Information device for informing a driver and method for informing a driver

Abstract

An information device (10) for informing a driver of the driving status of a motor vehicle capable of automated driving is proposed. The information device (10) includes a first control device (101) for controlling the automated driving of the motor vehicle and a second control device (102) for controlling the automated driving of the motor vehicle, a first human-machine interface device (201) for notifying the driver of the driving status of the automated driving of the motor vehicle, and a second human-machine interface device (202) for notifying the driver of the driving status of the automated driving of the motor vehicle. The first control device (101) is configured to send the driving status of the automated driving to the first human-machine interface device (201), and the second control device (102) is configured to send the driving status of the automated driving to the second human-machine interface device (202).

Description

Technical Field

[0001] The invention relates to an information device for informing a driver and a method for informing a driver. Background Art

[0002] Modern vehicles are increasingly automated in their driving functions. While assistance functions (SAE level ≤ 2) always require driver control, with the introduction of so-called automated driving functions (pilotierten Fahrfunktion), in the future the control of the vehicle will be handed over (at least partially) to an automated system (SAE level 3-5, so-called automated driving or autonomous driving or automated driving). Since the driver must have control over the driving activities at all times with today's assistance systems, today's human-machine interface systems (Human-Machine-Interface-System; HMI-System) are not designed for the safety-critical relevance of automated or self-driving motor vehicles. Instead, they must signal and communicate the driving state and (ideally) its transition (e.g. from a manual driving state to an automated or self-driving driving state and back) to the driver with high safety, reliability and availability. In this way, the driver can at least partially devote himself to other activities and the driver reliably knows in which driving state or mode the vehicle is and when he may have to take over control of the vehicle again.

[0003] The signaling and communication of the driving state and the driving state transition to the driver can be carried out via different "HMI channels", for example visually or acoustically. The visual "channel" is of course a very important component of the HMI system, wherein the auditory "channel" has clearly become increasingly important in the past few years, in addition to voice input functions and voice control functions. HMI systems or information devices for informing the driver of the driving state of an automatically drivable motor vehicle (that is, a motor vehicle that can be driven autonomously) should have a very high reliability, so that the driver is always reliably and accurately informed of the driving state of the motor vehicle. However, the systems or devices known so far for informing the driver of the driving state sometimes do not have a high reliability, because auditory, visual or audio-visual devices are primarily used for entertainment applications and infotainment applications in motor vehicles, and these expensive video algorithms, audio and navigation algorithms require high-power processors, which in turn do not meet the highest safety requirements (and this is not necessarily the case for today's systems). Here, in unfavorable circumstances, it may occur that the driving state of the automated driving of the motor vehicle is incorrectly informed and incorrectly transmitted to the driver. Summary of the invention

[0004] Against this background, an information device or a method for informing a driver according to the invention is proposed with the aid of the solution proposed here. Advantageous developments and improvements of the solution proposed here are apparent from the description.

[0005] Advantages of the present invention

[0006] Embodiments of the present invention advantageously make it possible to reliably inform a driver of a motor vehicle that can be driven automatically about a driving state of the motor vehicle that is being driven automatically.

[0007] According to a first aspect of the present invention, an information device for informing a driver of a driving state of a motor vehicle that can be driven automatically is proposed, wherein the information device has a first control device for controlling the automated driving of the motor vehicle and a second control device for controlling the automated driving of the motor vehicle, a first human-machine interface device for notifying the driver of the driving state of the automated driving of the motor vehicle and a second human-machine interface device for notifying the driver of the driving state of the automated driving of the motor vehicle, wherein the first control device is constructed to send the driving state of the automated driving to the first human-machine interface device, and the second control device is constructed to send the driving state of the automated driving to the second human-machine interface device, characterized in that the first human-machine interface device is constructed to send the driving state of the automated driving to one of the control devices and / or to the second human-machine interface device. The first and / or second control device and / or the first and / or second human-machine interface device are configured to compare the driving status respectively sent by the control device to the human-machine interface device with the driving status respectively sent by the human-machine interface device.

[0008] The advantage is that the actual driving state of the motor vehicle can usually be informed to the driver particularly reliably (in addition, this is done in the following way: inconsistent states can be detected and resolved). In particular, typically, not both man-machine interface devices have to have a particularly high reliability or ASIL level (Automotive Safety Integrity Level). It is also possible that, usually, none of the man-machine interface devices has a particularly high reliability or ASIL level (Automotive Safety Integrity Level). Typically, the control device already has a very high reliability or ASIL level, while the man-machine interface device should or can be constructed as high-performance and at the same time inexpensively as possible. Therefore, in particular, the second information device or the second man-machine interface device can usually be constructed in a technically simple and inexpensive manner. The information device usually ensures that the driver is informed of the accurate driving state (audibly and / or visually and / or tactilely). This usually improves safety.

[0009] According to a second aspect of the present invention, a method for informing a driver of a driving status of a motor vehicle that can be driven automatically is proposed, wherein the method comprises the following steps: a first control device sends the driving status to a first human-machine interface device so as to inform the driver of the driving status; the first control device or the second control device sends the driving status to a second human-machine interface device so as to inform the driver of the driving status; the driving status received and / or output by the first human-machine interface device is sent to the first control device and / or to the second control device and / or to the second human-machine interface device; the driving status received and / or output by the second human-machine interface device is sent to the first control device and / or to the second control device and / or to the first human-machine interface device; the driving status received and / or output by the first human-machine interface device is compared with the driving status sent to the first human-machine interface device, and / or the driving status received and / or output by the second human-machine interface device is compared with the driving status sent to the second human-machine interface device.

[0010] An advantage of the method is that the actual driving state of the motor vehicle is usually particularly reliably communicated to the driver (in addition, this is done in the following way: inconsistent states can be detected). In particular, the following information device can be used: in the information device, typically not both human-machine interface devices have a particularly high reliability or ASIL level (Automotive Safety Integrity Level). It is also possible to use the following information device: in the information device, typically, none of the human-machine interface devices has a particularly high reliability or ASIL level (Automotive Safety Integrity Level). Typically, the control device already has a very high reliability or ASIL level, so that the human-machine interface device can be constructed as high-performance and at the same time inexpensively as possible. Therefore, the method can be implemented with the help of particularly inexpensive equipment. The method ensures that the driver is informed of the exact driving state (audibly and / or visually and / or tactilely). This generally improves safety.

[0011] Automated driving may be understood in particular to mean autonomous driving or automatic driving of a motor vehicle, ie the motor vehicle is driven (at least partially) without human intervention or without human control.

[0012] Furthermore, the idea regarding the embodiments of the present invention can be regarded as based on the concepts and knowledge described below.

[0013] The invention is based on the following basic idea: Particularly reliable components of the device (control device and / or human-machine interface device) check whether the human-machine interface device accurately informs the driver of the state of the automated driving. As a result, only some of the components of the device need to be highly reliable. The other components of the device can be designed cost-effectively.

[0014] According to one embodiment of the information device, one of the first control device and / or the second control device and / or the human-machine interface device is constructed so that when the driving state sent to the corresponding human-machine interface device is inconsistent with the driving state received and / or output by the corresponding human-machine interface device, one of the first control device and / or the second control device and / or the human-machine interface device turns off the first human-machine interface device or the second human-machine interface device. It is advantageous in this regard that it is typically possible to reliably prevent the driver from being inconsistently informed of the driving state of the automated driving of the motor vehicle. If the two human-machine interface devices do not respectively have and output accurate driving states, the corresponding human-machine interface device is usually turned off. This usually improves driving safety.

[0015] According to one embodiment of the information device, one of the first and second control devices and / or the human-machine interface device is designed so that: when the first human-machine interface device has received a driving state different from the driving state sent by the first control device to the first human-machine interface device and / or has output a driving state different from the driving state sent by the first control device to the first human-machine interface device, the first control device sends the driving state to the first human-machine interface device again, and / or, when the second human-machine interface device has received a driving state different from the driving state sent to the second human-machine interface device and / or has output a driving state different from the driving state sent to the second human-machine interface device, the first control device or the second control device sends the driving state to the second human-machine interface device again. An advantage of the method is that in the case of an erroneous or unrealistic driving state, an attempt is typically made in the corresponding human-machine interface device to correctly transmit the accurate driving state to the human-machine interface device. Therefore, it can be said that there is usually a second opportunity: the human-machine interface device obtains the accurate driving state of the automated driving of the motor vehicle, i.e., the driving state sent by the first or second control device and informs the driver of the accurate driving state.

[0016] According to one embodiment of the information device, the two machine interface devices are powered independently of each other and / or the two control devices are powered independently of each other. This generally ensures that the driver continues to be informed of the driving state of the automated driving even in the event of a power failure. This generally increases safety.

[0017] According to one embodiment of the method, the first human-machine interface device and / or the second human-machine interface device are switched off when the driving state sent to the corresponding human-machine interface device is inconsistent with the driving state received and / or output by the corresponding human-machine interface device (see above). The method is advantageous in that it typically reliably prevents the driver from being inconsistently informed of the driving state of the automated driving of the motor vehicle. If the two human-machine interface devices do not each have and output the correct driving state, the corresponding human-machine interface device is usually switched off. This usually increases driving safety.

[0018] According to one embodiment of the method, when the driving state sent to the corresponding human-machine interface device is inconsistent with the driving state received and / or output by the corresponding human-machine interface device, the first control device and / or the second control device or one of the human-machine interface devices switches off the first human-machine interface device and / or the second human-machine interface device (see above). In this regard, it is advantageous that the corresponding human-machine interface device is usually switched off by a device with particularly high reliability (high ASIL level). This usually further increases safety.

[0019] According to one embodiment of the method, when the driving state sent to the first human-machine interface device is inconsistent with the driving state received and / or output by the first human-machine interface device, the first control device re-sends the driving state to the first human-machine interface device, and / or, when the driving state sent to the second human-machine interface device is inconsistent with the driving state received and / or output by the second human-machine interface device, the first control device or the second control device re-sends the driving state to the second human-machine interface device. The advantage of the method is that in the case of an erroneous or unrealistic driving state, an attempt is typically made again in the corresponding human-machine interface device to correctly transmit the accurate driving state to the human-machine interface device. Therefore, it can be said that there is usually a second possibility: the human-machine interface device obtains the accurate driving state of the automated driving of the motor vehicle, that is, the driving state sent by the first or second control device, and informs the driver of the accurate driving state.

[0020] According to one embodiment of the method, the two machine interface devices are powered independently of one another and / or the two control devices are powered independently of one another. This generally ensures that the driver continues to be informed of the driving state of the automated driving even in the event of a power failure. This generally increases safety.

[0021] According to one embodiment of the method, the corresponding human-machine interface device transmits the driving state to the driver acoustically, visually and / or tactilely. In this regard, it is advantageous that the driver can be informed of the driving state via a plurality of different channels or senses. Thus, the driver can be reliably informed of the driving state, for example, in the case of a deaf driver.

[0022] Driving states or states of automated driving of a motor vehicle may include, in particular, the following (driving) states:

[0023] 1. Automated driving is unavailable or inactive 2. Automated driving is available but inactive 3. Automated driving is active 4. Automated driving is active and the driver should take over within a short period of time

[0024] 5. Module replacement or driving status change is successfully completed

[0025] It should be noted that here, some of the possible features and advantages of the present invention are described with reference to different embodiments of an information device for informing a driver or a method for informing a driver. Those skilled in the art recognize that these features can be combined, matched or replaced in a suitable manner to obtain other embodiments of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] Next, embodiments of the present invention will be described with reference to the accompanying drawings, wherein neither the drawings nor the description should be construed as limiting the present invention.

[0027] Figure 1 A schematic diagram showing an embodiment of an information device according to the present invention; and

[0028] Figure 2 Show Figure 1 Schematic illustration of a powered part of an information device in FIG. 1 after a partial power interruption.

[0029] The figures are merely schematic and not true to scale. The same reference numerals in the figures denote identical or identically acting features. DETAILED DESCRIPTION

[0030] Figure 1 A schematic illustration of an embodiment of an information device 10 according to the invention is shown.

[0031] The information device 10 is configured to inform the driver of the motor vehicle of the current state or driving state of the motor vehicle that can be driven automatically. The motor vehicle can be driven automatically or autonomously. The motor vehicle can also be controlled by the driver.

[0032] The information device 10 has a human-machine communication unit 200. The human-machine communication unit 200 has an input device 203 and two human-machine interface devices 201, 202. The driver or user of the motor vehicle can input information or data into the information device 10 by means of the input device 203. For example, the following wish can be input into the input device 203: the control devices 101, 102 of the information device 10 should take over the control or driving of the motor vehicle.

[0033] In addition, the information device 10 has two human-machine interface devices 201, 202. The human-machine interface devices 201, 202 can inform the driver of the current driving state or the transition from one driving state to another driving state audibly and / or visually and / or tactilely. For example, the human-machine interface devices 201, 202 can issue announcements that the driver detects acoustically. Alternatively or additionally, the driving state can be displayed to the driver on a head-up display, on a dashboard, or at another location. Each of the human-machine interface devices 201, 202 can include a head unit and an instrument cluster and a head-up display and an audio system. The tactile signals of the human-machine interface devices 201, 202 can be, for example, uneven deceleration of the motor vehicle by the vehicle brakes and / or sudden tightening of the seat belt and / or movement of the seat.

[0034] The information device 10 has a control device unit 100, which has a first control device 101 and a second control device 102. The control devices 101, 102 control the automated driving or autonomous driving of the motor vehicle. Therefore, the monitoring function and the control function of the human-machine interface device 201, 202 can be integrated in the control devices 101, 102 for controlling the motor vehicle.

[0035] The first control device 101 and the second control device 102 are connected by any communication method, for example, by a direct connection line 303. Through the connection line 303, states or driving states are exchanged between the first control device 101 and the second control device 102. The control devices 101 and 102 have a high reliability (Automotive Safety Integrity Level, Automotive Safety Integrity Level; ASIL). For example, the control devices 101 and 102 have ASIL C or ASIL D respectively.

[0036] The first control device 101 is connected to the first human-machine interface device 201 via a connecting line 301. The second control device 102 is connected to the second human-machine interface device 202 via a connecting line 304. This is an exemplary topology. It is also possible that the first control device 101 is directly connected to the second human-machine interface device 202. The input device 203 is connected to the first control device 101 via a connecting line 302. It is also possible that the input device 203 is connected to the second control device 102 (or is connected to both control devices 101, 102 at the same time).

[0037] The first human-machine interface device 201, the first control device 101, and the input device 203 are supplied with current and voltage by the first power supply device 501. The second human-machine interface device 202 and the second control device 102 are supplied with current and voltage by the second power supply device 502. The first power supply device 501 is independent of the second power supply device 502, so that when the first power supply device 501 or the second power supply device 502 fails, the control devices 101, 102, and the human-machine interface devices 201, 202 continue to be supplied with current and voltage and inform the driver of the state of automated driving.

[0038] The first control device 101 sends the driving state of automated driving or autonomous driving to the first human-machine interface device 201. The second control device 102 sends the driving state of automated driving or autonomous driving to the second human-machine interface device 202 (see above). Each of the human-machine interface devices 201, 202 sends the received state back to the following corresponding control device 101, 102 - the driving state has been received from the corresponding control device: the corresponding human-machine interface device 201, 202 outputs the received state to the driver. Because the human-machine interface devices 201, 202 usually do not have very high reliability and / or are constructed inexpensively, the received or output driving state may be different from the driving state sent by the corresponding control devices 101, 102. The control devices 101, 102 receive the driving states sent back by the human-machine interface devices 201, 202, respectively. The first control device 101 compares the driving state sent to the first human-machine interface device 201 with the driving state sent back by the first human-machine interface device 201 (that is, with the driving state that has been received by the corresponding control device 101, 102 from the corresponding human-machine interface device 201, 202 and / or with the driving state that has been output by the corresponding human-machine interface device 201, 202). The second control device 102 compares the driving state sent to the second human-machine interface device 202 with the driving state sent back by the second human-machine interface device 202.

[0039] If there is a discrepancy between the received or outputted and transmitted driving states in human-machine interface devices 201 , 202 , there are in particular two possibilities, wherein the second possibility can be carried out alone or in addition to and after the first possibility.

[0040] A first possibility is that the driving state is retransmitted by the corresponding control device 101, 102 to the corresponding human-machine interface device 201, 202 in which there is a difference between the transmitted and received driving state. Then, the corresponding control device 101, 102 can perform another retransmission or check whether the accurate driving state is correctly received or displayed in the corresponding human-machine interface device 201, 202.

[0041] A second possibility is to switch off a human-machine interface device 201, 202 in which there is a difference between the transmitted and received driving states. The switch-off (e.g., a switch-off request) can be performed by the corresponding control device 101, 102 or a control device 101, 102 assigned to the human-machine interface device 201, 202. In this way, it is possible to prevent inconsistent information about the driving state of the motor vehicle from being transmitted to the driver.

[0042] It is also conceivable that the function of checking and comparing the transmitted driving state with the received driving state is assumed by one of the two human-machine interface devices 201, 202 (provided that it has the corresponding ASIL capability). In this case, the received driving state is not sent back by the human-machine interface devices 201, 202 to the control devices 101, 102 respectively, but one of the human-machine interface devices 201, 202 (the one with low reliability or a lower ASIL level) sends the received driving state to the other human-machine interface device 201, 202, which has a high or higher reliability. The human-machine interface devices 201, 202 now perform the above-mentioned comparison. In the event of a deviation between the received and transmitted driving states, the human-machine interface devices 201, 202 cause the driving state to be retransmitted by the corresponding control device 101, 102 to the other human-machine interface device 201, 202 or turn off the other human-machine interface device 201, 202 or cause this to occur. The human-machine interface device 201, 202 that performs the described comparison can also perform a comparison between the driving state sent by the respective control device 101, 102 and the driving state displayed by the human-machine interface device 201, 202. In this case, the human-machine interface device 201, 202 can, so to speak, self-check, which, however, is not a problem since the human-machine interface device 201, 202 has a very high reliability.

[0043] First human-machine interface device 201 and / or second human-machine interface device 202 may be part of an entertainment system and / or an infotainment system and / or a navigation system of the motor vehicle.

[0044] One of the two control devices 101, 102 can be dominant relative to the other control device 101, 102. This means that, for example, in the event of a deviation in the driving states present in the respective control devices 101, 102, which are exchanged via connecting line 303, first control device 101 can overrule second control device 102, i.e. second control device 102 takes over the driving state in which the motor vehicle is located according to first control device 101. It is also possible for second control device 102 to be the more dominant control device.

[0045] Figure 2 Show Figure 1 FIG. 1 is a schematic illustration of a powered part of an information device 10 after a partial power interruption.

[0046] In the event of a failure of power supply devices 501, 502 (here, for example, first power supply device 501), one of control devices 101, 102 (here, second control device 102) and one of human-machine interface devices 201, 202 (here, second human-machine interface device 202) are supplied with current and voltage. This ensures that the driver is always reliably informed of the driving state of the motor vehicle.

[0047] Therefore, the information device 10 according to the present invention or the method according to the present invention produces advantages in at least the following three aspects.

[0048] Safety aspect: Monitoring and control functions can be integrated in the safety-critical control units 101 , 102 that are required for a truly autonomous driving function.

[0049] This does not incur any additional hardware costs, but significantly improves the safety and reliability of the entire system.

[0050] Functional aspects: Possible inconsistencies / conflicts between different human-machine interface devices 201 , 202 are detected and resolved with high safety and reliability by corresponding system reactions.

[0051] Components / costs: Conventional HMI systems (which consist of, for example, a head unit and instrument cluster, optical head-up display) do not have to be equipped with additional functions and capabilities that are most important for safety. This results in cost advantages due to reusability and modularity.

[0052] A motor vehicle having such an information device 10 is also disclosed.

[0053] Therefore, not only can errors in the transmission of driving status between the control unit 101, 201 and the human-machine interface device 201, 202 be identified and corrected, but also errors in outputting driving status that is correctly received by the human-machine interface device 201, 202 but is impractical or erroneously output to the driver can be identified and corrected.

[0054] Finally, it is pointed out that concepts such as "having", "comprising" etc. do not exclude other elements or steps, and concepts such as "a" or "an" do not exclude a plurality. Reference signs in the claims should not be considered as limitations.

Claims

1. An information device (10) for informing a driver of a driving state of a motor vehicle capable of automated driving, wherein: The information device (10) comprises: a first control device (101) for controlling the automated driving of the motor vehicle and a second control device (102) for controlling the automated driving of the motor vehicle, a first human-machine interface device (201) for notifying the driver of the driving state of the automated driving of the motor vehicle, and a second human-machine interface device (202) for notifying the driver of the driving state of the automated driving of the motor vehicle, The first control device (101) is configured to send the driving state of the automated driving to the first human-machine interface device (201), and the second control device (102) is configured to send the driving state of the automated driving to the second human-machine interface device (202). It is characterized in that The first human-machine interface device (201) is configured to send a driving state of the automated driving received by the first human-machine interface device (201) and / or a driving state output by the first human-machine interface device (201) to one of the control devices (101, 102) and / or to the second human-machine interface device (202), The second human-machine interface device (202) is configured to send the driving state of the automated driving received by the second human-machine interface device (202) and / or the driving state output by the second human-machine interface device (202) to a control device identical to the following control devices (101, 102) and / or to the first human-machine interface device (201): the first human-machine interface device (201) sends the received driving state and / or the driving state output by the first human-machine interface device (201) to the control device, wherein the first and / or the second control device (102) and / or the first and / or the second human-machine interface device (202) are configured to compare a driving state sent by the control device (101, 102) to the human-machine interface device (201, 202) with a driving state sent by the human-machine interface device (201, 202), Wherein, one of the first (101) and the second (102) control device and / or the human-machine interface device (201, 202) is configured such that: When the first human-machine interface device (201) has received a driving state different from the driving state that the first control device (101) has sent to the first human-machine interface device (201) and / or has output a driving state different from the driving state that the first control device (101) has sent to the first human-machine interface device (201), the first control device (101) re-sends the driving state to the first human-machine interface device (201), and / or, When the second human-machine interface device (202) has received a driving state different from the driving state that has been sent to the second human-machine interface device (202) and / or has output a driving state different from the driving state that has been sent to the second human-machine interface device (202), the first control device (101) or the second control device (102) re-sends the driving state to the second human-machine interface device (202).

2. The information device (10) according to claim 1, wherein: The first control device (101) and / or the second control device (102) and / or one of the human-machine interface devices (201, 202) are constructed so that when the driving state sent to the corresponding human-machine interface device (201, 202) is inconsistent with the driving state received and / or output by the corresponding human-machine interface device (201, 202), the first control device (101) and / or the second control device (102) and / or one of the human-machine interface devices (201, 202) shuts down the first human-machine interface device (201) or the second human-machine interface device (202).

3. The information device (10) according to any one of the preceding claims, wherein: The two human-machine interface devices (201, 202) are powered independently of each other, and / or the two control devices (102) are powered independently of each other.

4. A method for informing a driver of a driving state of a motor vehicle capable of automated driving, wherein: The method comprises the following steps: The first control device (101) sends the driving state to the first human-machine interface device (201) so as to inform the driver of the driving state; The first control device (101) or the second control device (102) sends the driving status to a second human-machine interface device (202) so as to inform the driver of the driving status; Sending the driving state received and / or output by the first human-machine interface device (201) to the first control device (101) and / or to the second control device (102) and / or to the second human-machine interface device (202); Sending the driving state received and / or output by the second human-machine interface device (202) to the first control device (101) and / or to the second control device (102) and / or to the first human-machine interface device (201); comparing the driving state received and / or output by the first human-machine interface device (201) with the driving state sent to the first human-machine interface device (201), and / or, comparing the driving state received and / or output by the second human-machine interface device (202) with the driving state sent to the second human-machine interface device (202), When the driving state sent to the first human-machine interface device (201) is inconsistent with the driving state received and / or output by the first human-machine interface device (201), the first control device (101) re-sends the driving state to the first human-machine interface device (201). and / or, When the driving status sent to the second human-machine interface device (202) is inconsistent with the driving status received and / or output by the second human-machine interface device (202), the driving status is re-sent to the second human-machine interface device (202) by the first control device (101) or by the second control device (102).

5. The method according to claim 4, wherein: When the driving state sent to the corresponding human-machine interface device (201, 202) is inconsistent with the driving state received and / or output through the corresponding human-machine interface device (201, 202), the first human-machine interface device (201) and / or the second human-machine interface device (202) are turned off.

6. The method according to claim 5, wherein: When the driving status sent to the corresponding human-machine interface device (201, 202) is inconsistent with the driving status received and / or output through the corresponding human-machine interface device (201, 202), the first control device (101) and / or the second control device (102) or one of the human-machine interface devices (201, 202) turns off the first human-machine interface device (201) and / or the second human-machine interface device (202).

7. The method according to any one of claims 4 to 6, wherein: The two human-machine interface devices (201, 202) are powered independently of each other, and / or the two control devices (101, 102) are powered independently of each other.

8. The method according to any one of claims 4 to 6, wherein: The corresponding human-machine interface device (201, 202) transmits the driving status to the driver auditorily, visually and / or tactilely.

Images