Display Integrity Verification for Uncertified Mission-Critical Screens
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In safety-critical industries like avionics, the use of uncertified displays for mission-critical information is hindered by regulatory requirements for high integrity, continuity, and availability (ICA), which are costly and time-consuming to certify, limiting the adoption of new applications and functionalities.
Innovation Solution
A system comprising a certified high-integrity server and an adapter device with optical sensing capabilities that captures and compares images on uncertified displays to ensure ICA, annunciating any losses through a specialized coating or screen overlay, allowing mission-critical data to be displayed on uncertified devices while maintaining integrity verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If uncertified displays are used for mission-critical information, then cost and implementation time are reduced, but integrity, continuity, and availability cannot be assured
Solution Approach 1:
A certified server acts as an intermediary between the data source and the uncertified display device. The server generates expected display images, transmits them to the display device, and also provides these expected images to the verification system. This intermediary enables the use of uncertified displays while maintaining integrity verification through image comparison.
Solution Approach 2:
The system creates a digital copy of the expected display image on the certified server and compares it with the actual captured image from the display device. This copying approach allows verification of display integrity without requiring the display device itself to be certified, as the comparison is done between digital image representations.
2Reliability
If certified displays are used for mission-critical information, then integrity, continuity, and availability are assured, but cost and implementation time increase
Solution Approach 1:
The system segments the certification requirement into two parts: the server generating the display content is certified, while the display device itself does not need to be certified. This segmentation allows the critical integrity-generating component to be certified while the display component can be a standard uncertified device, reducing overall cost and implementation time.
3Reliability
If image comparison verification is implemented, then integrity monitoring is achieved, but device complexity increases
Solution Approach 1:
The display device captures its own display screen image and transmits it back for verification. This self-service approach simplifies the system architecture by eliminating the need for separate external cameras or sensors, as the display device itself performs the image capture function.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method in a high integrity device for verifying the integrity, continuity, and availability (ICA) of information displayed on an uncertified display is provided. The method comprises creating, on the high integrity device, application data for display on an uncertified display device; transmitting the application data to the uncertified display device; receiving, at the high integrity device from an optical sensing device, a captured image of the display; determining, at the high integrity device, an expected display image to be displayed on the uncertified display device; comparing, at the high integrity device, the captured image of the display to the expected display image; identifying, at the high integrity device, a loss of ICA if one or more frames in the captured image fails the comparison with the expected display image; and causing the annunciation of a message indicating the loss of ICA when a loss of ICA is identified.