WO2019179712A1 - Procédé et dispositif d'affichage sécurisé d'un contenu d'image utile pour la présentation sur une unité d'affichage dans un véhicule automobile - Google Patents

Procédé et dispositif d'affichage sécurisé d'un contenu d'image utile pour la présentation sur une unité d'affichage dans un véhicule automobile Download PDF

Info

Publication number
WO2019179712A1
WO2019179712A1 PCT/EP2019/054183 EP2019054183W WO2019179712A1 WO 2019179712 A1 WO2019179712 A1 WO 2019179712A1 EP 2019054183 W EP2019054183 W EP 2019054183W WO 2019179712 A1 WO2019179712 A1 WO 2019179712A1
Authority
WO
WIPO (PCT)
Prior art keywords
display
memory
processor
display unit
image content
Prior art date
Application number
PCT/EP2019/054183
Other languages
German (de)
English (en)
Inventor
Johannes Kirchhoff
Andreas Peukert
Wolfgang Kliemannel
Original Assignee
Zf Friedrichshafen Ag
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Zf Friedrichshafen Ag filed Critical Zf Friedrichshafen Ag
Publication of WO2019179712A1 publication Critical patent/WO2019179712A1/fr

Links

Classifications

    • G—PHYSICS
    • G09—EDUCATION; CRYPTOGRAPHY; DISPLAY; ADVERTISING; SEALS
    • G09G—ARRANGEMENTS OR CIRCUITS FOR CONTROL OF INDICATING DEVICES USING STATIC MEANS TO PRESENT VARIABLE INFORMATION
    • G09G5/00—Control arrangements or circuits for visual indicators common to cathode-ray tube indicators and other visual indicators
    • G09G5/003—Details of a display terminal, the details relating to the control arrangement of the display terminal and to the interfaces thereto
    • G09G5/006—Details of the interface to the display terminal
    • G—PHYSICS
    • G09—EDUCATION; CRYPTOGRAPHY; DISPLAY; ADVERTISING; SEALS
    • G09G—ARRANGEMENTS OR CIRCUITS FOR CONTROL OF INDICATING DEVICES USING STATIC MEANS TO PRESENT VARIABLE INFORMATION
    • G09G2330/00—Aspects of power supply; Aspects of display protection and defect management
    • G09G2330/12—Test circuits or failure detection circuits included in a display system, as permanent part thereof
    • G—PHYSICS
    • G09—EDUCATION; CRYPTOGRAPHY; DISPLAY; ADVERTISING; SEALS
    • G09G—ARRANGEMENTS OR CIRCUITS FOR CONTROL OF INDICATING DEVICES USING STATIC MEANS TO PRESENT VARIABLE INFORMATION
    • G09G2380/00—Specific applications
    • G09G2380/10—Automotive applications

Definitions

  • the present invention relates to a method and a device for secure display of user-relevant image content for display on a display unit in a motor vehicle, wherein the user-relevant image content in the form of an image file B is determined by a processor connected to or including a memory, according to which at least this Image file B is sent to the display unit for graphing the image file in the form of the image content, wherein the displayed image content is checked for false indication by the compressor based on predefined inspection characteristics.
  • the invention also relates to a gear selector lever of a motor vehicle, which is equipped with an integrated display unit of such a device, as well as a computer program product for carrying out the method according to the invention.
  • the field of application of the invention extends primarily to automotive engineering.
  • Corresponding safety standards require that certain warning lights and graphic displays in a motor vehicle comply with a required safety level. Accordingly, such warning lights and displays must be visible after a guaranteed time for the operator of the motor vehicle so that it can respond appropriately.
  • gear selector switches for automatic transmissions increasingly use display units in order to then display the selected drive position as picture content. In this case, for example, the common symbols for the driving position positions P, N, R and D are displayed as changing image content on the display unit.
  • LEDs light emitting diodes
  • the individual illumination of the speed step position of the gear selector lever is realized by separate LEDs, which by means of corresponding light guide and a light shaft as symbols on the masked cover of the knob of the gear selector lever or in the area of the center console of the vehicle interior. space appear.
  • This graphical representation of the driving position is in the aforementioned context a safety-critical function, since the operator of the motor vehicle can be deceived by a false display of the driving position, so that a dangerous driving situation could result.
  • the LEDs can be monitored by checking the current intensity at each LED. If an LED has failed, no current flow is detected. Thus, the presence of current flow with respect to the LEDs in this generally known prior art forms the test feature for detecting a false indication.
  • WO 2016/165803 A1 discloses another technical solution for the secure display of user-relevant image content for display on a display unit in a motor vehicle. It is provided that the image content has at least one image symbol and a background. Within the image content, a few pixels surveillance area is defined. The surveillance area characterizes the image content. About the pixels within the surveillance area a checksum is formed, which here represents the test feature for false display of the displayed image content. It is proposed that this monitoring area preferably has a size of 4 ⁇ 4 pixels. By comparing the checksum characteristic of the image content before transmission to the display unit with the checksum after transmission to the display unit, it is determined whether or not there is a mis-display of the desired image content.
  • the displayed image content is thus monitored by evaluating certain subregions of this image content.
  • this method of checking a displayed image content for false display functions only with static image contents, that is, still symbols or images.
  • the object is achieved on the basis of a method according to the preamble of claim 1 in conjunction with its characterizing features.
  • the object is achieved by claim 8.
  • the independent claim 1 1 relates to a preferred application of the solution according to the invention in a gear selector lever of a motor vehicle and the claim 12 refers to a computer program product for performing the method.
  • the back-related dependent claims give advantageous developments of the method and the device according to the invention again.
  • the invention includes the procedural teaching that, after the definition of the image content, a checksum S from the image file B as well as an assignment of an alive counter C as test characteristics of the image file B are additionally formed. Subsequently, the image file B to be displayed is sent as part of a generated data packet GD together with the checksum S and the Alive-Counter C to a display memory of the display unit. The checking of the displayed image content is now carried out by reading back the data content from the display memory by the processor, which checks this data content for false display.
  • the checksum is not based on the graphical content of the display, but the image file B is added to the checksum S and the Alive Counter C as attached data, hereby also dynamic image content can be secured Bring the ad.
  • the memory space in the processor of the display unit-which is preferably designed as a so-called chip-on-glass (COG) - is insufficient, then beaten to provide an external display memory on the part of the display unit.
  • COG chip-on-glass
  • the check for false indication is performed by comparing the data packet RD read back from the display memory with the generated data packet GD. If both data packets are the same, on the one hand, it was checked that the correct and desired is displayed and, on the other hand, it was also verified that, in the case of dynamic image content, there is no so-called frozen image.
  • a frozen image represents a pause of the image sequence to be played.
  • a mode of operation detecting the latter error condition assumes a loop for repeatedly checking the displayed image content, which is repeated at predefined time intervals and indexed by the Alive Counter C.
  • the standard-compliant fault tolerance time must be ensured. This can be easily set by variable waiting times for defining the time intervals.
  • the generated data packet GD which includes the image file B, the checksum S and the alive-counter C, is present in the form of a data record.
  • the said data contents are stored separately in the display memory.
  • This provides the prerequisite for the read-back data packet RD only to contain the checksum S and the alive counter C of the data set in the checking step, which are compared with the checksum S and the alive counter C of the generated data packet GD.
  • Such a data-reduced read-back data packet RD forms the prerequisite for shortening the read cycle, so that, for example, flowing dynamic image contents can be realized in an optically appealing manner.
  • a sliding image path between a displayed symbol for the position P to the position R in a display unit of a gear selector lever can be implemented.
  • the security requirements are met by such a data-reduced read-back data packet RD therefore because the checksum S represents the index for the user-relevant image content and the Alive- Counter C ensures that the display unit is still working - so the transferred image files each always re-processed - even if the Image content remains the same on the display.
  • Bidirectional communication is required for communication between the display unit and a control unit which controls it and which includes the processor connected to a memory since the generated data packet GD is to be transmitted in the direction of the display unit and the read-back data packet RD is directed in the direction of the control unit Checking the displayed image content is returned.
  • a serial bidirectional interface for example, a Serial Peripheral Interface (SPI) or a Display Serial Interface (DSI) can be used.
  • SPI Serial Peripheral Interface
  • DSI Display Serial Interface
  • a parallel interface for example, a likewise known per se RGB interface with lines for red, green and blue, a low voltage differential signaling (LVDS) interface or an OpenLDI interface are used, which is a digital video interface with broadband Represents data transmission and is standardized in particular for dynamic image content.
  • LVDS low voltage differential signaling
  • OpenLDI OpenLDI interface
  • a shutdown of the display unit is performed to end the false display.
  • This can be carried out, for example, by directly switching off the power supply of the entire display unit or by switching off components thereof.
  • the active display surface of the display unit is designed according to LCD technology, the safe state can alternatively be achieved by merely switching off the background lighting, which is not possible with emissive technologies, such as OLED technology.
  • FIGS. shows: 1 shows a schematic block diagram representation of a device essentially consisting of display unit and control unit for the secure display of a user-relevant image content, and
  • FIG. 2 shows a basic flowchart of an exemplary sequence of steps for the secure display of a different drive stage positions of a motor vehicle transmission comprehensive image content.
  • an electronic device for the secure display of a user-relevant image content for display in the interior of a motor vehicle essentially comprises a display unit 1, which is connected to a control unit 2 that activates it via an interface 3 for bidirectional data exchange.
  • the control unit 2 may be embodied in the form of electronic components arranged on a flexible, semi-rigid or rigid printed circuit board, which comprise at least one processor 4 serving as a CPU and a memory 5 associated therewith.
  • the memory 5 is in this embodiment, an internal ROM memory of the processor 4, which is shown here only in a purely schematized drawing next to the processor 4.
  • the display unit 1 includes for controlling an active display area 6, which is designed here as a pixel matrix in LED technology, one of these associated graphics processor 7, which is here as a so-called chip-on-glass (COG) 7 on the display unit 1 is arranged.
  • the COG 7 comprises a graphics processor 8 and a display memory 9 associated therewith.
  • the local graphics processor 8 controls the active display surface 6 in access to the display memory 9, on which the data packet GD containing the image content is transmitted via the bidirectional interface 3 from the display Control unit 2 has been transmitted from.
  • the data content of the display memory 9 can be read back via the bidirectional interface 3 as a read-back data packet RD to the processor 4 for evaluation by comparison with the generated data packet GD in order to carry out a check for false display of the display unit 1.
  • an image file B corresponding to the respective drive position P, N, R or D is first to be loaded from the memory 5 into the processor 4 and stored in an internal RAM. Based on the image file B, the processor 4 then calculates a checksum S and also assigns the image file B to be displayed to an alive counter C.
  • a data packet GD is formed from the image file B, the checksum S and the alive counter C in the form of a data record composed therefrom.
  • This generated data packet GD is then sent to the display unit 1.
  • the image content of the image file B is displayed on the active display surface 6 for display, while the remaining components of the data set, namely the checksum S and the Alive Counter C are stored in the display memory 9 non-visible.
  • the check sum S and the active counter C assigned to this index are read back to the processor 4 and stored in its memory 5 in this exemplary embodiment only in the context of a retrieved data packet RD. Subsequently, an evaluation takes place in accordance with a sampling rate taking into account the display delay.
  • This evaluation of the operator-relevant image content displayed on the display unit 1 in the form of one of the drive stage positions P, N, R o- the D is performed by a comparison V of the data read back from the display memory 9 data packet RD with the generated data packet GD.
  • the processor-internal RAM also stores volatile overwritable computational intermediate steps, which are used in the context of a well-known counter functionality or the replacement of a variable, such as the checksum S, with a new value.
  • the method according to the invention which can be implemented in particular as a computer program product with suitable program code means, can not be used alone in conjunction with a display unit of a selector lever of a motor vehicle but, for example, also in conjunction with other static ones or dynamic image content that must be displayed in a secure manner, such as current speed instrument displays, a coolant temperature warning, or the like.

Landscapes

  • Engineering & Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • Computer Hardware Design (AREA)
  • General Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • Control Of Indicators Other Than Cathode Ray Tubes (AREA)
  • Instrument Panels (AREA)
  • Fittings On The Vehicle Exterior For Carrying Loads, And Devices For Holding Or Mounting Articles (AREA)

Abstract

L'invention concerne un procédé et un dispositif d'affichage sécurisé d'un contenu d'image utile destiné à être affiché sur une unité d'affichage (1) d'un véhicule automobile, laquelle comprend une mémoire (5) dans laquelle sont mémorisées différents fichiers d'image (B) ou fichiers de séquence d'images auxquels accède un processeur (4) relié à cette mémoire (4) ou contenant celle-ci pour calculer une somme de contrôle (S) relativement au fichier d'image (B) ou au fichier de séquence d'images et pour ajouter un compteur actif (C), somme de contrôle que le processeur (4) place en tant que paquet de données généré (GD), se présentant sous la forme d'un ensemble de données, par le biais d'une interface bidirectionnelle (3), dans une mémoire d'affichage (9) de l'unité d'affichage (1) pour l'affichage sur une surface d'affichage active (6) qui commande un processeur graphique local (8) lors de l'accès à la mémoire d'affichage (9). Le processeur (4) récupère le contenu de données de la mémoire d'affichage (9) par le biais de l'interface bidirectionnelle (3) pour effectuer un contrôle d'un éventuel affichage erroné.
PCT/EP2019/054183 2018-03-20 2019-02-20 Procédé et dispositif d'affichage sécurisé d'un contenu d'image utile pour la présentation sur une unité d'affichage dans un véhicule automobile WO2019179712A1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
DE102018204232.2A DE102018204232A1 (de) 2018-03-20 2018-03-20 Verfahren und Einrichtung zur abgesicherten Anzeige eines bedienungsrelevanten Bildinhalts für die Darstellung auf einem Display in einem Kraftfahrzeug
DE102018204232.2 2018-03-20

Publications (1)

Publication Number Publication Date
WO2019179712A1 true WO2019179712A1 (fr) 2019-09-26

Family

ID=65520272

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/EP2019/054183 WO2019179712A1 (fr) 2018-03-20 2019-02-20 Procédé et dispositif d'affichage sécurisé d'un contenu d'image utile pour la présentation sur une unité d'affichage dans un véhicule automobile

Country Status (2)

Country Link
DE (1) DE102018204232A1 (fr)
WO (1) WO2019179712A1 (fr)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE102021112394A1 (de) 2021-05-12 2022-11-17 Bayerische Motoren Werke Aktiengesellschaft Verfahren, Vorrichtung, Fahrzeug, Computerprogramm, computerlesbares Speichermedium zur Validierung eines anzuzeigenden Bildes

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE102008059982A1 (de) * 2007-12-05 2009-06-25 GM Global Technology Operations, Inc., Detroit Kraftfahrzeug-Gangwählhebel mit integriertem Display
DE102012218320A1 (de) * 2012-10-08 2014-04-10 Continental Automotive Gmbh Digitales Rückspiegelsystem
WO2016165803A1 (fr) 2015-04-17 2016-10-20 Daimler Ag Procédé et dispositif pour surveiller un contenu d'affichage

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE102008059982A1 (de) * 2007-12-05 2009-06-25 GM Global Technology Operations, Inc., Detroit Kraftfahrzeug-Gangwählhebel mit integriertem Display
DE102012218320A1 (de) * 2012-10-08 2014-04-10 Continental Automotive Gmbh Digitales Rückspiegelsystem
WO2016165803A1 (fr) 2015-04-17 2016-10-20 Daimler Ag Procédé et dispositif pour surveiller un contenu d'affichage

Also Published As

Publication number Publication date
DE102018204232A1 (de) 2019-09-26

Similar Documents

Publication Publication Date Title
EP2220640B1 (fr) Procédé de diagnostic d'un dispositif d'affichage électronique
DE102008019461A1 (de) Vorrichtung und Verfahren zur Anzeige von Informationen in einem Fahrzeug
DE4140864A1 (de) Vorrichtung zur multifunktionellen diagnoseanzeige fuer das armaturenbrett von kraftfahrzeugen
EP2833349A1 (fr) Procédé et dispositif de représentation d'un état relevant de la sécurité
WO2019179712A1 (fr) Procédé et dispositif d'affichage sécurisé d'un contenu d'image utile pour la présentation sur une unité d'affichage dans un véhicule automobile
EP3571085A1 (fr) Procédé et dispositif permettant d'afficher une indication pour un utilisateur et dispositif de travail
EP2439722B1 (fr) Procédé de vérification de données d'affichage pixellisées pour la représentation sur un écran d'appareil d'affichage dans un véhicule
DE102005045601A1 (de) Verfahren und Einrichtung zur Überprüfung der Bildausgabe eines Anzeigegerätes
EP3405944B1 (fr) Dispositif et procédé de contrôle d'une validité de données d'image dans un dispositif d'affichage en tenant compte de données de contrôle
DE102015012889B4 (de) Anzeigevorrichtung und Verfahren zur Überprüfung von Anzeigeinhalten
EP3555738B1 (fr) Procédé de contrôle d'une validité de données d'image
WO2014048641A1 (fr) Interface utilisateur et procédé de diagnostic d'erreur d'une installation industrielle
WO2017125323A1 (fr) Dispositif et procédé pour contrôler la validité de données d'image dans un système d'affichage
DE102010026908A1 (de) Anzeigevorrichtung mit unterschiedlich beleuchteten Segmenten und Verfahren
EP3899915A1 (fr) Procédé de validation de données d'image d'environnement, dispositif, programme d'ordinateur et support d'enregistrement lisible par ordinateur
EP2439644B1 (fr) Procédé de marquage de pages d'écran relatives et non relatives à la sécurité sur un appareil d'affichage à l'aide d'un marqueur optique
WO2022058196A1 (fr) Affichage d'une représentation graphique d'une information
EP3574492A1 (fr) Procédé et dispositif pour faire fonctionner un dispositif d'affichage
DE102016211177A1 (de) Verfahren zur Überprüfung einer Gültigkeit von Bilddaten
WO2018041482A1 (fr) Dispositif et procédé d'affichage vérifiable d'images au moyen d'un écran
WO2018036729A1 (fr) Surveillance d'une indication dans une cabine de conduite d'un moyen de transport
DE112020001685T5 (de) Halbleiterbauelement, fahrzeug-anzeigesystem mit halbleiterbauelement und elektronisches gerät
DE102022129960A1 (de) Fahrzeug mit einem Bildschirm zur Wiedergabe von geschütztem Inhalt
DE112020001041T5 (de) Halbleiterbauelement, fahrzeug-anzeigesystem mit halbleiterbauelement und elektronisches gerät
DE102021005926A1 (de) Verfahren zur kamerabasierten Erkennung von Verkehrszeichen digitaler Signalanlagen und Fahrzeug

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 19706959

Country of ref document: EP

Kind code of ref document: A1

122 Ep: pct application non-entry in european phase

Ref document number: 19706959

Country of ref document: EP

Kind code of ref document: A1