Method for establishing safety functions in a vehicle, as well as corresponding device for controlling and displaying said safety functions

Abstract

The invention relates to a method for establishing safety functions in a vehicle, which includes a preset (1) and an activation switch (15). The activation switch (15) can be operated by the vehicle crew and is preferably located on a device designed for this purpose. In contrast, the preset (1) cannot be operated by the crew and is operated by the manufacturer or a maintenance technician before the start of the mission. By means of the preset (1), the vehicle's safety functions are activated, and it is determined which of them can be deactivated. Subsequently, by means of the activation switch (15), the crew can deactivate these functions. The safety functions, along with the operating mode determined by the preset (1), are displayed on the corresponding device.

Description

Method for establishing safety functions in a vehicle, as well as corresponding device for controlling and displaying said safety functions The present invention relates to a method for establishing safety functions in a vehicle, as well as to a corresponding device for controlling and displaying said safety functions. Vehicles, especially military vehicles, require appropriate methods and devices to represent different scenarios and operating modes. The simplest scenario is the vehicle's operation in peacetime, designed exclusively for those times, and its use in defensive operations in case of attack. The safety of such a system is intrinsically linked to the concept of a secure state. Weapon systems are characterized by their purpose of causing harm to the enemy. This intentional harm is an integral part of the proper use of the system. As soon as this potential damage endangers company personnel, other people, or third parties unrelated to the company, it becomes a risk. Both the manufacturer and the operator must minimize this risk as much as possible. Safety features are typically used for this purpose. The corresponding safety functions include, for example, monitoring the system during operation, to achieve the predefined safe state when certain predefined events occur, such as component failures, signal interruptions, etc. The various scenarios involved present a challenge in this case. For example, in peacetime, a safe state could be defined as the immediate immobilization of the turret or armament of a combat vehicle. This is relatively easy to implement technically. However, this also implies that the same state will occur during defensive operations or missions. The resulting state in these latter two cases cannot be considered safe. Clearly, the definition of a safe state for a combat vehicle varies depending on the scenario or the vehicle's operating mode. This problem is known to be solved by a combat switch. In this case, the manufacturer provides the user with a way to bypass, at least partially, the built-in safety features. This deliberately reduces safety in the interest of availability. A typical example is a hatch monitoring system, which prevents a weapon from firing if at least one hatch is not closed. The disadvantage of this system is that if the hatch sensor fails, firing is permanently disabled. In this case, the practical problem with this solution becomes evident. As soon as the sensor fails, the weapon becomes unusable. Therefore, it is very tempting for the user to use the kill switch to ignore minor system failures or errors. At the same time, this can create a false sense of security, as the operator is unaware of the risks they are currently facing. This is a particularly serious problem given the increasing complexity of the systems. External operating conditions are also becoming more complex. The commander of a combat vehicle in action is constantly exposed to intense physical and mental stress. It is virtually impossible for him to foresee all the risks when he activates the combat switch. A particularly important aspect here is the acceptance and assessment of risks. In peacetime operations, even minor material damage, such as a gun barrel hitting a hatch, would be considered unacceptable. However, in defensive operations, any risk that contributes to effectively evading enemy weapons would be acceptable. A corresponding combat switch is known, for example, from document DE 69816907T2. In this case, the combat switch can deactivate or activate the weapons. Various safety features and the operation of the combat switch present several decision-making options: accepting certain risks or consciously rejecting them as unacceptable. These decisions are further complicated by the Rules of Engagement (ROE). The vehicle commander could overlook certain risks and unintentionally trigger an incident. Depending on the scenario, this margin of decision-making can be significantly limited through technical means, such as a scalable security concept. In this way, the commander only faces risks that remain within acceptable limits in the given scenario. The object of the present invention is, therefore, to provide a method, as well as a device, that relieves the crew of certain decisions based on the mission scenario and thereby minimizes the risk of making incorrect decisions. This objective has been achieved using the method with the features of claim 1, as well as the device with the features of claim 10. The described method involves establishing a vehicle's safety functions, including a preselection and combat switch. The preselection is designed so that the vehicle crew does not have access to it; instead, it is performed by the vehicle manufacturer or maintenance personnel. The preselection establishes the scenario in which the vehicle operates. For example, you can set the vehicle to operate in peacetime mode. You can also set it to operate in standby mode or in war mode, which corresponds to the defense operation mentioned earlier. This pre-selection process involves selecting specific safety features within the vehicle to ensure its security. For example, in peacetime mode, a turret or weapon can be configured to remain unfired while, for instance, a roof hatch is open. Open hatches can damage the hatch itself and, consequently, the weapon as it rotates. Another possibility would be for the vehicle's weapon or turret to only deploy when the vehicle's engine is off, or for the vehicle to only be operational when its weapon systems are deactivated. Furthermore, it is possible to restrict the weapon's firing range during peacetime operations. This means that the weapon systems would not be able to fire within a certain angle. This serves the safety of the personnel on board the vehicle, as well as the surrounding area. It can also be programmed so that the vehicle's engines or transmission systems only operate when the doors and hatches are closed. This safety restriction also protects the people inside the vehicle and those in the immediate vicinity. The method also includes a combat switch, which can be activated by the vehicle crew and is designed to override, at least partially, preselected safety functions. For example, in peacetime operations it may be necessary to move the vehicle with the hatch open or rotate the weapon to a specific angle. According to the preselection definition, the combat switch can override at least one safety function. The preselection allows you to specify which safety functions are overridden and how many. In one particular embodiment, preselection is performed using a key or dongle, which is supplied to the vehicle before the start of the mission, to establish the vehicle's mission scenario. In a preferred embodiment, the vehicle can be preselected into one of three different operating modes: peace mode, standby mode, and war mode. Depending on the selected mode, individual vehicle safety functions are predefined, and depending on the operating mode, it is predefined which of these safety functions can be overridden by the operating switch. The safety functions that can be activated or deactivated are not limited, of course, to those mentioned above, but vary depending on the type of vehicle and the area of ​​operation. However, the common feature of this method is that different scenarios or operating modes with distinct safety functions can be preselected, and these can be deactivated, at least partially, using the combat switch. Depending on the preselection and the combat switch, the following safety functions are possible, for example (GS means combat switch activated): Furthermore, the invention provides a device for controlling and displaying the vehicle's safety functions when using the aforementioned method. This device includes a combat switch and means for displaying these safety functions. These means for displaying the safety functions can be optical and / or acoustic, such that the safety functions are represented, for example, by a symbol, a color, an animation, or a diagram. A combination of the foregoing is also possible. Preferably, the device includes a means of displaying information indicating whether a safety function is activated or deactivated. This means that, depending on the preset, the safety functions are activated, and by operating the combat switch, their status can be displayed as activated or deactivated. Furthermore, it is specifically designed to represent all possible operating modes on the device. Depending on the preset, the corresponding operating modes are displayed, and it can even be indicated whether the functions have been overridden by the combat switch. For greater clarity, the device is specifically designed to include a vehicle diagram. The corresponding functions can be represented on the diagram in the same location where they are actually found in the vehicle. Since special attention is paid to the condition of the hatches located in the vehicle, it is also proposed that the hatches be represented on the device, and that it be indicated whether they are closed or open. It is particularly recommended that the safety features to be highlighted be represented by special colors and / or flashing lights, in order to draw the crew's attention to these safety features. The method and device mentioned offer a far more flexible and modern solution than a conventional combat switch. It can be adapted to the relevant operational doctrine, user training methods, and specific regulations, such as the Rules of Evaluation (ROE), and adjusted as needed. Other features can be seen in the accompanying drawings. They show: Fig. 1: A block diagram of the safety functions to be set in the vehicle. Fig. 2: An exemplary device according to the invention, for visualizing and controlling the safety functions in the vehicle. Figure 1 shows the possible safety functions and operating modes that can be implemented in a vehicle. A pre-selection 1 is therefore provided, which cannot be modified by the crew. Pre-selection 1 establishes the mission-specific safety characteristics and functions that the vehicle must possess. The vehicle can operate in three different scenarios: peace mode 2, standby mode 3, and combat mode 4. The three modes mentioned above (2, 3 and 4) each feature different safety functions, which are implemented in the vehicle and set by preselection 1. The crew can partially disable the safety functions set in preset 1 using a combat switch (not shown in Fig. 1). When the combat switch is activated, operating modes 2, 3, and 4 enter an "override" mode, in which at least some predefined safety functions are disabled. Thus, by activating the combat switch, peace mode 2 can be changed to a peace mode with reduced security 5. Standby mode 3 can be changed to a standby mode with reduced security 6, and war mode 4 to a war mode with reduced security 7. Activating the combat switch does not override all safety functions, but only those safety functions that can be deactivated in operating modes 2, 3, and 4, respectively. Figure 2 shows a possible device for controlling and displaying safety functions in the vehicle. The device consists of a combat switch 15, as well as means for displaying these safety functions. General information can be displayed. This display can be represented by colors and / or flashing lights, and can even include text. Acoustic signals can also be used. Diagram 11 of the vehicle and its components, which have corresponding safety functions, is also provided. These functions can be represented locally on the vehicle in the diagram at the same location where they are actually found. A representation of Mode 12, which represents the preset operating mode, is also included. This operating mode is set by preselection and cannot be modified by the vehicle crew. A representation of hatch 13 is proposed as a special feature, as it can have a significant impact on vehicle safety. This representation of hatch 13 allows for indicating whether the hatch is open or closed, thus enabling inferences about whether the safety functions are responding appropriately. By selecting combat switch 15, special safety functions can be overridden, which in turn can be displayed in the safety representation 14. By using this device, the crew has at all times an overview of the activated safety functions and the possible safety functions that can be deactivated. The present invention is not limited to the features mentioned. In fact, other embodiments are possible. For example, additional signaling devices, such as rotating beacons, may be provided on the vehicle to indicate the corresponding safety functions. Furthermore, information could be displayed indicating which safety functions are active or which safety settings block or deactivate them. LIST OF REFERENCE NUMBERS 1. Pre-selection 2 Peaceful mode with security 3 Safe Standby mode 4 War Mode with security 5 Peace mode with reduced security 6 Reduced security standby mode 7 Reduced Security Warfare Mode 10 Information 11 Diagram 12 Mode Representation 13. Representation of the hatch 14 Representation of security 15 Combat Switch

Claims

1. A method for setting safety functions in a vehicle, comprising a preset (1) and a combat switch (15), wherein the safety functions can be deactivated in the vehicle by means of the combat switch (15) and the safety functions that can be deactivated can be selected by means of the preset (1).

2. The method according to claim 1, characterized in that the safety functions that cannot be deactivated can also be selected by means of the preset (1).

3. The method according to claim 1 or claim 2, characterized in that the safety functions that can be deactivated and those that cannot be deactivated can be defined by the manufacturer or by maintenance personnel.

4. The method according to any one of claims 1 to 3, characterized in that the preset (1) is performed by means of a key or a dongle. 5.The method according to claim 4, characterized in that the key or dongle cannot be accessed by the personnel operating the vehicle.

6. The method according to any one of claims 1 to 5, characterized in that by means of preselection (1) three operating modes of the vehicle with different safety functions that can be deactivated, namely, peace mode (2), standby mode (3), and war mode (4).

7. The method according to claim 6, characterized in that after selecting one of the three operating modes (2, 3, 4) by means of preselection (1), three corresponding operating modes (5, 6, 7) without safety functions can be selected, which can be deactivated by means of the combat switch (15). 8.The method according to any one of claims 1 to 7, characterized in that the functional states in the vehicle selected by means of the preselection (1) and the combat switch (15) are displayed by optical and / or acoustic means.

9. The method according to any one of claims 1 to 8, characterized in that the safety functions in the vehicle include, in particular, the movement of a weapon or turret with the hatch open, the movement of a weapon or turret with the vehicle engine off, and the combat readiness of a weapon or turret with the hatch open.

10. A device for controlling and displaying the safety functions of a vehicle when using the method described according to any one of claims 1 to 9, characterized in that the device contains a combat switch (15) and means for displaying the safety functions. 11.The device according to claim 10, characterized in that the device contains means for displaying information (11) that can be used to visualize whether a safety function is activated or deactivated.

12. The device according to claim 10 or claim 11, characterized in that the device contains a diagram (12) of the vehicle.

13. The device according to any one of claims 10 to 12, characterized in that the device contains means for displaying the selected operating mode and / or a safety representation (14) of the combat switch selection (15).

14. The device according to any one of claims 10 to 13, characterized in that the device contains means for displaying a hatch (13). 15.The device according to one of claims 10 to 14, characterized in that the various means for representation and / or diagram (12) can use different colors and / or flashing lights.

Images