Functionally safe display controller and functionally safe display control system

Abstract

The application provides a functional safety display controller and a functional safety display control system. The functional safety display controller is connected with a central controller, a memory and a display through a communication line. At least one internal module of the functional safety display controller is provided with a corresponding functional safety detection unit, and the functional safety detection unit is used for detecting random errors of the corresponding module. The functional safety display controller can form a functional safety display control system with the central controller, the memory and the display. The system can consider the problems of research and development cost, risk control and system area overhead.

Description

Technical Field

[0001] This application belongs to the field of functional safety technology, and relates to functional safety display control, and in particular to functional safety display controllers and functional safety display control systems. Background Technology

[0002] Functional safety (FUSA) refers to the ability to operate safely in the event of electrical or electronic failures by mitigating system risks. As more and more products incorporate complex microelectronics and software into their designs, assessing and implementing functional safety at the system level has become increasingly challenging. For the automotive safety field, ISO 26262 specifies international standards for improving the functional safety of automotive electronic products. Display control systems are an indispensable part of in-vehicle systems. With the rapid development of intelligent driving, in-vehicle display control systems are becoming more complex and increasingly electronically and electrically integrated. Real-time detection and reporting of circuit anomalies have become an urgent requirement for in-vehicle display control systems.

[0003] As the ISO 26262 standard continues to be updated and improved, automotive functional safety technology is still evolving. Traditional functional safety display control systems require both software and hardware to meet functional safety standards. For example, software generates a Software Test Library (STL), the hardware responds to and executes the STL, and the internal hardware comparison circuit compares the STL execution result with the expected result to detect permanent errors in the circuitry. The software test sequence requires software developers to manage the switching between functional safety test sequences and regular display configuration commands to achieve the purpose of detection during normal display. This approach places high demands on system performance and has unsatisfactory real-time detection results, while also significantly increasing system complexity. Furthermore, the STL itself needs to be certified to the ISO 26262 standard. Compared to ordinary display control systems, this type of functional safety display controller system requires 6 to 8 times more product development time, and the extensive changes to both software and hardware significantly increase system risk.

[0004] Another type of functional safety display control system requires only hardware certification, not software. This approach reduces R&D investment and time. Compared to conventional display control systems, this type of functional safety display controller system requires 3-4 times the product development cycle. However, this method detects random errors caused by electronic or electrical faults in the internal hardware circuitry by simply replicating larger-granularity modules and adding comparator circuits. Compared to systems without functional safety circuitry, this method requires 2-2.5 times the area overhead.

[0005] In summary, designing a functional safety display control system that can pass ISO26262 standard certification while ensuring controllable R&D risks, reducing R&D cycle and reducing R&D personnel input has become one of the urgent problems to be solved by those skilled in the art. Summary of the Invention

[0006] The purpose of this application is to provide a functional safety display controller and a functional safety display control system to solve the problem that existing display control systems conforming to the ISO26262 standard are difficult to balance in terms of R&D costs, risk control, and system area overhead.

[0007] In a first aspect, embodiments of this application provide a functional safety display controller, which is connected to a central controller, a memory, and a display via communication lines. At least one internal module of the functional safety display controller is provided with a corresponding functional safety detection unit, which is used to detect random errors in the corresponding module.

[0008] In one implementation of the first aspect, the functional safety display controller includes a register parsing module, which is provided with a first functional safety detection unit and a second functional safety detection unit, wherein: the first functional safety detection unit is used to detect random errors in the configuration data of the interface between the central controller and the functional safety display controller and the configuration data between the functional safety display controller and the internal user terminal; the second functional safety detection unit is used to detect random errors occurring in the control circuit between the central controller and the functional safety display controller.

[0009] In one implementation of the first aspect, the first functional safety detection unit detects random errors in the configuration data between the central controller and the functional safety display controller interface, and between the functional safety display controller and the internal user terminal, by performing parity checks on the configuration bus content; and / or the second functional safety detection unit detects random errors occurring in the control circuit between the central controller and the functional safety display controller by performing timeout monitoring on the configuration bus.

[0010] In one implementation of the first aspect, the functional safety display controller includes an image processing module, which is provided with a third functional safety detection unit, a fourth functional safety detection unit, and a fifth functional safety detection unit, wherein: the third functional safety detection unit is used to detect random errors occurring in the pipeline data information within the functional safety display controller; the fourth functional safety detection unit is used to detect random errors occurring in the combined circuits between the pipelines within the functional safety display controller; and the fifth functional safety detection unit is used to detect permanent circuit errors occurring in the functional safety display controller.

[0011] In one implementation of the first aspect, the third functional safety detection unit detects random errors in the pipeline data information inside the functional safety display controller by performing parity checks on the timing circuit; and / or the fourth functional safety detection unit detects random errors in the combined circuits between pipelines inside the functional safety display controller by using each pipeline stage as the smallest unit; and / or the fifth functional safety detection unit detects permanent circuit errors in the functional safety display controller by using a hardware test library.

[0012] In one implementation of the first aspect, the functional safety display controller includes a display interface control module, which is provided with a sixth functional safety detection unit, a seventh functional safety detection unit, and an eighth functional safety detection unit, wherein: the sixth functional safety detection unit is used to detect permanent circuit errors occurring in the functional safety display controller; the seventh functional safety detection unit is used to detect random errors occurring in the pixel pipeline control circuit inside the functional safety display controller; and the eighth functional safety detection unit is used to detect random errors occurring in the display data between the functional safety display controller and the display.

[0013] In one implementation of the first aspect, the sixth functional safety detection unit detects permanent circuit errors occurring in the functional safety display controller using a hardware test library; and / or the seventh functional safety detection unit detects random errors occurring in the pixel pipeline control circuit inside the functional safety display controller using pixel count monitoring; and / or the eighth functional safety detection unit detects random errors occurring in the display data between the functional safety display controller and the display using pixel content cyclic redundancy sender encoding.

[0014] In one implementation of the first aspect, the functional safety display controller includes a memory access control module, which is provided with a ninth functional safety detection unit, a tenth functional safety detection unit, an eleventh functional safety detection unit, and a twelfth functional safety detection unit, wherein: the ninth functional safety detection unit is used to detect permanent circuit errors occurring in the functional safety display controller; the tenth functional safety detection unit is used to detect random errors occurring in the pixel transmission data path between the functional safety display controller and the memory; and the eleventh and twelfth functional safety detection units are used to detect random errors occurring in the control path between the functional safety display controller and the memory.

[0015] In one implementation of the first aspect, the ninth functional safety detection unit detects permanent circuit errors occurring in the functional safety display controller using a hardware test library; and / or the tenth functional safety detection unit detects random errors occurring in the pixel transmission data path between the functional safety display controller and the memory using a data bus data content cyclic redundancy receiver decoding detection method; and / or the eleventh functional safety detection unit detects random errors occurring in the control path between the functional safety display controller and the memory by performing timeout monitoring on the data bus; and / or the twelfth functional safety detection unit detects random errors occurring in the control path between the functional safety display controller and the memory by monitoring the data bus protocol.

[0016] In one implementation of the first aspect, the functional safety display controller includes an internal storage module, the internal storage module being provided with a thirteenth functional safety detection unit, wherein the thirteenth functional safety detection unit is used to detect random circuit errors occurring in the internal storage module.

[0017] In one implementation of the first aspect, the thirteenth functional safety detection unit detects random circuit errors occurring in the internal storage module using an error correction code.

[0018] In one implementation of the first aspect, the functional safety display controller further includes an interrupt control module, through which permanent and / or temporary errors detected by the functional safety detection unit are reported to the central controller in the form of an interrupt.

[0019] In one implementation of the first aspect, the interrupt control module includes a fourteenth functional safety detection unit, wherein the fourteenth functional safety detection unit is used to detect and correct random circuit errors occurring in the functional safety interrupt path.

[0020] In one implementation of the first aspect, the fourteenth functional safety detection unit detects and corrects random circuit errors occurring in the functional safety interruption path using a triple-modular redundancy method.

[0021] In one implementation of the first aspect, the functional safety detection unit is further configured to detect random errors occurring on the configuration bus between the functional safety display controller and the central controller, random errors occurring on the image data bus between the functional safety display controller and the memory, and / or random errors occurring on the display data bus between the functional safety display controller and the display.

[0022] Secondly, embodiments of this application provide a functional safety display control system, which includes a central controller, a memory, a display, and the functional safety display controller described in any of the first aspects of embodiments of this application.

[0023] As described above, the functional safety display controller provided in this embodiment is communicatively connected to the central controller, memory, and display, together forming a functional safety display control system. This system is a hardware functional safety display control system compliant with the ISO26262 standard, which can address issues such as R&D costs, risk control, and system area overhead.

[0024] Furthermore, the functional safety display controller provided in some embodiments of this application can subdivide the corresponding functional safety detection mechanism according to the circuit function and type, and its area overhead is controllable, making it an inheritable and scalable solution.

[0025] Furthermore, the functional safety display control system provided in some embodiments of this application, consisting of a functional safety display controller, a central controller, a memory, and a display, does not require software certification and can detect and report random electronic and electrical errors in the circuit in real time. While offering higher real-time performance, security, and reliability, it can significantly reduce product development costs, accelerate product development progress, and reduce development risks. Compared to ordinary display control systems, this functional safety display control system requires only 1.2 to 1.4 times the area overhead to detect more than 90% of random circuit errors. Attached Figure Description

[0026] Figure 1 The diagram shown is a structural schematic of a functional safety display control system according to an embodiment of this application.

[0027] Figure 2 The diagram shown is a structural schematic of a functional safety display control system according to an embodiment of this application.

[0028] Figure 3The diagram shown is a structural schematic of a functional safety display control system according to an embodiment of this application.

[0029] Component designation explanation 11 Central controller 12 Functional safety display controller 121 Register parsing module 1211 Register resolution unit 122 Image processing module 1221 Image processing unit 123 Display Interface Control Module 1231 Display Interface Control Unit 124 Memory access control module 1241 Memory access control unit 125 Internal storage module 1251 Internal storage unit 126 Interrupt control module 1261 Interrupt control unit 13 memory 14 monitor Fusa01 First Functional Safety Testing Unit Fusa02 Second functional safety detection unit Fusa03 Third functional safety detection unit Fusa04 Fourth functional safety testing unit Fusa05 Fifth Functional Safety Testing Unit Fusa06 Sixth Functional Safety Testing Unit Fusa07 Seventh Functional Safety Testing Unit Fusa08 Eighth Functional Safety Testing Unit Fusa09 Ninth Functional Safety Testing Unit Fusa10 Tenth Functional Safety Testing Unit Fusa11 Eleventh Functional Safety Testing Unit Fusa12 Twelfth Functional Safety Testing Unit Fusa13 Thirteenth Functional Safety Testing Unit Fusa14 Fourteenth Functional Safety Testing Unit Detailed Implementation

[0030] The following specific examples illustrate the implementation of this application. Those skilled in the art can easily understand other advantages and effects of this application from the content disclosed in this specification. This application can also be implemented or applied through other different specific embodiments, and various details in this specification can also be modified or changed based on different viewpoints and applications without departing from the spirit of this application. It should be noted that, unless otherwise specified, the following embodiments and features in the embodiments can be combined with each other.

[0031] It should be noted that the illustrations provided in the following embodiments are only schematic representations of the basic concept of this application. Therefore, the drawings only show the components related to this application and are not drawn according to the actual number, shape and size of the components in the actual implementation. In the actual implementation, the form, quantity and proportion of each component can be arbitrarily changed, and the layout of the components may also be more complex.

[0032] The following embodiments of this application provide a functional safety display control system. Figure 1 The diagram shown is a hardware architecture schematic of a functional safety display control system 1 provided in an embodiment of this application. Figure 1 As shown, the functional safety display control system 1 provided in this application embodiment includes a central controller 11, a functional safety display controller 12, a memory 13, and a display 14. The functional safety display controller 12 is communicatively connected to the central controller 11, the memory 13, and the display 14 via communication lines.

[0033] The central controller 11 is used to send display configuration commands from the display controller driver to the functional safety display controller 12, and to receive and process interrupt information from the functional safety display controller 12.

[0034] The functional safety display controller 12 is used to receive configuration commands from the central controller 11, and to perform image processing by reading image data from the memory 13 to generate a standard display interface signal, and to send the standard display interface signal to the display 14, wherein the standard display interface signal includes image information and control information.

[0035] The memory 13 is used to store image data for the functional safety display controller 12 to read. In this embodiment, the memory 13 may be, for example, a random access memory, a read-only memory, a flash memory, a hard disk, a solid-state drive, a magnetic tape, a floppy disk, an optical disc, or any combination thereof.

[0036] The display 14 is used to receive image information and control information from the functional safety display controller 12 and display them on the display screen.

[0037] In this embodiment, the functional safety display controller 12 includes at least one internal module, wherein each internal module is equipped with a corresponding functional safety detection unit. This functional safety detection unit is used to detect random errors in the corresponding module in real time and report them to a functional safety interrupt. Examples of such internal modules include a register parsing module, an image processing module, a display interface control module, and a memory access control module.

[0038] Optionally, some or all of the functional safety detection units are also used to detect random errors occurring on the configuration bus between the functional safety display controller 12 and the central controller 11, random errors occurring on the image data bus between the functional safety display controller 12 and the memory 13, and / or random errors occurring on the display data bus between the functional safety display controller 12 and the display 14. Specifically, the configuration bus between the functional safety display controller 12 and the central controller 11 can be used to detect random errors occurring in the circuit in real time through the functional safety detection unit. The image data bus between the functional safety display controller 12 and the memory 13 can be used to detect random errors occurring in the circuit in real time through the functional safety detection unit. The display data bus between the functional safety display controller 12 and the display 14 can be used to detect random errors occurring in the circuit in real time through the functional safety detection unit.

[0039] Figure 2 The diagram shown is a detailed structural schematic of a functional safety display control system 1 according to an embodiment of this application. Figure 3 The figure shows a schematic diagram of the internal structure of the functional safety display control system 1 in this embodiment of the application. As shown in the figure, the functional safety display controller 12 in this embodiment of the application includes a register parsing module 121, which includes a register parsing unit 1211, a first functional safety detection unit Fusa01, and a second functional safety detection unit Fusa02.

[0040] The first functional safety detection unit Fusa01 is used to detect random errors in the interface between the central controller 11 and the functional safety display controller 12, as well as between the functional safety display controller 12 and the internal user terminal.

[0041] In some implementations, the first functional safety detection unit Fusa01 detects random errors in the configuration bus between the central controller 11 and the functional safety display controller 12, and between the functional safety display controller 12 and the internal user terminal, through parity checking of the configuration bus content. It should be noted that... Figure 3 The division of Fusa safety detection units corresponding to each module is merely a logical functional division. In actual implementation, they can be fully or partially integrated into a single physical entity, or they can be physically separated. For example, in one embodiment of Fusa01, for parity check detection of the configuration bus, the hardware can adopt a segmented detection method, dividing the internal configuration bus path into N segments so that configuration paths related to other internal units or modules can be detected, where N is a positive integer greater than or equal to 1. Each sub-path individually detects the parity bits from the sending end to the receiving end, and any functional safety parity error occurring in any sub-path will be sent to the functional safety display interrupt of the functional safety display controller 12.

[0042] The second functional safety detection unit, Fusa02, is used to detect random errors occurring in the control circuit between the central controller 11 and the functional safety display controller 12.

[0043] In some implementations, the second functional safety detection unit Fusa02 detects random errors in the control circuitry between the central controller 11 and the functional safety display controller 12 by configuring bus timeout monitoring. Specifically, upon successfully receiving a read / write request from the central controller 11, a counter inside the second functional safety detection unit Fusa02, used to monitor bus access, starts counting down. The counter is reset to zero upon successfully receiving feedback (ack) from the requesting destination. If the counter exceeds a set threshold, the monitoring circuitry of the second functional safety detection unit Fusa02 sends an access timeout error interrupt to the functional safety interrupt of the functional safety display controller 12.

[0044] As described above, in this embodiment, the register parsing module 121 can detect random errors in the circuit through the functional safety detection units Fusa01 and Fusa02. Furthermore, the configuration path between the central controller 11 and the functional safety display controller 12 can also detect random errors in the circuit through the functional safety detection units Fusa01 and Fusa02.

[0045] It should be noted that the inclusion of both the first functional safety detection unit Fusa01 and the second functional safety detection unit Fusa02 in the register parsing module 121 is merely one feasible embodiment of this application, and is not limited thereto. In some other embodiments, the register parsing module may include only the first functional safety detection unit or only the second functional safety detection unit.

[0046] In one embodiment of this application, the functional safety display controller 12 further includes an image processing module 122. The image processing module 122 acquires image data information through the memory access control module 124, and transmits pixel data to the display interface control module 123 after image processing is completed. Please continue reading. Figure 3 In this embodiment of the application, the image processing module 122 includes an image processing unit 1221, a third functional security detection unit Fusa03, a fourth functional security detection unit Fusa04, and a fifth functional security detection unit Fusa05.

[0047] The third functional safety detection unit, Fusa03, is used to detect random errors in the pipeline data information inside the functional safety display controller 12.

[0048] In some implementations, the third functional safety detection unit Fusa03 detects random errors in the pipeline data information within the functional safety display controller 12 through timing circuit parity checking. Specifically, the third functional safety detection unit Fusa03 is mainly used to protect the image processing unit 1221. The image processing unit 1221 mainly performs post-processing operations on the original image in the memory 13, including but not limited to one or more of the following operations: format conversion, image scaling, inversion, blending, color gamut mapping, tone mapping, blurring, etc. These image processing operations are based on a pipeline implementation mechanism. Each stage of the pipeline completes different operations and passes them to the next stage of the pipeline. The data information of each pipeline stage is used by the third functional safety detection unit Fusa03 to detect random circuit errors.

[0049] It should be noted that the data information in the pipeline can be implemented through storage units, including but not limited to registers, first-in-first-out (FIFO) memory, etc.

[0050] The fourth functional safety detection unit, Fusa04, is used to detect random errors occurring in the combined circuits between the internal pipelines of the functional safety display controller 12.

[0051] In some implementations, the fourth functional safety detection unit Fusa04 is mainly used to protect the internal image processing unit 1221. Considering area and operating speed, the image processor's transformations (including but not limited to matrix multiplication, interpolation, filtering, linear transformation, etc.) require one or more pipeline stages. In this embodiment, the fourth functional safety detection unit Fusa04 is preferably used for protection based on each pipeline stage as the smallest unit. Specifically, the comparison circuit of the fourth functional safety detection unit Fusa04 compares the values ​​of the backup circuit and the original functional circuit. If a value mismatch occurs, the fourth functional safety detection unit Fusa04 sends an error interrupt to the functional safety interrupt of the functional safety display controller 12.

[0052] It should be noted that the fourth functional safety detection unit Fusa04 in this embodiment of the application, which uses each pipeline level as the protection granularity, is one implementation method of this application, but this application is not limited thereto. In some other embodiments, depending on the operational difficulty and area target, the protection granularity of certain pipelines can also be expanded to the sub-module level.

[0053] The fifth functional safety detection unit, Fusa05, is used to detect permanent circuit errors that occur in the functional safety display controller 12.

[0054] In some implementations, the fifth functional safety detection unit Fusa05 detects permanent circuit errors occurring in the functional safety display controller 12 using a hardware test pattern generator (TPG), also known as a hardware test library (HTL). The HTL is a hardware-defined and generated test sequence that maximizes coverage of the hardware logic. The fifth functional safety detection unit Fusa05 can detect permanent errors occurring during power-on and normal display periods using the HTL. Specifically, the HTL mode of the functional safety display controller 12 can be activated by a specified command. In this embodiment, the HTL can be activated during system power-on to detect random circuit errors caused by electronic fault flips in the system as early as possible. When a circuit abnormality is detected, the functional safety display controller 12 can report an error interrupt in real time. In other embodiments, the HTL can also be activated during normal system display, with hardware maintaining the internal HTL and the data and control flow of the display output.

[0055] It should be understood that the inclusion of a third functional safety detection unit Fusa03, a fourth functional safety detection unit Fusa04, and a fifth functional safety detection unit Fusa05 in the image processing module 122 of this application embodiment is merely one feasible embodiment of this application, but this application is not limited thereto. In some other embodiments, the image processing module may also include only any one or two of the third functional safety detection unit, the fourth functional safety detection unit, and the fifth functional safety detection unit.

[0056] In one embodiment of this application, the functional safety display controller 12 includes a display interface control module 123. The display interface control module 123 receives configuration information from the register parsing module 121 and pixel data information from the image processing module 122, and generates standard display interface data to be transmitted to the display 14. Please continue reading. Figure 3 In this embodiment of the application, the display interface control module 123 includes a display interface control unit 1231, a sixth functional safety detection unit Fusa06, a seventh functional safety detection unit Fusa07, and an eighth functional safety detection unit Fusa08.

[0057] The sixth functional safety detection unit, Fusa06, is used to detect permanent circuit errors occurring in the functional safety display controller 12. In this embodiment, the function and implementation of the sixth functional safety detection unit, Fusa06, are similar to those of the fifth functional safety detection unit, Fusa05, and will not be described in detail here.

[0058] The seventh functional safety detection unit, Fusa07, is used to detect random errors occurring in the internal pixel pipeline control circuit of the functional safety display controller 12.

[0059] In some implementations, the seventh functional safety detection unit Fusa07 detects random errors occurring in the pixel pipeline control circuitry within the functional safety display controller 12 by monitoring the number of pixels. Specifically, the seventh functional safety detection unit Fusa07 uses the configuration data detected by the first functional safety detection unit Fusa01 and the second functional safety detection unit Fusa02 to obtain the desired total number of pixels. The seventh functional safety detection unit Fusa07 defines M monitoring points internally in the hardware, where M is a positive integer greater than or equal to 1. It should be noted that... Figure 3The diagram shows the case where M=1, but this application is not limited to this. In some other embodiments, multiple pixel count monitoring points can be defined according to circuit function. The seventh functional safety detection unit Fusa07 detects and counts the number of pixels at the designated monitoring points. At the next time point after the end of a frame, the comparison circuit in the seventh functional safety detection unit Fusa07 compares the actual value with the expected value. If the two values ​​do not match, the seventh functional safety detection unit Fusa07 sends a pixel count error interrupt to the functional safety interrupt of the functional safety display controller 12.

[0060] The eighth functional safety detection unit, Fusa08, is used to detect random errors in the display data between the functional safety display controller 12 and the display 14.

[0061] In some implementations, the eighth functional safety detection unit Fusa08 detects random errors in the displayed data between the functional safety display controller 12 and the display 14 using pixel content cyclic redundancy encoding. The polynomial of the cyclic redundancy encoding needs to be uniformly defined between the functional safety display controller 12 and the display 14; the specific definition method is not limited in this application. The display interface control module 123 performs cyclic redundancy encoding on each valid data sent to the interface, with the encoding done in rows or frames. The cyclic redundancy encoding value of the data block can be transmitted in various ways. For example, in some embodiments, the cyclic redundancy encoding value can be sent to the display 14 in real time via a time-division multiplexed display data bus, which includes, but is not limited to, a display port (DP) or a display pixel interface (DPI). In other embodiments, the cyclic redundancy encoding value can be stored in an internal register, and the software obtains the cyclic redundancy encoding value by reading the register.

[0062] It should be understood that the inclusion of the sixth functional safety detection unit Fusa06, the seventh functional safety detection unit Fusa07, and the eighth functional safety detection unit Fusa08 in the display interface control module 123 of this application is only one feasible embodiment of this application, but this application is not limited thereto. In some other embodiments, the image processing module may also include only one or two of the sixth functional safety detection unit, the seventh functional safety detection unit, and the eighth functional safety detection unit.

[0063] In one embodiment of this application, the functional safety display controller 12 includes a memory access control module 124. The memory access control module 124 reads image data from the memory 13 via a data bus and stores the image data returned by the memory 13 into the internal storage module 125. Please continue reading. Figure 3In this embodiment of the application, the memory access control module 124 includes a memory access control unit 1241, a ninth functional security detection unit Fusa09, a tenth functional security detection unit Fusa10, an eleventh functional security detection unit Fusa11, and a twelfth functional security detection unit Fusa12.

[0064] The ninth functional safety detection unit, Fusa09, uses a hardware test library to detect permanent circuit errors in the functional safety display controller. In this embodiment, the function and implementation of the ninth functional safety detection unit, Fusa09, are similar to those of the fifth functional safety detection unit, Fusa05, and will not be described in detail here.

[0065] The tenth functional safety detection unit, Fusa10, is used to detect random errors occurring in the pixel transmission data path between the functional safety display controller 12 and the memory 13.

[0066] In some implementations, the tenth functional safety detection unit Fusa10 detects random errors in the pixel transmission data path between the functional safety display controller 12 and the memory 13 by decoding and detecting the cyclic redundancy of the data content received by the data bus. It should be noted that the polynomial used for cyclic redundancy encoding by the memory access control unit 1241 as the receiver, and the size of the encoded data block, need to be defined uniformly at the system level. Based on the per-frame operation attributes of the functional safety display controller 12, in this embodiment, the maximum size of the data block is configured to be the size of the entire image.

[0067] The eleventh functional safety detection unit, Fusa11, is used to monitor the data bus for timeouts in order to detect random errors in the control path between the functional safety display controller 12 and the memory 13.

[0068] In some implementations, the eleventh functional safety detection unit (Fusa11) defines two request monitoring points: the first monitoring point is at the source of the request sender, and the second monitoring point is at the I / O interface between the functional safety display controller 12 and the memory 13. The eleventh functional safety detection unit (Fusa11) sets counters 1 and 2 at the two monitoring points respectively. Each time a read request is received at each monitoring point, the corresponding counter is incremented. The eleventh functional safety detection unit (Fusa11) simultaneously monitors the amount of data returned from the I / O, which can be represented by counter 3. After a frame ends, the comparison circuit of the eleventh functional safety detection unit (Fusa11) compares the values ​​of counters 1, 2, and 3. If any two of the counter values ​​are not equal, the eleventh functional safety detection unit (Fusa11) sends a control path error interrupt to the functional safety interrupt of the functional safety display controller 12.

[0069] The twelfth functional safety detection unit, Fusa12, is used to monitor the data bus protocol to detect random errors occurring in the control path between the functional safety display controller 12 and the memory 13.

[0070] In some implementations, the twelfth functional safety detection unit Fusa12 can define the scenarios of protocol violation according to the bus protocol. If any violation of the bus protocol is detected, the twelfth functional safety detection unit Fusa12 will send a control path error interrupt to the functional safety interrupt of the functional safety display controller 12.

[0071] In one embodiment of this application, the functional safety display controller 12 includes an internal storage module 125 for storing image data read from the memory 13. Please continue reading. Figure 3 In this embodiment, the internal storage module 125 includes an internal storage unit 1251 and a thirteenth functional safety detection unit Fusa13. The thirteenth functional safety detection unit Fusa13 is used to detect random circuit errors occurring in the internal storage module.

[0072] In some implementations, the thirteenth functional safety detection unit Fusa13 can protect the internal storage unit 1251 through ECC (Error Correcting Code).

[0073] In one embodiment of this application, the functional safety display controller 12 includes an interrupt control module 126, through which both permanent and temporary errors detected by the functional safety detection unit are reported to the central controller 11.

[0074] Optionally, in this embodiment, the interrupt control module 126 includes an interrupt control unit 1261 and a fourteenth functional safety detection unit Fusa14. The fourteenth functional safety detection unit Fusa14 is used to detect and correct random circuit errors occurring in the functional safety interrupt path.

[0075] Given the greater severity of random circuit errors occurring in the interrupt control unit 1261, in some implementations, the fourteenth functional safety detection unit Fusa14 uses triple-modulus redundancy protection to detect and correct random circuit errors occurring in the functional safety interrupt path. Specifically, triple-modulus redundancy generates two identical modules based on the module to be hardened, and outputs the result through majority voting. This ensures that the circuit can still function normally even if one module fails, thereby greatly reducing the impact of random errors generated by the interrupt circuit itself and enhancing system reliability.

[0076] As described above, the functional safety display control system 1 provided in some embodiments of this application can detect permanent errors occurring during power-on startup and normal display through functional safety detection units Fusa05, Fusa06, and Fusa09, and monitor permanent and temporary errors occurring in the circuit in real time during normal display through functional safety detection units Fusa01 to Fusa04, Fusa07, Fusa08, and functional safety detection units Fusa10 to Fusa14. Furthermore, permanent and temporary errors occurring in the functional safety display controller 12 are reported to the central controller 11 via interrupts. The interrupt path is detected and corrected by the functional safety detection units, enabling the central controller 11 to obtain the correct interrupt alarm.

[0077] Furthermore, in some embodiments of this application, the data bus between the functional safety display controller 12 and the memory 13 can detect random errors occurring in the data bus path through functional safety detection units Fusa05, Fusa10, Fusa11, and Fusa12. In these embodiments, the display data path between the functional safety display controller 12 and the display 14 can detect random errors occurring in the display data bus path through functional safety detection mechanisms Fusa05 to Fusa07.

[0078] Based on the above description of the functional safety display control system, this application embodiment also provides a functional safety display controller. This functional safety display controller is communicatively connected to a central controller, a memory, and a display. At least one internal module of the functional safety display controller is provided with a functional safety detection unit, wherein the functional safety detection unit is used to detect random errors in the corresponding module. The functional safety display controller provided in this application embodiment can employ... Figures 1 to 3 The structure and connection method shown are for implementation purposes only, but this application is not limited thereto.

[0079] In summary, the functional safety display controller provided in this application embodiment is communicatively connected to the central controller, memory, and display to jointly form a functional safety display control system. This system is a hardware functional safety display control system compliant with the ISO26262 standard, effectively addressing issues such as R&D costs, risk control, and system area overhead. Furthermore, the functional safety display controller provided in some embodiments of this application can subdivide corresponding functional safety detection mechanisms according to circuit function and type, with controllable area overhead, making it an inheritable and scalable solution. Moreover, the functional safety display control system composed of the functional safety display controller, central controller, memory, and display provided in some embodiments of this application does not require software certification and can detect and report random electronic and electrical errors in the circuit in real time. While possessing higher real-time performance, security, and reliability, it can significantly reduce product R&D costs, accelerate product development progress, and reduce development risks. Compared to ordinary display control systems, this functional safety display control system requires only 1.2 to 1.4 times the area overhead to detect more than 90% of random circuit errors. Therefore, this application overcomes the various shortcomings of the prior art and has significant industrial value.

[0080] It should be understood that the systems or devices disclosed in the several embodiments provided in this application can be implemented in other ways. For example, the device embodiments described above are merely illustrative. For instance, the division of modules / units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple modules or units may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be through some interfaces, and the indirect coupling or communication connection of devices or modules or units may be electrical, mechanical, or other forms.

[0081] The modules / units described as separate components may or may not be physically separate. The components shown as modules / units may or may not be physical modules; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules / units can be selected to achieve the objectives of the embodiments of this application, depending on actual needs. For example, the functional modules / units in the various embodiments of this application may be integrated into one processing module, or each module / unit may exist physically separately, or two or more modules / units may be integrated into one module / unit.

[0082] Those skilled in the art will further recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of both. To clearly illustrate the interchangeability of hardware and software, the components and steps of the various examples have been generally described in terms of functionality in the foregoing description. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0083] The above embodiments are merely illustrative of the principles and effects of this application and are not intended to limit this application. Any person skilled in the art can modify or alter the above embodiments without departing from the spirit and scope of this application. Therefore, all equivalent modifications or alterations made by those skilled in the art without departing from the spirit and technical concept disclosed in this application should still be covered by the claims of this application.

Claims

1. A functional safety display controller, characterized in that, The functional safety display controller is connected to the central controller, memory and display via communication lines. At least one internal module of the functional safety display controller is provided with a corresponding functional safety detection unit, which is used to detect random errors in the corresponding module. The functional safety display controller includes a register parsing module, which is equipped with a first functional safety detection unit and a second functional safety detection unit, wherein: The first functional safety detection unit is used to detect random errors in the configuration data between the central controller and the functional safety display controller, as well as between the functional safety display controller and the internal user terminal. The first functional safety detection unit detects random errors in the configuration data between the central controller and the functional safety display controller, as well as between the functional safety display controller and the internal user terminal, by performing parity checks on the configuration bus content. For parity check detection of the configuration bus, a segmented detection method is used to divide the internal configuration bus path into N segments, so that all configuration paths related to other internal units or modules are detected. N is a positive integer greater than or equal to 1. The parity check bits from the sending end to the receiving end of each sub-path are detected separately. Any functional safety parity check error occurring in any sub-path will be sent to the functional safety display interrupt of the functional safety display controller. The second functional safety detection unit is used to detect random errors occurring in the control circuit between the central controller and the functional safety display controller. The second functional safety detection unit detects random errors in the control circuit between the central controller and the functional safety display controller by monitoring the configuration bus for timeouts. When a read / write request is successfully received from the central controller, the counter inside the second functional safety detection unit for monitoring bus access starts timing. When feedback is successfully received from the request destination, the counter is cleared. If the counter exceeds a set threshold, the monitoring circuit of the second functional safety detection unit sends an access timeout error interrupt to the functional safety interrupt of the functional safety display controller. The functional safety display controller also includes an interrupt control module. Permanent and / or temporary errors detected by the functional safety detection unit are reported to the central controller in the form of an interrupt through the interrupt control module. The interrupt control module includes a fourteenth functional safety detection unit, which uses a three-modular redundancy method to detect and correct random circuit errors that occur in the functional safety interrupt path.

2. The functional safety display controller according to claim 1, characterized in that, The functional safety display controller includes an image processing module, which is equipped with a third functional safety detection unit, a fourth functional safety detection unit, and a fifth functional safety detection unit, wherein: The third functional safety detection unit is used to detect random errors in the pipeline data information inside the functional safety display controller; The fourth functional safety detection unit is used to detect random errors occurring in the combined circuits between the pipelines inside the functional safety display controller. The fifth functional safety detection unit is used to detect permanent circuit errors occurring in the functional safety display controller.

3. The functional safety display controller according to claim 2, characterized in that: The third functional safety detection unit detects random errors in the pipeline data information inside the functional safety display controller by performing parity checks on the timing circuit; and / or The fourth functional safety detection unit detects random errors occurring in the combined circuits between pipelines within the functional safety display controller, using each pipeline as the smallest unit. and / or The fifth functional safety detection unit uses a hardware test library to detect permanent circuit errors occurring in the functional safety display controller.

4. The functional safety display controller according to claim 1, characterized in that, The functional safety display controller includes a display interface control module, which is equipped with a sixth functional safety detection unit, a seventh functional safety detection unit, and an eighth functional safety detection unit, wherein: The sixth functional safety detection unit is used to detect permanent circuit errors occurring in the functional safety display controller; The seventh functional safety detection unit is used to detect random errors occurring in the pixel pipeline control circuit inside the functional safety display controller. The eighth functional safety detection unit is used to detect random errors in the display data between the functional safety display controller and the display.

5. The functional safety display controller according to claim 4, characterized in that: The sixth functional safety detection unit uses a hardware test library to detect permanent circuit errors occurring in the functional safety display controller; and / or The seventh functional safety detection unit detects random errors occurring in the pixel pipeline control circuit inside the functional safety display controller by monitoring the number of pixels. and / or The eighth functional safety detection unit detects random errors in the display data between the functional safety display controller and the display by using pixel content cyclic redundancy transmitter encoding.

6. The functional safety display controller according to claim 1, characterized in that, The functional safety display controller includes a memory access control module, which is equipped with a ninth functional safety detection unit, a tenth functional safety detection unit, an eleventh functional safety detection unit, and a twelfth functional safety detection unit, wherein: The ninth functional safety detection unit is used to detect permanent circuit errors occurring in the functional safety display controller; The tenth functional safety detection unit is used to detect random errors occurring in the pixel transmission data path between the functional safety display controller and the memory; The eleventh functional safety detection unit and the twelfth functional safety detection unit are used to detect random errors occurring in the control path between the functional safety display controller and the memory.

7. The functional safety display controller according to claim 6, characterized in that: The ninth functional safety detection unit uses a hardware test library to detect permanent circuit errors occurring in the functional safety display controller; and / or The tenth functional safety detection unit detects random errors in the pixel transmission data path between the functional safety display controller and the memory by decoding and detecting the data content cyclic redundancy receiver of the data bus. and / or The eleventh functional safety detection unit detects random errors in the control path between the functional safety display controller and the memory by performing timeout monitoring on the data bus; and / or The twelfth functional safety detection unit detects random errors in the control path between the functional safety display controller and the memory by monitoring the data bus protocol.

8. The functional safety display controller according to claim 1, characterized in that, The functional safety display controller includes an internal storage module, which is equipped with a thirteenth functional safety detection unit, wherein: The thirteenth functional safety detection unit is used to detect random circuit errors occurring in the internal storage module.

9. The functional safety display controller according to claim 8, characterized in that, The thirteenth functional safety detection unit uses error correction codes to detect random circuit errors occurring in the internal storage module.

10. The functional safety display controller according to claim 1, characterized in that, The functional safety detection unit is also used to detect random errors occurring on the configuration bus between the functional safety display controller and the central controller, random errors occurring on the image data bus between the functional safety display controller and the memory, and / or random errors occurring on the display data bus between the functional safety display controller and the display.

11. A functional safety display control system, characterized in that, The functional safety display control system includes a central controller, a memory, a display, and a functional safety display controller as described in any one of claims 1 to 10.

Images