Method for operating a safety-critical function using a touch sensor

Patent metadata

Field	Value
Publication number	US-2023121468-A1
Application number	US-202117503502-A
Country	US
Kind code	A1
Filing date	Oct 18, 2021
Priority date	Oct 18, 2021
Publication date	Apr 20, 2023
Grant date	—

Abstract

A method for initiating a safety-critical function in an appliance. The method including receiving a first user input for the safety-critical function via a touchscreen and receiving a second user input confirming the safety-critical function via a first separate input element adjacent to the touchscreen. The operation of the touchscreen can be manipulated externally, directly or indirectly, via wireless communication while a safety-critical function is active. The first separate input element communicates via a wired connection to a control device that is not capable of being manipulated externally via wireless communication while a safety-critical function is active, wherein the control device controls initiation of the safety-critical function. In the method, both the first user input and the second user input are required to initiate the safety-critical function.

First claim

1 . A method for initiating a safety-critical function in an appliance, comprising:
receiving a first user input for the safety-critical function via a touchscreen; and receiving a second user input confirming the safety-critical function via a first separate input element adjacent to the touchscreen; wherein operation of the touchscreen can be manipulated externally, directly or indirectly, via wireless communication while a safety-critical function for the appliance is active; wherein the first separate input element communicates via a wired connection to a control device that is not capable of being manipulated externally via wireless communication while the safety-critical function is active, wherein the control device controls initiation of the safety-critical function; and wherein both the first user input and the second user input are required to initiate the safety-critical function.

2 . The method of claim 1 , further comprising:
wherein the safety-critical function is independently canceled by each of the following:
receiving a first CANCEL user input via the touchscreen; or
receiving a second CANCEL user input via the first separate input element or via a second separate input element that communicates via a wired connection to the control device while the safety-critical function is active.

3 . The method of claim 1 , wherein the appliance is a cooking appliance and the safety-critical function is a pyrolytic cleaning cycle for a cooking cavity of the cooking appliance.

4 . The method of claim 1 , said touchscreen being a touchscreen display, the method further comprising displaying on the touchscreen display, after receiving said first user input thereon, confirmatory indicia to inform a user that the first separate input element is to be used to confirm the safety-critical function.

5 . The method of claim 1 , wherein the touchscreen is not UL 60730 Class B compliant.

6 . The method of claim 1 , wherein the control device is UL 60730 Class B compliant.

7 . An appliance adapted to perform a safety-critical function, comprising:
a user interface having a touchscreen display adapted to receive a first user input and a separate input element disposed adjacent to the touchscreen display and adapted to receive a second user input; and a microcontroller that is not capable of manipulation externally via wireless communication while a safety-critical function is active and that is adapted to initiate the safety-critical function; wherein the separate input element is in communication with the microcontroller via a wired connection, the microcontroller being programmed to initiate the safety-critical function only upon receiving a first signal calling up that safety-critical function originating from said first user input, and a second signal confirming the safety-critical function originating from said second user input.

8 . The appliance of claim 7 , further comprising a graphical processing unit that is capable of manipulation externally via wireless communication while a safety-critical function is active and which is configured to receive and process input signals from the touchscreen display, said graphical processing unit being further configured to supply said first user input to said microcontroller based on a corresponding user input on said touchscreen display.

9 . The appliance of claim 8 , wherein the graphical processing unit is not UL 60730 Class B compliant.

10 . The appliance of claim 7 , the touchscreen display configured to provide an indication to a user regarding a specific separate input element among a plurality thereof to manipulate to confirm initiation of said safety-critical function.

11 . The appliance of claim 7 , wherein the appliance is a cooking appliance and the safety-critical function is a pyrolytic cleaning cycle.

12 . The appliance of claim 7 , the separate input element being a capacitive-touch button.

13 . The appliance of claim 7 , wherein the microcontroller is UL 60730 Class B compliant.

14 . A method for initiating a safety-critical function in an appliance, comprising:
receiving a first user input selecting the safety-critical function via a touchscreen display; thereafter indicating on the touchscreen display a specific separate input element adjacent to but not part of the touchscreen display to confirm the safety-critical function; thereafter receiving a second user input via the specific separate input element adjacent to the touchscreen display via a signal supplied via a wired connection therefrom to a control device that cannot be manipulated externally via wireless communication while the safety-critical function is active; and the control device thereafter initiating the safety-critical function.

15 . The method of claim 14 , further comprising:
wherein the safety-critical function is independently canceled by each of the following:
receiving a first CANCEL user input via the touchscreen display; or
receiving a second CANCEL user input via the specific separate input element or via a second separate input element that communicates via a wired connection with the control device.

16 . The method of claim 14 , wherein the appliance is a cooking appliance and the safety-critical function is a pyrolytic cleaning cycle for a cooking cavity of the cooking appliance.

17 . The method of claim 14 , said first user input being communicated from said touchscreen display to a graphical processing unit for processing, said graphical processing unit being capable of manipulation externally via wireless communication while a safety-critical function is active.

18 . The method of claim 17 , wherein the graphical processing unit is not UL 60730 Class B compliant.

19 . The method of claim 14 , wherein the control device is UL 60730 Class B compliant.

Assignees

• Electrolux Home Prod Inc

Inventors

• Vila Roman Roman
• Fernandez Omar
• Cooke Kristi Mare

Classifications

• F24C14/02 Primary

  pyrolytic type · CPC title

• G06F3/044 Primary

  by capacitive means · CPC title

• G06F3/04162

  for exchanging data with external devices, e.g. smart pens, via the digitiser sensing hardware · CPC title

• F24C7/085

  on baking ovens · CPC title