Functional safety display controller and functional safety display control system

Abstract

The present application provides a functional safety display controller (12) and a functional safety display control system (1). The functional safety display controller (12) is connected to a central controller (11), a memory (13), and a display (14) via a communication line, and at least one internal module of the functional safety display controller (12) is provided with a corresponding functional safety detection unit, which detects random errors in the corresponding module. The functional safety display controller (12), together with the central controller (11), the memory (13), and the display (14), can constitute a functional safety display control system (1), which can simultaneously consider issues such as research and development costs, risk control, and system area overhead.

Description

[Technical Field]

[0001] The present application belongs to the field of functional safety technology, and relates to functional safety indication control, and more particularly to a functional safety indication controller and a functional safety indication control system. [Background technology]

[0002] Functional safety (FUSA) refers to reducing the risk of a system so that it can operate safely when an electrical or electronic fault occurs. As more and more products integrate complex microelectronics and software into their designs, evaluating and implementing functional safety at the system level becomes increasingly challenging. ISO 26262 specifies international standards for improving the functional safety of automotive electronics in the field of automotive safety. Display control systems have become an essential part of automotive systems. With the rapid development of intelligent driving, automotive display control systems are becoming increasingly complex and electronic, making real-time detection and reporting of circuit abnormalities an urgent requirement for automotive display control systems.

[0003] The ISO 26262 standard is continually being updated and improved, and automotive functional safety technology is still in its development stage. Conventional functional safety display control systems require both software and hardware to achieve functional safety standards. For example, software creates a software test library (STL), hardware executes in response to the STL, and a comparison circuit within the hardware compares the STL execution results with the expected results to detect permanent errors in the circuit. Software test patterns require software researchers to manage switching between functional safety test patterns and normal display configuration commands, achieving detection during normal display. This method places high demands on system performance, produces less than ideal real-time detection results, and significantly increases system complexity. Furthermore, the STL itself must be certified to the ISO 26262 standard. Compared to conventional display control systems, such functional safety display controller systems require product development cycles that are six to eight times longer, and simultaneous large-scale changes to software and hardware significantly increase system risks.

[0004] Other implementations of functional safety display control systems do not require software to participate in certification, but only hardware. This reduces R&D investment and cycle time. Compared with conventional display control systems, this type of functional safety display controller system requires a product R&D cycle that is 3 to 4 times longer, but it uses simple internal large-scale module-level replication and comparison circuits to detect random errors caused by electronic and electrical faults in the internal hardware circuitry. This method requires 2 to 2.5 times the area overhead compared to a system without functional safety circuits.

[0005] As mentioned above, under the premise of controlling R&D risks, shortening the R&D cycle, and reducing R&D personnel investment, designing a functional safety indication control system that can pass ISO26262 standard certification is one of the most urgent challenges that those skilled in the art need to solve. Summary of the Invention [Problem to be solved by the invention]

[0006] The purpose of this application is to provide a functional safety display controller and a functional safety display control system for solving the problem of the prior art that it is difficult to simultaneously consider research and development costs, risk control, and system area overhead in a display control system compliant with the ISO26262 standard. [Means for solving the problem]

[0007] In a first aspect, an embodiment of the present application provides a functional safety indication controller, which is connected to a central controller, a memory, and a display via a communication line, and which includes a functional safety detection unit corresponding to at least one internal module, and the functional safety detection unit detects a random error in the corresponding module.

[0008] In one embodiment of the first aspect, the functional safety indication controller includes a register analysis module, and the register analysis module is provided with a first functional safety detection unit and a second functional safety detection unit. The first functional safety detection unit detects random errors in the interface between the central controller and the functional safety indication controller and detects random errors in configuration data between the functional safety indication controller and internal use terminals. The second functional safety detection unit detects random errors occurring in a control circuit between the central controller and the functional safety indication controller.

[0009] In one embodiment of the first aspect, the first functional safety detection unit performs a parity check on the configuration bus content to detect random errors in the interface between the central controller and the functional safety indication controller and to detect random errors in the configuration data between the functional safety indication controller and the internal use terminal, and / or the second functional safety detection unit performs timeout monitoring on the configuration bus to detect random errors occurring in the control circuit between the central controller and the functional safety indication controller.

[0010] In one embodiment of the first aspect, the functional safety indication controller includes an image processing module, and the image processing module is provided with a third functional safety detection unit, a fourth functional safety detection unit, and a fifth functional safety detection unit. The third functional safety detection unit detects random errors occurring in internal pipeline data information of the functional safety indication controller. The fourth functional safety detection unit detects random errors occurring in combinational circuits between internal pipelines of the functional safety indication controller. The fifth functional safety detection unit detects permanent circuit errors occurring in the functional safety indication controller.

[0011] In one mode of the first aspect, the third functional safety detection unit detects random errors occurring in internal pipeline data information of the functional safety indication controller by performing a parity check on a sequential circuit, and / or the fourth functional safety detection unit detects random errors occurring in combinational circuits between internal pipelines of the functional safety indication controller, with each stage of the pipeline being the smallest unit, and / or the fifth functional safety detection unit detects permanent circuit errors occurring in the functional safety indication controller using a hardware test library.

[0012] In one embodiment of the first aspect, the functional safety display controller includes a display interface control module, and the display interface control module is provided with a sixth functional safety detection unit, a seventh functional safety detection unit, and an eighth functional safety detection unit, wherein the sixth functional safety detection unit detects permanent circuit errors occurring in the functional safety display controller, the seventh functional safety detection unit detects random errors occurring in an internal pixel pipeline control circuit of the functional safety display controller, and the eighth functional safety detection unit detects random errors occurring in display data between the functional safety display controller and the display.

[0013] In one embodiment of the first aspect, the sixth functional safety detection unit detects permanent circuit errors occurring in the functional safety display controller by a hardware test library, and / or the seventh functional safety detection unit detects random errors occurring in an internal pixel pipeline control circuit of the functional safety display controller by pixel number monitoring, and / or the eighth functional safety detection unit detects random errors occurring in display data between the functional safety display controller and the display by performing cyclic redundancy check encoding on pixel data at the transmitting end.

[0014] In one mode of the first aspect, the functional safety indication controller includes a memory access control module, and the memory access control module is provided with a ninth functional safety detection unit, a tenth functional safety detection unit, a first functional safety detection unit, and a twelfth functional safety detection unit, wherein the ninth functional safety detection unit detects permanent circuit errors occurring in the functional safety indication controller, the tenth functional safety detection unit detects random errors occurring in a pixel transmission data path between the functional safety indication controller and the memory, and the eleventh functional safety detection unit and the twelfth functional safety detection unit detect random errors occurring in a control path between the functional safety indication controller and the memory.

[0015] In one embodiment of the first aspect, the ninth functional safety detection unit detects permanent circuit errors occurring in the functional safety indication controller by a hardware test library, and / or the tenth functional safety detection unit detects random errors occurring in a pixel transmission data path between the functional safety indication controller and the memory by performing cyclic redundancy check decoding on data bus data at the receiving end, and / or the eleventh functional safety detection unit detects random errors occurring in a control path between the functional safety indication controller and the memory by performing timeout monitoring on a data bus, and / or the twelfth functional safety detection unit detects random errors occurring in a control path between the functional safety indication controller and the memory by monitoring a data bus protocol.

[0016] In one embodiment of the first aspect, the functional safety display controller includes an internal storage module, and the internal storage module is provided with a 13th functional safety detection unit, which detects circuit random errors that occur in the internal storage module.

[0017] In one mode of the first aspect, the thirteenth functional safety detection unit detects a circuit random error occurring in the internal storage module using an error correction code.

[0018] In one embodiment of the first aspect, the functional safety indication controller further includes an interrupt control module, and permanent errors and / or temporary errors detected by the functional safety detection unit are reported to the central controller by the interrupt control module in the form of an interrupt.

[0019] In one mode of the first aspect, the interrupt control module includes a fourteenth functional safety detection unit, which detects and corrects circuit random errors that occur in a functional safety interrupt path.

[0020] In one mode of the first aspect, the fourteenth functional safety detection unit detects and corrects circuit random errors occurring in the functional safety interrupt path by a triple modular redundancy scheme.

[0021] In one embodiment of the first aspect, the functional safety detection unit detects random errors occurring on a configuration bus between the functional safety display controller and the central controller, random errors occurring on an image data bus between the functional safety display controller and the memory, and / or random errors occurring on a display data bus between the functional safety display controller and the display.

[0022] In the second aspect, an embodiment of the present application provides a functional safety indication control system, which includes a central controller, a memory, a display, and the functional safety indication controller of any one of the first aspect. [Effects of the Invention]

[0023] As described above, the functional safety display controller provided in the embodiment of the present application is communicatively connected to the central controller, memory, and display, and together constitutes a functional safety display control system, which is a hardware functional safety display control system compliant with the ISO 26262 standard that can simultaneously consider issues such as research and development cost, risk control, and system area overhead.

[0024] In addition, the functional safety indication controller provided in some embodiments of the present application can subdivide corresponding functional safety detection mechanisms according to circuit functions and types, control area overhead, and is inheritable and extensible.

[0025] Furthermore, the functional safety display control system provided in some embodiments of the present application, which is composed of a functional safety display controller and a central controller, a memory, and a display, does not require software for certification and can detect and report electronic or electrical random errors that occur in circuits in real time. This enables significant reductions in product research and development costs, improved development speed, and reduced development risks while providing higher real-time performance, safety, and reliability. Compared to conventional display control systems, the functional safety display control system requires only 1.2 to 1.4 times the area overhead to detect more than 90% of circuit random errors. [Brief explanation of the drawings]

[0026] [Figure 1] 1 is a schematic diagram illustrating the configuration of a functional safety display control system according to an embodiment of the present application. [Figure 2] 1 is a schematic diagram illustrating the configuration of a functional safety display control system according to an embodiment of the present application. [Figure 3] 1 is a schematic diagram illustrating the configuration of a functional safety display control system according to an embodiment of the present application. DETAILED DESCRIPTION OF THE INVENTION

[0027] The following describes embodiments of the present application through specific examples. Those skilled in the art can easily understand other advantages and effects of the present application from the contents disclosed herein. Furthermore, the present application can also be implemented or applied through other different specific embodiments. Furthermore, various supplements or modifications may be made to the details in this specification based on different perspectives and applications without departing from the spirit of the present application. It should be noted that the following examples and features of the examples may be combined with each other unless a contradiction arises.

[0028] It should be noted that the drawings provided in the following examples only roughly illustrate the basic idea of ​​the present application. The drawings only show assemblies relevant to the present application, and are not based on the number, shape, and size of the assemblies in actual implementation. The shape, number, and ratio of each assembly in actual implementation may be arbitrarily changed, and the layout and shape of the assemblies may be more complicated.

[0029] The following embodiment of the present application provides a functional safety display control system. Fig. 1 is a schematic diagram of the hardware architecture of the functional safety display control system 1 provided in the embodiment of the present application. As shown in Fig. 1, the functional safety display control system 1 provided in the embodiment of the present application includes a central controller 11, a functional safety display controller 12, a memory 13, and a display 14. The functional safety display controller 12 is communicatively connected to the central controller 11, the memory 13, and the display 14 via a communication line.

[0030] The central controller 11 sends display configuration commands from the display controller driver to the functional safety display controller 12 and receives and processes interrupt information from the functional safety display controller 12.

[0031] The functional safety display controller 12 receives configuration commands from the central controller 11, reads image data from the memory 13, performs image processing, generates standard display interface signals, and sends the standard display interface signals to the display 14. The standard display interface signals include image information and control information.

[0032] The memory 13 stores image data to be read by the functional safety display controller 12. In an embodiment of the present application, the memory 13 may be, for example, a random access memory (RAM), a read-only memory (ROM), a flash memory, a hard disk, a solid state disk, a magnetic tape, a floppy disk, an optical disk, or any combination thereof.

[0033] The display 14 receives image information and control information from the functional safety display controller 12 and displays it on a display screen.

[0034] In the embodiment of the present application, the functional safety display controller 12 includes at least one internal module, at least one of which is provided with a corresponding functional safety detection unit, which detects random errors of the corresponding module in real time and reports them to a functional safety interrupt, such as a register analysis module, an image processing module, a display interface control module, a memory access control module, etc.

[0035] Alternatively, some or all of the functional safety detection units may detect random errors occurring on a configuration bus between the functional safety display controller 12 and the central controller 11, a random error occurring on an image data bus between the functional safety display controller 12 and the memory 13, and / or a random error occurring on a display data bus between the functional safety display controller 12 and the display 14. Specifically, the configuration bus between the functional safety display controller 12 and the central controller 11 can detect random errors occurring in the circuit in real time via the functional safety detection units. The image data bus between the functional safety display controller 12 and the memory 13 can detect random errors occurring in the circuit in real time via the functional safety detection units. The display data bus between the functional safety display controller 12 and the display 14 can detect random errors occurring in the circuit in real time via the functional safety detection units.

[0036] Fig. 2 is a schematic diagram of the detailed structure of the functional safety indication control system 1 provided in an embodiment of the present application. Fig. 3 is a schematic diagram of the internal structure of the functional safety indication control system 1 provided in an embodiment of the present application. As shown in the figure, in the embodiment of the present application, the functional safety indication controller 12 includes a register analysis module 121, which includes a register analysis unit 1211, a first functional safety detection unit Fusa01, and a second functional safety detection unit Fusa02.

[0037] The first functional safety detection unit Fusa01 detects random errors in the interface between the central controller 11 and the functional safety display controller 12, and detects random errors between the functional safety display controller 12 and the internal use terminal.

[0038] In some embodiments, the first functional safety detection unit Fusa01 performs a parity check on the contents of the configuration bus to detect random errors on the configuration bus between the central controller 11 and the functional safety indication controller 12, and between the functional safety indication controller 12 and internal use terminals. It should be noted that the distinction between the Fusa safety detection units corresponding to each module in FIG. 3 is a distinction of logical function, and in actual implementation, they may be fully or partially integrated into a single physical entity or physically separated. For example, in one specific application of Fusa01, for parity checking on the configuration bus, a segment detection method is used within the hardware to divide the internal configuration bus path into N segments, where N is a positive integer greater than or equal to 1, so that all configuration paths related to other internal units or modules are detected. Each sub-path detects parity check bits individually from the transmitting end to the receiving end, and any functional safety parity check error occurring on any sub-path is sent to the functional safety indication interrupt of the functional safety indication controller 12.

[0039] The second functional safety detection unit Fusa02 detects random errors occurring in the control circuit between the central controller 11 and the functional safety display controller 12.

[0040] In some embodiments, the second functional safety detection unit Fusa02 performs timeout monitoring on the configuration bus to detect random errors that occur in the control circuit between the central controller 11 and the functional safety indication controller 12. Specifically, when a read / write request from the central controller 11 is successfully received, a counter for monitoring bus access within the second functional safety detection unit Fusa02 starts counting, and when a response (ack) is successfully received from the request destination, the counter is cleared. When the count value of the counter exceeds a set threshold, the monitoring circuit of the second functional safety detection unit Fusa02 sends an access timeout error interrupt to the functional safety interrupt of the functional safety indication controller 12.

[0041] Based on the above description, in the embodiment of the present application, the register analysis module 121 can detect random errors in the circuit through the functional safety detection units Fusa01 and Fusa02. In addition, the configuration path between the central controller 11 and the functional safety display controller 12 can also detect random errors in the circuit through the functional safety detection units Fusa01 and Fusa02.

[0042] It should be noted that the register analysis module 121 including the first functional safety detection unit Fusa01 and the second functional safety detection unit Fusa02 at the same time is merely one implementation method of the embodiment of the present application, and the present application is not limited thereto. In some other embodiments, the register analysis module may include only the first functional safety detection unit or only the second functional safety detection unit.

[0043] In one embodiment of the present application, the functional safety display controller 12 further includes an image processing module 122. The image processing module 122 obtains image data information through the memory access control module 124, and sends pixel data to the display interface control module 123 after image processing is completed. Please continue to refer to Figure 3. In this embodiment, the image processing module 122 includes an image processing unit 1221, a third functional safety detection unit Fusa03, a fourth functional safety detection unit Fusa04, and a fifth functional safety detection unit Fusa05.

[0044] The third functional safety detection unit Fusa03 detects random errors occurring in the internal pipeline data information of the functional safety display controller 12.

[0045] In some embodiments, the third functional safety detection unit Fusa03 detects random errors occurring in the internal pipeline data information of the display controller 12 by performing a parity check on the sequential circuit. Specifically, the third functional safety detection unit Fusa03 mainly protects the image processing unit 1221. The image processing unit 1221 mainly performs post-processing operations on the original image in the memory 13, including one or more, but not limited to, format conversion, image scaling, inversion, blending, gamut mapping, tone mapping, and blurring. These image processing operations are implemented based on a pipeline mechanism, where each stage of the pipeline completes a different operation before moving on to the next stage. Circuit random errors in the data information of each stage of the pipeline are detected by the third functional safety detection unit Fusa03.

[0046] It should be noted that the data information of the pipeline can be realized by storage units including, but not limited to, registers, First In First Out (FIFO) memories, and the like.

[0047] The fourth functional safety detection unit Fusa04 detects random errors that occur in the combinational circuits between the internal pipelines of the functional safety display controller 12.

[0048] In some embodiments, the fourth functional safety detection unit Fusa04 mainly protects the internal image processing unit 1221. Considering the area and execution speed, one to multiple pipeline stages are required to complete the transformation of the image processor (including, but not limited to, matrix multiplication, interpolation, filtering, linear transformation, etc.). In the present embodiment, the fourth functional safety detection unit Fusa04 preferably performs protection for each pipeline stage as the smallest unit. Specifically, the comparison circuit of the fourth functional safety detection unit Fusa04 compares the values ​​of the backup circuit and the original functional circuit. If the values ​​do not match, the fourth functional safety detection unit Fusa04 sends an error interrupt to the functional safety interrupt of the functional safety display controller 12.

[0049] It should be noted that in the embodiment of the present application, the fourth functional safety detection unit Fusa04 sets each stage of the pipeline as the protection granularity, which is merely one implementation method of the embodiment of the present application, and the present application is not limited thereto. In some other embodiments, the protection granularity of some pipelines can be extended to the submodule level based on the operation difficulty and area target.

[0050] The fifth functional safety detection unit Fusa05 detects permanent circuit errors occurring in the functional safety display controller 12.

[0051] In some embodiments, the fifth functional safety detection unit Fusa05 detects permanent circuit errors that occur in the functional safety display controller 12 using a hardware test pattern generator (TPG) or a hardware test library (HTL). Here, the HTL is a test pattern defined and generated by hardware to maximize hardware logic coverage. The fifth functional safety detection unit Fusa05 can detect permanent errors that occur during power-on and normal display periods using the HTL. Specifically, the HTL mode of the functional safety display controller 12 can be activated by a specific command. In some embodiments, the HTL may be activated during system power-on to detect random circuit errors due to electronic error reversals in the system as quickly as possible. When a circuit abnormality is detected, the functional safety display controller 12 can report an error interrupt in real time. In other embodiments, the HTL may also be activated during the system's normal display period, where the hardware displays output data and control flow while maintaining the internal HTL.

[0052] In the embodiment of the present application, the image processing module 122 simultaneously including the third functional safety detection unit Fusa03, the fourth functional safety detection unit Fusa04, and the fifth functional safety detection unit Fusa05 is merely one way of realizing the embodiment of the present application, and the present application is not limited thereto. In some other embodiments, the image processing module may include only one or two of the third functional safety detection unit, the fourth functional safety detection unit, and the fifth functional safety detection unit.

[0053] In one embodiment of the present application, the functional safety display controller 12 includes a display interface control module 123, which receives configuration information from the register analysis module 121 and pixel data information from the image processing module 122, generates standard display interface data, and sends it to the display 14. Please continue to refer to Figure 3. In this embodiment, the display interface control module 123 includes a display interface control unit 1231, a sixth functional safety detection unit Fusa06, a seventh functional safety detection unit Fusa07, and an eighth functional safety detection unit Fusa08.

[0054] The sixth functional safety detection unit Fusa06 detects permanent circuit errors that occur in the functional safety display controller 12. In the embodiment of the present application, the function and implementation manner of the sixth functional safety detection unit Fusa06 are similar to those of the fifth functional safety detection unit Fusa05, and therefore, detailed description thereof will be omitted here.

[0055] The seventh functional safety detection unit Fusa07 detects random errors that occur in the internal pixel pipeline control circuit of the functional safety display controller 12.

[0056] In some embodiments, the seventh functional safety detection unit Fusa07 detects random errors occurring in the internal pixel pipeline control circuit of the functional safety display controller 12 by pixel count monitoring. Specifically, the seventh functional safety detection unit Fusa07 obtains the total number of expected pixels using configuration data that has passed the detection of the first functional safety detection unit Fusa01 and the second functional safety detection unit Fusa02. The seventh functional safety detection unit Fusa07 defines M monitoring points in the hardware, where M is a positive integer greater than or equal to 1. It should be noted that although FIG. 3 illustrates the case where M=1, the present application is not limited to this. In other embodiments, multiple pixel count monitoring points can be defined based on the division of circuit functions. The seventh functional safety detection unit Fusa07 detects and counts the number of pixels at the specified monitoring points. At the next point after one frame is completed, the comparison circuit in the seventh functional safety detection unit Fusa07 compares the actual value with the expected value, and if the two do not match, the seventh functional safety detection unit Fusa07 sends a pixel count error interrupt to the functional safety interrupt of the functional safety display controller 12.

[0057] The eighth functional safety detection unit Fusa08 detects random errors that occur in the display data between the functional safety display controller 12 and the display 14.

[0058] In some embodiments, the eighth functional safety detection unit Fusa08 detects random errors occurring in display data between the functional safety display controller 12 and the display 14 by performing cyclic redundancy check encoding on pixel data at the transmitting end. Here, the polynomial for the cyclic redundancy check encoding needs to be uniformly defined between the functional safety display controller 12 and the display 14, and the specific definition method is not limited by this application. The display interface control module 123 performs cyclic redundancy check encoding on each valid data transmitted to the interface, and this cyclic redundancy check encoding is performed row by row or frame by frame. The cyclic redundancy encoding value of the data block can be transmitted in various manners. For example, in some embodiments, the cyclic redundancy encoding value can be transmitted to the display 14 in real time via a time-division multiplexed display data bus, which can include, but is not limited to, a display port (DP) or a display pixel interface (DPI). In other embodiments, the cyclic redundancy encoding value can be stored in an internal register, and software can obtain the cyclic redundancy encoding value by reading the register.

[0059] In the embodiment of the present application, the image processing module 123 simultaneously including the sixth functional safety detection unit Fusa06, the seventh functional safety detection unit Fusa07, and the eighth functional safety detection unit Fusa08 is merely one way of realizing the embodiment of the present application, and the present application is not limited thereto. In some other embodiments, the image processing module may include only one or two of the sixth functional safety detection unit, the seventh functional safety detection unit, and the eighth functional safety detection unit.

[0060] In one embodiment of the present application, the functional safety display controller 12 includes a memory access control module 124, which reads image data from the memory 13 via a data bus and stores the image data read from the memory 13 in the internal storage module 125. Please continue to refer to Figure 3. In one embodiment of the present application, the memory access control module 124 includes a memory access control unit 1241, a ninth functional safety detection unit Fusa09, a tenth functional safety detection unit Fusa10, an eleventh functional safety detection unit Fusa11, and a twelfth functional safety detection unit Fusa12.

[0061] The ninth functional safety detection unit Fusa09 detects permanent circuit errors that occur in the functional safety display controller through a hardware test library. In one embodiment of the present application, the function and implementation manner of the ninth functional safety detection unit Fusa09 are similar to those of the fifth functional safety detection unit Fusa05, and therefore, detailed description thereof will be omitted here.

[0062] The tenth functional safety detection unit Fusa10 detects random errors occurring in the pixel transmission data path between the functional safety display controller 12 and the memory 13.

[0063] In some embodiments, the tenth functional safety detection unit Fusa10 detects random errors occurring between the functional safety indication controller 12 and the memory 13 by performing cyclic redundancy check decoding on the data bus data at the receiving end. It should be noted that the memory access control unit 1241 functions as the receiving side, and the cyclic redundancy check encoding polynomial and the size of the encoded data block need to be uniformly defined at the system level. Based on the operating characteristics of each frame of the functional safety indication controller 12, in one embodiment of the present application, the maximum size of the data block is configured to match the size of the entire image.

[0064] The eleventh functional safety detection unit Fusa11 detects random errors occurring in the control path between the functional safety display controller 12 and the memory 13 by monitoring the data bus for timeouts.

[0065] In some embodiments, the eleventh functional safety detection unit Fusa11 defines two request monitoring points. The first monitoring point is located at the request sender, and the second monitoring point is located at the I / O interface between the functional safety display controller 12 and the memory 13. The eleventh functional safety detection unit Fusa11 sets counter 1 and counter 2 for the two monitoring points, respectively. Each time a read request is received from each monitoring point, the corresponding counter counts up. At the same time, the eleventh functional safety detection unit Fusa11 monitors the amount of data returned from the I / O and can indicate this amount of data with counter 3. After one frame is completed, the comparison circuit of the eleventh functional safety detection unit Fusa11 compares the count values ​​of counters 1, 2, and 3. If any two of the count values ​​do not match, the eleventh functional safety detection unit Fusa11 sends a control path error interrupt to the functional safety interrupt of the functional safety display controller 12.

[0066] The twelfth functional safety detection unit Fusa 12 detects random errors occurring in the control path between the functional safety indication controller 12 and the memory 13 by monitoring the data bus protocol.

[0067] In some embodiments, the twelfth functional safety detection unit Fusa 12 can define protocol violation scenarios based on the bus protocol, and if any bus protocol violation is detected, the twelfth functional safety detection unit Fusa 12 sends a control path error interrupt to the functional safety interrupt of the functional safety indication controller 12.

[0068] In one embodiment of the present application, the functional safety display controller 12 includes an internal storage module 125, which stores image data read from the memory 13. Please continue to refer to Fig. 3. In one embodiment of the present application, the internal storage module 125 includes an internal storage unit 1251 and a thirteenth functional safety detection unit Fusa13. The thirteenth functional safety detection unit Fusa13 detects circuit random errors occurring in the internal storage module.

[0069] In some embodiments, the thirteenth functional safety detection unit Fusa13 can protect the internal storage unit 1251 by ECC (Error Correcting Code).

[0070] In one embodiment of the present application, the functional safety indication controller 12 includes an interrupt control module 126. All permanent and temporary errors detected by the functional safety detection unit are reported to the central controller 11 by the interrupt control module 126.

[0071] Optionally, in one embodiment of the present application, the interrupt control module 126 includes an interrupt control unit 1261 and a fourteenth functional safety detection unit Fusa14. The fourteenth functional safety detection unit Fusa14 detects and corrects circuit random errors that occur in the functional safety interrupt path.

[0072] Considering the high severity of circuit random errors occurring in the interrupt control unit 1261, in some embodiments, the fourteenth functional safety detection unit Fusa14 detects and corrects circuit random errors occurring in the functional safety interrupt path through triple modular redundancy protection. Specifically, triple modular redundancy generates two identical modules according to the module to be reinforced and outputs them by majority vote, ensuring that the circuit can operate normally even if one module fails, greatly reducing the impact of random errors occurring in the interrupt circuit itself and improving system reliability.

[0073] As can be seen from the above, the functional safety indication control system 1 provided in some embodiments of the present application can detect permanent errors that occur during the power-on period and the normal display period by means of the functional safety detection units Fusa05, Fusa06, and Fusa09, and can monitor permanent and temporary errors that occur in the circuit during the normal display period in real time by means of the functional safety detection units Fusa01 to Fusa04, Fusa07, and Fusa08 and the functional safety detection units Fusa10 to Fusa14. Furthermore, permanent and temporary errors that occur in the functional safety indication controller 12 are reported to the central controller 11 in the form of an interrupt, and the interrupt path allows the functional safety detection units to detect and correct permanent and temporary errors that occur in the circuit, thereby enabling the central controller 11 to obtain accurate interrupt warnings.

[0074] Furthermore, in some embodiments of the present application, the data bus between the functional safety display controller 12 and the memory 13 can be detected for random errors occurring on the data bus by functional safety detection units Fusa05, Fusa10, Fusa11, and Fusa12. In these embodiments, the display data path between the functional safety display controller 12 and the display 14 can be detected for random errors occurring on the display data bus by functional safety detection units Fusa05 to Fusa07.

[0075] Based on the above description of the functional safety indication control system, an embodiment of the present application further provides a functional safety indication controller. The functional safety indication controller is communicatively connected to a central controller, a memory, and a display. At least one internal module of the functional safety indication controller is provided with a functional safety detection unit, which detects random errors occurring in the corresponding module. The functional safety indication controller provided in the embodiment of the present application can be realized using the structures and connection methods shown in Figures 1 to 3, but the present application is not limited thereto.

[0076] As described above, the functional safety display controller provided in the embodiments of the present application is communicatively connected to a central controller, memory, and display, which together constitute a functional safety display control system. This system is a hardware functional safety display control system compliant with the ISO 26262 standard, which can simultaneously consider issues such as research and development costs, risk control, and system area overhead. Furthermore, the functional safety display controller provided in some embodiments of the present application can subdivide corresponding functional safety detection mechanisms according to circuit function and type, control area overhead, and is inheritable and scalable. Furthermore, the functional safety display control system provided in some embodiments of the present application, which is comprised of the functional safety display controller, central controller, memory, and display, does not require software for authentication and can detect and report electronic or electrical random errors occurring in the circuit in real time. This enables significant reductions in product research and development costs, improved development speed, and reduced development risks while providing higher real-time performance, safety, and reliability. Compared to conventional display control systems, the functional safety display control system requires only 1.2 to 1.4 times the area overhead to detect more than 90% of circuit random errors. Therefore, the present application overcomes various shortcomings of the prior art and has significant industrial value.

[0077] In the various embodiments provided herein, it should be understood that the disclosed system or device can be realized in other ways. For example, the device embodiments described above are merely examples, and the division of modules / units merely represents a division of logical functions. In actual implementation, other division methods may be used. For example, multiple modules or units may be combined or integrated into other systems. Some functions may be omitted or not performed. On the other hand, the coupling or direct coupling or communication connection between modules shown or discussed may be an indirect coupling or communication connection through some interfaces, devices, or modules or units, and may be in an electrical, mechanical, or other form.

[0078] Modules / units described as separate components may or may not be physically separated. Furthermore, components shown as modules / units may or may not be physical modules. That is, they may be located in a single location or distributed across multiple network units. Depending on actual requirements, some or all of the modules / units may be selected to achieve the objectives of the embodiments of the present application. For example, each functional module / unit in each embodiment of the present application may be integrated into a single processing module, each module / unit may exist physically alone, or two or more modules / units may be integrated into a single module / unit.

[0079] Those skilled in the art should also recognize that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be realized by electronic hardware, computer software, or a combination thereof. To clearly explain the interoperability of hardware and software, the above description generally describes the configurations and steps of each example based on their functions. Whether these functions are implemented in a hardware or software manner is determined by the specific application and design constraints of the technical solution. In a specific application, those skilled in the art may use different methods to realize the above functions, but such implementation should not be considered as departing from the scope of the present application.

[0080] The above embodiments are merely illustrative of the principles and effects of the present application and are not intended to limit the present application. Those skilled in the art can supplement or modify the above embodiments without departing from the spirit and scope of the present application. Therefore, any equivalent supplements or modifications that can be completed by those skilled in the art without departing from the spirit and technical ideas disclosed in the present application are still within the scope of the claims of the present application. [Explanation of symbols]

[0081] 1 Functional safety display control system 11 Central Controller 12 Functional safety display controller 121 Register Analysis Module 1211 Register Analysis Unit 122 Image Processing Module 1221 Image Processing Unit 123 Display Interface Control Module 1231 Display Interface Control Unit 124 Memory Access Control Module 1241 Memory Access Control Unit 125 Internal Storage Module 1251 Internal Storage Unit 126 Interrupt Control Module 1261 Interrupt Control Unit 13. Memory 14 Display Fusa01 1st Functional Safety Detection Unit Fusa02 Second Functional Safety Detection Unit Fusa03 3rd Functional Safety Detection Unit Fusa04 4th Functional Safety Detection Unit Fusa05 5th Functional Safety Detection Unit Fusa06 6th Functional Safety Detection Unit Fusa07 7th Functional Safety Detection Unit Fusa08 8th Functional Safety Detection Unit Fusa09 9th Functional Safety Detection Unit Fusa10 10th Functional Safety Detection Unit Fusa11 11th Functional Safety Detection Unit Fusa12 12th Functional Safety Detection Unit Fusa13 13th Functional Safety Detection Unit Fusa14 14th Functional Safety Detection Unit

Claims

1. a functional safety display controller connected to a central controller, a memory, and a display via a communication line, At least one internal module of the functional safety indication controller is provided with a corresponding functional safety detection unit, and the functional safety detection unit detects random errors in the corresponding module.

2. The functional safety indication controller includes a register analysis module, and the register analysis module is provided with a first functional safety detection unit and a second functional safety detection unit; The first functional safety detection unit detects a random error in the interface between the central controller and the functional safety display controller, and detects a random error in the configuration data of the functional safety display controller and the internal use terminal; The functional safety indication controller according to claim 1 , wherein the second functional safety detection unit detects random errors occurring in a control circuit between the central controller and the functional safety indication controller.

3. The first functional safety detection unit detects random errors in the interface between the central controller and the functional safety indication controller by performing a parity check on the content of a configuration bus, and detects random errors in the configuration data of the functional safety indication controller and internal use terminals; and / or The functional safety indication controller of claim 2, wherein the second functional safety detection unit detects random errors occurring in a control circuit between the central controller and the functional safety indication controller by performing timeout monitoring on a configuration bus.

4. the functional safety display controller includes an image processing module, and the image processing module is provided with a third functional safety detection unit, a fourth functional safety detection unit, and a fifth functional safety detection unit; The third functional safety detection unit detects random errors occurring in internal pipeline data information of the functional safety indication controller; The fourth functional safety detection unit detects a random error occurring in a combinational circuit between internal pipelines of the functional safety indication controller; The functional safety indication controller according to claim 1 , wherein the fifth functional safety detection unit detects a permanent circuit error occurring in the functional safety indication controller.

5. The third functional safety detection unit detects random errors occurring in the internal pipeline data information of the functional safety indication controller by performing a parity check on the sequential circuit; and / or The fourth functional safety detection unit detects random errors occurring in a combinational circuit between internal pipelines of the functional safety indication controller, with each stage of the pipeline being the smallest unit; and / or The functional safety indication controller according to claim 4 , wherein the fifth functional safety detection unit detects permanent circuit errors occurring in the functional safety indication controller through a hardware test library.

6. The functional safety display controller includes a display interface control module, and the display interface control module is provided with a sixth functional safety detection unit, a seventh functional safety detection unit, and an eighth functional safety detection unit; The sixth functional safety detection unit detects a permanent circuit error occurring in the functional safety indication controller; the seventh functional safety detection unit detects a random error occurring in an internal pixel pipeline control circuit of the functional safety display controller; The functional safety display controller according to claim 1 , wherein the eighth functional safety detection unit detects random errors occurring in display data between the functional safety display controller and the display.

7. The sixth functional safety detection unit detects a permanent circuit error occurring in the functional safety indication controller by a hardware test library; and / or the seventh functional safety detection unit detects random errors occurring in an internal pixel pipeline control circuit of the functional safety display controller by pixel count monitoring; and / or The functional safety display controller of claim 6, wherein the eighth functional safety detection unit detects random errors occurring in display data between the functional safety display controller and the display by performing cyclic redundancy check encoding on pixel data at the transmitting end.

8. the functional safety display controller includes a memory access control module, and the memory access control module is provided with a ninth functional safety detection unit, a tenth functional safety detection unit, an eleventh functional safety detection unit, and a twelfth functional safety detection unit; The ninth functional safety detection unit detects a permanent circuit error occurring in the functional safety indication controller; The tenth functional safety detection unit detects random errors occurring in a pixel transmission data path between the functional safety display controller and the memory; The functional safety indication controller of claim 1 , wherein the 11th functional safety detection unit and the 12th functional safety detection unit detect random errors occurring in a control path between the functional safety indication controller and the memory.

9. The ninth functional safety detection unit detects a permanent circuit error occurring in the functional safety indication controller by a hardware test library; and / or the tenth functional safety detection unit detects random errors occurring in a pixel transmission data path between the functional safety display controller and the memory by performing cyclic redundancy check decoding on data bus data at the receiving end; and / or The eleventh functional safety detection unit detects random errors occurring in a control path between the functional safety indication controller and the memory by performing timeout monitoring on a data bus; and / or The functional safety indication controller of claim 8, wherein the twelfth functional safety detection unit detects random errors occurring in a control path between the functional safety indication controller and the memory by monitoring a data bus protocol.

10. The functional safety indication controller includes an internal storage module, and the internal storage module is provided with a thirteenth functional safety detection unit; The functional safety indication controller of claim 1 , wherein the thirteenth functional safety detection unit detects a circuit random error occurring in the internal storage module.

11. The functional safety indication controller of claim 10 , wherein the thirteenth functional safety detection unit detects circuit random errors occurring in the internal storage module by using an error correction code.

12. The functional safety indication controller of claim 1, wherein the functional safety indication controller further includes an interrupt control module, and permanent errors and / or temporary errors detected by the functional safety detection unit are reported to the central controller by the interrupt control module in the form of an interrupt.

13. the interrupt control module includes a fourteenth functional safety detection unit; The functional safety indication controller of claim 12 , wherein the fourteenth functional safety detection unit detects and corrects circuit random errors occurring in a functional safety interrupt path.

14. The functional safety indication controller of claim 13 , wherein the fourteenth functional safety detection unit detects and corrects circuit random errors occurring in the functional safety interrupt path using a triple modular redundancy scheme.

15. The functional safety display controller of claim 1, wherein the functional safety detection unit detects random errors occurring on a configuration bus between the functional safety display controller and the central controller, random errors occurring on an image data bus between the functional safety display controller and the memory, and / or random errors occurring on a display data bus between the functional safety display controller and the display.

16. A functional safety indication control system comprising a central controller, a memory, a display, and the functional safety indication controller according to any one of claims 1 to 15.

Images