Vehicle control apparatus

Abstract

A vehicle control apparatus according to one embodiment of the present disclosure comprises: a first signal processing apparatus including a first processor and a first memory; a second signal processing apparatus electrically connected to the first signal processing apparatus and including a second processor and a second memory; and a controller electrically connected to the second signal processing apparatus and receiving a signal from a hardware switch or a sensor or controlling at least one actuator, wherein when an operation error of the switch, the sensor, or the actuator is detected, the control apparatus transmits an error signal of the device to the first signal processing apparatus or the second signal processing apparatus, and the first processor or the second processor requests execution of a first service for substituting the operation of the device on the basis of the error signal. Accordingly, an alternative service can be quickly executed when an operation error of a device connected to the control apparatus occurs.

Description

vehicle control unit

[0001] The present disclosure relates to a vehicle control device, and more particularly, to a vehicle control device capable of quickly executing a replacement service in the event of an operation error of a device connected to the control device.

[0002] A vehicle is a device that allows the user to move in the desired direction. A representative example is an automobile.

[0003] Meanwhile, for the convenience of vehicle users, vehicle control devices are installed inside the vehicle.

[0004] The vehicle control device can perform signal processing based on sensor data from various internal sensor devices.

[0005] Meanwhile, there is a problem in which vehicle control cannot be performed stably when there is an error in the operation of hardware switches or sensor devices within the vehicle.

[0006] The problem that the present disclosure seeks to solve is to provide a vehicle control device that can quickly execute a replacement service in the event of an operation error in a device connected to the control device.

[0007] Another problem that the present disclosure seeks to solve is to provide a vehicle control device that can quickly execute a replacement service based on a service-oriented architecture when a device connected to the control device malfunctions.

[0008] In order to solve the above technical problem, a vehicle control device according to one embodiment of the present disclosure includes a first signal processing device having a first processor and a first memory, a second signal processing device electrically connected to the first signal processing device and having a second processor and a second memory, and a controller electrically connected to the second signal processing device and receiving a signal from a hardware switch or sensor or controlling at least one actuator, wherein the control device transmits an error signal of the device to the first signal processing device or the second signal processing device when an operation error of the switch, sensor, or actuator is detected, and the first processor or the second processor requests execution of a first service for replacing the operation of the device based on the error signal.

[0009] Meanwhile, the first processor or the second processor may generate execution-related data of the first service for replacing the operation of the device based on the error signal, determine whether the first service exists in the first memory or the second memory, and if not, generate the first service based on the execution-related data of the first service.

[0010] Meanwhile, the first processor or the second processor can determine, based on the error signal, whether a first service for replacing the operation of the device exists in the first memory or the second memory, and if not, create the first service and control the execution of the first service.

[0011] Meanwhile, the first processor or the second processor may execute a first service for replacing the operation of the device based on an error signal, and after executing the first service, request the server to create a second service for replacing the operation of the device, receive execution-related data of the second service from the server, and execute the second service instead of the first service based on the execution-related data of the second service.

[0012] Meanwhile, the first processor or the second processor may execute a first service for replacing the operation of the device based on an error signal, and after the execution of the first service, request the server to create a second service for replacing the operation of the device, receive data related to the second service from the server, create execution-related data of the second service based on the data related to the second service, and execute the second service instead of the first service based on the execution-related data of the second service.

[0013] Meanwhile, the first processor or the second processor can determine, based on the error signal, whether a first service for replacing the operation of the device exists in the first memory or the second memory, and if not, can generate the first service based on the input signal or collected driving information, and can control the execution of the first service after verification of the first service is completed.

[0014] Meanwhile, the first processor or the second processor can determine, based on the error signal, whether a first service for replacing the operation of the device exists in the first memory or the second memory, and if not, can control to generate the first service and execute the first service based on learning of the error classification information or driving information of the device.

[0015] Meanwhile, the first processor or the second processor may determine, based on the error signal, whether a first service for replacing the operation of the device exists in the first memory or the second memory, and if not, may execute an application, perform voice recognition, perform gesture recognition, or generate the first service based on the error classification information of the device.

[0016] Meanwhile, the first processor or the second processor, based on an error signal based on an error of the camera, executes the first service for replacing the operation of the camera if the first service exists in the first memory or the second memory, and can control the controller to operate the replacement device based on the execution of the first service.

[0017] Meanwhile, the first processor or the second processor, based on an error signal based on an error of the camera, if the first service for replacing the operation of the camera does not exist in the first memory or the second memory, may request the server to create the first service, execute the first service based on data received from the server, and control the controller to operate the replacement device based on the execution of the first service.

[0018] Meanwhile, the first processor or the second processor executes a service agent for executing a vehicle service, and the service agent can request execution of a first service for replacing the operation of the device based on an error signal.

[0019] Meanwhile, the service agent may generate execution-related data of the first service for replacing the operation of the device based on the error signal, determine whether the first service exists in the first memory or the second memory, and if not, generate the first service based on the execution-related data of the first service.

[0020] Meanwhile, the service agent can execute a first service for replacing the operation of the device based on the error signal, and after the execution of the first service, request the server to create a second service for replacing the operation of the device, receive execution-related data of the second service from the server, and control the execution of the second service instead of the first service based on the execution-related data of the second service.

[0021] Meanwhile, the service agent may execute a first service for replacing the operation of the device based on an error signal, and after executing the first service, request the server to create a second service for replacing the operation of the device, receive data related to the second service from the server, create execution-related data of the second service based on the data related to the second service, and execute the second service instead of the first service based on the execution-related data of the second service.

[0022] Meanwhile, the first processor or the second processor executes a service agent for executing a vehicle service, and the service agent executes the first service when receiving an error signal from the device, but can control the execution of at least a part of the first service and only the other part according to the safety level.

[0023] Meanwhile, the first processor or the second processor executes a service agent for executing a vehicle service, and the service agent executes the first service when receiving an error signal from the device, but can control the execution of some application programming interfaces within the first service and only some application programming interfaces according to the safety level.

[0024] A vehicle control device according to one embodiment of the present disclosure comprises: a first signal processing device having a first processor and a first memory; a second signal processing device electrically connected to the first signal processing device and having a second processor and a second memory; and a controller electrically connected to the second signal processing device and configured to receive a signal from a hardware switch or a sensor or to control at least one actuator; wherein, when an operation error of the switch, sensor, or actuator is detected, the control device transmits an error signal of the device to the first signal processing device or the second signal processing device, and the first processor or the second processor requests execution of a first service for operation replacement of the device based on the error signal. Accordingly, when an operation error of a device connected to the control device occurs, a replacement service can be quickly executed. In particular, when an operation error of a device connected to the control device occurs, a service-oriented architecture-based replacement service can be quickly executed.

[0025] Meanwhile, the first processor or the second processor, based on the error signal, can determine whether a first service for device operation replacement exists within the first memory or the second memory, and if not, can generate the first service. Accordingly, in the event of a device operation error connected to the control device, the replacement service can be quickly executed.

[0026] Meanwhile, the first processor or the second processor can determine, based on the error signal, whether a first service for device operation replacement exists within the first memory or the second memory. If not, the first service is created and controlled to be executed. Accordingly, in the event of an operation error in a device connected to the control device, the replacement service can be quickly executed.

[0027] Meanwhile, the first processor or the second processor may execute a first service for replacing the operation of the device based on an error signal, and after the execution of the first service, request the server to create a second service for replacing the operation of the device, receive execution-related data of the second service from the server, and execute the second service in place of the first service based on the execution-related data of the second service. Accordingly, when an operation error occurs in a device connected to the control device, the replacement service can be quickly executed.

[0028] Meanwhile, the first processor or the second processor may execute a first service for replacing the operation of the device based on an error signal, and after the execution of the first service, request the server to generate a second service for replacing the operation of the device, receive data related to the second service from the server, generate execution-related data of the second service based on the data related to the second service, and execute the second service in place of the first service based on the execution-related data of the second service. Accordingly, when an operation error occurs in a device connected to the control device, the replacement service can be quickly executed.

[0029] Meanwhile, the first processor or the second processor can determine, based on the error signal, whether a first service for replacing the device's operation exists within the first memory or the second memory. If not, the first service can be generated based on the input signal or collected driving information, and after verification of the first service is complete, the first service can be controlled to be executed. Accordingly, the replacement service can be quickly executed in the event of an operation error in a device connected to the control device.

[0030] Meanwhile, the first processor or the second processor can determine, based on the error signal, whether a first service for replacing the device's operation exists within the first memory or the second memory. If not, the first service can be generated based on learning of the device's error classification information or operating information, and the first service can be controlled to be executed. Accordingly, the replacement service can be quickly executed in the event of an operation error in a device connected to the control device.

[0031] Meanwhile, the first processor or the second processor may determine, based on the error signal, whether a first service for replacing the device's operation exists within the first memory or the second memory. If not, the first service may be executed, voice recognition may be performed, gesture recognition may be performed, or the first service may be generated based on the device's error classification information. Accordingly, the replacement service can be quickly executed in the event of an operation error in the device connected to the control device.

[0032] Meanwhile, the first processor or the second processor, based on an error signal based on a camera error, executes the first service for camera operation replacement if the first service exists within the first memory or the second memory. Based on the execution of the first service, the controller can control the operation of the replacement device. Accordingly, the replacement service can be quickly executed in the event of an operation error in a device connected to the control device.

[0033] Meanwhile, if a first service for replacing the camera's operation does not exist in the first memory or the second memory based on an error signal based on a camera error, the first processor or the second processor may request the server to create a first service, execute the first service based on data received from the server, and control the controller to operate a replacement device based on the execution of the first service. Accordingly, when an operation error occurs in a device connected to the control device, the replacement service can be quickly executed.

[0034] Meanwhile, the first processor or the second processor executes a service agent for executing vehicle services. The service agent can request execution of a first service for device operation replacement based on an error signal. Accordingly, a replacement service can be quickly executed in the event of an operation error in a device connected to the control unit.

[0035] Meanwhile, the service agent generates execution-related data for a first service for device operation replacement based on the error signal, determines whether the first service exists in the first memory or the second memory, and if not, generates the first service based on the execution-related data of the first service. Accordingly, in the event of an operation error in a device connected to the control device, the replacement service can be quickly executed.

[0036] Meanwhile, the service agent can execute a first service for replacing the operation of the device based on an error signal, and after the execution of the first service, request the server to create a second service for replacing the operation of the device, receive execution-related data of the second service from the server, and control the execution of the second service in place of the first service based on the execution-related data of the second service. Accordingly, when an operation error occurs in a device connected to the control device, the replacement service can be quickly executed.

[0037] Meanwhile, the service agent can execute a first service for replacing the operation of the device based on an error signal, and after the execution of the first service, request the server to create a second service for replacing the operation of the device, receive data related to the second service from the server, create execution-related data of the second service based on the data related to the second service, and execute the second service in place of the first service based on the execution-related data of the second service. Accordingly, when an operation error occurs in a device connected to the control device, the replacement service can be quickly executed.

[0038] Meanwhile, the first processor or the second processor executes a service agent for executing vehicle services. Upon receiving an error signal from the device, the service agent executes the first service. However, depending on the safety level, at least a portion of the first service may be blocked and only the remaining portion may be executed. Accordingly, a replacement service can be quickly executed in the event of an operational error in a device connected to the control unit.

[0039] Meanwhile, the first processor or the second processor executes a service agent for executing a vehicle service. When the service agent receives an error signal from the device, the service agent executes the first service. However, depending on the safety level, some application programming interfaces within the first service can be blocked and only other application programming interfaces can be executed. Accordingly, in the event of an operation error in a device connected to the control device, a replacement service can be quickly executed.

[0040] Figure 1 is a drawing showing an example of the exterior and interior of a vehicle.

[0041] Figure 2 is a drawing showing an example of the architecture of a vehicle control device.

[0042] Figure 3a is a drawing showing an example of the arrangement of displays inside a vehicle.

[0043] Figure 3b is a drawing showing another example of the arrangement of displays inside a vehicle.

[0044] FIG. 4 is an example of an internal block diagram of a vehicle control device according to an embodiment of the present disclosure.

[0045] Figures 5a to 5d are drawings showing various examples of vehicle control devices.

[0046] FIG. 6 is an example of a block diagram of a vehicle control device according to an embodiment of the present disclosure.

[0047] FIG. 7a is an example of an operational configuration diagram of a central signal processing device according to an embodiment of the present disclosure.

[0048] FIG. 7b is an example of an operational configuration diagram of a region signal processing device according to an embodiment of the present disclosure.

[0049] FIG. 8 illustrates an example of execution of a vehicle service in a signal processing device according to an embodiment of the present disclosure.

[0050] Figures 9 and 10 are drawings referred to in the description of Figure 8.

[0051] FIG. 11a is an example of an internal block diagram of a vehicle control device related to the present disclosure.

[0052] Figure 11b is a drawing referenced in the description of Figure 11a.

[0053] FIG. 12a is an example of an internal block diagram of a vehicle control device according to an embodiment of the present disclosure.

[0054] Figure 12b is a drawing referenced in the description of Figure 12a.

[0055] FIG. 13a is an example of an internal block diagram of a vehicle control device according to another embodiment of the present disclosure.

[0056] FIG. 13b is a drawing illustrating an example of operation in the event of an operation error of a hardware device in a vehicle according to an embodiment of the present disclosure.

[0057] Figure 14a is a drawing referenced in the description of the service agent of Figure 13b.

[0058] Figure 14b is a diagram referenced in the description of an alternative service executed in the service agent of Figure 14a.

[0059] Figure 14c is a diagram for reference in explaining the operation of a service agent based on an example scenario.

[0060] FIG. 15A is a diagram illustrating another example of the operation of a vehicle control device according to an embodiment of the present disclosure.

[0061] Figure 15b is a diagram referenced in the description of an alternative service executed in the service agent of Figure 15a.

[0062] Figure 16a illustrates an example of the operation of the alternative service.

[0063] Figure 16b illustrates another example of the operation of the alternative service.

[0064] Figures 17a to 17c are drawings referenced in the description of blocking of the API of Figure 16b.

[0065] Figure 18a is an example of a flowchart showing the operation of deactivation by blocking of a service.

[0066] Figure 18b is an example of a flowchart showing the execution operation of a replacement service of a lighting device.

[0067] Figure 19a is a diagram illustrating an example of execution of a replacement service in the event of an operating error of a hardware device.

[0068] Figure 19b is a diagram illustrating an example of execution of an alternative service in the event of an operation error of a hardware switch.

[0069] Figure 20a illustrates an example of how a server operates.

[0070] FIG. 20b illustrates an example of an operation method of a vehicle control device according to an embodiment of the present disclosure.

[0071] Figures 21a to 22c are drawings referenced in the description of Figure 20b.

[0072] FIG. 23 illustrates an example of an operating method of a vehicle control device according to another embodiment of the present disclosure.

[0073] Figures 24a and 24b are drawings referred to in the description of Figure 23.

[0074] FIG. 25 illustrates an example of an operating method of a vehicle control device according to another embodiment of the present disclosure.

[0075] Figures 26a to 24b are drawings referred to in the description of Figure 23.

[0076] Figure 26b illustrates the execution of a new lidar or radar-based service in the event of a camera operation error.

[0077] Figure 26c is a drawing illustrating an example of execution of an alternative service in the event of an operation error of a low beam device.

[0078] Figure 26d illustrates various operations of the high beam device of Figure 26c.

[0079] FIG. 27 illustrates an example of an operating method of a vehicle control device according to another embodiment of the present disclosure.

[0080] FIGS. 28a to 28b are drawings for reference in the description of an operation similar to FIG. 27 or FIG. 27.

[0081] Hereinafter, the present disclosure will be described in more detail with reference to the drawings.

[0082] The suffixes "module" and "part" used in the following description are given solely for the convenience of writing this specification and do not impart any particularly significant meaning or role to the components themselves. Therefore, the terms "module" and "part" may be used interchangeably.

[0083] Figure 1 is a drawing showing an example of the exterior and interior of a vehicle.

[0084] Referring to the drawing, the vehicle (200) is operated by a plurality of wheels (103FR, 103FL, 103RL, etc.) that rotate by a power source and a steering wheel (150) for controlling the direction of travel of the vehicle (200).

[0085] Meanwhile, the vehicle (200) may further be equipped with a camera (195) for capturing images of the front of the vehicle.

[0086] Meanwhile, the vehicle (200) may be equipped with multiple displays (180a, 180b) for displaying images, information, etc. inside.

[0087] In Fig. 1, a cluster display (180a) and an AVN (Audio Video Navigation) display (180b) are exemplified as multiple displays (180a, 180b). In addition, a HUD (Head Up Display) is also possible.

[0088] Meanwhile, the AVN (Audio Video Navigation) display (180b) may also be called a center information display.

[0089] Meanwhile, the vehicle (200) described in this specification may be a concept that includes all of a vehicle equipped with an engine as a power source, a hybrid vehicle equipped with an engine and an electric motor as a power source, and an electric vehicle equipped with an electric motor as a power source.

[0090] Figure 2 is a drawing showing an example of the architecture of a vehicle control device.

[0091] Referring to the drawing, the architecture (300a) of the vehicle control device can correspond to a zone-based architecture.

[0092] Accordingly, sensor devices and processors inside the vehicle may be placed in each of the plurality of zones (Z1 to Z4), and a signal processing device (170a) including a gateway (GWDa) may be placed in the central area of ​​the plurality of zones (Z1 to Z4).

[0093] Meanwhile, the signal processing device (170a) may further include, in addition to the gateway (GWDa), an autonomous driving control module (ACC), a cockpit control module (CPG), etc.

[0094] The gateway (GWDa) within the signal processing device (170a) may be an HPC (High Performance Computing) gateway.

[0095] That is, the signal processing device (170a) of FIG. 2 is an integrated HPC and can exchange data with an external communication module (not shown) or a processor (not shown) within a plurality of zones (Z1 to Z4).

[0096] Figure 3a is a drawing showing an example of the arrangement of displays inside a vehicle.

[0097] Referring to the drawing, the interior of the vehicle may be equipped with a cluster display (180a), an AVN (Audio Video Navigation) display (180b), a rear seat entertainment display (180c, 180d), a room mirror display (not shown), etc.

[0098] Figure 3b is a drawing showing another example of the arrangement of displays inside a vehicle.

[0099] A vehicle control device (100) according to an embodiment of the present disclosure may include a plurality of displays (180a to 180b), and a signal processing device (170) that performs signal processing for displaying images, information, etc. on the plurality of displays (180a to 180b) and outputs an image signal to at least one display (180a to 180b).

[0100] Among the plurality of displays (180a to 180b), the first display (180a) may be a cluster display (180a) for displaying driving status, operation information, etc., and the second display (180b) may be an AVN (Audio Video Navigation) display (180b) for displaying vehicle driving information, a navigation map, various entertainment information, or images.

[0101] The signal processing device (170) has a processor (175) therein and can execute a first virtual machine to a third virtual machine (not shown) on a hypervisor (not shown) within the processor (175).

[0102] A second virtual machine (not shown) can operate for the first display (180a), and a third virtual machine (not shown) can operate for the second display (180b).

[0103] Meanwhile, the first virtual machine (not shown) within the processor (175) can control the shared memory (508) based on the hypervisor (505) to be set for the same data transmission to the second virtual machine (not shown) and the third virtual machine (not shown). Accordingly, the same information or the same image can be displayed in synchronization on the first display (180a) and the second display (180b) within the vehicle.

[0104] Meanwhile, the first virtual machine (not shown) within the processor (175) shares at least a portion of data with the second virtual machine (not shown) and the third virtual machine (not shown) for data sharing processing. Accordingly, data can be shared and processed among multiple virtual machines for multiple displays within the vehicle.

[0105] Meanwhile, a first virtual machine (not shown) within a processor (175) may receive and process vehicle wheel speed sensor data, and transmit the processed wheel speed sensor data to at least one of a second virtual machine (not shown) or a third virtual machine (not shown). Accordingly, the vehicle wheel speed sensor data may be shared with at least one virtual machine.

[0106] Meanwhile, the vehicle control device (100) according to the embodiment of the present disclosure may further include a rear seat entertainment display (180c) for displaying driving status information, simple navigation information, various entertainment information, or images.

[0107] The signal processing device (170) can control the RSE display (180c) by executing a fourth virtual machine (not shown) in addition to the first virtual machine to the third virtual machine (not shown) on a hypervisor (not shown) within the processor (175).

[0108] Accordingly, it is possible to control various displays (180a to 180c) using one signal processing device (170).

[0109] Meanwhile, some of the multiple displays (180a~180c) may operate under Linux OS, while others may operate under Web OS.

[0110] The signal processing device (170) according to the embodiment of the present disclosure can control the same information or the same image to be displayed in synchronization on displays (180a to 180c) operating under various operating systems (OS).

[0111] Meanwhile, in FIG. 3b, a vehicle speed indicator (212a) and a vehicle interior temperature indicator (213a) are displayed on a first display (180a), a home screen (222) including a plurality of applications and a vehicle speed indicator (212b) and a vehicle interior temperature indicator (213b) are displayed on a second display (180b), and a second home screen (222b) including a plurality of applications and a vehicle interior temperature indicator (213c) are displayed on a third display (180c).

[0112] FIG. 4 is an example of an internal block diagram of a vehicle control device according to an embodiment of the present disclosure.

[0113] Referring to the drawings, a vehicle control device (100) according to an embodiment of the present disclosure may include an input unit (110), a communication unit (120) for communication with an external device, a plurality of communication modules (EMa to EMd) for internal communication, a memory (140), a signal processing unit (170), a plurality of displays (180a to 180c), an audio output unit (185), and a power supply unit (190).

[0114] A plurality of communication modules (EMa to EMd) can be arranged, for example, in a plurality of zones (Z1 to Z4) of FIG. 2, respectively.

[0115] Meanwhile, the signal processing device (170) may be equipped with a communication switch (736b) for data communication with each communication module (EM1 to EM4) within it.

[0116] Each communication module (EM1 to EM4) can perform data communication with multiple sensor devices (SN) or ECUs (770) or area signal processing devices (170Z).

[0117] Meanwhile, the plurality of sensor devices (SN) may include a camera (195), a lidar (196), a radar (197), or a position sensor (198).

[0118] The input unit (110) may be equipped with physical buttons, pads, etc. for button input, touch input, etc.

[0119] Meanwhile, the input unit (110) may be equipped with a microphone (not shown) for user voice input.

[0120] The communication unit (120) can exchange data wirelessly with a mobile terminal (600) or a server (400).

[0121] In particular, the communication unit (120) can wirelessly exchange data with the vehicle driver's mobile terminal. Various data communication methods are possible, such as Bluetooth, WiFi, WiFi Direct, and APiX.

[0122] The communication unit (120) can receive weather information, road traffic information, for example, TPEG (Transport Protocol Expert Group) information, from a mobile terminal (600) or a server (400). To this end, the communication unit (120) may be equipped with a mobile communication module (not shown).

[0123] A plurality of communication modules (EM1 to EM4) can receive sensor data, etc. from an ECU (770), a sensor device (SN), or an area signal processing device (170Z), and transmit the received sensor data to the signal processing device (170).

[0124] Here, the sensor data may include at least one of vehicle direction data, vehicle location data (GPS data), vehicle angle data, vehicle speed data, vehicle acceleration data, vehicle inclination data, vehicle forward / backward data, battery data, fuel data, tire data, vehicle lamp data, vehicle interior temperature data, and vehicle interior humidity data.

[0125] Such sensor data can be obtained from a heading sensor, a yaw sensor, a gyro sensor, a position module, a vehicle forward / backward sensor, a wheel sensor, a vehicle speed sensor, a body tilt detection sensor, a battery sensor, a fuel sensor, a tire sensor, a steering sensor by steering wheel rotation, a vehicle interior temperature sensor, a vehicle interior humidity sensor, etc.

[0126] Meanwhile, the position module may include a GPS module or a position sensor (198) for receiving GPS information.

[0127] Meanwhile, at least one of the plurality of communication modules (EM1 to EM4) can transmit location information data sensed by a GPS module or location sensor (198) to a signal processing device (170).

[0128] Meanwhile, at least one of the plurality of communication modules (EM1 to EM4) can receive vehicle front image data, vehicle side image data, vehicle rear image data, vehicle surrounding obstacle distance information, etc. from a camera (195), lidar (196), radar (197), etc., and transmit the received information to a signal processing device (170).

[0129] The memory (140) can store various data for the overall operation of the vehicle control device (100), such as a program for processing or controlling the signal processing device (170).

[0130] For example, the memory (140) may store data regarding a hypervisor, a first virtual machine, a third virtual machine, or the like, for execution within the processor (175).

[0131] The audio output unit (185) converts an electric signal from the signal processing device (170) into an audio signal and outputs it. For this purpose, a speaker or the like may be provided.

[0132] The power supply unit (190) can supply power required for the operation of each component under the control of the signal processing device (170). In particular, the power supply unit (190) can receive power from a battery or the like inside the vehicle.

[0133] The signal processing device (170) controls the overall operation of each unit within the vehicle control device (100).

[0134] For example, the signal processing device (170) may include a processor (175) that performs signal processing for a vehicle display (180a, 180b).

[0135] The processor (175) can execute a first virtual machine to a third virtual machine (not shown) on a hypervisor (not shown) within the processor (175).

[0136] Among the first virtual machine to the third virtual machine (not shown), the first virtual machine (not shown) may be named a server virtual machine, and the second virtual machine to the third virtual machine (not shown) may be named a guest virtual machine.

[0137] For example, a first virtual machine (not shown) within a processor (175) may receive, process, or output sensor data from a plurality of sensor devices, such as vehicle sensor data, location information data, camera image data, audio data, or touch input data.

[0138] In this way, by performing most of the data processing in the first virtual machine (not shown), data sharing in a 1:N manner becomes possible.

[0139] As another example, a first virtual machine (not shown) can directly receive and process CAN data, Ethernet data, audio data, radio data, USB data, and wireless communication data for a second virtual machine or a third virtual machine (not shown).

[0140] And, the first virtual machine (not shown) can transmit processed data to the second virtual machine or the third virtual machine (not shown).

[0141] Accordingly, among the first virtual machine to the third virtual machine (not shown), only the first virtual machine (not shown) receives sensor data, communication data, or external input data from multiple sensor devices and performs signal processing, thereby reducing the signal processing burden on other virtual machines, enabling 1:N data communication, and enabling synchronization when sharing data.

[0142] Meanwhile, the first virtual machine (not shown) can control the second virtual machine (not shown) and the third virtual machine (not shown) to share the same data by writing data to the shared memory (508).

[0143] For example, a first virtual machine (not shown) can record vehicle sensor data, the location information data, the camera image data, or the touch input data in shared memory (508) and control the same data to be shared with a second virtual machine (not shown) and a third virtual machine (not shown). Accordingly, data sharing in a 1:N manner becomes possible.

[0144] Ultimately, by performing most of the data processing on the first virtual machine (not shown), data sharing in a 1:N manner becomes possible.

[0145] Meanwhile, the first virtual machine (not shown) within the processor (175) can control the shared memory (508) based on the hypervisor (505) to be set for the same data transmission to the second virtual machine (not shown) and the third virtual machine (not shown).

[0146] Meanwhile, the signal processing device (170) can process various signals such as audio signals, video signals, and data signals. To this end, the signal processing device (170) can be implemented in the form of a system on chip (SOC).

[0147] Meanwhile, the signal processing device (170) in the display device (100) of FIG. 4 may be the same as the signal processing device (170, 170a1, 170a2) of the vehicle control device of FIG. 5a or lower.

[0148] Figures 5a to 5d are drawings showing various examples of vehicle control devices.

[0149] FIG. 5a illustrates an example of a vehicle control device according to an embodiment of the present disclosure.

[0150] Referring to the drawing, a vehicle control device (600a) according to an embodiment of the present disclosure includes a signal processing device (170a1, 170a2) and a plurality of area signal processing devices (170Z1 to 170Z4).

[0151] Meanwhile, in the drawing, two signal processing devices (170a1, 170a2) are exemplified, but this is for backup purposes, etc., and one is also possible.

[0152] Meanwhile, the signal processing device (170a1, 170a2) may also be named an HPC (High Performance Computing) signal processing device.

[0153] Multiple area signal processing devices (170Z1 to 170Z4) are arranged in each area (Z1 to Z4) and can transmit sensor data to signal processing devices (170a1, 170a2).

[0154] The signal processing device (170a1, 170a2) receives data via a wire from multiple area signal processing devices (170Z1 to 170Z4) or a communication device (120).

[0155] In the drawing, data is exchanged based on wired communication between a signal processing device (170a1, 170a2) and multiple area signal processing devices (170Z1 to 170Z4), and the signal processing device (170a1, 170a2) and the server (400) exchange data based on wireless communication. However, data may be exchanged based on wireless communication between a communication device (120) and a server (400), and the signal processing device (170a1, 170a2) and the communication device (120) may exchange data based on wired communication.

[0156] Meanwhile, data received by the signal processing device (170a1, 170a2) may include camera data or sensor data.

[0157] For example, sensor data within a vehicle may include at least one of vehicle wheel speed data, vehicle direction data, vehicle location data (GPS data), vehicle angle data, vehicle speed data, vehicle acceleration data, vehicle inclination data, vehicle forward / backward data, battery data, fuel data, tire data, vehicle lamp data, vehicle interior temperature data, vehicle interior humidity data, vehicle exterior radar data, and vehicle exterior lidar data.

[0158] Meanwhile, camera data may include vehicle exterior camera data and vehicle interior camera data.

[0159] Meanwhile, the signal processing device (170a1, 170a2) can execute multiple virtual machines (620, 630, 640) based on safety standards.

[0160] In the drawing, it is illustrated that a processor (175) within a signal processing device (170a) executes a hypervisor (505) and, on the hypervisor (505), executes first to third virtual machines (620 to 640) according to an automotive safety integrity level (Automotive SIL; ASIL).

[0161] The first virtual machine (620) may be a virtual machine corresponding to Quality Management (QM), which is the lowest safety level in the Automotive Safety Integrity Level (ASIL) and is a non-enforceable grade.

[0162] The first virtual machine (620) can execute an operating system (622), a container runtime (624) on the operating system (622), and containers (627, 629) on the container runtime (624).

[0163] The second virtual machine (630) may be a virtual machine corresponding to ASIL A or ASIL B, where the sum of severity, exposure, and controllability is 7 or 8 in the automotive safety integrity level (ASIL).

[0164] The second virtual machine (630) can execute an operating system (632), a container runtime (634) on the operating system (632), and containers (637, 639) on the container runtime (634).

[0165] The third virtual machine (640) may be a virtual machine corresponding to ASIL C or ASIL D, in which the sum of severity, exposure, and controllability is 9 or 10 in the automotive safety integrity level (ASIL).

[0166] Meanwhile, ASIL D can correspond to the grade that requires the highest safety level.

[0167] The third virtual machine (640) can run a safety operating system (642) and an application (645) on the operating system (642).

[0168] Meanwhile, the third virtual machine (640) may also execute a safety operating system (642), a container runtime (644) on the safety operating system (642), and a container (647) on the container runtime (644).

[0169] Meanwhile, unlike the drawing, the third virtual machine (640) can also be executed through a separate core rather than the processor (175). This will be described later with reference to FIG. 5b.

[0170] FIG. 5b illustrates another example of a vehicle control device according to an embodiment of the present disclosure.

[0171] Referring to the drawing, a vehicle control device (600b) according to an embodiment of the present disclosure includes a signal processing device (170a1, 170a2) and a plurality of area signal processing devices (170Z1 to 170Z4).

[0172] The vehicle control device (600b) of FIG. 5b is similar to the vehicle control device (600a) of FIG. 5a, but the signal processing device (170a1) has some differences from the signal processing device (170a1) of FIG. 5a.

[0173] To describe the difference, the signal processing device (170a1) may include a processor (175) and a second processor (177).

[0174] The processor (175) within the signal processing unit (170a1) executes a hypervisor (505), and executes first and second virtual machines (620 to 630) on the hypervisor (505) according to the automotive safety integrity level (Automotive SIL; ASIL).

[0175] The first virtual machine (620) can execute an operating system (622), a container runtime (624) on the operating system (622), and containers (627, 629) on the container runtime (624).

[0176] The second virtual machine (630) can execute an operating system (632), a container runtime (634) on the operating system (632), and containers (637, 639) on the container runtime (634).

[0177] Meanwhile, the second processor (177) within the signal processing device (170a1) can execute a third virtual machine (640).

[0178] The third virtual machine (640) can execute a safety operating system (642), an auto-execution (645) on the operating system (642), and an application (645) on the auto-execution (645). That is, unlike FIG. 5A, an auto-execution (646) on the operating system (642) can be executed.

[0179] Meanwhile, the third virtual machine (640) may, similarly to FIG. 5a, execute a safety operating system (642), a container runtime (644) on the safety operating system (642), and a container (647) on the container runtime (644).

[0180] Meanwhile, the third virtual machine (640) requiring a high level of security is preferably executed on a second processor (177), which is a different core or different processor, unlike the first and second virtual machines (620 to 630).

[0181] Meanwhile, in the signal processing devices (170a1, 170a2) of FIGS. 5a and 5b, when the first signal processing device (170a) malfunctions, the second signal processing device (170a2), which is a backup device, can operate.

[0182] Alternatively, it is also possible for the signal processing devices (170a1, 170a2) to operate simultaneously, with the first signal processing device (170a) operating as the main device and the second signal processing device (170a2) operating as the sub device. This will be described with reference to FIGS. 5c and 5d.

[0183] FIG. 5c illustrates another example of a vehicle control device according to an embodiment of the present disclosure.

[0184] Referring to the drawing, a vehicle control device (600c) according to an embodiment of the present disclosure includes a signal processing device (170a1, 170a2) and a plurality of area signal processing devices (170Z1 to 170Z4).

[0185] Meanwhile, in the drawing, two signal processing devices (170a1, 170a2) are exemplified, but this is for backup purposes, etc., and one is also possible.

[0186] Meanwhile, the signal processing device (170a1, 170a2) may also be named an HPC (High Performance Computing) signal processing device.

[0187] Multiple area signal processing devices (170Z1 to 170Z4) are arranged in each area (Z1 to Z4) and can transmit sensor data to signal processing devices (170a1, 170a2).

[0188] The signal processing device (170a1, 170a2) receives data via a wire from multiple area signal processing devices (170Z1 to 170Z4) or a communication device (120).

[0189] In the drawing, data is exchanged based on wired communication between a signal processing device (170a1, 170a2) and multiple area signal processing devices (170Z1 to 170Z4), and the signal processing device (170a1, 170a2) and the server (400) exchange data based on wireless communication. However, data may be exchanged based on wireless communication between a communication device (120) and a server (400), and the signal processing device (170a1, 170a2) and the communication device (120) may exchange data based on wired communication.

[0190] Meanwhile, data received by the signal processing device (170a1, 170a2) may include camera data or sensor data.

[0191] Meanwhile, among the signal processing devices (170a1, 170a2), the processor (175) in the first signal processing device (170a1) can execute a hypervisor (505) and execute a safety virtualization machine (660) and a non-safety virtualization machine (670) on the hypervisor (505).

[0192] Meanwhile, among the signal processing devices (170a1, 170a2), the processor (175b) in the second signal processing device (170a2) executes the hypervisor (505b) and can execute only the safety virtualization machine (680) on the hypervisor (505).

[0193] In this way, since the processing for safety is separated between the first signal processing device (170a1) and the second signal processing device (170a2), it is possible to improve stability and processing speed.

[0194] Meanwhile, high-speed network communication can be performed between the first signal processing device (170a1) and the second signal processing device (170a2).

[0195] FIG. 5d illustrates another example of a vehicle control device according to an embodiment of the present disclosure.

[0196] Referring to the drawing, a vehicle control device (600d) according to an embodiment of the present disclosure includes a signal processing device (170a1, 170a2) and a plurality of area signal processing devices (170Z1 to 170Z4).

[0197] The vehicle control device (600d) of FIG. 5d is similar to the vehicle control device (600c) of FIG. 5c, but the second signal processing device (170a2) has some differences from the second signal processing device (170a2) of FIG. 5c.

[0198] The processor (175b) in the second signal processing device (170a2) of FIG. 5d executes a hypervisor (505b) and can execute a safety virtualization machine (680) and a non-safety virtualization machine (690) on the hypervisor (505).

[0199] That is, unlike FIG. 5c, the difference is that the processor (175b) within the second signal processing device (170a2) further executes a non-safety virtualization machine (690).

[0200] In this way, since the processing for safety and non-safety is separated into the first signal processing device (170a1) and the second signal processing device (170a2), it is possible to improve stability and processing speed.

[0201] FIG. 6 is an example of a block diagram of a vehicle control device according to an embodiment of the present disclosure.

[0202] Referring to the drawings, a vehicle control device (900) according to an embodiment of the present disclosure includes a signal processing device (170) and at least one display.

[0203] In the drawing, at least one display is illustrated, a cluster display (180a) and an AVN display (180b).

[0204] Meanwhile, the vehicle control device (900) may further include a plurality of area signal processing devices (170Z1 to 170Z4).

[0205] The signal processing device (170) at this time is a high-performance centralized signal processing and control device having multiple CPUs (175), GPUs (178), NPUs (179), etc., and may be called an HPC (High Performance Computing) signal processing device or a central signal processing device.

[0206] A plurality of area signal processing devices (170Z1 to 170Z4) and a signal processing device (170) are connected by wired cables (CB1 to CB4).

[0207] Meanwhile, multiple area signal processing devices (170Z1 to 170Z4) can be connected to each other with wired cables (CBa to CBd).

[0208] The wired cable (CBa~CBd) at this time may include a CAN communication cable, an Ethernet communication cable, or a PCI Express cable.

[0209] Meanwhile, a signal processing device (170) according to an embodiment of the present disclosure may be equipped with at least one processor (175, 178, 177) and a large-capacity storage device (925).

[0210] For example, a signal processing device (170) according to an embodiment of the present disclosure may include a central processor (175, 177), a graphics processor (178), and a neural processor (179).

[0211] Meanwhile, sensor data may be transmitted from at least one of the multiple area signal processing devices (170Z1 to 170Z4) to the signal processing device (170). In particular, the sensor data may be stored in a storage device (925) within the signal processing device (170).

[0212] The sensor data at this time may include at least one of camera data, lidar data, radar data, vehicle direction data, vehicle location data (GPS data), vehicle angle data, vehicle speed data, vehicle acceleration data, vehicle inclination data, vehicle forward / backward data, battery data, fuel data, tire data, vehicle lamp data, vehicle interior temperature data, and vehicle interior humidity data.

[0213] In the drawing, it is exemplified that camera data from a camera (195a) and lidar data from a lidar sensor (196) are input to a first area signal processing device (170Z1), and the camera data and lidar data are transmitted to a signal processing device (170) via a second area signal processing device (170Z2), a third area signal processing device (170Z3), etc.

[0214] Meanwhile, since the data read speed or write speed to the storage device (925) is faster than the network speed when sensor data is transmitted from at least one of the plurality of area signal processing devices (170Z1 to 170Z4) to the signal processing device (170), it is preferable that multi-path routing be performed so that a network bottleneck does not occur.

[0215] To this end, the signal processing device (170) according to the embodiment of the present disclosure can perform multi-path routing based on a Software Defined Network (SDN). Accordingly, a stable network environment can be secured when reading or writing data from the storage device (925). Furthermore, since data can be transmitted to the storage device (925) using multiple paths, the network configuration can be dynamically changed to transmit data.

[0216] Data communication between a plurality of area signal processing devices (170Z1 to 170Z4) and a signal processing device (170) in a vehicle control device (900) according to an embodiment of the present disclosure is preferably Peripheral Component Interconnect Express communication for high-bandwidth, low-latency communication.

[0217] FIG. 7a is an example of an operational configuration diagram of a central signal processing device according to an embodiment of the present disclosure.

[0218] Referring to the drawing, a central signal processing device (170) according to an embodiment of the present disclosure includes a processor (175).

[0219] The processor (175) within the central signal processing unit (170) can execute a hypervisor (505) or a container.

[0220] Meanwhile, the processor (175) can execute a domain based on a software defined vehicle (SDV) base on a hypervisor (505) or a container.

[0221] For example, the processor (175) can execute a communication domain (711), an OTA domain (721), a security domain (722), a diagnosis domain (723), and an orchestrator domain (732) on a hypervisor (505) or a container.

[0222] The communication domain (711) is a domain for internal communication and may include a SOME / IP (Scalable service-Oriented Middleware over IP) domain, a DDS domain, etc.

[0223] The OTA domain (721) is an update-related domain based on data reception from the server (400), and may include a master domain, a client domain, a module domain, etc.

[0224] The security domain (722) may include an IDS domain, an AUTH domain, a TEE domain, etc.

[0225] The diagnostic domain (723) may include a CAN domain, an Ethernet domain, a wireless domain, etc.

[0226] The orchestrator domain (732) may include a resource domain, a criticality domain, etc.

[0227] Meanwhile, the processor (175) can execute an SDV-based platform on each domain.

[0228] For example, the processor (175) may execute an SDV-based autonomous driving (AD) or advanced driver assistance system (ADAS) platform (715) on the communication domain (711).

[0229] Meanwhile, the autonomous driving (AD) or advanced driver assistance system (ADAS) platform (715) may include a platform such as a camera aggregator, sensor fusion, ADAS AI algorithm, or vision framework.

[0230] For example, the processor (175) can execute an SDV-based vehicle platform (725) on an OTA domain (721) and a security domain (722).

[0231] Meanwhile, the vehicle platform (725) may include an application store, car service, personalization, multimedia, BT / WiFi / UWB, phone projection, audio, or location platform.

[0232] For example, the processor (175) may execute an SDV-based screen sharing (729), HUD (727), or cluster (726) platform on the analysis domain (723).

[0233] Meanwhile, the processor (175) can execute a platform such as an SDV-based body service, chassis service, power train service, or Autosa Classic on the Orchestrator domain (732).

[0234] Meanwhile, the processor (175) can execute SDV experience or applications on the SDV base.

[0235] For example, the processor (175) may execute an autonomous driving (AD) application (179) or an ADAS application (178) on an autonomous driving (AD) or advanced driver assistance system (ADAS) platform (715).

[0236] Meanwhile, the processor (175) can execute an AR / MR application (741), a surround view application (742), an AI sound application (743), an IVI application (744), a vehicle content platform application (745), or a SW defined radio application (746) on a vehicle platform (725), screen sharing (729), HUD (727), or cluster (726).

[0237] Meanwhile, the processor (175) can execute a vehicle application (178), etc., on a platform such as a body service, a chassis service, a power train service, or an autos classic.

[0238] FIG. 7b is an example of an operational configuration diagram of a region signal processing device according to an embodiment of the present disclosure.

[0239] Referring to the drawing, the area signal processing device (170z) according to the embodiment of the present disclosure includes a processor (175z).

[0240] A processor (175z) within the domain signal processing device (170z) can execute a hypervisor (505z) or a container.

[0241] Meanwhile, the processor (175z) can execute an operating system (705) on a hypervisor (505z) or a container.

[0242] Meanwhile, the processor (175z) can execute a network domain (762) on the operating system (705).

[0243] Meanwhile, the network domain (762) may include a CAN, Ethernet, PCIe, ISN, or SDN domain.

[0244] Meanwhile, the processor (175z) can execute an AUTOSAR Adaptive (763), a gateway (764), or a PLC (765) platform on a network domain (762).

[0245] Meanwhile, the processor (175z) can execute a domain application (768), etc., on an AUTOSAR Adaptive (763), gateway (764), or PLC (765) platform.

[0246] FIG. 8 illustrates an example of execution of a vehicle service in a signal processing device according to an embodiment of the present disclosure.

[0247] Referring to the drawing, a signal processing device (170) according to an embodiment of the present disclosure includes a processor (175) and a memory (174).

[0248] Meanwhile, the signal processing device (170) according to the embodiment of the present disclosure may further include a second processor (178) and a neural processor (179).

[0249] Meanwhile, the processor (175) according to the embodiment of the present disclosure can execute a service agent (800) for executing a vehicle service. The service agent (800) at this time can be named PICCOLO.

[0250] For example, the service agent (800) can receive execution-related data for executing an SDV-based vehicle service and control the execution of the vehicle service based on the execution-related data.

[0251] Meanwhile, the service agent (800) can respond to the service orchestrator.

[0252] Meanwhile, the processor (175) according to the embodiment of the present disclosure may further execute a service scheduler (840) that exchanges data with a service agent (800) for executing a vehicle service. The service scheduler (840) at this time may be named TIMPANI.

[0253] Figures 9 and 10 are drawings referred to in the description of Figure 8.

[0254] Figure 9 illustrates an example of service execution based on the service agent of Figure 8.

[0255] Referring to the drawing, a processor (175) according to an embodiment of the present disclosure can execute a service agent (800), a service scheduler (840), a kernel (880), and a service container (890) for executing a vehicle service.

[0256] The service agent (800) can receive service execution related data in file format from outside or inside the vehicle, and output command data (cmd) to the outside based on the service execution related data.

[0257] For example, the service agent (800) can receive service execution related data in a YAML (YAML Ain't Markup Language) file format.

[0258] Meanwhile, the service agent (800) may include a parser (810) that interprets or parses data related to service execution, and a state manager (820) that transmits command data (cmd) to a workload orchestrator (870) to enable state transition by managing the difference between the current state and the desired state.

[0259] Meanwhile, the workload orchestrator (870) may be named Bluechi controller.

[0260] Meanwhile, the workload orchestrator (870) can control the execution of services interpreted by the service agent (800) through the real-time kernel (880) and the service container (890).

[0261] That is, the service container (890) can execute a service based on data from the service agent (800) or the service scheduler (840).

[0262] Meanwhile, the state manager (820) can receive result data from the workload orchestrator (870).

[0263] Meanwhile, the state manager (820) can transmit information (inf) of service execution related data interpreted by the parser (810) to the service scheduler (840) and receive error data from the service scheduler (840).

[0264] The service scheduler (840) may include a first service scheduler (850) that operates in direct connection with the service agent (800) and a second service scheduler (860) that operates as a node in indirect connection.

[0265] The first service scheduler (850) can create a schedule table (852) based on information (inf) of service execution related data interpreted by the service agent (800), create schedule information (854) based on the schedule table (852), and perform monitoring.

[0266] For example, a monitor (856) within a first service scheduler (850) can transmit result data of a monitored service to a state manager (820) within a service agent (800).

[0267] Meanwhile, schedule information (854) generated by the first service scheduler (850) can be transmitted to the second service scheduler (860).

[0268] The real-time scheduler (862) within the second service scheduler (860) can output real-time scheduling information (config) for service execution in the real-time kernel (880) and service container (890) based on the schedule information (854).

[0269] Meanwhile, the time trigger (864) within the second service scheduler (860) can output time trigger information (config) for service execution in the real-time kernel (880) and service container (890) based on the schedule information (854).

[0270] Meanwhile, the monitor (856) within the second service scheduler (860) can collect result data on the system resource status of the node and the real-time operation status of the service, and transmit the result data (result) to the monitor (856) within the first service scheduler (850).

[0271] Fig. 10 illustrates an example of the internal configuration of the service agent of Fig. 8 or Fig. 9.

[0272] Referring to the drawing, a service agent (800) according to one embodiment of the present disclosure may include a parser (810), a gateway (840), a server (830), and a state manager (820).

[0273] Meanwhile, the service agent (800) may further include storage (850).

[0274] The parser (810) can receive execution-related data for SDV-based vehicle service execution and interpret or parse the service execution-related data.

[0275] Meanwhile, the parser (810) can receive service execution related data in a YAML (YAML Ain't Markup Language) file format and interpret or parse the service execution related data within the YAML file.

[0276] And, the parser (810) can transmit the interpreted or parsed data to the server (830) or register it as a resource in the storage (850).

[0277] Meanwhile, the parser (810) can store data required for future workload generation in storage (850).

[0278] Meanwhile, the parser (810) can perform conversion into a manifest corresponding to a workload orchestrator (870), which is a multi-node service controller.

[0279] For example, the parser (810) may receive a YAML file or other format manifest, which is an example of service execution related data, from an RPC sender (remote procedure call sender) (805) or a REST API.

[0280] The server (830) can receive parsing result data from the parser (810) and share the parsing result data with other modules. The server (830) at this time can be named an API server.

[0281] For example, the server (830) can separate the parsing result data from the parser (810) into condition data and action data and store them in storage (850).

[0282] Meanwhile, the server (830) can transmit a key value that can read condition data or action data, which is part of the parsing result data, from the storage (850) to the gateway (840).

[0283] Meanwhile, the server (830) can control to store some data or some status information for status management of the service agent (800) in the storage (850).

[0284] Meanwhile, the server (830) can support or request RPC (remote procedure call) and API for external communication.

[0285] Meanwhile, the server (830) may receive a direct request from the direct request unit (801) or a workload creation request from the workload creation request unit (803).

[0286] Meanwhile, the server (830) can transmit a received direct request or workload creation request to the workload orchestrator (870).

[0287] The gateway (840) can receive vehicle messages in various formats and determine the vehicle status based on the received vehicle messages.

[0288] Meanwhile, the gateway (840) can filter data within the received vehicle message and trigger an event based on the data to control the vehicle to be driven in response to a desired vehicle scenario.

[0289] Meanwhile, the gateway (840) can read condition data stored in the storage (850) based on the key value received from the server (830) and generate a filter based on the condition data.

[0290] Meanwhile, the gateway (840) can transmit a message for the vehicle sensor to the message sender (807).

[0291] Meanwhile, the filter can determine the status of the vehicle from the received vehicle message, for example, the DDS message, and continuously check whether the condition corresponding to the condition data is satisfied.

[0292] Meanwhile, the gateway (840) can transmit scenario information to the state manager (820) and delete the filter when a condition corresponding to the condition data is satisfied.

[0293] Meanwhile, the state manager (820) can perform the role of a node with the workload orchestrator (870).

[0294] For example, the state manager (820) can control the state transition to be performed by managing the difference between the current state and the desired state.

[0295] Meanwhile, the state manager (820) can request additional commands from the workload orchestrator (870) based on a direct request received from the server (830).

[0296] Meanwhile, when the state manager (820) receives scenario information that satisfies a condition from the gateway (840), it can set a key value based on the scenario information and read action data from the storage (850) based on the set key value.

[0297] Meanwhile, action data may include data indicating which workload container should be executed.

[0298] Meanwhile, the state manager (820) can read data required for workload generation stored in storage (850) by the parser (810) based on action data.

[0299] Meanwhile, the state manager (820) can transmit command data such as start, update, rollback, or terminate to the workload orchestrator (870) based on the data required for generating the received workload.

[0300] Meanwhile, the workload orchestrator (870) may execute a corresponding function or command or transmit it to a service container (890) based on command data such as start, update, rollback, or terminate from the state manager (820).

[0301] Meanwhile, storage (850) can store key values, and the key values ​​can be utilized in various services such as Kubernetes.

[0302] Meanwhile, storage (850) can store data required for workload generation by the parser (810).

[0303] Meanwhile, the storage (850) can store parsing result data from the parser (810). At this time, the storage (850) can store the parsing result data by separating it into condition data and action data.

[0304] FIG. 11a is an example of an internal block diagram of a vehicle control device related to the present disclosure.

[0305] Referring to the drawing, a vehicle control device (100x) related to the present disclosure includes a central signal processing device (170x), an area signal processing device (170zx), and a control device (1100).

[0306] A central signal processing unit (170x) related to the present disclosure may include a first processor (175x) and a first memory (174x). The first processor (175x) may execute an operating system (1105) and an HMI service (1102).

[0307] Meanwhile, the central signal processing unit (170x) and the area signal processing unit (170zx) can perform Ethernet communication.

[0308] The area signal processing device (170zx) related to the present disclosure may include a second processor (175zx) and a second memory (174zx). The second processor (175zx) may execute a domain (1108), an operating system (1107), and a CAN communication service (1106).

[0309] Meanwhile, the area signal processing device (170zx) and the control device (1100) can perform CAN communication.

[0310] A control device (1100) related to the present disclosure may include a controller (1230) and a memory (1234). The controller (1230) may execute an operating system (1236), actuator control (1235), and a vehicle service (1105) based on control logic.

[0311] Meanwhile, the vehicle service (1105) may include a first vehicle service (1106) and a second vehicle service (1117).

[0312] A control device (1100) related to the present disclosure can control a plurality of actuators (AT1 to ATn) or a plurality of sensor devices (SR1 to SRn) based on actuator control (1235) or vehicle service (1105).

[0313] According to the vehicle control device (100x) related to the present disclosure of FIG. 11a, in order to control a plurality of actuators (AT1 to ATn), a controller (1230) within the control device (1100) outputs a control signal.

[0314] Meanwhile, if it is necessary to control multiple actuators (AT1 to ATn) by updating them with a new service, it is necessary to update the data in the memory (1234).

[0315] In particular, when it is necessary to control multiple actuators (AT1 to ATn) by updating them with a new service, it is necessary to update data corresponding to the first vehicle service (1106) in the memory (1234), data corresponding to the second vehicle service (1117), or data corresponding to the actuator control (1235).

[0316] However, since the control device (1100) performs CAN communication with the area signal processing device (170zx), it may not be easy to receive update data from an external server (400) via the area signal processing device (170zx) and the central signal processing device (170x).

[0317] Additionally, due to limitations in the capacity of the third memory (1113) within the control device (1100), it may not be easy to store new service data or update data.

[0318] Ultimately, according to the vehicle control device (100x) related to the present disclosure of FIG. 11a, it may be difficult to operate a plurality of actuators (AT1 to ATn) based on a new vehicle service or an updated vehicle service.

[0319] Accordingly, this disclosure proposes a method for efficiently executing new or updated services. This is described with reference to Figure 12a and below.

[0320] Figure 11b is a drawing referenced in the description of Figure 11a.

[0321] Referring to the drawings, a plurality of controllers (ECUa to ECUc) in a vehicle control device (100x) related to the present disclosure each receive a switching signal from a plurality of switches (SWa to SWc) and control each actuator (ATa to ATc) based on each switching signal.

[0322] According to this method, as the number of actuators (ATa to ATc) increases, there is a disadvantage in that the number of controllers (ECUa to ECUc) increases.

[0323] Accordingly, in this disclosure, a method for efficiently controlling multiple actuators using a controller is proposed. This is described with reference to FIG. 12a and below.

[0324] FIG. 12a is an example of an internal block diagram of a vehicle control device according to an embodiment of the present disclosure.

[0325] Referring to the drawings, a vehicle control device (100a) according to one embodiment of the present disclosure includes a first signal processing device (170), a second signal processing device (170z) electrically connected to the first signal processing device (170), and a control device (1200) electrically connected to the second signal processing device (170z).

[0326] The first signal processing unit (170), which is a central signal processing unit, has a first processor (175) and a first memory (174).

[0327] The second signal processing device (170z), which is a domain signal processing device, has a second processor (175z) and a second memory (174z).

[0328] Meanwhile, the control device (1200) is electrically connected to the second signal processing device (170z) and receives a signal from a hardware switch (2312) or a sensor (SRm) or controls at least one actuator (ACT).

[0329] Meanwhile, when an operation error occurs in the hardware switch (2312), the first processor (175) or the second processor (175z) controls the execution of a virtual switch service and outputs a virtual switch object corresponding to the virtual switch service to an electrically connected display (180), and when the virtual switch object is selected, controls the controller (2330) to output an operation on signal, an operation off signal, or an operation control signal to the actuator (ACT).

[0330] Accordingly, when a device connected to the controller (2330) experiences an operation error, a replacement service can be quickly executed. In particular, when a device connected to the controller (2330) experiences an operation error, a replacement service based on a service-oriented architecture can be quickly executed.

[0331] Meanwhile, the first memory (174) may include a change data area (SPA1) that stores data related to a virtual switch service.

[0332] Meanwhile, the first memory (174) may further include a fixed data area (SPA2) that stores data related to fixed services.

[0333] Meanwhile, the second memory (174z) may include a change data area (SPA3) that stores data related to a virtual switch service and a fixed data area (SPA4) that stores data related to a fixed service.

[0334] Meanwhile, the first signal processing device (170) and the second signal processing device (170z) can perform TSN (Time Sensitive Networking) communication based on Ethernet communication.

[0335] Meanwhile, it is preferable that the communication method between the second signal processing device (170z) and the control device (1200) is the same as the communication method between the first signal processing device (170) and the second signal processing device (170z).

[0336] For example, the communication method between the first signal processing device (170) and the second signal processing device (170z) may be TSN (Time Sensitive Networking) communication based on Ethernet communication.

[0337] Meanwhile, the control device (1200) can control a plurality of actuators (AT1 to ATn) or receive signals from a plurality of sensors (SR1 to SRn).

[0338] Meanwhile, the control device (1200) includes a memory (1234) in addition to the controller (1230).

[0339] Meanwhile, the memory (1234) may include a fixed data area that stores data related to the control of a plurality of actuators (AT1 to ATn) or data related to a plurality of sensors (SR1 to SRn).

[0340] That is, it is preferable that the memory (1234) not be provided with a change data area that stores data related to a new service or virtual switching service.

[0341] Meanwhile, the first processor (175) in the first signal processing device (170) according to the embodiment of the present disclosure can execute an operating system (1205) and execute an HMI service (1202) on the operating system (1205).

[0342] Meanwhile, the first processor (175) within the first signal processing device (170) can execute the first service agent (2350a) on the operating system (1205).

[0343] Meanwhile, unlike FIG. 11a, the first processor (175) within the first signal processing device (170) can execute a service based on a service-oriented architecture (SOA) or a microservice (1215) based on a microservice architecture (MSA) on an operating system (1205).

[0344] Meanwhile, the first processor (175) within the first signal processing device (170) can execute a vehicle service (1210) based on control logic on the operating system (1205).

[0345] The vehicle service (1210) may include at least one vehicle service, and the drawing exemplifies a first vehicle service (1211) and a second vehicle service (1212).

[0346] Meanwhile, the first vehicle service (1211) or the second vehicle service (1212) may include a service for controlling at least one of a plurality of actuators (AT1 to ATn).

[0347] Meanwhile, the first vehicle service (1211) or the second vehicle service (1212) may be updated based on update data received from an external server (400) or an external electronic device (600).

[0348] Meanwhile, the first vehicle service (1211) or the second vehicle service (1212) may be a new vehicle service based on data received from an external server (400) or an external electronic device (600).

[0349] Meanwhile, the second processor (175z) within the second signal processing device (170z) can execute the second service agent (2350b) on the operating system (1205z).

[0350] Meanwhile, the second processor (175z) in the second signal processing device (170z) according to the embodiment of the present disclosure may execute an operating system (1205z) and execute an SOA-based service or microservice (1215z) on the operating system (1205z).

[0351] Meanwhile, the second processor (175z) within the second signal processing device (170z) can execute a vehicle service (1210z) on the operating system (1205z).

[0352] The vehicle service (1210z) may include at least one vehicle service, and in the drawing, a third vehicle service (1221), a fourth vehicle service (1222), a fifth vehicle service (1223), and a sixth vehicle service (1224) are exemplified.

[0353] Meanwhile, at least one of the third vehicle service (1221) to the sixth vehicle service (1224) may include a service for controlling at least one of the plurality of actuators (AT1 to ATn).

[0354] Meanwhile, the third vehicle service (1221) or the fourth vehicle service (1222) may be a new vehicle service based on data received from an external server (400) or an external electronic device (600).

[0355] Meanwhile, the fifth vehicle service (1223) or the sixth vehicle service (1224) may be updated based on update data received from an external server (400) or an external electronic device (600).

[0356] A control device (1200) according to an embodiment of the present disclosure includes a controller (1230) and a memory (1234).

[0357] The controller (1230) can execute an operating system (1236) and execute an actuator control (1235) on the operating system (1236).

[0358] Meanwhile, the controller (1230), unlike FIG. 11a, can only execute actuator control (1235) without executing vehicle service.

[0359] That is, it is preferable that the vehicle service be executed in the second signal processing device (170z) instead of the control device (1200).

[0360] A control device (1200) according to an embodiment of the present disclosure can control a plurality of actuators (AT1 to ATn) or a plurality of sensor devices (SR1 to SRn) based on actuator control (1235).

[0361] The actuator control (1235) at this time can output an operation on signal, an operation off signal, or an operation control signal for at least one of the plurality of actuators (AT1 to ATn).

[0362] A control device (1200) according to an embodiment of the present disclosure can control at least one of a plurality of actuators (AT1 to ATn) based on sensor data from at least one of a plurality of sensor devices (SR1 to SRn).

[0363] A second processor (175z) according to one embodiment of the present disclosure executes a third vehicle service (1221) to control a controller (1230) within a control device (1200) to output an operation on signal or an operation off signal to at least one of a plurality of actuators (AT1 to ATn).

[0364] Meanwhile, the first memory (174) in the first signal processing device (170) or the second memory (174z) in the second signal processing device (170z) can receive and store data related to the execution of the fifth vehicle service (1223) added or updated in addition to the third vehicle service (1221) from an external server (400) or an external electronic device (600).

[0365] Meanwhile, the second processor (175z) according to one embodiment of the present disclosure controls the controller (1230) in the control device (1200) to output an operation on signal, an operation off signal, or an operation control signal to at least one of the plurality of actuators (AT1 to ATn) based on the fifth vehicle service (1223), when the fifth vehicle service (1223) is executed after the execution-related data of the fifth vehicle service (1223) added or updated in addition to the third vehicle service (1221) is stored in the first memory (174) in the first signal processing device (170) or the second memory (174z) in the second signal processing device (170z).

[0366] At this time, the second processor (175z) controls the execution-related data of the added or updated fifth vehicle service (1223) not to be transmitted to the control device (1200).

[0367] That is, the control device (1200) does not execute the vehicle service and does not receive data related to the execution of the vehicle service.

[0368] In this way, the control device (1200) enables simple operation of the control device (1200) by outputting an operation on signal, an operation off signal, or an operation control signal to at least one of the plurality of actuators (AT1 to ATn) without executing a vehicle service or receiving data related to the execution of the vehicle service.

[0369] In addition, since there is no need for new services or service updates to the control device (1200), multiple actuators (AT1 to ATn) can be stably controlled.

[0370] Meanwhile, new services or service updates can be efficiently executed by the second signal processing device (170z) rather than the control device (1200). In particular, new or updated services based on a service-oriented architecture can be efficiently executed by the second signal processing device (170z).

[0371] Meanwhile, execution-related data of the fifth vehicle service (1223) may include condition data and action data.

[0372] Meanwhile, the second processor (175z) can execute the fifth vehicle service (1223) when the condition data within the execution-related data of the fifth vehicle service (1223) is satisfied. Accordingly, a new fifth vehicle service (1223) or an updated fifth vehicle service (1223) can be efficiently executed.

[0373] Meanwhile, the motion control signal may include an motion speed control signal, an motion intensity control signal, or an motion temperature control signal.

[0374] For example, based on the fifth vehicle service (1223), the controller (1230) in the control device (1200) can output an operation speed control signal, an operation intensity control signal, or an operation temperature control signal to at least one of the plurality of actuators (AT1 to ATn).

[0375] Accordingly, based on the fifth vehicle service (1223), the operating speed, operating intensity, or operating temperature of at least one of the plurality of actuators (AT1 to ATn) can be controlled. Consequently, a new fifth vehicle service (1223) or an updated fifth vehicle service (1223) can be efficiently executed.

[0376] Meanwhile, the fifth vehicle service (1223) may include a microservice.

[0377] For example, the second processor (175z) can execute the fifth vehicle service (1223), which is a microservice, when the condition data in the execution-related data of the fifth vehicle service (1223) is satisfied. Accordingly, new or updated microservices can be efficiently executed.

[0378] Meanwhile, the first processor (175) can be controlled to execute the first vehicle service (1211) based on the received sensor data and transmit execution information of the first vehicle service (1211) to the second processor (175z).

[0379] Meanwhile, the sensor data may include at least one of vehicle driving sensor data, passenger status sensor data, or vehicle surrounding sensor data.

[0380] Meanwhile, the first processor (175) can control the execution of the first vehicle service (1211) when the sensor data satisfies the conditions for executing the first vehicle service (1211).

[0381] Meanwhile, the second processor (175z) can control the controller (1230) by executing the fifth vehicle service (1223) based on the execution information of the first vehicle service (1211).

[0382] In addition, based on the fifth vehicle service (1223), the controller (1230) within the control device (1200) can output an operating speed control signal, an operating intensity control signal, or an operating temperature control signal to at least one of the plurality of actuators (AT1 to ATn). Accordingly, new or updated services can be efficiently executed.

[0383] Meanwhile, the first processor (175) controls the execution of the first vehicle service (1211) based on the received first input signal and sensor data, and transmits execution information of the first vehicle service (1211) to the second processor (175z), and the second processor (175z) controls the controller (1230) by executing the fifth vehicle service (1223) based on the execution information of the first vehicle service (1211). Accordingly, new or updated services can be efficiently executed.

[0384] Meanwhile, the first processor (175) controls the transmission of the received first input signal to the second processor (175z), and the second processor (175z) can control the controller (1230) by executing the third vehicle service (1221) based on the first input signal.

[0385] Meanwhile, the controller (1230) can control at least one of the plurality of actuators (AT1 to ATn) based on the third vehicle service (1221). Accordingly, the third vehicle service (1221) can be efficiently executed.

[0386] Meanwhile, the second processor (175z) can control the controller (1230) by executing the fifth vehicle service (1223) based on the received sensor data. Accordingly, new or updated services can be efficiently executed based on the sensor data.

[0387] Meanwhile, the second processor (175z) can control the controller (1230) by executing the fifth vehicle service (1223) based on the received first input signal and sensor data. Accordingly, a new or updated service can be efficiently executed based on the first input signal and sensor data.

[0388] Meanwhile, the second processor (175z) can control the execution of the fifth vehicle service (1223) if the sensor data satisfies the conditions for executing the fifth vehicle service (1223). Accordingly, new or updated services can be efficiently executed based on the sensor data.

[0389] Meanwhile, the second processor (175z) can control the controller (1230) by executing the third vehicle service (1221) based on the first input signal. Accordingly, the third vehicle service (1221) can be executed efficiently.

[0390] Meanwhile, data related to the execution of the fifth vehicle service (1223) may include condition data and action data. At this time, at least one of the condition data and the action data may be updateable.

[0391] Accordingly, new or updated services can be efficiently executed based on updated data.

[0392] Meanwhile, condition data may include vehicle driving sensor data, passenger status sensor data, and vehicle surrounding sensor data. Accordingly, new or updated services can be efficiently implemented based on condition data.

[0393] Meanwhile, the controller (1230) receives the operating status data of the actuators (AT1 to ATn) when the fifth vehicle service (1223) of the second processor (175z) is executed, and can control the operating status of the actuators (AT1 to ATn) to be varied based on the operating status data of the actuators. Accordingly, it becomes possible to efficiently execute a new service or an updated service based on the operating status data of the actuators.

[0394] Meanwhile, the controller (1230) controls the operation on or off of the actuator based on the third vehicle service (1221), and can vary the operation speed of the actuators (AT1 to ATn) based on the fifth vehicle service (1223). Accordingly, the fifth vehicle service (1223) can be efficiently executed.

[0395] Meanwhile, at least one of the actuators (AT1 to ATn) of FIG. 12a may operate to move the vehicle seat, and at least one of the sensors (SR1 to SRn) may be a camera within the vehicle.

[0396] In this case, the controller (1230) can control the actuators (AT1 to ATn) for movement of the vehicle seat based on the third vehicle service (1221) executed by the input signal.

[0397] Meanwhile, the controller (1230) can control the actuators (AT1 to ATn) or the seat motor for any one of the movement speed, movement control, movement intensity, and automatic movement of the vehicle seat based on the fifth vehicle service (1223) executed by the in-vehicle camera data. Accordingly, the fifth vehicle service (1223) can be executed efficiently.

[0398] Meanwhile, at least one of the actuators (AT1 to ATn) of FIG. 12a may operate to control the temperature inside the vehicle, and at least one of the sensors (SR1 to SRn) may be a camera inside the vehicle.

[0399] In this case, the controller (1230) can control the actuators (AT1 to ATn) to control the temperature inside the vehicle based on the third vehicle service (1221) executed by the input signal.

[0400] Meanwhile, the controller (1230) can control the actuators (AT1 to ATn) for any one of temperature control, wind direction control, and wind speed control within the vehicle based on the fifth vehicle service (1223) executed by in-vehicle camera data. Accordingly, the fifth vehicle service (1223) can be efficiently executed.

[0401] Figure 12b is a drawing referenced in the description of Figure 12a.

[0402] Referring to the drawing, the first signal processing device (170) in the vehicle control device (100) according to the embodiment of the present disclosure can each receive switching signals from a plurality of switches (SW1 to SW6) for driving actuators (AT1 to AT6).

[0403] Meanwhile, the first signal processing device (170) can transmit each switching signal from a plurality of switches (SW1 to SW6) to the control device (1200) via the second signal processing device (170z), which is an area signal processing device.

[0404] Meanwhile, the first controller (1233) within the control device (1200) can receive some of the plurality of switching signals, and the second controller (1247) can receive other some of the plurality of switching signals.

[0405] Meanwhile, the first controller (1233) can control some (AT1 to AT3) of the plurality of actuators (AT1 to AT6) to operate based on the received switching signal.

[0406] Accordingly, unlike Fig. 11b, composite driving of multiple actuators (AT1 to AT3) by the first controller (1233) becomes possible. Accordingly, multiple actuators (AT1 to AT3) can be operated efficiently.

[0407] Meanwhile, the second controller (1237) can control other parts (AT4 to AT3) of the plurality of actuators (AT1 to AT6) to operate based on the received switching signal.

[0408] Accordingly, unlike Fig. 11b, composite driving of multiple actuators (AT4 to AT6) by the second controller (1237) becomes possible. Accordingly, multiple actuators (AT4 to AT6) can be operated efficiently.

[0409] Ultimately, by using the first signal processing device (170) or the second signal processing device (170z), it becomes possible to efficiently execute a composite service that drives multiple actuators.

[0410] FIG. 13a is an example of an internal block diagram of a vehicle control device according to another embodiment of the present disclosure.

[0411] Referring to the drawings, a vehicle control device (100b) according to another embodiment of the present disclosure is similar to the vehicle control device (100a) of FIG. 12a, but differs in that it further includes a third signal processing device (170z2) and a second control device (1300).

[0412] That is, a vehicle control device (100b) according to another embodiment of the present disclosure may include a first signal processing device (170), a second signal processing device (170z) electrically connected to the first signal processing device (170), a controller (1230) electrically connected to the second signal processing device (170z) and controlling a plurality of actuators or actuators (AT1 to ATn), a third signal processing device (170z2) electrically connected to the first signal processing device (170), and a second controller (1230) electrically connected to the third signal processing device (170z2) and controlling a plurality of actuators (AT1 to ATn).

[0413] Descriptions of the first signal processing device (170), the second signal processing device (170z), and the controller (1230) are omitted with reference to FIG. 12a.

[0414] The third signal processing device (170z2) includes a third processor (175z2) and a third memory (174z2).

[0415] The second control device (1300) includes a second controller (1330) that controls a plurality of actuators (ATb1 to ATbn).

[0416] The first signal processing device (170) and the third signal processing device (170z2) can perform TSN (Time Sensitive Networking) communication based on Ethernet communication.

[0417] It is preferable that the communication method between the third signal processing device (170z2) and the second control device (1300) is the same as the communication method between the first signal processing device (170) and the third signal processing device (170z2).

[0418] For example, the communication method between the first signal processing device (170) and the third signal processing device (170z2) may be TSN (Time Sensitive Networking) communication based on Ethernet communication.

[0419] Meanwhile, the second control device (1300) may further include a memory (1334) in addition to the second controller (1330).

[0420] Meanwhile, the first processor (175) in the first signal processing device (170) according to the embodiment of the present disclosure can execute an operating system (1205) and execute a first vehicle service (1211) and a second vehicle service (1212) on the operating system (1205).

[0421] Meanwhile, the first vehicle service (1211) or the second vehicle service (1212) may include a service for controlling at least one of a plurality of actuators (AT1 to ATn) or a plurality of actuators (ATb1 to ATbn).

[0422] Meanwhile, the first vehicle service (1211) or the second vehicle service (1212) may be updated based on update data received from an external server (400) or an external electronic device (600).

[0423] Meanwhile, the first vehicle service (1211) or the second vehicle service (1212) may be a new vehicle service based on data received from an external server (400) or an external electronic device (600).

[0424] Meanwhile, the second processor (175z) within the second signal processing device (170z) can execute the third vehicle service (1221), the fourth vehicle service (1222), the fifth vehicle service (1223), and the sixth vehicle service (1224) on the operating system (1205z).

[0425] Meanwhile, the third vehicle service (1221), the fourth vehicle service (1222), the fifth vehicle service (1223), and the sixth vehicle service (1224) may be services for controlling at least one of a plurality of actuators (AT1 to ATn).

[0426] Meanwhile, the third vehicle service (1221) or the fourth vehicle service (1222) may be a new vehicle service based on data received from an external server (400) or an external electronic device (600).

[0427] Meanwhile, the fifth vehicle service (1223) or the sixth vehicle service (1224) may be updated based on update data received from an external server (400) or an external electronic device (600).

[0428] Meanwhile, the third processor (175z2) in the third signal processing device (170z2) according to the embodiment of the present disclosure may execute an operating system (1205z2) and execute an SOA-based service or microservice (1215z2) on the operating system (1205z2).

[0429] Meanwhile, the third processor (175z2) within the third signal processing device (170z2) can execute a vehicle service (1310z2) on the operating system (1205z2).

[0430] The vehicle service (1310z2) may include at least one vehicle service, and in the drawing, the seventh vehicle service (1321), the eighth vehicle service (1322), the ninth vehicle service (1323), and the tenth vehicle service (1324) are exemplified.

[0431] Meanwhile, at least one of the 7th vehicle service (1321) to the 10th vehicle service (1324) may include a service for controlling at least one of the plurality of actuators (ATb1 to ATbn).

[0432] Meanwhile, the 7th vehicle service (1321) or the 8th vehicle service (1322) may be a new vehicle service based on data received from an external server (400) or an external electronic device (600).

[0433] Meanwhile, the 9th vehicle service (1323) or the 10th vehicle service (1324) may be updated based on update data received from an external server (400) or an external electronic device (600).

[0434] A second control device (1300) according to an embodiment of the present disclosure comprises a second controller (1330) and a memory (1334).

[0435] The second controller (1330) can execute an operating system (1326) and execute actuator control (1335) on the operating system (1326).

[0436] Meanwhile, the second controller (1330), unlike FIG. 11a, can only execute actuator control (1335) without executing vehicle services.

[0437] That is, it is preferable that the vehicle service be executed in the third signal processing device (170z2) instead of the second control device (1300).

[0438] A second control device (1300) according to an embodiment of the present disclosure can control a plurality of actuators (ATb1 to ATbn) or a plurality of sensor devices (SRb1 to SRbn) based on actuator control (1335).

[0439] The actuator control (1335) at this time can output an operation on signal, an operation off signal, or an operation control signal for at least one of a plurality of actuators (AT1 to ATn) or a plurality of sensor devices (SRb1 to SRbn).

[0440] Alternatively, the second control device (1300) according to the embodiment of the present disclosure can control a plurality of actuators (ATb1 to ATbn) based on data received from a plurality of sensor devices (SRb1 to SRbn) and actuator control (1335).

[0441] A third processor (175z2) according to one embodiment of the present disclosure executes a seventh vehicle service (1321) to control a second controller (1330) within a second control device (1300) to output an operation on signal or an operation off signal to at least one of a plurality of actuators (ATb1 to ATbn) or a plurality of sensor devices (SRb1 to SRbn).

[0442] Meanwhile, the first memory (174) in the first signal processing device (170) or the second memory (174z) in the third signal processing device (170z2) can receive and store data related to the execution of the ninth vehicle service (1323) added or updated in addition to the seventh vehicle service (1321) from an external server (400) or an external electronic device (600).

[0443] Meanwhile, the third processor (175z2) according to one embodiment of the present disclosure controls the second controller (1330) in the second control device (1300) to output an operation on signal, an operation off signal, or an operation control signal to at least one of the plurality of actuators (ATb1 to ATbn) or the plurality of sensor devices (SRb1 to SRbn) based on the ninth vehicle service (1323), when the ninth vehicle service (1323) is executed after the execution-related data of the ninth vehicle service (1323) is stored in the first memory (174) in the first signal processing device (170) or the second memory (174z) in the third signal processing device (170z2).

[0444] At this time, the third processor (175z2) controls the execution-related data of the added or updated 9th vehicle service (1323) not to be transmitted to the second control device (1300).

[0445] That is, the second control device (1300) does not execute the vehicle service and does not receive data related to the execution of the vehicle service.

[0446] In this way, the second control device (1300) enables simple operation of the second control device (1300) by outputting an operation on signal, an operation off signal, or an operation control signal to at least one of the plurality of actuators (ATb1 to ATbn) or the plurality of sensor devices (SRb1 to SRbn) without executing a vehicle service or receiving data related to the execution of the vehicle service.

[0447] In addition, since there is no need for new services or service updates in the second control device (1300), it is possible to stably control multiple actuators (ATb1 to ATbn) or multiple sensor devices (SRb1 to SRbn).

[0448] Meanwhile, new services or service updates can be efficiently executed by the third signal processing device (170z2) rather than the second control device (1300). In particular, new or updated services based on a service-oriented architecture can be efficiently executed by the third signal processing device (170z2).

[0449] Meanwhile, data related to the execution of the 9th vehicle service (1323) may include condition data and action data.

[0450] Meanwhile, the third processor (175z2) can execute the ninth vehicle service (1323) when the condition data within the execution-related data of the ninth vehicle service (1323) is satisfied. Accordingly, a new ninth vehicle service (1323) or an updated ninth vehicle service (1323) can be efficiently executed.

[0451] Meanwhile, the motion control signal may include an motion speed control signal, an motion intensity control signal, or an motion temperature control signal.

[0452] For example, based on the 9th vehicle service (1323), the second controller (1330) in the second control device (1300) can output an operation speed control signal, an operation intensity control signal, or an operation temperature control signal to at least one of the plurality of actuators (ATb1 to ATbn) or the plurality of sensor devices (SRb1 to SRbn).

[0453] Accordingly, based on the ninth vehicle service (1323), the operating speed, operating intensity, or operating temperature of at least one of the plurality of actuators (ATb1 to ATbn) or the plurality of sensor devices (SRb1 to SRbn) can be controlled. Consequently, the new ninth vehicle service (1323) or the updated ninth vehicle service (1323) can be efficiently executed.

[0454] Meanwhile, the 9th vehicle service (1323) may include a microservice.

[0455] For example, the third processor (175z2) can execute the ninth vehicle service (1323), which is a microservice, when the condition data in the execution-related data of the ninth vehicle service (1323) is satisfied. Accordingly, new or updated microservices can be efficiently executed.

[0456] Meanwhile, the first processor (175) can be controlled to execute the first vehicle service (1211) based on the received sensor data and transmit execution information of the first vehicle service (1211) to the third processor (175z2).

[0457] Meanwhile, the sensor data may include at least one of vehicle driving sensor data, passenger status sensor data, or vehicle surrounding sensor data.

[0458] Meanwhile, the first processor (175) can control the execution of the first vehicle service (1211) when the sensor data satisfies the conditions for executing the first vehicle service (1211).

[0459] Meanwhile, the third processor (175z2) can control the second controller (1330) by executing the ninth vehicle service (1323) based on the execution information of the first vehicle service (1211).

[0460] And, based on the 9th vehicle service (1323), the second controller (1330) within the second control device (1300) can output an operating speed control signal, an operating intensity control signal, or an operating temperature control signal to at least one of the plurality of actuators (ATb1 to ATbn) or the plurality of sensor devices (SRb1 to SRbn). Accordingly, a new service or an updated service can be efficiently executed.

[0461] Meanwhile, the first processor (175) controls the execution of the first vehicle service (1211) based on the received first input signal and sensor data, and transmits execution information of the first vehicle service (1211) to the third processor (175z2), and the third processor (175z2) controls the second controller (1330) by executing the ninth vehicle service (1323) based on the execution information of the first vehicle service (1211). Accordingly, new or updated services can be efficiently executed.

[0462] Meanwhile, the first processor (175) controls the transmission of the received first input signal to the third processor (175z2), and the third processor (175z2) can control the second controller (1330) by executing the seventh vehicle service (1321) based on the first input signal.

[0463] Meanwhile, the second controller (1330) can control at least one of the plurality of actuators (ATb1 to ATbn) or the plurality of sensor devices (SRb1 to SRbn) based on the seventh vehicle service (1321). Accordingly, the seventh vehicle service (1321) can be efficiently executed.

[0464] Meanwhile, the third processor (175z2) can control the second controller (1330) by executing the ninth vehicle service (1323) based on the received sensor data. Accordingly, new or updated services can be efficiently executed based on the sensor data.

[0465] Meanwhile, the third processor (175z2) can control the second controller (1330) by executing the ninth vehicle service (1323) based on the received first input signal and sensor data. Accordingly, new or updated services can be efficiently executed based on the first input signal and sensor data.

[0466] Meanwhile, the third processor (175z2) can control the execution of the ninth vehicle service (1323) if the sensor data satisfies the conditions for executing the ninth vehicle service (1323). Accordingly, new or updated services can be efficiently executed based on the sensor data.

[0467] Meanwhile, the third processor (175z2) can control the second controller (1330) by executing the seventh vehicle service (1321) based on the first input signal. Accordingly, the seventh vehicle service (1321) can be executed efficiently.

[0468] Meanwhile, data related to the execution of the 9th vehicle service (1323) may include condition data and action data. At this time, at least one of the condition data and the action data may be updateable.

[0469] Accordingly, new or updated services can be efficiently executed based on updated data.

[0470] Meanwhile, condition data may include vehicle driving sensor data, passenger status sensor data, and vehicle surrounding sensor data. Accordingly, new or updated services can be efficiently implemented based on condition data.

[0471] Meanwhile, the second controller (1330) receives the operating status data of the actuators (ATb1 to ATbn) when the ninth vehicle service (1323) of the third processor (175z2) is executed, and can control the operating status of the actuators (ATb1 to ATbn) to vary based on the operating status data of the actuators. Accordingly, it becomes possible to efficiently execute a new service or an updated service based on the operating status data of the actuators.

[0472] Meanwhile, the second controller (1330) receives operation status data of a plurality of sensor devices (SRb1 to SRbn) when the ninth vehicle service (1323) of the third processor (175z2) is executed, and can control the operation status of the plurality of sensor devices (SRb1 to SRbn) to vary based on the operation status data of the vehicle's internal monitoring device. Accordingly, a new service or an updated service can be efficiently executed based on the operation status data of the vehicle's internal monitoring device.

[0473] Meanwhile, the second controller (1330) controls the operation on or off of the actuator or the internal monitoring device based on the seventh vehicle service (1321), and can vary the operation speed of the actuator (AT1 to ATn) or the plurality of sensor devices (SRb1 to SRbn) based on the ninth vehicle service (1323). Accordingly, the ninth vehicle service (1323) can be efficiently executed.

[0474] Meanwhile, when an operation error of some of the plurality of actuators (AT1 to ATn) is detected, the controller (1230) in the control device (1200) transmits a device error signal to the second signal processing device (170z).

[0475] Meanwhile, the first processor (175) or the second processor (175z) requests execution of a first service for device operation replacement based on the error signal. Accordingly, when a device connected to the controller (1230) experiences an operation error, the replacement service can be quickly executed. In particular, when a device connected to the controller (1230) experiences an operation error, a service-oriented architecture-based replacement service can be quickly executed.

[0476] Meanwhile, when an operation error of some of the plurality of sensor devices (SRb1 to SRbn) is detected, the second controller (1330) in the second control device (1300) transmits a device error signal to the third signal processing device (170z2).

[0477] Meanwhile, the first processor (175) or the third processor (175z2) requests execution of a second service for device operation replacement based on the error signal. Accordingly, when a device connected to the second controller (1330) experiences an operation error, the replacement service can be quickly executed. In particular, when a device connected to the second controller (1330) experiences an operation error, a service-oriented architecture-based replacement service can be quickly executed.

[0478] FIG. 13b is a drawing illustrating an example of operation in the event of an operation error of a hardware device in a vehicle according to an embodiment of the present disclosure.

[0479] Referring to the drawings, a controller (2330) in a control device (1200) in a vehicle control device (100) according to an embodiment of the present disclosure can control a lighting device (2310) of the vehicle based on an input signal from a hardware switch (2312) or a signal from a sensor (SRm) such as a camera or a light sensor.

[0480] For example, a controller (2330) in a vehicle control device (100) according to an embodiment of the present disclosure may control a lighting device (2310) of the vehicle to operate based on an input signal from a hardware switch (2312).

[0481] As another example, the controller (2330) in the vehicle control device (100) according to the embodiment of the present disclosure can control the lighting device (2310) of the vehicle to operate when the level of a signal from a sensor (SRm), such as a camera or a light sensor, is below a reference level.

[0482] Meanwhile, the controller (2330) of FIG. 13b can correspond to the controller (1230) of FIG. 12a.

[0483] Meanwhile, when an operation error is detected due to an operation error of the hardware switch (2312) or a disconnection in the wiring between the hardware switch (2312) and the controller (2330), the controller (2330) in the vehicle control device (100) can transmit an error signal of the device to the interface (2340) in the second signal processing device (170z) in the control device (1200).

[0484] Meanwhile, the second processor (175z) in the second signal processing device (170z) or the first processor (175) in the first signal processing device (170) can determine an operation error of a hardware switch (2312) or a sensor (SRm) such as a camera or light sensor, based on a received error signal.

[0485] Meanwhile, the second processor (175z) in the second signal processing device (170z) or the first processor (175) in the first signal processing device (170) can execute a service agent (2350) for executing a vehicle service.

[0486] Meanwhile, a service agent (2350) for executing a vehicle service can execute a virtual switch service for controlling a lighting device (2355) in addition to the service being executed when there is an operation error in a hardware switch (2312) or a sensor (SRm) such as a camera or light sensor.

[0487] Figure 14a is a drawing referenced in the description of the service agent of Figure 13b.

[0488] Referring to the drawing, the second processor (175z) within the second signal processing device (170z) can receive an error signal from the interface (2340) within the second signal processing device (170z) when there is an operation error of the hardware switch (2312) or a sensor (SRm) such as a camera or light sensor.

[0489] Meanwhile, the interface (2340) within the second signal processing device (170z) may transmit an error signal to the main logic processing unit (2342) within the first signal processing device (170).

[0490] Meanwhile, the second processor (175z) in the second signal processing device (170z) can execute a service agent (2350) for executing a vehicle service when there is an operation error in a hardware switch (2312) or a sensor (SRm) such as a camera or light sensor.

[0491] For example, the service agent (2350) and the interface (2340) within the second signal processing device (170z) may exchange signals based on SOA, signals based on eXpress Data Path (XDP), signals based on Extended Berkeley Packet Filter (eBPF), or signals based on Shared Memory (SHM).

[0492] Meanwhile, a service agent (2350) for executing a vehicle service can execute a virtual switch service for controlling a lighting device (2355) in addition to the service being executed when there is an operation error in a hardware switch (2312) or a sensor (SRm) such as a camera or light sensor.

[0493] Meanwhile, a service agent (2350) for executing a vehicle service may include a state manager (2357) that transmits command data (cmd) to a workload orchestrator (870).

[0494] Meanwhile, communication based on remote procedure call (RPC) can be performed between the state manager (2357) and additionally the lighting device control (2355).

[0495] Meanwhile, the service agent (2350) can execute a replacement service for replacing the hardware switch (2312) or the sensor (SRm) such as the camera or light sensor when there is an operation error in the hardware switch (2312) or the sensor (SRm) such as the camera or light sensor.

[0496] Figure 14b is a diagram referenced in the description of an alternative service executed in the service agent of Figure 14a.

[0497] Referring to the drawing, the service agent (2350) can execute a replacement service for replacing the sensor (SRm) when there is an operation error of the sensor (SRm), such as a camera or a light sensor.

[0498] For example, if the current state of the lighting device (2310) is off at night due to an operation error of a hardware switch (2312) or an operation error of a sensor (SRm) such as a camera or a light sensor, even though the lighting device (2310) should be on according to the specifications, the service agent (2350) can control the lighting device (2310) to be on by setting a reconcile target.

[0499] Meanwhile, if the light level of a signal received from a sensor (SRm) such as a camera or light sensor is 'level 40' based on the specification and the current state is also 'level 40', the service agent (2350) can determine that it is operating normally and control not to set a reconcile target.

[0500] Figure 14c is a diagram for reference in explaining the operation of a service agent based on an example scenario.

[0501] Referring to the drawing, the service agent (2350) can receive command data (cmd), etc., from the service agent (2350).

[0502] Meanwhile, the second processor (175z) in the second signal processing device (170z) or the first processor (175) in the first signal processing device (170) can execute the service agent (2350).

[0503] The service agent (2350) can execute a vehicle message receiver (2410) and a scenario processing unit (2420).

[0504] The vehicle message receiver (2410) may include a DDS adapter (2412), a SOME / IP receiver (2413), a micro protocol receiver (uProtocol) (2415), and a Zenoh receiver (2417) related to a distributed protocol.

[0505] Meanwhile, the service agent (2350) can execute a scenario manager (2540) between the vehicle message receiver (2410) and the scenario processing unit (2420).

[0506] The scenario manager (2540) may include a receiver (2452) and a condition checker (2455).

[0507] A receiver (2452) within the scenario manager (2540) can receive data from a DDS adapter (2412), a SOME / IP receiver (2413), a micro protocol receiver (2415), or a Xeno receiver (2417).

[0508] Meanwhile, the condition checker (2455) can check the condition data of data received from the receiver (2452).

[0509] Meanwhile, the condition checker (2455) can check the condition data within the example scenario (2460).

[0510] In the drawing, an example of a scenario (2460) is illustrated, which includes condition data and action data for gear status.

[0511] Meanwhile, the condition checker (2455) can check condition data for the gear state in the example scenario (2460) and, based on the condition data, control to execute an action corresponding to the action data.

[0512] For example, the service agent (2350) can control the lighting device (2310) to operate for emergency lighting when the gear state is "reverse", as in the example scenario (2460). Accordingly, the lighting device (2310) can be controlled to operate efficiently depending on the state of the vehicle.

[0513] Meanwhile, the internal configuration of the service agent (2350) of FIG. 14c, unlike the drawing, can also be provided within the vehicle service orchestrator (870).

[0514] For example, a service agent (2350) may execute a vehicle message receiver (2410) and a scenario processor (2420).

[0515] Additionally, the service agent (2350) may execute a scenario manager (2540) between the vehicle message receiver (2410) and the scenario processing unit (2420).

[0516] FIG. 15A is a diagram illustrating another example of the operation of a vehicle control device according to an embodiment of the present disclosure. In particular, FIG. 15A is a diagram referenced in the description of the service agent and virtual switch service of FIG. 13B.

[0517] Referring to the drawings, a controller (2330) in a control device (1200) in a vehicle control device (100) according to an embodiment of the present disclosure can control a lighting device (2310) of the vehicle based on an input signal from a hardware switch (2312) or a signal from a sensor (SRm) such as a camera or a light sensor.

[0518] Meanwhile, when an operation error is detected due to an operation error of the hardware switch (2312) or a disconnection in the wiring between the hardware switch (2312) and the controller (2330), the controller (2330) in the vehicle control device (100) can transmit an error signal of the device to the interface (2340) in the second signal processing device (170z) in the control device (1200).

[0519] Meanwhile, the second processor (175z) in the second signal processing device (170z) or the first processor (175) in the first signal processing device (170) can determine an operation error of a hardware switch (2312) or a sensor (SRm) such as a camera or light sensor, based on a received error signal.

[0520] Meanwhile, the second processor (175z) in the second signal processing device (170z) or the first processor (175) in the first signal processing device (170) can execute a service agent (2350) for executing a vehicle service.

[0521] Meanwhile, a service agent (2350) for executing a vehicle service can execute a virtual switch service for controlling a lighting device (2355) in addition to the service being executed when there is an operation error in a hardware switch (2312) or a sensor (SRm) such as a camera or light sensor.

[0522] Meanwhile, a service agent (2350) for executing a vehicle service can execute a state manager (2357) that transmits command data (cmd) to a workload orchestrator (870).

[0523] Meanwhile, the service agent (2350) can execute a replacement service for replacing the hardware switch (2312) or the sensor (SRm) such as the camera or light sensor when there is an operation error in the hardware switch (2312) or the sensor (SRm) such as the camera or light sensor.

[0524] For example, a state manager (2357) within a service agent (2350) may transmit a request to create a replacement service in response to a hardware operation error to a server (400), etc.

[0525] In response to this, the server (400) may receive a request to create a replacement service corresponding to a hardware operation error and create a replacement service (2358) based on this.

[0526] At this time, the server (400) can create an alternative service (2358) using artificial intelligence, etc.

[0527] And, the server (400) can transmit data related to the generated alternative service to the second processor (175z) in the second signal processing device (170z) or the first processor (175) in the first signal processing device (170).

[0528] Meanwhile, the second processor (175z) in the second signal processing device (170z) or the first processor (175) in the first signal processing device (170) can add an alternative service (2514) to the in-vehicle service list (2510).

[0529] In the drawing, the second processor (175z) in the second signal processing device (170z) or the first processor (175) in the first signal processing device (170) is shown to add an alternative service (2514) to the in-vehicle service list (2510) in addition to the existing services (2512, 1216).

[0530] Meanwhile, the second processor (175z) in the second signal processing device (170z) or the first processor (175) in the first signal processing device (170) can control the execution of an alternative service (2514) added to the in-vehicle service list (2510) in the event of an operation error of a hardware switch (2312) or a sensor (SRm) such as a camera or light sensor.

[0531] Specifically, the service agent (2350) can control the execution of an alternative service (2514) added to the in-vehicle service list (2510) in the event of an operation error of a hardware switch (2312) or a sensor (SRm) such as a camera or light sensor.

[0532] For example, the service agent (2350) controls to display a screen (1370) including an emergency lighting control item in the event of an operation error of a hardware switch (2312) or a sensor (SRm) such as a camera or a light sensor, and when an emergency lighting control item is selected and an emergency lighting control on item is activated, the service agent (2350) can control to output an operation on signal, an operation off signal, or an operation control signal to the lighting device (2310) for emergency lighting control. Accordingly, in the event of an operation error of a device connected to the controller (2330), an alternative service can be quickly executed.

[0533] Meanwhile, the first processor (175) or the second processor (175z) can control the virtual switch service to be executed based on the type of operational error of the hardware switch (2312) and display a virtual switch object corresponding to the virtual switch service to be executed on the display (180). Accordingly, when an operational error occurs in a device connected to the controller (1230), a replacement service can be quickly executed.

[0534] For example, if an operation error of a hardware switch (2312) is an operation error of a lighting device switch, the first processor (175) or the second processor (175z) can control a virtual switch object corresponding to a virtual switch service for emergency lighting control to be displayed on the display (180).

[0535] As another example, the first processor (175) or the second processor (175z) can control to display a virtual switch object corresponding to a virtual switch service for emergency window control on the display (180) when the operation error of the hardware switch (2312) is an operation error of the vehicle window switch.

[0536] Meanwhile, the first processor (175) or the second processor (175z) can be controlled to execute a virtual switch service or a substitute sensor service when an operation error occurs in the sensor (SRm), and to output a virtual switch object corresponding to the virtual switch service or a substitute sensor object corresponding to the substitute sensor service to an electrically connected display (180). Accordingly, when an operation error occurs in a device connected to the controller (1230), the substitute service can be quickly executed.

[0537] For example, if an ultrasonic sensor among the sensors (SRm) has a malfunction, the first processor (175) or the second processor (175z) can control a replacement sensor object corresponding to a replacement sensor service using a lidar sensor, which is another piece of hardware, to be output to an electrically connected display (180). Accordingly, when a device connected to the controller (1230) has a malfunction, the replacement service can be quickly executed.

[0538] As another example, if a lidar sensor among the sensors (SRm) has a malfunction, the first processor (175) or the second processor (175z) can control a replacement sensor object corresponding to a replacement sensor service using an ultrasonic sensor, which is another piece of hardware, to be output to an electrically connected display (180). Accordingly, when a device connected to the controller (1230) has a malfunction, the replacement service can be quickly executed.

[0539] Meanwhile, when a virtual switch object or a substitute sensor object is selected, the first processor (175) or the second processor (175z) can control the controller (1230) to output an operation on signal, an operation off signal, or an operation control signal to the actuator (ACT). Accordingly, when an operation error occurs in a device connected to the controller (1230), a substitute service can be efficiently executed.

[0540] For example, when a lidar sensor among the sensors (SRm) has an operation error and a replacement sensor object corresponding to a replacement sensor service using an ultrasonic sensor is displayed and a replacement sensor object is selected, the first processor (175) or the second processor (175z) can control the controller (1230) to output an operation on signal, an operation off signal, or an operation control signal to an actuator (ACT) for driving the ultrasonic sensor. Accordingly, when a device connected to the controller (1230) has an operation error, the replacement service can be efficiently executed.

[0541] Meanwhile, the first processor (175) or the second processor (175z) can be controlled to execute a replacement actuator service when an actuator (ACT) malfunctions, and to output a replacement actuator (ACT) object corresponding to the replacement actuator service to an electrically connected display (180). Accordingly, when a device connected to the controller (1230) malfunctions, the replacement service can be quickly executed.

[0542] Meanwhile, when a replacement actuator (ACT) object is selected, the first processor (175) or the second processor (175z) can control the controller (1230) to output an operation on signal, an operation off signal, or an operation control signal to another actuator (ACT). Accordingly, when an operation error occurs in a device connected to the controller (1230), a replacement service can be efficiently executed.

[0543] Meanwhile, the first processor (175) or the second processor (175z) executes a service agent (2350) for executing a vehicle service, and the service agent (2350) can be controlled to execute a replacement actuator service in addition to the service being executed when an actuator (ACT) malfunctions. Accordingly, when a device connected to the controller (1230) malfunctions, a replacement service can be quickly executed.

[0544] Meanwhile, when a sensor (SRm) malfunctions, the first processor (175) or the second processor (175z) receives data related to the virtual switch service or the alternative sensor service from an external server (400) or electronic device, and when condition data in the execution-related data of the virtual switch service or the alternative sensor service is satisfied, the virtual switch service or the alternative sensor service can be controlled to be executed. Accordingly, when a device connected to the controller (1230) malfunctions, the alternative service can be quickly executed.

[0545] Figure 15b is a diagram referenced in the description of an alternative service executed in the service agent of Figure 15a.

[0546] Referring to the drawing, the service agent (2350) can execute a replacement service for replacing the sensor (SRm) when there is an operation error of the sensor (SRm), such as a camera or a light sensor.

[0547] For example, the service agent (2350) can control the reconcile target to be turned off when the lighting device (2310) is supposed to be turned on according to the specifications at night, but the current state is on due to an operation error of the hardware switch (2312) or a normal operation of a sensor (SRm) such as a camera or a light sensor.

[0548] As another example, the service agent (2350) may control the lighting device (2310) to be turned on by setting a reconcile target when the lighting device (2310) is currently in an off state due to an operational error of the hardware switch (2312) even though it should be turned on according to the specifications based on the operation of the hardware switch (2312). Accordingly, in the event of an operational error of a device connected to the controller (2330), a replacement service may be provided.

[0549] Figure 16a illustrates an example of the operation of the alternative service.

[0550] Referring to the drawing, the server (400) can transmit data (2610) related to an alternative service created by a user or the like to a first processor (175) or a second processor (175z) in the vehicle.

[0551] Data (2610) related to the alternative service at this time may be data based on an application programming interface (API). Specifically, data (2610) related to the alternative service may be data based on an open API.

[0552] Meanwhile, the first processor (175) or the second processor (175z) may receive data (2610) related to the replacement service and, based on the data, execute the replacement service (2612).

[0553] Meanwhile, the first processor (175) or the second processor (175z) can execute a replacement service (2612) to control the controller (2615) to output an operation on signal, an operation off signal, or an operation control signal to the lighting device (2310). Accordingly, the replacement service can be efficiently executed in the event of an operation error in a device connected to the controller (1230).

[0554] Figure 16b illustrates another example of the operation of the alternative service.

[0555] Referring to the drawing, the server (400) can transmit data (2610) related to an alternative service created by a user or the like to a first processor (175) or a second processor (175z) in the vehicle.

[0556] Meanwhile, the first processor (175) or the second processor (175z) may receive data (2610) related to the replacement service and, based on the data, execute the replacement service (2612).

[0557] Meanwhile, the first processor (175) or the second processor (175z) can execute a service agent (2350) for executing a vehicle service.

[0558] Meanwhile, the first processor (175) or the second processor (175z) executes a service agent (2350) for executing a vehicle service, and when an error signal from the device is received, the service agent (2350) executes a first service, which is an alternative service, in addition to the service being executed. However, depending on the safety level, some application programming interfaces (APIs) within the alternative service can be blocked and only some application programming interfaces can be executed.

[0559] For example, when a device error signal is received, the service agent (2350) may execute a first service (2612), which is an alternative service, in addition to the currently running service. However, depending on the safety level, at least a portion of the alternative service may be blocked and only the remaining portion may be controlled to be executed. Accordingly, the alternative service can be stably executed in the event of an operational error in a device connected to the controller (1230).

[0560] Figures 17a to 17c are drawings referenced in the description of blocking of the API of Figure 16b.

[0561] First, Figure 17a is a diagram showing an example of the internal configuration of a pipeline of a service agent.

[0562] Referring to the drawing, the pipeline (2710) of the service agent (2350) may execute or include GIT (2712), Jenkins (2714), Test (2716), and Blocking API Proxy Service (2718).

[0563] Meanwhile, the Blocking API Proxy Service (2718) can be configured according to the safety level policy.

[0564] Figure 17b is an example of the internal configuration of an Open API package.

[0565] Referring to the drawing, the Open API package (2720) can be transmitted from a server (400) or the like to a vehicle control device (100) within the vehicle.

[0566] In particular, the Open API package (2720) can be transmitted to the first processor (175) or the second processor (175z) within the vehicle control device (100).

[0567] Meanwhile, the Open API package (2720) may include a service (2722), an installer (2724), a yaml file (2725), a controller (2726), and a Blocking API Service (2727).

[0568] For example, the first processor (175) or the second processor (175z) can block at least a part of the alternative service and control only the other part to be executed, depending on the safety level, based on the Blocking API Service (2727).

[0569] Figure 17c is a diagram referenced in the description of the blocking operation of the service agent's service.

[0570] Referring to the drawing, the service agent (2350) controls the execution of the service (2732).

[0571] Meanwhile, the service agent (2350) can control the Blocking API Service (2734) to activate or deactivate the service (2732).

[0572] For example, when the service agent (2350) outputs an activation signal to the Blocking API Service (2734), the Blocking API Service (2734) can control the service (2732) to be activated.

[0573] As another example, when the service agent (2350) outputs a deactivation signal to the Blocking API Service (2734), the Blocking API Service (2734) can control the service (2732) to be deactivated.

[0574] Meanwhile, the service (2732) of FIG. 17c may be the virtual switching service or alternative service described above.

[0575] Figure 18a is an example of a flowchart showing the operation of deactivation by blocking of a service.

[0576] Referring to the drawing, the first processor (175) or the second processor (175z) receives a safety policy related to the service and applies it (S2722).

[0577] Next, the first processor (175) or the second processor (175z) can determine whether a virtual switch service or an alternative service within the service agent (2350) is a necessary scenario and perform monitoring (S2724).

[0578] Next, the first processor (175) or the second processor (175z) can determine whether an operational error situation of the hardware device has occurred and, if so, control the execution of a virtual switch service or an alternative service.

[0579] At this time, the first processor (175) or the second processor (175z) determines whether a blocking situation of the alternative service occurs according to the safety level when executing the virtual switch service or the alternative service (S2720), and if so, controls the activation of the Blocking API Service (2734) (S2722), and can terminate the situation (S2724). Accordingly, the alternative service (2732) can be deactivated.

[0580] Meanwhile, in step 2720 (S2720), if the blocking situation of the alternative service is unnecessary, the first processor (175) or the second processor (175z) can control the Blocking API Service (2734) to be deactivated (S2726). Accordingly, the alternative service (2732) can be deactivated.

[0581] Figure 18b is an example of a flowchart showing the execution operation of a replacement service of a lighting device.

[0582] Referring to the drawing, the first processor (175) or the second processor (175z) releases data related to the virtual switch service or the alternative service in order to execute the virtual switch service or the alternative service when an operation error of the hardware device occurs (S2810).

[0583] And, the first processor (175) or the second processor (175z) can apply the specification within the data related to the virtual switch service or the alternative service within the service agent (2350) (S2812).

[0584] For example, the specification data may include that when entering a tunnel, the vehicle lighting device (2310) turns on when the illuminance is 100 lux or less.

[0585] And, the first processor (175) or the second processor (175z) can execute a virtual switch service or an alternative service.

[0586] Next, during execution of the virtual switch service or alternative service, if there is an off input of the lighting device (2310), the controller (1230) can be controlled to turn off the lighting device (2310).

[0587] Meanwhile, the first processor (175) or the second processor (175z) determines whether the specifications in the data related to the virtual switch service or the alternative service are met while the lighting device (2310) is turned off (S2820).

[0588] For example, the first processor (175) or the second processor (175z) determines whether condition data for service execution in data related to a virtual switch service or an alternative service is satisfied while the lighting device (2310) is turned off.

[0589] Meanwhile, the first processor (175) or the second processor (175z) may activate the Reconcile function within the service agent (2350) when the specifications within the data related to the virtual switch service or the alternative service are met while the lighting device (2310) is turned off (S2825).

[0590] In addition, the first processor (175) or the second processor (175z) can control the controller (1230) to turn on the lighting device (2310). Accordingly, even if there is an operational error in the hardware device, alternative services, etc. can be stably provided in response to the vehicle driving situation.

[0591] Figure 19a is a diagram illustrating an example of execution of a replacement service in the event of an operating error of a hardware device.

[0592] Referring to the drawing, when a hardware device (OCRm) inside a vehicle has an operation error, a controller (2330) electrically connected to the hardware device (OCRm) can transmit an error signal or operation error information to a service agent (2350).

[0593] Meanwhile, the service agent (2350) can be executed on the first processor (175) or the second processor (175z).

[0594] Meanwhile, the service agent (2350) can transmit an alternative service request in a motion error situation based on motion error information.

[0595] For example, a service agent (2350) can send a replacement service request or a new service request to a service generator (2910) within a server (400).

[0596] A service generator (2910) within the server (400) can generate a replacement service or a new service based on a replacement service request or a new service request, and transmit data related to the replacement service or the new service to the first processor (175) or the second processor (175z).

[0597] Specifically, the service generator (2910) within the server (400) can transmit data related to a replacement service or a new service to the service agent (2350).

[0598] Meanwhile, the first processor (175) or the second processor (175z) can execute the replacement service or the new service based on data related to the replacement service or the new service.

[0599] Specifically, the service agent (2350) can execute the replacement service or the new service based on data related to the replacement service or the new service.

[0600] In addition, the service agent (2350) can control the controller (2330) to output an operation on signal, an operation off signal, or an operation control signal to the replacement hardware device according to the execution of a replacement service or a new service corresponding to the hardware device (OCRm). Accordingly, the replacement service can be quickly executed in the event of a device operation error.

[0601] Figure 19b is a diagram illustrating an example of execution of an alternative service in the event of an operation error of a hardware switch.

[0602] Referring to the drawing, the service agent (2350) receives an operation error message (MSP) when the hardware switch (SRP) has an operation error.

[0603] Specifically, the gateway (2359) within the service agent (2350) can receive a motion failure message (MSP).

[0604] Meanwhile, the service agent (2350) may request the service generator (2910) within the server (400) to create a replacement service based on the receipt of a motion error message (MSP).

[0605] Accordingly, the service generator (2910) within the server (400) can generate a replacement service for the hardware switch and transmit data related to the replacement service to the first processor (175) or the second processor (175z) within the vehicle control device (100).

[0606] Meanwhile, the first processor (175) or the second processor (175z) can receive data related to the replacement service from the server (400) and execute the replacement service (2911).

[0607] Alternatively, the first processor (175) or the second processor (175z) may receive data related to an alternative service from the server (400), and create a virtual switch object (2914) based thereon to control the display (180) to be displayed.

[0608] For example, the state manager (2357) within the service agent (2350) can transmit an execution request to the replacement service (2911) when the replacement service (2911) is executed.

[0609] Meanwhile, the first processor (175) or the second processor (175z) can control the controller (1230) to output an operation on signal, an operation off signal, or an operation control signal to the lighting device (2310) based on an execution request of the alternative service (2911). Accordingly, the lighting device (2310) can be stably operated despite an operation error of the hardware switch (SRP).

[0610] As another example, when a virtual switch object (2914) displayed on the display (180) is selected, the first processor (175) or the second processor (175z) can control the controller (1230) to output an operation on signal, an operation off signal, or an operation control signal to the lighting device (2310). Accordingly, the lighting device (2310) can be stably operated despite an operation error of the hardware switch (SRP).

[0611] Figure 20a illustrates an example of how a server operates.

[0612] Referring to the drawing, when an operation error occurs in a device within a mobile terminal (600), a control unit (not shown) within the mobile terminal (600) receives an error signal.

[0613] For example, a control unit (not shown) within a mobile terminal (600) may receive an error signal when there is an operation error in the home button or home touch area.

[0614] Next, the control unit (not shown) within the mobile terminal (600) can transmit an error signal to a server (400), etc.

[0615] Next, the server (400) can receive an error signal from the device.

[0616] Next, the server (400) can perform debugging of the cause of the error based on the error signal of the device (S2011).

[0617] Next, the server (400) can perform a review of the error scenario based on cause debugging (S2013).

[0618] Next, the server (400) can generate data for updating the software by replacing the device based on the review of the error scenario (S2014).

[0619] Next, the server (400) can transmit or release data for software update to the mobile terminal (600) (S2016).

[0620] In response to this, a control unit (not shown) within the mobile terminal (600) can receive data for software update and, based on the received data, execute software for a replacement function.

[0621] According to the method of Fig. 20a, there is a disadvantage in that it is difficult to realize an immediate replacement function because it requires transmission of an error signal to the server (400) and reception of data for updating the software accordingly.

[0622] In particular, there is a problem that the method of Fig. 20a is difficult to adopt because immediate replacement service execution is required when a device in the vehicle fails.

[0623] Accordingly, this disclosure proposes a method for quickly executing a replacement service in the event of a device malfunction. This is described with reference to FIG. 20b and below.

[0624] FIG. 20b illustrates an example of an operation method of a vehicle control device according to an embodiment of the present disclosure.

[0625] Referring to the drawings, a vehicle control device (100) according to an embodiment of the present disclosure includes, as shown in FIG. 12A or FIG. 13A, a first signal processing device (170) having a first processor (175) and a first memory (174), a second signal processing device (170z) electrically connected to the first signal processing device (170) and having a second processor (175z) and a second memory (174z), and a controller (2330) electrically connected to the second signal processing device (170z) and receiving a signal from a hardware switch (2312) or a sensor (SRm) or controlling at least one actuator (ACT).

[0626] Meanwhile, when an operation error of a device such as a switch (2312) or a sensor (SRm) or an actuator (ACT) is detected, the controller (2330) transmits an error signal of the device to a second signal processing device (170z), etc.

[0627] In response to this, the first processor (175) or the second processor (175z) receives an error signal from the device (S2021).

[0628] Meanwhile, the first processor (175) or the second processor (175z) requests execution of the first service for replacing the operation of the device based on the error signal.

[0629] For example, the first processor (175) or the second processor (175z) may execute a service agent (2350) for executing a vehicle service, and the service agent (2350) may request execution of a first service for replacing the operation of the device based on an error signal.

[0630] Accordingly, when a device connected to the controller (2330) experiences an operation error, a replacement service can be quickly executed. In particular, when a device connected to the controller (2330) experiences an operation error, a replacement service based on a service-oriented architecture can be quickly executed.

[0631] Meanwhile, the first processor (175) or the second processor (175z) may generate execution-related data of the first service for replacing the operation of the device based on the error signal of the device (S2023).

[0632] For example, the service agent (2350) may generate execution-related data of a first service for replacing the operation of the device based on an error signal of the device.

[0633] At this time, the execution-related data of the first service may be data in YAML (YAML Ain't Markup Language) file format.

[0634] Meanwhile, the first processor (175) or the second processor (175z) can determine whether the first service for replacing the operation of the device exists in the first memory (174) or the second memory (174z) based on the error signal (S2025).

[0635] Meanwhile, the first processor (175) or the second processor (175z) may generate the first service based on execution-related data of the first service if the first service for replacing the operation of the device does not exist in the first memory (174) or the second memory (174z) based on an error signal (S2027).

[0636] And, the first processor (175) or the second processor (175z) can execute the generated first service (S2029).

[0637] Accordingly, when a device connected to the controller (2330) experiences an operation error, a replacement service can be quickly executed.

[0638] For example, the first processor (175) or the second processor (175z) can execute the first service for the rider service or radar service in the event of an operation error of the camera (195). Accordingly, in the event of an operation error of the camera, the rider service or radar service as an alternative service can be quickly implemented.

[0639] Meanwhile, in step 2025 (S2025), the first processor (175) or the second processor (175z) may control execution of an already existing first service if the first service for replacing the operation of the device exists in the first memory (174) or the second memory (174z) based on the error signal.

[0640] For example, the processor (175) or the second processor (175z) can control the output of a turn-on signal, etc., of a replacement device electrically connected to the controller (2330). Accordingly, when an operation error occurs in a device connected to the controller (2330), a replacement service can be quickly executed.

[0641] Figures 21a to 22c are drawings referenced in the description of Figure 20b.

[0642] FIG. 21a illustrates an example of the operation of a controller in connection with the present disclosure.

[0643] Referring to the drawings, a controller (2330) related to the present disclosure may be electrically connected to a device (EDm) such as a switch (2312) or a sensor (SRm) or an actuator (ACT).

[0644] Meanwhile, the controller (2330) related to the present disclosure can output an error signal (Mso) of the device to the outside when an operation error (Sor) of the device (EDm) is detected.

[0645] However, the output of the error signal (Mso) of these devices alone does not enable the execution of alternative services.

[0646] FIG. 21b illustrates an example of the operation of a controller in connection with the present disclosure.

[0647] Referring to the drawings, a controller (2330) related to the present disclosure may be electrically connected to a device (EDm) such as a switch (2312) or a sensor (SRm) or an actuator (ACT).

[0648] Meanwhile, the controller (2330) related to the present disclosure can receive software data (2340) for device replacement from an external server (400) when an operation error (Sor) of the device (EDm) is detected.

[0649] In this method, there is a disadvantage in that it takes a considerable amount of time because an error signal must be transmitted to an external server (400) and software data (2340) for device replacement must be received.

[0650] FIG. 22a illustrates an example of the operation of a controller according to one embodiment of the present disclosure.

[0651] Referring to the drawings, a controller (2330) according to one embodiment of the present disclosure is electrically connected to a device (EDm) such as a switch (2312) or a sensor (SRm) or an actuator (ACT).

[0652] Meanwhile, a controller (2330) according to one embodiment of the present disclosure may be electrically connected to a service agent (2350) running in a first signal processing device (170) or a second signal processing device (170z).

[0653] Meanwhile, the controller (2330) according to one embodiment of the present disclosure, when an operation error (Sor) of a device (EDm) such as a switch (2312) or a sensor (SRm) or an actuator (ACT) is detected, transmits an error signal of the device to the first signal processing device (170) or the second signal processing device (170z).

[0654] In response, the first processor (175) or the second processor (175z) receives an error signal from the device.

[0655] Meanwhile, the first processor (175) or the second processor (175z) requests execution of the first service for replacing the operation of the device based on the error signal.

[0656] For example, the first processor (175) or the second processor (175z) may execute a service agent (2350) for executing a vehicle service, and the service agent (2350) may transmit an execution request (MSo) of a first service for replacing the operation of the device based on an error signal.

[0657] Accordingly, when a device connected to the controller (2330) experiences an operation error, a replacement service can be quickly executed. In particular, when a device connected to the controller (2330) experiences an operation error, a replacement service based on a service-oriented architecture can be quickly executed.

[0658] FIG. 22b illustrates another example of operation of a controller according to one embodiment of the present disclosure.

[0659] Referring to the drawings, a controller (2330) according to one embodiment of the present disclosure is electrically connected to a device (EDm) such as a switch (2312) or a sensor (SRm) or an actuator (ACT).

[0660] Meanwhile, a controller (2330) according to one embodiment of the present disclosure may be electrically connected to a service generator (2218) running in a first signal processing device (170) or a second signal processing device (170z), and the service generator (2218) may be electrically connected to a service agent (2350).

[0661] Meanwhile, the controller (2330) according to one embodiment of the present disclosure may transmit an error signal of the device to the service generator (2218) when an operation error (Sor) of a device (EDm) such as a switch (2312) or a sensor (SRm) or an actuator (ACT) is detected.

[0662] In response, the service generator (2218) receives an error signal from the device.

[0663] Meanwhile, the service generator (2218) can transmit an error signal of the device to the service agent (2350).

[0664] Meanwhile, the service agent (2350) can generate execution-related data of the first service based on the error signal of the device.

[0665] And, the service agent (2350) can send a service creation request to the service generator (2218).

[0666] Meanwhile, the service generator (2218) can generate a first service based on a service generation request and execution-related data of the first service.

[0667] Additionally, the service generator (2218) can transmit a check message related to the first service to the controller (2330).

[0668] Meanwhile, the controller (2330) can execute the first service that has been created. Accordingly, in the event of an operation error in a device connected to the controller (2330), an alternative service can be quickly executed.

[0669] Meanwhile, the service generator (2218) and the service agent (2350) in the drawing may be executed on the first processor (175) or the second processor (175z).

[0670] FIG. 22c illustrates another example of the operation of a controller according to one embodiment of the present disclosure.

[0671] Referring to the drawings, a controller (2330) according to one embodiment of the present disclosure is electrically connected to a device (EDm) such as a switch (2312) or a sensor (SRm) or an actuator (ACT).

[0672] Meanwhile, the controller (2330) according to one embodiment of the present disclosure may transmit an error signal (IFO) of the device to the server (400) when an operation error (Sor) of a device (EDm) such as a switch (2312) or a sensor (SRm) or an actuator (ACT) is detected.

[0673] Meanwhile, the controller (2330) can request the server (400) to create a second service for replacing the operation of the device.

[0674] Meanwhile, the server (400) can transmit data related to the second service based on a request for creation of the second service for replacing the operation of the device.

[0675] Meanwhile, the Yaml generator (2217) can receive data related to the second service and transmit the data related to the second service to the service agent (2350).

[0676] Meanwhile, the service agent (2350) can generate data related to the execution of the second service based on data related to the second service.

[0677] And, the service agent (2350) can control the second service to be executed in the controller (2330) based on the execution-related data of the second service.

[0678] Accordingly, when a device connected to the controller (2330) experiences an operation error, a replacement service can be quickly executed.

[0679] Meanwhile, the Yaml generator (2217) and service agent (2350) in the drawing can be executed on the first processor (175) or the second processor (175z).

[0680] Referring to FIGS. 22b to 22c, the first processor (175) or the second processor (175z) may execute a first service for replacing the operation of the device based on an error signal, and after the execution of the first service, request the server (400) to create a second service for replacing the operation of the device, receive execution-related data of the second service from the server (400), and execute the second service instead of the first service based on the execution-related data of the second service. Accordingly, when an operation error occurs in a device connected to the controller (2330), the replacement service can be quickly executed.

[0681] For example, the service agent (2350) may execute a first service for replacing the operation of the device based on an error signal, and after the execution of the first service, request the server (400) to create a second service for replacing the operation of the device, receive execution-related data of the second service from the server (400), and execute the second service instead of the first service based on the execution-related data of the second service. Accordingly, when an operation error occurs in a device connected to the controller (2330), the replacement service can be quickly executed.

[0682] Meanwhile, the first processor (175) or the second processor (175z) may execute a first service for replacing the operation of the device based on an error signal, and after the execution of the first service, request the server (400) to create a second service for replacing the operation of the device, receive data related to the second service from the server (400), create execution-related data of the second service based on the data related to the second service, and execute the second service instead of the first service based on the execution-related data of the second service. Accordingly, it is possible to quickly execute a replacement service when an operation error occurs in a device connected to the controller (2330).

[0683] For example, the service agent (2350) may execute a first service for replacing the operation of the device based on an error signal, and after the execution of the first service, request the server (400) to create a second service for replacing the operation of the device, receive data related to the second service from the server (400), create execution-related data of the second service based on the data related to the second service, and execute the second service instead of the first service based on the execution-related data of the second service. Accordingly, when an operation error occurs in a device connected to the controller (2330), the replacement service can be quickly executed.

[0684] FIG. 23 illustrates an example of an operating method of a vehicle control device according to another embodiment of the present disclosure.

[0685] Referring to the drawing, a controller (2330) according to one embodiment of the present disclosure can transmit an error signal (IFO) of the device when an operation error (Sor) is detected (S2305).

[0686] Meanwhile, the first processor (175) or the second processor (175z) can receive an error signal (IFO) of the device (S2307).

[0687] Next, when a device malfunction occurs, the first processor (175) or the second processor (175z) determines whether a scenario corresponding to the malfunction exists (S2309), and if so, controls execution of a replacement service (S2318). Accordingly, the replacement service can be quickly executed based on the corresponding scenario.

[0688] Meanwhile, when a device malfunctions, the first processor (175) or the second processor (175z) may generate execution-related data of the first service, which is a substitute service, according to a scenario if there is no scenario corresponding to the malfunction (S2311).

[0689] For example, the first processor (175) or the second processor (175z) may determine, based on an error signal, whether a first service for replacing the operation of the device exists in the first memory (174) or the second memory (174z), and if not, may generate the first service based on an input signal or collected driving information.

[0690] Meanwhile, the first processor (175) or the second processor (175z) may determine whether the first service for replacing the operation of the device exists in the first memory (174) or the second memory (174z) based on the error signal, and if not, may generate data related to the execution of the first service based on learning of the error classification information or driving information of the device.

[0691] Meanwhile, the first processor (175) or the second processor (175z) can verify the execution-related data of the first service (S2313), and after the verification is completed, analyze or apply the execution-related data of the first service (S2316).

[0692] Next, the first processor (175) or the second processor (175z) can execute the first service based on the execution-related data of the first service (S2318).

[0693] Accordingly, when a device connected to the controller (2330) experiences an operation error, a replacement service can be quickly executed.

[0694] Meanwhile, unlike the drawing, the first processor (175) or the second processor (175z) can determine whether a first service for replacing the operation of the device exists in the first memory (174) or the second memory (174z) based on an error signal, and if not, can generate a first service based on an input signal or collected driving information, and control the execution of the first service after verification of the first service is completed. Accordingly, it is possible to quickly execute a replacement service in the event of an operation error in a device connected to the controller (2330).

[0695] Meanwhile, the first processor (175) or the second processor (175z) determines whether a first service for replacing the operation of the device exists in the first memory (174) or the second memory (174z) based on the error signal, and if not, generates a first service based on learning of the device's error classification information or operating information, and controls the execution of the first service. Accordingly, when an operation error occurs in a device connected to the controller (2330), the replacement service can be quickly executed.

[0696] Meanwhile, the operating method of FIG. 23 may be performed in a service agent (2350) running within the first processor (175) or the second processor (175z).

[0697] For example, the service agent (2350) may generate execution-related data of a first service for replacing the operation of the device based on an error signal, determine whether the first service exists in the first memory (174) or the second memory (174z), and if not, generate the first service based on the execution-related data of the first service. Accordingly, when an operation error occurs in a device connected to the controller (2330), the replacement service can be quickly executed.

[0698] Meanwhile, the service agent (2350) executes a first service for replacing the operation of the device based on an error signal, and after the execution of the first service, requests the server (400) to create a second service for replacing the operation of the device, receives execution-related data of the second service from the server (400), and controls the execution of the second service instead of the first service based on the execution-related data of the second service. Accordingly, when an operation error occurs in a device connected to the controller (2330), the replacement service can be quickly executed.

[0699] Meanwhile, the service agent (2350) executes a first service for replacing the operation of the device based on an error signal, and after the execution of the first service, requests the server (400) to create a second service for replacing the operation of the device, receives data related to the second service from the server (400), creates execution-related data of the second service based on the data related to the second service, and executes the second service instead of the first service based on the execution-related data of the second service. Accordingly, when an operation error occurs in a device connected to the controller (2330), the replacement service can be quickly executed.

[0700] Meanwhile, when receiving an error signal from a device, the service agent (2350) executes the first service, but, depending on the safety level, blocks at least part of the first service and controls the execution of only the remaining part. Accordingly, in the event of an operational error in a device connected to the controller (2330), an alternative service can be quickly executed.

[0701] Meanwhile, when receiving an error signal from a device, the service agent (2350) executes the first service. However, depending on the safety level, it can block some application programming interfaces within the first service and control the execution of only other application programming interfaces. Accordingly, in the event of an operational error in a device connected to the controller (2330), an alternative service can be quickly executed.

[0702] Figures 24a and 24b are drawings referred to in the description of Figure 23.

[0703] Figure 24a illustrates an example of the generation of data related to the execution of the first service.

[0704] Referring to the drawing, the first processor (175) or the second processor (175z) can select condition data and action data through a user interface or input signal, such as the drawing, and generate data related to the execution of the first service based on the selected condition data and action data.

[0705] And, the execution-related data of the generated first service can be transmitted to the service agent (2350).

[0706] Figure 24b illustrates another example of the generation of execution-related data of the first service.

[0707] Referring to the drawing, the information collector (2421) within the first processor (175) or the second processor (175z) can collect passenger information.

[0708] For example, the information collector (2421) may collect the passenger's voice, collect gestures, collect information about driving patterns, or collect information about driver's seat settings.

[0709] The decision unit (2423) within the first processor (175) or the second processor (175z) can learn passenger information or driving information through a decision algorithm or a learning algorithm, based on information collected from the information collector (2421).

[0710] Next, within the first processor (175) or the second processor (175z)

[0711] The YAML generator (2427) may perform voice recognition, gesture recognition, or generate execution-related data (900) of the first service based on learned driving information or passenger information.

[0712] Meanwhile, the verifier (2429) can verify the execution-related data of the generated first service and transmit verification completion information to the service agent (2350).

[0713] Meanwhile, the service agent (2350) can control the execution of the first service based on the execution-related data of the first service after verification is complete. This allows for stable execution of the alternative service in the event of a device malfunction.

[0714] FIG. 25 illustrates an example of an operating method of a vehicle control device according to another embodiment of the present disclosure.

[0715] Referring to the drawing, the first processor (175) or the second processor (175z) may receive an error signal (IFO) of the device from the controller (2330) when an operation error (Sor) is detected (S2505).

[0716] Next, the first processor (175) or the second processor (175z) can detect an operation error in the device (S2507).

[0717] For example, the first processor (175) or the second processor (175z) can determine which device has an operation error or what type of operation error it is.

[0718] Next, when a device malfunctions, the first processor (175) or the second processor (175z) can determine whether there is a scenario corresponding to the malfunction (S2509), and if so, control to execute the corresponding scenario (S2511).

[0719] That is, the first processor (175) or the second processor (175z) can control execution of a replacement service when a device malfunction occurs and a corresponding scenario corresponding to the malfunction exists. Accordingly, the replacement service can be quickly executed according to the corresponding scenario.

[0720] Meanwhile, the first processor (175) or the second processor (175z) can classify an operation error when there is no scenario corresponding to the operation error in the event of an operation error of the device (S2515).

[0721] Next, the first processor (175) or the second processor (175z) determines whether a replacement new service is required based on the classified operation error (S2520), and if so, generates execution-related data of the first service, and can generate a new service, the first service, based on the execution-related data of the first service (S2527).

[0722] Meanwhile, if a new replacement service is not required based on the classified operation error, the first processor (175) or the second processor (175z) may execute an application, perform voice recognition, or perform gesture recognition based on the error classification information of the device instead of creating a new replacement service (S2521).

[0723] For example, the first processor (175) or the second processor (175z) can control the display (180) to display a virtual switch object based on the execution of an application when a hardware switch fails.

[0724] As another example, the first processor (175) or the second processor (175z) may turn on the microphone and execute a voice recognition service through the microphone to perform voice recognition.

[0725] As another example, the first processor (175) or the second processor (175z) may turn on the camera and execute a gesture recognition service through the camera to perform gesture recognition.

[0726] Figure 26a illustrates an example of performing operation error judgment of various sensors.

[0727] Referring to the drawing, the sensor may include a camera (195), radar or lidar (196).

[0728] The first processor (175) in the first signal processing device (170) may include a judgment unit (310) that receives sensor data from a camera (195), radar, or lidar (196), and determines an operation error of the sensor based on the data, and a control unit (320) that performs control based on the judgment result.

[0729] Meanwhile, the first processor (175) within the first signal processing device (170) can control execution of an alternative service when it is determined that there is an operation error of the sensor based on sensor data from the camera (195), radar, or lidar (196).

[0730] For example, the first processor (175) within the first signal processing device (170) can control execution of an alternative service or a new service based on sensor data from a radar or lidar (196) when an operation error of the camera (195) is determined.

[0731] As another example, the first processor (175) within the first signal processing device (170) may control execution of an alternative service or a new service based on sensor data from the camera (195) when determining an operation error of the radar or lidar (196).

[0732] Figure 26b illustrates the execution of a new lidar or radar-based service in the event of a camera operation error.

[0733] Referring to the drawing, the second processor (175z) in the second signal processing device (170z) or the first processor (175) in the first signal processing device (170) can perform an operation error judgment (3032) based on data from the camera (195).

[0734] Meanwhile, the second processor (175z) in the second signal processing device (170z) or the first processor (175) in the first signal processing device (170) may transmit operation error information, etc. to the service agent (2350) when determining an operation error.

[0735] Meanwhile, a service agent (2350) can request the creation of a rider service from a server (400), etc.

[0736] In addition, the second processor (175z) in the second signal processing device (170z) or the first processor (175) in the first signal processing device (170) can receive data related to the rider service from the server (400).

[0737] Meanwhile, the service agent (2350) can search for the existence of a radar service by searching an internal database (PDB), etc.

[0738] Meanwhile, the service agent (2350) can control the execution of the rider service (3034) to replace the camera service (195) after receiving data related to the rider service. Accordingly, the rider (196) can be operated.

[0739] Meanwhile, the service agent (2350) can control the execution of the radar service (3025) to replace the camera (195) service, if the radar service (3025) exists in the database (PDB). Accordingly, the radar (196b) can be operated.

[0740] Meanwhile, the second processor (175z) in the second signal processing device (170z) or the first processor (175) in the first signal processing device (170) may determine (3010) whether the replacement service is successful or not based on data from the lidar (196) or radar (196b).

[0741] And, the second processor (175z) in the second signal processing device (170z) or the first processor (175) in the first signal processing device (170) can be controlled to continue to perform control (3020) of the replacement service based on the determination (3010) of whether the replacement service is successful.

[0742] That is, according to FIG. 26b, the first processor (175) or the second processor (175z) executes the first service for replacing the operation of the camera, if the first service exists in the first memory (174) or the second memory (174z), based on an error signal based on an error in the camera, and based on the execution of the first service, the controller (2330) can be controlled to operate the replacement device. Accordingly, the replacement service can be quickly executed in the event of an operation error in a device connected to the controller (2330).

[0743] Meanwhile, if the first service for replacing the operation of the camera does not exist in the first memory (174) or the second memory (174z) based on an error signal based on an error in the camera, the first processor (175) or the second processor (175z) may request the server (400) to create the first service, execute the first service based on data received from the server (400), and control the controller (2330) to operate the replacement device based on the execution of the first service. Accordingly, the replacement service can be quickly executed in the event of an operation error in a device connected to the controller (2330).

[0744] Figure 26c is a drawing illustrating an example of execution of an alternative service in the event of an operation error of a low beam device.

[0745] Referring to the drawing, when there is an operation error in the low beam device (2311) inside the vehicle, the controller (2330) electrically connected to the low beam device (2311) can transmit an error signal or operation error information to the service agent (2350).

[0746] Meanwhile, the service agent (2350) can be executed on the first processor (175) or the second processor (175z).

[0747] Meanwhile, the service agent (2350) can transmit an alternative service request in a motion error situation based on motion error information.

[0748] For example, a service agent (2350) can send a replacement service request or a new service request to a service generator (2910) within a server (400).

[0749] A service generator (2910) within the server (400) can generate a replacement service or a new service based on a replacement service request or a new service request, and transmit data related to the replacement service or the new service to the first processor (175) or the second processor (175z).

[0750] Specifically, the service generator (2910) within the server (400) can transmit data related to a replacement service or a new service to the service agent (2350).

[0751] Meanwhile, the first processor (175) or the second processor (175z) can execute the replacement service or the new service based on data related to the replacement service or the new service.

[0752] Specifically, the service agent (2350) can execute the replacement service or the new service based on data related to the replacement service or the new service.

[0753] An alternative or new service at this time may be a service for driving the high beam device (2312) with low beam instead of the low beam device (2311).

[0754] In addition, the service agent (2350) can control the controller (2330) to output an operation on signal, an operation off signal, or an operation control signal to the high beam device (2312) according to the execution of a replacement service or a new service corresponding to the low beam device (2311). Accordingly, it is possible to quickly execute a replacement service in the event of an operation error in the low beam device (2311).

[0755] Figure 26d illustrates various operations of the high beam device of Figure 26c.

[0756] Referring to the drawing, in order to replace the operation error of the low beam device (2311) of FIG. 26c, the controller (2330) can control only some of the plurality of light-emitting diodes in the high beam device (2312) to be turned on, as in (a) of FIG. 26d.

[0757] As another example, to replace the operation error of the low beam device (2311) of FIG. 26c, the controller (2330) can control the light emitting direction of a plurality of light emitting diodes in the high beam device (2312) to face downward, as in (b) of FIG. 26d.

[0758] As another example, to replace the operation error of the low beam device (2311) of FIG. 26c, the controller (2330) can control only some of the plurality of light-emitting diodes in the high beam device (2312) to emit light, and the light-emitting direction of some of the light-emitting diodes to face downward, as in (c) of FIG. 26d.

[0759] Accordingly, the function of the low beam device (2311) can be replaced by the high beam device (2312) in various ways.

[0760] FIG. 27 illustrates an example of an operating method of a vehicle control device according to another embodiment of the present disclosure.

[0761] Referring to the drawing, a controller (2330) according to one embodiment of the present disclosure can transmit an error signal of the window button when an operation error of the window button is detected.

[0762] Meanwhile, the first processor (175) or the second processor (175z) can receive an error signal of the Windows button (S2705).

[0763] Next, the first processor (175) or the second processor (175z) can generate execution-related data of the first service, which is a substitute service, based on the operation error signal of the Windows button (S2710).

[0764] Next, the first processor (175) or the second processor (175z) determines whether the first service for replacing the operation of the window button exists in the first memory (174) or the second memory (174z) based on the error signal (S2711), and if not, can receive data related to the first service from the server (400) or the like (S2715).

[0765] And, the first processor (175) or the second processor (175z) can execute the first service based on data related to the first service from the server (400) or the like (S2720).

[0766] The first service at this time may be a service that opens or closes the vehicle window based on user voice input, rather than the operation of the window button. Accordingly, an alternative service can be quickly executed in the event of a malfunction in the window button connected to the controller (2330).

[0767] FIGS. 28a to 28b are drawings for reference in the description of an operation similar to FIG. 27 or FIG. 27.

[0768] Figure 28a illustrates an example of alternative service execution in the event of a vehicle seat failure.

[0769] Referring to the drawing, a controller (2330) according to one embodiment of the present disclosure may transmit an error signal of the vehicle seat button when an operation error of the vehicle seat button is detected.

[0770] Meanwhile, the service agent (2350) can receive an error signal from the vehicle seat button.

[0771] Meanwhile, the service agent (2350) can transmit a request for creation of a first service, which is a substitute service, to the server (400) based on an operation error signal of a vehicle seat button.

[0772] The server (400) can transmit data related to a graphical user interface application or data related to a voice guidance guide, etc., for the first service, which is an alternative service.

[0773] In response to this, the service agent (2350) may generate or execute the first service, the graphical user interface application (2811) or the voice guidance guide service (2813), based on data related to the graphical user interface application (2811) or data related to the voice guidance guide (2813).

[0774] Meanwhile, the controller (2330) can operate the vehicle seat based on an input signal from a graphical user interface application (2811) or a voice guidance service (2813).

[0775] Accordingly, when there is an operation error in the vehicle seat button connected to the controller (2330), a replacement service can be quickly executed.

[0776] Figure 28b illustrates an example of alternative service execution in the event of a vehicle air conditioning system failure.

[0777] Referring to the drawing, a controller (2330) according to one embodiment of the present disclosure may transmit an error signal of an air conditioning button when an operation error of an air conditioning button is detected.

[0778] Meanwhile, the service agent (2350) can receive an error signal from the air conditioning device button.

[0779] Meanwhile, the service agent (2350) can transmit a request for creation of a first service, which is a substitute service, to the server (400) based on an operation error signal of the air conditioning device button.

[0780] The server (400) can transmit data related to a graphical user interface application or data related to a voice guidance guide, etc., for the first service, which is an alternative service.

[0781] In response to this, the service agent (2350) may generate or execute the first service, the graphical user interface application (2831) or the vent control service (2833), based on data related to the graphical user interface application (2831) or data related to the vent control guide (2833).

[0782] Meanwhile, the controller (2330) can operate the air conditioning device based on an input signal from a graphical user interface application (2831) or a ventilation control service (2833).

[0783] Accordingly, in the event of an operation error in the air conditioning device button connected to the controller (2330), a replacement service can be quickly executed.

[0784] Although the preferred embodiments of the present disclosure have been illustrated and described above, the present disclosure is not limited to the specific embodiments described above, and various modifications may be made by a person skilled in the art to which the present invention pertains without departing from the gist of the present disclosure as claimed in the claims, and such modifications should not be understood individually from the technical idea or prospect of the present disclosure.

Claims

A first signal processing device having a first processor and a first memory; A second signal processing device electrically connected to the first signal processing device and having a second processor and a second memory; A controller electrically connected to the second signal processing device and configured to receive a signal from a hardware switch or sensor or to control at least one actuator; The above control device, When an operation error of the switch or the sensor or the actuator is detected, an error signal of the device is transmitted to the first signal processing device or the second signal processing device, The first processor or the second processor, A vehicle control device that requests execution of a first service for replacing the operation of the device based on the above error signal. In the first paragraph, The first processor or the second processor, A vehicle control device that generates execution-related data of a first service for replacing the operation of the device based on the error signal, determines whether the first service exists in the first memory or the second memory, and if not present, generates the first service based on the execution-related data of the first service. In the first paragraph, The first processor or the second processor, A vehicle control device that determines whether a first service for replacing the operation of the device exists in the first memory or the second memory based on the error signal, and if not, generates execution-related data of the first service and controls the execution of the first service. In the first paragraph, The first processor or the second processor, Based on the above error signal, execute a first service for replacing the operation of the device, After the execution of the above first service, the server requests the creation of a second service to replace the operation of the device, Receive data related to the execution of the second service from the server, A vehicle control device that executes the second service instead of the first service based on data related to the execution of the second service. In the first paragraph, The first processor or the second processor, Based on the above error signal, execute a first service for replacing the operation of the device, After the execution of the above first service, the server requests the creation of a second service to replace the operation of the device, Receive data related to the second service from the server, Generate execution-related data of the second service based on data related to the second service, A vehicle control device that executes the second service instead of the first service based on data related to the execution of the second service. In the first paragraph, The first processor or the second processor, A vehicle control device that determines whether a first service for replacing the operation of the device exists in the first memory or the second memory based on the error signal, and if not, generates the first service based on an input signal or collected driving information, and controls the execution of the first service after verification of the first service is completed. In the first paragraph, The first processor or the second processor, A vehicle control device that determines whether a first service for replacing the operation of the device exists in the first memory or the second memory based on the error signal, and if not, generates the first service based on learning of error classification information or driving information of the device, and controls the execution of the first service. In the first paragraph, The first processor or the second processor, A vehicle control device that determines whether a first service for replacing the operation of the device exists in the first memory or the second memory based on the error signal, and if not, executes an application, performs voice recognition, performs gesture recognition, or generates the first service based on error classification information of the device. In the first paragraph, The first processor or the second processor, A vehicle control device, wherein, based on the error signal based on the error of the camera, if a first service for replacing the operation of the camera exists in the first memory or the second memory, the first service is executed, and based on the execution of the first service, the controller controls the replacement device to operate. In the first paragraph, The first processor or the second processor, A vehicle control device, wherein, based on the error signal based on the error of the camera, if a first service for replacing the operation of the camera does not exist in the first memory or the second memory, the device requests a server to create a first service, executes the first service based on data received from the server, and controls the controller to operate a replacement device based on the execution of the first service. In the first paragraph, The first processor or the second processor, Run the service agent to execute the vehicle service, The above service agent, A vehicle control device that requests execution of the first service for replacing the operation of the device based on the error signal. In Article 11, The above service agent, A vehicle control device that generates execution-related data of a first service for replacing the operation of the device based on the error signal, determines whether the first service exists in the first memory or the second memory, and if not present, generates the first service based on the execution-related data of the first service. In Article 11, The above service agent, Based on the above error signal, execute a first service for replacing the operation of the device, After the execution of the above first service, the server requests the creation of a second service to replace the operation of the device, Receive data related to the execution of the second service from the server, A vehicle control device that controls the execution of the second service instead of the first service based on data related to the execution of the second service. In Article 11, The above service agent, Based on the above error signal, execute a first service for replacing the operation of the device, After the execution of the above first service, the server requests the creation of a second service to replace the operation of the device, Receive data related to the second service from the server, Generate execution-related data of the second service based on data related to the second service, A vehicle control device that executes the second service instead of the first service based on data related to the execution of the second service. In the first paragraph, The first processor or the second processor, Run the service agent to execute the vehicle service, The above service agent, When receiving an error signal from the above device, execute the first service, A vehicle control device that blocks at least a part of the first service and controls only the execution of the other part, depending on the safety level. In the first paragraph, The first processor or the second processor, Run the service agent to execute the vehicle service, The above service agent, when receiving an error signal from the device, executes the first service. A vehicle control device that blocks some application programming interfaces within the first service and controls only some application programming interfaces to be executed, depending on the safety level.

Images