Control method and device for soft switching of large screen of vehicle, vehicle and medium
By employing a three-layer safety monitoring architecture to perform multiple verifications on the operation signals of the vehicle's large screen soft switch, the problem of unexpected functional failures caused by component malfunctions in the cockpit system is resolved, thereby improving the functional safety and driving safety of the cockpit system.
Patent Information
- Application Number
- CN202610006758.9
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2026-01-05
- Publication Date
- 2026-03-17
AI Technical Summary
Unexpected activation or failure of the soft switch on the vehicle's cockpit screen due to component malfunction can affect driving safety and pose a safety hazard.
The operation signals of the large screen soft switch are verified multiple times through a three-layer security monitoring architecture (function implementation layer, function diagnosis layer and controller monitoring layer), generating multiple function enable signals, and ensuring signal consistency through an arbitration module to prevent unexpected function execution.
It improves the functional safety and driving safety of the cockpit system, avoids unexpected functional failures caused by component malfunctions, and ensures driving safety.
Smart Images
Figure CN121671330A_ABST
Abstract
Description
Technical Field
[0001] This application relates to the field of vehicle intelligent cockpit technology, and in particular to a control method, device, vehicle, and medium for a vehicle large screen soft switch. Background Technology
[0002] With the rapid development of new energy vehicles and their increasing market share, more and more consumers are choosing new energy vehicles as their mode of transportation. Correspondingly, the functions of new energy vehicle systems are becoming increasingly complex, involving higher requirements for functional safety and reliability. In the field of intelligent cockpits, in pursuit of design simplicity and intelligent interaction, many models have gradually eliminated traditional physical switches, instead adopting soft switches on the cockpit screen to control various functions, such as lights, air conditioning, and airbag switches.
[0003] However, due to the potential for malfunctions in electronic components, soft switches may experience unexpected activation or malfunction during actual operation. For example, if the soft switch for the passenger-side airbag unexpectedly deactivates, the airbag may fail to deploy properly in a collision; similarly, if the soft switch for the low beam headlights deactivates abnormally, it can cause a sudden interruption of lighting during nighttime driving. Such unexpected functional failures directly impact driving safety and can even lead to serious accidents, necessitating a solution. Summary of the Invention
[0004] This application provides a control method, device, vehicle, and medium for a vehicle's large screen soft switch, in order to solve the safety hazards caused by the unexpected opening or closing of the function of the vehicle's cockpit large screen soft switch due to component failure, and to improve the functional safety and driving safety of the cockpit system.
[0005] The first aspect of this application provides a control method for a soft switch on a vehicle's large screen, including the following steps: Receive the operation signal of the large screen soft switch and obtain the enable confirmation signal corresponding to the operation signal; Based on the operation signal, and if it is determined according to the first preset algorithm that the target function corresponding to the operation signal is allowed to be executed, a first function enable signal is generated. Based on the enable confirmation signal, a second preset algorithm is used to determine whether the target function is allowed to be executed, and the determination result is compared with the first function enable signal. If the comparison result meets the preset comparison conditions, a second function enable signal is generated. Based on the preset watchdog mechanism, a clock response signal is sent to the preset control component. If the clock feedback signal is received from the preset control component within the preset time window, a third function enable signal is generated. Arbitrate the first function enable signal, the second function enable signal, and the third function enable signal, and trigger or prohibit the execution of the target function based on the arbitration result.
[0006] According to one embodiment of this application, the arbitration of the first function enable signal, the second function enable signal, and the third function enable signal, and the triggering or prohibition of the execution of the target function based on the arbitration result, includes: When the first function enable signal, the second function enable signal, and the third function enable signal are all preset valid values, the execution operation of the target function is triggered.
[0007] According to one embodiment of this application, the arbitration of the first function enable signal, the second function enable signal, and the third function enable signal, and the triggering or prohibition of the execution of the target function based on the arbitration result, further includes: If the first function enable signal is not the preset valid value, or the second function enable signal is not the preset valid value, or the third function enable signal is not the preset valid value, then the execution of the target function is prohibited.
[0008] According to one embodiment of this application, obtaining the enable confirmation signal corresponding to the operation signal includes: Upon receiving the operation signal, control the large screen to display a confirmation interaction interface; The enable confirmation signal is generated based on the user's confirmation operation on the confirmation interface.
[0009] According to one embodiment of this application, the target function includes at least one of the following: passenger airbag start / stop control, low beam headlight switch, hazard warning light activation, and driver assistance system start / stop.
[0010] According to the control method for the vehicle large screen soft switch provided in this application embodiment, based on the operation signal of the large screen soft switch, a first function enable signal is generated when the execution of the target function corresponding to the operation signal is permitted; based on the enable confirmation signal, it is determined whether the execution of the target function is permitted, and a second function enable signal is generated when the comparison result between the determination result and the first function enable signal meets a preset comparison condition; a clock response signal is sent to a preset control component, and if a clock feedback signal is received from the preset control component within a preset time window, a third function enable signal is generated; the execution of the target function is triggered or prohibited according to the first function enable signal, the second function enable signal, and the third function enable signal. This solves the safety hazard problem caused by the unexpected activation or deactivation of the vehicle cockpit large screen soft switch due to component failure, and improves the functional safety and driving safety of the cockpit system.
[0011] A second aspect of this application provides a control device for a vehicle large screen soft switch, comprising: The acquisition module is used to receive the operation signal of the large screen soft switch and acquire the enable confirmation signal corresponding to the operation signal; The first generation module is used to generate a first function enable signal based on the operation signal and, if a first preset algorithm determines that the target function corresponding to the operation signal is allowed to be executed, the first function enable signal is generated. The second generation module is used to determine whether the target function is allowed to be executed based on the enable confirmation signal and according to the second preset algorithm, and compare the judgment result with the first function enable signal. If the comparison result meets the preset comparison conditions, the second function enable signal is generated. The third generation module is used to send a clock response signal to a preset control component based on a preset watchdog mechanism. If a clock feedback signal is received from the preset control component within a preset time window, a third function enable signal is generated. The arbitration module is used to arbitrate the first function enable signal, the second function enable signal and the third function enable signal, and to trigger or prohibit the execution of the target function based on the arbitration result.
[0012] According to one embodiment of this application, the arbitration module is used for: When the first function enable signal, the second function enable signal, and the third function enable signal are all preset valid values, the execution operation of the target function is triggered.
[0013] According to one embodiment of this application, the arbitration module is further configured to: If the first function enable signal is not the preset valid value, or the second function enable signal is not the preset valid value, or the third function enable signal is not the preset valid value, then the execution of the target function is prohibited.
[0014] According to one embodiment of this application, the acquisition module is configured to: Upon receiving the operation signal, control the large screen to display a confirmation interaction interface; The enable confirmation signal is generated based on the user's confirmation operation on the confirmation interface.
[0015] According to one embodiment of this application, the target function includes at least one of the following: passenger airbag start / stop control, low beam headlight switch, hazard warning light activation, and driver assistance system start / stop.
[0016] According to the control device for the vehicle large screen soft switch provided in the embodiments of this application, based on the operation signal of the large screen soft switch, a first function enable signal is generated when the execution of the target function corresponding to the operation signal is permitted; a second function enable signal is generated when the judgment result and the comparison result of the first function enable signal meet the preset comparison conditions, based on the enable confirmation signal; a clock response signal is sent to a preset control component; if a clock feedback signal is received from the preset control component within a preset time window, a third function enable signal is generated; and the execution of the target function is triggered or prohibited according to the first function enable signal, the second function enable signal, and the third function enable signal. This solves the safety hazard problem caused by the unexpected activation or deactivation of functions due to component failure in related technologies, and improves the functional safety and driving safety of the cockpit system.
[0017] A third aspect of this application provides a vehicle, including: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement the vehicle large screen soft switch control method as described in the above embodiments.
[0018] A fourth aspect of this application provides a computer-readable storage medium storing computer instructions for causing the computer to execute the control method for a vehicle large screen soft switch as described in the above embodiments.
[0019] Additional aspects and advantages of this application will be set forth in part in the description which follows, and in part will be obvious from the description, or may be learned by practice of this application. Attached Figure Description
[0020] The above and / or additional aspects and advantages of this application will become apparent and readily understood from the following description of the embodiments taken in conjunction with the accompanying drawings, wherein: Figure 1 This is a flowchart of a control method for a vehicle large screen soft switch according to an embodiment of this application; Figure 2 This is a schematic diagram of the signal flow of a three-layer security monitoring architecture according to an embodiment of this application; Figure 3 This is a block diagram of the control device for the vehicle large screen soft switch according to an embodiment of this application; Figure 4 This is a schematic diagram of the vehicle structure provided in an embodiment of this application. Detailed Implementation
[0021] The embodiments of this application are described in detail below. Examples of these embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals denote the same or similar elements or elements having the same or similar functions throughout. The embodiments described below with reference to the accompanying drawings are exemplary and intended to explain this application, and should not be construed as limiting this application.
[0022] Those skilled in the art will understand that unexpected functional failures of electronic and electrical components can lead to the unintended opening and closing of soft switches, resulting in related functions being uncontrollable by the driver and potentially causing safety accidents. To prevent functional failures caused by electronic and electrical component malfunctions from resulting in unacceptable safety accidents, more and more OEMs are adding safety measures to their control strategies based on functional requirements to avoid safety accidents caused by unexpected functional failures. This application, in order to avoid safety accidents caused by the unintended opening and closing of functions controlled by soft switches in new energy electric vehicles, adds safety measures to the large screen using functional safety design methods, specifically by adding safety judgment measures for the implementation of soft switch functions.
[0023] The following description, with reference to the accompanying drawings, describes a control method, apparatus, vehicle, and medium for a vehicle large screen soft switch according to embodiments of this application.
[0024] Specifically, Figure 1 This is a flowchart illustrating a control method for a vehicle large screen soft switch provided in an embodiment of this application.
[0025] like Figure 1 As shown, the control method for the vehicle's large screen soft switch includes the following steps: In step S101, the operation signal of the large screen soft switch is received, and the enable confirmation signal corresponding to the operation signal is obtained.
[0026] Furthermore, in some embodiments, obtaining the enable confirmation signal corresponding to the operation signal includes: after receiving the operation signal, controlling the large screen to display a confirmation interaction interface; and generating an enable confirmation signal based on the user's confirmation operation on the confirmation interaction interface.
[0027] Specifically, the operation signal originates from the electrical signal triggered by the driver through touching, swiping or clicking the corresponding functional control (such as "passenger airbag switch", "low beam headlight switch" etc.) in the large screen interactive interface. This signal represents the driver's intention to turn a certain target function on or off.
[0028] Furthermore, in some embodiments, to enhance the prudence of the operation and prevent accidental triggering, the process of obtaining the enable confirmation signal corresponding to the operation signal includes an interactive confirmation step. Specifically, after the system receives the operation signal, it does not immediately execute the function. Instead, the large screen controller controls the large screen to display an independent confirmation interactive interface. This interface can be presented in the form of a pop-up window, a slider, or a secondary confirmation button, etc., to require the driver to reconfirm the previous operation intention.
[0029] For example, when the driver clicks the soft switch to "Disable the passenger airbag," a prompt window immediately pops up on the screen, displaying "Confirm to disable the passenger airbag?" along with two virtual buttons: "Confirm" and "Cancel." Only when the driver clicks the "Confirm" button will a valid enable confirmation signal be generated.
[0030] In step S102, based on the operation signal, and if the first preset algorithm determines that the target function corresponding to the operation signal is allowed to be executed, a first function enable signal is generated.
[0031] In some embodiments, the target functions include at least one of the following: passenger airbag start / stop control, low beam headlight switch, hazard warning light activation, and driver assistance system start / stop.
[0032] Specifically, after receiving a soft-switch operation signal from the large-screen display interface, the function implementation unit of the control system will process the operation signal. The function implementation unit calls the first preset algorithm (i.e., the L1 layer algorithm) to comprehensively judge factors such as the driver's operation intention, the current state of the target function, and the system environmental conditions, in order to evaluate whether the operation is allowed to be executed in the current situation.
[0033] If the algorithm determines that the target function corresponding to the operation signal is allowed to be executed, a valid first function enable signal is generated. This signal is used not only for subsequent arbitration, but is also provided to the function driving module and the second-level monitoring unit.
[0034] The target functions in this application refer to functions controlled by soft switches on the cockpit screen that have a direct impact on vehicle safety or core operations. Examples include the passenger-side airbag start-stop control function (whose unexpected deactivation could lead to serious consequences in a collision), the low beam headlight switch function (whose unexpected deactivation would directly result in loss of nighttime driving illumination), the hazard warning light activation function (whose unexpected activation could mislead other road users), and the start-stop function of driver assistance systems (such as the unexpected deactivation of adaptive cruise control, which could trigger a collision risk). The first layer of judgment filters the driver's basic operational intentions and the preliminary rationality of the function execution.
[0035] In step S103, based on the enable confirmation signal, it is determined whether the target function is allowed to be executed according to the second preset algorithm, and the judgment result is compared with the first function enable signal. If the comparison result meets the preset comparison conditions, the second function enable signal is generated.
[0036] Specifically, when the functional diagnostic unit receives an enable confirmation signal generated after the driver performs a secondary confirmation operation on the large screen confirmation interface (such as clicking the "Confirm" button or sliding the slider to a specified position), it activates a second preset algorithm independent of the first preset algorithm.
[0037] The second preset algorithm analyzes the signal and independently generates an internal judgment result regarding whether the target function (e.g., turning on the low beam headlights) should be executed. Subsequently, the judgment result is compared with the first function enable signal, that is, the internal judgment result is compared with the intention represented by the first function enable signal generated by the first level based on the initial operation signal.
[0038] For example, if the first function enable signal indicates "low beam headlights allowed", and the independent judgment result of the second algorithm also concludes "allowed", then the meanings of the two are... Figure 1 If the comparison result meets the preset comparison conditions (typically, the two judgment results are consistent), it proves that the two independent monitoring paths interpret the driver's intentions in the same way, eliminating the possibility of misjudgment of a single path. At this time, the functional arbitration module generates a second function enable signal as proof that the verification at this level has passed.
[0039] Conversely, if the comparison results are inconsistent (e.g., the first path is judged to be enabled, while the second path is judged to be disabled), it indicates that at least one monitoring path is abnormal. In this case, a valid second function enable signal will not be generated, thereby preventing the function from being executed in subsequent arbitration, effectively preventing unexpected operations caused by a single point of failure.
[0040] Furthermore, in some embodiments, based on a preset watchdog mechanism, a clock response signal is sent to a preset control component. If a clock feedback signal is received from the preset control component within a preset time window, a third function enable signal is generated.
[0041] Specifically, based on a preset watchdog mechanism, the controller monitoring layer sends a clock response signal to the functional monitoring layer (i.e., the preset control component) according to a set timing period. After receiving the signal, the functional monitoring layer must send back the corresponding clock feedback signal within a preset strict time window.
[0042] Through bidirectional timing interaction, the system monitors in real time whether the control program (e.g., the program flow containing the second preset algorithm) in the functional monitoring layer is running normally and whether there are any abnormalities such as freezing or crashing. If the controller monitoring layer successfully receives the expected clock feedback signal within a preset time, it indicates that the program in the functional monitoring layer is running normally, and a third function enable signal (i.e., a valid signal) is generated at this time. Conversely, if no signal is received within the time limit or the received signal does not meet expectations, it indicates that the program is running abnormally, and an invalid third function enable signal is generated or the original invalid state is maintained, thereby timely blocking possible function mis-triggering caused by software failure at the system level.
[0043] For example, assuming the preset time window is 10 milliseconds, the controller monitoring layer sends a clock response signal every 10 milliseconds, and the functional monitoring layer must return a response within the next 2 milliseconds; if a response is not received within the window twice in a row, the function of that layer is determined to be abnormal, thereby ensuring system security.
[0044] Furthermore, in some embodiments, the first function enable signal, the second function enable signal, and the third function enable signal are arbitrated, and the execution of the target function is triggered or prohibited based on the arbitration result.
[0045] Furthermore, in some embodiments, the first function enable signal, the second function enable signal, and the third function enable signal are arbitrated, and the execution operation of the target function is triggered or prohibited based on the arbitration result, including: triggering the execution operation of the target function when the first function enable signal, the second function enable signal, and the third function enable signal are all preset valid values.
[0046] Furthermore, in some embodiments, arbitrating the first function enable signal, the second function enable signal, and the third function enable signal, and triggering or prohibiting the execution of the target function based on the arbitration result, further includes: if the first function enable signal is not a preset valid value, or the second function enable signal is not a preset valid value, or the third function enable signal is not a preset valid value, then the execution of the target function is prohibited.
[0047] Specifically, the validity of the first, second, and third function enable signals is verified simultaneously. The first function enable signal originates from the first level (function implementation layer), representing the initial execution permission based on the driver's initial operating intention and the first set of preset algorithms. The second function enable signal originates from the second level (function diagnosis layer), and its generation is based not only on the judgment of the enable confirmation signal by the independent second set of preset algorithms, but also requires that the judgment result be consistent with the first-level decision logic represented by the first function enable signal, thereby realizing cross-level cross-validation and consistency checks. The third function enable signal originates from the third level (controller monitoring layer), and its validity depends on whether the preset watchdog mechanism can successfully complete the monitoring and feedback confirmation of the normal operation of the program flow of the second-level control components (such as the MCU core), aiming to prevent deeper controller operation failures.
[0048] For example, suppose the default valid value is a high level "1". The arbitration module will output the final execution instruction to trigger the drive of the target function (e.g., turning on the low beam headlights) only when all three function enable signals are determined to be valid values "1".
[0049] Conversely, if any one of the three signals fails to reach the preset valid value (e.g., it displays a low level "0" or an invalid state), regardless of whether the other signals are valid, the arbitration module will determine that the current condition does not meet the safety execution requirements, and thus output a prohibition command to block the execution of the target function. For example, if the driver clicks the soft switch to "activate the passenger airbag," and the first-level algorithm determines that it is allowed (signal 1 is valid), but the second level, through independent algorithm and comparison, finds that the intent confirmation is insufficient or the logic is inconsistent (signal 2 is invalid), or the third-level watchdog monitoring fails to receive the correct response from the second-level MCU (signal 3 is invalid), then the execution change of the airbag switch function is prohibited, maintaining its original (such as activated) state, thereby avoiding the safety risks that may be caused by a single-level failure or misjudgment.
[0050] To facilitate a clearer and more intuitive understanding of the vehicle large screen soft switch control method of this application by those skilled in the art, the following is combined with... Figure 2 Please provide a detailed explanation.
[0051] like Figure 2 As shown, this application embodiment monitors the implementation of the large screen soft switch function through the EGS-Level3 layer security architecture to prevent the soft switch related functions from being turned on or off unexpectedly.
[0052] The system is structured as follows: Level-1 is the functional layer, used to determine the driver's intention to enable or disable the soft switch function; Level-2 is the functional monitoring layer, used to determine the rationality of the L1 layer's functional implementation; and Level-3 is the controller monitoring layer, used to determine the correctness of the L1 and L2 layers' identification of the soft switch's activation or deactivation software. Only when the above three layers correctly determine the functionality will the soft switch function be activated or deactivated, thus preventing unintended activation or deactivation of the soft switch.
[0053] In detail, the specific implementation logic of the EGS-Level 3 security architecture in this application is as follows: Input signals include switch on or off signals and switch enable confirmation signals.
[0054] Among them, the switch on or off signal is the soft switch control interface for each function in the large screen display window. The driver clicks the interface to realize the soft switch ON / OFF; the switch enable confirmation signal refers to the switch signal enable confirmation interface that pops up on the large screen after the driver clicks the soft switch. It is often used as a secondary confirmation or the function implementation bar is moved to a specified position to activate the function development enable confirmation signal.
[0055] The control section includes a function implementation layer (Level 1), a function diagnostic layer (Level 2), and a controller monitoring layer (Level 3).
[0056] Among them, after receiving the large screen switch on signal, the function implementation unit of Level 1 of the function implementation layer determines whether the function is enabled through the MCU's algorithm 1, and outputs function enable signal 1. The function implementation result is given to the function driver enable module and the function diagnosis unit of Level 2 respectively. After receiving the switch enable confirmation signal, the function diagnostic unit of Level 2 independently determines whether the function is enabled through the MCU's algorithm 2. At the same time, it compares the result calculated by the function implementation module of Level 1 with the result of the function implementation module to see if the two are consistent. The result is then input to the function arbitration module. If the two results are consistent, the function arbitration module will output a valid signal (function enable signal 2) to the function driver enable module. If they are inconsistent, an invalid signal will be output.
[0057] The controller monitoring module at Level 3 sends a clock response signal to the MCU at Level 2 via a watchdog mechanism to determine whether the algorithm program flow is normal. It uses the clock feedback signal returned by Level 2 to avoid errors in the algorithm itself. If the algorithm program flow is normal, the controller monitoring module will output a valid signal (function enable signal 3) to the function driver enable module. If they are inconsistent, an invalid signal will be output.
[0058] Finally, the function-driven enable module combines the signal values of function enable signal 1, function enable signal 2, and function enable signal 3 to determine whether the function is finally driven and issues a function enable signal.
[0059] In addition, the Level 1 and Level 2 control algorithms are stored in different MCU cores, and the software operating environment is monitored by the MCU's built-in security policy.
[0060] According to the control method for the vehicle large screen soft switch proposed in this application embodiment, based on the operation signal of the large screen soft switch, a first function enable signal is generated when the execution of the target function corresponding to the operation signal is permitted; a second function enable signal is generated when the judgment result and the comparison result of the first function enable signal meet the preset comparison conditions, based on the enable confirmation signal; a clock response signal is sent to a preset control component, and a third function enable signal is generated if a clock feedback signal is received from the preset control component within a preset time window; the execution of the target function is triggered or prohibited according to the first, second, and third function enable signals. This solves the safety hazard problem caused by the unexpected activation or deactivation of functions due to component failure in related technologies, and improves the functional safety and driving safety of the cockpit system.
[0061] Next, the control device for the vehicle large screen soft switch according to the embodiments of this application is described with reference to the accompanying drawings.
[0062] Figure 3 This is a block diagram of the control device for the vehicle large screen soft switch according to an embodiment of this application.
[0063] like Figure 3 As shown, the control device 10 for the vehicle's large screen soft switch includes: an acquisition module 100, a first generation module 200, a second generation module 300, a third generation module 400, and an arbitration module 500.
[0064] The system includes: an acquisition module 100 for receiving the operation signal of the large screen soft switch and acquiring the corresponding enable confirmation signal; a first generation module 200 for generating a first function enable signal based on the operation signal and, according to a first preset algorithm, determining whether the execution of the target function corresponding to the operation signal is permitted; a second generation module 300 for determining whether the execution of the target function is permitted based on the enable confirmation signal and, according to a second preset algorithm, comparing the determination result with the first function enable signal; if the comparison result meets the preset comparison conditions, generating a second function enable signal; a third generation module 400 for sending a clock response signal to a preset control component based on a preset watchdog mechanism; if a clock feedback signal is received from the preset control component within a preset time window, generating a third function enable signal; and an arbitration module 500 for arbitrating the first, second, and third function enable signals and triggering or prohibiting the execution of the target function based on the arbitration result.
[0065] Furthermore, in some embodiments, the arbitration module 500 is used to trigger the execution operation of the target function when the first function enable signal, the second function enable signal, and the third function enable signal are all preset valid values.
[0066] Furthermore, in some embodiments, the arbitration module 500 is also configured to: prohibit the execution of the target function if the first function enable signal is not a preset valid value, or the second function enable signal is not a preset valid value, or the third function enable signal is not a preset valid value.
[0067] Furthermore, in some embodiments, the acquisition module 100 is used to: control the large screen to display a confirmation interaction interface after receiving an operation signal; and generate an enable confirmation signal based on the user's confirmation operation on the confirmation interaction interface.
[0068] Furthermore, in some embodiments, the target functions include at least one of the following: passenger airbag start / stop control, low beam headlight switch, hazard warning light activation, and driver assistance system start / stop.
[0069] It should be noted that the explanation of the control method embodiment for the vehicle large screen soft switch described above also applies to the control device of the vehicle large screen soft switch in this embodiment, and will not be repeated here.
[0070] According to the control device for the vehicle large screen soft switch proposed in the embodiments of this application, based on the operation signal of the large screen soft switch, a first function enable signal is generated when the execution of the target function corresponding to the operation signal is permitted; a second function enable signal is generated when the judgment result and the comparison result of the first function enable signal meet the preset comparison conditions, based on the enable confirmation signal; a clock response signal is sent to a preset control component, and a third function enable signal is generated if a clock feedback signal is received from the preset control component within a preset time window; the execution of the target function is triggered or prohibited according to the first function enable signal, the second function enable signal, and the third function enable signal. This solves the safety hazard problem caused by the unexpected activation or deactivation of functions due to component failure in related technologies, and improves the functional safety and driving safety of the cockpit system.
[0071] Figure 4 A schematic diagram of the structure of a vehicle provided in an embodiment of this application. The vehicle may include: The memory 401, the processor 402, and the computer program stored on the memory 401 and capable of running on the processor 402.
[0072] When the processor 402 executes the program, it implements the control method for the vehicle large screen soft switch provided in the above embodiments.
[0073] Furthermore, the vehicle also includes: Communication interface 403 is used for communication between memory 401 and processor 402.
[0074] The memory 401 is used to store computer programs that can run on the processor 402.
[0075] Memory 401 may include high-speed RAM memory, and may also include non-volatile memory, such as at least one disk storage device.
[0076] If the memory 401, processor 402, and communication interface 403 are implemented independently, then the communication interface 403, memory 401, and processor 402 can be interconnected via a bus to complete communication between them. The bus can be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus, etc. Buses can be categorized into address buses, data buses, control buses, etc. For ease of representation, Figure 4The bus is represented by a single thick line, but this does not mean that there is only one bus or one type of bus.
[0077] Optionally, in a specific implementation, if the memory 401, processor 402, and communication interface 403 are integrated on a single chip, then the memory 401, processor 402, and communication interface 403 can communicate with each other through an internal interface.
[0078] Processor 402 may be a central processing unit (CPU), an application specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of this application.
[0079] This application also provides a computer-readable storage medium storing a computer program thereon, which, when executed by a processor, implements the above-described control method for the soft switch of a vehicle's large screen.
[0080] In the description of this specification, the references to terms such as "one embodiment," "some embodiments," "example," "specific example," or "some examples," etc., indicate that a specific feature, structure, material, or characteristic described in connection with that embodiment or example is included in at least one embodiment or example of this application. In this specification, the illustrative expressions of the above terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in one or more embodiments or examples. Moreover, without contradiction, those skilled in the art can combine and integrate the different embodiments or examples described in this specification, as well as the features of different embodiments or examples.
[0081] Furthermore, the terms "first" and "second" are used for descriptive purposes only and should not be construed as indicating or implying relative importance or implicitly specifying the number of technical features indicated. Thus, a feature defined as "first" or "second" may explicitly or implicitly include at least one of that feature. In the description of this application, "N" means at least two, such as two, three, etc., unless otherwise explicitly specified.
[0082] Any process or method described in the flowchart or otherwise herein can be understood as representing a module, segment, or portion of code comprising one or more N executable instructions for implementing custom logic functions or processes, and the scope of the preferred embodiments of this application includes additional implementations in which functions may be performed not in the order shown or discussed, including substantially simultaneously or in reverse order depending on the functions involved, as should be understood by those skilled in the art to which embodiments of this application pertain.
[0083] The logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as a sequenced list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by, or in conjunction with, an instruction execution system, apparatus, or device (such as a computer-based system, a processor-included system, or other system that can fetch and execute instructions from, an instruction execution system, apparatus, or device). For the purposes of this specification, "computer-readable medium" can be any means that can contain, store, communicate, propagate, or transmit programs for use by, or in conjunction with, an instruction execution system, apparatus, or device. More specific examples (a non-exhaustive list) of computer-readable media include: an electrical connection having one or more wires (electronic device), a portable computer disk drive (magnetic device), random access memory (RAM), read-only memory (ROM), erasable and editable read-only memory (EPROM or flash memory), fiber optic devices, and portable optical disc read-only memory (CDROM). Alternatively, the computer-readable medium may be paper or other suitable media on which the program can be printed, since the program can be obtained electronically, for example, by optically scanning the paper or other medium, followed by editing, interpreting, or otherwise processing as necessary, and then stored in a computer memory.
[0084] It should be understood that the various parts of this application can be implemented using hardware, software, firmware, or a combination thereof. In the above embodiments, the N steps or methods can be implemented using software or firmware stored in memory and executed by a suitable instruction execution system. For example, if implemented in hardware as in another embodiment, it can be implemented using any one or a combination of the following techniques known in the art: discrete logic circuits having logic gates for implementing logical functions on data signals, application-specific integrated circuits (ASICs) having suitable combinational logic gates, programmable gate arrays (PGAs), field-programmable gate arrays (FPGAs), etc.
[0085] Those skilled in the art will understand that all or part of the steps of the methods in the above embodiments can be implemented by a program instructing related hardware. The program can be stored in a computer-readable storage medium, and when executed, the program includes one or a combination of the steps of the method embodiments.
[0086] Furthermore, the functional units in the various embodiments of this application can be integrated into a processing module, or each unit can exist physically separately, or two or more units can be integrated into a module. The integrated module can be implemented in hardware or as a software functional module. If the integrated module is implemented as a software functional module and sold or used as an independent product, it can also be stored in a computer-readable storage medium.
[0087] The storage medium mentioned above can be a read-only memory, a disk, or an optical disk, etc. Although embodiments of this application have been shown and described above, it is understood that the above embodiments are exemplary and should not be construed as limiting this application. Those skilled in the art can make changes, modifications, substitutions, and variations to the above embodiments within the scope of this application.
Claims
1. A control method of a vehicle large-screen soft switch, characterized by, The method comprises the following steps: receiving an operation signal of a large-screen soft switch and obtaining an enablement confirmation signal corresponding to the operation signal; based on the operation signal, generating a first function enablement signal in a case where it is determined according to a first preset algorithm that the target function corresponding to the operation signal is allowed to be executed; based on the enablement confirmation signal, determining whether the target function is allowed to be executed according to a second preset algorithm, and comparing the determination result with the first function enablement signal, and generating a second function enablement signal if the comparison result meets a preset comparison condition; based on a preset watchdog mechanism, sending a clock response signal to a preset control component, and generating a third function enablement signal if a clock feedback signal fed back by the preset control component is received within a preset time window; arbitrating the first function enablement signal, the second function enablement signal and the third function enablement signal, and triggering or prohibiting the execution operation on the target function based on the arbitration result.
2. The method of claim 1, wherein, The arbitration of the first function enablement signal, the second function enablement signal and the third function enablement signal, and the triggering or prohibition of the execution operation on the target function based on the arbitration result, comprises: in a case where the first function enablement signal, the second function enablement signal and the third function enablement signal are all preset effective values, triggering the execution operation on the target function.
3. The method of claim 2, wherein, The arbitration of the first function enablement signal, the second function enablement signal and the third function enablement signal, and the triggering or prohibition of the execution operation on the target function based on the arbitration result, further comprises: if the first function enablement signal is not the preset effective value, or the second function enablement signal is not the preset effective value, or the third function enablement signal is not the preset effective value, the execution operation on the target function is prohibited.
4. The method of claim 1, wherein, The obtaining of the enablement confirmation signal corresponding to the operation signal comprises: after receiving the operation signal, controlling the large-screen display confirmation interactive interface; based on the confirmation operation of the user on the confirmation interactive interface, generating the enablement confirmation signal.
5. The method of claim 1, wherein, The target function comprises at least one of a co-pilot airbag start-stop control, a low beam switch, a hazard warning light activation and a driving assistance system start-stop.
6. A control device for a vehicle large-screen soft switch, characterized by comprising: comprises: an obtaining module, configured to receive an operation signal of a large-screen soft switch and obtain an enablement confirmation signal corresponding to the operation signal; a first generating module, configured to generate a first function enablement signal in a case where it is determined according to a first preset algorithm that the target function corresponding to the operation signal is allowed to be executed based on the operation signal; a second generating module, configured to determine whether the target function is allowed to be executed according to a second preset algorithm based on the enablement confirmation signal, compare the determination result with the first function enablement signal, and generate a second function enablement signal if the comparison result meets a preset comparison condition; a third generating module, configured to send a clock response signal to a preset control component based on a preset watchdog mechanism, and generate a third function enablement signal if a clock feedback signal fed back by the preset control component is received within a preset time window; An arbitration module is configured to arbitrate the first function enable signal, the second function enable signal and the third function enable signal, and trigger or prohibit the execution operation on the target function based on the arbitration result.
7. The apparatus of claim 6, wherein, The arbitration module is configured to: If the first function enable signal, the second function enable signal and the third function enable signal are all preset effective values, trigger the execution operation on the target function.
8. The apparatus of claim 7, wherein, The arbitration module is further configured to: If the first function enable signal is not the preset effective value, or the second function enable signal is not the preset effective value, or the third function enable signal is not the preset effective value, prohibit the execution operation on the target function.
9. A vehicle characterized by comprising: Comprise: A memory, a processor and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the control method of the vehicle large-screen soft switch according to any one of claims 1-5.
10. A computer-readable storage medium having stored thereon a computer program, characterized in that, The computer program is executed by the processor to implement the control method of the vehicle large-screen soft switch according to any one of claims 1-5.