Vehicle display device

Abstract

Provided is a vehicular display device that suppresses malfunctioning of a vehicle due to malfunctioning of a touch panel module.　This vehicular display device DP comprises a touch panel module 1 and a control unit 2, wherein the touch panel module 1 comprises a storage unit 14 for storing calibration data, which is an adjustment parameter for touch coordinate detection, and the control unit 2 comprises a ROM 23 for storing correct calibration data, and a failsafe control means for detecting a malfunction of the touch panel module 1. After startup of the control unit 2 and before an automatic parking layout screen Lo2, which includes an automatic parking execution operation button SB, which is the malfunction detection subject of the failsafe control means, is displayed on the touch panel module 1, the failsafe control means executes a first confirmation process for confirming that the calibration data stored in the storage unit 14 is correct.

Description

Technical Field

[0001] The present disclosure relates to a display device for vehicles.

Background Art

[0002] A vehicle display device including a touch panel module that displays operation buttons is disclosed in Patent Document 1.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] However, Patent Document 1 has room for improvement from the perspective of functional safety when executing in-vehicle functions using the operation buttons displayed on the touch panel module.

[0005] Therefore, an object of the present disclosure is to provide a vehicle display device capable of suppressing malfunction of a vehicle caused by malfunction of a touch panel module.

Means for Solving the Problems

[0006] In one aspect, the following solution means is provided. (1) A vehicle display device comprising: a touch panel module for detecting touch coordinates on a display screen; and a control unit for switching and displaying a plurality of layout screens including operation buttons on the touch panel module and for inputting the touch coordinates from the touch panel module, wherein the touch panel module comprises a first storage unit for storing calibration data which are adjustment parameters for touch coordinate detection; the control unit comprises a second storage unit for storing the correct calibration data; and fail-safe control means for detecting malfunctions of the touch panel module; the layout screen comprises a first layout screen which does not include fail-safe control target operation buttons that are subject to malfunction detection by the fail-safe control means; and a second layout screen which includes the fail-safe control target operation buttons; and the fail-safe control means, after the start of the control unit and before the second layout screen is displayed on the touch panel module, performs a first verification process to compare the calibration data stored in the first storage unit with the calibration data stored in the second storage unit and to confirm whether the calibration data stored in the first storage unit is correct. Furthermore, when the fail-safe control means determines that the calibration data stored in the first storage unit is incorrect, it overwrites the calibration data stored in the first storage unit with the correct calibration data. It is characterized by the following: (2) In the configuration of (1) above, the fail-safe control target operation button is characterized in that it is an operation button that executes the vehicle's automatic control mode. (3) In the configuration of (1) or (2) above ,before The fail-safe control means is characterized in that, after the conditions for switching from the first layout screen to the second layout screen are met, and before the touch panel module completes the display of the second layout screen, if it detects a touch operation within the operation detection range of the fail-safe controlled operation button, it determines that an erroneous operation of the fail-safe controlled operation button has occurred. ( 4 ) Above (1)~( 3In any of the configurations of the above, the failsafe control means is characterized in that, when the touch panel module displays the second layout screen, it performs a second confirmation process to confirm whether the failsafe control target operation button is displayed correctly. [Effects of the Invention]

[0007] According to this disclosure, it is possible to provide a vehicle display device that can suppress vehicle malfunctions caused by malfunctions of the touch panel module. [Brief explanation of the drawing]

[0008] [Figure 1] This is an internal perspective view of a vehicle equipped with the vehicle display device of this embodiment. [Figure 2] This diagram shows the display screens of a vehicle display device. (a) is a diagram of the music playback layout screen (first layout screen) including music playback operation buttons, (b) is a diagram of the layout screen (second layout screen) including automatic parking execution operation buttons (failsafe control target operation buttons), and (c) is a diagram of the display screen when a malfunction is detected. [Figure 3] This is a block diagram showing the configuration of a vehicle display device. [Figure 4] This is a flowchart showing the processing procedure of the control unit. [Modes for carrying out the invention]

[0009] The following describes each embodiment in detail with reference to the attached drawings.

[0010] As shown in Figure 1, the vehicle display device DP of this embodiment is a multi-information display mounted in the left-right center of the dashboard DB of the vehicle V, and is capable of displaying various information and operating functions.

[0011] For example, as shown in Figure 2(a), the vehicle display device DP displays a music playback layout screen Lo1 (first layout screen) which includes the operating status of the music playback function and music playback operation buttons MB1 to MB3. Passengers in vehicle V can operate the music playback function by touching the music playback operation buttons MB1 to MB3 displayed on the vehicle display device DP.

[0012] Furthermore, as shown in Figure 2(b), the vehicle display device DP displays the operating status of the vehicle V's automatic parking function (one of the automatic control modes) and the automatic parking execution button SB (fail-safe controlled operation button), which is included in the automatic parking layout screen Lo2 (second layout screen). The occupant of vehicle V can activate the vehicle V's automatic parking function by touching the automatic parking execution button SB displayed on the vehicle display device DP.

[0013] As shown in Figure 3, the vehicle display device DP obtains the operating status of the vehicle V's automatic parking function from the vehicle control controller ECU via the in-vehicle network LAN and displays this operating status. Furthermore, when the automatic parking execution button SB displayed on the screen is touched, the vehicle display device DP sends a request to start the automatic parking function to the vehicle control controller ECU via the in-vehicle network LAN. Upon receiving the request to start the automatic parking function, the vehicle control controller ECU activates the vehicle V's automatic parking function.

[0014] Next, an example configuration of the vehicle display device DP will be explained with reference to Figure 3.

[0015] The vehicle display device DP comprises a touch panel module 1 and a control unit 2. The touch panel module 1 comprises a touch panel 11, a display panel 12, a driver 13, and a storage unit 14 (first storage unit). The driver 13 displays the display data input from the control unit 2 on the display panel 12 while detecting the touch coordinates of the touch panel 11. The storage unit 14 stores calibration data for the touch panel 11 and the display panel 12. This calibration data consists of adjustment parameters set for each touch panel module 1, and includes, for example, coordinate adjustment parameters, sensitivity adjustment parameters, and noise filter adjustment parameters. The coordinate adjustment parameters are used to adjust the relative relationship between the detected coordinates of the touch panel 11 and the displayed coordinates of the display panel 12. The sensitivity adjustment parameters are used to adjust the detection sensitivity of the touch panel 11. The noise filter adjustment parameters are used to adjust the filter for removing noise components from the detection signal of the touch panel 11.

[0016] The control unit 2 comprises a CPU 21, RAM 22, and ROM 23 (second memory unit). The CPU 21 reads programs (software) and display data stored in ROM 23 onto RAM 22 and sequentially executes various processes described in the programs. For example, it can switch between and display multiple layout screens Lo1 and Lo2 on the touch panel module 1, or execute processes according to touch coordinates input from the touch panel module 1. The ROM 23 also stores the correct calibration data stored in the memory unit 14 of the touch panel module 1. This correct calibration data is a copy of the calibration data stored in the memory unit 14 of the touch panel module 1 after adjustment (adjustment of various calibration data) was performed on the touch panel module 1 during the manufacturing of the vehicle display device DP.

[0017] The control unit 2 includes a fail-safe control means as a functional configuration realized by the cooperation of hardware and software. The fail-safe control means is a functional configuration for detecting a malfunction of the touch panel module 1 when displaying a fail-safe control target operation button (for example, the automatic parking execution operation button SB) among the operation buttons MB1 to MB3 and SB that is a fail-safe control target.

[0018] In the present embodiment, the automatic parking execution operation button SB is exemplified as the fail-safe control target operation button, but operation buttons for executing other automatic control modes of the vehicle V can also be included. Other automatic control modes are, for example, modes in which the vehicle V automatically controls part or all of the steering operation and acceleration / deceleration operation of the vehicle, such as the automatic driving function and the cruise control function, instead of the driver of the vehicle V. Such operation buttons, in the risk classification of ASIL (Automotive Safety Integrity Level: automotive safety level), have a higher risk of causing injury to the driver or passengers in case of malfunction compared to general operation buttons such as the music playback operation buttons MB1 to MB3, so safety measures are desired.

[0019] Therefore, the fail-safe control means of the present embodiment prevents the automatic parking execution operation button SB from being erroneously determined to have been operated due to a malfunction of the touch panel module 1 even though the occupant has no intention of operating it. The events detected by the fail-safe control means as malfunctions of the touch panel module 1 include the following three events. 1) When the calibration data stored in the storage unit 14 of the touch panel module 1 is damaged (hereinafter, sometimes referred to as the first event) 2) When an incorrect touch operation determination is made due to false detection caused by water droplets, static electricity, etc. or a malfunction of the touch panel module 1 (hereinafter, sometimes referred to as the second event) 3) When the fail-safe control target operation switch is not correctly displayed on the display panel 12 due to damage to the display data, displacement of the display position, etc. (hereinafter, sometimes referred to as the third event)

[0020] Specifically, the fail-safe control means performs a first verification process regarding the first event between the start of the control unit 2 and the display of the automatic parking layout screen Lo2 on the touch panel module 1. In the first verification process, the calibration data stored in the memory unit 14 of the touch panel module 1 is compared with the calibration data stored in the ROM 23 of the control unit 2 to confirm whether the calibration data stored in the memory unit 14 is correct (Verify process). This first verification process makes it possible to detect corruption of the calibration data, which is one of the causes of malfunction of the touch panel module 1.

[0021] When the fail-safe control means determines that the calibration data stored in the memory unit 14 is incorrect, it overwrites the calibration data stored in the memory unit 14 with the correct calibration data (the calibration data stored in the ROM 23). This overwriting process not only prevents malfunctions of the touch panel module 1 caused by corruption of the calibration data, but also normalizes the operation of the touch panel module 1 with the correct calibration data.

[0022] The fail-safe control means executes an error detection process related to the second event after the condition for switching from the music playback layout screen Lo1 to the automatic parking layout screen Lo2 is met, and before the touch panel module 1 completes the display of the automatic parking layout screen Lo2. In this error detection process, it is determined whether or not a touch operation occurred within the operation detection range of the automatic parking execution button SB immediately before the display of the automatic parking layout screen Lo2. If it is determined that a touch operation occurred, it is determined that the operation was an error caused by the second event. This error detection process prevents malfunctions of the automatic parking function caused by incorrect operation detection of the automatic parking execution button SB due to the second event.

[0023] The fail-safe control means performs a second confirmation process regarding the third event when the automatic parking layout screen Lo2 is displayed on the touch panel module 1. In the second confirmation process, it is checked whether the automatic parking execution button SB is displayed correctly. By performing such a second confirmation process, it is possible to prevent malfunctions of the automatic parking function caused by incorrect operation detection of the automatic parking execution button SB due to the third event.

[0024] Specifically, the fail-safe control mechanism uses the SDM (Safe Display Monitor) function to verify whether a particular memory area has a pre-configured correct data pattern. The SDM function pre-calculates error code values ​​for correct data patterns (e.g., CRC (Cyclic Redundancy Check) or MD5 (Message Digest algorithm 5)), calculates the current error code for the specific memory area, compares the error detection code values, and verifies whether the data in the specific memory area is correct based on the match.

[0025] In other words, the control unit 2 displays a predetermined screen on the touch panel module 1 by transmitting screen data stored in a predetermined memory area of ​​the RAM 22 to the touch panel module 1. Therefore, a predetermined memory area of ​​the RAM 22 is set in advance as a specific memory area for the SDM function, and a screen data pattern that displays the automatic parking layout screen Lo2 is set as the correct data pattern that has been set in advance. Then, before the control unit 2 transmits the screen data of the automatic parking layout screen Lo2 to the touch panel module 1 for display, the SDM function is executed to check the predetermined memory area of ​​the RAM 22, confirming whether the automatic parking execution button SB is correctly displayed on the touch panel module 1.

[0026] Next, the processing procedure of the control unit 2 that implements the fail-safe control means described above will be explained with reference to Figure 4.

[0027] When the control unit 2 is activated in response to the vehicle system being started (for example, when the vehicle is started by a vehicle start switch such as the ignition switch), it checks whether the correct data stored in the ROM 23 matches the calibration data stored in the memory unit 14 of the touch panel module 1 (process S1). If the control unit 2 determines that they do not match, it determines that the calibration data in the memory unit 14 is abnormal due to corruption or other reasons, and proceeds to process S2. If it determines that they match, it proceeds to process S3.

[0028] If the control unit 2 proceeds to process S2, it overwrites the calibration data stored in the memory unit 14 with the correct data stored in the ROM 23, and then proceeds to process S3. If the control unit 2 proceeds to process S3, it displays the music playback layout screen Lo1 on the touch panel module 1, and then proceeds to process S4.

[0029] If the control unit 2 proceeds to process S4, it determines whether the conditions for switching to the automatic parking layout screen Lo2 are met. If the conditions for switching are met, the control unit 2 proceeds to process S5; otherwise, it returns to process S3. The conditions for switching to the automatic parking layout screen Lo2 are met, for example, when the vehicle control controller ECU notifies that the automatic parking function of the vehicle V is in an executable state (for example, when the vehicle is stopped and a parking area that can be parked in the surrounding area is detected), and when the operation of the switch operation button CB (for example, the switch tab) for switching to the automatic parking layout screen Lo2 displayed on the touch panel module 1 is detected.

[0030] If the control unit 2 proceeds to process S5, it determines whether the operation detection range of the automatic parking execution button SB has been operated before displaying the automatic parking layout screen Lo2, which includes the operating status of the automatic parking function and the automatic parking execution button SB, on the touch panel module 1. If the control unit 2 detects an operation, it determines that it is an incorrect operation and proceeds to process S6; if no operation is detected, it proceeds to process S7.

[0031] If the control unit 2 proceeds to process S6, it notifies that an operation error or a display error has occurred with the automatic parking execution button SB, preventing the operation of the automatic parking function. This notification is given, for example, by displaying an error message EM (see Figure 2(c)) on the touch panel module 1 or by sounding an audible alert. After giving the notification, the control unit 2 returns to process S3.

[0032] If the control unit 2 proceeds to process S7, it checks whether the automatic parking execution button SB on the automatic parking layout screen Lo2 is displayed correctly. If the control unit 2 determines that it is displayed correctly, it proceeds to process S6; otherwise, it proceeds to process S8.

[0033] If the control unit 2 proceeds to process S8, it displays the automatic parking layout screen Lo2 on the touch panel module 1, and then proceeds to process S9. If the control unit 2 proceeds to process S9, it determines whether a touch operation has been performed on the automatic parking execution button SB. If the control unit 2 determines that no operation has been performed, it returns to process S8. If it determines that an operation has been performed, it sends an activation signal for the automatic parking function to the vehicle control controller ECU and proceeds to process S10. If the control unit 2 proceeds to process S10, it displays the operating status on the touch panel module 1 while the automatic parking function is operating, and returns to process S3 when the operation of the automatic parking function is completed.

[0034] Although each embodiment has been described in detail above, the invention is not limited to any particular embodiment, and various modifications and changes are possible within the scope described in the claims. Furthermore, it is possible to combine all or more of the components of the embodiments described above.

[0035] In the above embodiment, an example was shown in which the first confirmation process for the first event is performed when the vehicle system starts up, but the embodiment is not limited to this. For example, the first confirmation process may be performed immediately before the automatic parking layout screen Lo2 is displayed on the touch panel module 1. In the former case, if the first confirmation process is performed when the vehicle system starts up, the confirmation is performed only once during system startup, but in the latter case, the confirmation is performed each time the automatic parking layout screen Lo2 is displayed, thus increasing the robustness of the system. [Explanation of Symbols]

[0036] V Vehicle DB Dashboard DP Vehicle Display Device 1 Touch Panel Module 11 Touch Panel 12 Display Panel 13 Driver 14 Memory Unit (First Memory Unit) 2 Control Unit 21 CPU 22 RAM 23 ROM (Second Memory Unit) SB Automatic Parking Execution Button (Fail-Safe Control Target Operation Button) MB1~MB3 Music Playback Operation Button CB Switching Operation Button EM Error Message Lo1 Music Playback Layout Screen (First Layout Screen) Lo2 Automatic Parking Layout Screen (Second Layout Screen)

Claims

1. A touch panel module that detects touch coordinates on the display screen, A vehicle display device comprising: a control unit that switches and displays multiple layout screens including operation buttons on the touch panel module, and inputs the touch coordinates from the touch panel module, The aforementioned touch panel module is It includes a first storage unit that stores calibration data, which is an adjustment parameter for touch coordinate detection. The control unit, A second storage unit that stores the correct calibration data, The system includes fail-safe control means for detecting malfunctions of the touch panel module, The aforementioned layout screen includes: A first layout screen that does not include fail-safe control target operation buttons that are subject to failure detection by the fail-safe control means, There is a second layout screen that includes the operation buttons subject to fail-safe control, The fail-safe control means, after the control unit is started up and before the second layout screen is displayed on the touch panel module, compares the calibration data stored in the first storage unit with the calibration data stored in the second storage unit and performs a first verification process to confirm whether the calibration data stored in the first storage unit is correct. A vehicle display device that, when it is determined that the calibration data stored in the first storage unit is incorrect, rewrites the calibration data stored in the first storage unit with the correct calibration data.

2. The vehicle display device according to claim 1, wherein the fail-safe controlled operation button is an operation button that executes an automatic control mode for the vehicle.

3. The vehicle display device according to claim 1, wherein the failsafe control means determines that an erroneous operation has occurred to the failsafe control target operation button when a touch operation is detected within the operation detection range of the failsafe control target operation button between the time the switching condition from the first layout screen to the second layout screen is met and the time the touch panel module completes the display of the second layout screen.

4. The vehicle display device according to any one of claims 1 to 3, wherein the failsafe control means performs a second verification process to check whether the failsafe control target operation button is correctly displayed when the second layout screen is displayed on the touch panel module.

Images