A safety verification method and system for the display function of an intelligent cockpit

Abstract

The present invention provides a safety verification method and system for the display function of an intelligent cockpit, which relates to the field of in-vehicle information technology. The safety verification method mainly includes: the controller generates a fault flag image display command and an identifier corresponding to the fault flag image display command according to the fault flag signal, and sends them to the display control unit together; the display control unit controls the display to display the corresponding fault flag image according to the fault flag image display command, generates the actual verification value of the displayed fault flag image, and sends the identifier and the actual verification value back to the controller together; the controller determines whether the actual verification value is the same as the reference verification value of the fault flag image to be displayed by the fault flag image display command according to the received identifier; if not, a prompt message of the intelligent cockpit display function failure is output. The present invention uses the identifier corresponding to the fault flag image display command, avoids the problem of misjudgment during safety verification, and improves driving safety.

Description

Technical Field

[0001] The present invention relates to the field of vehicle information technology, and particularly to a safety verification method and system for the display function of an intelligent cockpit. Background Art

[0002] In recent years, with the improvement of people's living standards and the rapid development of the vehicle industry, the electronic and electrical architecture of vehicles has become increasingly complex. To avoid accidents caused by errors in each electronic control unit under the design of a complex electronic and electrical architecture, an intelligent cockpit that can respectively and real-time display various fault flags of each electronic control unit that may go wrong on a display has gradually become an important part of intelligent vehicles. By using this intelligent cockpit, when each electronic control unit in the vehicle goes wrong, the corresponding fault flag can be displayed through the display to timely notify the driver, thereby improving driving safety. At the same time, the current intelligent cockpit also has a verification system set up to avoid unnecessary maintenance costs caused by incorrect display of fault flags for corresponding components. After displaying any fault flag image, the controller uses the actual verification value of each frame of the fault flag image generated by the display control unit and the expected correct reference image verification value to verify the correctness of the displayed fault lamp flag image.

[0003] However, during the verification process of the current intelligent cockpit, when multiple fault flag lighting signals are simultaneously triggered to the controller in the whole vehicle, the display control unit will generate multiple image verification values and send them back to the controller together through SPI. At the same time, since the display control unit calculates the image verification value by hardware and cannot send it to the controller in sequence, the controller may randomly compare multiple image verification values with the local reference verification value, resulting in the problem of misjudgment when the controller compares the received image verification value with the local stored reference verification value, thus leading to problems of low driving safety and high unnecessary maintenance costs due to low verification accuracy. Summary of the Invention

[0004] In view of the above problems, the present invention provides a safety verification method and system for the display function of an intelligent cockpit.

[0005] An object of the present invention is to provide a safety verification method for the display function of an intelligent cockpit to accurately perform safety verification on the correctness of the displayed fault flag image, thereby avoiding unnecessary maintenance costs while ensuring driving safety.

[0006] A further object of the present invention is to use identifiers of multiple fault types to ensure a one-to-one correspondence between the identifier and the fault flag image display command, thereby further ensuring the accuracy of safety verification.

[0007] In particular, according to one aspect of the embodiments of the present invention, a safety verification method for the display function of an intelligent cockpit is provided, including:

[0008] The controller generates a fault flag image display command and an identifier corresponding to the fault flag image display command according to the fault flag signal, and sends the fault flag image display command and the identifier to the display control unit together;

[0009] The display control unit controls the display to display the corresponding fault flag image according to the fault flag image display command, generates the actual verification value of the displayed fault flag image, and sends the identifier and the actual verification value to the controller;

[0010] The controller determines whether the actual verification value is the same as the reference verification value of the fault flag image to be displayed by the fault flag image display command according to the received identifier;

[0011] If not, a prompt message for the fault of the intelligent cockpit display function is output.

[0012] Furthermore, the identifier includes fault flag type information indicating the fault type of the fault flag image display command and an ID value, and the ID values in the identifiers of each fault type are cyclically incremented within a preset range respectively.

[0013] Furthermore, after the controller generates a fault flag image display command and an identifier corresponding to the fault flag image display command according to the fault flag signal, the safety verification method further includes:

[0014] Check whether an identifier identical to the newly generated identifier is already stored locally;

[0015] If so, store the newly generated identifier and the corresponding fault flag image display command in a way that overwrites the stored identical identifier and its corresponding fault flag image display command locally;

[0016] If not, directly store the newly generated identifier and the corresponding fault flag image display command locally.

[0017] Furthermore, the controller stores in advance the fault flag image display command and the reference verification value of the fault flag image to be displayed by the fault flag image display command in a corresponding relationship; and

[0018] The controller determines whether the actual verification value is the same as the reference verification value of the fault flag image to be displayed by the fault flag image display command according to the received identifier, including:

[0019] Search for an identifier matching the received identifier stored locally, and obtain the fault flag image display command associated and stored with the matching identifier from local;

[0020] Obtain the corresponding reference verification value according to the fault flag image display command stored in association;

[0021] Determine whether the actual verification value is the same as the reference verification value.

[0022] Further, before the controller generates an identifier corresponding to the fault flag image display command, the security verification method further includes:

[0023] After generating the fault flag image display command, determine the fault type of the fault flag image display command as the target fault type;

[0024] Determine whether the fault flag image display command is the same as the previous fault flag image display command of the target fault type;

[0025] The steps for the controller to generate an identifier corresponding to the fault flag image display command include:

[0026] If the fault flag image display command is the same as the previous fault flag image display command of the target fault type, read the previous identifier of the target fault type as the identifier corresponding to the fault flag image display command, where the previous identifier refers to the identifier corresponding to the previous fault flag image display command of the target fault type;

[0027] If the fault flag image display command is not the same as the previous fault flag image display command of the target fault type, the controller generates an identifier corresponding to the fault flag image display command by cyclically accumulating the ID value within a preset range on the basis of the previous identifier.

[0028] Further, the steps for the controller to generate an identifier corresponding to the fault flag image display command by cyclically accumulating the ID value within a preset range on the basis of the previous identifier include:

[0029] The controller reads the previous identifier and determines whether the ID value of the previous identifier reaches the upper limit of the preset range;

[0030] If it reaches, set the ID value in the identifier corresponding to the generated fault flag image display command to the lower limit of the preset range;

[0031] If it does not reach, add the preset step size to the ID value of the previous identifier to obtain the ID value in the identifier corresponding to the fault flag image display command.

[0032] According to another aspect of the embodiments of the present invention, there is also provided a security verification system for the intelligent cockpit display function, including a controller, a display control unit, and a display that are connected to each other; wherein

[0033] The controller is configured to generate a fault flag image display command and an identifier corresponding to the fault flag image display command according to a fault flag signal, and send the fault flag image display command and the identifier to a display control unit together;

[0034] The display control unit is configured to control a display to display a corresponding fault flag image according to the fault flag image display command, generate an actual check value of the displayed fault flag image, and send the identifier and the actual check value to the controller;

[0035] The controller is further configured to determine whether the actual check value is the same as a reference check value of the fault flag image to be displayed by the fault flag image display command according to the received identifier. If not, a prompt message indicating a fault in the intelligent cockpit display function is output.

[0036] Further, the identifier includes fault flag type information indicating the fault type of the fault flag image display command and an ID value, and the ID values in the identifiers of each fault type are cyclically incremented within a preset range respectively.

[0037] Further, after generating a fault flag image display command and an identifier corresponding to the fault flag image display command according to the fault flag signal, the controller is further configured to check whether an identifier identical to the newly generated identifier is already stored locally. If so, the newly generated identifier and the corresponding fault flag image display command are stored locally in a manner that overwrites the stored identical identifier and its corresponding fault flag image display command. If not, the newly generated identifier and the corresponding fault flag image display command are directly stored locally.

[0038] Further, the controller stores in advance a corresponding relationship between the fault flag image display command and the reference check value of the fault flag image to be displayed by the fault flag image display command; and

[0039] The controller is further configured to search for an identifier matching the received identifier stored locally, obtain the fault flag image display command associated with the matching identifier from local storage, obtain the corresponding reference check value according to the associated fault flag image display command, and determine whether the actual check value and the reference check value are the same.

[0040] The safety verification method for the intelligent cockpit display function of the present invention generates an identifier corresponding to the fault flag image display command when generating the fault flag image display command according to the fault flag signal, establishing a correspondence between the identifier and the fault flag image display command. By sending the fault flag image display command and the corresponding identifier to the display control unit together, the display control unit controls the display to display the corresponding fault flag image according to the fault flag image display command, and at the same time generates the actual verification value of the displayed fault flag image, and sends the identifier and the actual verification value back to the controller together. The controller first obtains the reference verification value of the fault flag image to be displayed corresponding to the fault flag image display command according to the identifier, and then judges whether the actual verification value is the same as the reference verification value. By using the correspondence between the identifier and the fault flag image display command and the correspondence between the fault flag image display command and the reference verification value, the safety verification of the correctness of the displayed fault flag image can be accurately carried out, ensuring that only correct display function fault information is output. The driver obtains correct display function fault information, avoiding potential safety hazards and unnecessary maintenance costs caused by misjudgment, thus improving driving safety while avoiding unnecessary maintenance costs.

[0041] Further, the identifier of the present invention includes fault flag type information indicating the fault type of the fault flag image display command and an ID value, and the ID values in the identifiers of each fault type are cyclically incremented within a preset range, making the identifiers corresponding to the fault flag image display commands of different fault types independent of each other and not shareable, and generating identifiers for the fault flag image display commands of the same fault type in an orderly manner, further ensuring the one-to-one correspondence between the identifier and the fault flag image display command, to assist the safety verification process when displaying fault flag images of multiple fault types, thereby further improving the accuracy of safety verification.

[0042] The above description is only an overview of the technical solution of the present invention. In order to be able to understand the technical means of the present invention more clearly, it can be implemented according to the content of the specification. And in order to make the above and other objects, features and advantages of the present invention more obvious and understandable, the following specifically illustrates the embodiments of the present invention.

[0043] According to the following detailed description of the specific embodiments of the present invention in conjunction with the drawings, those skilled in the art will understand the above and other objects, advantages and features of the present invention more clearly. Brief Description of the Drawings

[0044] Various other advantages and benefits will become apparent to those of ordinary skill in the art by reading the following detailed description of the preferred embodiments. The drawings are only for the purpose of illustrating the preferred embodiments and are not considered to be a limitation of the present invention. Moreover, throughout the drawings, the same reference numerals are used to denote the same components. In the drawings:

[0045] Figure 1 A schematic structural diagram of a safety verification system for an intelligent cockpit display function according to an embodiment of the present invention is shown;

[0046] Figure 2 A schematic flowchart of a safety verification method for an intelligent cockpit display function according to an embodiment of the present invention is shown;

[0047] Figure 3 A schematic flowchart of a safety verification method for an intelligent cockpit display function according to a specific embodiment of the present invention is shown;

[0048] Figure 4 A schematic flowchart of circularly accumulating an ID value within a preset range in a safety verification method for an intelligent cockpit display function according to a specific embodiment of the present invention is shown. Detailed Embodiments

[0049] Hereinafter, exemplary embodiments of the present invention will be described in more detail with reference to the drawings. Although the exemplary embodiments of the present invention are shown in the drawings, it should be understood that the present invention can be implemented in various forms and should not be limited by the embodiments set forth herein. On the contrary, these embodiments are provided so that the present disclosure can be more thoroughly understood and the scope of the present invention can be fully conveyed to those skilled in the art.

[0050] To solve the above technical problems, an embodiment of the present invention proposes a safety verification system for an intelligent cockpit display function. Figure 1 A schematic structural diagram of a safety verification system 100 for an intelligent cockpit display function according to an embodiment of the present invention is shown. Refer to Figure 1 , the safety verification system 100 may at least include: a controller 200, a display control unit 300, and a display 400 that are connected to each other.

[0051] The controller 200 is configured to generate a fault flag image display command and an identifier corresponding to the fault flag image display command according to a fault flag signal, and send the fault flag image display command and the identifier to the display control unit 300 together, where the identifier records the sending pointer of the current fault flag image display command sent to the display control unit 300. The display control unit 300 is configured to control the display 400 to display a corresponding fault flag image according to the received fault flag image display command, generate an actual check value of the displayed fault flag image at the same time, and send the identifier and the actual check value to the controller 200 together, so that the controller 200 can use the received identifier to find the corresponding fault flag image display command. The controller 200 is further configured to determine whether the actual check value is the same as the reference check value of the fault flag image pre-displayed by the fault flag image display command according to the received identifier. If not, a prompt message for the failure of the intelligent cockpit display function is output to prompt the error in the fault flag image displayed on the display, avoiding unnecessary maintenance costs caused by the user repairing the corresponding error problem according to the misjudged fault flag image.

[0052] In some specific embodiments, the actual check value is an image check value calculated by the display control unit 300 according to the fault flag image displayed on the display. For example, the display control unit 300 performs CRC check on each frame of the fault flag image to obtain the corresponding CRC check value. The reference check value is an image check value stored locally in advance by the controller 200 and having a one-to-one correspondence with the fault flag image to be displayed by the fault flag image display command. For example, the controller 200 pre-performs CRC check on the fault flag image to be displayed by each kind of fault flag image display command, calculates and generates the corresponding CRC check value, and stores the calculated corresponding CRC check value and this kind of fault flag image display command in a corresponding relationship locally. In this case, when the controller 200 receives the sent-back identifier and the actual check value, it can first find the fault flag image display command corresponding to the identifier locally according to the identifier, then obtain the corresponding reference check value according to the corresponding fault flag image display command, and finally determine whether the actual check value and the reference check value are the same, so as to complete the verification of the correctness of the displayed fault flag image.

[0053] In some specific embodiments, the controller 200 in the security verification system 100 of the present invention may be a Micro Controller Unit (MCU), and the display control unit 300 may be a System on Chip (SOC). The MCU is connected to the SOC through a Serial Peripheral Interface (SPI) and communicates according to the SPI protocol. During the security verification process, the MCU sends the generated fault flag image display command and the corresponding identifier to the SOC through the SPI interface according to the SPI protocol. The SOC then sends the identifier and the generated actual verification value back to the MCU through the SPI interface according to the SPI protocol. For example, the MCU encapsulates the generated fault flag image display command and the corresponding identifier according to the SPI protocol and periodically sends them to the SOC. The SOC first unpacks them to obtain the fault flag image display command and the corresponding identifier, then controls the display 400 to display the corresponding fault flag image according to the received fault flag image display command, generates the actual verification value of the displayed fault flag image at the same time, and encapsulates the identifier and the generated actual verification value according to the SPI protocol and periodically sends them back to the MCU in the form of data packets.

[0054] In some specific embodiments, the controller 200 is further configured to, after generating the fault flag image display command and the corresponding identifier, package the generated fault flag image display command and the corresponding identifier in a predetermined data frame format according to the SPI protocol, and periodically send the packaged fault flag image display command and the corresponding identifier to the display control unit 300 one by one in the form of data packets. Further, the display control unit 300 is further configured to, after receiving the data packet of the fault flag image display command and the corresponding identifier sent by the controller 200, unpack it to obtain the fault flag image display command and the corresponding identifier, then generate the actual verification value according to the fault flag image indicated by the fault flag image display command, package the identifier and the generated actual verification value in a predetermined data frame format according to the SPI protocol, and send the packaged identifier and actual verification value to the controller 200 one by one in the form of data packets.

[0055] In some embodiments, such as Figure 1As shown, the controller 200 in the security verification system 100 of the present invention is also connected to the vehicle bus 500. Under the vehicle electronic and electrical architecture design, each electronic control unit will generate corresponding fault flag signals in real time and send them to the controller 200 through the vehicle bus 500. The controller 200 in the security verification system 100 of the present invention is also configured to, after power-on, receive the fault flag signals sent by the vehicle bus 500 in real time and generate a fault flag image display command in real time according to the received fault flag signals. For example, when there is a fault in the Antilock Brake System (ABS) in the vehicle that affects the normal operation of the system, an ABS warning light lighting signal is generated. The controller 200 is configured to calculate and generate an ABS warning light lighting command PA_ABS = On indicating that the ABS warning light is to be lit according to the received ABS warning light lighting signal. When there is a fault in the Electric Power Steering (EPS) in the vehicle, an EPS warning light lighting signal is generated. The controller 200 is configured to calculate and generate an EPS warning light lighting command PA_EPS = On indicating that the EPS warning light is to be lit according to the received EPS warning light lighting signal.

[0056] In some embodiments, the identifier in the security verification system 100 of the present invention includes fault flag type information indicating the fault type of the fault flag image display command and an ID value. Still taking the Antilock Brake System in the vehicle as an example, the controller 200 is configured to generate a corresponding identifier as ABS_ID when generating a fault flag image display command with a fault type of Antilock Brake System fault. Among them, ABS in the identifier is the fault flag type information in the identifier. Those skilled in the art should understand that the fault type of the fault flag signal and the fault type of the fault flag image display command generated according to the fault flag signal are the same. In this specific embodiment, the fault flag type information in the identifier indicates the fault type of the fault flag image display command. In other specific embodiments, the fault flag type information in the identifier can also be directly determined according to the fault type in the fault flag signal. The present invention does not limit this, as long as the identifiers corresponding to the fault flag image display commands of different fault types can be independent of each other.

[0057] In this embodiment, the ID values in the identifier of each fault type are cyclically incremented within a preset range respectively, so as to orderly generate corresponding identifiers for the fault flag image display commands of each fault type. It should be noted that the preset range refers to the sequence range preset by the security verification system 100 of the present invention according to the upper limit of the accumulation times of the ID values within a cycle period. Being within the preset range means that the generated ID values never exceed the upper limit of the sequence range and are not lower than the lower limit of the sequence range. In a specific embodiment, the ID value of the identifier is the non-header data of the SPI payload data segment, with a length of 2 bytes. Then the preset range can be 0x00 to 0xFF. At this time, the ID values in the identifier of each fault type are cyclically incremented within 0x00 to 0xFF respectively. For example, the identifier ABS ID generated for the fault flag image display command of the fault type of anti-lock braking system fault is cyclically incremented within 0x00 to 0xFF, and the identifier EPS ID generated for the fault flag image display command of the fault type of electric power steering system fault is also cyclically incremented within 0x00 to 0xFF, realizing that the fault flag image display commands for each fault type can independently and orderly generate corresponding identifiers.

[0058] In some embodiments, the controller 200 of the present invention is further configured to, after generating a fault flag image display command and an identifier corresponding to the fault flag image display command according to the fault flag signal, check whether an identifier identical to the newly generated identifier is already stored locally. If so, store the newly generated identifier and the corresponding fault flag image display command in a way that overwrites the already stored identical identifier and its corresponding fault flag image display command locally. If not, directly store the newly generated identifier and the corresponding fault flag image display command locally, so as to ensure that within the working duration of the controller 200, at most one set of the identifier and the corresponding fault flag image display command is stored locally for the same identifier in the controller 200. That is to say, when the controller 200 receives an identifier and an actual verification value data packet sent back by the display control unit 300, the controller 200 can only find one identifier identical to the identifier locally according to the identifier. Correspondingly, only one fault flag image display command corresponding to the same identifier can be found, so that by using the corresponding relationship between the fault flag image display command and the reference verification value, only one accurate reference verification value can be obtained, thus realizing the comparison between the correct reference verification value and the actual verification value and avoiding misjudgment.

[0059] In addition, the controller 200 of the present invention can also be configured to store data using a static memory RAM. After the controller 200 generates a fault flag image display command and an identifier corresponding to the fault flag image display command according to the fault flag signal, the newly generated fault flag image display command and identifier are directly stored in the static memory RAM. If an identifier identical to the newly generated identifier was previously stored in the static memory RAM, then the identical identifier and the corresponding fault flag image display command directly disappear from the static memory RAM, so as to ensure that when the controller 200 receives an identifier and an actual verification value data packet sent back by the display control unit 300, the controller 200 can only find one fault flag image display command corresponding to the identifier in the static memory RAM according to the identifier.

[0060] In this embodiment, the controller 200 of the present invention is further configured to, after generating the fault flag image display command and before generating an identifier corresponding to the fault flag image display command, first determine the fault type of the fault flag image display command as the target fault type, and then determine whether the fault flag image display command is the same as the previous fault flag image display command of the target fault type. On this basis, the controller 200 is further configured that if the fault flag image display command is the same as the previous fault flag image display command of the target fault type, then read the previous identifier of the target fault type as the identifier corresponding to the fault flag image display command, where the previous identifier refers to the identifier corresponding to the previous fault flag image display command of the target fault type; if the fault flag image display command is not the same as the previous fault flag image display command of the target fault type, then read the previous identifier, determine whether the ID value of the previous identifier reaches the upper limit of the preset range, if it reaches, then set the ID value in the identifier corresponding to the generated fault flag image display command to the lower limit of the preset range, if it does not reach, then add a preset step size to the ID value of the previous identifier to obtain the ID value in the identifier corresponding to the fault flag image display command.

[0061] The safety verification system 100 of the present invention effectively ensures the one-to-one correspondence between the identifier and the fault flag image even when multiple faults occur in the vehicle by independently accumulating and counting the identifiers corresponding to the fault flag image display commands of different fault types, and by making the identifiers corresponding to the fault flag image display commands of the same fault type cyclically accumulate within a preset range when the fault flag image display commands of the same fault type change, so as to assist the safety verification process when displaying fault flag images of multiple fault types, thereby further improving the accuracy of the safety verification.

[0062] In some embodiments, in the controller 200 of the present invention, a fault flag image display command and a reference check value of the fault flag image to be displayed by the fault flag image display command are stored in advance in a corresponding relationship. The controller 200 is further configured to search for an identifier that matches the received identifier stored locally, obtain the fault flag image display command associated with the matching identifier stored locally, obtain the corresponding reference check value according to the fault flag image display command associated with the storage, and determine whether the actual check value is the same as the reference check value. By pre - establishing the corresponding relationship between the fault flag image display command and the reference check value of the fault flag image to be displayed by the fault flag image display command, and then establishing the corresponding relationship between the fault flag image display command and the identifier, the present invention realizes that when the controller 200 receives the actual check value and the identifier sent together, it can find the accurate reference check value according to the identifier, so as to compare it with the actual check value, further ensuring the accuracy of the security check.

[0063] Based on the same inventive concept, the present invention also provides a security check method for the intelligent cockpit display function. Figure 2 The flow diagram of the security check method for the intelligent cockpit display function according to an embodiment of the present invention is shown. Refer to Figure 2 This security check method at least includes the following steps S202 to step S208.

[0064] In step S202, the controller generates a fault flag image display command and an identifier corresponding to the fault flag image display command according to the fault flag signal, and sends the fault flag image display command and the identifier to the display control unit together. It should be noted that the identifier records the sending pointer of the current fault flag image display command sent to the display control unit 300.

[0065] In step S204, the display control unit controls the display to display the corresponding fault flag image according to the fault flag image display command, generates the actual check value of the displayed fault flag image, and sends the identifier and the actual check value to the controller. It should be noted that the display control unit does not process the identifier, but directly sends the identifier and the generated actual check value back to the controller. The purpose is to enable the controller 200 to first use the received identifier to find the corresponding fault flag image display command, and then further find the corresponding reference check value, so as to complete the check of the displayed fault flag image.

[0066] In step S206, the controller determines whether the actual check value is the same as the reference check value of the fault flag image to be displayed by the fault flag image display command according to the received identifier. If the actual check value is different from the reference check value of the fault flag image to be displayed by the fault flag image display command, step S208 is executed.

[0067] Step S208: Output a prompt message indicating a fault in the intelligent cockpit display function.

[0068] Specifically, the actual verification value in step S204 is an image verification value calculated by the display control unit based on the fault flag image displayed on the display. For example, the display control unit performs CRC verification on each frame of the fault flag image to obtain the corresponding CRC verification value. The reference verification value in step S206 is an image verification value pre-stored locally in the controller that has a one-to-one correspondence with the fault flag image to be displayed by the fault flag image display command. For example, the controller pre-performs CRC verification on the fault flag image to be displayed by each fault flag image display command, calculates and generates the corresponding CRC verification value, and stores the calculated corresponding CRC verification value and the corresponding fault flag image display command in a corresponding relationship locally. In this case, when the controller receives the sent-back identifier and the actual verification value, it can first find the fault flag image display command corresponding to the identifier locally according to the identifier, then obtain the corresponding reference verification value according to the corresponding fault flag image display command, and finally determine whether the actual verification value and the reference verification value are the same, thereby completing the verification of the correctness of the displayed fault flag image.

[0069] Using the safety verification method for the intelligent cockpit display function of the present invention, by generating an identifier corresponding to the fault flag image display command when generating the fault flag image display command according to the fault flag signal, a corresponding relationship between the identifier and the fault flag image display command is established. Then, by sending the fault flag image display command and the corresponding identifier to the display control unit together, the display control unit controls the display to display the corresponding fault flag image according to the fault flag image display command, and at the same time generates the actual verification value of the displayed fault flag image, and sends the identifier and the actual verification value back to the controller. The controller can first obtain the reference verification value of the fault flag image to be displayed by the corresponding fault flag image display command according to the identifier, and then determine whether the actual verification value is the same as the reference verification value. If they are different, a prompt message indicating a fault in the intelligent cockpit display function is output, ensuring driving safety. The solution of the present invention utilizes the corresponding relationship between the identifier and the fault flag image display command and the relationship between the fault flag image display command and the reference verification value, so that when the controller receives the actual verification value and the identifier, it can accurately obtain the corresponding reference verification value according to the identifier first, and then perform safety verification on the correctness of the displayed fault flag image, ensuring that only correct display function fault information is output. The driver obtains correct display function fault information, avoiding potential safety hazards and unnecessary maintenance costs caused by misjudgment, thereby improving driving safety while avoiding unnecessary maintenance costs.

[0070] In some embodiments, the step in step S202 where the controller sends the fault flag image display command and the identifier to the display control unit together can be implemented as: packing the fault flag image display command and the corresponding identifier in a predetermined data frame format according to the SPI protocol, and periodically sending the packed fault flag image display command and the corresponding identifier to the display control unit in the form of a data packet. Further, step S204 can be implemented as after receiving the data packet of the fault flag image display command and the corresponding identifier sent by the controller 200, the display control unit unpacks to obtain the fault flag image display command and the corresponding identifier, controls the display to display the corresponding fault flag image according to the fault flag image display command, generates the actual check value of the displayed fault flag image, and packs the identifier and the generated actual check value in a predetermined data frame format according to the SPI protocol, and sends the packed identifier and actual check value to the controller 200 one by one in the form of a data packet.

[0071] In some embodiments, before step S202, this security verification method may further include: the vehicle bus sends a fault flag signal to the controller in real time. Among them, the fault flag signal can be divided into fault flag signals of multiple fault types. For example, the ABS warning light signal and the EPS warning light signal, etc. At the same time, the fault flag signal of each fault type can also be divided into fault flag signals of multiple different display states. For example, when there is a fault in the anti-lock braking system ABS in the vehicle that affects the normal operation of the system, an ABS warning light on signal will be generated; when the fault in the anti-lock braking system ABS in the vehicle is eliminated, an ABS warning light off signal will be generated. When there is a fault in the electric power steering system EPS in the vehicle, an EPS warning light on signal will be generated. Similarly, each electronic control unit in the vehicle will respectively generate relevant fault flag signals according to different fault types and display states, and send them to the controller, and the controller receives these fault flag signals in real time.

[0072] In some embodiments, the identifier in the security verification method of the present invention includes fault flag type information indicating the fault type of a fault flag image display command and an ID value. In some specific embodiments, for example, when the controller receives an ABS warning light on signal sent by the anti-lock braking system in the vehicle via the vehicle bus, step S202 above may be specifically executed as follows: The controller generates an ABS warning light on command and an identifier ABS ID corresponding to the ABS warning light on command according to the ABS warning light on signal, and sends the ABS warning light on command and the identifier ABS ID to the display control unit together. Among them, the "ABS" in the identifier ABS ID is the fault flag type information indicating that the fault type of the fault flag image display command is an anti-lock braking system fault. Those skilled in the art should understand that the fault type of the fault flag signal is the same as the fault type of the fault flag image display command generated according to the fault flag signal. In this embodiment, the fault flag type information in the identifier indicates the fault type of the fault flag image display command; in other specific embodiments, the fault flag type information in the identifier may also be directly determined according to the fault type in the fault flag signal. The present invention does not limit this, as long as the identifiers corresponding to the fault flag image display commands of different fault types can be made independent of each other.

[0073] In this embodiment, the ID values in the identifiers of each fault type are respectively cyclically incremented within a preset range to orderly generate corresponding identifiers for the fault flag image display commands of each fault type. It should be noted that the preset range refers to the sequence range preset by the security verification system 100 of the present invention according to the upper limit of the accumulation times of the ID value. Being within the preset range means that each generated ID value never exceeds the upper limit of the sequence range and is not lower than the lower limit of the sequence range. In a specific embodiment, if the ID value of the identifier is the non-header data of the SPI payload data segment and has a length of 2 bytes, then the preset range can be 0x00 to 0xFF. At this time, the ID values in the identifiers of each fault type are respectively cyclically incremented within 0x00 to 0xFF. For example, the identifier ABS ID generated for the fault flag image display command with the fault type of anti-lock braking system fault is cyclically incremented within 0x00 to 0xFF, and the identifier EPS ID generated for the fault flag image display command with the fault type of electric power steering system fault is also cyclically incremented within 0x00 to 0xFF, realizing that corresponding identifiers can be orderly generated for the fault flag image display commands of each fault type.

[0074] Using the above security verification method, by means of the identifiers of various fault types, the identifiers corresponding to the fault flag image display commands of different fault types are independently incremented and counted, so that the identifiers corresponding to the fault flag image display commands of different fault types are independent and cannot be shared. Moreover, the ID values in the identifiers of each fault type are cyclically incremented within a preset range respectively, realizing the orderly generation of identifiers for the fault flag image display commands of each fault type. Even when multiple faults occur in the whole vehicle, the one-to-one correspondence between the identifiers and the fault flag images is effectively ensured, so as to assist the security verification process when displaying fault flag images of multiple fault types, thereby further improving the accuracy of security verification.

[0075] In an alternative embodiment of the present invention, after step S202, the security verification method of the present invention further includes: checking whether an identifier identical to the newly generated identifier has been stored locally. If so, the newly generated identifier and the corresponding fault flag image display command are stored locally in a way that overwrites the stored identical identifier and its corresponding fault flag image display command. If not, the newly generated identifier and the corresponding fault flag image display command are directly stored locally, so as to ensure that within the working duration of the controller, at most one set of the identifier and the corresponding fault flag image display command is stored locally for the same identifier in the controller. That is to say, when the controller receives an identifier and an actual verification value data packet sent back by the display control unit, the controller can only find one identifier identical to this identifier locally according to this identifier, and can only find one fault flag image display command corresponding to the identical identifier, so that by using the correspondence between the fault flag image display command and the reference verification value, only one accurate reference verification value can be obtained, thus realizing the comparison between the correct reference verification value and the actual verification value and avoiding misjudgment.

[0076] In another alternative embodiment of the present invention, the controller in the security verification method of the present invention can also use a static memory RAM to store data. After the controller generates a fault flag image display command and an identifier corresponding to the fault flag image display command according to the fault flag signal, the newly generated fault flag image display command and identifier are directly stored in the static memory RAM. If an identifier identical to the newly generated identifier was previously stored in the static memory RAM, then the identical identifier and the corresponding fault flag image display command directly disappear from the static memory RAM, thus ensuring that in step S206, the controller can only find one fault flag image display command corresponding to this identifier in the static memory RAM, thereby ensuring the accuracy of security verification.

[0077] On the basis of any one of the foregoing two alternative embodiments, while the controller locally stores at most one set of the identifier and the corresponding fault flag image display command for the same identifier, it can simultaneously store multiple sets of identifiers and fault flag image display commands in a corresponding relationship.

[0078] In some specific embodiments, after the step of the controller generating the fault flag image display command and before the step of generating the identifier corresponding to the fault flag image display command, the security verification method of the present invention further includes: determining the fault type of the fault flag image display command as the target fault type, and determining whether the fault flag image display command is the same as the previous fault flag image display command of the target fault type. Wherein, the previous fault flag image display command of the target fault type refers to the latest stored fault flag image display command among all the fault flag image display commands of the target fault type read when the controller locally stores the fault flag image display command of the target fault type.

[0079] In this embodiment, the step of the controller generating the identifier corresponding to the fault flag image display command may include: if the fault flag image display command is the same as the previous fault flag image display command of the target fault type, reading the previous identifier of the target fault type as the identifier corresponding to the fault flag image display command, where the previous identifier refers to the identifier corresponding to the previous fault flag image display command of the target fault type; if the fault flag image display command is not the same as the previous fault flag image display command of the target fault type, the controller generates the identifier corresponding to the fault flag image display command by cyclically incrementing the ID value within a preset range on the basis of the previous identifier. That is to say, the accumulation counting between the identifiers corresponding to the fault flag image display commands of different fault types is independent of each other, and for the identifiers generated by the fault flag image display commands of the same fault type, only when the fault flag image display command changes, the identifier corresponding to the fault flag image display command is generated by cyclically incrementing the ID value within a preset range on the basis of the previous identifier, realizing that for multiple consecutive identical fault flag image display commands generated before and after, new ID values may not be generated, reducing the calculation cost.

[0080] Furthermore, the step in which the controller in this embodiment generates an identifier corresponding to the fault sign image display command by cyclically accumulating the ID value within a preset range based on the previous identifier may include: reading the previous identifier, determining whether the ID value of the previous identifier reaches the upper limit of the preset range; if so, setting the ID value in the identifier corresponding to the generated fault sign image display command to the lower limit of the preset range; if not, adding the ID value of the previous identifier to the preset step size to obtain the ID value in the identifier corresponding to the fault sign image display command, thereby realizing the orderly generation of corresponding identifiers for fault sign image display commands for changing target fault types, while reducing the computing cost and facilitating the debugging and testing of this function in subsequent work and the investigation of later bugs.

[0081] The following takes the specific process of cyclically accumulating ID values ​​within 0×00~0×FF for the identification ABS ID generated by the fault sign image display command for the fault type of anti-lock braking system as an example to explain in detail the cyclic accumulation method of ID values.

[0082] The controller generates the first PA ABS=ON, and generates ABS 0×00 correspondingly; the controller generates the second PA ABS=ON, and reads ABS 0×00 as the identifier corresponding to the second PA ABS=ON; the controller generates the third PA ABS=ON, and reads ABS 0×00 as the identifier corresponding to the third PA ABS=ON; the controller generates the first PA ABS=Off, adds one to 0×00 to obtain the ID value in the identifier corresponding to the first PA ABS=Off, that is, generates ABS 0×01 correspondingly; the controller generates the second PA ABS=Off, and reads ABS 0×01 as the identifier corresponding to the second PA ABS=Off; the controller generates the fourth PA ABS=ON, adds one to 0×01 to obtain the ID value in the identifier corresponding to the fourth PA ABS=ON, and generates ABS 0×02 correspondingly, and the cyclic accumulation is completed according to this rule until the ID value of the current identifier reaches 0×FF, and the ID value in the identifier corresponding to the generated fault sign image display command is set to 0×00 to enter the next cycle. The preset step length is 1, PA ABS=ON refers to an ABS warning light lighting command, and PA ABS=Off refers to an ABS warning light turning off command.

[0083] Using the above safety verification method, by cyclically accumulating the identifiers corresponding to the fault flag image display commands of each fault type within a preset range when the identifiers corresponding to the fault flag image display commands of a certain fault type change, the one-to-one correspondence between the identifiers and the fault flag images is effectively ensured even when multiple faults occur in the vehicle, so as to assist the safety verification process when displaying the fault flag images of multiple fault types, thereby further improving the accuracy of the safety verification.

[0084] In some embodiments, the controller of the present invention stores in advance the reference verification values of the fault flag image display commands and the fault flag images to be displayed by the fault flag image display commands in a corresponding relationship. And step S206 can be executed as follows: the controller searches for the identifier stored locally that matches the received identifier, obtains the fault flag image display command associated with the matching identifier from the local, obtains the corresponding reference verification value according to the associated fault flag image display command, and determines whether the actual verification value is the same as the reference verification value.

[0085] Using the above safety verification method, by pre - establishing the corresponding relationship between the fault flag image display command and the reference verification value of the fault flag image to be displayed by the fault flag image display command, and then establishing the corresponding relationship between the fault flag image display command and the identifier, when the controller receives the actual verification value and the identifier sent together, the accurate reference verification value can be found according to the identifier, so as to compare it with the actual verification value, further ensuring the accuracy of the safety verification.

[0086] The above introduces various implementation manners of each step of the safety verification method for the intelligent cockpit display function in the embodiments of the present invention. Next, a specific embodiment is used to specifically introduce the implementation process of the safety verification method for the intelligent cockpit display function of the present invention in an exemplary manner.

[0087] Figure 3 The flowchart of the safety verification method for the intelligent cockpit display function according to a specific embodiment of the present invention is shown. Next, in combination with Figure 3 The flow steps of this specific embodiment are specifically described.

[0088] In step S302, the vehicle bus sends fault flag signals to the controller in real - time. The fault flag signals can be divided into fault flag signals of multiple fault types. For example, the ABS warning light signal and the EPS warning light signal, etc. At the same time, the fault flag signals of each fault type can also be divided into fault flag signals of multiple different display states. For example, the ABS warning light signal includes the ABS warning light on signal and the ABS warning light off signal, etc.

[0089] Step S304: The controller generates a fault flag image display command and an identifier corresponding to the fault flag image display command according to the fault flag signal. For example, the controller calculates and generates an ABS warning light lighting command PA_ABS = On indicating to light the ABS warning light based on the received ABS warning light lighting signal, and generates an identifier ABS_ID corresponding to the ABS warning light lighting command PA_ABS = On.

[0090] Step S306: The controller checks whether an identifier identical to the newly generated identifier is already stored locally. If an identifier identical to the newly generated identifier is already stored locally, go to Step S308; if no identifier identical to the newly generated identifier is stored locally, go to Step S310.

[0091] Step S308: The controller stores the newly generated identifier and the corresponding fault flag image display command locally in a way that overwrites the already stored identical identifier and its corresponding fault flag image display command, and then go to Step S312.

[0092] Step S310: The controller directly stores the newly generated identifier and the corresponding fault flag image display command locally, and then go to Step S312. Through the above Steps S306 - S310, it is ensured that for any identifier in the controller, at most one such identifier and the corresponding fault flag image display command are stored locally.

[0093] Step S312: The controller sends the fault flag image display command and the identifier to the display control unit together. Still taking the controller generating PA_ABS = On and the corresponding ABS_ID as an example, when executing this step, the controller sends the generated PA_ABS = On and ABS_ID to the display control unit together according to the SPI protocol through the SPI interface.

[0094] Step S314: The display control unit controls the display to show the corresponding fault flag image according to the fault flag image display command.

[0095] Step S316: The display control unit generates the actual check value of the displayed fault flag image.

[0096] Step S318: The display control unit sends the identifier and the actual check value to the controller. For example, the system - on - chip SOC sends the identifier and the generated actual check value to the micro - control unit MCU together according to the SPI protocol through the SPI interface.

[0097] Step S320: The controller searches for the identifier that matches the received identifier in the local storage, and obtains the fault flag image display command associated and stored with the matching identifier from the local. After steps S306 to S310, in this step, the controller can only find one identifier that matches the received identifier locally according to the received identifier, and can only find one corresponding fault flag image display command according to the matching identifier, ensuring the accuracy of the security verification.

[0098] Step S322: Obtain the corresponding reference verification value according to the associated and stored fault flag image display command. It should be noted that in this solution, the controller pre-stores the fault flag image display command and the reference verification value of the fault flag image to be displayed by the fault flag image display command in a corresponding relationship. Therefore, the corresponding reference verification value can be accurately found locally according to the associated and stored fault flag image display command.

[0099] Step S324: Determine whether the actual verification value is the same as the reference verification value. If the actual verification value is different from the reference verification value, go to step S326.

[0100] Step S326: Send a first prompt message to the user, and this process ends.

[0101] Of course, during the operation of the intelligent cockpit, the vehicle bus will send the fault flag signal to the controller in real time, and the controller will also receive the fault flag signal sent by the vehicle bus in real time, and continue to execute the above steps S304 to S330 to perform the security verification on the intelligent cockpit display function in real time, ensuring the driving safety in real time.

[0102] In step S304, when the controller generates the fault flag image display command for each fault type for the first time based on the fault flag signal of each fault type, the ID value in the identifier corresponding to the generated fault flag image display command can be directly set to the lower limit of the preset range. After generating the fault flag image display command for each fault type not for the first time, the safety verification method of the present invention further includes the following steps: determining the fault type of the fault flag image display command as the target fault type, and judging whether the fault flag image display command is the same as the previous fault flag image display command of the target fault type. On this basis, the step of the controller in step S304 generating the identifier corresponding to the fault flag image display command can be executed as follows: if the fault flag image display command is the same as the previous fault flag image display command of the target fault type, then read the previous identifier of the target fault type as the identifier corresponding to the fault flag image display command, where the previous identifier refers to the identifier corresponding to the previous fault flag image display command of the target fault type; if the fault flag image display command is not the same as the previous fault flag image display command of the target fault type, then the controller generates the identifier corresponding to the fault flag image display command by cyclically accumulating the ID value within the preset range based on the previous identifier.

[0103] Figure 4 The flowchart shows the cyclic accumulation process of the ID value within the preset range in the safety verification method of the intelligent cockpit display function according to a specific embodiment of the present invention. The following will be combined with Figure 4 to specifically illustrate the step of the controller in this specific embodiment generating the identifier corresponding to the fault flag image display command by cyclically accumulating the ID value within the preset range based on the previous identifier.

[0104] Step S1, the controller reads the previous identifier and judges whether the ID value of the previous identifier reaches the upper limit of the preset range. If it reaches, go to step S2; if it does not reach, go to step S3. It should be noted that the previous identifier refers to the identifier corresponding to the previous fault flag image display command of the target fault type.

[0105] Step S2, set the ID value in the identifier corresponding to the generated fault flag image display command to the lower limit of the preset range.

[0106] Step S3, add the preset step size to the ID value of the previous identifier to obtain the ID value in the identifier corresponding to the fault flag image display command.

[0107] Using the above method, when generating a fault flag image display command based on the fault flag signal, an identifier corresponding to the fault flag image display command is generated, establishing a correspondence between the identifier and the fault flag image display command. Then, by sending the fault flag image display command and the corresponding identifier to the display control unit together, the display control unit controls the display to show the corresponding fault flag image according to the fault flag image display command, and simultaneously generates the actual check value of the displayed fault flag image, and sends the identifier and the actual check value back to the controller. The controller first obtains the reference check value of the fault flag image to be displayed corresponding to the corresponding fault flag image display command according to the identifier, and then judges whether the actual check value is the same as the reference check value. If they are different, a prompt message for the failure of the intelligent cockpit display function is output, ensuring driving safety. The solution of the present invention utilizes the correspondence between the identifier and the fault flag image display command and the relationship between the fault flag image display command and the reference check value, so as to accurately obtain the corresponding reference check value according to the identifier when the controller receives the actual check value and the identifier, and then perform a safety check on the correctness of the displayed fault flag image, ensuring that only correct display function failure information is output. The driver obtains correct display function failure information, avoiding potential safety hazards and unnecessary maintenance costs caused by misjudgment, thereby improving driving safety and avoiding unnecessary maintenance costs at the same time.

[0108] Further, the safety check method of the present invention utilizes identifiers of multiple fault types, enabling independent cumulative counting among the identifiers corresponding to the fault flag image display commands of different fault types, realizing that the identifiers corresponding to the fault flag image display commands of different fault types are independent and cannot be shared. And the ID values in the identifier of each fault type are cyclically incremented within a preset range respectively, realizing the orderly generation of identifiers for the fault flag image display commands of each fault type. In the case of multiple faults occurring in the whole vehicle, the one-to-one correspondence between the identifier and the fault flag image is effectively ensured, assisting the safety check process when displaying fault flag images of multiple fault types, thereby further improving the accuracy of the safety check.

[0109] At this point, those skilled in the art should recognize that although multiple exemplary embodiments of the present invention have been shown and described in detail herein, still, without departing from the spirit and scope of the present invention, many other variations or modifications that conform to the principles of the present invention can be directly determined or derived from the content disclosed in the present invention. Therefore, the scope of the present invention should be understood and determined to cover all these other variations or modifications.

Claims

1. A safety verification method for the display function of an intelligent cockpit, comprising: The controller generates a fault flag image display command and an identifier corresponding to the fault flag image display command according to the fault flag signal, and sends the fault flag image display command and the identifier to the display control unit together; The display control unit controls the display to display the corresponding fault flag image according to the fault flag image display command, generates an actual verification value of the displayed fault flag image, and sends the identifier and the actual verification value to the controller; The controller determines whether the actual verification value is the same as the reference verification value of the fault flag image to be displayed by the fault flag image display command according to the received identifier; If not, a prompt message for the fault of the intelligent cockpit display function is output; Wherein The identifier includes fault flag type information indicating the fault type of the fault flag image display command and an ID value, and the ID values in the identifiers of each fault type are cyclically incremented within a preset range respectively.

2. The security verification method according to claim 1, wherein, After the controller generates a fault flag image display command and an identifier corresponding to the fault flag image display command according to the fault flag signal, the safety verification method further includes: Checking whether an identifier identical to the newly generated identifier is stored locally; If so, storing the newly generated identifier and the corresponding fault flag image display command in a manner that overwrites the stored identical identifier and its corresponding fault flag image display command locally; If not, directly storing the newly generated identifier and the corresponding fault flag image display command locally.

3. The security verification method according to claim 2, wherein, The reference verification value of the fault flag image to be displayed by the fault flag image display command is stored in the controller in a corresponding relationship in advance; And The controller determines whether the actual verification value is the same as the reference verification value of the fault flag image to be displayed by the fault flag image display command according to the received identifier, including: Searching for an identifier matching the received identifier stored locally, and obtaining the fault flag image display command associated and stored with the matching identifier from local; Obtaining the corresponding reference verification value according to the associated and stored fault flag image display command; Determining whether the actual verification value and the reference verification value are the same.

4. The security verification method according to claim 2, wherein, Before the controller generates an identifier corresponding to the fault flag image display command, the safety verification method further includes: After generating the fault flag image display command, determining the fault type of the fault flag image display command as the target fault type; Judging whether the fault flag image display command is the same as the previous fault flag image display command of the target fault type; The step in which the controller generates an identifier corresponding to the fault flag image display command includes: If the fault flag image display command is the same as the previous fault flag image display command of the target fault type, read the previous identifier of the target fault type as the identifier corresponding to the fault flag image display command, where the previous identifier refers to the identifier corresponding to the previous fault flag image display command of the target fault type; If the fault flag image display command is different from the previous fault flag image display command of the target fault type, the controller generates an identifier corresponding to the fault flag image display command by cyclically incrementing the ID value within a preset range based on the previous identifier.

5. The security verification method according to claim 4, wherein, The steps for the controller to generate an identifier corresponding to the fault flag image display command by cyclically incrementing the ID value within a preset range based on the previous identifier include: The controller reads the previous identifier and determines whether the ID value of the previous identifier reaches the upper limit of the preset range; If it reaches, set the ID value in the identifier corresponding to the generated fault flag image display command to the lower limit of the preset range; If it does not reach, add the preset step size to the ID value of the previous identifier to obtain the ID value in the identifier corresponding to the fault flag image display command.

6. A safety verification system for the display function of an intelligent cockpit, comprising a controller, a display control unit and a display which are connected to each other; Wherein The controller is configured to generate a fault flag image display command and an identifier corresponding to the fault flag image display command according to a fault flag signal, and send the fault flag image display command and the identifier to the display control unit together; The display control unit is configured to control the display to display a corresponding fault flag image according to the fault flag image display command, generate an actual verification value of the displayed fault flag image, and send the identifier and the actual verification value to the controller; The controller is further configured to determine whether the actual verification value is the same as the reference verification value of the fault flag image to be displayed by the fault flag image display command according to the received identifier. If not, output a prompt message for a fault in the intelligent cockpit display function; Wherein The identifier includes fault flag type information indicating the fault type of the fault flag image display command and an ID value, and the ID values in the identifiers of each fault type are cyclically incremented within a preset range respectively.

7. The safety verification system according to claim 6, wherein After generating a fault flag image display command and an identifier corresponding to the fault flag image display command according to a fault flag signal, the controller also configures to check whether there is an identifier identical to the newly generated identifier stored locally. If so, store the newly generated identifier and the corresponding fault flag image display command in a way that overwrites the stored identical identifier and its corresponding fault flag image display command. If not, directly store the newly generated identifier and the corresponding fault flag image display command locally.

8. The security verification system according to claim 7, wherein, The controller stores in advance the fault flag image display command and the reference verification value of the fault flag image to be displayed by the fault flag image display command in a corresponding relationship; and The controller is further configured to look up an identity stored locally that matches the received identity, obtain from local storage a fault flag image display command associated with the matching identity, obtain a corresponding reference check value according to the fault flag image display command associated with the storage, and determine whether the actual check value is the same as the reference check value.

Images