Method for securing an action on a vehicle component following a user's touchscreen input

Abstract

The present invention relates to a method and device for ensuring that an action on a vehicle component has been performed following a user's touchscreen input on a vehicle display system. A first device of the display system emits (21) a command input. A second control device verifies (23) the consistency of the command input. If the consistency of the command input is verified, the second device emits (24) to the first device a data representing confirmation of the execution of the action on the vehicle component, and the first device determines a rendering of the fourth data point, which is displayed on the touchscreen. Otherwise, the second device emits (25) to the first device a data point representing an error notification, and the first device determines a rendering of the fifth data point, which is displayed on the touchscreen. (See Figure 3 for abbreviations.)

Description

Title of the invention: Method for securing an action on a vehicle component following a user's touch on a touchscreen. Technical field

[0001] The present invention relates to securing actions on vehicle components following user presses on a touch screen. Technological background

[0002] In the automotive field, it is known to use a solution combining physical buttons and indicator lights to implement critical functions related to the safety of embedded systems in a vehicle. Activating a button triggers a function (or action) of a vehicle component, and an indicator light illuminates as soon as this function (or action) is executed.

[0003] The solution combining physical buttons and indicator lights ensures that critical functions, such as for example the activation of emergency signals or the setting of safety functions, are executed reliably with tangible and direct input from the user because the physical nature combined with immediate visual feedback provides a clear and intuitive interface.

[0004] However, the solution combining physical buttons and indicator lights no longer meets the requirements and limitations of the new interfaces implemented in current vehicles because the cost of implementing this solution is high and its integration is often complex in increasingly confined spaces. Indeed, the production of physical buttons, especially when combined with indicator lights, involves significant material and assembly costs. Each button requires additional mechanical components, wiring, and circuits for the indicator light, significantly increasing the overall vehicle manufacturing costs.

[0005] Furthermore, integrating physical buttons into a vehicle's design requires space allocation and electrical integration, which complicates the dashboard layout and wiring diagrams. This complexity increases the effort and costs involved in vehicle assembly and design.

[0006] Furthermore, the use of physical buttons imposes design and ergonomic limitations because the buttons have fixed positions and sizes. Physical buttons are assigned specific positions on the dashboard or center console, which can limit the ergonomic optimization of the control devices and the aesthetic appeal of the vehicle's interior.

[0007] Implementing critical functions via physical buttons also limits the adaptability of these functions because, as vehicle features evolve, updating or adding new safety features can become difficult. Physical controls cannot be easily reconfigured or updated without significant hardware modifications, making it difficult to adapt to new safety technologies or user preferences.

[0008] Implementing critical functions using physical buttons also presents problems related to wear and environmental impact. Over time, physical buttons can wear down, leading to potential failures or the need for replacement. This degradation can affect the reliability of safety-critical functions and lead to increased maintenance costs. Furthermore, the production and disposal of physical components used in buttons and indicator lights contribute to the environmental footprint of vehicle manufacturing. Reducing these components can be a step towards more sustainable vehicle design and production.

[0009] To overcome the drawbacks of solutions combining physical buttons and indicator lights, solutions based on touch interfaces and software can be used to secure critical functions. These touch interface and software-based solutions enable more flexible, adaptable, and less expensive control of critical functions in vehicle embedded systems.

[0010] However, the implementation of these solutions based on touch interfaces and software poses some problems.

[0011] One of these problems is ensuring the reliability and responsiveness of these solutions. Indeed, software controls must equal or exceed the reliability of physical buttons, which is a significant challenge given the inherent robustness of mechanical interfaces. Furthermore, it is important to guarantee that touch interactions are as immediate and responsive as physical buttons. Delays or lags could lead to dangerous situations or user frustration.

[0012] Another of these problems is providing clear and concise feedback. Indeed, it is not easy to reproduce the tactile feedback of a physical button press in a touchscreen environment. Furthermore, although software interfaces can use visual and auditory signals to confirm actions on vehicle components, the design of these signals must be carefully crafted to be as intuitive as the feedback from physical buttons.

[0013] Users accustomed to physical buttons with indicator light feedback may need time to adapt to touch interfaces, especially for the Critical safety functions. Ensuring intuitive design and clear guidance is important for user transition and acceptance of these touch interfaces.

[0014] Furthermore, software-based systems must undergo rigorous testing to meet safety standards and certifications, such as compliance with Automotive Safety Integrity Levels (ASILs). Touchscreen interface-based solutions may require complex and resource-intensive implementations to comply with one of these ASILs. Indeed, detecting and managing software errors in a way that maintains a given safety level can be complex.

[0015] Another problem for implementing solutions based on touch interfaces and software concerns the management of space on a touchscreen used to launch a command. Indeed, allocating dedicated space on a touchscreen for commands related to the implementation of critical functions while balancing other infotainment needs, for example, requires careful design and prioritization.

[0016] Another problem with implementing solutions based on touch interfaces and software concerns protection against malfunctions and tampering. Software systems introduce vulnerabilities to potential problems, bugs, or security flaws. Implementing robust security measures to protect against these risks is also a point to consider.

[0017] The transition to touchscreen-based solutions and software for securing critical functions therefore represents a significant change in the design of a vehicle's user interface. While offering potential advantages in terms of flexibility and cost, it is important to overcome the various problems outlined above related to reliability, user experience, safety compliance, and the integration of these solutions. Summary of the present invention

[0018] One object of the present invention is to solve at least one of the problems of the technological background described above.

[0019] According to a first aspect, the present invention relates to a method of securing the fact that an action on a component of a vehicle has been performed following a user's press on a touch screen of a vehicle display system, the method comprising the following steps: - transmission, by a first device of the display system and intended for a second device of the display system, of a first control data comprising a first data representative of information defining a region of interest on the touch screen corresponding to the user's press and associated with the action on the vehicle's component, a second data representing a description of the press on the region of interest associated with the action on the vehicle's component and a third data representing a value of a counter associated with the region of interest and incremented with each new press on the region of interest, the counter associated with each region of interest being present on the first device and another counter synchronized to said counter of the first device being present on the second device; - emission, by the second device, of a second command data to the vehicle component that must perform the action indicated by the user's press on the region of interest; - verification, by the second device, of the consistency of the first command data by verifying that the first, second and third data are received and taken into account by the second device, that the second data describes a press which triggers the action associated with the region of interest defined by the information represented by the first data and that the value of the counter represented by the third data is equal to a current value associated with the defined region of interest; - if the consistency of the first command data is verified, the second device emits a fourth data point to the first device, representing confirmation of the execution of the action on the vehicle component; and the first device determines a rendering of the fourth data point, which is displayed on the touch screen; - if the consistency of the first command data is not verified, the second device emits a fifth data representing an error notification to the first device; and the first device determines a rendering of the fifth data which is displayed on the touch screen.

[0020] The method uses touch interactions to launch commands related to the implementation of critical functions. In particular, the method uses regions of interest that are synchronized on a touchscreen interface and associated with an incremental counter mechanism for each region of interest to ensure the reliability and responsiveness of these commands.

[0021] The synchronized counter mechanism ensures that each control data is checked from launch to execution, thus improving the reliability and safety of critical functions.

[0022] The process offers a cost-effective, flexible and user-friendly alternative without compromising the critical safety and feedback aspects necessary for vehicle operation. This process meets the need for tactile feedback, clear user confirmation, and rigorous safety standards.

[0023] The method verifies end-to-end security for touch commands, solely within the software domain. This method ensures that commands are not only sent but also received and executed as expected, thus providing a robust mechanism for detecting and compensating for any failures in real time.

[0024] By eliminating the need for additional hardware for safety verification, the method presents a solution for achieving ASIL A compliance for touch interactions. This software-centric approach minimizes material costs and simplifies the manufacturing process, thus offering significant economic advantages. By achieving ASIL A compliance for touch controls in infotainment systems, the invention establishes a new standard for safety in vehicle controls. It addresses the challenge of maintaining rigorous safety standards in increasingly software-driven automotive environments.

[0025] The method enables more intuitive and engaging user interactions with vehicle safety systems, taking advantage of touch interfaces and dynamic feedback to enhance the overall driving experience.

[0026] The method recognizes the vulnerabilities and variabilities inherent in software systems, particularly in the management of critical functions. It compensates for these potential weaknesses by improving the ability to reliably detect and execute touch commands.

[0027] The method allows for adaptability to updates to accommodate new safety features or user preferences without physical modifications to the vehicle's interior design. The software-centric method ensures that the system can easily adapt to new technologies and user interaction paradigms, such as augmented reality displays or advanced haptic feedback, keeping vehicles at the forefront of technological advancements.

[0028] According to one variant, the rendering of the fourth data is a rendering of a haptic effect implemented by an accessory of the vehicle.

[0029] According to one variant, the rendering of the fifth data is a rendering of a haptic effect implemented by an accessory of the vehicle.

[0030] According to one variant, the fifth data point is also representative of a cause of error.

[0031] According to a second aspect, the present invention relates to a security device that ensures an action on a vehicle component has been performed following a user's press on a touchscreen of a vehicle display system, the system comprising a memory associated with a processor configured for the implementation of the steps of the process according to the first aspect of the present invention.

[0032] According to a third aspect, the present invention relates to an on-board display system for a vehicle comprising a device according to the second aspect of the present invention.

[0033] According to a fourth aspect, the present invention relates to a vehicle comprising a display system according to the third aspect of the present invention.

[0034] According to one variant, the display system is a vehicle infotainment system.

[0035] The method integrates seamlessly with existing infotainment systems, using the screen as the primary interface for input and feedback. This integration facilitates a unified user experience and simplifies the implementation of critical functions, thus avoiding the complexity and costs associated with integrating separate security modules.

[0036] Current infotainment systems, increasingly reliant on touchscreen interfaces, struggle to support safety-related controls without compromising flexibility and user experience. The method proposes a solution that seamlessly integrates these controls, preserving the overall functionality and aesthetic appeal of the infotainment system.

[0037] The method ensures the reliability of touch controls for safety-critical functions in the variable and software-intensive environment of infotainment systems.

[0038] By focusing on an end-to-end software-only solution with the touchscreen, the process bypasses the inherent weaknesses of infotainment systems, thereby improving security without incurring significant costs.

[0039] According to a fifth aspect, the present invention relates to a computer program which includes instructions adapted for carrying out the steps of the process according to the first aspect of the present invention, in particular when the computer program is executed by at least one processor.

[0040] Such a computer program may use any programming language, and be in the form of source code, object code, or an intermediate code between source code and object code, such as in a partially compiled form, or in any other desirable form.

[0041] According to a sixth aspect, the present invention relates to a computer-readable recording medium on which is recorded a computer program comprising instructions for carrying out the steps of the process according to the first aspect of the present invention.

[0042] On the one hand, the recording medium can be any entity or device capable of storing the program. For example, the medium can include a storage means, such as a ROM, RAM, CD-ROM or a microelectronic circuit-type ROM, or a magnetic recording means or a hard disk drive.

[0043] On the other hand, this recording medium can also be a transmissible medium such as an electrical or optical signal, such a signal being able to be transmitted via an electrical or optical cable, by conventional or radio frequency, by self-directing laser beam, or by other means. The computer program according to the present invention can, in particular, be downloaded from an Internet-type network.

[0044] Alternatively, the recording medium may be an integrated circuit in which the computer program is incorporated, the integrated circuit being adapted to execute or to be used in the execution of the process in question. Brief description of the figures

[0045] Other features and advantages of the present invention will become apparent from the description of the particular and non-limiting embodiments of the present invention below, with reference to the attached Figures 1 to 4, in which:

[0046] [Fig-1] schematically illustrates part of the passenger compartment of an electric vehicle, for example.

[0047] [Fig.2] schematically illustrates a display system 1 of a vehicle (not represented) according to a particular and non-limiting example of the present invention.

[0048] [Fig.3] illustrates a flowchart of the different stages of a security process that an action on a vehicle component was performed following a user's press on a touch screen of a vehicle display system, according to a particular and non-limiting embodiment of the present invention.

[0049] [Fig.4] illustrates a safety device that an action on a component of a vehicle was created following a user's press on a touch screen of a vehicle display system, according to a particular and non-limiting embodiment of the present invention. Description of examples of achievements

[0050] A method and a device for securing that an action on a component of a vehicle has been carried out following a user's press on a touch screen of a vehicle display device will now be described in what follows with joint reference to Figures 1 to 4. The same elements are identified with the same reference signs throughout the following description.

[0051] The terms "first," "second" (or "firsts," "seconds"), etc., are used in this document by arbitrary convention to allow for the identification and distinction of different elements (such as operations, means, etc.) implemented in the embodiments described below. Such elements may be distinct or correspond to a single element, depending on the embodiment.

[0052] According to a particular and non-limiting embodiment of the present invention, a first device of a vehicle display system transmits to a second device of the display system a first control input comprising a first input representing information defining a region of interest on a touchscreen of the vehicle corresponding to a touch by a vehicle user and associated with an action on a vehicle component, a second input representing a description of the touch on the region of interest associated with the action on the vehicle component, and a third input representing a value of a counter associated with the region of interest and incremented with each new touch on the region of interest. The counter associated with each region of interest is present on the first device, and another counter synchronized to said counter of the first device is present on the second device.The second device sends a second command signal to the vehicle component that will perform the action indicated by the user's press on the region of interest. The second device verifies the consistency of the first command signal by checking that the first, second, and third signals are received and processed by the second device, that the second signal describes a press that triggers the action associated with the region of interest defined by the information represented by the first signal, and that the counter value represented by the third signal is equal to a current value associated with the defined region of interest.If the consistency of the first command data is verified, the second device sends a fourth data point to the first device, representing confirmation that the action on the vehicle component has been executed. The first device then determines how to render this fourth data point, which is displayed on the touchscreen. If the consistency of the first command data is not verified, the second device sends a fifth data point to the first device, representing an error notification. The first device then determines how to render this fifth data point, which is displayed on the touchscreen.

[0053] Fig. 1 schematically illustrates part of a vehicle's passenger compartment, according to a particular and non-limiting embodiment of the present invention.

[0054] The vehicle corresponds for example to a land vehicle, for example a car, a truck, a bus, a utility vehicle.

[0055] The vehicle includes a display system comprising one or more screens, for example a screen 101 with a touch interface 102 integrated into the dashboard 11 and a computer configured to control the display of content(s) on the touch screen 101. The computer corresponds, for example, to the computer of the infotainment system, known as the IVI computer (from the English "In-Vehicle Infotainment" or in French "Infodivertissement étoilé") of the vehicle.

[0056] The touch screen 101 corresponds for example to an LCD type screen (from the English "Liquid Crystal Display" or in French "Affichage à cristals liquide"), for example of type TFT (from the English "Thin-Film Transistor" or in French "Transistor en film mince"), or OLED (from the English "Organic Light-Emitting Diode" or in French "Diode électroluminescente organique").

[0057] The touchscreen 101 is configured to display content for the driver and passengers of the vehicle. The touchscreen 101 is also configured to allow the driver and / or passengers of the vehicle to interact with one or more on-board vehicle systems via a human-machine interface (HMI) displayed on the touchscreen 101. For example, the touchscreen 101 is configured to interact with the IVI system.

[0058] According to a particular embodiment, the vehicle incorporates one or more embedded systems, each controlled by one or more computers. These computers, together with the IVI computer, form, for example, a multiplexed architecture for providing various services useful for the proper functioning of the vehicle and for assisting the driver and / or passengers in controlling the vehicle by controlling the embedded system(s).Computers communicate and exchange data with each other via one or more computer buses, for example a CAN (Controller Area Network), CAN FD (Controller Area Network Flexible Data-Rate), FlexRay (according to ISO 17458), LIN (Local Interconnect Network), or Ethernet (according to ISO / IEC 802-3) type communication bus.

[0059] Fig. 2 schematically illustrates a display system 1 of the vehicle beyond Fig. 1 according to a particular and non-limiting embodiment of the present invention.

[0060] The display system 1 comprises a first device 10 and a second device 11.

[0061] For example, the first device 10 may be a vehicle display device.

[0062] According to a particular embodiment of the present invention, the display system may be an on-board infotainment system of the vehicle [Fig. 1] and the second device 11 may be a central processing unit which manages this infotainment system (IVI), including the execution of touch commands and communication with the vehicle's safety systems.

[0063] The first device 10 includes a microcontroller 103 and the touch screen 101 configured to interact with the touch interface 102.

[0064] The touch interface 102 is configured to define at least one region of interest on the touchscreen 101 and to associate a counter with each defined region of interest. Each region of interest is also associated with an action on a vehicle component. This action implements a critical function that is secured by the method described in relation to [Fig. 3]. Each counter is initialized to a value, for example, 0. The touch interface 102 is also configured to increment a counter associated with a region of interest as soon as a user touches that region of interest.

[0065] The touch interface 102 is also configured to detect a touch on a region of interest and to provide the microcontroller 103 with information defining a region of interest on the touch screen 101 following a user touch on this region of interest and to provide a value of the incremented counter associated with this region of interest.

[0066] The microcontroller 103 is configured to send a first command data Cl to the first microcontroller 111. The first command data includes a first data DI representing information defining a region of interest on the touch screen following a user's press on this region of interest, a second data D2 representing a description of the press on the region of interest associated with the action on the vehicle's component and a third data D3 representing a value of a counter associated with the region of interest and incremented with each new press on the region of interest.

[0067] The second device 11 is also configured to implement, in software form, a mechanism for verifying the execution of commands via a synchronized counter mechanism for each region of interest, thus ensuring end-to-end security compliance.

[0068] The second device 11 comprises a first microcontroller 111, a first control unit 112, a second control unit 113, a security unit 114 and a second microcontroller 115.

[0069] The first microcontroller 111 and the microcontroller 103 are configured to exchange data between them via a communication channel, for example of the CAN type.

[0070] The first microcontroller 111 is configured to provide the first control data Cl to the securing unit 114.

[0071] The security unit 114 is configured to receive the first command data Cl and to send a second command data C2 to a vehicle component, defining an action on the vehicle component.

[0072] The first microcontroller 111 is also configured to provide the first DI data to the first driver unit 112 and to provide the second D2 data to the second driver unit 113.

[0073] The first control unit 112 is configured to check if the first DI data is received by the first microcontroller 111 and to provide the first received DI data to the security unit 114.

[0074] The second control unit 113 is configured to check if the second data D2 is received by the first microcontroller 111 and to provide the second received data D2 to the security unit 114.

[0075] The security unit 114 is also configured to check the consistency of the first command data Cl by verifying that the first (D1), second (D2) and third (D3) data are received and taken into account by the second device 11, that the second data D2 describes a press which triggers the action associated with the region of interest defined by the information represented by the first data D1 and that the value of the counter represented by the third data D3 is equal to a current value associated with the defined region of interest.

[0076] The first microcontroller 111 is also configured to send a fourth data D4 and a fifth data D5 to the microcontroller 103. The fourth data point D4 represents a confirmation of the execution of the action on the vehicle component and the fifth data point D5 represents an error notification and, alternatively, a cause of a verification error.

[0077] The microcontroller 103 is also configured to determine a rendering of the fourth (D4) and fifth (D5) data and to drive the display of the rendering on the touch screen 101.

[0078] Figure 3 illustrates a flowchart of the different steps of a process for ensuring that an action on a component of a vehicle has been carried out following a user's press on a touch screen of a vehicle display system, according to a particular and non-limiting embodiment of the present invention.

[0079] In a step 21, the first device 10 transmits to the second device 11 the first control data Cl comprising the first data Dl representing information defining a region of interest on the touch screen 101 corresponding to the user's press and associated with the action on the vehicle's component, the second data D2 representing a description of the press on the region of interest associated with the action on the vehicle's component and the third data D3 representing a value of a counter associated with the region of interest and incremented With each new press on the region of interest, the counter associated with each region of interest is present on the first device 10, and another counter, synchronized with that counter on the first device 10, is present on the second device 11. Thus, when the counter on the first device 10 is incremented, the counter on the second device 11 is also incremented. This counter synchronization mechanism ensures that the command data to be verified corresponds to the last command issued by the user.

[0080] In a step 22, the second device 11 emits the second control data C2 to the vehicle component that is to perform the action indicated by the user's press on the region of interest.

[0081] In a step 23, the second device 11 checks the consistency of the first command data Cl by verifying that the first (D1), second (D2) and third (D3) data are received and taken into account by the second device 11, that the second data D2 describes a press which triggers the action associated with the region of interest defined by the information represented by the first data D1 and that the value of the counter represented by the third data D3 is equal to a current value associated with the defined region of interest.

[0082] If the consistency of the first command data Cl is verified, in a step 24, the second device 11 sends to the first device 10, the fourth data D4 representing a confirmation of the execution of the action on the vehicle component and the first device 10 determines a rendering of the fourth data D4 which is displayed on the touch screen 101.

[0083] If the consistency of the first command data Cl is not verified, the second device 11 sends to the first device 10, a fifth data D5 representing an error notification and the first device 10 determines a rendering of the fifth data D5 which is displayed on the touch screen 101.

[0084] According to a particular and non-limiting embodiment of the present invention, the rendering of the fourth data D4 is a rendering of a haptic effect implemented by an accessory of the vehicle.

[0085] According to a particular and non-limiting embodiment of the present invention, the rendering of the fifth data D5 is a rendering of a haptic effect implemented by an accessory of the vehicle.

[0086] According to a particular and non-limiting embodiment of the present invention, the fifth data point D5 is further representative of a cause of the error.

[0087] According to one variant, the data exchanges between the first microcontroller 111, the first control unit 112, the second control unit 113, the security unit 114 and the second microcontroller 115 can rely on redundant processing paths within the second device 11, thus improving the error detection and providing failover options in case of primary path failure.

[0088] According to one variant, the definition of the regions of interest can adapt according to a context of the display system or user preferences, coupled with dynamic feedback mechanisms (visual, auditory and haptic) which can adjust according to the urgency or importance of the first command data.

[0089] This variant establishes an optimal balance between display system flexibility, user experience, and security. By allowing regions of interest to adapt to different contexts and providing multimodal feedback to the user, this variant addresses the main challenges related to user interaction with security-related controls. It makes touch controls more intuitive and reliable, without compromising the security standards required for ASIL A compliance.

[0090] The emphasis of this variant on dynamic adaptation and comprehensive feedback mechanisms aligns well with current trends toward more interactive and user-centric vehicle infotainment systems. It provides a solid framework for future enhancements, including the potential integration of more advanced predictive features based on artificial intelligence, making it a future-proof solution in the evolution of vehicle control systems.

[0091] Figure 4 schematically illustrates a device 3 configured for controlling a display system of an electric vehicle, for example, the electric vehicle 10, and / or for controlling functions implemented by a navigation system associated with an alert system and a route planning module of the electric vehicle 10, according to specific and non-limiting embodiments of the present invention. The device 3 corresponds, for example, to a device embedded in the electric vehicle 10, for example, a computer.

[0092] Device 3 is, for example, configured for carrying out steps 22 to 25 of the process described opposite [Fig. 3]. Examples of such a device 3 include, but are not limited to, embedded electronic equipment such as a vehicle's on-board computer or an electronic control unit such as an ECU (Electronic Control Unit). The elements of device 3, individually or in combination, can be integrated into a single integrated circuit, into several integrated circuits, and / or into discrete components. Device 3 can be implemented in the form of electronic circuits or software (or computer) modules, or a combination of electronic circuits and software modules.

[0093] The device 3 comprises one (or more) processor(s) 30 configured to execute instructions for carrying out the steps of the process and / or for executing instructions from the software embedded in the device 3. The processor 30 may include integrated memory, an input / output interface, and various circuits known to a person skilled in the art. The device 3 further comprises at least one memory 31 corresponding for example to volatile and / or non-volatile memory and / or comprises a memory storage device which may include volatile and / or non-volatile memory, such as EEPROM, ROM, PROM, RAM, DRAM, SRAM, flash, magnetic or optical disk.

[0094] The computer code of the embedded software(s) including the instructions to be loaded and executed by the processor is for example stored on memory 31.

[0095] According to various specific and non-limiting embodiments, the device 3 is coupled in communication with other similar devices or systems and / or with communication devices, for example a TCU (Telematic Control Unit), for example via a communication bus or through dedicated input / output ports.

[0096] According to a particular and non-limiting embodiment, the device 3 comprises a block 32 of interface elements for communicating with external devices. The interface elements of the block 32 comprise one or more of the following interfaces: - radio frequency RF interface, for example of the Wi-Fi® type (according to IEEE 802.11), for example in the 2.4 or 5 GHz frequency bands, or of the Bluetooth® type (according to IEEE 802.15.1), in the 2.4 GHz frequency band, or of the Sigfox type using UBN (Ultra Narrow Band) radio technology, or LoRa in the 868 MHz frequency band, LTE (Long-Term Evolution), LTE-Advanced; - USB interface (from the English "Universal Serial Bus" or "Universal Serial Bus" in French); - HDMI interface (from the English "High Definition Multimedia Interface", or "High Definition Multimedia Interface" in French); - LIN interface (from the English "Local Interconnect Network", or in French "Réseau interconnecté local").

[0097] According to another particular and non-limiting embodiment, the device 3 includes a communication interface 33 which enables communication with other devices (such as other computers in the embedded system) via a communication channel 330. The communication interface 33 corresponds, for example, to a transmitter configured to transmit and receive information and / or data via the communication channel 330. The communication interface 33 corresponds, for example, to a CAN-type wired network.

[0098] According to a particular and non-limiting embodiment, the device 3 can provide output signals to one or more external devices, such as a display screen 340, touch or not, one or more speakers 350 and / or other peripherals 360 (projection system) via output interfaces 34, 35 and 36 respectively. According to a variant, one or more of the external devices is integrated into the device 3.

[0099] Of course, the present invention is not limited to the embodiments described above but extends to a method of verifying that an action on a vehicle component has been performed following a user's touchscreen on a vehicle display system, which would include secondary steps without falling outside the scope of the present invention. The same would apply to a device configured for implementing such a method.

[0100] The present invention also relates to a display system comprising device 3 of [Fig.4].

[0101] The present invention also relates to a vehicle, for example an automobile or more generally an autonomous land-powered vehicle, comprising the display system 1.

Claims

1. Demands A method for ensuring that an action on a vehicle component has been performed following a user's touchscreen input on a vehicle display system, the method comprising the following steps: - emission (21), by a first device of the display system and to a second device of the display system, of a first control data comprising a first data representing information defining a region of interest on the touch screen corresponding to the user's press and associated with the action on the vehicle's component, a second data representing a description of the press on the region of interest associated with the action on the vehicle's component and a third data representing a value of a counter associated with the region of interest and incremented with each new press on the region of interest, the counter associated with each region of interest being present on the first device and another counter synchronized with said counter of the first device being present on the second device; - emission (22), by the second device, of a second command data to the vehicle component that must perform the action indicated by the user's press on the region of interest; - verification (23), by the second device, of the consistency of the first command data by verifying that the first, second and third data are received and taken into account by the second device, that the second data describes a press which triggers the action associated with the region of interest defined by the information represented by the first data and that the value of the counter represented by the third data is equal to a current value associated with the defined region of interest; - if the consistency of the first command data is verified, emission (24), by the second device to the first device, of a fourth data representing a confirmation of the execution of the action on the vehicle component; and the first device determines a rendering of the fourth data which is displayed on the touch screen; - if the consistency of the first command data is not verified, emission (25), by the second device to the

2.

3.

4.

5.

6.

7.

8.

9.

10. first device, of a fifth data point representing an error notification; and the first device determines a rendering of the fifth data point which is displayed on the touch screen. Method according to claim 1, wherein the rendering of the fourth data point is a rendering of a haptic effect implemented by a vehicle accessory. Method according to claim 1, wherein the rendering of the fifth data point is a rendering of a haptic effect implemented by a vehicle accessory. A method according to claim 1, wherein the fifth piece of data is further representative of a cause of error. A security device that ensures an action on a vehicle component has been performed following a user's press on a touch screen of a vehicle display system, said device (3) comprising a memory (31) associated with at least one processor (30) configured to implement the steps of the method according to any one of claims 1 to 4. Computer program comprising instructions for implementing the method according to any one of claims 1 to 4, when these instructions are executed by a processor. Computer-readable recording medium on which is recorded a computer program comprising instructions for carrying out the steps of the process according to any one of claims 1 to 4. Vehicle on-board display system comprising a device according to claim 5. Vehicle comprising a display system according to claim 8. Vehicle according to claim 9, wherein the display system is a vehicle infotainment system.