Vehicle control device

Abstract

The invention relates to a vehicle control apparatus. The vehicle control device includes: a first signal processing device including a first processor and a first memory; the second signal processing device is electrically connected with the first signal processing device and is provided with a second processor and a second memory; the control device is electrically connected with the second signal processing device and is used for receiving a signal from the hardware switch or the sensor or controlling at least one actuator; the first processor or the second processor is controlled to execute a virtual switch service and output a virtual switch object corresponding to the virtual switch service to the electrically connected display when the hardware switch fails; the first processor or the second processor controls the controller in the control device to output an operation on signal, an operation off signal or an operation control signal to the actuator when the virtual switch object is selected. As a result, it is possible to quickly execute an alternative service when a hardware device connected to the controller fails.

Description

TECHNICAL FIELD

[0001] The present disclosure relates to a vehicle control apparatus, and more particularly to a vehicle control apparatus capable of quickly performing a substitute service when a hardware device connected to a controller fails. BACKGROUND

[0002] A vehicle is a device that a user who rides moves in a desired direction. A representative example is a car.

[0003] On the other hand, in order to facilitate a user who uses a vehicle, a vehicle control apparatus is mounted in the vehicle.

[0004] The vehicle control apparatus can perform signal processing based on sensor data from various internal sensor devices.

[0005] On the other hand, there is a problem that vehicle control cannot be stably performed when a hardware switch or a sensor device, etc. in the vehicle fails. SUMMARY

[0006] PROBLEMS TO BE SOLVED BY THE INVENTION

[0007] The problem to be solved by the present disclosure is to provide a vehicle control apparatus capable of quickly performing a substitute service when a hardware device connected to a controller fails.

[0008] Another problem to be solved by the present disclosure is to provide a vehicle control apparatus capable of quickly performing a substitute service based on a service-oriented architecture when a hardware device connected to a controller fails.

[0009] Still another problem to be solved by the present disclosure is to provide a vehicle control apparatus capable of efficiently performing a new service or an updated service based on a service-oriented architecture.

[0010] TECHNICAL SOLUTION TO THE PROBLEM

[0011] In order to solve the above technical problem, the vehicle control apparatus according to one embodiment of the present disclosure has a first signal processing device having a first processor and a first memory, a second signal processing device electrically connected to the first signal processing device and having a second processor and a second memory, and a control device electrically connected to the second signal processing device and receiving a signal from a hardware switch or a sensor or controlling at least one actuator, the first processor or the second processor controls to perform a virtual switch service when the hardware switch fails, and outputs a virtual switch object corresponding to the virtual switch service to a display electrically connected, and the first processor or the second processor controls to, in a case where the virtual switch object is selected, the controller in the control device outputs an action-on signal or an action-off signal or an action control signal to the actuator.

[0012] On the other hand, the first processor or the second processor can execute a service agent for performing a vehicle service; the service agent controls to additionally perform a virtual switch service in addition to the executed service when a hardware switch fails; the virtual switch service controls to display a virtual switch object on a display.

[0013] On the other hand, the first processor or the second processor can control to receive data related to the virtual switch service from an external server or electronic device and store the data related to the virtual switch service in the first memory or the second memory when the hardware switch fails.

[0014] On the other hand, the first processor or the second processor can receive the data related to the virtual switch service in a file form.

[0015] On the other hand, the first processor or the second processor can control not to transmit the data related to the virtual switch service to the control device.

[0016] On the other hand, after the data related to the virtual switch service is stored, if the virtual switch object is selected by executing the virtual switch service, the controller can control the actuator.

[0017] On the other hand, the second memory can include a change data area storing data related to the virtual switch service and a fixed data area storing data related to a fixed service.

[0018] On the other hand, the first memory can include a change data area storing data related to the virtual switch service.

[0019] On the other hand, the first processor or the second processor can control to change the executed virtual switch service based on a kind of failure of the hardware switch and display a virtual switch object corresponding to the changed virtual switch service on the display.

[0020] On the other hand, the first processor or the second processor can control to execute a virtual switch service or a substitute sensor service when a sensor fails and output a virtual switch object corresponding to the virtual switch service or a substitute sensor object corresponding to the substitute sensor service to a display electrically connected.

[0021] On the other hand, the first processor or the second processor can control the controller to output an action-on signal or an action-off signal or an action control signal to the actuator when the virtual switch object or the substitute sensor object is selected.

[0022] On the other hand, the first processor or the second processor can execute a service agent for performing vehicle services; the service agent is controlled to additionally execute a virtual switch service or a substitute sensor service in addition to the services to be performed when a sensor malfunctions.

[0023] On the other hand, the first processor or the second processor can control the following: when a sensor malfunctions, receive data related to the virtual switch service or the alternative sensor service from an external server or electronic device; and execute the virtual switch service or the alternative sensor service if the condition data in the execution-related data of the virtual switch service or the alternative sensor service is satisfied.

[0024] On the other hand, the first processor or the second processor can control the execution of a substitute actuator service when the actuator fails, and output the substitute actuator object corresponding to the substitute actuator service to the electrically connected display.

[0025] On the other hand, the first or second processor can control the controller to output an action start signal, an action stop signal, or an action control signal to other actuators when an alternative actuator object is selected.

[0026] On the other hand, the first processor or the second processor can execute a service agent for performing vehicle services; the service agent is controlled to execute alternative executor services in addition to the services to be performed when the actuator fails.

[0027] A vehicle control device according to other embodiments of the present disclosure includes: a first signal processing device having a first processor and a first memory; a second signal processing device electrically connected to the first signal processing device and having a second processor and a second memory; and a control device electrically connected to the second signal processing device and receiving signals from at least one hardware device or controlling the hardware device; the first processor or the second processor is capable of controlling: when a hardware device malfunctions, executing an alternative service corresponding to the hardware device, and based on the execution of the alternative service, a controller within the control device outputs an action start signal, an action stop signal, or an action control signal to other hardware devices.

[0028] On the other hand, the first processor or the second processor can be controlled to: receive data related to alternative services from an external server or electronic device when a hardware device malfunctions, and store the data related to alternative services in the first memory or the second memory.

[0029] On the other hand, the first or second processor can be controlled to not transmit data related to the alternative service to the control device.

[0030] On the other hand, the first processor or the second processor can execute a service agent for performing vehicle services; the service agent is controlled such that, in the event of a hardware device failure, in addition to performing the service to be performed, an alternative service is also performed, and, according to the security level, at least a part of the alternative service is blocked, and only the other part is performed.

[0031] On the other hand, the first processor or the second processor can execute a service agent for performing vehicle services; the service agent is controlled to, in the event of a hardware device failure, execute an alternative service in addition to the service being performed, and, depending on the security level, block a portion of the application programming interfaces within the alternative service and execute only the other portion of the application programming interfaces.

[0032] Invention Effects

[0033] A vehicle control device according to an embodiment of this disclosure includes: a first signal processing device having a first processor and a first memory; a second signal processing device electrically connected to the first signal processing device having a second processor and a second memory; and a control device electrically connected to the second signal processing device, receiving signals from a hardware switch or sensor or controlling at least one actuator; the first processor or the second processor controls, when a hardware switch malfunctions, to execute a virtual switch service and output a virtual switch object corresponding to the virtual switch service to an electrically connected display; the first processor or the second processor controls, when a virtual switch object is selected, a controller within the control device to output an action-on signal, an action-off signal, or an action control signal to the actuator. Thus, alternative services can be quickly executed when the hardware device connected to the controller malfunctions. In particular, alternative services based on a service-oriented architecture can be quickly executed when the hardware device connected to the controller malfunctions.

[0034] On the other hand, the first or second processor can execute a service agent for performing vehicle services; the service agent is controlled to additionally execute a virtual switch service in addition to the services already performed when a hardware switch malfunctions; the virtual switch service is controlled to display the virtual switch object on a display. Thus, alternative services can be quickly executed when a hardware device connected to the controller malfunctions.

[0035] On the other hand, the first or second processor can be controlled to receive data related to the virtual switch service from an external server or electronic device when the hardware switch fails, and store the data related to the virtual switch service in the first or second memory. This allows for efficient execution of alternative services when the hardware device connected to the controller fails.

[0036] On the other hand, the first or second processor can receive data related to the virtual switch service in file format. This allows for efficient execution of alternative services when the hardware connected to the controller fails.

[0037] On the other hand, the first or second processor can be controlled to prevent the transmission of data related to the virtual switch service to the control device. This allows for efficient execution of alternative services when the hardware connected to the controller fails.

[0038] On the other hand, after storing the data related to the virtual switch service, if a virtual switch object is selected when executing the virtual switch service, the controller can control the actuator. Therefore, alternative services can be quickly executed when the hardware connected to the controller fails.

[0039] On the other hand, the second memory may include a change data area for storing data related to virtual switching services and a fixed data area for storing data related to fixed services. This allows for efficient execution of alternative services when the hardware connected to the controller fails.

[0040] On the other hand, the first memory may include a change data area for storing data related to the virtual switch service. This allows for the rapid execution of alternative services in the event of a hardware failure connected to the controller.

[0041] On the other hand, the first or second processor can control the execution of a virtual switch service based on the type of hardware switch malfunction, and display the virtual switch object corresponding to the changed virtual switch service on the display. This allows for the rapid execution of a replacement service when a hardware device connected to the controller malfunctions.

[0042] On the other hand, the first or second processor can be controlled to execute a virtual switch service or a substitute sensor service when a sensor malfunctions, and output the virtual switch object corresponding to the virtual switch service or the substitute sensor object corresponding to the substitute sensor service to an electrically connected display. Thus, a substitute service can be quickly executed when the hardware device connected to the controller malfunctions.

[0043] On the other hand, the first or second processor can control the actuator to output an action start signal, an action stop signal, or an action control signal when a virtual switch object or a substitute sensor object is selected. This allows for efficient execution of alternative services when the hardware connected to the controller malfunctions.

[0044] On the other hand, the first or second processor can execute a service agent for performing vehicle services; the service agent is controlled to, in the event of a sensor failure, additionally execute a virtual switch service or a substitute sensor service in addition to the services already performed. Thus, substitute services can be quickly executed when the hardware connected to the controller fails.

[0045] On the other hand, the first or second processor can be controlled to: receive data related to the virtual switch service or alternative sensor service from an external server or electronic device when a sensor malfunctions; and execute the virtual switch service or alternative sensor service if the conditional data in the execution-related data of the virtual switch service or alternative sensor service is met. Thus, alternative services can be executed quickly when the hardware device connected to the controller malfunctions.

[0046] On the other hand, the first or second processor can be controlled to perform a replacement actuator service when the actuator fails, and output the replacement actuator object corresponding to the replacement actuator service to an electrically connected display. Thus, a replacement service can be quickly performed when the hardware device connected to the controller fails.

[0047] On the other hand, the first or second processor can control the controller to output an action start signal, an action stop signal, or an action control signal to other actuators when an alternative actuator is selected. This allows for efficient execution of alternative services when the hardware connected to the controller malfunctions.

[0048] On the other hand, the first or second processor can execute a service agent for performing vehicle services; the service agent is controlled to execute alternative actuator services in addition to the services already performed when an actuator fails. Thus, alternative services can be executed quickly when the hardware connected to the controller fails.

[0049] A vehicle control device according to other embodiments of this disclosure includes: a first signal processing device having a first processor and a first memory; a second signal processing device electrically connected to the first signal processing device and having a second processor and a second memory; and a control device electrically connected to the second signal processing device, receiving signals from at least one hardware device or controlling the hardware device; the first processor or the second processor is capable of controlling the device to: execute an alternative service corresponding to the hardware device when the hardware device fails, and based on the execution of the alternative service, a controller within the control device outputs an action start signal, an action stop signal, or an action control signal to other hardware devices. Thus, an alternative service can be quickly executed when a hardware device connected to the controller fails. In particular, an alternative service based on a service-oriented architecture can be quickly executed when a hardware device connected to the controller fails.

[0050] On the other hand, the first or second processor can be controlled to receive data related to alternative services from an external server or electronic device when a hardware device malfunctions, and store the data related to the alternative services in a first or second memory. This enables efficient execution of alternative services when a hardware device connected to the controller malfunctions.

[0051] On the other hand, the first or second processor can be controlled to not transmit data related to the alternative service to the control device. This allows for efficient execution of the alternative service when the hardware connected to the controller malfunctions.

[0052] On the other hand, the first or second processor can execute a service agent for performing vehicle services; the service agent is controlled such that, in the event of a hardware failure, in addition to executing the originally executed service, a substitute service is also executed, and, depending on the security level, at least a portion of the substitute service is blocked, with only the remaining portion executed. Thus, substitute services can be reliably executed when the hardware connected to the controller fails.

[0053] On the other hand, the first or second processor can execute a service agent for performing vehicle services; the service agent is controlled such that, in the event of a hardware failure, in addition to executing the originally executed service, a replacement service is also executed, and, depending on the security level, a portion of the application programming interfaces (APIs) within the replacement service is blocked, with only the remaining portion being executed. Thus, replacement services can be reliably executed when the hardware connected to the controller fails. Attached Figure Description

[0054] Figure 1 This is an example of a diagram illustrating the exterior and interior of a vehicle.

[0055] Figure 2This diagram illustrates an example of the architecture of a vehicle control device.

[0056] Figure 3a This diagram illustrates an example of the configuration of displays inside a vehicle.

[0057] Figure 3b This is another example of the configuration of displays inside a vehicle.

[0058] Figure 4 This is an example of an internal block diagram of a vehicle control device according to an embodiment of the present disclosure.

[0059] Figures 5a to 5d The diagram illustrates various examples of vehicle control devices.

[0060] Figure 6 This is an example of a block diagram of a vehicle control device according to an embodiment of the present disclosure.

[0061] Figure 7a This is an example of an operational configuration diagram of a central signal processing device according to an embodiment of the present disclosure.

[0062] Figure 7b This is an example of an operational configuration diagram of a regional signal processing apparatus according to an embodiment of the present disclosure.

[0063] Figure 8 An example of the execution of vehicle services in a signal processing apparatus according to an embodiment of the present disclosure is illustrated.

[0064] Figures 9 to 10 for Figure 8 The diagram referenced in the description.

[0065] Figure 11a This is an example of an internal block diagram of a vehicle control device related to this disclosure.

[0066] Figure 11b for Figure 11a The diagram referenced in the description.

[0067] Figure 12a This is an example of an internal block diagram of a vehicle control device according to an embodiment of the present disclosure.

[0068] Figure 12b for Figure 12a The diagram referenced in the description.

[0069] Figure 13a An example of a hardware malfunction in a vehicle related to this disclosure is illustrated.

[0070] Figure 13b The accompanying drawings illustrate an example of the operation of a hardware device in a vehicle according to an embodiment of the present disclosure when a malfunction occurs.

[0071] Figures 13c to 13e for Figure 13b The accompanying drawings are referenced in the description.

[0072] Figure 14a The accompanying drawing illustrates an example of the operation of a vehicle control device according to an embodiment of the present disclosure.

[0073] Figures 14b to 14c for Figure 14a The accompanying drawings are referenced in the description.

[0074] Figure 15a The accompanying drawing illustrates another example of the operation of a vehicle control device according to an embodiment of the present disclosure.

[0075] Figures 15b to 17c for Figure 15a The accompanying drawings are referenced in the description.

[0076] Figure 18a A flowchart illustrating an example of a method of operating a vehicle control device according to an embodiment of the present disclosure.

[0077] Figure 18b A flowchart illustrating another example of a method of operating a vehicle control device according to an embodiment of the present disclosure.

[0078] Figures 19a to 21b for Figure 18a or Figure 18b The accompanying diagram is referenced in the instructions for action.

[0079] Figure 22a This is an example of an internal block diagram of a vehicle control device according to another embodiment of the present disclosure.

[0080] Figures 22b to 22d for Figure 22a The accompanying drawings are referenced in the description.

[0081] Figure 23 This is an example of an internal block diagram of a vehicle control device according to another embodiment of the present disclosure.

[0082] Figures 24a to 25b for Figure 23 The accompanying drawings are referenced in the description. Detailed Implementation

[0083] The present disclosure will now be described in more detail with reference to the accompanying drawings.

[0084] The suffixes “module” and “section” used in the following description of structural elements are merely for ease of writing the specification and do not inherently possess any particularly important meaning or function. Therefore, the terms “module” and “section” can be used interchangeably.

[0085] Figure 1 This is an example of a diagram illustrating the exterior and interior of a vehicle.

[0086] Referring to the attached drawings, the vehicle 200 operates by means of a plurality of wheels 103FR, 103FL, 103RL... which are rotated by a power source, and a steering wheel 150 for adjusting the direction of travel of the vehicle 200.

[0087] On the other hand, the vehicle 200 may also be equipped with a camera 195 for acquiring images of the front of the vehicle.

[0088] On the other hand, the vehicle 200 may be equipped with a plurality of displays 180a, 180b for displaying images, information and the like inside.

[0089] exist Figure 1 In the example, multiple displays 180a and 180b are shown, including a cluster display 180a and an AVN (Audio Video Navigation) display 180b. Additionally, HUD (Head-Up Display) and similar displays can also be shown.

[0090] On the other hand, the AVN display 180b can also be named the Central Information Display.

[0091] On the other hand, the vehicle 200 described in this specification can be a concept that includes all vehicles that have an engine as a power source, hybrid vehicles that have an engine and an electric motor as power sources, electric vehicles that have an electric motor as a power source, etc.

[0092] Figure 2 This diagram illustrates an example of the architecture of a vehicle control device.

[0093] Referring to the accompanying drawings, the architecture 300a of the vehicle control device can correspond to a zone-based architecture.

[0094] Therefore, sensor devices and processors inside the vehicle can be configured in multiple regions Z1 to Z4 respectively, and a signal processing device 170a including a gateway GWDa can be configured in the central region of the multiple regions Z1 to Z4.

[0095] On the other hand, in addition to the gateway GWDa, the signal processing device 170a may further include an automatic driving control module ACC, a cockpit control module CPG, etc.

[0096] The gateway GWDa within such a signal processing device 170a can be an HPC (High Performance Computing) gateway.

[0097] Right now, Figure 2 The signal processing device 170a, as an integrated HPC, is capable of exchanging data with an external communication module (not shown) or processors (not shown) in multiple zones Z1 to Z4.

[0098] Figure 3a This diagram illustrates an example of the configuration of displays inside a vehicle.

[0099] Referring to the attached diagram, cluster displays 180a, AVN displays 180b, rear-seat entertainment displays 180c and 180d, and interior mirror displays (not shown) can be installed inside the vehicle.

[0100] Figure 3b This is another example of the configuration of displays inside a vehicle.

[0101] According to an embodiment of the present disclosure, a vehicle control device 100 may include a plurality of displays 180a to 180b and a signal processing device 170, wherein the signal processing device 170 performs signal processing for displaying images, information, etc. on the plurality of displays 180a to 180b and outputs image signals to at least one display 180a to 180b.

[0102] Among the plurality of displays 180a to 180b, the first display 180a may be a cluster display 180a for displaying driving status, action information, etc., and the second display 180b may be an AVN display 180b for displaying vehicle operation information, navigation maps, various entertainment information or images.

[0103] The signal processing device 170 has a processor 175 inside, which can execute a first virtual machine to a third virtual machine (not shown) on a manager program (not shown) within the processor 175.

[0104] The second virtual machine (not shown) can operate for the first display 180a, and the third virtual machine (not shown) can operate for the second display 180b.

[0105] On the other hand, the first virtual machine (not shown) within the processor 175 is configured to use the shared memory 508 based on the hypervisor 505 in order to transmit the same data to the second virtual machine (not shown) and the third virtual machine (not shown). Thus, the same information or the same image can be displayed synchronously on the first display 180a and the second display 180b within the vehicle.

[0106] On the other hand, in order to perform distributed data processing, the first virtual machine (not shown) within the processor 175 shares at least a portion of the data with the second virtual machine (not shown) and the third virtual machine (not shown). Thus, distributed data processing is possible across multiple virtual machines used for multiple displays within the vehicle.

[0107] On the other hand, the first virtual machine (not shown) within the processor 175 can receive and process the wheel speed sensor data of the vehicle, and transmit the processed wheel speed sensor data to at least one of the second virtual machine (not shown) and the third virtual machine (not shown). Thus, the wheel speed sensor data of the vehicle can be shared with at least one virtual machine, etc.

[0108] On the other hand, the vehicle control device 100 according to embodiments of the present disclosure may further include a rear seat entertainment display 180c for displaying driving status information, simple navigation information, various entertainment information or images.

[0109] The signal processing device 170 can control the RSE display 180c by additionally executing a fourth virtual machine (not shown) in addition to executing the first to third virtual machines (not shown) on the management program (not shown) within the processor 175.

[0110] Therefore, various displays 180a to 180c can be controlled using a single signal processing device 170.

[0111] On the other hand, some of the multiple displays 180a to 180c can operate based on the Linux operating system, while others can operate based on the Web operating system.

[0112] According to an embodiment of the present disclosure, the signal processing apparatus 170 can be controlled to synchronously display the same information or the same image even on displays 180a to 180c that operate under various operating systems (OS).

[0113] On the other hand, Figure 3b The illustration shows: a vehicle speed indicator 212a and a vehicle interior temperature indicator 213a are displayed on a first display 180a; a main screen 222 including a plurality of applications and vehicle speed indicator 212b and vehicle interior temperature indicator 213b is displayed on a second display 180b; and a second main screen 222b including a plurality of applications and vehicle interior temperature indicator 213c is displayed on a third display 180c.

[0114] Figure 4 This is an example of an internal block diagram of a vehicle control device according to an embodiment of the present disclosure.

[0115] Referring to the accompanying drawings, the vehicle control device 100 according to an embodiment of the present disclosure may include: an input unit 110, a communication unit 120 for communicating with an external device, a plurality of communication modules EMa to EMD for internal communication, a memory 140, a signal processing device 170, a plurality of displays 180a to 180c, an audio output unit 185, and a power supply unit 190.

[0116] Multiple communication modules EMa to EMD can be configured separately in, for example... Figure 2 In the multiple regions Z1 to Z4.

[0117] On the other hand, the signal processing device 170 may have a communication switch 736b internally for data communication with each communication module EMa to EMD.

[0118] Each communication module EMa to EMD can perform data communication with multiple sensor devices SN or ECU 770 or area signal processing device 170Z.

[0119] On the other hand, the plurality of sensor devices SN may include a camera 195, a lidar 196, a radar 197, or a position sensor 198.

[0120] The input unit 110 may include physical buttons, panels, etc., for button input, touch input, etc.

[0121] On the other hand, the input unit 110 may be equipped with a microphone (not shown) for user voice input.

[0122] The communication unit 120 is able to exchange data wirelessly with the mobile terminal 600 or the server 400.

[0123] In particular, the communication unit 120 can wirelessly exchange data with the vehicle driver's mobile terminal. The wireless data communication method can be various types such as Bluetooth, WiFi, WiFi Direct, and APiX.

[0124] The communication unit 120 can receive weather information, road traffic information, and information such as TPEG (Transport Protocol Expert Group) from the mobile terminal 600 or the server 400. For this purpose, the communication unit 120 may include a mobile communication module (not shown).

[0125] Multiple communication modules EMa to EMD can receive sensor data from ECU 770, sensor device SN, or area signal processing device 170Z, and transmit the received sensor data to signal processing device 170.

[0126] Here, sensor data may include at least one of the following: vehicle orientation data, vehicle position data (GPS data), vehicle angle data, vehicle speed data, vehicle acceleration data, vehicle tilt data, vehicle forward / reverse data, battery data, fuel data, tire data, headlight data, vehicle interior temperature data, and vehicle interior humidity data.

[0127] Such sensor data can be acquired from heading sensors, yaw sensors, gyroscope sensors, position modules, vehicle forward / reverse sensors, wheel sensors, vehicle speed sensors, vehicle tilt detection sensors, battery sensors, fuel sensors, tire sensors, steering sensors for steering wheel rotation, vehicle interior temperature sensors, and vehicle interior humidity sensors.

[0128] On the other hand, the positioning module may include a GPS module or a position sensor 198 for receiving GPS information.

[0129] On the other hand, at least one of the plurality of communication modules EMa to EMD can transmit location information data detected by the GPS module or the location sensor 198 to the signal processing device 170.

[0130] On the other hand, at least one of the plurality of communication modules EMa to EMD is able to receive frontal image data, side image data, rear image data, and distance information of obstacles around the vehicle from the camera 195, lidar 196, or radar 197, and transmit the received information to the signal processing device 170.

[0131] The memory 140 is capable of storing various data for the overall operation of the vehicle control device 100, such as programs for processing or controlling the signal processing device 170.

[0132] For example, memory 140 can store data related to a hypervisor, a first virtual machine, to a third virtual machine, used to execute within processor 175.

[0133] The audio output unit 185 converts the electrical signal from the signal processing device 170 into an audio signal and outputs it. For this purpose, a speaker or the like can be included.

[0134] The power supply unit 190 can supply the power required for the operation of each structural element through the control of the signal processing device 170. In particular, the power supply unit 190 can obtain power from batteries or the like inside the vehicle.

[0135] The signal processing device 170 controls the overall operation of each unit within the vehicle control device 100.

[0136] For example, signal processing device 170 may include processor 175 that performs signal processing for vehicle displays 180a, 180b.

[0137] Processor 175 is capable of executing first virtual machines to third virtual machines (not shown) on a hypervisor (not shown) within processor 175.

[0138] The first virtual machine (not shown) in the first to third virtual machines (not shown) can be named the Server Virtual Machine, and the second to third virtual machines (not shown) can be named the Guest Virtual Machine.

[0139] For example, a first virtual machine (not shown) within processor 175 can receive sensor data from a plurality of sensor devices, such as vehicle sensor data, location information data, camera image data, audio data, or touch input data, and process or manipulate it for output.

[0140] In this way, by performing most of the data processing in the first virtual machine (not shown), 1:N data sharing can be achieved.

[0141] As another example, the first virtual machine (not shown) is able to directly receive and process CAN data, Ethernet data, audio data, radio data, USB data, and wireless communication data for the second to third virtual machines (not shown).

[0142] Furthermore, the first virtual machine (not shown) can transmit the processed data to the second virtual machine to the third virtual machine (not shown).

[0143] Therefore, by enabling only the first virtual machine (not shown) among the first to third virtual machines (not shown) to receive sensor data, communication data or external input data from a plurality of sensor devices to perform signal processing, the signal processing burden in other virtual machines is reduced, enabling 1:N data communication and thus achieving synchronization during data sharing.

[0144] On the other hand, the first virtual machine (not shown) can be controlled to record data in shared memory 508 and share the same data with the second virtual machine (not shown) and the third virtual machine (not shown).

[0145] For example, the first virtual machine (not shown) can be controlled to record vehicle sensor data, the aforementioned location information data, the aforementioned camera image data, or the aforementioned touch input data in shared memory 508, and share the same data with the second virtual machine (not shown) and the third virtual machine (not shown). This achieves 1:N data sharing.

[0146] Ultimately, by performing most of the data processing in the first virtual machine (not shown), 1:N data sharing can be achieved.

[0147] On the other hand, the first virtual machine (not shown) within the processor 175 can be controlled to be configured based on the shared memory 508 of the hypervisor 505 in order to transmit the same data to the second virtual machine (not shown) and the third virtual machine (not shown).

[0148] On the other hand, the signal processing device 170 is capable of processing various signals such as audio signals, image signals, and data signals. Therefore, the signal processing device 170 can be implemented as a system on chip (SOC).

[0149] on the other hand, Figure 4 The signal processing device 170 within the display device 100 can interact with... Figure 5a The signal processing devices 170, 170a1, and 170a2 of the vehicle control devices in the following figures are the same.

[0150] Figures 5a to 5d The diagram illustrates various examples of vehicle control devices.

[0151] Figure 5a An example of a vehicle control device according to an embodiment of the present disclosure is illustrated.

[0152] Referring to the accompanying drawings, a vehicle control device 600a according to an embodiment of the present disclosure includes signal processing devices 170a1, 170a2, and a plurality of area signal processing devices 170Z1 to 170Z4.

[0153] On the other hand, two signal processing devices 170a1 and 170a2 are illustrated in the accompanying drawings, but this is only for backup purposes, and there may be only one.

[0154] On the other hand, signal processing devices 170a1 and 170a2 can be named HPC signal processing devices.

[0155] Multiple area signal processing devices 170Z1 to 170Z4 are configured in each area Z1 to Z4, and can transmit sensor data to signal processing devices 170a1 and 170a2.

[0156] Signal processing devices 170a1 and 170a2 receive data from a plurality of regional signal processing devices 170Z1 to 170Z4 or communication device 120 in a wired manner.

[0157] The accompanying drawings illustrate data exchange between signal processing devices 170a1, 170a2 and a plurality of regional signal processing devices 170Z1 to 170Z4 via wired communication, and data exchange between signal processing devices 170a1, 170a2 and server 400 via wireless communication. However, data exchange between communication device 120 and server 400 via wireless communication is also possible, and data exchange between signal processing devices 170a1, 170a2 and communication device 120 via wired communication is also possible.

[0158] On the other hand, the data received by the signal processing devices 170a1 and 170a2 may include camera data or sensor data.

[0159] For example, sensor data inside the vehicle may include at least one of the following: wheel speed data, vehicle direction data, vehicle position data (GPS data), vehicle angle data, vehicle speed data, vehicle acceleration data, vehicle tilt data, vehicle forward / reverse data, battery data, fuel data, tire data, headlight data, vehicle interior temperature data, vehicle interior humidity data, vehicle exterior radar data, and vehicle exterior lidar data.

[0160] On the other hand, camera data can include data from external vehicle cameras and data from internal vehicle cameras.

[0161] On the other hand, the signal processing devices 170a1 and 170a2 are capable of executing multiple virtual machines 620, 630, and 640 in accordance with safety standards.

[0162] The accompanying drawings illustrate a processor 175 within a signal processing device 170a executing a management program 505, on which a first virtual machine 620 to a third virtual machine 640 are executed according to the Automotive Safety Integrity Level (ASIL).

[0163] The first virtual machine 620 may be a virtual machine corresponding to QM (Quality Management), which is the lowest safety level in the Automotive Safety Integrity Level (ASIL) and is not a mandatory level.

[0164] The first virtual machine 620 can execute operating system 622, container runtime 624 on operating system 622, and containers 627 and 629 on container runtime 624.

[0165] The second virtual machine 630 can be a virtual machine corresponding to ASILA or ASILB, where the sum of Severity, Exposure, and Controllability in the Automotive Safety Integrity Level (ASIL) is 7 or 8.

[0166] The second virtual machine 630 can execute operating system 632, container runtime 634 on operating system 632, and containers 637 and 639 on container runtime 634.

[0167] The third virtual machine 640 can be a virtual machine corresponding to ASILC or ASILD, where the sum of Severity, Exposure, and Controllability in the Automotive Safety Integrity Level (ASIL) is 9 or 10.

[0168] On the other hand, ASILD can correspond to the level requiring the highest level of security.

[0169] The third virtual machine 640 can execute the secure operating system 642 and the application 645 on the operating system 642.

[0170] On the other hand, the third virtual machine 640 can also execute the secure operating system 642, the container runtime 644 on the secure operating system 642, and the container 647 on the container runtime 644.

[0171] On the other hand, unlike the attached diagram, the third virtual machine 640 can also be executed via another core of the non-processor 175. See also... Figure 5b This will be explained later.

[0172] Figure 5b Another example of a vehicle control device according to an embodiment of the present disclosure is illustrated.

[0173] Referring to the accompanying drawings, the vehicle control device 600b according to an embodiment of the present disclosure includes signal processing devices 170a1, 170a2 and a plurality of region signal processing devices 170Z1 to 170Z4.

[0174] Figure 5b Although the vehicle control device 600b is similar to Figure 5a The vehicle control unit 600a is similar, but the signal processing unit 170a1 is... Figure 5a There are some differences between the signal processing device 170a1 and the signal processing device 170a1.

[0175] If described with respect to its differences, the signal processing device 170a1 may include a processor 175 and a second processor 177.

[0176] The processor 175 within the signal processing device 170a1 executes a management program 505, on which a first virtual machine 620 and a second virtual machine 630 are executed according to the Automotive Safety Integrity Level (ASIL).

[0177] The first virtual machine 620 can execute operating system 622, container runtime 624 on operating system 622, and containers 627 and 629 on container runtime 624.

[0178] The second virtual machine 630 can execute operating system 632, container runtime 634 on operating system 632, and containers 637 and 639 on container runtime 634.

[0179] On the other hand, the second processor 177 within the signal processing device 170a1 is capable of executing the third virtual machine 640.

[0180] The third virtual machine 640 can execute the secure operating system 642, the automotive open system architecture 646 on the operating system 642, and the application 645 on the automotive open system architecture 646. That is, it is compatible with... Figure 5a Unlike other systems, it can further execute the Automotive Open Systems Architecture 646 on the operating system 642.

[0181] On the other hand, the third virtual machine 640 is able to communicate with... Figure 5a Similarly, secure operating system 642, container runtime 644 on secure operating system 642, and container 647 on container runtime 644 are executed.

[0182] On the other hand, the third virtual machine 640, which requires a high level of security, is preferably different from the first virtual machine 620 to the second virtual machine 630, and is preferably executed in the second processor 177, which is another core or other processor.

[0183] on the other hand, Figure 5a and Figure 5b When the first signal processing device 170a1 malfunctions, the backup second signal processing device 170a2 can operate.

[0184] Alternatively, signal processing devices 170a1 and 170a2 can operate simultaneously, with the first signal processing device 170a operating as the main device and the second signal processing device 170a2 operating as the auxiliary device. For this, refer to... Figure 5c and Figure 5dTo describe.

[0185] Figure 5c Another example of a vehicle control device according to an embodiment of the present disclosure is illustrated.

[0186] Referring to the accompanying drawings, the vehicle control device 600c according to an embodiment of the present disclosure includes signal processing devices 170a1, 170a2, and a plurality of area signal processing devices 170Z1 to 170Z4.

[0187] On the other hand, two signal processing devices 170a1 and 170a2 are illustrated in the accompanying drawings, but this is only for backup purposes, and there may be only one.

[0188] On the other hand, signal processing devices 170a1 and 170a2 can be named HPC signal processing devices.

[0189] Multiple signal processing devices 170Z1 to 170Z4 are configured in each region Z1 to Z4, and can transmit sensor data to signal processing devices 170a1 and 170a2.

[0190] Signal processing devices 170a1 and 170a2 receive data from a plurality of regional signal processing devices 170Z1 to 170Z4 or communication device 120 in a wired manner.

[0191] The accompanying drawings illustrate data exchange between signal processing devices 170a1, 170a2 and a plurality of regional signal processing devices 170Z1 to 170Z4 via wired communication, and data exchange between signal processing devices 170a1, 170a2 and server 400 via wireless communication. However, data exchange between communication device 120 and server 400 via wireless communication is also possible, and data exchange between signal processing devices 170a1, 170a2 and communication device 120 via wired communication is also possible.

[0192] On the other hand, the data received by the signal processing devices 170a1 and 170a2 may include camera data or sensor data.

[0193] On the other hand, the processor 175 in the first signal processing device 170a1 of the signal processing devices 170a1 and 170a2 is capable of executing the management program 505, and is capable of executing the safe virtual machine 660 and the non-safe virtual machine 670 on the management program 505 respectively.

[0194] On the other hand, the processor 175b in the second signal processing device 170a2 of the signal processing devices 170a1 and 170a2 is capable of executing the management program 505b, and is capable of executing only the security virtual machine 680 on the management program 505b.

[0195] In this manner, the processing for security is performed separately in the first signal processing device 170a1 and the second signal processing device 170a2, thereby improving stability and processing speed.

[0196] On the other hand, high-speed network communication can be performed between the first signal processing device 170a1 and the second signal processing device 170a2.

[0197] Figure 5d Another example of a vehicle control device according to an embodiment of the present disclosure is illustrated.

[0198] Referring to the accompanying drawings, a vehicle control device 600d according to an embodiment of the present disclosure includes signal processing devices 170a1, 170a2, and a plurality of region signal processing devices 170Z1 to 170Z4.

[0199] Figure 5d Although the vehicle control device 600d is similar to Figure 5c The vehicle control unit 600c is similar, but the second signal processing unit 170a2 is... Figure 5c There are some differences in the second signal processing device 170a2.

[0200] Figure 5d The processor 175b within the second signal processing device 170a2 is capable of executing the management program 505b, and can execute the secure virtual machine 680 and the non-secure virtual machine 690 on the management program 505b respectively.

[0201] That is, with Figure 5c The difference lies in how the processor 175b within the second signal processing device 170a2 further executes the insecure virtual machine 690.

[0202] In this manner, the processing of both safe and unsafe signals is performed separately in the first signal processing device 170a1 and the second signal processing device 170a2, thereby improving stability and processing speed.

[0203] Figure 6 This is an example of a block diagram of a vehicle control device according to an embodiment of the present disclosure.

[0204] Referring to the accompanying drawings, a vehicle control device 900 according to an embodiment of the present disclosure includes a signal processing device 170 and at least one display.

[0205] In the accompanying drawings, cluster display 180a and AVN display 180b are illustrated as at least one display.

[0206] On the other hand, the vehicle control unit 900 may further include a plurality of regional signal processing units 170Z1 to 170Z4.

[0207] At this time, the signal processing device 170, as a high-performance central signal processing and control device with multiple CPUs 175, GPUs 178, NPUs 179, etc., can be named HPC signal processing device or central signal processing device.

[0208] Multiple area signal processing devices 170Z1 to 170Z4 are connected to signal processing device 170 via wired cables CB1 to CB4.

[0209] On the other hand, the multiple regional signal processing devices 170Z1 to 170Z4 can be connected to each other using wired cables CBa to CBd.

[0210] At this time, the wired cables CBa to CBd may include CAN communication cables, Ethernet communication cables, or PCI Express cables.

[0211] On the other hand, the signal processing apparatus 170 according to embodiments of the present disclosure may include at least one processor 175, 178, 177 and a large-capacity storage device 925.

[0212] For example, the signal processing apparatus 170 according to embodiments of the present disclosure may include a central processing unit 175, 177, a graphics processor 178, and a neural processor 179.

[0213] On the other hand, sensor data can be transmitted to signal processing device 170 from at least one of the plurality of region signal processing devices 170Z1 to 170Z4. In particular, the sensor data can be stored in storage device 925 within signal processing device 170.

[0214] The sensor data at this time may include at least one of the following: camera data, lidar data, radar data, vehicle direction data, vehicle position data (GPS data), vehicle angle data, vehicle speed data, vehicle acceleration data, vehicle tilt data, vehicle forward / reverse data, battery data, fuel data, tire data, headlight data, vehicle interior temperature data, and vehicle interior humidity data.

[0215] The accompanying drawings illustrate camera data from camera 195a and lidar data from lidar sensor 196 being input to the first area signal processing unit 170Z1. The camera data and lidar data are then transmitted to the signal processing unit 170 via the second area signal processing unit 170Z2 and the third area signal processing unit 170Z3, etc.

[0216] On the other hand, the data read speed or data write speed to the storage device 925 is faster than the network speed when transmitting sensor data from at least one of the plurality of regional signal processing devices 170Z1 to 170Z4 to the signal processing device 170, so it is preferable to perform multi-path routing to avoid network bottlenecks.

[0217] Therefore, the signal processing apparatus 170 according to embodiments of this disclosure can perform multi-path routing based on Software Defined Network (SDN). This ensures a stable network environment for data reading or writing to the storage device 925. Furthermore, data can be transmitted to the storage device 925 using multiple paths, thus enabling data transmission by dynamically changing the network configuration.

[0218] For high-bandwidth, low-latency communication, the data communication between the plurality of area signal processing devices 170Z1 to 170Z4 within the vehicle control device 900 of the present disclosure and the signal processing device 170 is preferably Peripheral Component Interconnect Express (PCI Express) communication.

[0219] Figure 7a This is an example of an operational configuration diagram of a central signal processing device according to an embodiment of the present disclosure.

[0220] Referring to the accompanying drawings, a central signal processing apparatus 170 according to an embodiment of the present disclosure includes a processor 175.

[0221] The processor 175 within the central signal processing unit 170 is capable of executing management program 505 or container.

[0222] On the other hand, processor 175 can execute a domain based on Software Defined Vehicle (SDV) on hypervisor 505 or a container.

[0223] For example, processor 175 can execute communication domain 711, OTA domain 721, security domain 722, diagnosis domain 723, and orchestrator domain 732 on hypervisor 505 or container.

[0224] Communication domain 711 may include SOME / IP (Scalable service-oriented middleware over IP) domain, DDS domain, etc., as domains used for internal communication.

[0225] OTA domain 721 can include primary domain, client domain, module domain, etc., as update-related domains based on data received from server 400.

[0226] Security domain 722 can include IDS domain, AUTH domain, TEE domain, etc.

[0227] The diagnostic domain 723 can include CAN domain, Ethernet domain, wireless domain, etc.

[0228] Coordination domain 732 may include resource domains, criticality domains, etc.

[0229] On the other hand, the processor 175 is capable of running SDV-based platforms across various domains.

[0230] For example, processor 175 can execute an SDV-based autonomous driving (AD) or vehicle driver assistance (ADAS) platform 715 on communication domain 711.

[0231] On the other hand, the autonomous driving (AD) or vehicle driver assistance (ADAS) platform 715 may include a camera aggregator, sensor fusion, ADAS AI algorithms, or vision frameworks.

[0232] For example, processor 175 is capable of executing SDV-based vehicle platform 725 on OTA domain 721 and security domain 722.

[0233] On the other hand, vehicle platform 725 may include app stores, car services, personalization, multimedia, BT / WiFi / UWB, mobile screen mirroring, audio or location platforms, etc.

[0234] For example, processor 175 can execute SDV-based screen sharing 729, HUD 727, or cluster 726 platforms on analysis domain 723.

[0235] On the other hand, the processor 175 can execute SDV-based body services, chassis services, powertrain services, or classic automotive open system architecture platforms on the coordination domain 732.

[0236] On the other hand, the processor 175 is capable of running SDV experiences or applications on top of SDV.

[0237] For example, processor 175 can execute autonomous driving (AD) application 179 or vehicle driver assistance (ADAS) application 178 on autonomous driving (AD) or vehicle driver assistance (ADAS) platform 715.

[0238] On the other hand, the processor 175 can execute AR / MR applications 741, surround view applications 742, AI sound applications 743, IVI applications 744, vehicle content platform applications 745, or SW-defined radio applications 746 on the vehicle platform 725 or screen sharing 729, HUD 727 or cluster 726.

[0239] On the other hand, processor 175 can execute vehicle applications 178 on platforms such as body services, chassis services, powertrain services, or classic automotive open system architecture platforms.

[0240] Figure 7b This is an example of an operational configuration diagram of a regional signal processing apparatus according to an embodiment of the present disclosure.

[0241] Referring to the accompanying drawings, the area signal processing apparatus 170z according to an embodiment of the present disclosure includes a processor 175z.

[0242] The processor 175z within the area signal processing unit 170z is capable of executing management program 505z or container.

[0243] On the other hand, the processor 175z can run the operating system 705 on the hypervisor 505z or container.

[0244] On the other hand, the processor 175z is able to execute network domain 762 on operating system 705.

[0245] On the other hand, network domain 762 can include CAN, Ethernet, PCIe, ISN or SDN domains, etc.

[0246] On the other hand, the processor 175z can execute the Automotive Open System Adaptive Platform 763, the gateway 764, or the PLC 765 platform on the network domain 762.

[0247] On the other hand, the processor 175z can execute regional applications 768, etc., on the Automotive Open System Adaptive Platform (AUTOSAR Adaptive) 763, Gateway 764, or PLC 765 platform.

[0248] Figure 8 An example of the execution of vehicle services in a signal processing apparatus according to an embodiment of the present disclosure is illustrated.

[0249] Referring to the accompanying drawings, the signal processing apparatus 170 according to an embodiment of the present disclosure includes a processor 175 and a memory 174.

[0250] On the other hand, the signal processing apparatus 170 according to embodiments of the present disclosure may further include a second processor 178 and a neural processor 179.

[0251] On the other hand, the processor 175 according to an embodiment of this disclosure is capable of executing a service agent 800 for performing vehicle services. This service agent 800 may be named PICCOLO.

[0252] For example, the service agent 800 can control the receipt of execution-related data for performing SDV-based vehicle services and perform vehicle services based on the execution-related data.

[0253] On the other hand, Service Agent 800 can correspond to Service Coordination.

[0254] On the other hand, the processor 175 according to an embodiment of the present disclosure can further execute a service scheduler 840 that exchanges data with a service agent 800 for performing vehicle services. The service scheduler 840 in this case can be named TIMPANI.

[0255] Figures 9 to 10 for Figure 8 The diagram referenced in the description.

[0256] Figure 9 Examples based on Figure 8 This is an example of service execution by a service agent.

[0257] Referring to the accompanying drawings, the processor 175 according to an embodiment of the present disclosure is capable of executing a service agent 800, a service scheduler 840, a kernel 880, and a service container 890 for performing vehicle services.

[0258] The service agent 800 can receive service execution-related data in file form from outside or inside the vehicle, and output instruction data (cmd) to the outside based on the service execution-related data.

[0259] For example, Service Agent 800 can receive service execution-related data in the form of YAML (YAML Ain't Markup Language) files.

[0260] On the other hand, the service agent 800 may include: a parser 810, which interprets or parses service execution-related data; and a state manager 820, which manages the difference between the current state and the desired state and transmits instruction data (cmd) to the workload coordinator 870 to achieve state transition.

[0261] On the other hand, the workload coordinator 870 can be named the Bluechi controller.

[0262] On the other hand, the workload coordinator 870 is able to control the execution of services interpreted in the service broker 800 using the real-time kernel 880 and the service container 890.

[0263] That is, the service container 890 can execute services based on data from the service agent 800 or the service scheduler 840.

[0264] On the other hand, the state manager 820 is able to receive result data from the workload coordinator 870.

[0265] On the other hand, the state manager 820 can transmit information (inf) of service execution-related data interpreted by the parser 810 to the service scheduler 840, and receive error data from the service scheduler 840.

[0266] The service scheduler 840 may include a first service scheduler 850 that directly interacts with the service agent 800 and a second service scheduler 860 that indirectly interacts with the service agent 800 and acts as a node.

[0267] The first service scheduler 850 can generate a scheduling table 852 based on the information (inf) of service execution related data interpreted by the service agent 800, and generate scheduling information 854 based on the scheduling table 852 for monitoring.

[0268] For example, the monitor 856 within the first service scheduler 850 can transmit the result data of the monitored service to the status manager 820 within the service agent 800.

[0269] On the other hand, the scheduling information 854 generated from the first service scheduler 850 can be transmitted to the second service scheduler 860.

[0270] The real-time scheduler 862 within the second service scheduler 860 can output real-time scheduling information (config) for executing services in the real-time kernel 880 and service container 890 based on the scheduling information 854.

[0271] On the other hand, the time trigger 864 within the second service scheduler 860 can output time trigger information (config) for executing services in the real-time kernel 880 and service container 890 based on the scheduling information 854.

[0272] On the other hand, the monitor 865 in the second service scheduler 860 can collect the result data of the system resource status of the node and the real-time driving status of the service, and transmit the result data to the monitor 856 in the first service scheduler 850.

[0273] Figure 10 Examples Figure 8 orFigure 9 This is an example of the internal structure of a service agent.

[0274] Referring to the accompanying drawings, a service proxy 800 according to an embodiment of the present disclosure may include a resolver 810, a gateway 840, a server 830, and a status manager 820.

[0275] On the other hand, the service agent 800 may also include storage 850.

[0276] The parser 810 is able to receive execution-related data for performing SDV-based vehicle services and interpret or parse the service execution-related data.

[0277] On the other hand, the parser 810 can receive service execution related data in the form of YAML (YAML Ain't Markup Language) files and interpret or parse the service execution related data in the YAML files.

[0278] Furthermore, the parser 810 can transmit the interpreted or parsed data to the server 830 or register it as a resource in the memory 850.

[0279] On the other hand, the parser 810 is able to store the data required for subsequent workload generation in the memory 850.

[0280] On the other hand, the parser 810 is capable of performing a conversion to a manifest corresponding to the workload coordinator 870, which acts as a multi-node service controller.

[0281] For example, the parser 810 can receive a YAML file or other form of manifest as an example of service execution-related data from the RPC sender 805 or the REST API.

[0282] Server 830 can receive parsing result data from parser 810 and share the parsing result data with other modules. In this case, server 830 can be named API server.

[0283] For example, server 830 can separate the parsing result data in parser 810 into condition data and action data, and store them in memory 850.

[0284] On the other hand, server 830 can transmit key values ​​of conditional data or action data that can be read from memory 850 as part of the parsing result data to gateway 840.

[0285] On the other hand, server 830 can control the storage of a portion of the data or a portion of the state information used for state management of service agent 800 in memory 850.

[0286] On the other hand, server 830 can support or request external communication using RPC (remote procedure call) and API.

[0287] On the other hand, server 830 can receive direct requests from direct request unit 801 or workload generation requests from workload generation request unit 803.

[0288] On the other hand, server 830 can transmit received direct requests or workload generation requests to workload coordinator 870.

[0289] Gateway 840 can receive various forms of vehicle messages and grasp the vehicle status based on the received vehicle messages.

[0290] On the other hand, the gateway 840 can control the data within the received vehicle messages to be filtered, and trigger events based on this, thereby enabling it to respond to the desired vehicle scenario and drive accordingly.

[0291] On the other hand, the gateway 840 can read the conditional data stored in the memory 850 based on the key value received from the server 830, and generate a filter based on the conditional data.

[0292] On the other hand, gateway 840 can transmit messages for vehicle sensors to message sender 807.

[0293] On the other hand, the filter can grasp the vehicle's status from received vehicle messages, such as DDS messages, and continue to confirm whether the conditions corresponding to the condition data are met.

[0294] On the other hand, when the conditions corresponding to the condition data are met, the gateway 840 can transmit the scene information to the state manager 820 and delete the filter.

[0295] On the other hand, the state manager 820 is able to perform node functions with the workload coordinator 870.

[0296] For example, the state manager 820 can be controlled to perform state transitions by managing the difference between the current state and the desired state.

[0297] On the other hand, the state manager 820 can request additional instructions from the workload coordinator 870 based on direct requests received from the server 830.

[0298] On the other hand, when the state manager 820 receives scene information that meets the conditions from the gateway 840, it can set the scene information as a key value and read the action data from the memory 850 based on the set key value.

[0299] On the other hand, action data can include data indicating what kind of workload container should be executed.

[0300] On the other hand, the state manager 820 can generate the required data based on the workload stored in the memory 850 by the parser 810, which is based on the action data read.

[0301] On the other hand, the status manager 820 can generate the necessary data based on the received workload and send start, update, rollback or terminate instructions to the workload coordinator 870.

[0302] On the other hand, the workload coordinator 870 can execute corresponding functions or instructions or transmit them to the service container 890 based on start, update, rollback or terminate instructions from the state manager 820.

[0303] On the other hand, the memory 850 can store key-value pairs that can be used in various services such as Kubernetes.

[0304] On the other hand, the memory 850 can use the parser 810 to store the data required for the workload to generate.

[0305] On the other hand, the memory 850 can store the parsing result data in the parser 810. At this time, the memory 850 can separate the parsing result data into condition data and action data for storage.

[0306] Figure 11a This is an example of an internal block diagram of a vehicle control device related to this disclosure.

[0307] Referring to the accompanying drawings, the vehicle control device 100x related to this disclosure includes a central signal processing device 170x, a regional signal processing device 170zx, and a control device 1100.

[0308] The central signal processing apparatus 170x related to this disclosure may include a first processor 175x and a first memory 174x. The first processor (175x) is capable of executing an operating system 1105 and an HMI service 1102.

[0309] On the other hand, the central signal processing unit 170x and the regional signal processing unit 170zx are capable of performing Ethernet communication.

[0310] The area signal processing apparatus 170zx related to this disclosure may include a second processor 175zx and a second memory 174zx. The second processor 175zx is capable of executing domain 1108, operating system 1107, and CAN communication service 1106.

[0311] On the other hand, the area signal processing unit 170zx and the control unit 1100 are able to perform CAN communication.

[0312] The control device 1100 related to this disclosure may include a controller 1230 and a memory 1234. The controller 1230 is capable of executing an operating system 1236, actuator control 1235, and vehicle services 1105 based on control logic.

[0313] On the other hand, vehicle service 1105 may include first vehicle service 1106 and second vehicle service 1117.

[0314] The control device 1100 associated with this disclosure is capable of controlling a plurality of actuators AT1 to ATn or a plurality of sensor devices SR1 to SRn based on actuator control 1235 or vehicle service 1105.

[0315] according to Figure 11a In order to control a plurality of actuators AT1 to ATn, the controller 1230 in the vehicle control device 1100 related to this disclosure outputs a control signal.

[0316] On the other hand, when it is necessary to update multiple actuators AT1 to ATn to a new service for control, it is necessary to update the data in memory 1234.

[0317] In particular, when it is necessary to update multiple actuators AT1 to ATn to a new service for control, it is necessary to update the data in memory 1234 corresponding to the first vehicle service 1106, the second vehicle service 1117, or the actuator control 1235.

[0318] However, since the control unit 1100 performs CAN communication with the area signal processing unit 170zx, it may not be easy to receive update data from the external server 400 via the area signal processing unit 170zx and the central signal processing unit 170x.

[0319] In addition, due to capacity limitations of the third memory 1113 within the control device 1100, storing new service data or updating data may not be easy.

[0320] Ultimately, according to Figure 11a The vehicle control device 100x related to this disclosure may be difficult to operate based on new or updated vehicle services, making it difficult to activate the plurality of actuators AT1 to ATn.

[0321] Therefore, this disclosure proposes a solution capable of efficiently executing new or updated services. For this, refer to... Figure 12a The accompanying diagrams will be used for illustration.

[0322] Figure 11b for Figure 11a The diagram referenced in the description.

[0323] Referring to the accompanying drawings, the plurality of controllers ECUa to ECUc in the vehicle control device 100x related to this disclosure respectively receive switching signals from the plurality of switches SWa to SWc, and control each actuator ATa to ATc based on each switching signal.

[0324] This approach has the disadvantage that as the number of actuators ATa to ATc increases, the number of controllers ECUa to ECUc also increases.

[0325] Therefore, this disclosure proposes a scheme that utilizes a controller to efficiently control a plurality of actuators. For this, see [link to relevant documentation]. Figure 12a The accompanying diagrams will be used for illustration.

[0326] Figure 12a This is an example of an internal block diagram of a vehicle control device according to an embodiment of the present disclosure.

[0327] Referring to the accompanying drawings, a vehicle control device 100 according to an embodiment of the present disclosure includes: a first signal processing device 170; a second signal processing device 170z electrically connected to the first signal processing device 170; and a control device 1200 electrically connected to the second signal processing device 170z.

[0328] The first signal processing device 170, which serves as a central signal processing device, includes a first processor 175 and a first memory 174.

[0329] The second signal processing device 170z, which is a regional signal processing device, includes a second processor 175z and a second memory 174z.

[0330] On the other hand, the control device 1200 is electrically connected to the second signal processing device 170z and receives signals from the hardware switch 2312 or the sensor SRm or controls at least one actuator AT.

[0331] On the other hand, the first processor 175 or the second processor 175z is controlled to execute a virtual switch service when the hardware switch 2312 fails, and output the virtual switch object corresponding to the virtual switch service to the electrically connected display 180. Furthermore, when a virtual switch object is selected, the controller 2330 outputs an action start signal, an action stop signal, or an action control signal to the actuator AT.

[0332] Therefore, alternative services can be executed quickly when a hardware device connected to the controller 2330 fails. In particular, alternative services based on a service-oriented architecture can be executed quickly when a hardware device connected to the controller 2330 fails.

[0333] On the other hand, the first memory 174 may include a change data area SPA1 that stores data related to the virtual switch service.

[0334] On the other hand, the first memory 174 may also include a fixed data area SPA2 for storing data related to fixed services.

[0335] On the other hand, the second memory 174z may include a change data area SPA3 that stores data related to virtual switch services and a fixed data area SPA4 that stores data related to fixed services.

[0336] On the other hand, the first signal processing device 170 and the second signal processing device 170z are capable of performing TSN (Time Sensitive Networking) communication based on Ethernet communication.

[0337] On the other hand, the communication method between the second signal processing device 170z and the control device 1200 is preferably the same as the communication method between the first signal processing device 170 and the second signal processing device 170z.

[0338] For example, the communication method between the first signal processing device 170 and the second signal processing device 170z can be TSN communication based on Ethernet communication.

[0339] On the other hand, the control device 1200 can control a plurality of actuators AT1 to ATn or receive signals from a plurality of sensors SR1 to SRn.

[0340] On the other hand, the control device 1200 includes a memory 1234 in addition to a controller 1230.

[0341] On the other hand, the memory 1234 may include a fixed data area for storing data related to the control of a plurality of actuators AT1 to ATn or data related to a plurality of sensors SR1 to SRn.

[0342] That is, the memory 1234 preferably does not have a change data area for storing data related to new services or virtual switch services.

[0343] On the other hand, the first processor 175 within the first signal processing apparatus 170 according to an embodiment of the present disclosure is capable of executing an operating system 1205 and of executing HMI service 1202 on the operating system 1205.

[0344] On the other hand, the first processor 175 within the first signal processing device 170 is capable of executing the first service agent 2350a on the operating system 1205.

[0345] On the other hand, with Figure 11a Unlike other signal processing devices, the first processor 175 within the first signal processing device 170 is capable of executing services based on service-oriented architecture (SOA) or microservices based on microservice architecture (MSA) 1215 on the operating system 1205.

[0346] On the other hand, the first processor 175 within the first signal processing device 170 is capable of executing vehicle service 1210 based on control logic on the operating system 1205.

[0347] Vehicle service 1210 may include at least one vehicle service, with a first vehicle service 1211 and a second vehicle service 1212 illustrated in the figures.

[0348] On the other hand, the first vehicle service 1211 or the second vehicle service 1212 may include a service for controlling at least one of a plurality of actuators AT1 to ATn.

[0349] On the other hand, the first vehicle service 1211 or the second vehicle service 1212 can be updated based on update data received from an external server 400 or an external electronic device 600.

[0350] On the other hand, the first vehicle service 1211 or the second vehicle service 1212 can be a new vehicle service based on data received from an external server 400 or an external electronic device 600.

[0351] On the other hand, the second processor 175z within the second signal processing device 170z is capable of executing the second service agent 2350b on the operating system 1205z.

[0352] On the other hand, the second processor 175z within the second signal processing apparatus 170z according to embodiments of the present disclosure is capable of executing the operating system 1205z and is capable of executing SOA-based services or microservices 1215z on the operating system 1205z.

[0353] On the other hand, the second processor 175z within the second signal processing device 170z is able to execute vehicle services 1210z on the operating system 1205z.

[0354] Vehicle service 1210z may include at least one vehicle service, and third vehicle service 1221, fourth vehicle service 1222, fifth vehicle service 1223 and sixth vehicle service 1224 are illustrated in the figures.

[0355] On the other hand, at least one of the vehicle services 1221 to 1224 may include a service for controlling at least one of the plurality of actuators AT1 to ATn.

[0356] On the other hand, the third vehicle service 1221 or the fourth vehicle service 1222 can be a new vehicle service based on data received from an external server 400 or an external electronic device 600.

[0357] On the other hand, the fifth vehicle service 1223 or the sixth vehicle service 1224 can be updated based on update data received from an external server 400 or an external electronic device 600.

[0358] The control device 1200 according to an embodiment of the present disclosure includes a controller 1230 and a memory 1234.

[0359] The controller 1230 is capable of executing the operating system 1236 and is capable of executing actuator control 1235 on the operating system 1236.

[0360] On the other hand, with Figure 11a Unlike other controllers, controller 1230 may not perform vehicle services, but only perform actuator control 1235.

[0361] That is, vehicle services are preferably performed in the second signal processing device 170z rather than in the control device 1200.

[0362] According to embodiments of the present disclosure, the control device 1200 can control a plurality of actuators AT1 to ATn or a plurality of sensor devices SR1 to SRn based on actuator control 1235.

[0363] At this time, the actuator control 1235 can output an action start signal, action stop signal, or action control signal for at least one of the plurality of actuators AT1 to ATn.

[0364] According to an embodiment of the present disclosure, the control device 1200 is capable of controlling at least one actuator among a plurality of actuators AT1 to ATn based on sensor data from at least one of a plurality of sensor devices SR1 to SRn.

[0365] According to one embodiment of the present disclosure, the second processor 175z controls the execution of the third vehicle service 1221, causing the controller 1230 in the control device 1200 to output an action start signal or an action stop signal to at least one of the plurality of actuators AT1 to ATn.

[0366] On the other hand, the first memory 174 in the first signal processing device 170 or the second memory 174z in the second signal processing device 170z can receive and store execution-related data of the fifth vehicle service 1223, which is added or updated in addition to the third vehicle service 1221, from the external server 400 or the external electronic device 600.

[0367] On the other hand, according to an embodiment of the present disclosure, the second processor 175z is controlled to execute the fifth vehicle service 1223 after the execution-related data of the fifth vehicle service 1223, which is added or updated in addition to the third vehicle service 1221, is stored in the first memory 174z in the first signal processing device 170 or the second memory 174z in the second signal processing device 170z. Based on the fifth vehicle service 1223, the controller 1230 in the control device 1200 outputs an action start signal, an action stop signal, or an action control signal to at least one of the plurality of actuators AT1 to ATn.

[0368] At this time, the second processor 175z is controlled not to transmit the execution-related data of the additional or updated fifth vehicle service 1223 to the control device 1200.

[0369] That is, the control device 1200 does not perform vehicle services and does not receive data related to the performance of vehicle services.

[0370] In this way, the control device 1200 can be easily driven by not performing vehicle services, not receiving vehicle service execution-related data, and outputting an action start signal, an action stop signal, or an action control signal to at least one of the plurality of actuators AT1 to ATn.

[0371] Furthermore, since the control device 1200 does not need to perform new services or service updates, it can reliably control a plurality of actuators AT1 to ATn.

[0372] On the other hand, new services or service updates can be executed efficiently in the second signal processing unit 170z of the non-control unit 1200. In particular, new services or updated services based on a service-oriented architecture can be executed efficiently in the second signal processing unit 170z.

[0373] On the other hand, the execution-related data of the fifth vehicle service 1223 may include condition data and action data.

[0374] On the other hand, if the condition data in the execution-related data of the fifth vehicle service 1223 is satisfied, the second processor 175z can execute the fifth vehicle service 1223. Therefore, new or updated fifth vehicle services 1223 can be executed efficiently.

[0375] On the other hand, motion control signals may include motion speed control signals, motion intensity control signals, or motion temperature control signals.

[0376] For example, based on the fifth vehicle service 1223, the controller 1230 in the control device 1200 can output an action speed control signal, an action intensity control signal, or an action temperature control signal to at least one of a plurality of actuators AT1 to ATn.

[0377] Therefore, based on the fifth vehicle service 1223, it is possible to control the operating speed, operating intensity, or operating temperature of at least one of the plurality of actuators AT1 to ATn. Ultimately, it is possible to efficiently execute a new or updated fifth vehicle service 1223.

[0378] On the other hand, the fifth vehicle service 1223 may include microservices.

[0379] For example, if the conditional data in the execution-related data of the fifth vehicle service 1223 is satisfied, the second processor 175z can execute the fifth vehicle service 1223 as a microservice. Thus, new or updated microservices can be executed efficiently.

[0380] On the other hand, the first processor 175 can be controlled to perform the first vehicle service 1211 based on the received sensor data, and transmit the execution information of the first vehicle service 1211 to the second processor 175z.

[0381] On the other hand, sensor data may include at least one of vehicle driving sensor data, passenger status sensor data, and vehicle surrounding sensor data.

[0382] On the other hand, the first processor 175 can be controlled to execute the first vehicle service 1211 when the sensor data meets the conditions for executing the first vehicle service 1211.

[0383] On the other hand, the second processor 175z can execute the fifth vehicle service 1223 based on the execution information of the first vehicle service 1211, thereby controlling the controller 1230.

[0384] Furthermore, based on the fifth vehicle service 1223, the controller 1230 within the control device 1200 can output an action speed control signal, an action intensity control signal, or an action temperature control signal to at least one of the plurality of actuators AT1 to ATn. This enables the efficient execution of new or updated services.

[0385] On the other hand, the first processor 175 can control the execution of the first vehicle service 1211 based on the received first input signal and sensor data, and transmit the execution information of the first vehicle service 1211 to the second processor 175z. The second processor 175z can execute the fifth vehicle service 1223 based on the execution information of the first vehicle service 1211, thereby controlling the controller 1230. Thus, new or updated services can be executed efficiently.

[0386] On the other hand, the first processor 175 can be controlled to transmit the received first input signal to the second processor 175z, and the second processor 175z can control the controller 1230 by performing the third vehicle service 1221 based on the first input signal.

[0387] On the other hand, the controller 1230 can control at least one of the plurality of actuators AT1 to ATn based on the third vehicle service 1221. As a result, the third vehicle service 1221 can be executed efficiently.

[0388] On the other hand, the second processor 175z can control the controller 1230 by performing the fifth vehicle service 1223 based on the received sensor data. Thus, new or updated services can be performed efficiently based on the sensor data.

[0389] On the other hand, the second processor 175z can control the controller 1230 by performing the fifth vehicle service 1223 based on the received first input signal and sensor data. Thus, new or updated services can be performed efficiently based on the first input signal and sensor data.

[0390] On the other hand, the second processor 175z can be controlled to execute the fifth vehicle service 1223 when the sensor data meets the conditions for executing the fifth vehicle service 1223. Thus, new or updated services can be executed efficiently based on the sensor data.

[0391] On the other hand, the second processor 175z can control the controller 1230 by performing the third vehicle service 1221 based on the first input signal. Thus, the third vehicle service 1221 can be performed efficiently.

[0392] On the other hand, the execution-related data of the fifth vehicle service 1223 may include condition data and action data. At this time, at least one of the condition data and action data can be updated.

[0393] Therefore, new or updated services can be executed efficiently based on updated data.

[0394] On the other hand, conditional data can include vehicle driving sensor data, passenger status sensor data, and vehicle surrounding sensor data. This allows for the efficient execution of new or updated services based on conditional data.

[0395] On the other hand, the controller 1230 can control the second processor 175z to receive the operation status data of actuators AT1 to ATn when the second processor 175z is executing the fifth vehicle service 1223, and change the operation status of actuators AT1 to ATn based on the operation status data of the actuators. Therefore, new or updated services can be executed efficiently based on the operation status data of the actuators.

[0396] On the other hand, the controller 1230 can control the actuator to start or stop its operation based on the third vehicle service 1221, and change the operating speed of the actuators AT1 to ATn based on the fifth vehicle service 1223. Thus, the fifth vehicle service 1223 can be executed efficiently.

[0397] on the other hand, Figure 12a At least one of the actuators AT1 to ATn is capable of moving the vehicle seat, and at least one of the sensors SR1 to SRn can be a camera inside the vehicle.

[0398] In this case, the controller 1230 can control the actuators AT1 to ATn for the movement of the vehicle seat based on the third vehicle service 1221 performed according to the input signal.

[0399] On the other hand, the controller 1230 can control the actuators AT1 to ATn or the seat motor for any one of the following: the movement speed, movement adjustment, movement intensity, or automatic movement of the vehicle seat, based on the fifth vehicle service 1223 executed according to the data from the in-vehicle camera. Thus, the fifth vehicle service 1223 can be executed efficiently.

[0400] on the other hand, Figure 12aAt least one of the actuators AT1 to ATn is capable of operating for temperature regulation inside the vehicle, and at least one of the sensors SR1 to SRn can be a camera inside the vehicle.

[0401] In this case, the controller 1230 can control the actuators AT1 to ATn for temperature regulation inside the vehicle based on the third vehicle service 1221 executed according to the input signal.

[0402] On the other hand, the controller 1230 can control actuators AT1 to ATn for any one of temperature adjustment, airflow direction adjustment, or wind intensity adjustment inside the vehicle, based on the fifth vehicle service 1223 executed according to data from the in-vehicle camera. Thus, the fifth vehicle service 1223 can be executed efficiently.

[0403] Figure 12b for Figure 12a The diagram referenced in the description.

[0404] Referring to the accompanying drawings, the first signal processing device 170 within the vehicle control device 100 according to an embodiment of the present disclosure is capable of receiving individual switch signals from a plurality of switches SW1 to SW6 for driving actuators AT1 to AT6.

[0405] On the other hand, the first signal processing device 170 can transmit each switch signal from a plurality of switches SW1 to SW6 to the control device 1200 via the second signal processing device 170z, which is a regional signal processing device.

[0406] On the other hand, the first controller 1233 in the control device 1200 is capable of receiving a portion of a plurality of switch signals, and the second controller 1247 is capable of receiving another portion of a plurality of switch signals.

[0407] On the other hand, the first controller 1233 is capable of controlling a portion of the plurality of actuators AT1 to AT6, AT1 to AT3, to operate based on the received switch signal.

[0408] Therefore, with Figure 11b Unlike other actuators, the first controller 1233 can be used to perform composite driving of multiple actuators AT1 to AT3. Therefore, multiple actuators AT1 to AT3 can operate efficiently.

[0409] On the other hand, the second controller 1237 can control another part of the plurality of actuators AT1 to AT6, AT4 to AT3, to operate based on the received switching signal.

[0410] Therefore, with Figure 11bUnlike other actuators, the second controller 1237 can be used to perform composite driving of multiple actuators AT4 to AT6. Therefore, multiple actuators AT4 to AT6 can operate efficiently.

[0411] Ultimately, the first signal processing device 170 or the second signal processing device 170z can be used to efficiently execute composite services that drive a plurality of actuators.

[0412] Figure 13a An example of a hardware malfunction in a vehicle related to this disclosure is illustrated.

[0413] Referring to the accompanying drawings, the vehicle controller 2330x related to this disclosure can control the vehicle's lighting device 2310 based on an input signal from a hardware switch 2312 or a signal from a sensor SRm such as a camera or illuminance sensor.

[0414] On the other hand, in the event of a malfunction of the hardware switch 2312 or a malfunction caused by a broken wire between the hardware switch 2312 and the controller 2330x, there is a problem that even if the hardware switch 2312 is activated, the controller 2330x cannot perform the operation control of the vehicle's lighting device 2310.

[0415] On the other hand, if a sensor SRm, such as a camera or illuminance sensor, malfunctions, there is a problem that the controller 2330x cannot perform the operation control of the vehicle's lighting device 2310 even if it is dark around the vehicle.

[0416] In this case, when a hardware device connected to the controller 2330x, such as the hardware switch 2312 or the sensor SRm, malfunctions, the controller 2330x may be unable to perform motion control.

[0417] Therefore, this disclosure proposes the following solution: even if a hardware device connected to the controller 2330, such as hardware switch 2312 or sensor SRm, malfunctions, an alternative service is performed or other hardware devices are activated. For this purpose, see [reference needed]. Figure 13b The following diagrams will be used to illustrate this.

[0418] Figure 13b The accompanying drawings illustrate an example of the operation of a hardware device in a vehicle according to an embodiment of the present disclosure when a malfunction occurs.

[0419] Referring to the accompanying drawings, the controller 2330 within the control device 1200 of the vehicle control device 100 according to an embodiment of the present disclosure is capable of controlling the vehicle's lighting device 2310 based on an input signal from a hardware switch 2312 or a signal from a sensor SRm such as a camera or an illuminance sensor.

[0420] For example, the controller 2330 within the vehicle control device 100 according to an embodiment of the present disclosure is capable of controlling the vehicle's lighting device 2310 to operate based on an input signal from the hardware switch 2312.

[0421] As another example, the controller 2330 within the vehicle control device 100 according to an embodiment of the present disclosure is capable of controlling the vehicle's lighting device 2310 to operate when the level of the signal from a sensor SRm, such as a camera or illuminance sensor, is below a reference level.

[0422] on the other hand, Figure 13b The controller 2330 is capable of corresponding to Figure 12a The controller 1230.

[0423] On the other hand, in the event of a failure of the hardware switch 2312 or a failure caused by a broken wire between the hardware switch 2312 and the controller 2330, the controller 2330 in the vehicle control device 100 can transmit the hardware device fault signal to the interface 2340 in the second signal processing device 170z in the control device 1200.

[0424] On the other hand, the second processor 175z in the second signal processing device 170z or the first processor 175 in the first signal processing device 170 can perform fault judgment of hardware switch 2312 or sensor SRm such as camera or illuminance sensor based on the received fault signal.

[0425] On the other hand, the second processor 175z in the second signal processing device 170z or the first processor 175 in the first signal processing device 170 can execute the service agent 2350 for performing vehicle services.

[0426] On the other hand, when the hardware switch 2312 or a sensor SRm such as a camera or illuminance sensor fails, the service agent 2350, which performs vehicle services, can perform virtual switch services for lighting device control 2355 in addition to the services already performed.

[0427] Figure 13c An example of a virtual switch object displayed on a display screen inside a vehicle is shown.

[0428] Referring to the accompanying drawings, the second processor 175z in the second signal processing device 170z or the first processor 175 in the first signal processing device 170 can be controlled to perform virtual switch services in addition to the services already performed when the hardware switch 2312 or a sensor SRm such as a camera or illuminance sensor malfunctions.

[0429] On the other hand, the second processor 175z in the second signal processing device 170z or the first processor 175 in the first signal processing device 170 can be controlled to display the virtual switch object corresponding to the virtual switch service on the display 180.

[0430] The accompanying drawings illustrate that a screen 1370 is displayed on a monitor 180, including an emergency lighting control off item 1373 and an emergency lighting control off indicator light 1374. However, if the hardware switch 2312 or a sensor SRm such as a camera or illuminance sensor malfunctions, a screen 1380 will be displayed, including an emergency lighting control on item 1372 and an emergency lighting control on indicator light 1384.

[0431] The emergency lighting control activation item 1372 in screen 1380 corresponds to the aforementioned virtual switch object.

[0432] That is, the second processor 175z in the second signal processing device 170z or the first processor 175 in the first signal processing device 170 can control the lighting device 2310 to output an action-on signal, an action-off signal, or an action control signal for emergency lighting control when the emergency lighting control activation item 1372 corresponding to the virtual switch object is selected. This allows for rapid execution of alternative services when a hardware device connected to the controller 2330 fails.

[0433] Figure 13d Another example of a virtual switch object displayed on a display screen inside a vehicle is shown.

[0434] Referring to the accompanying drawings, the second processor 175z in the second signal processing device 170z or the first processor 175 in the first signal processing device 170 can be controlled to display a screen 1381 including various vehicle control items on the display 180.

[0435] On the other hand, the second processor 175z in the second signal processing device 170z or the first processor 175 in the first signal processing device 170 can be controlled to display a virtual switch object such as emergency lighting control item 1387 when the hardware switch 2312 or a sensor SRm such as a camera or illuminance sensor fails.

[0436] On the other hand, the second processor 175z in the second signal processing device 170z or the first processor 175 in the first signal processing device 170 can be controlled to output an operation on signal, an operation off signal, or an operation control signal to the lighting device 2310 for emergency lighting control when the emergency lighting control item 1387 is selected. Therefore, alternative services can be quickly performed when the hardware device connected to the controller 2330 fails.

[0437] Figure 13e Another example of a virtual switch object displayed on a display screen inside a vehicle is shown.

[0438] Referring to the accompanying drawings, the second processor 175z in the second signal processing device 170z or the first processor 175 in the first signal processing device 170 can be controlled to display a screen 1390 including various vehicle control items on the display 180.

[0439] On the other hand, the second processor 175z in the second signal processing device 170z or the first processor 175 in the first signal processing device 170 can be controlled to display a virtual switch object, such as an emergency lighting control item SNK, at the position of the switch near the outside in the screen 1390 when the hardware switch 2312 or a sensor SRm, such as a camera or an illuminance sensor, fails.

[0440] On the other hand, the second processor 175z in the second signal processing device 170z or the first processor 175 in the first signal processing device 170 can be controlled to output an operation on signal, an operation off signal, or an operation control signal to the lighting device 2310 for emergency lighting control when the emergency lighting control item SNK is selected. Therefore, alternative services can be quickly performed when the hardware device connected to the controller 2330 fails.

[0441] Figure 14a for Figure 13b The attached diagram is referenced in the service agent's instructions.

[0442] Referring to the accompanying drawings, when a hardware switch 2312 or a sensor SRm such as a camera or illuminance sensor 2312 malfunctions, the second processor 175z within the second signal processing device 170z can receive a fault signal from the interface 2340 within the second signal processing device 170z.

[0443] On the other hand, the interface 2340 in the second signal processing device 170z can also transmit fault signals to the main logic processing unit 2342 in the first signal processing device 170.

[0444] On the other hand, the second processor 175z within the second signal processing device 170z can execute a service agent 2350 for performing vehicle services when the hardware switch 2312 or a sensor SRm such as a camera or illuminance sensor malfunctions.

[0445] For example, the interface 2340 between the service agent 2350 and the second signal processing device 170z can exchange signals based on SOA, or based on eXpress Data Path (XDP), or based on Esxtended Berkeley Packet Filter (eBPF), or based on Shared Memory (SHM).

[0446] On the other hand, when the hardware switch 2312 or a sensor SRm such as a camera or illuminance sensor fails, the service agent 2350 used to perform vehicle services can, in addition to performing the services already performed, also perform a virtual switch service for lighting device control 2355.

[0447] On the other hand, the service agent 2350 for performing vehicle services may include a state manager 2357 that transmits instruction data cmd to the workload coordinator 870.

[0448] On the other hand, the state manager 2357 and the lighting control 2355 can additionally perform communication based on remote procedure call (RPC).

[0449] On the other hand, when the hardware switch 2312 or a sensor SRm such as a camera or illuminance sensor fails, the service agent 2350 can perform a replacement service for the hardware switch 2312 or the sensor SRm such as a camera or illuminance sensor.

[0450] Figure 14b In order to be in Figure 14a The accompanying diagram refers to the description of the alternative service executed in the service agent.

[0451] Referring to the attached diagram, Service Agent 2350 can perform alternative services to replace the sensor SRm when a sensor SRm, such as a camera or illuminance sensor, fails.

[0452] For example, service agent 2350 can control the lighting device 2310 to be turned on according to the specification standard at night, but if the current state is off due to a failure of hardware switch 2312 or sensor SRm such as camera or illuminance sensor, a reconcile target is set to turn it on.

[0453] On the other hand, the service agent 2350 can control the signal received from a sensor SRm, such as a camera or illuminance sensor, to be of illuminance level "40" according to the standard, and the current state is also "40", and judge it as normal operation without setting a coordination target.

[0454] Figure 14c The accompanying diagram is for reference in the action description of the service agent based on the scenario example.

[0455] Referring to the attached diagram, service agent 2350 can receive instruction data such as cmd from service agent 2350.

[0456] On the other hand, the second processor 175z in the second signal processing device 170z or the first processor 175 in the first signal processing device 170 can execute the service agent 2350.

[0457] Service agent 2350 is capable of executing vehicle message receiver 2410 and scene processing unit 2420.

[0458] The vehicle message receiver 2410 may include a DDS adapter 2412, a SOME / IP receiver 2413, a microprotocol receiver (uProtocol) 2415, and a Zenoh receiver 2417 associated with the distributed protocol.

[0459] On the other hand, the service agent 2350 can execute the scene manager 2540 between the vehicle message receiver 2410 and the scene processing unit 2420.

[0460] Scene manager 2540 may include receiver 2452 and condition checker 2455.

[0461] The receiver 2452 within the scene manager 2540 can receive data from the DDS adapter 2412, SOME / IP receiver 2413, microprotocol receiver 2415, or Zenoh receiver 2417.

[0462] On the other hand, the condition checker 2455 is able to check the condition data of the data received from the receiver 2452.

[0463] On the other hand, the condition checker 2455 is able to check the condition data within the scene example 2460.

[0464] The accompanying drawings illustrate scenario example 2460, which includes conditional data and action data for the gear state.

[0465] On the other hand, the condition checker 2455 can be controlled to check the condition data for the gear state in the scene example 2460, and perform the action corresponding to the action data based on the condition data.

[0466] For example, service agent 2350 can control the lighting device 2310 to operate for emergency lighting when the gear position is in "reverse" as in scenario example 2460. Thus, the lighting device 2310 can be operated efficiently according to the vehicle's state.

[0467] on the other hand, Figure 14c The internal structure of the service agent 2350 may differ from that shown in the attached diagram and may be located within the vehicle service coordinator 870.

[0468] For example, the service agent 2350 can also perform the functions of the vehicle message receiver 2410 and the scene processing unit 2420.

[0469] In addition, the service agent 2350 can also execute the scene manager 2540 between the vehicle message receiver 2410 and the scene processing unit 2420.

[0470] Figure 15a The accompanying drawing illustrates another example of the operation of a vehicle control device according to an embodiment of the present disclosure. In particular, Figure 15a for Figure 13b The accompanying diagram is referenced in the description of the service agent and virtual switch services.

[0471] Referring to the accompanying drawings, the controller 2330 within the control device 1200 of the vehicle control device 100 according to an embodiment of the present disclosure is capable of controlling the vehicle's lighting device 2310 based on an input signal from a hardware switch 2312 or a signal from a sensor SRm such as a camera or an illuminance sensor.

[0472] On the other hand, in the event of a failure of the hardware switch 2312 or a failure caused by a broken wire between the hardware switch 2312 and the controller 2330, the controller 2330 in the vehicle control device 100 can transmit the hardware device fault signal to the interface 2340 in the second signal processing device 170z in the control device 1200.

[0473] On the other hand, the second processor 175z in the second signal processing device 170z or the first processor 175 in the first signal processing device 170 can perform fault judgment of hardware switch 2312 or sensor SRm such as camera or illuminance sensor based on the received fault signal.

[0474] On the other hand, the second processor 175z in the second signal processing device 170z or the first processor 175 in the first signal processing device 170 can execute the service agent 2350 for performing vehicle services.

[0475] On the other hand, when the hardware switch 2312 or a sensor SRm such as a camera or illuminance sensor fails, the service agent 2350 used to perform vehicle services can, in addition to performing the services already performed, also perform a virtual switch service for lighting device control 2355.

[0476] On the other hand, the service agent 2350 for performing vehicle services is capable of executing the state manager 2357 that sends instruction data cmd to the workload coordinator 870.

[0477] On the other hand, when the hardware switch 2312 or a sensor SRm such as a camera or illuminance sensor fails, the service agent 2350 can perform a replacement service for the hardware switch 2312 or the sensor SRm such as a camera or illuminance sensor.

[0478] For example, the state manager 2357 within the service agent 2350 can send a request to the server 400 or similar server to generate an alternative service corresponding to a hardware failure.

[0479] Correspondingly, server 400 can receive alternative service generation requests corresponding to hardware failures and generate alternative service 2358 based on these requests.

[0480] At this point, server 400 can use artificial intelligence and other technologies to generate alternative services 2358.

[0481] Then, the server 400 can transmit data related to the generated alternative service to the second processor 175z in the second signal processing device 170z or the first processor 175 in the first signal processing device 170.

[0482] On the other hand, the second processor 175z in the second signal processing device 170z or the first processor 175 in the first signal processing device 170 can add alternative services 2514 to the service list 2510 in the vehicle.

[0483] The accompanying drawings illustrate a scenario where the second processor 175z in the second signal processing device 170z or the first processor 175 in the first signal processing device 170 adds replacement service 2514 to the vehicle service list 2510 in addition to the existing services 2512, 1216.

[0484] On the other hand, the second processor 175z in the second signal processing device 170z or the first processor 175 in the first signal processing device 170 can be controlled to execute the alternative service 2514 added to the vehicle service list 2510 when the hardware switch 2312 or the sensor SRm such as the camera or the illuminance sensor fails.

[0485] Specifically, the service agent 2350 can control the execution of alternative services 2514 added to the vehicle service list 2510 when a hardware switch 2312 or a sensor SRm such as a camera or illuminance sensor fails.

[0486] For example, the service agent 2350 can be controlled to display a screen 1370 including emergency lighting control items when the hardware switch 2312 or a sensor SRm such as a camera or illuminance sensor fails. Furthermore, it can be controlled to output an action-on signal, action-off signal, or action control signal to the lighting device 2310 for emergency lighting control when the emergency lighting control item is selected and activated. Thus, alternative services can be quickly performed when a hardware device connected to the controller 2330 fails.

[0487] On the other hand, the first processor 175 or the second processor 175z can be controlled to change the executed virtual switch service based on the type of failure of the hardware switch 2312, and display the virtual switch object corresponding to the changed virtual switch service on the display 180. Thus, a replacement service can be quickly executed when a hardware device connected to the controller 1230 fails.

[0488] For example, the first processor 175 or the second processor 175z can be controlled to display a virtual switch object corresponding to the virtual switch service for emergency lighting control on the display 180 in the event that the hardware switch 2312 fails as a failure of the lighting device switch.

[0489] As another example, the first processor 175 or the second processor 175z can be controlled to display a virtual switch object corresponding to the virtual switch service for emergency window control on the display 180 in the event that the hardware switch 2312 fails as a window switch failure.

[0490] On the other hand, the first processor 175 or the second processor 175z can be controlled to execute a virtual switch service or a substitute sensor service when the sensor SRm fails, and output the virtual switch object corresponding to the virtual switch service or the substitute sensor object corresponding to the substitute sensor service to the electrically connected display 180. Thus, a substitute service can be quickly executed when the hardware device connected to the controller 1230 fails.

[0491] For example, the first processor 175 or the second processor 175z can be controlled to output a replacement sensor object corresponding to a replacement sensor service using other hardware, namely a lidar sensor, to the electrically connected display 180 in the event of a failure of the ultrasonic sensor in the sensor SRm. Thus, a replacement service can be quickly executed when the hardware device connected to the controller 1230 fails.

[0492] As another example, the first processor 175 or the second processor 175z can be controlled to output a replacement sensor object corresponding to a replacement sensor service using other hardware, namely an ultrasonic sensor, to the electrically connected display 180 in the event of a failure of the lidar sensor in the sensor SRm. Thus, a replacement service can be quickly executed when the hardware device connected to the controller 1230 fails.

[0493] On the other hand, the first processor 175 or the second processor 175z can control the controller 1230 to output an action start signal, an action stop signal, or an action control signal to the actuator AT when a virtual switch object or a substitute sensor object is selected. This allows for efficient execution of alternative services when a hardware device connected to the controller 1230 malfunctions.

[0494] For example, the first processor 175 or the second processor 175z can be controlled such that, when the lidar sensor in the sensor SRm malfunctions and an alternative sensor object is selected in a state displaying an alternative sensor object corresponding to the alternative sensor service using the ultrasonic sensor, the controller 1230 outputs an operation start signal, an operation stop signal, or an operation control signal to the actuator AT used to drive the ultrasonic sensor. Thus, the alternative service can be performed efficiently when the hardware device connected to the controller 1230 malfunctions.

[0495] On the other hand, the first processor 175 or the second processor 175z can be controlled to perform a replacement actuator service when the actuator AT fails, and output the replacement actuator AT object corresponding to the replacement actuator service to the electrically connected display 180. Thus, a replacement service can be quickly performed when the hardware device connected to the controller 1230 fails.

[0496] On the other hand, the first processor 175 or the second processor 175z can be controlled such that, when a replacement actuator AT is selected, the controller 1230 outputs an action start signal, an action stop signal, or an action control signal to the other actuator AT. Therefore, replacement services can be performed efficiently when a hardware device connected to the controller 1230 fails.

[0497] On the other hand, the first processor 175 or the second processor 175z can be controlled to execute a service agent 2350 for performing vehicle services. When the actuator AT fails, the service agent 2350, in addition to performing the services to be performed, also performs alternative actuator services. Thus, alternative services can be quickly executed when the hardware device connected to the controller 1230 fails.

[0498] On the other hand, the first processor 175 or the second processor 175z can be controlled to receive data related to the virtual switch service or the alternative sensor service from an external server 400 or electronic device when the sensor SRm fails, and execute the virtual switch service or the alternative sensor service if the condition data in the execution-related data of the virtual switch service or the alternative sensor service is met. Therefore, an alternative service can be quickly executed when the hardware device connected to the controller 1230 fails.

[0499] Figure 15b In order to be in Figure 15a The accompanying diagram refers to the description of the alternative service executed in the service agent.

[0500] Referring to the attached diagram, Service Agent 2350 can perform alternative services to replace the sensor SRm when a sensor SRm, such as a camera or illuminance sensor, fails.

[0501] For example, service agent 2350 can control the lighting device 2310 to be turned on at night according to the standard, but turn off the coordination target if the hardware switch 2312 malfunctions or if the sensor SRm, such as a camera or illuminance sensor, is operating normally and is currently on.

[0502] As another example, service agent 2350 can control the lighting device 2310 to turn on according to specifications based on the action of hardware switch 2312, but if the current state is off due to a malfunction of hardware switch 2312, a coordination target is set to turn it on. Thus, alternative services can be quickly executed when a hardware device connected to controller 2330 fails.

[0503] Figure 16a This example illustrates an action that provides an alternative service.

[0504] Referring to the attached diagram, server 400 can transmit data 2610 related to alternative services created by users to the first processor 175 or the second processor 175z within the vehicle.

[0505] The data 2610 related to the alternative service at this time can be data based on an application programming interface (API). Specifically, the data 2610 related to the alternative service can be data based on an Open API.

[0506] On the other hand, the first processor 175 or the second processor 175z can receive data 2610 related to the alternative service and perform the alternative service 2612 based on it.

[0507] On the other hand, the first processor 175 or the second processor 175z can control the execution of the alternative service 2612, causing the controller 2615 to output an operation on signal, an operation off signal, or an operation control signal to the lighting device 2310. Thus, the alternative service can be executed efficiently when the hardware device connected to the controller 1230 fails.

[0508] Figure 16b This is another example of an action that provides an alternative service.

[0509] Referring to the attached diagram, server 400 can transmit data 2610 related to alternative services created by users to the first processor 175 or the second processor 175z within the vehicle.

[0510] On the other hand, the first processor 175 or the second processor 175z can receive data 2610 related to the alternative service and execute the alternative service 2612 based on it.

[0511] On the other hand, the first processor 175 or the second processor 175z can execute the service agent 2350 for performing vehicle services.

[0512] On the other hand, the first processor 175 or the second processor 175z can execute a service agent 2350 for performing vehicle services. The service agent 2350 is controlled to execute alternative services in addition to the services to be executed when a hardware device fails, and to block a part of the application programming interface (API) within the alternative services according to the security level, and only execute another part of the application programming interface.

[0513] For example, service agent 2350 can be controlled to execute alternative service 2612 in addition to the service being executed when a hardware device fails, and to block at least a portion of the alternative service and execute only the other portion according to the security level. Thus, alternative services can be reliably executed when a hardware device connected to controller 1230 fails.

[0514] Figures 17a to 17c for Figure 16b The accompanying diagram is referenced in the explanation of API blocking.

[0515] first, Figure 17a The attached diagram is an example of the internal structure of a service agent's pipeline.

[0516] Referring to the attached diagram, the pipeline 2710 of service agent 2350 can execute or include GIT 2712, Jenkins 2714, Test 2716, and Blocking APIProxy Service 2718.

[0517] On the other hand, blocking API proxy service 2718 can be configured according to the safety level policy.

[0518] Figure 17b This is an example of the internal structure of the Open API package.

[0519] Referring to the attached diagram, the Open API package 2720 can transmit data from a server 400 to a vehicle control device 100 within the vehicle.

[0520] In particular, the Open API package 2720 can transmit data to the first processor 175 or the second processor 175z within the vehicle control unit 100.

[0521] On the other hand, the Open API package 2720 may include services 2722, installers 2724, yaml files 2725, controllers 2726, and blocking API services 2727.

[0522] For example, the first processor 175 or the second processor 175z can be controlled to block at least a portion of the alternative service based on the Blocking API Service 2727, according to the security level, and only execute the other portion.

[0523] Figure 17c The attached diagram is for reference in the explanation of blocking actions for services handled by the service agent.

[0524] Referring to the attached diagram, service agent 2350 controls the execution of service 2732.

[0525] On the other hand, service agent 2350 can control the activation or deactivation of service 2732 by controlling the blocking API service 2734.

[0526] For example, when service agent 2350 outputs an activation signal to blocking API service 2734, blocking API service 2734 can be controlled to activate service 2732.

[0527] As another example, when service agent 2350 outputs a deactivation signal to blocking API service 2734, blocking API service 2734 can be controlled to deactivate service 2732.

[0528] on the other hand, Figure 17c Service 2732 can be the virtual switch service or an alternative service mentioned above.

[0529] Figure 18a Here is an example of a flowchart illustrating a service-based blocking deactivation action.

[0530] Referring to the accompanying drawings, the first processor 175 or the second processor 175z receives a security policy related to the service and applies the policy (S2722).

[0531] Next, the first processor 175 or the second processor 175z can determine whether it is a scenario necessary for the virtual switch service or alternative service within the service agent 2350, and perform monitoring (S2724).

[0532] Next, the first processor 175 or the second processor 175z can determine whether a hardware device failure has occurred, and if so, execute a virtual switch service or an alternative service.

[0533] At this time, the first processor 175 or the second processor 175z can control the execution of the virtual switch service or the alternative service to determine whether the alternative service is blocked based on the security level (S2720). If the condition is met, the blocking API service 2734 is activated (S2722), and the process ends (S2724). As a result, the alternative service 2732 can be deactivated.

[0534] On the other hand, the first processor 175 or the second processor 175z can be controlled to activate the blocking API service 2734 (S2726) in S2720 without needing to block the alternative service. Thus, the alternative service 2732 can be activated.

[0535] Figure 18bHere is an example of a flowchart illustrating the execution of an alternative service for a lighting device.

[0536] Referring to the accompanying drawings, when a hardware device malfunctions, the first processor 175 or the second processor 175z publishes data related to the virtual switch service or alternative service in order to perform the virtual switch service or alternative service (S2810).

[0537] Furthermore, the first processor 175 or the second processor 175z can apply the specifications in the data related to the virtual switch service or alternative service within the service agent 2350 (S2812).

[0538] For example, the specification data may include the activation of vehicle lighting devices 2310 when entering a tunnel where the illuminance is below 100 lux.

[0539] Furthermore, the first processor 175 or the second processor 175z can perform virtual switch services or alternative services.

[0540] Next, during the execution of the virtual switch service or alternative service, if there is a shutdown input for the lighting device 2310, the controller 1230 can be controlled to turn off the lighting device 2310.

[0541] On the other hand, the first processor 175 or the second processor 175z determines whether the specifications in the data related to the virtual switch service or alternative service are met when the lighting device 2310 is turned off (S2820).

[0542] For example, the first processor 175 or the second processor 175z determines whether the conditions for the service in the data related to the virtual switch service or alternative service are met when the lighting device 2310 is turned off.

[0543] On the other hand, when the lighting device 2310 is off, the first processor 175 or the second processor 175z can activate the coordination function within the service agent 2350 (S2825) if the specifications in the data related to the virtual switch service or alternative service are met.

[0544] Furthermore, the first processor 175 or the second processor 175z can control the controller 1230 to turn on the lighting device 2310. Therefore, even if the hardware malfunctions, it can reliably provide alternative services in response to vehicle operating conditions.

[0545] Figure 19a The attached diagram illustrates an example of performing a replacement service when a hardware device malfunctions.

[0546] Referring to the attached diagram, when the hardware device OCRm inside the vehicle malfunctions, the controller 2330, which is electrically connected to the hardware device OCRm, can transmit a fault signal or fault information to the service agent 2350.

[0547] On the other hand, the service agent 2350 can be executed in the first processor 175 or the second processor 175z.

[0548] On the other hand, the service agent 2350 can transmit service requests to address fault situations based on fault information.

[0549] For example, service agent 2350 can send alternative service requests or new service requests to service generator 2910 within server 400.

[0550] The service generator 2910 within server 400 can generate alternative or new services based on alternative or new service requests, and transmit data related to the alternative or new services to the first processor 175 or the second processor 175z.

[0551] Specifically, the service generator 2910 within server 400 can transmit data related to alternative or new services to service agent 2350.

[0552] On the other hand, the first processor 175 or the second processor 175z can execute the alternative service or the new service based on data related to the alternative service or the new service.

[0553] Specifically, Service Agent 2350 is able to execute alternative or new services based on data related to the alternative or new service.

[0554] Furthermore, the service agent 2350 can be controlled to output an action start signal, action stop signal, or action control signal to the alternative hardware device according to the execution of the alternative service or new service corresponding to the hardware device OCRm. This allows for the rapid execution of alternative services when a hardware device malfunctions.

[0555] Figure 19b The attached diagram illustrates an example of performing a replacement service when a hardware switch malfunctions.

[0556] Referring to the attached diagram, Service Agent 2350 receives a fault message MSP when the hardware switch SRP fails.

[0557] Specifically, the gateway 2359 within the service agent 2350 is able to receive fault messages (MSP).

[0558] On the other hand, the service agent 2350 can request the generation of an alternative service from the service generator 2910 within the server 400 based on the receipt of the fault message MSP.

[0559] Thus, the service generator 2910 within the server 400 can generate alternative services for the hardware switch and transmit data related to the alternative services to the first processor 175 or the second processor 175z within the vehicle control unit 100.

[0560] On the other hand, the first processor 175 or the second processor 175z can receive data related to the alternative service from the server 400 and execute the alternative service 2911.

[0561] Alternatively, the first processor 175 or the second processor 175z can be controlled to receive data related to the alternative service from the server 400 and generate a virtual switch object 2914 based on this data for display on the monitor 180.

[0562] For example, the state manager 2357 within the service agent 2350 can send an execution request to the alternative service 2911 when the alternative service 2911 is being executed.

[0563] On the other hand, the first processor 175 or the second processor 175z can control the controller 1230 to output an operation on signal, an operation off signal, or an operation control signal to the lighting device 2310 based on the execution request of the alternative service 2911. Thus, even if the hardware switch SRP fails, the lighting device 2310 can operate stably.

[0564] As another example, when the virtual switch object 2914 displayed on the display 180 is selected, the first processor 175 or the second processor 175z can control the controller 1230 to output an action-on signal, an action-off signal, or an action control signal to the lighting device 2310. Therefore, even if the hardware switch SRP fails, the lighting device 2310 can operate stably.

[0565] Figure 20a Examples of fault diagnosis for various sensors are shown.

[0566] Referring to the accompanying drawings, the sensor may include a camera 195, radar or lidar 196.

[0567] The first processor 175 within the first signal processing device 170 may include: a judgment unit 310, which receives sensor data from a camera 195, a radar or lidar 196, and judges a sensor malfunction based on the data; and a control unit 320, which performs control based on the judgment result.

[0568] On the other hand, the first processor 175 within the first signal processing device 170 can be controlled to perform alternative services when a sensor malfunction is determined based on sensor data from the camera 195, radar, or lidar 196.

[0569] For example, the first processor 175 within the first signal processing device 170 can be controlled to execute alternative or new services based on sensor data from the radar or lidar 196 when it is determined that the camera 195 has malfunctioned.

[0570] As another example, the first processor 175 within the first signal processing device 170 can be controlled to execute alternative or new services based on sensor data from the camera 195 when it is determined that the radar or lidar 196 has malfunctioned.

[0571] Figure 20b This example demonstrates how to execute new services based on LiDAR or radar when a camera malfunctions.

[0572] Referring to the accompanying drawings, the second processor 175z in the second signal processing device 170z or the first processor 175 in the first signal processing device 170 can perform fault judgment 3032 based on data from the camera 195.

[0573] On the other hand, the second processor 175z in the second signal processing device 170z or the first processor 175 in the first signal processing device 170 can transmit fault information to the service agent 2350 when a fault is determined to have occurred.

[0574] On the other hand, service agent 2350 can request the generation of LiDAR services from server 400, etc.

[0575] Furthermore, the second processor 175z in the second signal processing device 170z or the first processor 175 in the first signal processing device 170 can receive data related to the lidar service from the server 400.

[0576] On the other hand, the service agent 2350 can search for the existence of radar services by searching its internal database PDB.

[0577] On the other hand, the service agent 2350 can be controlled to perform the LiDAR service 3034 in place of the camera 195 after receiving data related to the LiDAR service. This enables the LiDAR 196 to operate.

[0578] On the other hand, the service agent 2350 can control the execution of radar service 3025 in order to replace camera 195 when radar service 3025 exists in database PDB. This enables radar 196b to operate.

[0579] On the other hand, the second processor 175z in the second signal processing device 170z or the first processor 175 in the first signal processing device 170 can perform a determination 3010 on whether the alternative service is successful based on data from the lidar 196 or the radar 196b.

[0580] Then, the second processor 175z in the second signal processing device 170z or the first processor 175 in the first signal processing device 170 can be controlled to continue the control 3020 of the alternative service based on the determination 3010 of whether the alternative service is successful.

[0581] Figure 20c The attached figure shows an example of performing a replacement service when the low beam device 2311 malfunctions.

[0582] Referring to the accompanying drawings, when the low beam device 2311 inside the vehicle malfunctions, the controller 2330, which is electrically connected to the low beam device 2311, can transmit a fault signal or fault information to the service agent 2350.

[0583] On the other hand, the service agent 2350 can be executed in the first processor 175 or the second processor 175z.

[0584] On the other hand, the service agent 2350 can transmit service requests to address fault situations based on fault information.

[0585] For example, service agent 2350 can send alternative service requests or new service requests to service generator 2910 within server 400.

[0586] The service generator 2910 within server 400 can generate alternative or new services based on alternative or new service requests, and transmit data related to the alternative or new services to the first processor 175 or the second processor 175z.

[0587] Specifically, the service generator 2910 within server 400 can transmit data related to alternative or new services to service agent 2350.

[0588] On the other hand, the first processor 175 or the second processor 175z can execute the alternative service or the new service based on data related to the alternative service or the new service.

[0589] Specifically, Service Agent 2350 is able to execute alternative or new services based on data related to the alternative or new service.

[0590] The alternative or new service at this time could be a service for driving the high beam device 2312 with low beam instead of the low beam device 2311.

[0591] Furthermore, the service agent 2350 can control the controller 2330 to output an operation activation signal, operation deactivation signal, or operation control signal to the high beam device 2312 in accordance with the execution of a replacement service or a new service corresponding to the low beam device 2311. Thus, a replacement service can be quickly executed when the low beam device 2311 malfunctions.

[0592] Figure 20d Examples Figure 20c The various actions of the high beam device 2312.

[0593] Referring to the attached diagram, in order to cope with Figure 20c The low beam device 2311 malfunctions, such as Figure 20d As in (a), the controller 2330 can be controlled to turn on only a portion of the plurality of light-emitting diodes in the high beam device 2312.

[0594] As another example, in order to deal with Figure 20c The low beam device 2311 malfunctions, such as Figure 20d As in (b), the controller 2330 can control the light emission direction of the plurality of light-emitting diodes in the high beam device 2312 to be downward.

[0595] As yet another example, in order to deal with Figure 20c The low beam device 2311 malfunctions, such as Figure 20d As in (c), the controller 2330 can be controlled to make only a portion of the plurality of light-emitting diodes in the high beam device 2312 emit light and make the light-emitting direction of a portion of the light-emitting diodes downward.

[0596] Therefore, the high beam device 2312 can replace the function of the low beam device 2311 in various ways.

[0597] Figure 21a and Figure 21b An example is given of a service being performed based on speech recognition.

[0598] Figure 21a An example of using speech recognition to perform a service is shown.

[0599] Referring to the accompanying drawings, the first processor 175 or the second processor 175z can receive the voice 3122 of the passengers in the vehicle to perform voice recognition.

[0600] In particular, the first processor 175 or the second processor 175z can utilize the artificial intelligence processing unit 3124 for internal speech recognition to process various voice-based service lists 3100.

[0601] At this time, the artificial intelligence processing unit 3124 is able to correspond to Figure 6The neural processor 179.

[0602] On the other hand, the list of various voice-based services 3100 may include items such as red light switch, headlight switch meter, vehicle speed status, vehicle gear status, and window opening service.

[0603] On the other hand, the list of various voice-based services 3100 can include topics and tags according to each service.

[0604] On the other hand, the first processor 175 or the second processor 175z can select a service execution file 3125 to perform the service corresponding to the speech recognition after performing speech recognition based on speech 3122.

[0605] At this point, the service executable file 3125 can be a YAML file.

[0606] For example, the service execution file 3125 may include condition data, action data, operation data, service data, etc.

[0607] On the other hand, the first processor 175 or the second processor 175z can execute the service agent 2530 in order to perform the service corresponding to speech recognition.

[0608] Service agent 2530 can include or execute scenario checker 2353 for performing scenario checks on service execution file 3125, scenario manager 2358 for checking condition data, state manager 2357 for state management, etc.

[0609] On the other hand, the state manager 2357 is able to manage the state of services, etc., that are performed within the vehicle.

[0610] For example, the status manager 2357 can perform status management of services such as headlight switch service 3151, window opening service 3152, door lock service 3154, and notification service 3155 from the vehicle service list 3150.

[0611] For example, if voice 3122 is a voice about turning off the headlights, service agent 2530 can control the execution of headlight switch service 3151 to turn off the headlights.

[0612] As another example, if voice 3122 is about opening the window, service agent 2530 can control the window to be opened in order to perform window opening service 3152. This allows for the quick and accurate execution of the service requested by the vehicle passengers.

[0613] Figure 21b Another example of using speech recognition to perform services is shown.

[0614] Referring to the accompanying drawings, the first processor 175 or the second processor 175z can receive the voice 3122 of the passengers in the vehicle and perform voice recognition using the artificial intelligence processing unit 3124 and the service list 310.

[0615] On the other hand, the first processor 175 or the second processor 175z can select a service execution file (FMM) to execute the service corresponding to the speech recognition after performing speech recognition based on speech 3122.

[0616] At this point, the service executable file 3125 can be a YAML file.

[0617] On the other hand, the first processor 175 or the second processor 175z can execute the service agent 2530 in order to perform the service corresponding to speech recognition.

[0618] Service agent 2530 is capable of executing scenario checker 2353 for performing scenario checks on service execution file 3125.

[0619] On the other hand, the service agent 2530 can check whether there is a service corresponding to voice recognition in the vehicle service list 3150. If there is no service in the vehicle service list 3150, it sends a service generation request to the server 400.

[0620] The service generator 3177 within server 400 can utilize artificial intelligence and other technologies to transmit data related to new services.

[0621] On the other hand, the first processor 175 or the second processor 175z can receive new service-related data to update the vehicle service list 3150.

[0622] For example, if the vehicle service list 3150 only has headlight switch service 3151, door lock service 3154, notification service 3155, etc., but does not have window opening service 3152 as a service corresponding to voice recognition, the service agent 2530 can send a request to the server 400 to generate window opening service 3152.

[0623] On the other hand, the first processor 175 or the second processor 175z can be controlled to receive data related to the window opening service 3152 from the server 400, so that the window opening service 3152 is included in the vehicle service list 3150.

[0624] Then, the service agent 2530 can control the window opening service 3152 to perform the service corresponding to voice recognition. As a result, the service expected by the vehicle passengers can be executed accurately.

[0625] Figure 22a This is an example of an internal block diagram of a vehicle control device according to another embodiment of the present disclosure.

[0626] Referring to the accompanying drawings, the vehicle control device 100c according to another embodiment of this disclosure, although similar to... Figure 13a The vehicle control device 100b is similar, but the controller 1200 can control the seat motors or lights HB1 to HBn of the non-window WD1 to WDn.

[0627] On the other hand, the controller 1200 can receive data from cameras or GPS HC1 to HCn, rather than from in-vehicle monitoring devices DS1 to DSn.

[0628] Alternatively, the second controller 1300 can control the camera or GPS HC1~HCn.

[0629] On the other hand, the first processor 175 in the vehicle control device 100c according to another embodiment of the present disclosure and Figure 13a Unlike other systems, it can execute the first service agent 800a on operating system 1205.

[0630] On the other hand, according to another embodiment of the present disclosure, the second processor 175z in the vehicle control device 100c and Figure 13a Unlike other systems, it can execute a second service agent 800z1 on the operating system 1205z.

[0631] On the other hand, the third processor 175z2 in the vehicle control device 100c according to another embodiment of this disclosure and Figure 13a Unlike the 1205z2 operating system, it can execute a third-party service agent 800z2.

[0632] On the other hand, the first service agent 800a, the second service agent 800z1, and the third service agent 800z2 can correspond to Figure 9 or Figure 10 Service agent 800.

[0633] Figures 22b to 22d for Figure 22a The diagram referenced in the description.

[0634] Figure 22b It could be an image showing the first pattern of light emitted from the lamp. Figure 22c It can be an image showing a second pattern of light output from a lamp.

[0635] according to Figure 22aThe vehicle control device 100c, the first processor 175 or the second processor 175z or the third processor 175z2, can set the vehicle's beam pattern based on data from the camera or GPS HC1 to HCn, based on images including the road signs ahead or geographical information from the GPS.

[0636] On the other hand, the first processor 175, the second processor 175z, or the third processor 175z2 can receive execution-related data for vehicle services for vehicle light patterns from an external server 400 or an external electronic device 600, based on geographical information from a road sign ahead or GPS, or generate execution-related data for vehicle services for vehicle light patterns on its own.

[0637] Specifically, the first service agent 800a, the second service agent 800z1, or the third service agent 800z2 can control the execution of relevant data for receiving vehicle services for vehicle light patterns and execute the relevant vehicle services.

[0638] For example, based on images including road signs ahead or location information from GPS, in the case where the vehicle is traveling in the UK, in order to... Figure 22b With such a first pattern of light output, the first processor 175 or the second processor 175z can control the controller 1200. Thus, the controller 1200 can control at least one of the lamps HB1 to HBn.

[0639] As another example, based on images including road signs ahead or location information from GPS, in the case where the vehicle is traveling in France in a different direction from the UK, in order to... Figure 22c With such a second pattern of light output, the first processor 175 or the second processor 175z can control the controller 1200. Thus, the controller 1200 can control at least one of the lamps HB1 to HBn.

[0640] In this way, to provide light pattern change services, multiple sensors or multiple actuators can be used, ultimately enabling the efficient provision of vehicle services that correspond to the driver's intentions.

[0641] Figure 22d Various examples of services are shown.

[0642] Referring to the attached diagram, the services may include seat control services, seat motor services, heating services, blower motor services, window control services, window motor services, anti-pinching services, vehicle interior monitoring (DIMS) services, interior monitoring camera services, or object detection services, etc.

[0643] On the other hand, the first processor 175 or the second processor 175z can perform vehicle services that combine multiple services.

[0644] For example, the first processor 175, the second processor 175z, or the third processor 175z2 can perform a first vehicle service including window control service, window motor service, and anti-pinching service.

[0645] The first vehicle service at this time can be downloaded from an external server 400 or an external electronic device 600, or generated in the first processor 175, the second processor 175z, or the third processor 175z2 inside the vehicle.

[0646] On the other hand, the first service agent 800a, the second service agent 800z1, or the third service agent 800z2 can control the receipt of data related to the execution of the first vehicle service, which includes composite services, and execute the first vehicle service based thereon.

[0647] As another example, the first processor 175, the second processor 175z, or the third processor 175z2 can execute second vehicle services including in-vehicle monitoring (DIMS) services, in-vehicle monitoring camera services, and object detection services.

[0648] On the other hand, the first service agent 800a, the second service agent 800z1, or the third service agent 800z2 can control the receipt of data related to the execution of the second vehicle service, including the composite service, and execute the second vehicle service based thereon.

[0649] Figure 23 This is an example of an internal block diagram of a vehicle control device according to another embodiment of the present disclosure.

[0650] Referring to the accompanying drawings, a vehicle control device 100d according to another embodiment of the present disclosure may include: a first signal processing device 170 as a central signal processing device, a second signal processing device 170z1 and a third signal processing device 170z2 as regional signal processing devices, and a control device 1430.

[0651] The first signal processing unit 170 is capable of executing in-vehicle monitoring (DIMS) services and seat control services on a first operating system, and executing seat control HMI services on a second operating system.

[0652] The second signal processing device 170z1 can perform TSN communication with the first signal processing device 170 and be electrically connected to the control device 1430, thereby controlling the control device 1430.

[0653] On the other hand, the second signal processing device 170z1 is capable of performing anti-pinch service and controlling the control device 1430 based on the anti-pinch service.

[0654] The control device 1430 is capable of performing motor control 1435 based on the anti-pinch service.

[0655] For example, the control device 1430 can output a PWM signal to the seat motor 1451, a GPIO signal to the window switch 1453, and a PWM signal to the window motor 1455.

[0656] On the other hand, the control device 1430 can receive the ADC signal from the window motor 1455 and output the PWM signal to the window motor 1455 based on the ADC signal.

[0657] Therefore, the control device 1430 can be used to efficiently perform anti-pinch services corresponding to the combined control of seats, windows, etc.

[0658] The third signal processing device 170z2 is capable of performing TSN communication with the second signal processing device 170z1 and controlling the seat control display 180n.

[0659] At this time, the third signal processing device 170z2 can be controlled to display predetermined information or images on the seat control display 180n based on Ethernet communication. Alternatively, the seat control display 180n can be a network display.

[0660] Figures 24a to 25b for Figure 23 The diagram referenced in the description.

[0661] Figure 24a An example of an anti-pinch device in a vehicle control device related to this disclosure is illustrated.

[0662] Referring to the accompanying drawings, the first signal processing unit 170x1 in the vehicle control device related to this disclosure is capable of performing CAN communication with the second signal processing unit 170x2, and the second signal processing unit 170x2 is capable of performing CAN communication with the control unit 1610 and the drive unit 1620.

[0663] On the other hand, the control device 1610 can control the window switch 1613, seat switch 1614, seat switch 1616, and seat switch 1617 based on the switch logic 1612.

[0664] On the other hand, the drive unit 1620 can perform multiple vehicle services 1621, 1622, and 1623 within the anti-pinch service, and control multiple motors 1631 to 1634 based on the motor control 1625.

[0665] On the other hand, the drive unit 1620 can perform current detection 1627 based on the ADC signals from the plurality of motors 1631 to 1634 as detection signals, and control the plurality of motors 1631 to 1634 based on the current detection 1627.

[0666] According to the vehicle control device related to this disclosure, since multiple vehicle services 1621, 1622, 1623 are performed within the drive unit 1620, there is a disadvantage that it is difficult to update or add new functions.

[0667] Figure 24b An example of an anti-pinch device in a vehicle control device according to an embodiment of the present disclosure is illustrated.

[0668] Referring to the accompanying drawings, according to an embodiment of the present disclosure, the first signal processing device 170 within the vehicle control device 100m is capable of performing TSN communication with the second signal processing device 170z, and the second signal processing device 170z is capable of performing TSN communication with the control device 1750.

[0669] The first signal processing device 170 is capable of performing multiple vehicle services 1731, 1732, and 1733 within the anti-pinch service.

[0670] At this time, the first signal processing device 170 is able to update or newly receive at least one of the plurality of vehicle services 1731, 1732, 1733.

[0671] The second signal processing unit 170z is capable of performing multiple vehicle services 1741 to 1746 within the anti-pinch service.

[0672] At this time, the second signal processing device 170z can control the system to not update a portion of the vehicle services 1745-1746 among the plurality of vehicle services 1741-1746, and only update another portion of the vehicle services 1741-1743.

[0673] and Figure 24a Unlike other devices, the control unit 1750 can integrate the functions of the drive unit.

[0674] On the other hand, the control device 1750 can control the window switch 1753, seat switch 1754, seat switch 1756, and seat switch 1757 based on the switch logic 1752.

[0675] On the other hand, the control device 1750 can control a plurality of motors 1764 to 1767 based on the motor control 1762.

[0676] On the other hand, the control device 1750 can perform current detection 1763 based on the ADC signals from the plurality of motors 1764 to 1767 as detection signals, and control the plurality of motors 1764 to 1767 based on the current detection 1763.

[0677] Based on the vehicle control device 100m according to an embodiment of the present disclosure, since the anti-pinch service is performed in the first signal processing device 170 or the second signal processing device 170z of the non-control device 1750, updates can be easily performed.

[0678] In particular, updates are performed using TSN communication, which is not based on CAN communication, thus enabling rapid updates.

[0679] On the other hand, with Figure 24a Unlike other systems, the integrated control device 1750 enables combined services such as motor control and switch control.

[0680] Figure 24c Another example of anti-pinch protection in a vehicle control device according to an embodiment of the present disclosure is illustrated.

[0681] Referring to the accompanying drawings, the operation of the vehicle control device 100m according to an embodiment of the present disclosure is similar to... Figure 24b Similarly, but there are differences in how the first signal processing device 170 performs the first service agent 800a and the second signal processing device 170z performs the second service agent 800b.

[0682] The first service agent 800a and the second service agent 800b can correspond to Figure 9 or Figure 10 Service agent 800.

[0683] In particular, the first service agent 800a or the second service agent 800b can update the execution-related data or YAML file data of the vehicle service from the package service 1792 within the server 1790.

[0684] Furthermore, the first service agent 800a or the second service agent 800b can control the execution of related data or YAML file data for updating vehicle services to perform composite functions using the control device 1750.

[0685] Figure 24d Another example of anti-pinch protection in a vehicle control device according to an embodiment of the present disclosure is illustrated.

[0686] Referring to the accompanying drawings, the first signal processing device 170 in the vehicle control device 100p according to an embodiment of the present disclosure is capable of executing the vehicle interior monitoring service 1805 and transmitting the execution information of the vehicle interior monitoring service 1805 to the second signal processing device 170z.

[0687] Next, the second signal processing device 170z can execute the anti-pinch service 1807 based on the execution information of the vehicle interior monitoring service 1805, and control the control device 1800 based on the execution-related data of the anti-pinch service 1807.

[0688] Next, the control device 1800 can execute motor control 1810 based on the execution-related data of the anti-pinch service 1807, thereby controlling the motor 1820.

[0689] On the other hand, the control device 1800 can receive current detection information from the motor 1820 under the control of the motor 1820 and transmit the current detection information to the second signal processing device 170z.

[0690] On the other hand, the second signal processing device 170z can be controlled to determine whether the condition data in the execution related data of the anti-pinch service 1807 is met based on the received current detection information, and if the condition data is met, the anti-pinch service 1807 continues to be executed.

[0691] On the other hand, the second signal processing device 170z can update the condition data or action data in the execution related data of the anti-pinch service 1807, and can control the control device 1800 in accordance with the updated new functions.

[0692] On the other hand, the control device 1800 can control the window motor 1820 for any one of the following: window closing speed, opening adjustment, closing intensity, and automatic locking, based on the combination of the vehicle interior monitoring service 1805 in the first signal processing device 170 and the anti-pinch service 1807 in the second signal processing device 170z.

[0693] This enables the efficient execution of new or updated services based on a service-oriented architecture.

[0694] Figure 24e An example of providing vehicle services when adding new equipment is shown.

[0695] Referring to the accompanying drawings, a vehicle control device 100a according to an embodiment of the present disclosure includes: a first signal processing device 170; a second signal processing device 170z electrically connected to the first signal processing device 170; and a control device 1200 electrically connected to the second signal processing device 170z and including a controller 1230 for controlling a plurality of actuators AT1 to ATn.

[0696] On the other hand, when a first device 195 is added to the second signal processing device 170z, the second signal processing device 170z can transmit information about the added first device 195 to the first signal processing device 170.

[0697] On the other hand, the first processor 175 within the first signal processing device 170 is capable of executing SOA services or microservices 1215 on the operating system 1205.

[0698] On the other hand, the first processor 175 within the first signal processing device 170 is able to execute a first vehicle service 1211 and a second vehicle service 1212 based on control logic on the operating system 1205.

[0699] On the other hand, the first processor 175 within the first signal processing device 170 is able to receive execution-related data of vehicle services associated with the first device 195 from an external server 400 or the like, based on information for the additional first device 195.

[0700] Furthermore, the first processor 175 within the first signal processing device 170 is capable of performing additional services 1216 and 1217 with respect to the additional first device 195.

[0701] The additional services 1216 and 1217 at this time can be DIMS services related to the first device 195 corresponding to the camera.

[0702] On the other hand, the second processor 175z within the second signal processing device 170z can, as Figure 12a Then perform multiple vehicle services 1221-1224.

[0703] According to an embodiment of the present disclosure, the control device 1200 may include a controller 1230 and a memory 1234, and control at least one of a plurality of actuators AT1 to ATn based on additional services 1216 and 1217 in the first signal processing device 170 and based on DIMS.

[0704] Ultimately, the first processor 175 can be controlled to receive data from the server 400 for performing services corresponding to the first device 195 when the first device 195 is newly connected to the second signal processing device 170z or the control device 1200, and then perform the relevant services. This enables the efficient execution of new or updated services corresponding to the first device 195.

[0705] Figure 25a An example of the operation of a vehicle control device related to this disclosure is illustrated.

[0706] Referring to the accompanying drawings, the vehicle control device 100x related to this disclosure may include: a first signal processing device 2110x that acts as a gateway, a second signal processing device 2120x that acts for a display, and a communication device 2130 that exchanges data with a server 2100.

[0707] The first signal processing device 2110x is capable of executing a connection application 2112x, which includes a connection manager 2114x.

[0708] On the other hand, the second signal processing device 2120x can execute the connection application 2122x, including the connection manager 2112x, independently of the first signal processing device 2110x.

[0709] Each signal processing device 2110x and 2120x executes a separate application program 2112x and 2122x, respectively. Each application program 2112x and 2122x exchanges data with the server 2100 via the communication service 2132 in the communication device 2130.

[0710] Figure 25a The structure of the vehicle control device 100x related to this disclosure can be named a monolithic architecture. Such an architecture has disadvantages such as inefficient data transmission and difficulty in updating.

[0711] Figure 25b An example of the operation of a vehicle control device according to an embodiment of the present disclosure is illustrated.

[0712] According to one embodiment of the present disclosure, a vehicle control device 100 may include: a first signal processing device 2110 that functions as a gateway, a second signal processing device 2120 that functions for a display, and a communication device 2130 that exchanges data with a server 2100.

[0713] The first signal processing device 2110 is capable of executing the connection manager 2114 and the connection application 2112 separately.

[0714] On the other hand, the second signal processing device 2120 is able to execute the connection application 2122 without executing the connection manager.

[0715] At this time, the connection application 2122 in the second signal processing device 2120 can connect to the communication device 2130 via the connection manager 2114 in the first signal processing device 2110.

[0716] Ultimately, each signal processing device 2110 and 2120 executes its own application program 2112 and 2122, respectively, shares the connection manager 2114 within the first signal processing device 2110, and exchanges data with the server 2100 via the communication service 2132 within the communication device 2130.

[0717] Figure 25b The structure of a vehicle control device 100 according to an embodiment of the present disclosure can be named a service-oriented architecture.

[0718] This structure offers advantages such as efficient data transfer and, in particular, efficient updates.

[0719] The preferred embodiments of this disclosure have been illustrated and described above. However, this disclosure is not limited to the specific embodiments described above. Without departing from the spirit of this disclosure as claimed in the claims, those skilled in the art to which this invention pertains can of course make various modifications. Such modifications should not be understood separately from the technical concept or prospect of this disclosure.

Claims

1. A vehicle control device, wherein, have: A first signal processing device, comprising a first processor and a first memory; The second signal processing device is electrically connected to the first signal processing device and includes a second processor and a second memory. as well as A control device is electrically connected to the second signal processing device and receives signals from hardware switches or sensors or controls at least one actuator. The first processor or the second processor controls the execution of a virtual switch service when the hardware switch fails, and outputs the virtual switch object corresponding to the virtual switch service to the electrically connected display. The first processor or the second processor controls the controller within the control device to output an action start signal, an action stop signal, or an action control signal to the actuator when the virtual switch object is selected.

2. The vehicle control device according to claim 1, wherein, The first processor or the second processor executes a service agent for performing vehicle services; The service proxy control is to execute the virtual switch service in addition to the services already executed when the hardware switch fails. The virtual switch service control is to display the virtual switch object on the display.

3. The vehicle control device according to claim 1, wherein, The first processor or the second processor controls the following: When the hardware switch malfunctions, data related to the virtual switch service is received from an external server or electronic device, and the data related to the virtual switch service is stored in the first memory or the second memory.

4. The vehicle control device according to claim 3, wherein, The first processor or the second processor controls itself not to transmit data related to the virtual switch service to the control device.

5. The vehicle control device according to claim 3, wherein, After storing the data related to the virtual switch service, if the virtual switch service is executed and the virtual switch object is selected, the controller controls the actuator.

6. The vehicle control device according to claim 1, wherein, The second memory includes a change data area for storing data related to the virtual switch service and a fixed data area for storing data related to the fixed service.

7. The vehicle control device according to claim 1, wherein, The first processor or the second processor controls the following: The execution of the virtual switch service is changed based on the type of fault of the hardware switch, and the virtual switch object corresponding to the changed virtual switch service is displayed on the display.

8. The vehicle control device according to claim 1, wherein, The first processor or the second processor controls the following: When the sensor malfunctions, the virtual switch service or the alternative sensor service is executed, and the virtual switch object corresponding to the virtual switch service or the alternative sensor object corresponding to the alternative sensor service is output to the electrically connected display.

9. The vehicle control device according to claim 8, wherein, The first processor or the second processor controls the following: When the virtual switch object or the alternative sensor object is selected, the controller outputs an action start signal, an action stop signal, or an action control signal to the actuator.

10. The vehicle control device according to claim 8, wherein, The first processor or the second processor executes a service agent for performing vehicle services; The service proxy control is to, in addition to executing the services already performed, also execute the virtual switch service or the alternative sensor service when the sensor malfunctions.

Images