Vehicle safety icon display method and vehicle

Abstract

The invention provides a vehicle safety icon display method and a vehicle, and relates to the technical field of vehicle display.The method comprises the steps that firstly, the image quality enhancement function state of vehicle display equipment and image quality adjustment information of a to-be-displayed safety icon are monitored, the image quality enhancement function state is used for representing whether the vehicle display equipment starts an image quality enhancement function or not, and the image quality adjustment information is used for representing whether image quality related parameters of the to-be-displayed security icon are adjusted or not; secondly, based on the image quality enhancement function state and the image quality adjustment information, a display strategy of the security icon is determined, and the display strategy is to display or call and display a pre-stored security icon after the security icon is verified; and finally, based on the display strategy, displaying the security icon. The technical problem of high false alarm rate of security icon verification in the prior art is solved.

Description

Technical Field

[0001] This disclosure relates to the field of vehicle display technology, and more particularly to a method for displaying vehicle safety icons and a vehicle. Background Technology

[0002] In vehicle cockpit display systems, instrument panel safety icons are crucial information carriers for ensuring driving safety. Their display accuracy must meet preset functional safety level requirements to avoid misleading drivers due to incorrect icon display. As users' demands for vehicle display experience increase, more and more models are beginning to feature Picture Quality (PQ) enhancement. This function optimizes display effects and improves the visual experience by adjusting parameters such as overall screen color, transparency, and contrast. However, when optimizing the image, PQ may simultaneously adjust the image quality-related parameters of safety icons (such as RGB (Red, Green, Blue) values ​​and transparency). This adjustment is not due to rendering errors in the safety icons, but rather a normal result of the function optimization.

[0003] Current display solutions uniformly employ a single approach at the functional safety level: the system-on-chip (SOC) renders all warning light images, and the instrument cluster safety chip performs RGB value comparison verification via IMC (Image Matching Check). This technology fails to consider the potential impact of display image enhancement functions. Since the PQ function, when enabled, adjusts parameters such as the RGB values ​​and transparency of the warning lights to optimize the visual experience, the existing IMC verification logic only uses "whether the pixel RGB value matches the pre-stored baseline icon" as the criterion. It cannot distinguish whether parameter changes are normal image quality optimizations brought about by PQ or actual rendering errors of the warning lights. Consequently, it may misjudge parameter adjustments caused by PQ as icon anomalies, triggering unnecessary pre-stored baseline icon replacement operations and generating frequent false alarms. These false alarms not only disrupt the visual experience provided by the image enhancement function but may also confuse the driver regarding safety warning information.

[0004] In summary, existing technologies suffer from a high false alarm rate in security icon verification. Summary of the Invention

[0005] In view of the above problems, this disclosure provides a method and vehicle for displaying vehicle safety icons that overcomes or at least partially solves the current high false alarm rate in safety icon verification. The technical solution is as follows: A method for displaying a vehicle safety icon, the method comprising: The system monitors the image enhancement function status of the vehicle display device and the image quality adjustment information of the safety icon to be displayed. The image enhancement function status indicates whether the image enhancement function of the vehicle display device is enabled, and the image quality adjustment information indicates whether the image quality-related parameters of the safety icon to be displayed have been adjusted. Based on the image quality enhancement function status and the image quality adjustment information, a display strategy for the security icon is determined. The display strategy is to display the security icon after verification or to call and display a pre-stored security icon. The security icon is displayed based on the aforementioned display strategy.

[0006] In this way, by capturing two key pieces of information in real time—whether the image enhancement function is enabled and whether the image quality-related parameters of the security icon have been adjusted—data support is provided for the dynamic adaptation of subsequent display strategies. The process of determining the display strategy based on these two types of monitoring information achieves intelligent differentiation between enhanced and non-enhanced scenarios. This avoids the security risks of untimely verification and correction of security icon rendering errors in non-enhanced scenarios, and provides a decision-making basis for avoiding false alarms in enhanced scenarios. Finally, the stage of executing display operations based on the strategy ensures that the security icon stably meets the preset functional safety level requirements regardless of the scenario, while also taking into account the improved visual experience brought by image enhancement. Furthermore, this method does not rely on specific hardware architectures and can adapt to the image enhancement configurations of different vehicle models through software logic, significantly reducing the development cost and cycle of vehicle model adaptation, improving the versatility and scalability of the technical solution, and providing reliable technical support for the intelligent upgrade of vehicle display systems.

[0007] Optionally, determining the display strategy for the security icon based on the image enhancement function status and the image adjustment information includes: In response to the image enhancement function status indicating that the image enhancement function is off or the image quality adjustment information indicating that the security icon to be displayed has not been adjusted, the display strategy is determined to be the first display strategy, which is to display the security icon after verification; In response to the image enhancement function status indicating that the image enhancement function is enabled, and the image quality adjustment information indicating that the security icon to be displayed is adjusted, the display strategy is determined to be the second display strategy, which is to call and display the pre-stored security icon.

[0008] By clearly defining the triggering conditions for the two display strategies, the compatibility mechanism between image enhancement and safety icon display becomes more practical and precise. When image enhancement is off or the safety icon is not adjusted, the first display strategy is used. This retains the safety advantage of preventing rendering errors through image verification in existing technologies, ensuring the accuracy of safety icon display in scenarios without image quality interference, while also fully utilizing the integrity of the rendered image to ensure display continuity. When image enhancement is on and the safety icon has been adjusted, the second display strategy is switched to. This avoids the problem of parameter changes caused by image quality adjustments being misjudged as rendering errors, solving the pain point of frequent false alarms that damage the display experience and confuse drivers' safety awareness in existing technologies. This scenario-adaptive strategy switching logic achieves a balance between safety assurance and experience improvement. It does not sacrifice the functional safety level requirements of the safety icon, nor does it waste the optimization effect of the image enhancement function. At the same time, the clear triggering conditions make the system execution logic clearer, reduce the computational load of the control unit, improve the operational stability and response efficiency of the display system, and adapt to the actual needs of various vehicle display scenarios.

[0009] Optionally, the image quality adjustment information includes the adjustment range of image quality-related parameters, and the step of determining the display strategy of the security icon based on the image quality enhancement function status and the image quality adjustment information further includes: In response to the fact that the adjustment range does not exceed a preset adjustment threshold, the display strategy is determined to be the first display strategy.

[0010] By introducing adjustment magnitude parameters and setting preset adjustment thresholds into the image quality adjustment information, the decision-making logic of the display strategy is further optimized and refined, improving the adaptability and practicality of the solution. When the image quality enhancement function is enabled and the safety icon is adjusted, but the adjustment magnitude does not exceed the preset threshold, the first display strategy is still executed. This avoids triggering strategy switching due to minor parameter fluctuations caused by image quality enhancement (such as normal color fine-tuning or slight brightness compensation), reducing display instability caused by frequent system strategy switching. Simultaneously, the verification function of the first display strategy is retained, ensuring that the safety icon can still pass verification to prevent actual rendering errors in minor adjustment scenarios. The preset adjustment threshold setting also offers flexible adaptability, allowing for personalized configuration based on the display hardware performance, functional safety level requirements, and characteristics of the image quality enhancement algorithm for different vehicle models. This enables the technical solution to adapt to vehicle display systems with different configurations, from low-end to high-end, expanding the scope of application. Furthermore, this mechanism reduces the frequency of calling the second display strategy, reduces the read pressure on the pre-stored baseline icon storage unit, extends the lifespan of the storage device, and further improves the overall reliability of the system.

[0011] Optionally, displaying the security icon based on the display strategy includes: In response to the first display strategy, the rendered security icon is compared and verified with the pre-stored baseline icon to obtain the verification result. Based on the verification result, the security icon is displayed.

[0012] This approach compares the rendered security icon with a pre-stored baseline icon for verification. This direct image-level comparison captures various errors that may occur during rendering, such as pixel color deviations, icon shape distortion, and partial missing parts, offering greater comprehensiveness compared to the simple parameter verification in existing technologies. The process of executing display operations based on the verification results forms a closed-loop control of error identification and correction: rendered images that pass verification can be displayed directly, ensuring display consistency and visual experience; those that fail verification trigger subsequent error correction processes, providing double assurance for the accuracy of security icon display. This refined process also improves system maintainability. When verification fails, the specific type of rendering error can be located by tracing the comparison process, providing a clear direction for subsequent troubleshooting and system optimization. Simultaneously, standardized execution steps reduce the difficulty of software development and debugging, improving the efficiency of technical solution implementation.

[0013] Optionally, the step of comparing and verifying the rendered security icon with a pre-stored baseline icon to obtain a verification result includes: The feature values ​​of the rendered security icon and the pre-stored baseline icon are extracted respectively, and the feature values ​​are compared and verified. The feature values ​​are used to characterize the visual attributes of the security icon. In response to the consistency of the feature values, the verification result is determined to be a pass. In response to the inconsistency of the feature values, the verification result is determined to be a failure.

[0014] In this way, by extracting and comparing the feature values ​​representing the visual attributes of safety icons, the inherent attributes of icons in key visual dimensions such as shape, core color distribution, and outline structure can be captured. This effectively avoids the shortcomings of traditional pixel-by-pixel comparison, which is easily affected by the adjustment of image quality enhancement (PQ) function parameters. It distinguishes between "reasonable visual optimization brought by PQ function" and "actual icon rendering errors," significantly reducing the false alarm rate of functional safety verification. At the same time, the feature value comparison method not only ensures the consistency and accuracy of the visual information of safety icons, but also fully preserves the image quality enhancement effect of PQ function, ensuring that drivers can clearly and accurately identify safety alarm information, avoiding information confusion caused by false alarms, and improving driving safety and visual experience.

[0015] Optionally, displaying the security icon based on the verification result includes: In response to the verification result being successful, the security icon is displayed; In response to the verification result being a failure, the pre-stored benchmark icon is displayed.

[0016] In this way, by clearly defining the correspondence between verification results and display operations, the error correction mechanism of the first display strategy becomes more explicit and efficient, further solidifying the safety foundation of safety icon display while also ensuring a smooth display experience. When the verification result is successful, the rendered safety icon is displayed directly. This fully utilizes the coordination between the rendered image and the overall interface, avoiding the display disjointedness caused by frequent icon replacements and improving the driver's visual experience. It also reduces the access to the pre-stored baseline icon storage unit, lowering system resource consumption. When the verification result is unsuccessful, the pre-stored baseline icon is displayed immediately, enabling rapid error correction of rendering errors and ensuring that erroneous icons are not displayed for extended periods, thus minimizing safety risks. This hierarchical processing logic also features rapid response. The direct association between verification results and display operations shortens the response time from error identification to error correction display, meeting the stringent real-time requirements of vehicle safety alarm information. In addition, clear display rules make the system control logic simpler, reduce control errors caused by ambiguous rules, improve the stability of system operation, and provide clear trigger nodes for subsequent function expansion (such as verification failure alarms and logging), thereby enhancing the scalability of the technical solution.

[0017] Optionally, displaying the security icon based on the display strategy includes: In response to the display strategy being the second display strategy, a pre-stored baseline icon corresponding to the security icon is obtained; Display the pre-stored benchmark icon.

[0018] This process of retrieving the corresponding baseline icon through specific relationships ensures the accuracy of the call and avoids safety hazards caused by incorrect icon matching. Especially in scenarios with multiple safety icon types, rapid matching can be achieved through unique identifiers and other related information. The operation of displaying pre-stored baseline icons does not replace other interface elements after image enhancement; it only displays the safety icon area. This ensures the accuracy of safety icon display while fully preserving the optimization effect of image enhancement on non-safe areas, achieving the goal of uncompromised safety and undiminished user experience. This refined process also improves the execution efficiency of the second display strategy. Standardized acquisition and display steps shorten the response time from strategy determination to icon display, ensuring drivers can promptly obtain safety warnings. At the same time, clear execution logic reduces the risk of logical conflicts during software development, improving the feasibility and stability of the solution and adapting to various image enhancement algorithms and vehicle display hardware configurations.

[0019] Optionally, the method further includes: In response to the image enhancement function switching from on to off, the display strategy is switched from the second display strategy to the first display strategy.

[0020] In this way, by adding a strategy-linked switching mechanism when the image enhancement function changes state, the adjustment of the display strategy becomes more dynamic and real-time, solving the problem of strategy mismatch caused by functional state changes in existing technologies, and further improving the scenario adaptability and security reliability of the technical solution. When the image enhancement function switches from on to off, the display strategy synchronously switches from the second display strategy to the first display strategy, ensuring that the system can immediately restore the verification mechanism after the image enhancement function is exited, preventing possible safety icon rendering errors at this time, and avoiding security vulnerabilities caused by the failure to switch strategies in time (such as not performing verification after image enhancement is turned off, and failing to detect rendering errors). At the same time, this linked switching does not require manual intervention and is completed automatically by the system, improving the intelligence level of the display system. This mechanism also ensures the continuity of the display experience. The strategy switching process is synchronized with the functional state change, and there will be no abnormal icon display (such as repeated display or flickering) caused by switching delay, avoiding cognitive confusion for the driver due to display abnormalities. In addition, the linkage switching logic has good scalability. It can be extended to scenarios where the image enhancement function is switched from off to on, forming a complete two-way switching mechanism. This provides a flexible direction for the subsequent optimization of the technical solution. At the same time, the standardized switching process reduces the complexity of system control and improves operational stability.

[0021] Optionally, the method further includes: In response to detecting an abnormal state of the image enhancement function, switch to the first display strategy and record the abnormal state information.

[0022] In this way, when an abnormality is detected in the image enhancement function, the system automatically switches to the first display strategy, which has been proven in practice. This quickly avoids the risk of safety icons malfunctioning or becoming distorted under abnormal conditions, ensuring that safety icons are always presented according to reliable verification logic. This guarantees the continuity and stability of functional safety and prevents abnormal situations from affecting the driver's access to safety information. Simultaneously, the recording function of abnormal status information provides data support for subsequent vehicle diagnosis and maintenance, facilitating the rapid identification of the root cause of the image enhancement function malfunction, improving vehicle maintainability and troubleshooting efficiency, and further strengthening the integrity and reliability of the vehicle's functional safety system.

[0023] A vehicle safety icon display device, the device comprising: The monitoring module is used to monitor the image enhancement function status of the vehicle display device and the image quality adjustment information of the safety icon to be displayed. The image enhancement function status is used to indicate whether the image enhancement function of the vehicle display device is enabled, and the image quality adjustment information is used to indicate whether the image quality-related parameters of the safety icon to be displayed have been adjusted. The determination module is used to determine the display strategy of the security icon based on the image quality enhancement function status and the image quality adjustment information. The display strategy is to display the security icon after verification or to call and display a pre-stored security icon. The display module is used to display the security icon based on the display strategy.

[0024] Optionally, the determination module is also used for: In response to the image enhancement function status indicating that the image enhancement function is off, or the image quality adjustment information indicating that the security icon to be displayed has not been adjusted, the display strategy is determined to be the first display strategy, which is to display the security icon after verification; In response to the image enhancement function status indicating that the image enhancement function is enabled and the image quality adjustment information indicating that the security icon to be displayed is adjusted, the display strategy is determined to be the second display strategy, which is to call and display the pre-stored security icon.

[0025] Optionally, the image quality adjustment information includes the adjustment range of image quality-related parameters, and the determining module is further used for: In response to the fact that the adjustment range does not exceed a preset adjustment threshold, the display strategy is determined to be the first display strategy.

[0026] Optionally, the determination module is also used for; In response to the first display strategy, the rendered security icon is compared and verified with the pre-stored baseline icon to obtain the verification result. Based on the verification result, the security icon is displayed.

[0027] Optionally, the determination module is also used for: The feature values ​​of the rendered security icon and the pre-stored baseline icon are extracted respectively, and the feature values ​​are compared and verified. The feature values ​​are used to characterize the visual attributes of the security icon. In response to the consistency of the feature values, the verification result is determined to be a pass. In response to the inconsistency of the feature values, the verification result is determined to be a failure.

[0028] Optionally, the determination module is also used for: In response to the verification result being successful, the security icon is displayed; In response to the verification result being a failure, the pre-stored benchmark icon is displayed.

[0029] Optionally, the determination module is also used for: In response to the display strategy being the second display strategy, a pre-stored baseline icon corresponding to the security icon is obtained; Display the pre-stored benchmark icon.

[0030] Optionally, the vehicle safety icon display device may also include a first switching module: In response to the image enhancement function switching from on to off, the display strategy is switched from the second display strategy to the first display strategy.

[0031] Optionally, the vehicle safety icon display device may also include a second switching module: In response to detecting an abnormal state of the image enhancement function, the display strategy is switched to the first display strategy, and the abnormal state information is recorded.

[0032] A vehicle that performs the display method of any of the optional vehicle safety icons described above.

[0033] By employing the above technical solution, this disclosure provides a method for displaying vehicle safety icons. First, it monitors the image enhancement function status of the vehicle display device and the image quality adjustment information of the safety icon to be displayed. The image enhancement function status indicates whether the vehicle display device has enabled the image enhancement function, and the image quality adjustment information indicates whether the image quality-related parameters of the safety icon to be displayed have been adjusted. Second, based on the image enhancement function status and the image quality adjustment information, it determines a display strategy for the safety icon. The display strategy is to display the safety icon after verification or to call and display a pre-stored safety icon. Finally, based on the display strategy, the safety icon is displayed. This introduces a dual real-time monitoring mechanism for the on / off status of the vehicle display device's image enhancement function and whether the image quality-related parameters of the safety icon to be displayed have been adjusted. By capturing these two types of key scenario information, it provides reliable data support for the intelligent adaptation of subsequent display strategies, overcoming the deficiency of existing technologies that cannot distinguish whether changes in safety icon parameters are caused by image quality optimization or rendering errors. This design, based on dynamic display strategy determination using dual monitoring information, adapts to different scenarios, including no image enhancement, image enhancement with no adjustment of the safety icon, and image enhancement with adjusted safety icon. In scenarios without image enhancement or adjustment, it retains the post-rendering verification mechanism for the safety icon, effectively preventing security risks caused by rendering errors. In scenarios with image enhancement and adjustment, it avoids frequent false alarms caused by parameter adjustments being misinterpreted as rendering errors by switching adaptation strategies. This ensures that the safety icon display meets the preset functional safety level requirements without sacrificing the visual experience improvement brought by image enhancement. Furthermore, this method is implemented entirely through software logic configuration, requiring no modification to the vehicle display system's hardware architecture. It is flexibly compatible with different vehicle configurations with / without image enhancement enabled, significantly reducing R&D costs, testing cycles, and hardware modification costs during vehicle adaptation, and improving the versatility and scalability of the technical solution.

[0034] The above description is merely an overview of the technical solution disclosed herein. In order to better understand the technical means of this disclosure and to implement it in accordance with the contents of the specification, and to make the above and other objects, features and advantages of this disclosure more apparent and understandable, specific embodiments of this disclosure are described below. Attached Figure Description

[0035] Various other advantages and benefits will become apparent to those skilled in the art upon reading the following detailed description of preferred embodiments. The accompanying drawings are for illustrative purposes only and are not intended to limit the scope of this disclosure. Furthermore, the same reference numerals denote the same parts throughout the drawings. In the drawings: Figure 1 One of the flowcharts illustrating a method for displaying vehicle safety icons according to an embodiment of this disclosure is shown. Figure 2This is a second schematic flowchart illustrating the method for displaying vehicle safety icons according to an embodiment of the present disclosure; Figure 3 This is a third schematic flowchart illustrating the method for displaying vehicle safety icons according to an embodiment of the present disclosure; Figure 4 This is illustrated as a fourth flowchart of a method for displaying vehicle safety icons according to an embodiment of the present disclosure; Figure 5 This is a schematic diagram of a scenario illustrating a method for displaying vehicle safety icons according to an embodiment of this disclosure; Figure 6 This is a schematic diagram of the structure of a vehicle safety icon display device provided in an embodiment of this disclosure. Detailed Implementation

[0036] Exemplary embodiments of the present disclosure will now be described in more detail with reference to the accompanying drawings. While exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure may be implemented in various forms and should not be limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the disclosure to those skilled in the art.

[0037] In existing technologies, functional safety mechanisms are often used to ensure the correct display of safety icons (such as warning lights) on important displays such as vehicle instrument panels. A typical approach involves rendering the instrument panel image using the host's System-on-Chip (SOC) chip. However, the SOC chip has a QM (Quality Management) safety level and no specific safety level, making it impossible to directly guarantee that the safety icon display meets functional safety standards. Therefore, the host's Microcontroller Unit (MCU) chip (ASIL B level) is used to convert the Controller Area Network (CAN) signals from external devices into Inter-Integrated Circuit (IIC) signals for transmission to the instrument panel. The ASIL B (Automotive Safety Integrity Level B) functional safety chip within the instrument panel then ensures the correct display of the safety icons.

[0038] However, with the application of in-vehicle display image enhancement technology, the above solutions face serious challenges. Image enhancement functions dynamically optimize and adjust parameters such as color and brightness of the entire screen, including safety icons, directly altering the original pixel data after icon rendering. In this case, the image verification logic of the functional safety chip may misjudge non-faulty pixel differences as display errors, frequently triggering unnecessary fault-tolerant overlays. This not only interferes with the normal effect of the image enhancement function but may also affect display continuity due to unnecessary overlay actions, creating an irreconcilable contradiction between existing functional safety solutions and advanced display experiences.

[0039] To address the high false alarm rate in existing safety icon verification technologies, this disclosure provides a method for displaying vehicle safety icons, such as... Figure 1 As shown, Figure 1 A flowchart illustrating one of the vehicle safety icon display methods provided in this disclosure is shown. The method includes: S11. Monitor the image enhancement function status of the vehicle's display device and the image quality adjustment information of the safety icons to be displayed.

[0040] Among them, the image quality enhancement function status is used to indicate whether the image quality enhancement function of the vehicle display device is enabled. Its core includes the function enable status, the level of operation intensity, and the working mode. The image quality adjustment information is used to indicate whether the image quality-related parameters of the safety icon to be displayed have been adjusted, covering the determination of whether it has been adjusted, the type of adjustment parameter, the specific adjustment value, and the quantitative data of the adjustment range.

[0041] Specifically, by simultaneously monitoring information from two dimensions—the functional status of the device and the parameter status of the target object—a refined scene segmentation system is constructed: the operating scenarios of the vehicle display system are divided into three core scenarios: image enhancement not enabled, image enhancement enabled but safety icons not adjusted, and image enhancement enabled and safety icons adjusted, providing scene labels for the strategy decision in step S12.

[0042] Specifically, regarding the monitoring of the image enhancement function status: the host MCU can receive the function enable signal of the PQ module in real time via the CAN bus to determine whether the image enhancement function is in an "on" or "off" state; at the same time, the operating parameters of the PQ module are collected synchronously, including the operating intensity level and working mode (such as the economy mode focusing on low power consumption fine-tuning, and the motion mode enhancing contrast and sharpness optimization), and these parameters are associated with the safety icon display request and stored to provide a complete functional status background for subsequent scene determination. This is only an example and does not limit the specific monitoring process.

[0043] Specifically, regarding image quality adjustment information monitoring: After performing image quality optimization operations, the PQ module actively reports the security icon parameter adjustment log to the host MCU via the IIC communication interface. The log clearly indicates whether the security icon to be displayed has been adjusted; if an adjustment has occurred, it must list in detail the type of adjusted parameter (e.g., RGB value, transparency, and two other key parameters), the baseline value before adjustment, and the target value after adjustment. The adjustment magnitude is quantified by calculating "(adjusted value - baseline value before adjustment) / baseline value before adjustment × 100%" to ensure that parameter changes are quantifiable. This is only an example and does not limit the specific monitoring process.

[0044] In this embodiment, the existing technology, lacking this monitoring step, can only default to a single scene, leading to the misjudgment of parameter adjustments in the image enhancement scene as a rendering error. However, S11, through dual monitoring, realizes for the first time the correlation analysis between the image enhancement function's operating status and the security icon parameter status, enabling the system to identify the current scene attributes. By constructing a dual-dimensional linkage monitoring mechanism, it solves the core pain point of the existing technology's inability to distinguish whether changes in security icon parameters are caused by image enhancement or rendering errors, providing data support for balancing security and experience improvement. This step is the prerequisite for realizing a dynamic adaptation display strategy. Only by capturing the operating status of the image enhancement function and the parameter adjustment of the security icon can a reliable basis be provided for subsequent strategy decisions, fundamentally avoiding strategy misjudgments caused by missing information.

[0045] S12. Based on the image enhancement function status and image adjustment information, determine the display strategy for the security icon.

[0046] The display strategy involves either verifying the security icon before displaying it, or calling and displaying a pre-stored security icon.

[0047] Specifically, when the monitoring result indicates that the image enhancement function is off or on but the security icon has not been adjusted, it is determined to be a low-false alarm risk scenario, and the first display strategy (post-rendering verification display) is adopted to prevent security risks caused by SOC chip rendering errors by retaining the verification step.

[0048] For example, a low false alarm risk scenario is determined when the monitoring results meet any of the following conditions: the image quality enhancement function is "off," meaning there is no interference from any image quality parameter adjustments, and the functional safety verification logic is unaffected; or the image quality enhancement function is "on," but the image quality adjustment information shows that the adjustment indicator for the currently displayed safety icon is "none," or the adjustment range does not exceed a preset threshold (this threshold is based on the visual recognition requirements of the safety icon and the functional safety level setting). For this scenario, the first display strategy (post-rendering verification display) is adopted: the host SOC completes the rendering of the safety icon according to the normal process, and the instrument's functional safety chip initiates the image comparison verification process (which can use pixel-by-pixel comparison or feature value extraction comparison). Through consistency verification with the pre-stored benchmark icon, it prevents real errors such as pixel distortion, icon missingness, and color deviation that may occur during the rendering process of a QM-level SOC chip, ensuring that the safety icon display meets functional safety requirements while preserving the stability of the normal display process to the greatest extent.

[0049] When the monitoring results indicate that the image quality enhancement function is enabled and the security icon has been adjusted, it is determined to be a high-risk scenario for false alarms. The second display strategy (directly calling the pre-stored baseline icon for display) is adopted to avoid false alarms caused by parameter adjustments by skipping the rendering and verification process.

[0050] For example, when the monitoring results simultaneously meet the conditions of "image enhancement function being enabled" and "image adjustment information showing that the currently displayed safety icon has been adjusted (the adjustment range exceeds the preset threshold)," it is determined to be a high-risk scenario for false alarms. In this case, the image enhancement function's adjustment of core parameters such as the RGB value and transparency of the safety icon may cause the functional safety chip to misjudge normal parameter optimization as a rendering error. To address this scenario, a second display strategy (directly calling the pre-stored baseline icon for display) is adopted: the host MCU sends an instruction to the SOC to stop rendering the current safety icon, and at the same time sends a control signal to the instrument's functional safety chip to "skip verification and directly display the baseline icon"; the functional safety chip retrieves the pre-stored baseline icon corresponding to the current safety icon from its own non-volatile storage unit and directly overlays it onto the instrument screen via OSD (On-Screen Display). This avoids the false alarm problem caused by image quality adjustment, eliminates the need for additional rendering and verification operations, ensures that the safety icon is presented quickly and accurately, and fully preserves the optimization effect of the image enhancement function on other non-safety icons.

[0051] In this embodiment, by performing logical judgment on the two-dimensional information collected by S11, priority is given to ensuring the verification and prevention of rendering errors in non-image quality enhancement scenarios, and in image quality enhancement and adjustment scenarios, false alarms are avoided and experience optimization is retained. This achieves the dual goals of not downgrading the security level and not compromising the experience effect from the decision-making level, which is a key technical link to solve the compatibility problem between image quality enhancement and secure display.

[0052] S13. Display the security icon based on the display policy.

[0053] Specifically, security icons are displayed according to different display strategies. By designing differentiated execution processes for the two display strategies, the accuracy of security icon display is ensured, while also adapting to the experience requirements of different scenarios.

[0054] In one specific embodiment, the execution logic of the first display strategy is to perform post-render verification display: first, the host SOC renders the security icon, and then the security processing unit compares and verifies the rendered image with the pre-stored benchmark icon. If the verification passes, the rendered image is displayed; if the verification fails, it is immediately replaced with the pre-stored benchmark icon, thus solving the problem of preventing rendering errors in non-image quality enhancement scenarios. Simultaneously, during strategy execution, when an abnormality in the image quality enhancement function is detected, the display strategy is switched to the first display strategy, and the abnormality information is recorded.

[0055] For example, the execution logic of the first display strategy (post-rendering verification display) is as follows: Rendering Startup and Parameter Synchronization: The host MCU sends a "safety icon rendering command" to the QM-level SOC chip, synchronously transmitting the basic attribute parameters of the safety icon (such as size, coordinate position, and display level) to ensure that the SOC completes rendering according to the preset specifications. The SOC rendering process follows the automotive display standard, outputs a true-color image, and the pixel accuracy matches the physical resolution of the instrument display screen to avoid display distortion caused by resolution incompatibility; Rendering Image Transmission and Verification Preparation: After the SOC completes rendering, it transmits the rendered image data to the instrument functional safety chip through a high-speed transmission interface; After receiving the data, the functional safety chip first performs a preliminary verification of the image integrity (such as checking whether the frame header and frame tail identifiers and the total number of pixels in bytes match). After the verification is passed, it starts from its own... The corresponding pre-stored reference icon is retrieved from the non-volatile storage unit. This reference icon is functionally safe before leaving the factory and is stored in a chip with error verification and correction functions. It can automatically repair single-bit errors and detect double-bit errors to ensure the reliability of the reference data. Dual-mode comparison verification: The functional safety chip adopts a hybrid verification scheme of "feature value comparison as the main method and pixel point comparison as the auxiliary method": First, the core feature values ​​(such as contour features and key color area distribution features) of the rendered image and the reference icon are extracted and quickly compared. If the feature value similarity is ≥99.5% (preset safety threshold), the verification is directly judged to pass; if the feature value similarity is lower than the threshold, pixel point comparison is started one by one (only for the effective area of ​​the icon, not the entire frame image, to reduce the amount of computation). The comparison range covers key parameters such as RGB values ​​and transparency to ensure that no real rendering errors are missed. Verification passed (feature value comparison meets standards or pixel point comparison is consistent): The functional safety chip sends a "display rendered image" command to the instrument display driver module, and the driver module outputs the rendered image to the corresponding area of ​​the instrument screen according to preset coordinates; Verification failed (real errors such as missing pixels, color deviation, and contour distortion exist): The functional safety chip immediately triggers the "reference icon replacement mechanism", stops the display of the rendered image, switches to the pre-stored reference icon and displays it overlaid, and reports the rendering error fault code to the host MCU, records the error type, occurrence time and verification difference data, and provides a basis for subsequent diagnosis; During icon display, the functional safety chip continuously monitors the output status of the display driver module. If it detects display abnormalities such as image flickering or black screen, it immediately restarts the display process and calls the reference icon again to ensure that the safety icon is always visible and recognizable.

[0056] In one specific embodiment, the second display strategy execution logic directly calls the pre-stored baseline icon for display: the host SOC does not render the security icon, but only renders the non-security interface elements and performs image quality enhancement. The security processing unit directly calls the pre-stored baseline icon and overlays it onto the preset area. This avoids false positives in verification while preserving the image quality enhancement effect in the non-security area, thus solving the problem of user experience and security compatibility in image quality enhancement scenarios. The differentiated design of the two execution logics ensures the maximum achievement of security and user experience goals in different scenarios.

[0057] For example, the execution logic of the second display strategy (directly calling pre-stored reference icons) is as follows: Rendering instructions are issued in stages: The host MCU sends a "non-safety element rendering + safety icon rendering disabled" instruction to the SOC chip. The SOC only renders non-safety interface elements of the instrument panel (such as background layers, vehicle speed values, and entertainment information areas), and simultaneously starts the PQ image enhancement algorithm (adjusting parameters such as contrast, sharpness, and saturation) to ensure that the visual experience of non-safety areas is not affected. At the same time, the MCU sends a "directly call reference icons" instruction to the functional safety chip through a high-speed communication interface. This instruction contains key information such as the unique identifier of the safety icon, its display coordinates, and overlay level. Reference icon retrieval and preprocessing: Based on the unique identifier in the instruction, the functional safety chip quickly indexes the corresponding pre-stored reference icon from the non-volatile storage unit. The retrieval process is verified to ensure data integrity. Subsequently, the reference icon undergoes adaptation preprocessing, including adjusting the icon transparency (to maintain consistency with the brightness after image enhancement in non-safety areas to avoid visual abruptness) and calibrating the display. Coordinates (aligned to the instrument panel's preset safety icon display area, error ≤ 1 pixel) ensure that the superimposed image does not obscure other critical driving information; Dual-layer synchronous synthesis and display: The instrument panel display driver module adopts "dual-layer superimposition" technology. The bottom layer is a non-safety interface image rendered by the SOC and enhanced by PQ, and the top layer is a reference icon preprocessed by the functional safety chip. The superimposition is achieved without delay through a hardware synthesizer. During the synthesis process, the display priority of the reference icon is set to the highest level (above all non-safety elements), ensuring that even if the bottom image experiences a refresh anomaly, the safety icon can still be displayed normally; The final superimposed image is output to the instrument panel screen; Dynamic balance between image quality and safety: During the display process, the PQ module continuously reports the image quality enhancement parameters of the non-safety area to the MCU. If parameter adjustments may affect the visual contrast of the safety icon (e.g., excessive brightness in the non-safety area), the functional safety chip automatically fine-tunes the brightness transparency of the reference icon to ensure that the contrast between the safety icon and the background meets the visual requirements of the vehicle display device, preserving the image quality enhancement effect without affecting the recognition of the safety icon.

[0058] In this embodiment, the display strategy determined in S12 is transformed into a safe, compliant, and user-friendly actual display effect. For the first display strategy, the error correction capability for rendering errors is strengthened, and for the second display strategy, the real-time performance and user experience compatibility of icon display are strengthened. This ensures that no matter which strategy is adopted, the final displayed security icon can meet the preset functional security level requirements, while maximizing the preservation of the visual experience optimization brought by image quality enhancement.

[0059] In the above solution, firstly, the image enhancement function status of the vehicle display device and the image quality adjustment information of the safety icon to be displayed are monitored. The image enhancement function status indicates whether the vehicle display device has enabled the image enhancement function, and the image quality adjustment information indicates whether the image quality-related parameters of the safety icon to be displayed have been adjusted. Secondly, based on the image enhancement function status and the image quality adjustment information, the display strategy for the safety icon is determined. The display strategy is to display the safety icon after verification or to call and display a pre-stored safety icon. Finally, based on the display strategy, the safety icon is displayed. This introduces a dual real-time monitoring mechanism for the vehicle display device's image enhancement function being enabled / disabled and for whether the image quality-related parameters of the safety icon to be displayed have been adjusted. By capturing these two types of key scenario information, reliable data support is provided for the intelligent adaptation of subsequent display strategies, overcoming the deficiency of existing technologies that cannot distinguish whether changes in safety icon parameters are caused by image quality optimization or rendering errors. This design, based on dynamic display strategy determination using dual monitoring information, adapts to different scenarios, including no image enhancement, image enhancement with no adjustment of the safety icon, and image enhancement with adjusted safety icon. In scenarios without image enhancement or adjustment, it retains the post-rendering verification mechanism for the safety icon, effectively preventing security risks caused by rendering errors. In scenarios with image enhancement and adjustment, it avoids frequent false alarms caused by parameter adjustments being misinterpreted as rendering errors by switching adaptation strategies. This ensures that the safety icon display meets the preset functional safety level requirements without sacrificing the visual experience improvement brought by image enhancement. Furthermore, this method is implemented entirely through software logic configuration, requiring no modification to the vehicle display system's hardware architecture. It is flexibly compatible with different vehicle configurations with / without image enhancement enabled, significantly reducing R&D costs, testing cycles, and hardware modification costs during vehicle adaptation, and improving the versatility and scalability of the technical solution.

[0060] In some embodiments, such as Figure 2 As shown, the image quality adjustment information includes the adjustment range of image quality-related parameters. Based on the image quality enhancement function status and the image quality adjustment information, the display strategy for the security icon is determined, including: S121. In response to the image enhancement function status indication that the image enhancement function is off, or the image quality adjustment information indicating that the security icon to be displayed has not been adjusted, determine the display strategy as the first display strategy.

[0061] The first display strategy is to display the security icon after verification.

[0062] Specifically, in scenario 1, the image quality enhancement function is turned off: At this time, the vehicle display system does not perform any image quality optimization operations, and the safety icon parameters are completely determined by the rendering module (such as the SOC chip). There is a risk of rendering errors (such as pixel deviation and shape distortion), which need to be identified and corrected through the verification process of the first strategy.

[0063] Scenario 2: Image enhancement function is enabled but security icon is not adjusted: Image enhancement only optimizes non-security areas (such as background and normal icons), and the security icon parameters have not changed. The verification process will not make a false judgment due to image enhancement, so security can still be guaranteed through verification, while retaining the image enhancement effect of non-security areas.

[0064] Both of the above scenarios fall under the category of verification without risk and security that needs to be guaranteed. Therefore, they are uniformly mapped to the first display strategy, which not only ensures the accuracy of the security icon display, but also avoids system fluctuations caused by unnecessary strategy switching, thus achieving a balance between security and system stability.

[0065] For example, the determination is primarily driven by the instrument's ASILB-level functional safety chip. Logical operations are performed by receiving the image enhancement function enable signal and the safety icon adjustment status signal transmitted from the host MCU. If the enable signal is "0" (off), or the adjustment status signal is "not adjusted" (e.g., the flag bit is "0"), the first display strategy is triggered. The determination process is implemented through hardware logic circuitry with a delay of ≤5ms to ensure real-time performance. In the parameter adjustment log reported in real-time by the image enhancement module (e.g., the PQ chip), the adjustment status bit corresponding to the unique identifier of the safety icon to be displayed (e.g., ID 0x001) is "not adjusted," and there are no records of changes to any image quality-related parameters (RGB values, transparency, etc.). Simultaneously, the host MCU performs CRC verification on the reported log to ensure the accuracy of the status information.

[0066] In this embodiment, by clearly defining two scenarios without image quality interference—either the function is turned off or the icon is not adjusted—the system ensures that the security mechanism of displaying after verification is retained even when there is no risk of false alarms. This not only avoids the security vulnerabilities of the single strategy in existing technologies in non-enhanced scenarios, but also provides a basic security safety net for the compatibility of image quality enhancement and secure display. It ensures that the security icon display can still prevent rendering errors through verification when there is no image quality enhancement interference, thus meeting the preset functional security level requirements.

[0067] S122, In response to the image enhancement function status indication that the image enhancement function is enabled and the image adjustment information indicates that the security icon to be displayed is adjusted, determine the display strategy as the second display strategy.

[0068] The second display strategy is to call and display a pre-stored security icon.

[0069] Specifically, after the scene feature image quality enhancement function is enabled, the parameters of the safety icons are adjusted (such as brightening the color and increasing the transparency) to optimize the visual experience. This adjustment is a normal optimization of the system design, not a rendering error, but it will cause the rendered image to be inconsistent with the parameters of the pre-stored baseline icon. The existing technology uses the first display strategy, and the verification process will misjudge the parameter difference as a rendering error, triggering the replacement of the baseline icon. This not only destroys the overall effect of image quality enhancement, but may also confuse the driver with the frequently changing icons. The second display strategy skips rendering (the host SOC does not render the safety icons) and directly calls the baseline icon. This avoids the misjudgment in the verification process, ensures the accuracy of the safety icon display, and retains the optimization effect of image quality enhancement on non-safe areas.

[0070] For example, the functional safety chip receives the "image enhancement enable signal (1 indicates enabled)" and "safety icon adjustment status signal (1 indicates adjusted)" transmitted by the host MCU. At the same time, it verifies the adjustment parameter log reported by the image enhancement module, which must include the ID of the current safety icon, the type of parameter adjusted (such as RGB value), and the specific adjustment value (such as R value adjusted from 255 to 240). After logical "AND operation", it is determined to be a high false alarm risk scenario and triggers the second display strategy. The functional safety chip sends a "prohibit rendering safety icon" instruction to the host. The host SOC only renders non-safe areas (such as tachometer, navigation interface) and executes the image enhancement algorithm. The area corresponding to the safety icon is reserved with blank or transparent layers to avoid conflict with the subsequently superimposed reference icon.

[0071] In this embodiment, when the image quality enhancement actively adjusts the safety icon parameters, if verification is still performed, normal parameter optimization will be misjudged as a rendering error, leading to frequent icon replacements and a damaged display experience. S122 identifies this high-risk scenario through logic and directly switches to a strategy of skipping rendering and directly calling the baseline icon, thereby avoiding false alarms at the source. At the same time, it ensures that the safety icon display meets the functional safety level requirements, achieving the dual goals of not compromising the image quality enhancement experience and not lowering the safety display standard.

[0072] S123, in response to the fact that the adjustment range in the image quality adjustment information does not exceed the preset adjustment threshold, the display strategy is determined to be the first display strategy.

[0073] Specifically, the adjustment range of safety icons for image enhancement varies. Minor adjustments (such as color deviation ≤5% and transparency deviation ≤10%) will not cause significant differences between the rendered image and the baseline icon. The deviation tolerance threshold in the verification process can cover this range and will not cause misjudgment. However, large adjustments (such as color deviation >5%) will exceed the tolerance threshold and lead to misjudgment. Without this rule, even minor adjustments will trigger the second display strategy, which not only increases the frequency of calling the pre-stored icon storage unit, but may also cause icon display to flicker due to frequent strategy switching, affecting the driver's experience. By judging whether the adjustment range exceeds the preset threshold, minor adjustment scenarios are still mapped to the first display strategy, which not only preserves the safety guarantee of the verification process, but also avoids unnecessary strategy switching.

[0074] For example, when the image enhancement module adjusts the parameters of the safety icon, it records the parameter values ​​before and after the adjustment in real time and calculates the adjustment range according to a preset algorithm. The calculation result is reported to the host MCU along with the adjustment parameter log. The preset adjustment threshold is set comprehensively based on functional safety level requirements, verification deviation tolerance range, and image enhancement algorithm characteristics. It adopts a configurable design and can be adapted to different vehicle models through vehicle software upgrades. After receiving the adjustment range data transmitted by the host MCU, the functional safety chip compares it with the preset adjustment threshold. If the amplitude of all adjustment parameters does not exceed the corresponding threshold, it is determined to be a minor adjustment scenario, triggering the first display strategy. If the amplitude of any parameter exceeds the threshold, the second display strategy is triggered. The judgment process is executed by hardware logic circuits to ensure the real-time performance and reliability of the judgment results and avoid policy misjudgment caused by software delays.

[0075] In this embodiment, S123 is a supplementary triggering rule for the first display strategy. Not all scenarios where image enhancement is enabled and icons are adjusted need to switch to the second strategy. Switching is only required when the adjustment is sufficient to cause a false judgment in the verification. This not only preserves the verification security in scenarios with slight adjustments, but also reduces the system resource consumption caused by strategy switching, making the entire strategy decision system more flexible and practical, and adapting to the parameter adjustment characteristics of different image enhancement algorithms.

[0076] S124, in response to the image enhancement function being switched from on to off, the display strategy is switched from the second display strategy to the first display strategy.

[0077] Specifically, during vehicle operation, users may manually disable the image enhancement function (e.g., through vehicle settings), or the system may automatically disable the function due to malfunction or low-power mode, causing the original high-false-alarm-risk scenario to transform into a low-false-alarm-risk scenario. If the second display strategy is still used after the function is disabled, the host SOC will not render the security icon, and the verification function will not be restored. If the pre-stored baseline icon storage unit malfunctions (e.g., data corruption), the security icon will not be displayed or will be displayed incorrectly, causing serious security risks. Immediately after the function is disabled, the system switches to the first display strategy to restore the rendering + verification security mechanism. This not only prevents the risk of rendering errors but also ensures that the rendered image of the security icon is consistent with the image of the non-safe area, avoiding security vulnerabilities or a decline in user experience caused by policy fixation.

[0078] For example, the host MCU monitors the function enable signal in real time through a communication interface (such as SPI) with the image enhancement module. When it detects that the enable signal changes from "1 (on)" to "0 (off)," it immediately generates a function shutdown switching event and sends a policy switching request to the functional safety chip via a secure communication protocol, along with information such as the switching timestamp and the currently displayed safety icon ID. After receiving the switching request, the functional safety chip immediately performs the following operations: sends a command to the host SOC to allow rendering of the safety icon, notifying the SOC to restore the rendering function of the safety icon; enables the image verification function, preparing to receive the image data rendered by the SOC; stops the execution of the current second display strategy, and if the baseline icon is being displayed, keeps it displayed until the newly rendered image verification passes. The switching process involves: synchronously updating the value of the strategy status register; a seamless transition design during the switching process, where the original baseline icon continues to be displayed while the SOC renders the safety icon and completes the verification, avoiding blank or flickering icons; once the new rendered image passes verification, the display immediately switches to the rendered image; if the verification fails, the baseline icon continues to be displayed and fault information is recorded, ensuring that the driver has no noticeable perception while meeting the functional safety standards for the switching process; if communication interruption, command loss, or other abnormalities occur during the switching process, the functional safety chip automatically triggers a safety degradation mechanism, temporarily maintaining the second display strategy and sending a fault alarm signal to the vehicle controller, and re-executing the switching process after the abnormality is resolved, ensuring that the display of the safety icon is uninterrupted and error-free during the switching process.

[0079] In this embodiment, the additional rule is a dynamic linkage switching mechanism for display strategies. Its essence is to realize real-time synchronization between functional state changes and strategy adjustments. Existing technologies lack a dynamic strategy switching mechanism. If the second strategy is still used after the image enhancement function is turned off, the security icon will lose its verification guarantee, and there is a security risk that rendering errors cannot be identified. This rule, by constructing a linkage relationship between functional state and strategy, ensures that the strategy adapts immediately after the scene changes. It retains the security verification in non-enhanced scenes and maintains the smoothness of strategy switching.

[0080] In the above scheme, S121 uses OR logic to explicitly identify low false alarm risk scenarios (image enhancement off or security icon not adjusted) and triggers the first display strategy. This retains the image verification step in non-image enhancement interference scenarios, effectively preventing security risks caused by host SOC (QM level) rendering errors, while maintaining the consistency of the display strategy and avoiding unnecessary strategy switching. S122 uses AND logic to identify high false alarm risk scenarios (image enhancement on and security icon adjusted) and triggers the second display strategy. This avoids verification misjudgments caused by image enhancement adjustments from the decision source, solving the core pain point of frequent icon replacement and image quality experience destruction in existing technologies, and ensuring the compatibility and coexistence of security display and image enhancement functions. S123 introduces adjustment... The threshold judgment further subdivides scenarios where image enhancement is enabled and icons are adjusted. The second strategy is only switched when the adjustment exceeds the threshold, avoiding unnecessary strategy switching caused by minor parameter fluctuations, reducing system resource consumption and display fluctuations. At the same time, the configurability of the preset threshold adapts to the hardware performance, functional safety level, and image enhancement algorithm characteristics of different vehicle models, improving the versatility of the solution. The collaboration of these three elements ensures that the display of safety icons in various scenarios meets ASIL B-level functional safety requirements, while also taking into account the image enhancement experience and system stability. In addition, the standardized logical judgment rules reduce the complexity of software development, allowing adaptation to different vehicle configurations without modifying the hardware architecture, significantly reducing R&D and adaptation costs.

[0081] In some embodiments, such as Figure 3 As shown, based on the display policy, security icons are displayed, including: S131. In response to the display strategy being the first display strategy, the rendered security icon is compared and verified with the pre-stored baseline icon to obtain the verification result.

[0082] Specifically, although the scenarios adapted to the first display strategy do not have image quality adjustment interference, the SOC chip (QM level) may cause rendering errors such as pixel deviation, shape distortion, and partial missing parts in the safety icons due to hardware fluctuations (such as voltage instability) and software vulnerabilities (such as abnormal rendering algorithms). If displayed directly, it will mislead the driver and cause safety risks. The pre-stored reference icon is a standard image certified by ASILB level (stored in a safe storage unit) and represents the correct reference standard. By comparing the rendered safety icon with the reference icon, the difference between the two can be captured. If the difference exists, it is determined that the rendering is wrong; if there is no difference, the rendering is determined to be qualified.

[0083] Specifically, the feature values ​​of the rendered security icon and the pre-stored baseline icon are extracted and compared for verification. The feature values ​​are used to characterize the visual attributes of the security icon. If the feature values ​​are consistent, the verification result is determined to be passed; if the feature values ​​are inconsistent, the verification result is determined to be failed. Among them, the feature value is a quantified value extracted from the security icon (rendered icon / pre-stored baseline icon) through professional image algorithms. The "visual attributes of the security icon" it represents is not a single dimension, but rather the core features inherent to the icon that do not change with the adjustment of non-essential parameters. Specifically, it can include: shape and outline features: such as the ratio of the bounding rectangle of the icon, the relative distance of key vertices, edge gradient direction, etc., which are the core identifiers of the icon and are not affected by the fine adjustment of RGB values; color distribution features: such as the mean and variance of RGB channels, the proportion of core color areas (such as the red channel value distribution range of a red alarm light), rather than the RGB value of a single pixel, which can tolerate the minor color optimization brought by the PQ function; structure and detail features: such as the pixel distribution entropy of key information areas of the icon, feature point matching rate (such as the relative position of the "warning symbol" and the background in the alarm light icon, and the distribution of detail textures), ensuring that the icon is free of missing parts and distortions.

[0084] For example, the functional safety chip compares two sets of feature values ​​(rendered icon feature value and baseline icon feature value) dimension by dimension. The comparison logic is not absolute equality, but based on a preset similarity threshold (such as 99.5%): the similarity between the two sets of feature values ​​is calculated (such as through algorithms such as Euclidean distance and cosine similarity). If the similarity is greater than or equal to the preset threshold, it is determined that the "feature values ​​are consistent"; if the similarity is less than the preset threshold, it is determined that the "feature values ​​are inconsistent", and the difference dimensions (such as excessive deviation in color feature value or mismatch in contour feature) will be recorded simultaneously to provide a basis for subsequent fault diagnosis.

[0085] In this embodiment, a rendering error identification barrier is constructed for low false alarm risk scenarios (image enhancement is off or security icons are not adjusted). Since the image rendered by the SOC chip cannot directly meet ASILB level security requirements, step S131 uses a mechanism of comparing the rendered image with a security baseline icon to place the rendering result of the non-security-grade chip within a security verification system, achieving a combined guarantee of non-security rendering and security verification. This step ensures that even in scenarios without image enhancement interference, the security icon, even if rendered by a non-security-grade chip, can still pass verification to eliminate errors and ultimately meet the preset functional safety level requirements.

[0086] S132. Based on the verification result, display the security icon.

[0087] Specifically, in response to a successful verification result, meaning the rendered safety icon matches the baseline icon, indicating that the SOC chip rendering is error-free, the rendered icon, i.e. the safety icon, is displayed directly to ensure the consistency of the display experience. The rendered icon is part of the overall interface rendered by the SOC and is completely matched with the style and color scheme of non-safe areas (such as the tachometer and navigation), avoiding the icon and interface inconsistency problem caused by displaying the baseline icon.

[0088] If the verification result is "failed," indicating an error in the rendered icon, the display of the rendered icon will be immediately stopped and replaced with a pre-stored baseline icon. The pre-stored baseline icon is a standard image that has been certified for safety. Even if the rendering is incorrect, the replacement will ensure that the driver sees an accurate safety warning, minimizing the driving risks caused by incorrect display.

[0089] In this embodiment, the verification result of S131 is transformed into a secure, compliant, and user-friendly display output. This avoids the disjointed experience caused by directly displaying the baseline icon when verification passes (the rendered icon is more consistent with the overall interface), while ensuring that the verification result can be quickly replaced with a secure baseline icon, eliminating the risk of displaying incorrect icons. This step ensures that in scenarios with low false alarm risk, the display of security icons meets ASILB requirements and has good visual consistency.

[0090] The above solution, through a collaborative design of verification and hierarchical display, achieves a deep balance between security and display experience in scenarios with low false alarm risk, offering multiple significant benefits: S131 uses an ASIL B-level functional safety chip as the execution body, employing a dual comparison mechanism of pixel-by-pixel and key areas, combined with a pre-stored benchmark icon certified by security, to identify errors such as pixel deviations and shape distortions caused by hardware fluctuations and software vulnerabilities during the host SOC (QM level) rendering process. Furthermore, the configurable deviation tolerance threshold adapts to minor fluctuations under complex operating conditions. The integrity verification of data transmission and the verification process further eliminates interference risks, fundamentally ensuring the accuracy of the security icon display and filling the security gap in non-security-grade chip rendering; S132 implements hierarchical display based on the verification results, directly displaying the rendered icon when verification passes, ensuring its integration with the overall interface. The coordination of style and color avoids visual fragmentation caused by unnecessary replacement of baseline icons, improving display continuity. When verification fails, it immediately switches to the pre-stored baseline icon. Through high-priority layer overlay and a fast response mechanism, it eliminates the safety hazard of incorrect icons misleading the driver, forming a safety closed loop of recognition error-instant correction. In addition, the two-step hardware-accelerated verification, smooth switching transition, and adaptable size and color design not only meet the functional safety standards' requirements for real-time performance and accuracy, but also conform to the driver's recognition habits. At the same time, the standardized execution logic and the comprehensive exception handling and logging mechanism support the adaptation of display hardware configurations for different vehicle models.

[0091] In some embodiments, such as Figure 4 As shown, based on the display policy, security icons are displayed, and this also includes: S133. In response to the display strategy being the second display strategy, obtain the pre-stored baseline icon corresponding to the security icon.

[0092] Specifically, by establishing a mapping relationship between "safety icon identifier - baseline icon", it is ensured that the retrieved baseline icon is consistent with the safety icon to be displayed. The scene adaptation logic is as follows: In the scene adapted by the second display strategy, the safety icon rendered by SOC has been adjusted by image quality enhancement and cannot be used as a basis for safe display through verification. Therefore, it is necessary to switch to the pre-stored baseline icon. The pre-stored baseline icon is a standard image that has been certified by functional safety. Its parameters (color, shape, size) fully meet the safety display requirements and are not affected by image quality enhancement. Each safety icon (such as brake alarm, tire pressure alarm) has a unique identifier (such as ID, name code). A one-to-one mapping with the pre-stored baseline icon is established through this identifier to avoid the safety hazard of retrieving the wrong icon and to ensure that the safety prompts obtained by the driver are completely consistent with the actual fault / state of the vehicle.

[0093] In this embodiment, after adjusting the security icon parameters for image quality enhancement, the image rendered by the host SOC (QM level) differs from the pre-stored baseline icon. Performing verification would lead to false positives. Therefore, the rendering + verification process is replaced by directly retrieving the pre-stored baseline icon, thus avoiding false positives at the source. This step ensures that in image quality enhancement scenarios, it eliminates the need to rely on potentially misleading rendered images while ensuring that the security icon meets ASIL B functional safety requirements through the pre-stored baseline icon, and simultaneously preserves the optimization effects of image quality enhancement on non-safe areas.

[0094] S134. Display the pre-stored baseline icon.

[0095] Specifically, by designing differentiated display logic, the visibility and real-time performance of safety icons are balanced with the overall interface experience. The display of the baseline icon must meet three major safety requirements: accuracy: the displayed icon is consistent with the actual vehicle status; visibility: the icon is clearly identifiable and not obscured by the enhanced background; real-time performance: the delay from triggering display to icon presentation is minimal, meeting the functional safety standards' real-time requirements for safety alarm information. The display method uses image overlay rather than complete replacement, only overlaying the baseline icon onto the preset safety icon area of ​​the instrument panel, without affecting other interface elements after image enhancement (such as the tachometer, speedometer, and navigation map), ensuring the continuity of the overall visual experience. This retains the optimization effects of image enhancement on non-safety areas (such as color brightening and contrast optimization) while avoiding interface fragmentation caused by displaying the baseline icon.

[0096] In this embodiment, the pre-stored reference icon retrieved in S133 is output to the vehicle display device in a safe, compatible, and user-adaptive manner. This ensures that the reference icon meets ASIL B safety requirements without compromising the optimization effect of the image enhancement function on unsafe areas, thus overcoming the pain point of the incompatibility between safety verification and image enhancement in existing technologies. This step ensures that the driver can obtain timely and accurate safety warning information while enjoying the visual improvement brought by image enhancement.

[0097] In the above solution, the collaborative logic of acquiring pre-stored benchmark icons and compatible display achieves deep compatibility between safety assurance and experience improvement in image enhancement scenarios, and has multiple significant benefits: On the one hand, S133 ensures that the acquired benchmark icons meet ASIL B-level functional safety requirements by mapping the unique identifier of the safety icon to the pre-stored benchmark icon, high-priority retrieval of the secure storage unit, and data integrity verification. This eliminates security risks such as icon errors and matching deviations from the data source level and avoids false alarms caused by image enhancement adjustments. At the same time, the cache preloading and hierarchical retrieval mechanism greatly improves the efficiency of icon acquisition, laying the foundation for real-time display. On the other hand, S134 adopts a high-priority independent layer overlay display method, which ensures that the benchmark icon is clearly visible and not obscured in the complex interface after image enhancement, without replacing or destroying the image optimization effect of non-safe areas, ensuring that the driver receives accurate safety prompts in a timely manner.

[0098] Figure 5 This is a schematic diagram illustrating a scenario of a method for displaying vehicle safety icons provided in an embodiment of this disclosure, such as... Figure 5 As shown, the vehicle system layer is the trigger source of the entire process. When the vehicle detects a fault alarm, abnormal tire pressure, braking system warning, or other conditions that require the display of a safety icon, it will send a "safety icon display request" to the downstream host decision layer. This is the only prerequisite for starting the entire link and determines "whether a safety icon needs to be displayed".

[0099] The core unit of the host decision layer is the host MCU. After receiving the display request from the whole vehicle system, it first detects the current status of the image quality enhancement (PQ) function, whether the safety icon has been adjusted by the PQ function, and other key information. Then, based on this information, it determines the scene type (low risk / high risk) and issues the corresponding execution instructions to the downstream rendering layer. It is the core decision node connecting "instruction triggering" and "rendering execution", and determines "which strategy to use to display the safety icon".

[0100] The rendering layer is the core component ensuring the accurate display of safety icons. It consists of two key units: the host SOC and the functional safety chip. The host SOC is responsible for receiving instructions from the MCU and executing the visual rendering of the safety icons (such as the visual generation of size, color, and display position). The functional safety chip, on the other hand, undertakes the core responsibility of safety protection. On the one hand, it retrieves the "pre-stored reference icon" (as a reference standard for the correctness of the safety icon) from its own non-volatile storage unit. On the other hand, it performs feature value comparison and verification on the icons rendered by the SOC to avoid problems such as rendering errors and PQ function interference that may cause distortion of safety information, and ensure that the rendering results meet functional safety requirements.

[0101] Finally, the safety icon signal, after verification by the rendering layer, is transmitted to the instrument display module of the display terminal layer, presenting the accurate safety icon to the driver and completing the closed loop of the entire process. This architecture, by hierarchically decomposing the responsibilities of each unit, clarifies the flow logic from instruction to display and highlights the verification and protection role of the functional safety chip. It is a simplified and standardized presentation of the vehicle safety icon display technology solution in the patent document.

[0102] In addition, such as Figure 6 As shown, Figure 6 This is a schematic diagram of the structure of a vehicle safety icon display device 600 provided in an embodiment of this disclosure. The device includes: The monitoring module 601 is used to monitor the image enhancement function status of the vehicle display device and the image quality adjustment information of the safety icon to be displayed. The image enhancement function status is used to indicate whether the image enhancement function of the vehicle display device is enabled, and the image quality adjustment information is used to indicate whether the image quality-related parameters of the safety icon to be displayed have been adjusted. The determination module 602 is used to determine the display strategy of the security icon based on the image quality enhancement function status and image quality adjustment information. The display strategy is to display the security icon after verification or to call and display the pre-stored security icon. Display module 603 is used to display security icons based on display policies.

[0103] In the above solution, firstly, the image enhancement function status of the vehicle display device and the image quality adjustment information of the safety icon to be displayed are monitored. The image enhancement function status indicates whether the vehicle display device has enabled the image enhancement function, and the image quality adjustment information indicates whether the image quality-related parameters of the safety icon to be displayed have been adjusted. Secondly, based on the image enhancement function status and the image quality adjustment information, the display strategy for the safety icon is determined. The display strategy is to display the safety icon after verification or to call and display a pre-stored safety icon. Finally, based on the display strategy, the safety icon is displayed. This introduces a dual real-time monitoring mechanism for the vehicle display device's image enhancement function being enabled / disabled and for whether the image quality-related parameters of the safety icon to be displayed have been adjusted. By capturing these two types of key scenario information, reliable data support is provided for the intelligent adaptation of subsequent display strategies, overcoming the deficiency of existing technologies that cannot distinguish whether changes in safety icon parameters are caused by image quality optimization or rendering errors. This design, based on dynamic display strategy determination using dual monitoring information, adapts to different scenarios, including no image enhancement, image enhancement with no adjustment of the safety icon, and image enhancement with adjusted safety icon. In scenarios without image enhancement or adjustment, it retains the post-rendering verification mechanism for the safety icon, effectively preventing security risks caused by rendering errors. In scenarios with image enhancement and adjustment, it avoids frequent false alarms caused by parameter adjustments being misinterpreted as rendering errors by switching adaptation strategies. This ensures that the safety icon display meets the preset functional safety level requirements without sacrificing the visual experience improvement brought by image enhancement. Furthermore, this method is implemented entirely through software logic configuration, requiring no modification to the vehicle display system's hardware architecture. It is flexibly compatible with different vehicle configurations with / without image enhancement enabled, significantly reducing R&D costs, testing cycles, and hardware modification costs during vehicle adaptation, and improving the versatility and scalability of the technical solution.

[0104] In one specific embodiment, the determining module 602 is further configured to: In response to the image enhancement function status indicator indicating that the image enhancement function is off, or the image quality adjustment information indicating that the security icon to be displayed has not been adjusted, the display strategy is determined to be the first display strategy, which is to display the security icon after verification; In response to the image enhancement function status indication that the image enhancement function is enabled and the image adjustment information indicates that the security icon to be displayed has been adjusted, the display strategy is determined to be the second display strategy, which is to call and display the pre-stored security icon.

[0105] In one specific embodiment, the determining module 602 is further configured to: In response to the display strategy being the first display strategy, the rendered security icon is compared and verified with the pre-stored baseline icon to obtain the verification result. Based on the verification result, a security icon is displayed.

[0106] In one specific embodiment, the determining module 602 is further configured to: The feature values ​​of the rendered security icon and the pre-stored baseline icon are extracted separately, and the feature values ​​are compared and verified. The feature values ​​are used to characterize the visual attributes of the security icon. If the feature values ​​are consistent, the verification result is determined to be a pass. In response to inconsistent feature values, the verification result is determined to be a failure.

[0107] In one specific embodiment, the determining module 602 is further configured to: A security icon is displayed in response to a successful verification result. If the verification result is "failed", the pre-stored benchmark icon will be displayed.

[0108] In one specific embodiment, the determining module 602 is further configured to: In response to the display strategy being the second display strategy, obtain the pre-stored baseline icon corresponding to the security icon; Display the pre-saved baseline icon.

[0109] In one specific embodiment, the vehicle safety icon display device 600 further includes a first switching module: In response to the image enhancement function being switched from on to off, the display strategy will switch from the second display strategy to the first display strategy.

[0110] In one specific embodiment, the vehicle safety icon display device 600 further includes a second switching module: In response to detecting an abnormal state of the image enhancement function, the display strategy will be switched to the first display strategy, and the abnormal state information will be recorded.

[0111] Regarding the apparatus in the above embodiments, the specific manner in which each unit performs its operation has been described in detail in the embodiments related to the method, and will not be elaborated upon here.

[0112] This embodiment also provides a vehicle that performs the vehicle safety icon display method as described above, thus achieving the same effect as the above implementation method.

[0113] The beneficial effects of the above embodiments can be referred to the beneficial effects of the corresponding methods provided above, and will not be repeated here.

[0114] Through the above description of the embodiments, those skilled in the art will understand that, for the sake of convenience and brevity, only the division of the above functional modules is used as an example. In actual applications, the above functions can be assigned to different functional modules as needed, that is, the internal structure of the device can be divided into different functional modules to complete all or part of the functions described above.

[0115] In the embodiments provided in this disclosure, it should be understood that the disclosed apparatus and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of modules or units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another device, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be through some interfaces; the indirect coupling or communication connection of devices or units may be electrical, mechanical, or other forms.

[0116] In the description of this disclosure, it should be understood that if the terms "upper", "lower", "front", "rear", "left" and "right" are used to indicate the orientation or positional relationship based on the orientation or positional relationship shown in the drawings, they are only for the convenience of describing the present invention and simplifying the description, and do not indicate or imply that the position or element referred to must have a specific orientation, or be constructed and operated in a specific orientation, and therefore should not be construed as a limitation of this disclosure.

[0117] It should be noted that, in this document, relational terms such as "first" and "second" are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. It should also be noted that the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such process, method, article, or apparatus. Unless otherwise specified, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes the element.

[0118] The above are merely embodiments of this disclosure and are not intended to limit the scope of this disclosure. Various modifications and variations can be made to this disclosure by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this disclosure should be included within the scope of the claims of this disclosure.

Claims

1. A method for displaying vehicle safety icons, characterized in that, The method includes: The system monitors the image enhancement function status of the vehicle display device and the image quality adjustment information of the safety icon to be displayed. The image enhancement function status indicates whether the image enhancement function of the vehicle display device is enabled, and the image quality adjustment information indicates whether the image quality-related parameters of the safety icon to be displayed have been adjusted. Based on the image quality enhancement function status and the image quality adjustment information, a display strategy for the security icon is determined. The display strategy is to display the security icon after verification or to call and display a pre-stored security icon. The security icon is displayed based on the aforementioned display strategy.

2. The display method according to claim 1, characterized in that, The step of determining the display strategy for the security icon based on the image enhancement function status and the image adjustment information includes: In response to the image enhancement function status indicating that the image enhancement function is off, or the image quality adjustment information indicating that the security icon to be displayed has not been adjusted, the display strategy is determined to be the first display strategy, which is to display the security icon after verification; In response to the image enhancement function status indicating that the image enhancement function is enabled and the image quality adjustment information indicating that the security icon to be displayed is adjusted, the display strategy is determined to be the second display strategy, which is to call and display the pre-stored security icon.

3. The display method according to claim 2, characterized in that, The image quality adjustment information includes the adjustment range of image quality-related parameters. The step of determining the display strategy for the security icon based on the image quality enhancement function status and the image quality adjustment information also includes: In response to the fact that the adjustment range does not exceed a preset adjustment threshold, the display strategy is determined to be the first display strategy.

4. The display method according to claim 2, characterized in that, The step of displaying the security icon based on the display strategy includes: In response to the first display strategy, the rendered security icon is compared and verified with the pre-stored baseline icon to obtain the verification result. Based on the verification result, the security icon is displayed.

5. The display method according to claim 4, characterized in that, The step of comparing and verifying the rendered security icon with a pre-stored baseline icon to obtain the verification result includes: The feature values ​​of the rendered security icon and the pre-stored baseline icon are extracted respectively, and the feature values ​​are compared and verified. The feature values ​​are used to characterize the visual attributes of the security icon. In response to the consistency of the feature values, the verification result is determined to be a pass. In response to the inconsistency of the feature values, the verification result is determined to be a failure.

6. The display method according to claim 4, characterized in that, The step of displaying the security icon based on the verification result includes: In response to the verification result being successful, the security icon is displayed; In response to the verification result being a failure, the pre-stored benchmark icon is displayed.

7. The display method according to claim 2, characterized in that, The step of displaying the security icon based on the display strategy includes: In response to the display strategy being the second display strategy, a pre-stored baseline icon corresponding to the security icon is obtained; Display the pre-stored benchmark icon.

8. The display method according to claim 2, characterized in that, The method further includes: In response to the image enhancement function switching from on to off, the display strategy is switched from the second display strategy to the first display strategy.

9. The display method according to claim 1, characterized in that, The method further includes: In response to detecting an abnormal state of the image enhancement function, the display strategy is switched to the first display strategy, and the abnormal state information is recorded.

10. A vehicle, characterized in that, The vehicle performs the method of displaying the vehicle safety icon as described in any one of claims 1 to 9.

Images