Black screen prevention control method for intelligent cabin

Abstract

The invention relates to the technical field of intelligent driving, and particularly discloses a black screen prevention control method for an intelligent cabin, which comprises the following steps: based on the black screen problem of the intelligent cabin, carrying out screen display link analysis on a black screen prevention system of the intelligent cabin from the source; and based on the link analysis, starting from the function safety requirement of preventing the black screen of the screen, obtaining the black screen prevention control strategy of the intelligent cabin. According to the black screen prevention control method for the intelligent cockpit, analysis of screen display links including the source of screen display content, the transmission path, the control logic, the final display and other links is carried out fundamentally, and detailed strategy disassembly and functional requirement decomposition are carried out on all system components in a cockpit controller. The black screen problem is avoided and solved, and smooth, stable and safe cabin screen use experience is provided for users.

Description

Technical Field

[0001] The present invention relates to the technical field of intelligent driving, and particularly relates to a method for preventing black screens in an intelligent cockpit. Background Art

[0002] With the development of the trend of automotive intelligence, intelligent cockpit systems have no longer been optional content but have instead become standard equipment for automobiles. Intelligent cockpit systems include comprehensive intelligent functions such as instrument screen display, central control screen display, voice input, sound output, video input, etc. Among them, the biggest pain point for users is the black screen problem of the display screen.

[0003] Users often encounter various black screen problems during use, such as black screens when shifting into reverse gear, black screens during driving, occasional screen flickering, black screens when powering off and charging, black screens when opening the panoramic view function, black screens when frequently operating a certain function on the central control screen, and partial screen distortion on the instrument screen. Some occur during driving and affect driving safety, such as instrument information or navigation information, and should be avoided; some are for entertainment experience content and affect the user experience, and should occur less frequently; some cannot be repaired by disconnecting and reconnecting the battery and should be repaired in a timely manner through software upgrades. Among them, due to the occurrence of the first situation that affects driving safety, it is necessary to introduce functional safety to ensure safety during driving.

[0004] Therefore, there is an expectation for an intelligent cockpit black screen prevention control strategy that meets functional safety to avoid and solve the above problems and provide users with a smooth, stable, and safe cockpit screen usage experience.

[0005] Based on this technical background, the present invention has studied a method for preventing black screens in an intelligent cockpit. Summary of the Invention

[0006] Aiming at the deficiencies of the prior art, the present invention provides a method for preventing black screens in an intelligent cockpit, which analyzes the screen display link from the root cause, including the source, transmission path, control logic, and final display of the screen display content, and conducts a detailed strategy breakdown and functional requirement decomposition of each system component in the cockpit controller. Avoid and solve the above black screen problems and provide users with a smooth, stable, and safe cockpit screen usage experience.

[0007] To achieve the above object, the present invention provides a method for preventing black screens in an intelligent cockpit, including:

[0008] Based on the black screen problem of the intelligent cockpit, analyze the screen display link of the anti-black screen system of the intelligent cockpit from the root cause;

[0009] Based on the link analysis, starting from the functional safety requirements for preventing screen blackouts, obtain the anti-black screen control strategy for the intelligent cockpit.

[0010] The beneficial effects of the present invention include:

[0011] The intelligent cockpit anti-black screen control method proposed by the present invention analyzes the screen display link from the root cause, including the source, transmission path, control logic, and final display of the screen display content, and conducts a detailed strategy decomposition and functional requirement decomposition of each system component in the cockpit controller. It avoids and solves the above black screen problems, providing users with a smooth, stable, and safe cockpit screen usage experience.

[0012] Other features and advantages of the present invention will be described in detail in the following specific implementation section. BRIEF DESCRIPTION OF THE DRAWINGS

[0013] By describing the exemplary embodiments of the present invention in more detail in conjunction with the drawings, the above and other objects, features, and advantages of the present invention will become more apparent.

[0014] Figure 1 It is a schematic flow chart of the intelligent cockpit anti-black screen control method proposed by the present invention.

[0015] Figure 2 It is a schematic diagram of the anti-black screen system architecture in a specific implementation of the intelligent cockpit anti-black screen control method proposed by the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0016] The following will describe the preferred embodiments of the present invention in more detail. Although the following describes the preferred embodiments of the present invention, it should be understood that the present invention can be implemented in various forms and should not be limited by the embodiments set forth herein.

[0017] The present invention provides an intelligent cockpit anti-black screen control method, as Figure 1 shown, including:

[0018] Based on the black screen problem of the intelligent cockpit, analyze the screen display link of the anti-black screen system of the intelligent cockpit from the root cause;

[0019] Based on the link analysis, starting from the functional safety requirements of preventing the screen from going black, obtain the intelligent cockpit anti-black screen control strategy.

[0020] According to the present invention, the screen display link analysis includes the source, transmission path, control logic, and final display link of the screen display content;

[0021] The anti-black screen system includes a display screen and a cockpit controller, which are connected through an LVDS interface;

[0022] The display screen includes a display MCU and a deserialization chip. The deserialization chip is used to parse the signals transmitted by the cockpit controller and then display them, and the display MCU is used for the control of the display screen.

[0023] The cockpit controller includes a serial chip, an MPU, a cockpit MCU, a power supply chip, a RAM, a Flash, and a clock. The serial chip is used to convert the video signal of the MPU into an LVDS interface signal. The MPU is used for logical processing and outputting video display content. The MCU is used to manage the CAN communication of the external network and the other chips. The power supply chip is used to supply power to the cockpit controller. The RAM is an internal memory that directly exchanges data with the MPU. The Flash is an external memory that exchanges data with the MPU. The clock is used to provide the system time for the anti-black screen system.

[0024] In the present invention, the screen display link is analyzed from the root, including links such as the source of the screen display content, the transmission path, the control logic, and the final display. The various system components in the cockpit controller are subjected to detailed strategy decomposition and functional requirement decomposition. To avoid and solve the above black screen problem and provide a smooth, stable, and safe cockpit screen usage experience for users.

[0025] According to the present invention, the safety requirements include the requirements of the cockpit MCU, the MPU, the power supply, and the monitoring.

[0026] According to the present invention, the requirements of the cockpit MCU include:

[0027] The cockpit MCU has the ability to monitor the input power supply voltage of the cockpit controller and has the logical processing ability after detecting the voltage;

[0028] The cockpit MCU has the ability to monitor the power supply voltages of the MCU and the MPU and has the logical processing ability after detecting the voltages;

[0029] The cockpit MCU has the ability of a communication protection mechanism and is used to use the communication protection mechanism when communicating with the MPU;

[0030] The cockpit MCU has the ability of a communication protection mechanism and is used to use the communication protection mechanism when communicating with the external CAN communication network;

[0031] The cockpit MCU has a watchdog function internally;

[0032] The cockpit MCU has the ability to monitor the operating states of the other chips in the cockpit controller and has the logical processing ability after monitoring the states.

[0033] According to the present invention, the requirements of the MPU include:

[0034] The MPU has the ability of a communication protection mechanism and is used to use the communication protection mechanism when communicating with the cockpit MCU;

[0035] The MPU has the response ability for the program operation to be monitored;

[0036] The MPU has a function of verifying the rendering result of the external display;

[0037] The MPU has the ability to monitor the operating status of the serial chip and has the logical processing ability after monitoring the status;

[0038] The MPU has the ability to monitor the operating status of the rendering output components within the MPU system and has the logical processing ability after monitoring the status.

[0039] According to the present invention, the power supply requirements include:

[0040] The power supply chip has a watchdog function for use by the cockpit MCU, and when an abnormality is detected, it restarts the cockpit MCU;

[0041] The monitoring requirements include:

[0042] Monitor the serial chip, RAM, Flash, and clock.

[0043] According to the present invention, the control strategies include:

[0044] The cockpit MCU monitors the input power supply voltage of the cockpit controller;

[0045] The cockpit MCU monitors the power supply voltages supplied to the cockpit MCU and the MPU;

[0046] There is a communication protection mechanism for the communication between the cockpit MCU and the MPU:

[0047] When the cockpit MCU communicates with an external communication network, it has a protection mechanism;

[0048] The cockpit MCU program has a monitoring operation mechanism;

[0049] There is a program monitoring operation mechanism between the cockpit MCU and the MPU;

[0050] The cockpit MCU monitors the external clock;

[0051] The cockpit MCU monitors the working status of the RAM;

[0052] The cockpit MCU monitors the working status of the Flash;

[0053] The MPU and the external display have a rendering result verification mechanism;

[0054] The MPU monitors the working status of the serial chip;

[0055] The MPU monitors the operating status of the rendering output components within the MPU system.

[0056] Preferably, the cockpit MCU's monitoring of the input power supply voltage of the cockpit controller includes:

[0057] 1) If the voltage is lower than 6V or higher than 18V and lasts for more than 3S, the power is cut off and the system shuts down.

[0058] 2) If the voltage is between 6V and 9V, the voltage is reported to the MPU without any processing.

[0059] 3) If the voltage is between 16V and 18V, the voltage is reported to the MPU without any processing.

[0060] The cockpit MCU monitors the power supply voltages for the cockpit MCU and the MPU, including:

[0061] 1) Periodically monitor the power supply branch.

[0062] 2) If the voltage is lower than 2.5V or higher than 3.5V, reset the chip.

[0063] 3) When a fault occurs, record the fault status.

[0064] There is a communication protection mechanism for the communication between the cockpit MCU and the MPU, including:

[0065] 1) The communication between the cockpit MCU and the MPU has a verification mechanism for the transmitted data content.

[0066] 2) The communication between the cockpit MCU and the MPU has a sequence record of the counted content to avoid resending or missing communication content.

[0067] 3) When a fault occurs, record the fault.

[0068] When the cockpit MCU communicates with an external communication network, there is a protection mechanism, including:

[0069] 1) The communication between the cockpit MCU and the external communication network has a verification mechanism for the transmitted data content.

[0070] 2) The communication between the cockpit MCU and the external communication network has a sequence record of the counted content to avoid resending or missing communication content.

[0071] 3) When a fault occurs, record the fault.

[0072] Preferably, the cockpit MCU program has a monitoring and running mechanism, including:

[0073] 1) There is a watchdog inside the MCU. When the internal logic of the cockpit MCU is abnormal, it is identified and restarted.

[0074] 2) The power supply chip has a watchdog. When it is detected that the cockpit MCU program is running abnormally or stuck, the cockpit MCU is restarted.

[0075] 3) When a fault occurs, record the fault.

[0076] There is a program monitoring operation mechanism between the cockpit MCU and MPU, including:

[0077] 1) The cockpit MCU periodically sends a program monitoring operation signal, and the MPU should reply with an answer after receiving it;

[0078] 2) When a fault occurs, a fault record is made;

[0079] The cockpit MCU monitors the external clock, including:

[0080] 1) The cockpit MCU monitors the operation status of the external clock;

[0081] 2) When a fault occurs, a fault record is made;

[0082] The cockpit MCU monitors the working status of the RAM, including:

[0083] 1) The cockpit MCU monitors the operation status of the RAM;

[0084] 2) When a fault occurs, a fault record is made.

[0085] According to the present invention, the cockpit MCU monitors the working status of the Flash, including:

[0086] 1) The cockpit MCU monitors the operation status of the Flash;

[0087] 2) When a fault occurs, a fault record is made;

[0088] There is a rendering result verification mechanism between the MPU and the external display, including:

[0089] 1) The MPU verifies the rendering feedback result of the external display;

[0090] 2) When the verification fails for more than 5S, a fault record is made;

[0091] The MPU monitors the working status of the serial chip, including:

[0092] 1) The MPU monitors the operation status of the serial chip;

[0093] 2) When a fault occurs, a fault record is made;

[0094] The MPU monitors the operation status of the rendering output components within the MPU system, including:

[0095] 1) The MPU monitors the operation status of the rendering output components within the MPU system;

[0096] 2) When a fault occurs, a fault record is made.

[0097] The present invention will be described in more detail below through embodiments.

[0098] Embodiment 1:

[0099] As Figure 2 shown, this embodiment proposes an intelligent cockpit anti-black screen control method, including:

[0100] I. Based on the black screen problem, the screen display link is analyzed from the root cause, including the source, transmission path, control logic, and final display of the screen display content, etc. The following anti-black screen system is determined, as Figure 2 shown;

[0101] In this system, it is divided into ① display screen and ④ cockpit controller, and the two are connected through an LVDS interface; ① the display screen includes ② MCU and ③ deserialization chip; ③ the deserialization chip is responsible for parsing the signal transmitted by ④ the cockpit controller and then displaying it; ② the MCU is responsible for the control of the display screen; ④ the cockpit controller includes ⑤ serial chip, ⑥ MPU, ⑦ MCU, ⑧ power supply chip, ⑨ RAM, ⑩ Flash, and clock; ⑤ the serial chip is responsible for converting the video signal of ⑥ the MPU into an LVDS interface signal; ⑥ the MPU is responsible for logic processing and outputting video display content; ⑦ the MCU is responsible for CAN communication with the external network and the management of the remaining chips; ⑧ the power supply chip is responsible for powering the entire ④ cockpit controller; ⑨ RAM is an internal memory that directly exchanges data with ⑥ the MPU; ⑩ Flash is an external memory that exchanges data with ⑥ the MPU; The clock provides the system time for the system;

[0102] II. To implement the function of preventing the screen from going black designed in this article, this embodiment is based on the analysis method of functional safety. Starting from the functional safety requirements of preventing the screen from going black, as shown in Table 1, a fault tree is built. Based on the fault tree analysis, the anti-black screen control strategy of the intelligent cockpit system shown in Table 2 is obtained. The policy logic of the following steps can be run in the order of the serial numbers, or the policy logic of the following steps can be run in parallel:

[0103] Table 1 Functional Requirement Decomposition

[0104]

[0105] Table 2 Intelligent Cockpit Anti-Black Screen Control Strategy

[0106]

[0107]

[0108]

[0109] Embodiment 2:

[0110] This embodiment provides an intelligent cockpit anti-black screen control method, as Figure 1 shown, including:

[0111] Based on the black screen problem of the intelligent cockpit, conduct a screen display link analysis on the anti-black screen system of the intelligent cockpit from the root cause;

[0112] Based on the link analysis, starting from the functional safety requirements for preventing the screen from going black, obtain the intelligent cockpit anti-black screen control strategy;

[0113] In this embodiment, the screen display link analysis includes the source, transmission path, control logic, and final display link of the screen display content;

[0114] As Figure 2 shown, the anti-black screen system includes a display screen and a cockpit controller, which are connected through an LVDS interface;

[0115] The display screen includes a display MCU and a deserialization chip. The deserialization chip is used to parse the signals transmitted by the cockpit controller and then display them, and the display MCU is used for the control of the display screen;

[0116] The cockpit controller includes a serial chip, an MPU, a cockpit MCU, a power supply chip, a RAM, a Flash, and a clock. The serial chip is used to convert the video signals of the MPU into LVDS interface signals. The MPU is used for logical processing and outputting video display content. The MCU is used for managing the CAN communication of the external network and the other chips. The power supply chip is used to supply power to the cockpit controller. The RAM is an internal memory that directly exchanges data with the MPU. The Flash is an external memory that exchanges data with the MPU. The clock is used to provide the system time for the anti-black screen system;

[0117] In this embodiment, the safety requirements include cockpit MCU requirements, MPU requirements, power supply requirements, and monitoring requirements;

[0118] In this embodiment, the cockpit MCU requirements include:

[0119] The cockpit MCU has the ability to monitor the input power supply voltage of the cockpit controller and has logical processing ability after detecting the voltage;

[0120] The cockpit MCU has the ability to monitor the power supply voltages of the MCU and the MPU and has logical processing ability after detecting the voltages;

[0121] The cockpit MCU has the ability of a communication protection mechanism, which is used to use the communication protection mechanism when communicating with the MPU;

[0122] The cockpit MCU has the ability of a communication protection mechanism, which is used to use the communication protection mechanism when communicating with an external CAN communication network;

[0123] The cockpit MCU has a watchdog function internally;

[0124] The cockpit MCU has the ability to monitor the operating states of the other chips in the cockpit controller and has the logical processing ability after monitoring the states;

[0125] In this embodiment, the MPU requirements include:

[0126] The MPU has the ability of a communication protection mechanism, which is used to use the communication protection mechanism when communicating with the cockpit MCU;

[0127] The MPU has the response ability for the monitored operation of the program;

[0128] The MPU has the function of verifying the rendering result of an external display screen;

[0129] The MPU has the ability to monitor the operating states of serial chips and has the logical processing ability after monitoring the states;

[0130] The MPU has the ability to monitor the operating state of the rendering output component within the MPU system and has the logical processing ability after monitoring the states;

[0131] In this embodiment, the power supply requirements include:

[0132] The power supply chip has a watchdog function for use by the cockpit MCU. When an abnormality is detected, it restarts the cockpit MCU;

[0133] The monitoring requirements include:

[0134] Monitor serial chips, RAM, Flash, and the clock;

[0135] In this embodiment, the control strategies include:

[0136] The cockpit MCU monitors the input power supply voltage of the cockpit controller;

[0137] The cockpit MCU monitors the power supply voltages supplied to the cockpit MCU and the MPU;

[0138] There is a communication protection mechanism for the communication between the cockpit MCU and the MPU:

[0139] When the cockpit MCU communicates with an external communication network, it has a protection mechanism;

[0140] The cockpit MCU program has a monitoring operation mechanism;

[0141] There is a program monitoring operation mechanism between the cockpit MCU and the MPU;

[0142] The cockpit MCU monitors the external clock;

[0143] The cockpit MCU monitors the working status of the RAM;

[0144] The cockpit MCU monitors the working status of the Flash;

[0145] The MPU has a rendering result verification mechanism with the external display;

[0146] The MPU monitors the working status of the serial chip;

[0147] The MPU monitors the operating status of the rendering output components within the MPU system;

[0148] In this embodiment, the cockpit MCU monitors the input power supply voltage of the cockpit controller, including:

[0149] 1) If the voltage is lower than 6V or higher than 18V and lasts for more than 3S, power off and shut down;

[0150] 2) If the voltage is between 6V and 9V, report the voltage to the MPU without any processing;

[0151] 3) If the voltage is between 16V and 18V, report the voltage to the MPU without any processing;

[0152] The cockpit MCU monitors the power supply voltages for the cockpit MCU and the MPU, including:

[0153] 1) Periodically monitor the power supply branch;

[0154] 2) If the voltage is lower than 2.5V or higher than 3.5V, reset the chip;

[0155] 3) When a fault occurs, record the fault status;

[0156] The communication between the cockpit MCU and the MPU has a communication protection mechanism, including:

[0157] 1) The communication between the cockpit MCU and the MPU has a verification mechanism for the transmitted data content;

[0158] 2) The communication between the cockpit MCU and the MPU has a sequence record of the counted content to avoid resending or missing communication content;

[0159] 3) When a fault occurs, record the fault;

[0160] When the cockpit MCU communicates with the external communication network, it has a protection mechanism, including:

[0161] 1) The communication between the cockpit MCU and the external communication network has a verification mechanism for the transmitted data content;

[0162] 2) The communication between the cockpit MCU and the external communication network records the sequence with counting content to avoid resending or missing communication content;

[0163] 3) When a fault occurs, fault recording is performed;

[0164] In this embodiment, the cockpit MCU program has a monitoring operation mechanism including:

[0165] 1) There is a watchdog inside the MCU. When the internal logic of the cockpit MCU is abnormal, it is identified and restarted;

[0166] 2) The power supply chip has a watchdog. When it detects that the cockpit MCU program runs abnormally or gets stuck, it restarts the cockpit MCU;

[0167] 3) When a fault occurs, fault recording is performed;

[0168] There is a program monitoring operation mechanism between the cockpit MCU and the MPU, including:

[0169] 1) The cockpit MCU periodically sends a program monitoring operation signal, and the MPU should reply with an answer after receiving it;

[0170] 2) When a fault occurs, fault recording is performed;

[0171] The cockpit MCU monitors the external clock, including:

[0172] 1) The cockpit MCU monitors the operating status of the external clock;

[0173] 2) When a fault occurs, fault recording is performed;

[0174] The cockpit MCU monitors the working status of the RAM, including:

[0175] 1) The cockpit MCU monitors the operating status of the RAM;

[0176] 2) When a fault occurs, fault recording is performed;

[0177] In this embodiment, the cockpit MCU monitors the working status of the Flash, including:

[0178] 1) The cockpit MCU monitors the operating status of the Flash;

[0179] 2) When a fault occurs, fault recording is performed;

[0180] The MPU and the external display have a rendering result verification mechanism, including:

[0181] 1) The MPU verifies the rendering feedback result of the external display;

[0182] 2) When the verification fails for more than 5S, a fault record is made.

[0183] The MPU monitors the operating status of the serial chip, including:

[0184] 1) The MPU monitors the running status of the serial chip.

[0185] 2) When a fault occurs, a fault record is made.

[0186] The MPU monitors the operating status of the rendering output components within the MPU system, including:

[0187] 1) The MPU monitors the operating status of the rendering output components within the MPU system.

[0188] 2) When a fault occurs, a fault record is made.

[0189] The intelligent cockpit anti-black screen control method proposed in the embodiments of the present invention analyzes the screen display link from the root cause, including links such as the source of the screen display content, the transmission path, the control logic, and the final display, and conducts a detailed strategy breakdown and functional requirement decomposition of each system component within the cockpit controller. To avoid and solve the above black screen problem and provide users with a smooth, stable, and safe cockpit screen usage experience.

[0190] The various embodiments of the present invention have been described above. The above description is exemplary, not exhaustive, and is not limited to the disclosed embodiments. Many modifications and variations will be apparent to those of ordinary skill in the art in the technical field without departing from the scope and spirit of the described embodiments.

Claims

1. A method for preventing a black screen in an intelligent cockpit, characterized in that: include: Based on the black screen problem of the smart cockpit, a screen display link analysis is performed on the anti-black screen system of the smart cockpit from the root cause; Based on the link analysis, starting from the functional safety requirement of preventing the screen from going black, the smart cockpit anti-black screen control strategy is obtained.

2. The method according to claim 1, characterized in that The screen display link analysis includes the source, transmission path, control logic and final display link of the screen display content; The anti-black screen system includes a display screen and a cockpit controller, which are connected via an LVDS interface; The display screen includes a display MCU and a deserialization chip, wherein the deserialization chip is used to parse and display the signal transmitted from the cockpit controller, and the display MCU is used to control the display screen; The cockpit controller includes a serial chip, an MPU, a cockpit MCU, a power supply chip, RAM, Flash and a clock. The serial chip is used to convert the video signal of the MPU into an LVDS interface signal. The MPU is used to perform logic processing and output video display content. The MCU is used to manage the CAN communication of the external network and the remaining chips. The power supply chip is used to power the cockpit controller. The RAM is an internal memory that directly exchanges data with the MPU. The Flash is an external memory that exchanges data with the MPU. The clock is used to provide system time for the anti-black screen system.

3. The method according to claim 2, characterized in that The safety requirements include cockpit MCU requirements, MPU requirements, power supply requirements and monitoring requirements.

4. The method according to claim 3, characterized in that The cockpit MCU requirements include: The cockpit MCU has the ability to monitor the input power supply voltage of the cockpit controller and has the logic processing capability after detecting the voltage; The cockpit MCU has the ability to monitor the power supply voltage of the MCU and MPU, and has the logic processing capability after detecting the voltage; The cockpit MCU has a communication protection mechanism capability, which is used to use the communication protection mechanism when communicating with the MPU; The cockpit MCU has a communication protection mechanism capability, which is used to use the communication protection mechanism when communicating with the external CAN communication network; The cockpit MCU has a watchdog function inside; The cockpit MCU has the ability to monitor the operating status of the remaining chips of the cockpit controller and has the logic processing capability after monitoring the status.

5. The method according to claim 4, characterized in that The MPU requirements include: The MPU has a communication protection mechanism capability, which is used to use the communication protection mechanism when communicating with the cockpit MCU; The MPU has a response capability for program execution to be monitored; The MPU has a function of verifying the rendering result of the external display screen; The MPU has the ability to monitor the operating status of the serial chip and has the logic processing capability after monitoring the status; The MPU has the ability to monitor the operating status of the rendering output components within the MPU system, and has the logical processing capability after monitoring the status.

6. The method according to claim 5, characterized in that The power supply requirements include: The power supply chip has a watchdog function for use by the cockpit MCU. When an abnormality is detected, the cockpit MCU is restarted; The monitoring requirements include: The serial chip, RAM, Flash and clock are monitored.

7. The method according to claim 6, characterized in that The control strategy includes: The cockpit MCU monitors the input power supply voltage of the cockpit controller; The cockpit MCU monitors the power supply voltage supplied to the cockpit MCU and MPU; There is a communication protection mechanism between the cockpit MCU and MPU: The cockpit MCU has a protection mechanism when communicating with the external communication network; The cockpit MCU program has a monitoring operation mechanism; There is a program monitoring operation mechanism between the cockpit MCU and the MPU; The cockpit MCU monitors the external clock; The cockpit MCU monitors the working status of the RAM; The cockpit MCU monitors the working status of the Flash; The MPU and the external display screen have a rendering result verification mechanism; The MPU monitors the working status of the serial chip; The MPU monitors the operating status of the rendering output component in the MPU system.

8. The method according to claim 7, characterized in that The cockpit MCU monitors the input power supply voltage of the cockpit controller including: 1) If the voltage is lower than 6V or higher than 18V for more than 3S, the device will be powered off; 2) If the voltage is between 6V and 9V, the voltage is reported to the MPU without any processing; 3) If the voltage is between 16V and 18V, the voltage is reported to the MPU without any processing; The cockpit MCU monitors the power supply voltage supplied to the cockpit MCU and the MPU, including: 1) Periodically monitor the power supply branch; 2) When the voltage is lower than 2.5V or higher than 3.5V, the chip is reset; 3) When a fault occurs, record the fault status; The communication protection mechanism between the cockpit MCU and MPU includes: 1) The communication between the cockpit MCU and MPU is equipped with a verification mechanism for the content of the sent data; 2) The communication between the cockpit MCU and MPU carries a sequence record of the count content to avoid resending or missing communication content; 3) When a fault occurs, record the fault; When the cockpit MCU communicates with the external communication network, the protection mechanism includes: 1) The communication between the cockpit MCU and the external communication network has a verification mechanism for the content of the sent data; 2) The communication between the cockpit MCU and the external communication network carries a sequence record of the count content to avoid resending or missing the communication content; 3) When a fault occurs, record the fault.

9. The method according to claim 7, characterized in that: The cockpit MCU program has a monitoring operation mechanism including: 1) The MCU has a watchdog inside, which can identify and restart when the internal logic of the cockpit MCU is abnormal; 2) The power supply chip is equipped with a watchdog. When it detects that the cockpit MCU program is running abnormally or stuck, the cockpit MCU is restarted; 3) When a fault occurs, record the fault; The program monitoring operation mechanism between the cockpit MCU and the MPU includes: 1) The cockpit MCU periodically sends a program monitoring operation signal, and the MPU should reply after receiving it; 2) When a fault occurs, record the fault; The cockpit MCU monitors the external clock including: 1) The cockpit MCU monitors the operating status of the external clock; 2) When a fault occurs, record the fault; The cockpit MCU monitors the working status of the RAM including: 1) The cockpit MCU monitors the operating status of the RAM; 2) When a fault occurs, record the fault.

10. The method according to claim 7, characterized in that The cockpit MCU monitors the working status of the Flash including: 1) The cockpit MCU monitors the running status of the Flash; 2) When a fault occurs, record the fault; The rendering result verification mechanism between the MPU and the external display includes: 1) The MPU verifies the rendering feedback result of the external display screen; 2) When the verification fails for more than 5 seconds, a fault record will be made; The MPU monitors the working status of the serial chip including: 1) The MPU monitors the operating status of the serial chip; 2) When a fault occurs, record the fault; The MPU monitors the operating status of the rendering output component in the MPU system, including: 1) The MPU monitors the operating status of the rendering output component in the MPU system; 2) When a fault occurs, record the fault.

Images