Instrument function safety system and control method

Abstract

The invention provides an instrument function safety system and a control method, and belongs to the technical field of instrument function safety, a cabin area controller performs cyclic redundancy check on image data output to an instrument display screen by the cabin area controller, and outputs a cyclic redundancy check value and the image data to a function safety chip; and the functional security chip calculates a cyclic redundancy check value for the image data, and compares the cyclic redundancy check value with a cyclic redundancy check value input by the cabin domain controller, and if the cyclic redundancy check value is inconsistent with the cyclic redundancy check value input by the cabin domain controller, the functional security chip controls an instrument display screen to access a functional security state. And when the cabin domain controller outputs the image data and the cyclic redundancy check value to the instrument display screen, the instrument display screen performs cyclic redundancy check calculation on the image data, and if the obtained cyclic redundancy check value is inconsistent with the cyclic redundancy check value input by the cabin domain controller, the fault state is displayed through a pre-stored picture. The instrument data transmission fault is detected in time, a driver is prompted, and the driving safety is improved.

Description

TECHNICAL FIELD

[0001] The present application belongs to the technical field of instrument functional safety, and particularly relates to an instrument functional safety system and a control method. BACKGROUND

[0002] With the progress of science and technology, the degree of intelligence of automobiles is getting higher and higher, and traditional instruments are gradually replaced by one-machine two-screen mode controlled by an in-cabin controller. Whether based on hardware failure or software application layer failure, instrument data transmission failure will inevitably exist.

[0003] Chinese patent 205439991U proposes a large-screen virtual automobile instrument for displaying navigation video, comprising: a vehicle-mounted navigation device, a video acquisition device, a central processor, a display device and a data transmission interface; the data transmission end of the vehicle-mounted navigation device is connected to the data receiving end of the video acquisition device, the data receiving end of the video acquisition device is connected to the data interaction end of the central processor, the data transmission end of the central processor is connected to the data transmission end of the display device, and the instrument data interaction end of the central processor is connected to the data transmission interface, and the automobile instrument data is transmitted through the data transmission interface.

[0004] The prior art does not solve the problem of instrument data transmission error, which will affect the driver's judgment of the vehicle state and affect the driving safety. SUMMARY

[0005] The present application aims to provide an instrument functional safety system and a control method to achieve the technical purpose of timely detecting instrument data transmission failure and prompting the driver to improve driving safety.

[0006] In order to achieve the above purpose, the technical scheme adopted by the present application is:

[0007] The present application provides an instrument functional safety system, comprising an in-cabin control module, a functional safety module and an instrument display screen, the output end of the in-cabin control module is connected to the input end of the instrument display screen, the output end of the in-cabin control module is connected to the input end of the functional safety module, and the output end of the functional safety module is connected to the input end of the instrument display screen.

[0008] The in-cabin control module adopts an in-cabin controller.

[0009] The in-cabin controller is connected to the instrument display screen through a differential signal line and an I2C bus respectively.

[0010] The functional safety module adopts a functional safety chip.

[0011] The functional safety chip is connected to the instrument display screen through an I2C bus.

[0012] The functional safety chip is connected with the cabin domain controller through an SPI bus.

[0013] The application provides a control method of an instrument functional safety system:

[0014] Step one: the cabin domain controller performs cyclic redundancy check on image data output by the cabin domain controller to an instrument display screen, and outputs the cyclic redundancy check value and the image data to a functional safety chip;

[0015] Step two: the functional safety chip calculates a cyclic redundancy check value of the image data, and compares the cyclic redundancy check value with the cyclic redundancy check value input by the cabin domain controller, if the two values are inconsistent, the functional safety chip controls the instrument display screen to enter a functional safety state.

[0016] When the cabin domain controller outputs the image data and the cyclic redundancy check value to the instrument display screen, the instrument display screen performs cyclic redundancy check calculation on the image data, if the cyclic redundancy check value obtained is inconsistent with the cyclic redundancy check value input by the cabin domain controller, a pre-stored picture is displayed to show a fault state.

[0017] The cabin domain controller inputs vehicle speed information to the instrument display screen through an I2C bus, and the instrument display screen adds a layer to display the vehicle speed information on the pre-stored picture displayed on the instrument display screen.

[0018] The technical effect of the application is:

[0019] (1) The fault detection accuracy of the application is high, and the data integrity protection is improved. Through the multiple cyclic redundancy check mechanism of the cabin domain controller, the functional safety chip and the instrument display screen microcontroller, the instrument functional safety system is more perfect.

[0020] (2) The fault response level of the application is clear, and the safety degradation logic is reliable. When the functional safety chip verification is inconsistent, the LIN bus is immediately cut off to isolate non-safety function interference and only keep the minimal running logic; when the instrument display screen verification is abnormal, the pre-stored alarm picture is quickly called through the integrated FLASH memory, and at the same time, the cabin domain controller independently transmits the vehicle speed information through the I2C bus and superimposes the display. It ensures that the driver can synchronously obtain the alarm information and the core driving data when a fault occurs, and avoids risks.

[0021] (3) The data transmission architecture of the application has strong anti-interference and real-time performance, differential signal lines are used to transmit image data, the anti-electromagnetic interference characteristics are used to reduce transmission distortion, the SPI bus is used to connect the cabin domain controller and the functional safety chip to ensure high-speed interaction of the verification data, and the I2C bus is used to bear the control signal transmission and the vehicle speed data transmission function when a fault occurs. BRIEF DESCRIPTION OF DRAWINGS

[0022] The present specification includes the following drawings, and the contents shown are as follows:

[0023] Figure 1 This is a logical structure block diagram of an instrument functional safety system and control method according to the present invention;

[0024] Figure 1 The components are labeled as follows: 1. Cockpit Domain Control Module; 2. Functional Safety Module; 3. Instrument Display. Detailed Implementation

[0025] The specific embodiments of the present invention will be further described in detail below with reference to the accompanying drawings, in order to help those skilled in the art to have a more complete, accurate and in-depth understanding of the inventive concept and technical solution of the present invention, and to facilitate its implementation.

[0026] This invention provides an instrument functional safety system, including a cockpit domain control module, a functional safety module, and an instrument display screen. The output terminal of the cockpit domain control module is connected to the input terminal of the instrument display screen, the output terminal of the cockpit domain control module is connected to the input terminal of the functional safety module, and the output terminal of the functional safety module is connected to the input terminal of the instrument display screen.

[0027] The cockpit domain control module uses a cockpit domain controller. The cockpit domain controller is connected to the instrument cluster display via differential signal lines and an I2C bus. The functional safety module uses a functional safety chip. The functional safety chip is connected to the instrument cluster display via an I2C bus. The functional safety chip is connected to the cockpit domain controller via an SPI bus.

[0028] This invention provides a control method for an instrument functional safety system:

[0029] Step 1: The cockpit domain controller performs cyclic redundancy check on the image data output from the cockpit domain controller to the instrument display screen, and outputs the cyclic redundancy check value and image data to the functional safety chip;

[0030] Step 2: The functional safety chip calculates the cyclic redundancy check value for the image data and compares it with the cyclic redundancy check value input by the cockpit domain controller. If they do not match, the functional safety chip controls the instrument display to enter the functional safety state.

[0031] When the cockpit domain controller outputs image data and cyclic redundancy check (CR) values ​​to the instrument display screen, the instrument display screen performs CR calculation on the image data. If the obtained CR value is inconsistent with the CR value input by the cockpit domain controller, the fault status is displayed through a pre-stored image.

[0032] The cockpit domain controller inputs the vehicle speed information to the instrument display screen via the I2C bus. The instrument display screen then adds a layer to the pre-stored image displayed on the instrument display screen to show the vehicle speed information.

[0033] The present invention provides a detailed description of an instrument functional safety system.

[0034] This invention discloses an instrument functional safety system comprising a cockpit domain control module, a functional safety module, and an instrument display screen. The cockpit domain control module employs a cockpit domain controller for transmitting image data to the instrument display screen, performing cyclic redundancy check (CRC) calculations, and outputting the image data and CRC values ​​to the functional safety chip and the instrument display screen. In embodiments of this invention, the cockpit domain controller uses a Qualcomm SA8155P chip.

[0035] The functional safety module employs a functional safety chip to perform cyclic redundancy check (CR) calculations on the image data input from the system-level chip. It then compares the calculated CR value with the CR value input from the cockpit domain controller. If the comparison fails, the instrument display screen switches to a functional safety state. In this embodiment, the functional safety chip is a Renesas RH850 chip.

[0036] The instrument display screen displays the instrument image data input from the cockpit domain controller in image form. The microcontroller in the instrument display screen also performs cyclic redundancy check (CRC) calculations when receiving image data. The obtained CRC value is compared with the CRC value input from the cockpit domain controller. If they do not match, a pre-stored image in the FLASH memory is displayed on the instrument display screen. The FLASH memory is integrated into the microcontroller. In this embodiment of the invention, the microcontroller uses an ArtInChip D211BBV chip.

[0037] The connection relationship of an instrument functional safety system according to the present invention is described in detail below.

[0038] The cockpit domain controller is connected to the instrument cluster display via differential signal lines and an I2C bus. The differential signal lines are used to transmit image data, and the I2C bus is used to transmit control signals. In this invention, the I2C bus connecting the system-on-a-chip (SoC) and the instrument cluster display is used to transmit vehicle speed information to the instrument cluster display when there is a failure in the cockpit domain controller to transmit image data to the instrument cluster display. The functional safety chip is connected to the instrument cluster display via the I2C bus. The functional safety chip is connected to the cockpit domain controller via the SPI bus.

[0039] The following describes in detail a control method for an instrument functional safety system according to the present invention.

[0040] The cockpit domain controller performs cyclic redundancy check (CR) on the image data output to the instrument cluster display, and outputs the CR value and image data to the functional safety chip. The functional safety chip calculates the CR value for the image data and compares it with the CR value input from the cockpit domain controller. If they do not match, the functional safety chip controls the instrument cluster display to enter a functional safety state, i.e., disconnecting the LIN bus to prevent the LIN bus from interfering with the core functions of the functional safety state, including the instrument display function, ensuring that the system retains only the essential safety-critical operating logic in the event of a fault.

[0041] When the cockpit domain controller outputs image data to the instrument cluster display, the display performs a cyclic redundancy check (CR) calculation. If the CR value obtained is inconsistent with the CR value input by the cockpit domain controller, a pre-stored image is displayed to indicate a fault. This pre-stored image serves as an alarm message, alerting the driver to a malfunction in the instrument cluster. Simultaneously, the cockpit domain controller inputs vehicle speed information to the instrument cluster display via the I2C bus. The instrument cluster display adds a layer to the pre-stored image to display the speed information. Specifically, the cockpit domain controller converts the speed information into a byte stream format supported by the I2C bus and adds a data identifier bit to identify this data as speed data. After receiving the speed data, the instrument cluster display generates a speed display layer and displays a graphic representation of the speed data on top of the speed display graphic. This display of speed information, while indicating an instrument cluster malfunction, facilitates driver intervention and judgment.

[0042] The beneficial effects of the present invention are described in detail below.

[0043] This invention offers high accuracy in fault detection and enhanced data integrity protection. Through a multi-layered cyclic redundancy check mechanism involving the cockpit domain controller, functional safety chip, and instrument display microcontroller, the instrument functional safety system is further improved.

[0044] This invention features a clear fault response hierarchy and reliable safety degradation logic. When the functional safety chip verification is inconsistent, the LIN bus is immediately disconnected to isolate interference from non-safety functions, retaining only the simplified operating logic. When the instrument display verification is abnormal, pre-stored alarm images are quickly recalled via the integrated FLASH memory, while the cockpit domain controller independently transmits vehicle speed information via the I2C bus and overlays it for display. This ensures that the driver can simultaneously obtain alarm information and core driving data in the event of a fault, avoiding potential risks.

[0045] The data transmission architecture of this invention has strong anti-interference and real-time performance. Differential signal lines transmit image data, and their anti-electromagnetic interference characteristics reduce transmission distortion. The SPI bus connects the cockpit domain controller and the functional safety chip to ensure high-speed interaction of verification data. The I2C bus undertakes the functions of control signal transmission and vehicle speed data transmission in case of failure.

[0046] The present invention has been described above by way of example with reference to the accompanying drawings. Obviously, the specific implementation of the present invention is not limited to the above-described manner. Any non-substantial improvements made using the inventive concept and technical solution; or the direct application of the inventive concept and technical solution to other situations without modification, are all within the protection scope of the present invention.

Claims

1. An instrument functional safety system, characterized in that: It includes a cockpit domain control module, a functional safety module, and an instrument display screen. The output terminal of the cockpit domain control module is connected to the input terminal of the instrument display screen, the output terminal of the cockpit domain control module is connected to the input terminal of the functional safety module, and the output terminal of the functional safety module is connected to the input terminal of the instrument display screen.

2. The instrument functional safety system as described in claim 1, characterized in that: The cockpit domain control module uses a cockpit domain controller.

3. The instrument functional safety system as described in claim 2, characterized in that: The cockpit domain controller is connected to the instrument display screen via differential signal lines and an I2C bus.

4. The instrument functional safety system as described in claim 1, characterized in that: The functional safety module uses a functional safety chip.

5. The instrument functional safety system as described in claim 4, characterized in that: The functional safety chip is connected to the instrument display screen via an I2C bus.

6. The instrument functional safety system as described in claim 4, characterized in that: The functional safety chip is connected to the cockpit domain controller via the SPI bus.

7. A control method for an instrument functional safety system, characterized in that: Step 1: The cockpit domain controller performs cyclic redundancy check on the image data output from the cockpit domain controller to the instrument display screen, and outputs the cyclic redundancy check value and image data to the functional safety chip; Step 2: The functional safety chip calculates the cyclic redundancy check value for the image data and compares it with the cyclic redundancy check value input by the cockpit domain controller. If they do not match, the functional safety chip controls the instrument display to enter the functional safety state.

8. The control method for an instrument functional safety system as described in claim 7, characterized in that: When the cockpit domain controller outputs image data and cyclic redundancy check (CR) values ​​to the instrument display screen, the instrument display screen performs CR calculation on the image data. If the obtained CR value is inconsistent with the CR value input by the cockpit domain controller, the fault status is displayed through a pre-stored image.

9. The control method for an instrument functional safety system as described in claim 8, characterized in that: The cockpit domain controller inputs the vehicle speed information to the instrument display screen via the I2C bus. The instrument display screen then adds a layer to the pre-stored image displayed on the instrument display screen to show the vehicle speed information.

Images