer le flux de données d'image (8) vers l'affichage (6) pour représenter une image en commandant des pixels sur la base des valeurs de représentation; et
    fournir le flux de données d'image à une unité de test (10) pour effectuer un test informatique de sécurité d'une région de surveillance (16), qui comprend un ensemble contigu incluant une pluralité de pixels individuels d'une image à représenter;
    CARACTÉRISÉ EN CE QUE
    une valeur de référence valable pour tous les pixels de ladite région de surveillance (16) est déterminée et l'unité de test (10) stocke cette valeur de référence (24) ;
    ladite unité de test (10) détermine par calcul, dans une séquence de test, une variable de résultat à partir du flux de données d'image et, à cette fin, successivement et respectivement pour chaque pixel d'une sélection de pixels de la région de surveillance (16), ladite sélection comprenant au moins un pixel sur deux de la région de surveillance à tester,
    - effectue une opération de comparaison entre au moins une valeur de représentation du pixel respectif et ladite valeur de référence stockée pour en former un résultat de comparaison; et
    - afin de déterminer ladite variable de résultat, le résultat de comparaison respectif pour chaque pixel de la sélection est pris en compte, notamment en augmentant ou diminuant de manière incrémentale ladite variable de résultat;
    et, après que ladite séquence de test a été exécutée, ladite variable de résultat, que l'unité de test a déterminée par calcul en fonction des résultats de comparaison, es comparée avec une valeur seuil, de préférence au moyen de ladite unité de test (10), de manière à former un résultat positif ou négatif du test de sécurité, ladite valeur seuil pour ladite variable de résultat étant déterminée de telle sorte qu'un résultat positif du test de sécurité est déterminé lorsqu'une proportion prédéterminée de ladite sélection de pixels satisfait au critère de comparaison et que cette proportion est inférieure à 100 %.
  2. Procédé selon la revendication 1, CARACTERISE EN CE QUE ladite opération de comparaison est effectuée sous forme
    - d'une comparaison d'identité de la valeur de représentation numérique avec une valeur de référence numérique de longueur de mot identique;
    - d'une comparaison d'inégalité, notamment en tant que comparaison inférieure à, comparaison inférieure ou égale à, comparaison supérieure à ou d'une comparaison supérieure ou égale à; ou sous forme
    - d'une comparaison à tolérance, en particulier d'une partie des bits de la valeur de représentation qui est d'une valeur supérieure en termes de valeur binaire, avec une valeur de référence d'une longueur de mot plus courte.
  3. Procédé selon la revendication 1 ou 2, CARACTERISE EN CE QUE ladite séquence de test s'étend sur plus d'une trame d'image et présente de préférence une fréquence de répétition de f/n, où f est la fréquence de trames de l'affichage (6) et n est un nombre entier > 1.
  4. Procédé selon l'une quelconque des revendications précédentes, CARACTERISE EN CE QUE la représentation d'une image comprend une zone de couleur dont la couleur est déterminée par le processeur (4) en fonction desdites informations d'état, ladite zone de couleur symbolisant notamment un témoin lumineux de contrôle ou d'avertissement ou représentant l'arrière-plan d'un affichage (6) relatif à la sécurité qui change dynamiquement.
  5. Procédé selon l'une quelconque des revendications précédentes, en particulier selon la revendication 4, CARACTERISE EN CE QUE ladite séquence de test comprend l'augmentation ou la diminution incrémentale d'un compteur de pixels (26) et que ladite valeur seuil utilisée pour former le résultat du test de sécurité est déterminée en fonction du compteur de pixels.
  6. Procédé selon l'une quelconque des revendications précédentes, CARACTERISE PAR l'étape de fournir ladite information d'état (14) à ladite unité de test (10) et de déterminer ladite valeur de référence valable pour tous les pixels de ladite région de surveillance et/ou de ladite région de surveillance par l'unité de test (10) en fonction de l'information d'état.
  7. Procédé selon l'une quelconque des revendications précédentes, CARACTERISE EN CE QUE des valeurs de couleur sont utilisées comme valeurs de représentation pour les couleurs de base d'un espace colorimétrique, en particulier un espace colorimétrique RVB avec une longueur de mot de 8 bits par valeur de couleur respectivement, et en ce que dans ladite séquence de test au moins une valeur de couleur, de préférence toutes les valeurs de couleur, sont soumises à ladite opération de comparaison en tant que valeurs de représentation pour chaque pixel, en particulier à une opération de comparaison qui est exécutée comme une comparaison à tolérance.
  8. Procédé selon l'une quelconque des revendications précédentes, en particulier selon la revendication 3, CARACTERISE EN CE QUE ladite séquence de test s'étend sur des trames d'images régulièrement intermittentes, et de préférence en ce qu'une autre séquence de test s'étend sur des trames d'images alternativement intermittentes et effectue une opération de comparaison avec une autre valeur de référence stockée.
  9. Procédé selon l'une quelconque des revendications précédentes, CARACTERISE PAR l'étape de fournir une ou plusieurs informations d'état (14) provenant d'un processeur de commande (20), qui est sécurisé en termes de technologie de signalisation, audit processeur (4) qui génère le flux de données d'image et à ladite unité de test (10).
  10. Dispositif pour représenter un état relatif à la sécurité, comprenant:
    un écran (6), en particulier un écran TFT;
    un processeur (4) pour la création assistée par ordinateur d'un flux de données d'image prenant en compte une information d'état, le flux de données d'image contenant des valeurs de représentation, en particulier des valeurs de couleur, et pour transmettre le flux de données d'image (8) à l'affichage (6) pour afficher une image en commandant les pixels sur la base des valeurs de représentation; ainsi que une unité de test (10) à laquelle le flux de données d'image est fourni pour effectuer un test informatique de sécurité d'une région de surveillance (16), qui comprend un ensemble contigu comprenant une pluralité de pixels individuels dans l'image à représenter;
    CARACTÉRISÉ EN CE QUE
    une valeur de référence (24) valable pour tous les pixels de ladite région de surveillance est stockée dans ladite unité de test (10);
    ladite unité de test (10) est configurée pour déterminer par calcul, dans une séquence de test, à partir du flux de données d'image, une variable de résultat et, à cette fin,
    successivement et respectivement pour chaque pixel d'une sélection de pixels de la région de surveillance (16), ladite sélection comprenant au moins un pixel sur deux de la région de surveillance à tester,
    - pour effectuer une opération de comparaison entre au moins une valeur de représentation du pixel respectif et ladite valeur de référence stockée pour en former un résultat de comparaison; et
    - pour déterminer ladite variable de résultat, de prendre en compte ledit résultat de comparaison respectif pour chaque pixel de la sélection, notamment en augmentant ou diminuant de manière incrémentale ladite variable de résultat;
    et ladite unité de test (10) est configuré de manière, après que ladite séquence de test a été exécutée, soit à faire sortir ladite variable de résultat que l'unité de test (10) a déterminée par calcul en fonction des résultats de la comparaison, soit à comparer ladite variable de résultat avec une valeur seuil, de manière à former un résultat positif ou
    négatif du test de sécurité, dans lequel ladite valeur seuil pour ladite variable de résultat est déterminée de telle sorte qu'un résultat positif du test de sécurité est déterminé lorsqu'une proportion prédéterminée de ladite sélection de pixels satisfait au critère de comparaison et que cette proportion est inférieure à 100 %.
  11. Dispositif selon la revendication 10, CARACTERISE EN CE QUE ladite unité de test (10) est configurée comme module séparé qui est distinct dudit affichage (6) et distinct dudit processeur (4), et possède une entrée en lecture seule (18), qui peut être connectée en parallèle à une ligne de données d'image (8) qui relie ledit affichage audit processeur.
  12. Dispositif selon la revendication 10 ou 11, CARACTERISE EN CE QUE ladite unité de test comprend un FPGA (12) ou un ASIC configuré pour exécuter le procédé selon les caractéristiques de la partie caractérisante d'une des revendications 1 à 9.
  13. Dispositif selon l'une quelconque des revendications 10 à 12, CARACTERISE EN CE QUE ladite unité de test (10) possède une entrée (14) pour l'information d'état et une sortie pour la sortie du résultat du test de sécurité.
  14. Véhicule, en particulier véhicule ferroviaire, comprenant un dispositif selon l'une quelconque des revendications 10 à 13.
EP14178345.6A 2013-07-31 2014-07-24 Procédé et dispositif de représentation d'un état relevant de la sécurité Active EP2833349B1 (fr)

Priority Applications (1)

Application Number Priority Date Filing Date Title
PL14178345T PL2833349T4 (pl) 2013-07-31 2014-07-24 Sposób przedstawiania stanu istotnego z punktu widzenia bezpieczeństwa

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
DE102013012679.7A DE102013012679A1 (de) 2013-07-31 2013-07-31 Verfahren und Vorrichtung zur Darstellung eines sicherheitsrelevanten Zustands

Publications (2)

Publication Number Publication Date
EP2833349A1 EP2833349A1 (fr) 2015-02-04
EP2833349B1 true EP2833349B1 (fr) 2018-04-04

Family

ID=51229810

Family Applications (1)

Application Number Title Priority Date Filing Date
EP14178345.6A Active EP2833349B1 (fr) 2013-07-31 2014-07-24 Procédé et dispositif de représentation d'un état relevant de la sécurité

Country Status (3)

Country Link
EP (1) EP2833349B1 (fr)
DE (1) DE102013012679A1 (fr)
PL (1) PL2833349T4 (fr)

Families Citing this family (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE102016200826A1 (de) * 2016-01-21 2017-07-27 Robert Bosch Gmbh Vorrichtung und Verfahren zum Überprüfen einer Gültigkeit von Bilddaten in einer Anzeigeeinrichtung
WO2018041777A1 (fr) 2016-08-31 2018-03-08 Siemens Aktiengesellschaft Surveillance d'une indication dans une cabine de conduite d'un moyen de transport
DE102016217518A1 (de) * 2016-09-14 2018-03-15 Robert Bosch Gmbh Vorrichtung und Verfahren zur Überwachung einer Nichtanzeige eines vorgegebenen Bildes, insbesondere eines Warnsymbols, in einem Display einer Anzeigevorrichtung
DE102017200915A1 (de) 2017-01-20 2018-07-26 Bayerische Motoren Werke Aktiengesellschaft Verfahren und Vorrichtung zum Anzeigen eines Hinweises für einen Anwender und Arbeitsvorrichtung
DE102017205458A1 (de) * 2017-03-30 2018-10-04 Robert Bosch Gmbh System und ein Verfahren zur Erkennung von Augen und Händen, insbesondere für ein Kraftfahrzeug
EP3547180A1 (fr) * 2018-03-29 2019-10-02 Deuta-Werke GmbH Optimisation de contrôle de sécurité destinée à la présentation de données d'image relatives à la sécurité
EP4052990A1 (fr) * 2021-03-04 2022-09-07 Deuta-Werke GmbH Affichage tête haute fiable dans la cabine du conducteur d'un véhicule ferroviaire

Family Cites Families (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE3411015A1 (de) 1984-03-24 1985-09-26 Standard Elektrik Lorenz Ag, 7000 Stuttgart Verfahren und einrichtung zur signaltechnisch sicheren bildschirmdarstellung eines meldebildes
DE4228917A1 (de) * 1992-08-28 1994-03-03 Siemens Ag Verfahren zum signaltechnisch sicheren Anzeigen verkehrstechnischer Informationen eines Verkehrswegesystems
DE19703574A1 (de) 1997-01-31 1998-08-06 Alsthom Cge Alcatel Verfahren zur sicheren Darstellung eines Bildes auf einem Monitor
US7724259B2 (en) * 2005-08-24 2010-05-25 Innovative Solutions And Support, Inc. Aircraft flat panel display system with improved information availability
DE102007048608A1 (de) 2007-10-10 2009-04-16 Robert Bosch Gmbh Testeinrichtung, Anzeigevorrichtung und Verfahren zum Überprüfen einer Gültigkeit von Anzeigesignalen
ES2401407T3 (es) 2009-05-20 2013-04-19 Bombardier Transportation Gmbh Módulo de exhibidor visual con control de datos de exhibición por suma de control
EP2273369B2 (fr) * 2009-07-06 2016-09-07 Deuta-Werke GmbH Procédé de représentation d'une information relative à la sécurité sur un dispositif d'affichage et dispositif d'exécution du procédé
JP5588000B2 (ja) 2009-07-06 2014-09-10 ドイタ ヴェルケ ゲーエムベーハー ディスプレイ上にセーフティ関連情報の表示をする方法、及びその方法を適用する装置
JP5611460B2 (ja) 2010-07-08 2014-10-22 オスラム オプト セミコンダクターズ ゲゼルシャフト ミット ベシュレンクテル ハフツングＯｓｒａｍ Ｏｐｔｏ Ｓｅｍｉｃｏｎｄｕｃｔｏｒｓ ＧｍｂＨ 弾性電極を有するオプトエレクトロニクス装置およびその製造方法
EP2439722B1 (fr) * 2010-09-20 2013-06-19 Pixy AG Procédé de vérification de données d'affichage pixellisées pour la représentation sur un écran d'appareil d'affichage dans un véhicule

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
None *

Also Published As

Publication number Publication date
PL2833349T3 (pl) 2018-11-30
PL2833349T4 (pl) 2018-11-30
EP2833349A1 (fr) 2015-02-04
DE102013012679A1 (de) 2015-02-05

Similar Documents

Publication Publication Date Title
EP2833349B1 (fr) Procédé et dispositif de représentation d'un état relevant de la sécurité
EP2273369B1 (fr) Procédé de représentation d'une information relative à la sécurité sur un dispositif d'affichage et dispositif d'exécution du procédé
EP3953774B1 (fr) Dispositif pour la détection de causes d'alarmes
DE102007048608A1 (de) Testeinrichtung, Anzeigevorrichtung und Verfahren zum Überprüfen einer Gültigkeit von Anzeigesignalen
EP2367083A1 (fr) Dispositif de création d'un programme pour une commande programmable par mémoire, dispositif de programmation et procédé de programmation d'une commande programmable par mémoire
EP3269578A1 (fr) Procédé de fonctionnement d'un système d'informations de véhicule comprenant au moins une première et une seconde surface d'affichage et système d'informations de véhicule
DE102012207439A1 (de) Verfahren zur Darstellung sicherheitskritischer Daten durch eine Anzeigeneinheit; Anzeigeneinheit
EP2439722B1 (fr) Procédé de vérification de données d'affichage pixellisées pour la représentation sur un écran d'appareil d'affichage dans un véhicule
WO2018133970A1 (fr) Procédé et dispositif permettant d'afficher une indication pour un utilisateur et dispositif de travail
DE112020002402T5 (de) Lenksteuervorrichtung und -verfahren sowie lenksteuersystem
WO2014048641A1 (fr) Interface utilisateur et procédé de diagnostic d'erreur d'une installation industrielle
EP1901148B1 (fr) Système d'affichage destiné à la représentation graphique de signaux d'alarmes d'une installation technique ou d'un processus technique
DE102015012889B4 (de) Anzeigevorrichtung und Verfahren zur Überprüfung von Anzeigeinhalten
DE102008021241B4 (de) Messwert-Anzeige, insbesondere im Führerstand eines Schienenfahrzeugs
DE102022114705A1 (de) Vorrichtung und Verfahren zur Erkennung eines Bildschirmeinfrierfehlers einer Fahrzeuganzeige
DE102010026392B4 (de) Verfahren zur sicheren Parametrierung eines Sicherheitsgeräts
DE102018222493A1 (de) Verfahren zur Validierung von Umfeldbilddaten, Vorrichtung, Computerprogramm und computerlesbares Speichermedium
EP3488303B1 (fr) Surveillance d'une indication dans une cabine de conduite d'un moyen de transport
WO2019179712A1 (fr) Procédé et dispositif d'affichage sécurisé d'un contenu d'image utile pour la présentation sur une unité d'affichage dans un véhicule automobile
WO2019238155A1 (fr) Moyen de locomotion et dispositif pour générer une requête de prise en charge de la conduite d'un véhicule
EP3646313B1 (fr) Appareil et méthode pour la représentation des données d'image dans un dispositif d'affichage sécurisé
DE102016003013A1 (de) Überwachungsvorrichtung und Verfahren zum Überwachen eines Betriebs eines Steuergeräts eines Kraftfahrzeugs
DE102019133209A1 (de) Verfahren und Überwachungsvorrichtung zur automatischen Überwachung eines Head-Up-Displays
DE102021207515A1 (de) Verfahren zum Bereitstellen eines elektronischen Horizonts für ein autonomes Kraftfahrzeug
DE112021005730T5 (de) Verfahren zur erzeugung eines anomalieerkennungsmodells

Legal Events

Date Code Title Description
17P Request for examination filed

Effective date: 20140724

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

AX Request for extension of the european patent

Extension state: BA ME

PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

R17P Request for examination filed (corrected)

Effective date: 20150804

RBV Designated contracting states (corrected)

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

17Q First examination report despatched

Effective date: 20151202

GRAP Despatch of communication of intention to grant a patent

Free format text: ORIGINAL CODE: EPIDOSNIGR1

INTG Intention to grant announced

Effective date: 20171011

GRAS Grant fee paid

Free format text: ORIGINAL CODE: EPIDOSNIGR3

GRAA (expected) grant

Free format text: ORIGINAL CODE: 0009210

AK Designated contracting states

Kind code of ref document: B1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

REG Reference to a national code

Ref country code: GB

Ref legal event code: FG4D

Free format text: NOT ENGLISH

REG Reference to a national code

Ref country code: CH

Ref legal event code: EP

REG Reference to a national code

Ref country code: AT

Ref legal event code: REF

Ref document number: 986392

Country of ref document: AT

Kind code of ref document: T

Effective date: 20180415

REG Reference to a national code

Ref country code: DE

Ref legal event code: R096

Ref document number: 502014007819

Country of ref document: DE

REG Reference to a national code

Ref country code: CH

Ref legal event code: NV

Representative=s name: ISLER AND PEDRAZZINI AG, CH

REG Reference to a national code

Ref country code: IE

Ref legal event code: FG4D

Free format text: LANGUAGE OF EP DOCUMENT: GERMAN

REG Reference to a national code

Ref country code: FR

Ref legal event code: PLFP

Year of fee payment: 5

REG Reference to a national code

Ref country code: NL

Ref legal event code: MP

Effective date: 20180404

REG Reference to a national code

Ref country code: LT

Ref legal event code: MG4D

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: NL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180404

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: NO

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180704

Ref country code: AL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180404

Ref country code: BG

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180704

Ref country code: FI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180404

Ref country code: SE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180404

Ref country code: LT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180404

Ref country code: ES

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180404

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: RS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180404

Ref country code: HR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180404

Ref country code: LV

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180404

Ref country code: GR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180705

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: AT

Payment date: 20181019

Year of fee payment: 15

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: PT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180806

REG Reference to a national code

Ref country code: DE

Ref legal event code: R097

Ref document number: 502014007819

Country of ref document: DE

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: EE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180404

Ref country code: RO

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180404

Ref country code: DK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180404

Ref country code: SK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180404

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: PL

Payment date: 20180716

Year of fee payment: 5

PLBE No opposition filed within time limit

Free format text: ORIGINAL CODE: 0009261

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: NO OPPOSITION FILED WITHIN TIME LIMIT

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SM

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180404

26N No opposition filed

Effective date: 20190107

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: LU

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20180724

Ref country code: MC

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180404

REG Reference to a national code

Ref country code: BE

Ref legal event code: MM

Effective date: 20180731

REG Reference to a national code

Ref country code: IE

Ref legal event code: MM4A

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20180724

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180404

Ref country code: BE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20180731

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180404

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: CH

Payment date: 20190725

Year of fee payment: 6

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: TR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180404

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: CZ

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20190724

Ref country code: HU

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT; INVALID AB INITIO

Effective date: 20140724

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: CY

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180404

Ref country code: MK

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20180404

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180804

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: PL

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20190724

REG Reference to a national code

Ref country code: CH

Ref legal event code: PL

REG Reference to a national code

Ref country code: AT

Ref legal event code: MM01

Ref document number: 986392

Country of ref document: AT

Kind code of ref document: T

Effective date: 20200724

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: CH

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20200731

Ref country code: LI

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20200731

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: AT

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20200724

P01 Opt-out of the competence of the unified patent court (upc) registered

Effective date: 20230518

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: IT

Payment date: 20230731

Year of fee payment: 10

Ref country code: GB

Payment date: 20230724

Year of fee payment: 10

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: FR

Payment date: 20230724

Year of fee payment: 10

Ref country code: DE

Payment date: 20230927

Year of fee payment: 10