Vehicle Display Control with RTOS Failover for OS Faults

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing vehicle display control systems face challenges in ensuring display functionality when issues arise with the general-purpose OS, potentially impacting user display and vehicle safety.

Innovation Solution

Implementing a dual-OS system where a first OS (general-purpose OS) and a second OS (RTOS) manage display control, with the RTOS ensuring time limits and taking over in case of problems, allowing seamless switching to maintain user display.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If a general-purpose OS is used for display control, then display functionality and user interface capabilities are improved, but system reliability and real-time performance deteriorate when display problems occur

Engineering Contradiction:
Improvedisplay functionalityVSAvoiddisplay reliability
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The display control system is segmented into two independent OS instances: a first OS for normal display control and a second OS for backup. Each OS operates independently with its own execution environment, allowing the system to divide the display control function into separate manageable units that can fail independently without compromising the entire system.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system implements beforehand cushioning by pre-configuring a second OS instance that remains in standby readiness to take over display control if the first OS fails. This backup OS is prepared in advance with necessary resources and execution capabilities, providing a safety cushion before actual failure occurs.

Inventive Principle:
Principle #11Beforehand cushioning (Prior cushioning)

2Reliability

If a dual-OS system is implemented for backup purposes, then display reliability is improved, but device complexity increases

Engineering Contradiction:
Improvedisplay reliabilityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The second OS is designed with universality, capable of performing the same display control functions as the first OS. This multi-functionality allows a single backup OS instance to replace the primary OS in any failure scenario, simplifying the backup mechanism compared to having multiple specialized backup systems.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The system uses copying by creating a second OS instance that replicates the essential functionality of the first OS. Rather than implementing complex error correction or mitigation mechanisms, the solution copies the entire OS execution environment, providing a simple yet effective backup that mirrors the primary system's capabilities.

Inventive Principle:
Principle #26Copying

3Reliability

If the second OS is activated to ensure display continuity, then display availability is improved, but processing overhead and system resource consumption increase

Engineering Contradiction:
Improvedisplay availabilityVSAvoidprocessing overhead
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The system applies partial action by keeping the second OS in a reduced readiness state rather than fully active. The backup OS maintains essential execution capabilities and can be quickly activated, but does not consume full processing resources continuously, striking a balance between availability and resource consumption.

Inventive Principle:
Principle #16Partial or excessive action

Solution Approach 2:

The second OS performs preliminary action by being pre-configured and ready to execute display control functions before any failure occurs. This preliminary preparation includes loading necessary drivers and interfaces, so that when activation is needed, the OS can take over immediately without requiring extensive resource allocation or initialization during the transition.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS12399724B2Display control device for vehicle, vehicle display device, vehicle, method and non-transitory storage medium
Publication Date: 2025.08.26 TOYOTA JIDOSHA KK
  • US12399724B2 patent drawing
  • US12399724B2 patent drawing
  • US12399724B2 patent drawing

AI summary

A display control device for a vehicle includes a memory, and at least processor. The at least one processor is coupled to the memory, is configured to execute a first OS, which carries out display control of a display device installed at a vehicle and viewed by a user of the vehicle, and a second OS that carries out display control of the display device and ensures time limits of execution times of commands, and, in a case in which there is a problem with or a possibility of a problem with display of the display device, carry out display by only control of the second OS at the display device.