Search

EP-4320509-B1 - SYSTEM AND VEHICLE FOR REDUNDANT DISPLAY OF A DATA SIGNAL

EP4320509B1EP 4320509 B1EP4320509 B1EP 4320509B1EP-4320509-B1

Inventors

  • KABATEK, ULRICH
  • STAMM, MARTIN

Dates

Publication Date
20260513
Application Date
20220321

Claims (12)

  1. A system (10a, 10b) for redundant display of a data signal, the system (10a, 10b) having a first central unit (1) for generating a first data signal and a second central unit (2) for generating a second data signal, furthermore having a first display unit (5, 5a), wherein the first central unit (1) is connected to the first display unit (5, 5a) to display the first data signal, and a second display unit (6, 12), wherein the second central unit (2) is connected to the second display unit (6, 12) for displaying the second data signal, and a first changeover switch (9, 9a), wherein the first display unit (5, 5a) is connected to the first central unit (1) and to the second central unit (2) via the first changeover switch (9, 9a), furthermore having a communication connection between the first central unit (1) and the second central unit (2) for exchanging data, and wherein the system (10a, 10b) is configured so that, in the event of failure or interference of the first central unit (1), the second central unit (2) displays the first data signal on the first display unit (5, 5a) by means of switching over the first changeover switch (9, 9a) and the communication connection, characterised in that the first changeover switch (9, 9a) is designed to store a previous data signal in the event of failure of the first central unit (1) until a switchover to the second central unit (2) can be effectuated.
  2. The system (10a, 10b) as claimed in claim 1, characterised in that the system (10a, 10b) is designed to have the second central unit (2) display the first data signal nearly synchronously in the event of failure or interference of the first central unit (1) by means of switching over the first changeover switch (9, 9a) and the communication connection.
  3. The system (10a, 10b) as claimed in any one of the preceding claims, characterised in that , when the first central unit (1) is available again, the system (10a, 10b) is designed to have the first data signal displayed on the first display unit (5, 5a) by the first central unit (1) by switching back the first changeover switch (9, 9a).
  4. The system (10a, 10b) as claimed in any one of the preceding claims, characterised in that the communication connection is designed as a network (8) between the first central unit (1) and the second central unit (2).
  5. The system (10a, 10b) as claimed in any one of the preceding claims, characterised in that the communication connection is designed as a memory (4) which has a communication connection to the first central unit (1) and to the second central unit (2), and wherein the data for generating the first data signal are stored in the memory (4) and the second central unit (2) is designed to generate the first data signal on the basis of the data stored in the memory (4).
  6. The system (10a, 10b) as claimed in any one of the preceding claims, characterised in that the communication connection is designed as a separate connection in each case from the first central unit (1) and the second central unit (2) to the component providing the first data signal, so that the first central unit (1) and the second central unit (2) each have the same data.
  7. The system (10a, 10b) as claimed in any one of the preceding claims, characterised in that both the first central unit (1) and the second central unit (2) are connected to an image sensor and wherein at least the first data signal is an image display.
  8. The system (10a, 10b) as claimed in any one of the preceding claims, characterised in that a monitoring unit (11) is provided in the first central unit (1) for monitoring the first central unit (1) so that a failure or interference of the first central unit (1) is determinable.
  9. The system (10a, 10b) as claimed in any one of the preceding claims, characterised in that a monitoring unit (11) is provided in the first changeover switch (9, 9a) for monitoring the first display unit (5, 5a) so that a failure or interference of the first central unit (1) is determinable.
  10. The system (10a, 10b) as claimed in any one of the preceding claims, characterised in that the second central unit (2) is designed to generate the first data signal at reduced quality.
  11. The system (10a, 10b) as claimed in any one of the preceding claims, characterised in that multiple central units correspondingly having multiple display units are provided, wherein the multiple central units are each connected to the corresponding display units via changeover switches.
  12. A vehicle having a system (10a, 10b) as claimed in any one of the preceding claims.

Description

The invention relates to a system for the redundant display of a data signal. The invention further relates to a vehicle. In motor vehicles, there is a clear trend towards using a few generic central processing units (CPUs) instead of many small, specialized electronic units. These CPUs can incorporate generic, well-known integrated circuits (ASICs). These central processing units (CPUs) typically have numerous connection options for various inputs and outputs, particularly for graphic displays and cameras. They were not usually designed or developed specifically for use in motor vehicles with safety-related applications, but rather for the consumer industry, especially for consumer electronics such as smartphones and tablets. When using such central processing units in vehicles for safety-critical applications, additional specialized, highly secure, but less powerful microcontrollers are employed to perform critical calculations and guarantee safety. However, this approach is not easy to implement for safety-relevant displays, as these displays now also require high resolutions. Therefore, high graphics processing power and a high data rate are needed, which a small, specialized microcontroller typically cannot achieve. High-resolution graphics cards also contribute significantly to the increased costs. The WO 2020/116694 A1 relates to a device for a vehicle with a structure consisting of several system-on-chips (SoCs) and a method for controlling the device. The US 2013/033503 A1 concerns a secure display system, in particular a full-screen display system for a screen of "Liquid Crystal Display" technology, comprising two independently controllable display half-screens. The US 2019/068700 A1 refers to techniques for rendering images and, in particular, to techniques for implementing fault-tolerant cluster systems. The DE 1020 18119026 A1 Disclosing a camera surveillance system for at least one side area on the passenger side of a commercial vehicle, comprising a first image processing unit; a first camera unit for capturing image data from the at least one side area, wherein the first camera unit provides the image data for processing by the first image processing unit; a second image processing unit; and a second camera unit for capturing further image data from the at least one side area, wherein the second camera unit provides the further image data for processing by the second image processing unit, wherein the first image processing unit and the second image processing unit are configured to process image data independently of each other in order to enable redundant image capture for the at least one side area. The DE 10 2007 045774 B4 Disclosing a device for synchronizing an image display, wherein a first image signal provided by a first device and a second image signal provided by a second device are displayed together, wherein the second image signal is synchronized with the first image signal by changing the temporal position of a blanking interval of the second image signal relative to a blanking interval of the first image signal. It is therefore an object of the invention to provide a system for a secure and highly available display, particularly in a vehicle. Furthermore, it is an object to provide such a vehicle. The problem is solved by a system having the features of claim 1 and a vehicle having the features of claim 13. The subclaims list further advantageous measures that can be combined to achieve further benefits. The task is solved by a system for the redundant display of a data signal, the system comprising a first central unit for generating a first data signal, and a second central unit for generating a second data signal. further comprising a first display unit, wherein the first central unit is connected to the first display unit for displaying the first data signal, and a second display unit, wherein the second central unit is connected to the second display unit for displaying the second data signal, as well as a first switch, wherein the first display unit is connected via the first switch to both the first central unit and the second central unit, furthermore comprising a communication link between the first central unit and the second central unit for exchanging data, and wherein the system is configured to enable the second central unit to display the first data signal on the first display unit by switching the first switch and the communication link in the event of failure or malfunction of the first central unit. According to the invention, it was discovered that generic central processing units (CPUs) have unused connections for displays. This is due, firstly, to the fact that more displays are typically connected to a single CPU than can be operated with good quality, since the limit lies in the processing power and not in the power of the corresponding video outputs for connecting the displays. Secondly, it is due to the fact that individual CPUs are only used for high