A method, device and computer system for off-line configuration of error-proofing of a vehicle-mounted controller during a reversing process
By adding a retry mechanism during the reversing process to reread the offline configuration data of the MPU and MCU, the functional abnormality caused by the lack of synchronization between the MPU and MCU data is resolved, ensuring the normal use and stability of the functions during the reversing process.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- DONGFENG MOTOR GRP
- Filing Date
- 2023-07-19
- Publication Date
- 2026-04-28
AI Technical Summary
During the reversing process, the MPU and MCU of the in-vehicle audio-visual entertainment system were not synchronized, resulting in inconsistent function configuration types and causing the functions to malfunction.
By adding a Retry mechanism, the offline configuration data of the MPU and MCU are reread, with a maximum limit of 250 times, each time with an interval of 20ms, and a total duration of 5s. If they are still inconsistent, the MCU data is used as the standard to perform the reversing service, ensuring that the function works normally after the data synchronization is completed.
This effectively prevents functional abnormalities caused by the failure to synchronize offline configuration data, ensuring the normal operation and stability of the function during reversing.
Smart Images

Figure CN117022145B_ABST
Abstract
Description
Technical Field
[0001] This invention relates to vehicle infotainment systems, and in particular to a method, device, and computer system for preventing errors during the reversing process when the vehicle controller is offline. Background Technology
[0002] In-vehicle entertainment systems typically implement differentiated functions based on offline configurations for each vehicle. Before reversing, when the in-vehicle system is first started after the offline configuration has been modified, the offline configuration data in the NVData partition of the in-vehicle system's MPU is synchronized with the latest offline configuration data from the MCU. Under normal circumstances, the synchronization of offline configuration data takes about 1 second. If the corresponding function is started too early, there may be a situation where the data read from NVData is data from before the MCU and NVData partition have been synchronized. The NVData partition has not yet completed the synchronization with the MCU's offline configuration data. The NVData read by the corresponding function service is inconsistent with the offline configuration data of the MCU, which will cause the corresponding function service to be unable to determine the true function configuration type (such as AVM / single reversing), making the function unusable, such as the reversing camera not displaying correctly.
[0003] In response to this situation, some automakers have proposed a technical solution titled "A Method for Error-Proofing Offline Configuration of Passenger Vehicle Instrument Cluster System." During reversing, if the SOC processor receives an IG change notification from the MCU controller while acquiring various offline configuration data from the offline configuration data group transmitted by the MCU controller, the MCU controller interrupts the transmission of other untransmitted offline configuration data from the offline configuration data group to the SOC processor. The SOC processor then resets all initialization signal values except for the offline configuration data group. After resetting these initialization signal values, the SOC processor continues to acquire previously unacquired offline configuration data from the offline configuration data group transmitted by the MCU controller, and processes the acquired offline configuration data by calling a callback function. However, this method only ensures that the updated offline configuration is written to the SOC after a change in the MCU's offline configuration data; it does not explain how to prevent errors or ensure the correct operation of offline configuration-related functions.
[0004] Therefore, developing a method to prevent errors in the offline configuration of the in-vehicle audio-visual entertainment domain controller during reversing scenarios, and ensuring the normal operation of the offline configuration-related functions, has become an urgent issue to be addressed. Summary of the Invention
[0005] The purpose of this invention is to overcome the shortcomings of the above-mentioned background technology and provide a method, device and computer system for preventing errors in the offline configuration of the vehicle controller during reversing. This solves the problem in the prior art where the nvdata partition in the MPU read by the function service is inconsistent with the offline configuration data of the MCU, resulting in the inability to use the function configuration type normally.
[0006] This invention provides a method for preventing errors in the offline configuration of an on-board controller during reversing, comprising the following steps: Initial startup of offline configuration: After the offline configuration is modified, the vehicle's on-board unit starts for the first time, and the reverse service is started by shifting into reverse (R); Offline configuration judgment: The offline configuration is read from the MPU and MCU respectively for judgment. If the configuration information read by the two is consistent, it is determined that the offline configuration is read correctly, and the reversing service is executed normally; Retry mechanism start: If the parsed configuration data of the MPU and MCU is inconsistent, the Retry mechanism is entered.
[0007] In the above technical solution, the Retry mechanism is as follows: the upper limit of rereading is set to m times, the interval between each reread is Pms, and the total duration is m*P / 1000s, where m≥2 and P≥1.
[0008] The above technical solution also includes a final execution basis step, namely: if the configuration information of the MPU and MCU is still inconsistent after the Retry mechanism ends, the loop reading is stopped, and the data in the MCU is used as the standard to execute the reversing service.
[0009] In the above technical solution, the offline configuration of the MPU is stored in the nvdata partition of the MPU.
[0010] In the above technical solution, the nvdata partition of the MPU stores configuration words that can diagnose and configure the same controller.
[0011] In the above technical solution, the configuration word is Bit3, and the surround view type of the configuration word Bit3 includes: 0—HD reversing, 1—HD surround view.
[0012] In the above technical solution, the Retry mechanism is as follows: the upper limit for rereading is set to 250 times, with an interval of 20ms between each reread, and a total duration of 5s.
[0013] In the above technical solution, after the final execution basis step, a high-definition surround view function detection step is also included: Display request: When the user shifts into reverse gear, the AVM determines that it is in reverse gear and sends a CAN signal to the vehicle system to request the display of the AVM interface; Configuration word judgment: After receiving the AVM display request signal, the vehicle system will first read the configuration word of Bit3 from the MPU's nvdata partition to see if it is 1 or 0. If it is 1, the vehicle system will display the AVM screen after detecting that the image is normal; Single reversing image display: If the configuration word of Bit3 is 0, it means that the vehicle only supports single reversing image display.
[0014] The present invention also provides a device for preventing errors in the offline configuration of the vehicle controller during reversing, including a computer program that can execute a method for preventing errors in the offline configuration of the vehicle controller during reversing.
[0015] The present invention also provides a computer system, which includes a fault-prevention device configured to prevent errors during the reversing process of the vehicle controller.
[0016] The present invention provides a method, device, and computer system for preventing errors during vehicle reversing by configuring the on-board controller, which has the following beneficial effects:
[0017] This invention adds a retry mechanism when the offline configuration data of the MPU and MCU has not been synchronized. The upper limit is set to reread the offline configuration data in the MPU and MCU 250 times within 20ms. If the MPU still has not completed the offline data synchronization with the MCU after 250 retry, the offline configuration data in the MCU shall prevail, so as to prevent the configuration word reading error caused by the offline configuration data not being synchronized and thus affecting the normal use of the function corresponding to the configuration word. Attached Figure Description
[0018] Figure 1 This is a schematic diagram of the hardware and software architecture of the controller on which the error prevention method for configuring the vehicle controller during the reversing process of this invention depends;
[0019] Figure 2 This is a schematic diagram of the overall process of configuring the error prevention method for the vehicle controller during the reversing process of the present invention.
[0020] Figure 3 This is a schematic diagram of the anti-misoperation device configured on the vehicle controller during the reversing process of the present invention.
[0021] Figure 4 This is a schematic diagram of the computer system of the present invention. Detailed Implementation
[0022] The present invention will now be described in further detail with reference to the accompanying drawings and embodiments, but these embodiments should not be construed as limiting the present invention.
[0023] I. Architecture of the In-Vehicle Audio-Visual Entertainment Domain Controller
[0024] like Figure 1 As shown, the in-vehicle infotainment domain controller consists of an MPU and an MCU. The MPU's nvdata partition stores the vehicle's offline configuration data, used for differentiated configurations of functions for vehicles with different configurations. When the vehicle starts reversing after the offline configuration data has been modified, the MPU's nvdata partition needs to synchronize the offline configuration data from the MCU. When calling related function services, it will determine whether the function is supported based on the reading results from the nvdata partition.
[0025] Configuration bits are marker bits used to diagnose software configurations of the same controller and to apply instantiated vehicle functions to different configurations. For example, Bit3: surround view type (0: HD reversing, 1: HD surround view). If the off-line configuration (or diagnostic equipment, etc.) sets Bit3 to 1, the vehicle software will automatically adapt to the software module for the HD surround view function.
[0026] When the user shifts into reverse (R), the AVM (Autonomous View Monitor) detects the R gear and sends a CAN signal to the vehicle's infotainment system (VIS) requesting the display of the AVM interface. Upon receiving this request, the VIS first reads the configuration word (Bit 3) from the MPU's nvdata partition. If it's 1, it indicates the vehicle supports high-definition surround view. In this case, the VIS displays the AVM screen after verifying the image is normal. If Bit 3 is 0, it means the vehicle only has one rear-view camera and only supports single reversing image display. (This part can be the routine startup test before implementing this invention, the high-definition surround view function test step in this invention, a subsequent step after the main technical steps of this invention are completed, or a routine test performed every time the VIS is started after the configuration data upgrade is completed.) However, if the vehicle actually supports high-definition surround view but the configuration word is incorrectly configured as high-definition reversing, it will affect the normal use of the high-definition surround view function. This is the original intention behind developing this invention.
[0027] II. Implementation Steps of the Invention
[0028] See Figure 2 The present invention provides a method for preventing errors during the reversing process by configuring the vehicle controller offline, comprising the following steps:
[0029] First startup after offline configuration: During reversing, when the vehicle's infotainment system is started for the first time after the offline configuration has been modified, the reversing service will be activated after shifting into reverse.
[0030] Offline configuration judgment: Read the offline configuration from the nvdata partition of the MCU and MPU respectively. If the configuration information read by the two is consistent, it is judged that the offline configuration is read correctly and the reversing service continues to execute normally.
[0031] Retry mechanism activated: If the parsed configuration data is inconsistent, the retrieval mechanism is activated.
[0032] The retry mechanism is added because, under normal circumstances, the synchronization of offline data can be completed in about 1 second. In order to prevent data synchronization failure in extreme cases and to enhance the reliability of the software, a retry time of 5 seconds is added. In this embodiment, the retry mechanism strategy is: the maximum number of rereads is 250, with an interval of 20ms between each reread, for a total duration of 5 seconds.
[0033] Final execution criteria: If the configuration information read from the two is still inconsistent after the Retry ends (which is theoretically unlikely), for the sake of code robustness, the loop will be broken and the data in the MCU will be used as the standard, and the reversing service will execute normally.
[0034] High-definition surround view function test steps (this step has been described in detail above and will not be repeated here).
[0035] III. Structure of the Invention
[0036] See Figure 3 The present invention includes a fault-prevention device for the vehicle controller during reversing, comprising the following components:
[0037] First-time startup of the module after offline configuration: When the vehicle system is started for the first time after the offline configuration is modified, the reverse service is started by shifting into reverse gear;
[0038] Offline configuration judgment module: Reads offline configuration from MPU and MCU respectively and judges it. If the configuration information read by the two is consistent, it is judged that the offline configuration is read correctly and the reversing service is executed normally.
[0039] Retry mechanism startup module: If the configuration data parsed from the MPU and MCU are inconsistent, the Retry mechanism is entered;
[0040] Final execution based on module: If the configuration information read from the MPU and MCU is still inconsistent after the Retry mechanism ends, the loop reading will be terminated, and the data in the MCU will be used as the standard to execute the reversing service.
[0041] See Figure 4 The present invention relates to a computer system, which includes a fault-prevention device configured to prevent errors during the reversing process of the vehicle controller.
[0042] In addition, the offline configuration disclosed in this invention is composed of several bytes and is divided into different configuration module according to the requirements of the configuration items. Configuration items with fewer types only need 1 bit (generally defined as 0: none, 1: present), such as "rearview mirror folding switch"; however, configuration items with more types occupy multiple bits, such as reversing image, which occupies 3 bits, with values from 0 to 7, divided into 0: not configured, 1: standard resolution reversing image, 2: high resolution reversing image, 3: high resolution 360-degree surround view, and other values (4 to 7) are reserved.
[0043] Besides reversing, the offline configuration error prevention strategy applies to all configuration items, including but not limited to:
[0044] 1) Sound Effects Type
[0045] 2) Air conditioning type (electric / automatic single-zone / automatic dual-zone);
[0046] 3) Tire pressure type;
[0047] 4) Seat function types (ventilation, heating, massage, etc.);
[0048] 5) Vehicle control, such as power tailgate, sunroof, and window control;
[0049] 6) The presence or absence of vehicle control soft switches, such as lane change assist soft switch, door opening warning soft switch, rear cross traffic warning soft switch, etc. (0: no, 1: yes).
[0050] The value of the configuration word determines whether the vehicle's infotainment system displays anything, what type of content is displayed, which strategy the system uses, and how it responds to the corresponding operation.
[0051] IV. Key Technical Points and Principles of the Invention
[0052] When calling a function service in the offline configuration, this invention first determines whether the offline configuration data of the MPU and MCU has been synchronized. If the synchronization has not been completed, it retryes 250 times within 20ms to allow the MPU to complete the offline data synchronization with the MCU, preventing abnormal use of the corresponding function due to data missynchronization. If the MPU still has not completed the synchronization of the offline configuration data with the MCU after 20ms / 250 retryes, the offline data in the MCU shall prevail to ensure that the function corresponding to the configuration word can be used stably and correctly.
[0053] V. Definitions of Abbreviations and Key Terms
[0054] MPU: Micro Processor Unit. An MPU is a highly integrated general-purpose processor without peripheral devices (such as memory arrays). It is an MCU without integrated peripherals. DSP has strong computing power and is good at a lot of repetitive data operations.
[0055] MCU: Micro Control Unit. An MCU integrates on-chip peripheral devices and is suitable for processing, diagnosing, and computing various data from different information sources. It focuses on control and is not as fast as a DSP.
[0056] AVM: Around View Monitor, a panoramic monitoring imaging system, is mostly used for 360-degree parking surround view in vehicles.
[0057] Obviously, those skilled in the art can make various modifications and variations to this invention without departing from its spirit and scope. Therefore, if these modifications and variations fall within the scope of the claims of this invention and their equivalents, this invention also intends to include these modifications and variations.
[0058] The contents not described in detail in this specification are existing technologies known to those skilled in the art.
Claims
1. A method for preventing errors during the reversing process by offline configuration of the vehicle controller, characterized in that: Includes the following steps: First startup after offline configuration: When the vehicle system is started for the first time after the offline configuration has been modified, the reverse service is started by shifting into reverse gear; Offline configuration judgment: The offline configuration is read from the MPU and MCU respectively for judgment. The offline configuration of the MPU is stored in the nvdata partition of the MPU. The nvdata partition of the MPU stores configuration words that can diagnose the configuration of the same controller. The configuration words are flag bits used to diagnose the software that can be configured with the same controller and are applicable to the instantiated vehicle functions of different configurations. If the configuration information read from the two is consistent, it is judged that the offline configuration is read correctly and the reversing service is executed normally. Retry mechanism activation: If the configuration data of the MPU and MCU are inconsistent, the Retry mechanism is entered. The Retry mechanism is as follows: the upper limit of rereading is set to m times, the interval between each reread is Pms, and the total duration is m*P / 1000s, where m≥2 and P≥1. It also includes the final execution basis step, that is: if the configuration information of the MPU and MCU is still inconsistent after the Retry mechanism ends, the loop reading is stopped, the data in the MCU is used as the standard, and the reversing service is executed.
2. The method for preventing errors during the reversing process by offline configuration of the vehicle controller as described in claim 1, characterized in that: The configuration word is Bit3, and the surround view type of the configuration word Bit3 includes: 0—HD reversing, 1—HD surround view.
3. The method for preventing errors during the reversing process by offline configuration of the vehicle controller as described in claim 2, characterized in that: The Retry mechanism is as follows: the maximum number of rereads is set to 250, with an interval of 20ms between each reread, for a total duration of 5s.
4. The method for preventing errors during the reversing process by offline configuration of the vehicle controller as described in claim 3, characterized in that: The final execution step is followed by a high-definition surround view function detection step: Display Request: When the user shifts into reverse (R), the AVM (Autonomous Vehicle Monitor) determines that the vehicle is in reverse and sends a CAN signal to the vehicle's infotainment system to request the display of the AVM interface. Configuration word judgment: After receiving the AVM display request signal, the vehicle system will first read the configuration word of Bit3 from the nvdata partition of the MPU to see if it is 1 or 0. If it is 1, the vehicle system will display the AVM screen after detecting that the image is normal. Single reversing camera display: If the configuration word of Bit 3 is 0, it means that the vehicle only supports single reversing camera display.
5. A fault-prevention device for the vehicle controller during reversing, comprising a computer program, characterized in that: The computer program is capable of executing the error prevention method for configuring the vehicle controller offline during reversing as described in any one of claims 1 to 4.
6. A computer system, characterized in that: The computer system includes a fault-prevention device for the vehicle controller during reversing, as described in claim 5.
Citation Information
Patent Citations
A computer with fault-tolerant booting
CA2447000A1
Control computer system, method for controlling a control computer system, and use of a control computer system
CN102822807A