Dual Display Circuit for Automated Driving Safety
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing infotainment devices in vehicles do not conform to the functional safety standard of ISO 26262, making them unsuitable for use as notification interfaces for automated driving systems, and retrofitting them to meet this standard significantly increases costs.
Innovation Solution
A vehicle configuration that includes separate information presenting devices for automated driving and infotainment, with the automated driving device using a real-time operating system and redundant components to meet the functional safety standard, while the infotainment device operates on a larger-scale, non-real-time operating system, allowing for a low-cost notification interface.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If existing infotainment devices are used as notification interfaces for automated driving systems, then device complexity is reduced and cost is lowered, but functional safety compliance is not achieved
Solution Approach 1:
The system is divided into two separate notification interfaces: a first notification interface that displays automated driving information and a second notification interface that displays other vehicle information. This segmentation allows the first interface to be optimized for functional safety compliance while the second interface can use existing infotainment devices, thus resolving the contradiction between safety compliance and system complexity.
Solution Approach 2:
A notification controller acts as an intermediary that manages both notification interfaces. It receives information from the automated driving system and determines what to display on each interface, enabling the integration of safety-critical and non-safety-critical displays without requiring complete system redesign.
2Reliability
If existing infotainment devices are retrofitted to meet the functional safety standard, then functional safety compliance is achieved, but manufacturing cost increases significantly
Solution Approach 1:
The notification system is segmented into two parts: a first notification interface specifically designed for automated driving information that meets functional safety standards, and a second notification interface for general vehicle information that can use existing infotainment devices. This allows partial compliance without complete system replacement, reducing manufacturing costs while maintaining safety requirements.
Solution Approach 2:
The system uses a simplified copy of the notification interface functionality for safety-critical displays, rather than requiring the full-featured infotainment system to meet safety standards. This copying approach allows using simpler, cheaper components for safety functions while retaining advanced features in non-safety contexts.
3Reliability
If a single notification interface is used for both automated driving information and other vehicle information, then device complexity is reduced, but notification reliability for safety-critical information decreases
Solution Approach 1:
The notification system separates automated driving information display from other vehicle information display into two distinct interfaces. This segmentation ensures that safety-critical notifications are not mixed with non-critical information, improving notification reliability while maintaining manageable system complexity through clear functional separation.
Solution Approach 2:
Different notification interfaces are optimized for different purposes: the first interface is optimized for automated driving information with appropriate display characteristics for safety-critical notifications, while the second interface is optimized for general vehicle information. This local optimization improves overall system reliability without requiring uniform complexity across all interfaces.
Data Source
AI summary
A vehicle includes a first display circuit and a second display circuit. The first display circuit is disposed at a position capable of being visually checked by a driver. The second display circuit is disposed at a position capable of being visually checked by a driver. The first display circuit can display at least information about autonomous driving. The second display circuit can display at least information other than the information about the autonomous driving. First display circuit has first redundancy. The second display circuit has second redundancy lower than the first redundancy.