GUI Input Monitoring for Safety-Critical Control Confirmation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing graphical user interfaces (GUIs) in safety-critical applications face challenges in ensuring accurate and secure user inputs due to errors in hardware and software components, particularly when using insecure or un-certified systems, which can lead to incorrect selection or actuation of graphical control elements.
Innovation Solution
A method and system that utilize a separate monitoring unit connected to the image data line to read and verify user inputs from insecure input devices, ensuring correct selection and actuation of safety-relevant control elements by using a secure confirmation device, allowing user-controlled confirmation of selections before triggering safety-related functions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a separate monitoring unit is introduced to verify user inputs from insecure input devices, then safety integrity is improved, but device complexity increases
Solution Approach 1:
The system is divided into separate functional units: an insecure input device for user interaction, a secure monitoring unit for verification, and a confirmation device for final authorization. This segmentation allows each component to be optimized for its specific function while maintaining overall system safety.
Solution Approach 2:
The secure monitoring unit acts as an intermediary between the insecure input device and the safety-relevant system. It verifies input information independently and only passes confirmed data forward, mediating the trust relationship between insecure hardware and safety-critical operations.
2Measurement precision
If user confirmation is required before actuating safety-relevant functions, then input accuracy is improved, but operation time increases
Solution Approach 1:
The monitoring unit performs preliminary verification of input information before the user needs to confirm. By pre-processing and validating input data, the system reduces the cognitive load on the user and enables faster confirmation decisions.
Solution Approach 2:
The system provides visual feedback on the display showing the current selection and status. This feedback mechanism allows users to quickly verify their input without needing to mentally track system state, reducing confirmation time while maintaining accuracy.
Data Source
Figure 1~2A
Figure 2B~2C
Figure 3A~3C
AI summary
The invention relates to security-relevant input on a graphical user interface (GUI). In this instance, a computer (1) generates image data that are transmitted to a display (2) via an image data line (3). The user interface has at least one graphical operator control element (6) that is selectable by input device (4). Furthermore, a monitoring unit (21) is connected to the image data line (3) and reads image data for a security function. According to the invention, the monitoring unit (21) is supplied with input information from the input device (4), and the monitoring unit (21) is connected to a confirmation apparatus (14) via a secure signal path (11B) for the purpose of user confirmation. According to the invention, there is moreover provision for the monitoring unit (21) to ensure and/or check whether a detected selection (5) of the operator control element (6) is represented correctly, and, in the event of a user confirmation for a represented selection of the operator control element (6), to enable or trigger an associated security-relevant operator control command, in particular via a secure signal path (HD). This allows secure input even with non-security-certifiable input devices, in particular relative and/or indirect pointer devices, such as e.g. a commercially available computer mouse. Furthermore, preferred architectures for monitoring units are proposed that are suitable for the proposed input method in particular.