Control method and control device for controlling indicators of a vehicle human-machine interface

Abstract

The invention relates to a control method and a control device for controlling an indicator (10, 11, 12) of a human-machine interface (1) called IHM to be displayed on a screen of a vehicle. To this end, a request is received by a computer, said request comprising first information and second information, said first information identifying at least partially said vehicle, said second information identifying the indicator (10, 11, 12) to be controlled. Said first information and said second information are used by said computer to identify in a memory a particular configuration for displaying said indicator (10, 11, 12). Video stream data are generated in accordance with the configuration for displaying said IHM, said video stream data comprising the part of said IHM (1) comprising said indicator (10, 11, 12). These data are associated with control information which is compared with reference control information to determine the conformity of the display of said indicator (10, 11, 12).

Description

Technical Field

[0001] This invention claims priority to French application 2100664, filed on January 25, 2021, the contents of which (text, drawings and claims) are incorporated herein by reference.

[0002] This invention relates to a method and apparatus for controlling a set of témoins (human-machine interface symbols) to be displayed on a screen in a vehicle (especially a motor vehicle). The invention also relates to a verification method and apparatus for verifying the security level associated with the display of vehicle control témoins. Background Technology

[0003] The increasing complexity of vehicles is accompanied by higher requirements for the safety of the vehicles and their passengers. Systems, components, and functions implemented in vehicles typically need to meet defined safety levels. These safety levels are described, for example, in the standard ISO 26262, and are identified by their ASIL levels (Automotive Safety Integrity Level, or Niveau d'intégritéde sécuritéautomobile, i.e., ASIL A, ASIL B, ASIL C, or ASIL D).

[0004] For example, components or computers used to control a vehicle's braking system must be at a very high ASIL level (e.g., ASIL D). In the event of a problem or malfunction in the braking system, the driver of the vehicle must be notified to take action, such as requiring the vehicle to stop and / or scheduling an appointment at a repair shop. To alert the driver to the problem, it is known to display an indicator indicating the problem, for example, on the dashboard. This indicator is displayed, for example, by activating an LED that illuminates an icon on the dashboard, in which case the indicator corresponds to a physical indicator.

[0005] Modern vehicles are equipped with one or more screens displaying one or more human-machine interfaces (IHMs) that allow the driver or passengers to interact with the vehicle. These IHMs are now used to display information such as the vehicle's speed, or to display one or more indicators to point out optional questions. The diversity of these IHMs is vast, with each vehicle model having its own specific IHM arrangement, particularly featuring a special arrangement of the elements to be displayed and / or special graphics.

[0006] Testing the conformity of certain indicators with the safety level is necessary. However, the considerable diversity of the IHMs complicates this operation, leading to higher associated costs and a greater risk of error in selecting tests corresponding to specific vehicle configurations. Summary of the Invention

[0007] The purpose of this invention is to improve the verification of the conformity of vehicle indicators with respect to the required safety level.

[0008] Another objective of this invention is to optimize the control of vehicle safety indicators.

[0009] According to a first aspect, the present invention relates to a method for controlling a set of indicators for a human-machine interface to be displayed on at least one screen in a vehicle, the set of indicators including at least one indicator, the method being implemented by a computer installed in the vehicle and comprising the following steps:

[0010] - Receive a request, the request including first information and second information, the first information at least partially identifying the vehicle, and the second information identifying a set of indicators to be controlled;

[0011] - Identify first data in a memory associated with the computer based on the first information and the second information, the first data representing a display configuration for displaying the set of indicators in the human-machine interface;

[0012] - Generate second data based on the first data, the second data representing a portion of the video stream, and the control information of the second data is associated with the second data;

[0013] - The control information is compared with reference control information corresponding to the configuration, the reference control information being stored in the memory;

[0014] - Based on the result of the comparison, a third piece of information is determined, which characterizes the consistency status of the display of the indicator set.

[0015] According to the variant, the request belongs to a request set, each of which is identified by a determined invocation name that conforms to a determined naming protocol.

[0016] According to another variation, the first data includes:

[0017] - Data representing the spatial location of each indicator in the indicator set within the human-machine interface; and / or

[0018] - Data characterizing the display color of each indicator in the indicator set; and / or

[0019] - Data characterizing the size of each indicator in the indicator set; and / or

[0020] - Data that characterizes resolution.

[0021] According to the supplementary variant, the security level corresponding to ASIL A is associated with each indicator in the set of indicators.

[0022] According to a variant, the first data is identified based on a correspondence table stored in the memory, the correspondence table including a list of human-machine interface identification codes, each human-machine interface identification code corresponding to a single piece of first information in a first information set.

[0023] According to an additional variant, the control information corresponds to a periodic redundant control value.

[0024] According to another variation, the video stream is used by a computer that controls the at least one screen, and the second data corresponds to an upper layer in a stack of layers included in the video stream, the video stream including data from the human-machine interface.

[0025] According to a second aspect, the present invention relates to a control device for controlling a set of indicators for a human-machine interface to be displayed on at least one screen of a vehicle, the set of indicators including at least one indicator, the device including a memory associated with a processor configured to implement the steps of the method according to the first aspect of the invention.

[0026] According to a third aspect, the present invention relates to a vehicle, for example a motor vehicle, which includes the means according to the second aspect of the invention as described above.

[0027] According to a fourth aspect, the present invention relates to a computer program comprising instructions adapted to perform steps of the method according to the first aspect of the invention, particularly when the computer program is executed by at least one processor.

[0028] This computer program can use any programming language and presents itself in the form of source code, object code, or intermediate code between source code and object code, such as in a partially compiled form or any other desired form.

[0029] According to a fifth aspect, the present invention relates to a computer-readable recording medium having a computer program recorded thereon, the computer program including instructions for performing the steps of the method according to a first aspect of the invention.

[0030] On the one hand, the recording medium can be any entity or device capable of storing the program. For example, the medium may include a storage component (e.g., a memory ROM, CD-ROM, or a microelectronic circuit type memory ROM, or a magnetic recording component or hard disk).

[0031] On the other hand, the recording medium can also be a transmissible medium (e.g., electrical or optical signals), which can be guided via electrical or optical cables through conventional radio or Hertz radio, or via a self-guided laser beam, or by other means. The computer program according to the invention can be downloaded, particularly via an Internet-type network.

[0032] Alternatively, the recording medium may be an integrated circuit in which the computer program is incorporated, the integrated circuit being adapted to perform the method in question or to be used in the performance of the method in question. Attached Figure Description

[0033] Other features and advantages of the invention will become more apparent from the following detailed description of non-limiting embodiments and the accompanying drawings, in which:

[0034] - Figure 1 A vehicle human-machine interface according to a particular embodiment of the present invention is illustrated schematically;

[0035] - Figure 2 A control method according to a particular embodiment of the present invention is shown. Figure 1 Human-machine interface control system;

[0036] - Figure 3 A control method according to a particular embodiment of the present invention is shown. Figure 1 Human-machine interface control device;

[0037] - Figure 4 A control method according to a particular embodiment of the present invention is shown. Figure 1 A flowchart of the different steps in the control method of human-machine interface indicators. Detailed Implementation

[0038] The following text will now combine Figures 1 to 4 A method and apparatus for controlling a set of indicators for a human-machine interface to be displayed on at least one screen in a vehicle are described. In the following description, the same elements are identified by the same reference numerals.

[0039] According to a non-limiting particular embodiment of the invention, control of one or more indicators (which form a set of indicators for a human-machine interface (IHM) to be displayed on at least one screen of a vehicle) includes receiving a request from the vehicle's computer, the request including first information and second information, the first information at least partially identifying the vehicle, and the second information identifying the set of indicators to be controlled. The first and second information are used by the computer to identify first data in memory, the first data being associated with a specific configuration for displaying the indicators identified by the second information. Thereby, the computer generates second data based on the identified first data, the second data corresponding to a portion of a video stream generated by the computer for displaying the IHM. This second data is advantageously associated with control information (e.g., CRC (Cyclic Redundancy Check)). This control information is then associated with “de redondancecyclique”. This control information is then compared with reference control information stored in memory, which is associated with a specific configuration identified through the first and second information. The result of the comparison determines third information, which characterizes the conformity status of the display of the indicator set. When the comparison result indicates that the control information corresponds to the reference control information, it is inferred that the display of the indicator set is as expected. Otherwise, when the comparison result indicates that the control information does not correspond to the reference control information, it is inferred that the display of the indicator set is not as expected, for example, that the representation of the indicator in the IHM does not meet the expected security level (e.g., ASIL A).

[0040] This method can test any display configuration used to display indicators in the IHM based on a request. The request includes first and second information: the first information enables retrieval of a specific IHM configuration corresponding to the vehicle, and the second information enables identification of one or more indicators to be tested. This information thereby allows access to configuration information stored in memory corresponding to the vehicle under test.

[0041] This method is advantageously implemented within the scope of the control to ensure a failure rate associated with the ASIL A or ASIL B level of the indicator (especially the safety indicator, which is used to alert the driver of the vehicle to a malfunction of the vehicle's system or component and the need for the vehicle to stop).

[0042] ASIL levels advantageously correspond to the failure targets to be guaranteed (e.g., from 10⁻⁶ failures per hour to 10⁻⁸ failures per hour) in order to protect the integrity and operation of the vehicle's systems or components. Multiple ASIL levels exist, classified according to associated constraint levels (i.e., levels QM, A, B, C, and D, where QM corresponds to the lowest constraint level and D corresponds to the highest constraint level).

[0043] Figure 1 A human-machine interface 1 for a vehicle according to a non-limiting particular embodiment of the present invention is illustrated schematically.

[0044] Figure 1 A particular example of a human-machine interface (HMI) is shown, displayed on a screen arranged in the passenger compartment of a vehicle (e.g., a motor vehicle). Of course, the vehicle is not limited to a motor vehicle, but extends to any type of vehicle equipped with one or more screens (e.g., cars, buses, trucks, utility vehicles, that is, land motor vehicle types), on which IHM graphics are displayed graphically.

[0045] IHM 1 is used to display a set of information destined for the vehicle's driver and / or passengers. According to Figure 1 For example, this information includes information related to speed, remaining energy level (such as the energy level in the battery or the fuel level in the tank), mileage, etc.

[0046] Among this information, the IHM includes a set of indicators, at least a portion of which corresponds to a set of so-called security or alarm indicators 10, 11, 12. The indicators correspond to graphic icons or pictographs with defined colors.

[0047] Each indicator advantageously has a defined particular graphic form or illustration and a defined particular color. Some of the illustrations and colors associated with the indicators (especially with the security or alarm indicators) are defined, for example, in international standards (e.g., ECE R121).

[0048] Each of the warning or safety indicators indicates an engine malfunction (requiring immediate cessation) or a danger to the passengers of the vehicle, and the display of such an indicator alerts the driver of the necessity to stop the vehicle. A safety level corresponding to so-called ASIL A is advantageously associated with each of the safety or warning indicators 10, 11, 12 to ensure that such an indicator is displayed when the malfunction or failure is observed.

[0049] Each alarm indicator 10, 11, and 12 belongs to a security or alarm indicator set, which in particular includes:

[0050] - Battery charging indicator: The display of this indicator indicates that the battery is undercharged, for example due to a faulty alternator;

[0051] - Engine oil pressure indicator: This indicator displays insufficient pressure (which is less than a defined threshold);

[0052] - Engine oil temperature indicator: This indicator shows that the engine oil is overheated (the temperature is greater than a defined threshold);

[0053] - Coolant temperature indicator: This indicator displays any engine overheating (temperature exceeding a defined threshold);

[0054] - Brake failure or brake system failure indicator: This indicator displays information such as low pressure in the brake circuit and / or insufficient brake fluid and / or clamping of the parking brake.

[0055] - Tire pressure indicator: This indicator displays excessive pressure loss in one or more tires of the vehicle; and

[0056] - Unfastened seatbelt indicator: This indicator shows that the driver and / or passenger have not fastened their seatbelt.

[0057] The object of the present invention is particularly to control compliance with one or more of these security indicators’ associated security levels (e.g., ASIL A) by means of the processes or methods described in detail below.

[0058] Depending on the optional implementation variant, in addition to testing the display of one or more alarm or safety indicators mentioned above, the display of one or more so-called warning indicators may also be tested. Warning indicators correspond to indicators used to indicate a malfunction in the vehicle's electronic systems or the need for rapid repair of vehicle components, while retaining the possibility of continued use of the vehicle. The set of warning indicators to be controlled may include, for example, one or more of the following indicators: engine oil level indicator, airbag indicator, ABS system indicator, electronic trajectory correction system indicator, brake disc wear indicator, vehicle anti-skid system indicator, fuel level indicator, engine decontamination indicator, power steering indicator, and faulty light bulb indicator.

[0059] An IHM (e.g., IHM 1) corresponds, for example, to a stack of layers, each layer corresponding to a defined set of graphic elements, the stacking of which enables the rendering of the IHM. The indicator to be displayed is advantageously included in only one and the same layer, for example, the upper layer in the stack. As an example, the stack of layers comprises five layers numbered 1 to 5, and the layer including the indicator corresponds to the 5th layer (that is, the layer stacked on top of the other layers).

[0060] Figure 2 A system 2 according to a non-limiting particular embodiment of the present invention is shown, the system being configured to manage a set of indicators to be displayed in an IHM mounted on one or more screens in a vehicle.

[0061] System 2 is advantageously installed in the vehicle, wherein, reference Figure 1 The described IHM is to be displayed. System 2 corresponds, for example, to a portion of the loaded system of the vehicle. System 2 includes, for example, multiple UCE (“Unité de Commande Electronique”) type computers 20, 21, 22, 23. The UCE consists of an electronic computer and one or more loaded software programs used to implement one or more servers.

[0062] Computers 20 to 23 are advantageously connected via a wired link (e.g., CAN, which stands for "Controller Area Network" in English, or "Réseau de" in French). CAN FD (English: "Controller Area Network Flexible Data-Rate", or French: "Réseau de Communication connections can be made using data buses of the following types: flexible bit, FlexRay (standardized by ISO 17458), or Ethernet (standardized by ISO / IEC 802.3).

[0063] according to Figure 2In this architecture, computer 20 corresponds, for example, to a main computer, and each of computers 21 to 23 corresponds to a slave computer of the main computer 20. Computer 20 corresponds, for example, to a computer responsible for the IVI (In Vehicle Infotainment, or French "Infodivertissement dans le véhicule") system, and computer 20 is also named IVI computer 20. Thus, IVI computer 20 is responsible for the vehicle's infotainment system, which provides, by means of IHM, audio and video access (e.g., Internet access) within the vehicle, access to road information, navigation, digital playback services and streaming media, and the generation of vehicle-related information (which is to be presented (e.g., displayed) on a screen with the destination of the vehicle's driver and / or passengers). An example of this architecture of IVI computer 20 is referred to further below. Figure 3 Describe in detail.

[0064] The IVI computer 20 generates, for example, content to be presented on peripheral devices (e.g., one or more displays, one or more speakers) installed in the vehicle. Each of these peripheral devices is controlled, for example, by computers 21, 22, and 23, which receive data to be presented (e.g., played or displayed) on the peripheral devices associated with the computers involved.

[0065] For example, computer 21 receives a video stream including data characterizing the IHM, which is responsible for reconstructing parameters, data, and information related to the vehicle (especially, for example, related to safety or warning indicators having an associated safety level equal to ASIL A) for the driver. Computer 21 then manages the display of the IHM on one or more displays under its control.

[0066] The IVI computer 20 is advantageously used to implement a control process for a set of control indicators, which, for example, includes one or more security indicators, and the operation forms such a process as described below.

[0067] In the first operation, the IVI computer 20 receives a request for control over one or more indicators forming a set of indicators to be tested. This control is particularly effective in ensuring a level of security regarding the display of each of these indicators when such a display is requested (i.e., in the event of a failure in the system or component associated with the indicator under consideration).

[0068] The request advantageously includes first information (corresponding to a first identification code) that is capable of at least partially identifying the vehicle. The first information included in the request is used, for example (particularly by referring to the configuration of the IHM in relation to the display of the indicators (particularly the safety or warning indicators)) to identify the vehicle's item number.

[0069] The request also includes second information that enables identification of which or more indicators are to be monitored. This second information may correspond, for example, to a mask of indicators to be tested. This second information may take the form of an indicator list, for example, where for each indicator, the list contains information indicating whether the associated indicator is to be monitored. This information may correspond, for example, to a bit that takes a value of 0 when the associated indicator is not to be monitored, and a value of 1 when the associated indicator is to be monitored.

[0070] The request is initiated, for example, by a remote computing device (e.g., a diagnostic computer or a monitoring computer) and transmitted to the IVI computer 20 via a wired connection that connects the remote computing device to the IVI computer 20.

[0071] According to a particular implementation example, the request corresponds to a data frame that includes the following information:

[0072] - A frame header, which is encoded, for example, in 4 octets and includes, for example, information (e.g., the length of the frame, the type of the frame). According to an embodiment, the frame header also includes a set of information capable of retrieving and identifying the frame from a list of frames stored in the memory of the telecomputing device. This information includes, for example, a vehicle item identification code that enables identification of the type, model, or version of the vehicle; and one or more of the following: information indicating whether computer 21 is monitored by IVI computer 20; and / or information indicating the number of physical indicators (e.g., displayed via LEDs) located outside the IHM; and / or information relating to the type of handbrake; and / or the type of the vehicle's steering system; and / or features of the display used to display the IHM 1 (e.g., the resolution of the screen).

[0073] - A first identification code (encoded, for example, by 1, 2, 3 or 4 octets) in a table stored in or associated with computer 20, the first identification code including display parameters of IHM 1 (especially available indicators in IHM 1), the first identification code at least partially corresponding to first information that at least partially identifies the vehicle;

[0074] -According to an optional variant, a second identification code (encoded, for example, in one, two, three, or four octets) of a table (stored in or associated with the computer 20) relates to a version of the IHM displayed in the vehicle, the second identification code at least partially corresponding to first information used (as a supplement to the first identification code) to at least partially identify the vehicle;

[0075] - A security mask (encoded, for example, with 2 octets), where each bit is associated with a single security indicator, the value of which indicates whether the associated security indicator is subject to control. The security mask may include, for example, a delimitable list containing a predetermined number of security indicators (e.g., 13, 14, 15, or 16 indicators), with a bit value associated with each indicator indicating whether the associated indicator is subject to control (0 for missing control, 1 for control to be implemented). This security mask corresponds to the second information.

[0076] The remote computing device, for example, stores a defined list of requests, each request being identified, for example, by information included in the frame header.

[0077] Special requests are invoked by the user via IHM by entering a call name according to a defined naming convention. For example, the request is invoked by entering the version number of the request, followed by the project name of the vehicle, then, for example, an indicator related to the monitoring (e.g., from monitoring if computer 21 is monitored by computer 20), then, for example, the number of physical indicators in the vehicle, and then, for example, the type of braking system. An example call name for the request corresponds to: “C0_D4x_Slave_16_Automatic”.

[0078] Wherein, C0 is the version of the request, D4x is the vehicle's item identification code, "Slave" (or "esclave" in French) indicates that computer 21 is being monitored, 16 is the physical number of the indicator, and "Automatic" (or "automatique" in French) is the handbrake type.

[0079] The information required to invoke a request is provided hierarchically, starting with the information of highest importance. Thus, when information of a higher hierarchy includes information related to information of a lower hierarchy, the request's invocation name ends with the information of the higher hierarchy (which includes information related to information of the lower hierarchy).

[0080] The use of naming protocols (which are defined and include explicit information regarding the naming of items in the vehicle) can, for example, limit human error associated with tests initiated to control the indicators.

[0081] In the second operation, the IVI computer 20 has received a request that is translated or decoded to extract the first and second information. The first and second information are used by the computer to identify a set of first data related to the display configuration for displaying the control indicator in the computer 20's memory (or memory associated with the computer 20). The first information, for example, enables the identification of a register or table storing IHM display parameters and data corresponding to the vehicle identified from the request.

[0082] For each type or version of the IHM in the vehicle set (implemented or loaded on the computer 20), the computer 20 advantageously includes a set of display parameters / data in its memory, each set of display parameters / data being identifiable via a single identification code (which corresponds to the first information of the request received in the first operation).

[0083] The second information only enables the selection of the indicator to be controlled from the set of indicators (which can be displayed in the IHM and are available).

[0084] The first data identified through the first information and the second information includes, for example:

[0085] - The location data for each indicator to be controlled, such as the coordinates of each pixel of each indicator to be controlled;

[0086] - Data related to the pixels used to form each indicator (e.g., color data, which may have an RGB (Red, Green, Blue in English, or Rouge, vert, bleu in French) format, with each color channel encoded, for example, in 8 bits).

[0087] - Data related to the resolution of the IHM.

[0088] In the third operation, computer 20 generates the portion of the video stream corresponding to the IHM to be displayed based on the first data obtained in the second operation. This portion of the video stream advantageously corresponds to data (referred to as second data) of the video stream (which corresponds to the layer of the IHM including the controllable indicator identified by the second information). This second data includes, for example, data associated with the pixels of the indicator to be displayed, that is, the row and column numbers associated with the color data for each pixel.

[0089] The IVI computer 20 advantageously determines control information based on this second data, which enables testing of the content of one or more frames (including the second data) to, for example, verify the integrity of the generated and transmitted second data.

[0090] The control information, for example, corresponds to CRC (Cyclic Redundancy Check in English, or "CRC in French"). The value of “de redondance cyclique” (which is calculated based on the second data), or the value corresponding to the so-called control sum (“checksum”).

[0091] The control information is advantageously attached to the generated second data and transmitted together with the second data to, for example, computer 21, so that computer 21 generates the layer of the IHM containing the indicators to be displayed.

[0092] In the fourth operation, the IVI computer 20 compares the control information generated in the third operation with reference control information, which corresponds to a special display configuration for displaying the indicator to be controlled. When the control information is a CRC and the control information is reference control information, the reference control information corresponds to a control sum and has the same properties as the control information appended to the second data; that is, the reference control information corresponds to a CRC value.

[0093] The reference control information is stored, for example, in the memory of computer 20, because it is associated with each possible display configuration for displaying a set of indicators in the IHM. For each type or version of the IHM (whose parameters are stored in the memory of the IHM), multiple reference control information are associated with reference control information for each possible display combination for displaying the indicators. This reference control information is stored, for example, in a correspondence table called a LUT (Look-Up Table), with each reference control information associated with an identification code in the table that corresponds to a specific display configuration for displaying one or more indicators.

[0094] The comparison is performed by IVI computer 20, that is, by a module, component, or element (e.g., software) of computer 20, which receives a video stream transmitted by a module of computer 20 responsible for generating the video stream, which is then used by computer 21. Thus, the comparison is performed by IVI computer 20 before the portion of the video stream including the second data and associated control information is transmitted to computer 21. The comparison is performed by a module, component, or dedicated element of computer 20 at the output of computer 20.

[0095] In the fifth operation, the board, module, or element of the computer 20 (which has performed the comparison of the fourth operation) determines third information based on the result of the comparison, the third information representing the consistency status of the display of the set of indicators identified by the second information.

[0096] The third information corresponds, for example, to a binary value. The third information may take a first value (e.g., 0), which indicates that the display of the indicator set is not as expected or as it should be; that is, it indicates that an error has occurred in a frame including the second data. The third information takes the first value when the result of the comparison indicates that the control information differs from the reference control information.

[0097] The third information, for example, takes a second value (e.g., 1), which indicates that the display of the indicator set is as expected or as it should be, that is, that the probability of an error occurring in a frame including the second data is very small (even zero). The third information takes the second value when the result of the comparison indicates that the control information is the same as the reference control information.

[0098] The calculation or determination of the third information can verify whether the operation of the security indicator meets the expected security level (e.g., ASIL A).

[0099] The advantage of this process is its universality; that is, it applies equally to any display configuration requested by the request. In this process, only the content of the request differs from one request to another, enabling testing of any display configuration for display indicators in any version of the IHM (especially depending on the vehicle). This allows for the management of the greater diversity in the configurations of the IHM, with control over the security level thus ensured by the universal blocks, modules, or components of the IVI computer 20, saving time and reducing the risk of errors associated with the incorrect selection of test modules that do not correspond to the tested configuration.

[0100] Figure 3 A device according to a non-limiting particular embodiment of the present invention is schematically illustrated, the device being configured to manage a set of indicators for an IHM to be displayed on one or more screens in a vehicle. Device 3, for example, corresponds to... Figure 2 The IVI computer 20.

[0101] Device 3, for example, is configured for implementing the reference. Figure 2 The described operation and / or reference Figure 4The steps of the described method. The elements of device 3 may be integrated individually or in combination in a single integrated circuit, multiple integrated circuits, and / or different components. Device 3 may be implemented as an electronic circuit or software (or computer) module, or a combination of electronic circuits and software modules. Depending on the specific implementation, device 3 may be connected, for example by means of a communication bus or through dedicated input / output ports, to other similar devices or systems (e.g., computers 21, 22, 23) and / or communication devices (e.g., TCU (Telematic Control Unit)). Télématique”)) link.

[0102] The apparatus 3 includes one or more processors 30 configured to execute instructions to implement the steps of the method and / or to execute instructions loaded with software in one or more of the apparatus 3. The processors 30 may include integrated memory, input / output interfaces, and various circuits known to those skilled in the art. The apparatus 3 also includes at least one memory 31, which may correspond to, for example, volatile memory and / or non-volatile memory and / or include memory storage devices (e.g., EEPROM, ROM, PROM, RAM, DRAM, SRAM, flash memory, magnetic disk, or optical disk) that may include the volatile memory and / or non-volatile memory.

[0103] One or more computer-coded software, including instructions to be loaded and executed by the processor, are stored, for example, on memory 31.

[0104] According to a non-limiting particular embodiment of the present invention, device 3 includes a panel 32 for communicating with an external device (e.g., a remote server). The interface element of panel 32 includes one or more interfaces of the following:

[0105] -For example LTE (English: "Long-Term Evolution", or French: "Evolutionàlong terme"), LTE-Advanced (or French: "LTE-avancé") type radio frequency interfaces;

[0106] - USB interface (English: "Universal Serial Bus", or French: "Bus Universel en Série");

[0107] -HDMI interface (English: "High Definition Multimedia Interface", or French: "Interface Multimedia High Definition");

[0108] -LIN interface (English: "Local Interconnect Network", or French: "Réseauinterconnectélocal").

[0109] According to another particular embodiment, device 3 includes a communication interface 33 capable of establishing communication with other devices (e.g., other computers on the system) via a communication channel 34. The communication interface 33 corresponds, for example, to a transmitter configured to transmit and receive information and / or data via the communication channel 34. The communication interface 33 corresponds, for example, to CAN (Controller Area Network). CAN FD (English: "Controller Area Network Flexible Data-Rate", or French: "Réseau de Wired networks of the type “flexible”, FlexRay (standardized by ISO 17458), or Ethernet (standardized by ISO / IEC 802.3).

[0110] Figure 4 A flowchart illustrating different steps of a control method for controlling a set of indicators of an IHM to be displayed on one or more screens in a vehicle, according to a non-limiting particular embodiment of the present invention, is shown. The method is, for example, controlled by a computer 20 installed in the vehicle or... Figure 3 The device 3 is implemented.

[0111] In the first step 41, the computer receives a request, which includes first information and second information, wherein the first information at least partially identifies the vehicle and the second information identifies a set of indicators to be controlled.

[0112] In the second step 42, first data is identified in the memory associated with the computer based on the first information and the second information, the first data representing a display configuration for displaying the set of indicators in the human-machine interface.

[0113] In the third step 43, second data representing a portion of the video stream is generated based on the first data, and control information for controlling the second data is associated with the second data.

[0114] In the fourth step 44, the control information is compared with reference control information, which corresponds to the display configuration shown by the first data and is stored in the memory.

[0115] In step 45, third information is determined based on the comparison result. This third information represents the consistency status of the display of the indicator set. Therefore, when the comparison result indicates that the control information corresponds to the reference control information, the third information represents a consistent state, meaning the display of the indicator set is correct. Otherwise, when the comparison result indicates that the control information does not correspond to the reference control information, the third information represents a inconsistent state, meaning the display of the indicator set is incorrect or erroneous.

[0116] According to the implementation variant, combined with Figure 2 Variations and examples of the described operations are applied to Figure 4 The steps of the method.

[0117] Of course, the present invention is not limited to the embodiments described above, but extends to a control method for controlling a security level associated with a set of indicators to be displayed in a vehicle, and extends to apparatus configured to implement such a method.

[0118] The present invention also relates to a vehicle (e.g., a motor vehicle, or more generally, a land-based autonomous vehicle), said vehicle comprising... Figure 2 System 2 and / or Figure 3 Device 3.

Claims

1. A control method for controlling a set of indicators (10, 11, 12) of a human-machine interface (1) to be displayed on at least one screen of a vehicle, the set of indicators (10, 11, 12) including at least one indicator, the control method being implemented by a computer (20) installed in the vehicle and comprising the following steps: - Receive (41) a request, the request including first information and second information, the first information at least partially identifying the vehicle, and the second information identifying the set of indicators (10, 11, 12) to be controlled; - Based on the first information and the second information, identify (42) first data in the memory associated with the computer, the first data representing a display configuration for displaying the indicator set (10, 11, 12) in the human-machine interface (1); - Generate (43) second data based on the first data, the second data representing a portion of the video stream, and the control information of the second data is associated with the second data; - The control information is compared with reference control information corresponding to the display configuration (44), the reference control information being stored in the memory; - Based on the result of the comparison (44), determine (45) third information, which characterizes the consistency status of the display of the indicator set (10, 11, 12).

2. The control method according to claim 1, wherein, The requests belong to a set of requests, each of which is identified by a determined invocation name that conforms to a determined naming protocol.

3. The control method according to claim 1 or 2, wherein, The first data includes: - Data representing the spatial location of each indicator in the indicator set (10, 11, 12) in the human-machine interface (1); and / or - Data characterizing the display color of each indicator in the indicator set (10, 11, 12); and / or - Data characterizing the size of each indicator in the indicator set (10, 11, 12); and / or - Data representing resolution.

4. The control method according to any one of claims 1 to 3, wherein, The security level corresponding to ASIL A is associated with each indicator in the set of indicators (10, 11, 12).

5. The control method according to any one of claims 1 to 4, wherein, The first data is identified based on a correspondence table stored in the memory, the correspondence table including a list of human-machine interface identification codes, each human-machine interface identification code corresponding to a single piece of first information in a first information set.

6. The control method according to any one of claims 1 to 5, wherein, The control information corresponds to periodic redundant control values.

7. The control method according to any one of claims 1 to 6, wherein, The video stream is used by a computer (21) that controls the at least one screen, and the second data corresponds to the upper layer in a stack of layers contained in the video stream, the video stream including data from the human-machine interface.

8. A control device (3) for controlling a set of indicators for a human-machine interface to be displayed on at least one screen of a vehicle, the set of indicators including at least one indicator, the control device (3) including a memory (31) associated with at least one processor (30) configured to implement the steps of the control method according to any one of claims 1 to 7.

9. A vehicle comprising the control device (3) according to claim 8.

10. A computer program product comprising instructions adapted to perform the steps of the control method according to any one of claims 1 to 7 when the computer program is executed by at least one processor.

Images