WO2023246265A1

WO2023246265A1 - Vehicle fault alarm method and system for liquid crystal instrument system

Info

Publication number: WO2023246265A1
Application number: PCT/CN2023/089463
Authority: WO
Inventors: 黄嘉桐; 回姝; 丁冠源; 郭富琦; 郑彤; 张文娟; 王兆麟
Original assignee: 中国第一汽车股份有限公司
Priority date: 2022-06-24
Filing date: 2023-04-20
Publication date: 2023-12-28
Also published as: CN114802059B; CN114802059A

Abstract

A vehicle fault alarm method and system for a liquid crystal instrument system. The vehicle fault alarm method for a liquid crystal instrument system comprises: an in-vehicle entertainment host SOC acquiring an instrument function security signal and transmitting the instrument function security signal to an in-vehicle entertainment host MCU; the MCU acquiring first alarm display data and first verification information; the MCU sending the first alarm display data to the SOC; the SOC acquiring second alarm display data and second verification information; the SOC sending the second verification information to the MCU; the MCU performing verification according to the first verification information and the second verification information, and if verification is successful, sending a success signal to the SOC; and the SOC sending the second alarm display data to a liquid crystal instrument system. According to the present application, during an alarm data transmission process, data, which had been processed by an SOC, is verified, thereby avoiding a risk that data from the SOC is sent to an instrument system for display even after being tampered with.

Description

A vehicle fault alarm method and system for liquid crystal instrument system

Technical field

The present disclosure relates to the technical field of vehicle instrument systems. Specifically, it relates to a vehicle fault alarm method for a liquid crystal instrument system, a vehicle fault alarm system for an LCD instrument system, a vehicle entertainment host, a vehicle entertainment host SOC, and a vehicle entertainment host MCU.

Background technique

In previous automobile architectures, the connection between the in-vehicle entertainment host and other parts of the vehicle usually uses a CAN line. Through the CAN line connection, other controllers of the vehicle can be directly connected to the MCU of the in-vehicle entertainment host. At this time, the instrument can be directly connected The functional safety signal is passed to the MCU, and the MCU complies with the ASIL B safety level. Therefore, the instrument functional safety signal passed to the MCU can be directly passed to the MCU of the instrument system, and then passed to the instrument display device for display through the MCU of the instrument system.

However, with the development of technology, in the current motorcycle architecture, more and more in-vehicle entertainment hosts are connected to other parts of the vehicle through Ethernet. However, if the connection is made through Ethernet, it cannot be directly connected to the on-board entertainment host. The MCU is directly connected, but needs to be connected to the SOC of the in-vehicle entertainment host. However, the SOC of the in-vehicle entertainment host cannot meet the ASIL B safety level so far. At this time, it is easy to cause the processing in the SOC of the in-vehicle entertainment host to fail. There is a possibility of data tampering.

The alarm information that needs to be displayed by the instrument system, such as braking system failure, power battery thermal runaway and other information, usually needs to be first transmitted to the SOC of the in-vehicle entertainment host, and then undergoes some processing, and then is transmitted to the instrument system. However, if During the processing of the SOC of the in-vehicle entertainment host, the alarm information is tampered with, and a very dangerous situation may occur. Directly affects the life safety of drivers.

It should be noted that the information disclosed in the above background section is only used to enhance understanding of the background of the present disclosure, and therefore may include information that does not constitute prior art known to those of ordinary skill in the art.

Contents of the invention

The purpose of the present disclosure is to provide a vehicle fault alarm method for a liquid crystal instrument system, thereby overcoming one or more problems caused by limitations and defects of related technologies, at least to a certain extent.

Explanation of terms: MCU: micro control unit, car entertainment host MCU is one of the car entertainment host chips;

SOC: system-level chip, vehicle entertainment host SOC is the main chip of the infotainment controller;

IIC: inter integrated circuit bus (inter integrated circuit bus, IIC);

spi:SPI (Serial Peripheral Interface, serial peripheral interface);

ASIL: Automotive Safety Integrity Level;

Pipe: The abbreviation of pipeline refers to the infotainment system display layer.

According to one aspect of the present disclosure, a vehicle fault alarm method for a liquid crystal instrument system is provided. The vehicle fault alarm method for a liquid crystal instrument system includes:

The vehicle entertainment host SOC acquires the instrument functional safety signal and transmits the instrument functional safety signal to the vehicle entertainment host MCU;

The in-vehicle entertainment host MCU processes the instrument functional safety signal to obtain the first alarm display data and the first verification information;

The vehicle entertainment host MCU sends the first alarm display data to the vehicle entertainment host SOC;

The in-vehicle entertainment host SOC processes the first alarm display data to obtain the second alarm display data and the second verification information;

The vehicle entertainment host SOC sends the second verification information to the vehicle entertainment host MCU;

The vehicle entertainment host MCU performs verification based on the first verification information and the second verification information. If the verification is successful, then sends a verification success signal to the vehicle entertainment host SOC;

The vehicle entertainment host SOC sends the second alarm display data to the liquid crystal instrument system according to the verification success signal, so that the liquid crystal instrument system displays an alarm on the screen according to the second alarm display data.

Optionally, the vehicle fault alarm method for the liquid crystal instrument system further includes:

The MCU of the LCD instrument system obtains the second alarm display data sent by the vehicle entertainment host SOC;

The MCU of the liquid crystal instrument system obtains the third verification information according to the second alarm display data and sends the second alarm display data to the rendering module of the liquid crystal instrument system;

The rendering module of the liquid crystal instrument system obtains fourth verification information according to the second alarm display data and sends the fourth verification information to the MCU of the liquid crystal instrument system;

The MCU of the liquid crystal instrument system performs verification based on the third verification information and the fourth verification information. If the verification is successful, then sends an LCD instrument system verification success signal to the rendering module;

The rendering module obtains display information according to the second alarm display data, and transmits the display information to the liquid crystal instrument device for display.

The vehicle entertainment host MCU performs verification based on the first verification information and the second verification information. If the verification fails, the instrument functional safety signal is sent to the MCU of the liquid crystal instrument system;

The MCU of the liquid crystal instrument system sends a backup display signal to the rendering module according to the instrument functional safety signal;

The rendering module retrieves the alarm display information in the FLASH module according to the backup display signal, and transmits the alarm display information in the FLASH module to the liquid crystal instrument device for display.

The MCU of the liquid crystal instrument system performs verification based on the third verification information and the fourth verification information. If the verification fails, then

The MCU of the liquid crystal instrument system transmits an instrument verification failure signal to the vehicle entertainment host MCU;

After the in-vehicle entertainment host MCU obtains the instrument verification failure signal, it sends the instrument functional safety signal to the MCU of the liquid crystal instrument system;

Optionally, when the first verification information and the second verification information fail to verify or the third verification information and the fourth verification information fail to verify, the secure link-based liquid crystal Instrument system fault alarm methods further include:

The MCU of the liquid crystal instrument system obtains the functional risk level based on the instrument functional safety signal, and the functional risk level includes high-level functional risk;

When the functional danger level is high-level functional danger, the in-vehicle entertainment host parses the instrument functional safety signal to obtain the location information where the functional danger occurs;

The in-vehicle entertainment host sends an image capture signal to the camera device that can capture the location information of functional danger;

The vehicle-mounted entertainment host obtains the image captured by the camera device according to the image capture signal;

The in-vehicle entertainment host generates advanced danger alarm information based on the captured images;

The vehicle entertainment host sends the advanced danger alarm information to a display screen and/or a voice broadcast system.

Optionally, the functional risk level includes intermediate functional risk;

When the verification of the first verification information and the second verification information fails or the verification of the third verification information and the fourth verification information fails, the secure link-based LCD instrument system fault alarm Methods further include:

If the functional risk level is a medium functional risk, the MCU of the liquid crystal instrument system sends a backup display signal to the rendering module according to the instrument functional safety signal, including:

The MCU of the liquid crystal instrument system obtains the function identification according to the instrument functional safety signal;

The liquid crystal instrument system sends the backup display signal to the rendering module, where the backup display signal includes a function identifier;

The rendering module retrieves the alarm display information in the FLASH module according to the backup display signal, and transfers the alarm display information in the FLASH module to the liquid crystal instrument device for display, including:

The rendering module retrieves the alarm display information in the FLASH module according to the backup display signal, where the alarm display information in the FLASH module includes multiple alarm display information, and each alarm display information includes a preset function identifier and a preset function identifier. Display information corresponding to the function identifier;

The FLASH module sends the display information corresponding to the preset function identifier that is the same as the function identifier to the rendering module;

The rendering module transmits the obtained display information as alarm display information to the liquid crystal instrument device for display.

Optionally, the vehicle entertainment host SOC obtains the instrument functional safety signal through Ethernet.

Optionally, the in-vehicle entertainment host MCU complies with the ASIL B safety level, and the SOC complies with the QM safety level.

This application also provides a vehicle fault alarm system for a liquid crystal instrument system. The vehicle fault alarm system for the liquid crystal instrument system includes a vehicle entertainment host and a liquid crystal instrument system. The vehicle entertainment host includes a vehicle entertainment host SOC and a vehicle entertainment host MCU. ;in,

The in-vehicle entertainment host and the liquid crystal instrument system cooperate to realize the vehicle fault alarm method for the liquid crystal instrument system as mentioned above.

This application also provides a vehicle-mounted entertainment host. The vehicle-mounted entertainment host includes a vehicle-mounted entertainment host SOC and a vehicle-mounted entertainment host MCU. The vehicle-mounted entertainment host SOC and the vehicle-mounted entertainment host MCU cooperate to implement the following method:

The vehicle entertainment host MCU performs verification according to the first verification information and the second verification information. If the verification is successful, then sends a verification success signal to the vehicle entertainment host SOC;

This application also provides a vehicle-mounted entertainment host SOC, which is used to implement the following methods:

The vehicle entertainment host SOC obtains the vehicle entertainment host MCU and generates the first alarm display data and the first verification information according to the instrument functional safety signal;

The vehicle entertainment host SOC obtains the vehicle entertainment host MCU according to the first verification information to and a verification success signal sent after the second verification information is successfully verified;

This application also provides a vehicle-mounted entertainment host MCU, which is used to implement the following methods:

The in-vehicle entertainment host MCU obtains the instrument functional safety signal transmitted by the in-vehicle entertainment host SOC;

The vehicle entertainment host MCU obtains the second verification information obtained by the vehicle entertainment host SOC according to the first alarm display data;

The vehicle entertainment host MCU performs verification based on the first verification information and the second verification information. If the verification is successful, a verification success signal is sent to the vehicle entertainment host SOC, so that the vehicle entertainment host SOC The verification success signal sends the second alarm display data to the liquid crystal instrument system, so that the liquid crystal instrument system displays an alarm on the screen according to the second alarm display data.

Using the vehicle fault alarm method for the liquid crystal instrument system of the present application, during the process of transmitting the alarm display data, the data processed by the vehicle entertainment host SOC is verified, thereby preventing the occurrence of the vehicle entertainment host SOC data being processed. The risk of still being sent to the instrument system for display after tampering solves the problem in the existing technology that may cause the vehicle to be dangerous by displaying tampered data.

It should be understood that the foregoing general description and the following detailed description are exemplary and explanatory only, and do not limit the present disclosure.

Description of the drawings

The above and other features and advantages of the present disclosure will become more apparent by describing in detail example embodiments thereof with reference to the accompanying drawings.

FIG. 1 shows a flow chart of a vehicle fault alarm method for a liquid crystal instrument system according to an exemplary embodiment of the present disclosure.

Detailed ways

Example embodiments will now be described more fully with reference to the accompanying drawings. Example embodiments may, however, be embodied in various forms and should not be construed as limited to the embodiments set forth herein; rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the concepts of the example embodiments. To those skilled in the art. The same reference numerals in the drawings represent the same or similar parts, and thus their repeated description will be omitted.

Furthermore, the described features, structures or characteristics may be combined in any suitable manner in one or more embodiments. In the following description, numerous specific details are provided to provide a thorough understanding of embodiments of the present disclosure. However, those skilled in the art will appreciate that the technical solutions of the present disclosure may be practiced without one or more of the specific details described, or other methods, components, materials, devices, steps, etc. may be employed. In other instances, well-known structures, methods, implementations, materials, or operations have not been shown or described in detail to avoid obscuring aspects of the present disclosure.

The block diagrams shown in the figures are functional entities only and do not necessarily correspond to physically separate entities. That is, these functional entities may be implemented in the form of software, or implemented in one or more software-hardened modules, or part of the functional entities, or in different networks and/or processor devices and/or microcontroller devices. implement these functional entities.

The vehicle fault alarm method for the LCD instrument system as shown in Figure 1 includes:

Step 1: The in-vehicle entertainment host SOC obtains the instrument functional safety signal and converts the instrument functional safety signal The signal is passed to the vehicle entertainment host MCU;

Step 2: The in-vehicle entertainment host MCU processes the instrument functional safety signal to obtain the first alarm display data and the first verification information;

Step 3: The vehicle entertainment host MCU sends the first alarm display data to the vehicle entertainment host SOC;

Step 4: The in-vehicle entertainment host SOC processes the first alarm display data to obtain the second alarm display data and the second verification information;

Step 5: The vehicle entertainment host SOC sends the second verification information to the vehicle entertainment host MCU;

Step 6: The in-vehicle entertainment host MCU performs verification based on the first verification information and the second verification information. If the verification is successful, then sends a verification success signal to the in-vehicle entertainment host SOC;

Step 7: The vehicle entertainment host SOC sends the second alarm display data to the LCD instrument system according to the verification success signal, so that the LCD instrument system displays the alarm on the screen according to the second alarm display data.

In this embodiment, the vehicle fault alarm method for the liquid crystal instrument system further includes:

Through the third verification information and the fourth verification information, it is possible to prevent data from being tampered with during the data processing on the instrument system side.

Through the cooperation of the first verification information, the second verification information, the third verification information and the fourth verification information, when the data is tampered with, the staff can know specifically which stage of the data has been tampered with. This makes it easier for staff to find problems.

When the first verification information and the second verification information fail to be verified, the data transmitted at this time will be considered to be unreliable data. However, in fact, the instrument function safety signal obtained by the in-vehicle entertainment host SOC may be There is no problem, that is, the tampering occurs during the processing of the instrument function safety signal by the in-vehicle entertainment host SOC. At this time, the vehicle may indeed have some situations that require an alarm. If this alarm situation is completely ignored at this time, it may cause The driver has no knowledge of the vehicle situation at all, so in this case we do not use untrusted data (i.e. do not use data that is believed to be tampered with), but instead use the original instrument function safety signal. At this time, the Alarming can also prevent data from being tampered with during the alarm process.

After the in-vehicle entertainment host MCU obtains the instrument verification failure signal, it sends the instrument functional safety signal to the MCU of the LCD instrument system;

The MCU of the LCD instrument system sends a backup display signal to the rendering module according to the instrument functional safety signal;

When the verification of the third verification information and the fourth verification information fails, the data transmitted at this time will be considered to be unreliable data. However, in fact, the instrument function safety signal obtained by the in-vehicle entertainment host SOC may be There is no problem, that is, the tampering occurred inside the instrument system. At this time, the vehicle may indeed have some situations that require an alarm. If the alarm situation is completely ignored at this time, the driver may not understand the situation of the vehicle at all. Therefore, In this case, we do not use untrusted data (that is, we do not use data that is believed to be tampered with), but instead use the original instrument function safety signal. At this time, even if the alarm is issued, it can also prevent the alarm from occurring during the alarm process. Data has been tampered with.

In this embodiment, when the verification of the first verification information and the second verification information fails or the verification of the third verification information and the fourth verification information fails, the security link-based LCD instrument system fault alarm Methods further include:

The MCU of the LCD instrument system obtains the functional risk level based on the instrument functional safety signal, and the functional risk level includes high-level functional risk;

When the functional danger level is high-level functional danger, the in-vehicle entertainment host analyzes the instrument functional safety signal to obtain the location information where functional danger occurs;

The in-vehicle entertainment host sends the advanced danger alarm information to the display screen and/or the voice broadcast system.

In many cases, the FLASH module cannot store too much data. Therefore, when used generally, the FLASH module only stores a general alarm display. That is, after the verification fails, the driver may only see a general alarm display from the instrument system. , but it is not clear where exactly the alarm is coming from. However, among the alarms in the instrument system, many alarms are very urgent and dangerous alarms. At this time, if the user cannot intuitively see or detect it, he or she may miss the opportunity for rescue. .

For example, general instrument function safety alarms include driver fatigue warning alarm, driver distraction alarm, abnormal tire pressure warning alarm, steering wheel hands-off warning alarm, cruise function takeover warning alarm, horizontal Override activation prompt alarm, and longitudinal Override activation Prompt alarm, low battery charging prompt alarm, power battery thermal runaway alarm, gear information prompt alarm, brake system failure alarm, ABS failure warning, EPB activation status indication alarm, airbag system failure warning alarm, seat belt not fastened warning light .

Among them, if it is caused by abnormal tire pressure, braking system failure, etc., it may directly lead to loss of life and property. If the driver can be informed of the cause of the alarm through the instrument system in time, the disaster may undoubtedly be prevented. Therefore, This can be set as an advanced function hazard. Once the MCU of the LCD instrument system or the in-vehicle entertainment host MCU determines that it is an advanced function hazard through the instrument function safety signal (the instrument function safety signal will contain information about where the problem occurred, such as , the instrument functional safety signal may include identification bit data, and there is a hazard classification table, which contains various hazard levels, hazard names and hazard identification. If the identification in the hazard classification table is different from the identification bit data of the instrument functional safety signal are the same, then get the The level of danger and the name of the danger corresponding to the danger sign), then the situation of the dangerous place can be obtained through the camera device (for example, if there is a problem with the tire pressure, then the camera device installed on the vehicle for photographing the tires can be photographed) , it can be understood that if there is no camera device for photographing tires on the existing vehicle, a camera device can be installed afterwards). For example, if there is a problem with the braking system, a camera that can capture certain parts of the braking system can be used. device for shooting.

In this embodiment, some fault problems can be directly captured by the camera device to obtain the situation. For example, if there is a problem with the tire pressure, it may be a tire leak. At this time, the tire will be deflated, which can be directly understood through the camera device. Condition.

Some fault problems may not be directly understood through the camera device. For example, if there is a problem with the braking system, the camera device may only be able to capture a certain part of the braking system. However, it is likely that there is no problem with this part. At this time, Advanced danger alarm information can be generated based on the captured image. For example, the advanced danger alarm information can be display information or voice information. For example, the voice information can be: Hello, car owner, there is a problem with your tire, please check it in time.

Alternatively, the displayed information may be a picture taken by a camera device, or may be a text display. For example, the words "vehicle braking system failure" are displayed on the display screen.

In this way, the driver can be informed of the situation and location of the problem in a timely manner. In particular, this method can attract the driver's attention and prevent the driver from being too focused on driving and not paying attention to the instrument panel.

In this embodiment, the functional risk level includes intermediate functional risk;

When the verification of the first verification information and the second verification information fails or the verification of the third verification information and the fourth verification information fails, the safe link-based liquid crystal instrument system fault alarm method further includes:

If the functional risk level is intermediate functional risk, the MCU of the liquid crystal instrument system sends a backup display signal to the rendering module according to the instrument functional safety signal, including:

The rendering module retrieves the alarm display information in the FLASH module according to the backup display signal, and transfers the alarm display information in the FLASH module to the LCD instrument device for display, including:

The rendering module retrieves the alarm display information in the FLASH module according to the backup display signal. The alarm display information in the FLASH module includes multiple alarm display information. Each alarm display information includes a preset function identifier and a corresponding function identifier corresponding to the preset function identifier. Display information;

The rendering module transmits the obtained display information as alarm display information to the LCD instrument device for display.

As mentioned above, the FLASH module cannot store a large amount of data, but it can store a small amount of image display data. We can store the image display corresponding to the intermediate danger alarm information in the FLASH module. For example, if the airbag system fails, in In most cases, it is not a fault that must be solved immediately. However, it is difficult for the driver to find the fault of the airbag system because in most cases, the driver will not pay attention to the airbag. Therefore, some maintenance is required at this time. There is a guidance display, otherwise the driver will not consider the airbag failure even if he sees the general alarm information. Therefore, by storing the alarm icon unique to the airbag failure in the FLASH module, the mid-level danger alarm can be realized by users. The driver can observe the specific fault situation, and it will not be as abrupt as the high-level danger, causing the driver to panic.

In this embodiment, the vehicle entertainment host SOC obtains the instrument functional safety signal through Ethernet.

In this embodiment, the vehicle entertainment host MCU complies with the ASIL B security level, and the SOC complies with the QM security level.

This application also provides a vehicle fault alarm system for a liquid crystal instrument system. The liquid crystal instrument The vehicle fault alarm system for the meter system includes a vehicle entertainment host and a liquid crystal instrument system. The vehicle entertainment host includes a vehicle entertainment host SOC and a vehicle entertainment host MCU; wherein,

The vehicle entertainment host SOC obtains the verification success signal sent by the vehicle entertainment host MCU after successful verification based on the first verification information and the second verification information;

The vehicle entertainment host MCU performs verification based on the first verification information and the second verification information. If the verification is successful, a verification success signal is sent to the vehicle entertainment host SOC, so that the vehicle entertainment host SOC performs verification according to The verification success signal sends the second alarm display data to the liquid crystal instrument system, so that the liquid crystal instrument system displays an alarm on the screen according to the second alarm display data.

Through the above method, this application can significantly improve the reliability and stability of the vehicle's LCD instrument system, making the LCD instrument system meet the ASIL B standard.

The present application will be further described in detail below by taking examples. It should be understood that this example does not constitute any limitation on the present application.

The vehicle entertainment host SOC obtains the instrument functional safety-related signals, and the vehicle entertainment host SOC forwards them to the vehicle entertainment host MCU through spi.

It can be understood that in the actual process, instrument safety-related signals include instrument functional safety-related signals and non-functional safety signals. This application mainly addresses instrument function-related signals.

The in-vehicle entertainment host MCU analyzes the functional safety data sent, extracts the data and calculates the relevant alarm display data, and obtains the first alarm display data and the first verification information, where the first verification information is CRC TT1;

The vehicle entertainment host MCU sends the first alarm display data to the application of the vehicle entertainment host SOC, and the vehicle entertainment host SOC processes the first alarm display data to obtain the second alarm display data and the second verification information. Specifically, In other words, the in-vehicle entertainment host SOC is associated with the functional safety pipe, and the second verification information is calculated through the MDP method, where the second verification information is CRC TT2.

The vehicle entertainment host MCU performs verification based on the first verification information and the second verification information. If the verification is successful, a verification success signal is sent to the vehicle entertainment host SOC.

The MCU of the LCD instrument system obtains the second alarm display data sent by the in-vehicle entertainment host SOC through spi.

The MCU of the LCD instrument system analyzes the second alarm display data sent, extracts the data and calculates the relevant alarm display to obtain the third verification information, where the third verification information is CRC TT3;

The MCU of the LCD instrument system sends the second alarm display data to the rendering module through the IIC;

The rendering module calculates the fourth verification information through the second alarm display data, where the fourth verification information is CRC TT4, and sends it back to the MCU of the LCD instrument system through IIC;

The MCU of the LCD instrument system compares TT3 and TT4, and if they are the same, sends an LCD instrument system verification success signal to the rendering module;

The rendering module obtains the display information according to the second alarm display data and passes the display information to LCD instrument device for display.

In this embodiment, the vehicle fault alarm system for the liquid crystal instrument system of the present application has the following architecture:

The vehicle fault alarm system for LCD instrument system includes memory safety module, display safety module and display function safety module:

The memory security module includes the ARM subsystem, the Q6/HVX computing subsystem, the neural processing unit HTA subsystem, and the third-level system cache. The third-level system cache includes the first-level cache that supports parity check, the first-level Conversion cache.

In this example embodiment, the memory security module also includes:

First-level cache, second-level cache, and third-level cache that support error checking and correction verification;

Supports external memory for error checking and correction checking.

In the embodiment of this example, the memory protection system of the computing block of the memory security module 110 and the associated on-chip memory: ARM subsystem, Q6/HVX computing subsystem, neural processing unit HTA subsystem, three-level system cache, external DDR The configuration table supported by ECC is shown in Table 1-3:

Table 1 Memory security module configuration table

Table 2 Memory security module configuration table

Table 3 Memory security module configuration table

The display security module includes a sensor, a first microprocessor, and an on-chip system. The first microprocessor is used to receive the sensing signal sent by the sensor, and generate a cyclic redundancy check comparison value and display based on the sensing signal. signal, the on-chip system is configured to receive a display signal sent by the first microprocessor, and generate a software cyclic redundancy check value and a hardware cyclic redundancy check value based on the display signal.

In this example embodiment, the display security module of the liquid crystal instrument system also includes:

A multi-input feature register, which is used to store and transmit display signals;

A display area based on linear communication, the display area based on linear communication is uniquely corresponding to the multi-input feature register, and is used to receive and display the display signal sent by the multi-input feature register.

In the embodiment of this example, the integrity of the display content of safety-critical items such as dashboard icons is ensured: 4 independent MISR areas are supported;

For a pipeline, there can be four ROI areas. The size and location of the four areas can be set individually. In the actual use process, the functionally related indicator lights are laid out together in the UI design and set into an ROI area in the software;

If four areas cannot meet the requirements, use another pipeline. Each pipeline has Four independent ROI areas can be set up.

The on-chip system is configured to receive a display signal sent by the first microprocessor and generate a software cyclic redundancy check value based on the display signal;

The display signal calls the buffer icon based on the display interface and generates a hardware cyclic redundancy check value.

In the embodiment of this example, the first microprocessor of the display security module of the LCD instrument system is also used to:

Receive the software cyclic redundancy check value and hardware cyclic redundancy check value sent by the on-chip system, and combine the software cyclic redundancy check value, hardware cyclic redundancy check value and the cyclic redundancy check value respectively. Compare the remaining verification comparison values to complete the display security verification.

The display screen functional safety module includes an image detection chip, an SPI communication control channel, and a memory chip. The image detection chip is used to verify and back up the display content of the display screen based on image RGB value comparison, and to backup the display screen. The display content is sent to the memory chip. When the display content verification is abnormal, the display content in the memory chip is called as the display content of the display screen based on the SPI communication control channel.

In this example embodiment, the display screen functional safety module of the liquid crystal instrument system also includes:

The second microprocessor is used for power management, status diagnosis, and image detection chip control of the display screen.

In this example embodiment, the SPI communication control channel of the display screen functional safety module of the liquid crystal instrument system is also used to transmit warning light status and vehicle speed information.

In the embodiment of this example, the display functional safety module is connected to the display through FPD LINK/GMSL. FPD LINK/GMSL has a video channel, I2C and SPI communication control channels, and uses the SPI communication channel to transmit warning light status and vehicle speed information. etc., the SPI communication channel is designed according to the functional safety scheme (CRC+FrameCounter); use ROHM The RGB-Sigma Verification+OSD function of the chip realizes the backup of the TellTails display checksum function; based on the BU92RTF82 chip, the RGB value of the regional image is compared, and combined with the status information provided by the host MCU to determine whether it is normal. If not, the chip is controlled through SPI to call FLASH. The image is displayed on OSD backup.

In this example embodiment, the LCD instrument system also includes:

A timing controller configured to call the display content in the memory chip as the display content of the display screen based on the SPI communication control channel when the display content verification is abnormal.

In the embodiment of this example, the timing controller TCON can independently display characters when there is no GPU image input. The timing controller includes two working modes: Mode 1, through SPI commands, download characters from external Flash for display; Mode 2, characters are stored in the MCU, and the MCU writes characters into TCON through SPI.

In addition, in this example embodiment, the vehicle fault alarm system for the liquid crystal instrument system also includes a basic hardware structure.

In the embodiment of this example, the vehicle fault alarm system for LCD instrument system includes clock monitoring, and the controller should monitor its internal clock frequency compared to the backup clock source. The comparison can be achieved by an accumulating counter based on the supervisory clock and the backup clock; the microcontroller should detect clock frequency errors and instruct the safety monitoring unit (e.g. SUM, watchdog) to activate safety degraded mode if necessary; microcontroller clock monitor This should be tested at least once during system initialization to avoid potential clock monitor failures. The test can configure the clock frequency to force the monitor to detect errors and verify that the fault is correctly detected; when a fault is injected, the microcontroller clock monitor should report the fault to SUM. If no fault is reported within the specified time period, SUM should activate safety downgrade.

In the embodiment of this example, the vehicle fault alarm system for LCD instrument system includes program flow monitoring, and the microcontroller shall monitor the execution sequence and timing of safety-critical software programs through an internal safety watchdog. The software can use the correct password and estimate the current timer value in the predefined service or check watchdog in the program. Every time SW services the watchdog, its password will be reset to the initial value. And every time SW checks the watchdog, its password for the next sequence will be changed according to the algorithm. The watchdog should be serviced using the correct password and an estimated timer value for the software being monitored before the timer expires; watchdog service points or watchdog checkpoints should be placed in each security software function in the order in which the software program is executed. . Causes the execution of each software function to also perform a watchdog service or watchdog check. For each software cycle, the safety software shall check the watchdog with the correct timing during the execution of each safety function using a predefined sequence of passwords and timer values; the watchdog shall detect a program flow failure and report to SUM signals a fault: watchdog timer overflow, error in the service or checking procedure of the watchdog, use of incorrect password or incorrect estimated timer value servicing or checking the watchdog, if necessary SUM should activate security Downgrade.

In the embodiment of this example, the vehicle fault alarm system for the LCD instrument system includes heartbeat monitoring, and the microcontroller should provide an "active heartbeat" periodic switching signal to the monitoring unit through hard wires. Switching signals should be managed by a security watchdog that also provides program flow monitoring capabilities. The security watchdog is only allowed to toggle the "active heartbeat" during the watchdog service. The microcontroller safety software should toggle the "active heartbeat" every time the internal safety watchdog is serviced, which indicates to the monitoring unit that the microcontroller is running and the safety watchdog timer is running; the SUM should toggle by checking the signal and The times of high and low states are within the valid range to monitor the "active heartbeat" switching signal. Once an "active heartbeat" failure is detected, SUM will activate safety downgrade.

In the embodiment of this example, the vehicle fault alarm system for LCD instrument system includes a window watchdog, and the microcontroller should be monitored by an external window watchdog with two operating states, opening time window and closing time window. The microcontroller should trigger the watchdog only during the on time window and should not trigger during the off time window; if the microcontroller fails to trigger the watchdog during the correct time window, the error counter will be incremented once the error counter exceeds threshold, SUM will activate security downgrade.

In this exemplary embodiment, the vehicle fault alarm system for the LCD instrument system includes an interrupt Protection, the microcontroller needs to generate ECC code or equivalent protection measures for each interrupt service request. The ECC code corresponding to the interrupt service request is sent to the interrupt service provider (CPU) together with the ECC-protected interrupt routing information.

In this exemplary embodiment, the vehicle fault alarm system for the LCD instrument system includes pointer monitoring that should protect safety-related registers from permanent or transient errors. Redundant flip-flops with comparator logic can be used in microcontrollers to detect single-event effects. Registers controlling reset, clock, test mode and activation of safety mechanisms should be monitored.

It should be noted that although the various steps of the method in the present disclosure are described in a specific order in the drawings, this does not require or imply that these steps must be performed in this specific order, or that all of the steps shown must be performed. Achieve desired results. Additionally or alternatively, certain steps may be omitted, multiple steps may be combined into one step for execution, and/or one step may be decomposed into multiple steps for execution, etc.

Furthermore, the drawings are only schematic illustrations of processes included in methods according to exemplary embodiments of the present invention, and are not intended to be limiting. It is readily understood that the processes shown in the above figures do not indicate or limit the temporal sequence of these processes. In addition, it is also easy to understand that these processes may be executed synchronously or asynchronously in multiple modules, for example.

Other embodiments of the disclosure will be readily apparent to those skilled in the art from consideration of the specification and practice of the invention disclosed herein. This application is intended to cover any variations, uses, or adaptations of the disclosure that follow the general principles of the disclosure and include common knowledge or customary technical means in the technical field that are not disclosed in the disclosure. . It is intended that the specification and examples be considered as exemplary only, with a true scope and spirit of the disclosure being indicated by the following claims.

It is to be understood that the present disclosure is not limited to the precise structures described above and illustrated in the accompanying drawings, and various modifications and changes may be made without departing from the scope thereof. The scope of the present disclosure is limited only by the appended claims.

Claims

A vehicle fault alarm method for a liquid crystal instrument system, characterized in that the vehicle fault alarm method for a liquid crystal instrument system includes:

The vehicle entertainment host SOC acquires the instrument functional safety signal and transmits the instrument functional safety signal to the vehicle entertainment host MCU;

The in-vehicle entertainment host MCU processes the instrument functional safety signal to obtain the first alarm display data and the first verification information;

The vehicle entertainment host MCU sends the first alarm display data to the vehicle entertainment host SOC;

The in-vehicle entertainment host SOC processes the first alarm display data to obtain the second alarm display data and the second verification information;

The vehicle entertainment host SOC sends the second verification information to the vehicle entertainment host MCU;

The vehicle entertainment host MCU performs verification according to the first verification information and the second verification information. If the verification is successful, then sends a verification success signal to the vehicle entertainment host SOC;

The vehicle entertainment host SOC sends the second alarm display data to the liquid crystal instrument system according to the verification success signal, so that the liquid crystal instrument system displays an alarm on the screen according to the second alarm display data; the liquid crystal instrument system The vehicle fault alarm method further includes:

The MCU of the LCD instrument system obtains the second alarm display data sent by the vehicle entertainment host SOC;

The MCU of the liquid crystal instrument system obtains the third verification information according to the second alarm display data and sends the second alarm display data to the rendering module of the liquid crystal instrument system;

The rendering module of the liquid crystal instrument system obtains fourth verification information according to the second alarm display data and sends the fourth verification information to the MCU of the liquid crystal instrument system;

The MCU of the liquid crystal instrument system performs verification based on the third verification information and the fourth verification information. If the verification is successful, then sends an LCD instrument system verification success signal to the rendering module;

The rendering module obtains display information according to the second alarm display data, and transmits the display information to the liquid crystal instrument device for display;

The vehicle fault alarm method for the liquid crystal instrument system further includes:

The vehicle entertainment host MCU performs verification based on the first verification information and the second verification information. If the verification fails, the instrument functional safety signal is sent to the MCU of the liquid crystal instrument system;

The MCU of the liquid crystal instrument system sends a backup display signal to the rendering module according to the instrument functional safety signal;

The rendering module retrieves the alarm display information in the FLASH module according to the backup display signal, and transmits the alarm display information in the FLASH module to the liquid crystal instrument device for display;

The vehicle fault alarm method for the liquid crystal instrument system further includes:

The MCU of the liquid crystal instrument system performs verification based on the third verification information and the fourth verification information. If the verification fails, then

The MCU of the liquid crystal instrument system transmits an instrument verification failure signal to the vehicle entertainment host MCU;

After the in-vehicle entertainment host MCU obtains the instrument verification failure signal, it sends the instrument functional safety signal to the MCU of the liquid crystal instrument system;

The MCU of the liquid crystal instrument system sends a backup display signal to the rendering module according to the instrument functional safety signal;

The rendering module retrieves the alarm display information in the FLASH module according to the backup display signal, and transmits the alarm display information in the FLASH module to the liquid crystal instrument device for display.
The vehicle fault alarm method for liquid crystal instrument system according to claim 1, characterized in that when the first verification information and the second verification information fail to verify or the third verification information and the fourth verification information When the verification information fails to be verified, the LCD instrument system uses a vehicle fault alarm Methods further include:

The MCU of the liquid crystal instrument system obtains the functional risk level based on the instrument functional safety signal, and the functional risk level includes high-level functional risk;

When the functional danger level is a high-level functional danger, the in-vehicle entertainment host parses the instrument functional safety signal to obtain the location information where the functional danger occurs;

The in-vehicle entertainment host sends an image capture signal to the camera device that can capture the location information of functional danger;

The vehicle-mounted entertainment host obtains the image captured by the camera device according to the image capture signal;

The in-vehicle entertainment host generates advanced danger alarm information based on the captured images;

The vehicle entertainment host sends the advanced danger alarm information to a display screen and/or a voice broadcast system.
The vehicle fault alarm method for liquid crystal instrument systems according to claim 2, wherein the functional risk level includes intermediate functional risk;

When the verification of the first verification information and the second verification information fails or the verification of the third verification information and the fourth verification information fails, the vehicle fault alarm method for the liquid crystal instrument system further includes: :

If the functional risk level is an intermediate functional risk, the MCU of the liquid crystal instrument system sends a backup display signal to the rendering module according to the instrument functional safety signal, including:

The MCU of the liquid crystal instrument system obtains the function identification according to the instrument functional safety signal;

The liquid crystal instrument system sends the backup display signal to the rendering module, where the backup display signal includes a function identifier;

The rendering module retrieves the alarm display information in the FLASH module according to the backup display signal, and transfers the alarm display information in the FLASH module to the liquid crystal instrument device for display, including:

The rendering module retrieves the alarm display information in the FLASH module according to the backup display signal, where the alarm display information in the FLASH module includes multiple alarm displays. The display information includes a preset function identifier and display information corresponding to the preset function identifier;

The FLASH module sends the display information corresponding to the preset function identifier that is the same as the function identifier to the rendering module;

The rendering module transmits the obtained display information as alarm display information to the liquid crystal instrument device for display.
The vehicle fault alarm method for a liquid crystal instrument system according to any one of claims 1 to 3, characterized in that the vehicle entertainment host SOC obtains the instrument function safety signal through Ethernet.
The vehicle fault alarm method for a liquid crystal instrument system as claimed in claim 4, wherein the vehicle entertainment host MCU complies with the ASIL B safety level.
A vehicle fault alarm system for an LCD instrument system, characterized in that the vehicle fault alarm system for an LCD instrument system includes a vehicle-mounted entertainment host and a liquid crystal instrument system, and the vehicle-mounted entertainment host includes a vehicle-mounted entertainment host SOC and a vehicle-mounted entertainment host MCU; in,

The in-vehicle entertainment host and the liquid crystal instrument system cooperate to implement the vehicle fault alarm method for the liquid crystal instrument system as described in any one of claims 1 to 5.
A vehicle-mounted entertainment host, characterized in that the vehicle-mounted entertainment host includes a vehicle-mounted entertainment host SOC and a vehicle-mounted entertainment host MCU, wherein the vehicle-mounted entertainment host SOC and the vehicle-mounted entertainment host MCU cooperate to implement any one of claims 1 to 5 A vehicle fault alarm method for a liquid crystal instrument system described in the item.
A vehicle-mounted entertainment host SOC, characterized in that the vehicle-mounted entertainment host SOC is used to implement a vehicle fault alarm method for a liquid crystal instrument system as described in any one of claims 1 to 5.
A vehicle-mounted entertainment host MCU, characterized in that the vehicle-mounted entertainment host MCU is used to implement a vehicle fault alarm method for a liquid crystal instrument system as described in any one of claims 1 to 5.