EP2845185A1 - Procédé de visualisation de données critiques pour la sécurité au moyen d'un module d'affichage et module d'affichage correspondant - Google Patents

Procédé de visualisation de données critiques pour la sécurité au moyen d'un module d'affichage et module d'affichage correspondant

Info

Publication number
EP2845185A1
EP2845185A1 EP13718149.1A EP13718149A EP2845185A1 EP 2845185 A1 EP2845185 A1 EP 2845185A1 EP 13718149 A EP13718149 A EP 13718149A EP 2845185 A1 EP2845185 A1 EP 2845185A1
Authority
EP
European Patent Office
Prior art keywords
safety
display unit
data
critical
background
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Withdrawn
Application number
EP13718149.1A
Other languages
German (de)
English (en)
Inventor
Norbert Scherm
Christian Behrens
Torsten Frerichs
Sven HEITHECKER
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Airbus DS Airborne Solutions GmbH
Original Assignee
Airbus DS Airborne Solutions GmbH
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Airbus DS Airborne Solutions GmbH filed Critical Airbus DS Airborne Solutions GmbH
Publication of EP2845185A1 publication Critical patent/EP2845185A1/fr
Withdrawn legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G09—EDUCATION; CRYPTOGRAPHY; DISPLAY; ADVERTISING; SEALS
    • G09G—ARRANGEMENTS OR CIRCUITS FOR CONTROL OF INDICATING DEVICES USING STATIC MEANS TO PRESENT VARIABLE INFORMATION
    • G09G3/00—Control arrangements or circuits, of interest only in connection with visual indicators other than cathode-ray tubes
    • G09G3/20—Control arrangements or circuits, of interest only in connection with visual indicators other than cathode-ray tubes for presentation of an assembly of a number of characters, e.g. a page, by composing the assembly by combination of individual elements arranged in a matrix no fixed position being assigned to or needed to be assigned to the individual characters or partial characters
    • G09G3/34—Control arrangements or circuits, of interest only in connection with visual indicators other than cathode-ray tubes for presentation of an assembly of a number of characters, e.g. a page, by composing the assembly by combination of individual elements arranged in a matrix no fixed position being assigned to or needed to be assigned to the individual characters or partial characters by control of light from an independent source
    • G09G3/36—Control arrangements or circuits, of interest only in connection with visual indicators other than cathode-ray tubes for presentation of an assembly of a number of characters, e.g. a page, by composing the assembly by combination of individual elements arranged in a matrix no fixed position being assigned to or needed to be assigned to the individual characters or partial characters by control of light from an independent source using liquid crystals
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06T—IMAGE DATA PROCESSING OR GENERATION, IN GENERAL
    • G06T11/00—Two-dimensional [2D] image generation
    • G06T11/60—Creating or editing images; Combining images with text
    • G—PHYSICS
    • G09—EDUCATION; CRYPTOGRAPHY; DISPLAY; ADVERTISING; SEALS
    • G09G—ARRANGEMENTS OR CIRCUITS FOR CONTROL OF INDICATING DEVICES USING STATIC MEANS TO PRESENT VARIABLE INFORMATION
    • G09G2330/00—Aspects of power supply; Aspects of display protection and defect management
    • G09G2330/08—Fault-tolerant or redundant circuits, or circuits in which repair of defects is prepared
    • G—PHYSICS
    • G09—EDUCATION; CRYPTOGRAPHY; DISPLAY; ADVERTISING; SEALS
    • G09G—ARRANGEMENTS OR CIRCUITS FOR CONTROL OF INDICATING DEVICES USING STATIC MEANS TO PRESENT VARIABLE INFORMATION
    • G09G2340/00—Aspects of display data processing
    • G09G2340/12—Overlay of images, i.e. displayed pixel being the result of switching between the corresponding input pixels
    • G—PHYSICS
    • G09—EDUCATION; CRYPTOGRAPHY; DISPLAY; ADVERTISING; SEALS
    • G09G—ARRANGEMENTS OR CIRCUITS FOR CONTROL OF INDICATING DEVICES USING STATIC MEANS TO PRESENT VARIABLE INFORMATION
    • G09G2358/00—Arrangements for display data security
    • G—PHYSICS
    • G09—EDUCATION; CRYPTOGRAPHY; DISPLAY; ADVERTISING; SEALS
    • G09G—ARRANGEMENTS OR CIRCUITS FOR CONTROL OF INDICATING DEVICES USING STATIC MEANS TO PRESENT VARIABLE INFORMATION
    • G09G2380/00—Specific applications
    • G09G2380/12—Avionics applications

Definitions

  • the invention relates to a method for displaying data on the display of a modular display unit, wherein the data to be displayed comprise safety-critical data portions and non-safety-critical data portions and the data is fed to the display via a graphic data stream and displayed on the display.
  • the invention further relates to an associated display unit.
  • safety-critical data on multifunction displays can be problematic because the entire chain of data creation, processing and conversion to video data and the actual display requires a data criticality development process. This applies in particular to the development of elaborate man-machine interfaces based on status windows, as well as their graphics generation. Typically, safety-critical graphics controllers and potentially heterogeneous controllers must be developed.
  • the object of the invention is therefore to provide a method for displaying safety-critical data on a display, in which the development process is simplified and the degree of documentation and detection obligations is as low as possible.
  • the object of the invention is also to provide an associated display unit which meets these requirements.
  • this object is achieved by a method according to independent claim 1.
  • Advantageous developments of the method will become apparent from the dependent claims 2-5.
  • the object of the invention is achieved by a modular display unit according to claim 6.
  • Advantageous developments of this display unit will become apparent from the dependent claims 7-10.
  • the inventive method is used to display data on the display of a modular display unit, wherein the data to be displayed include safety-critical data portions and non-safety-critical data portions. The data is fed to the display via a graphic data stream and displayed on the display.
  • a security component of the display unit the safety-critical data shares due to safety-critical Generates signals which are supplied to the display unit, while a background component of the display unit generates the non-safety-critical data shares in the form of a background image.
  • the safety critical data portions on the display are then overlaid on this background image by a multiplexer switching the graphics data stream to display between the security component and the background component.
  • graphics content of the background image is changed in certain areas and safety-critical graphics content is introduced and displayed on the display.
  • the security-critical data portions are data which are critical for a system to which the display unit belongs, that is, in the event of errors within these data portions and / or a loss of the data portions, the security of the associated system would be jeopardized.
  • non-safety-critical data shares have little or no importance for the security of an associated system. Whether this is the case and in which category data shares are to be classified does not only depend on the technical parameters of systems, but can also be dependent on applicable regulations and standards. The categorization of data shares can thus also change for consistent systems as regulations change. The approach according to the invention thus shifts the challenge of displaying safety-critical graphics content into a display unit.
  • a display unit Due to safety-critical signals, such a display unit generates the corresponding safety-critical graphics contents in the form of displayed text or symbols within the display. This content is applied to a security-relevant background image as an "overlay" by the image data stream of the background image in the areas of safety-critical data is selectively changed.
  • a display unit according to the invention has all the necessary properties which correspond, for example, to a DAL-B application in aviation or to a SIL-3 application according to IEC 61508 at the time of the application.
  • An analogous approach may result in a Level D or higher rating in accordance with the MIL-STD-882.
  • the shift of safety-critical graphics generation into the display unit can simplify the design of potentially heterogeneous control devices and the presentation of the relevant status data.
  • the development of safety-critical graphics controllers can be avoided in this way.
  • Complex image content and information can also be represented here, and the approach according to the invention allows modularity and a high reuse rate for use in modified safety-critical applications.
  • the invention is particularly suitable for cockpit applications in all aircraft such as aircraft or rotary-wing aircraft, but also for ground stations for unnamed aircraft (drones).
  • the invention is not limited to the application within aviation, but it could be used, for example, in the field of other vehicles, ships and / or in the fire control.
  • the method according to the invention can be embodied such that the background component generates the background image on the basis of background pages stored in a background page memory, the background page memory being part of the modular display unit.
  • the background component can also generate the background image due to non-safety-critical signals which are supplied externally to the modular display unit.
  • symbols are used which are called from a symbol memory of the security component, while positions are called from a position memory for determining the position of these symbols.
  • the safety-critical data components within an architecture of the safety component are generated at least twice redundantly, and a selection unit of the safety component performs a selection between the redundantly generated safety-critical data components before being fed into the graphics data.
  • a triple-redundant architecture is used to implement, for example, a 2-out-of-3 voting. In this way, the criticality of the data components generated in the security component can be taken into account.
  • the invention further comprises a corresponding modular display unit which
  • the display unit comprises at least one multiplexer which is designed to switch the graphic data stream for display between the data components of the security component and the background component.
  • the security component for generating the security-critical data shares correspondingly has an at least twice-redundant architecture and a selection unit for selecting and feeding redundantly generated data portions into the graphics data stream.
  • the security component can comprise at least one symbol memory and a position memory, wherein symbols for safety-critical data portions are stored in the symbol memory, while associated positions for symbols are stored in the position memory.
  • a prefabricated set of graphic contents consisting of text and symbols can be stored in a memory of the display unit and then retrieved. Since the content of the store is generic, the evidence and documentation must be created only once. This type of library can then be used in various applications.
  • the modular display unit includes a background page memory associated with the background component, with background pages stored in the background page memory for creating the background image.
  • the display unit can have at least one input for feeding non-safety-critical signals into the background component, which can likewise be used to generate the background image.
  • the display unit 10 (shown in dashed lines) comprises at least one display 11, a security component 20, a background component 30 and a first multiplexer 40 (MXU1).
  • COTS commercial-off-the-shelf / components-of-the-shelf
  • the mass production which requires no special adjustments ex works, can be achieved in particular cost savings.
  • COTS commercial-off-the-shelf / components-of-the-shelf
  • the mass production which requires no special adjustments ex works, can be achieved in particular cost savings.
  • COTS commercial-off-the-shelf / components-of-the-shelf
  • the mass production which requires no special adjustments ex works, can be achieved in particular cost savings.
  • pixel monitoring 12 where the color information is in a corner 1, for example, in the lower right corner
  • an activity display 13 with a cyclic symbol change can be displayed on the LC display 1 1, by means of which the freezing of the display can be displayed.
  • the LC display preferably turns to black as soon as pixel clock, line sync, or frame sync signal fail. This is also recognizable to the operator.
  • an automated evaluation can also be carried out analogously to the pixel monitoring 12.
  • Both the pixel monitoring 12 in a corner of the display 11 and the activity display 13 can be generated by a safety-critical data path.
  • the HMI displays commands such as changing the screen, switching the video source, adjusting the brightness of the display and test pattern functions, as well as the corresponding status displays.
  • the HMI functions are accessible via external interfaces (e.g., CAN-BUS), which functions may also include an additional BITE module.
  • a BITE module is a built-in test equipment (BITE) that allows you to verify and monitor the correct operation of a system and automatically respond to any problems that may arise. The BITE module thus checks and monitors the display 1 1.
  • the BITE module may be implemented as programmable hardware and transmit the BITE data of the bus interface to a maintenance system outside the display unit 10.
  • the LC display 1 1 is connected via a graphic data stream D to the security component 20 and the background component 30, wherein the display 1 1 is transmitted via this graphic data stream, which data where represent on the display.
  • a first multiplexer 40 switches the graphic data Ström D between a security-critical data component generated by the security component 20 and a non-security-critical data component generated by the background component 30, whereby individual areas of a background image can be manipulated by a corresponding control of the multiplexer 40 in order to specifically manipulate the to place safety-critical data on the non-safety-critical background image and display it together on the display 1 1.
  • the background image is generated by the background component 30, which processes only non-safety-critical data.
  • the background image can be formed from masks, texts and video data, as well as other non-security-relevant data shares.
  • the background component 30 consists essentially of a CPU / GFX combination, which is preferably implemented as a COTS module of hardware and software components.
  • the non-safety-critical background images used can be stored, for example, in a background page memory 31 which belongs to the display unit 10 and can be embodied as read-only memory (ROM memory).
  • ROM memory read-only memory
  • DVI Digital Visual Interface
  • the non-safety-critical background images can thus also be supplemented by adding non-safety-critical data A via further bus data or discrete signals.
  • signals B can be taken from external video sources and processed further. These signals from external video sources are then preferably multiplexed by a second multiplexer 41 (MXU2) before being supplied to the background component 30.
  • MXU2 second multiplexer 41
  • the security component 20 is based entirely on a 2oo3 architecture (2 out of 3 architecture) and is implemented in programmable hardware (eg, FGPA, PLD).
  • FGPA programmable hardware
  • the triple redundancy of the individual sub-components and a voting component make it possible that the error or failure of a sub-component within the voting component is overruled by the other two sub-components. So before the entire system fails, all three sub-components must fail. Since it is to be expected that the subcomponents will fail independently of each other and thus does not take place, the probability of a failure of the overall system is very small.
  • the 2oo3 architecture used is shown schematically by hardware components at least in the form of three superimposed interfaces 21, three GFX components 22, and a selector (voter) 25.
  • the interfaces 21 and the GFX component 22 should be provided triple redundant, but it can also be further components such as memory 23 and 24 formed triple redundant.
  • This variant is likewise shown in FIG. 1 by three memories 23, 24 shown one above the other.
  • the memories 23 are symbol memories in which symbols are stored for display on the display 11, while the memories 24 are position memories in which the associated positions for the symbols are stored.
  • the memories 23, 24 can be designed as ROM memories, the symbol and position memory ROMs preferably having an ECC or parity code.
  • Safety-critical signals C are then accepted via the three interfaces 21. This can be done, for example, via Ethernet / AFDX, ARINC, CAN, Flexray, discrete signals or a combination of these signal paths.
  • the corresponding symbol position is respectively read from the position memories 23.
  • the corresponding symbol is read from the symbol memories 24.
  • the corresponding symbol is then inserted into the graphic data stream D by means of a GFX component at the corresponding position by setting the multiplexer 40 and inserting the symbol (s) into the graphic data stream D.
  • the multiplexer 40 is read from the position memory 24 in accordance with the image positions as 2oo3 architecture by each of the three safety-critical GFX components 22 and evaluated accordingly via the voter 25. This is the pixel-precise image position of the safety-critical image components, which is calculated by the 2oo3 architecture and supplies the switching signal for the multiplexer 40.
  • the switching over of several video inputs B is also calculated via the safety-critical (video) data path 20 from the interfaces C.

Landscapes

  • Engineering & Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • Chemical & Material Sciences (AREA)
  • Crystallography & Structural Chemistry (AREA)
  • Computer Hardware Design (AREA)
  • Controls And Circuits For Display Device (AREA)

Abstract

L'invention concerne un procédé de visualisation de données critiques pour la sécurité sur l'afficheur (11) d'un module d'affichage modulaire (10), les données à visualiser comprenant des parties de données critiques pour la sécurité et des parties de données non critiques pour la sécurité et les données étant envoyées à l'afficheur (11) par le biais d'un flux de données graphiques (D) et visualisées sur l'afficheur (11). Selon l'invention, un composant de sécurité (20) du module d'affichage (10) génère les parties de données critiques pour la sécurité à partir de signaux critiques pour la sécurité qui sont envoyés au module d'affichage (10), tandis qu'un composant d'arrière-plan (30) du module d'affichage (10) génère les parties de données non critiques pour la sécurité sous la forme d'une image d'arrière-plan. Sur l'afficheur (11), les parties de données critiques pour la sécurité sont superposées sur cette image d'arrière-plan au moyen d'un multiplexeur (40) qui commute le flux de données graphiques (D) envoyé à l'afficheur (11) entre le composant de sécurité (20) et le composant d'arrière-plan (30) de sorte que, dans certaines zones, les contenus graphiques de l'image d'arrière-plan changent et des contenus graphiques critiques pour la sécurité sont insérés et visualisés sur l'afficheur (11). L'invention concerne en outre un module d'affichage modulaire (10) correspondant servant à réaliser le procédé.
EP13718149.1A 2012-05-04 2013-04-15 Procédé de visualisation de données critiques pour la sécurité au moyen d'un module d'affichage et module d'affichage correspondant Withdrawn EP2845185A1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
DE201210207439 DE102012207439A1 (de) 2012-05-04 2012-05-04 Verfahren zur Darstellung sicherheitskritischer Daten durch eine Anzeigeneinheit; Anzeigeneinheit
PCT/EP2013/057757 WO2013164181A1 (fr) 2012-05-04 2013-04-15 Procédé de visualisation de données critiques pour la sécurité au moyen d'un module d'affichage et module d'affichage correspondant

Publications (1)

Publication Number Publication Date
EP2845185A1 true EP2845185A1 (fr) 2015-03-11

Family

ID=48170446

Family Applications (1)

Application Number Title Priority Date Filing Date
EP13718149.1A Withdrawn EP2845185A1 (fr) 2012-05-04 2013-04-15 Procédé de visualisation de données critiques pour la sécurité au moyen d'un module d'affichage et module d'affichage correspondant

Country Status (4)

Country Link
US (1) US20150109340A1 (fr)
EP (1) EP2845185A1 (fr)
DE (1) DE102012207439A1 (fr)
WO (1) WO2013164181A1 (fr)

Families Citing this family (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
ES2619190T3 (es) 2014-12-30 2017-06-23 Matthias Auchmann Método y sistema para la visualización segura de información relevante para la seguridad
KR102373465B1 (ko) 2016-01-04 2022-03-11 삼성전자주식회사 디스플레이 장치, 멀티 디스플레이 장치 및 이를 이용한 영상 표시 방법
DE102016003359B4 (de) * 2016-03-18 2023-07-20 Mercedes-Benz Group AG Anzeigevorrichtung
SI3549842T2 (sl) 2018-04-06 2025-06-30 Thales Management & Services Deutschland Gmbh Sistem za nadzor železniškega prometa in postopek za varno prikazovanje stanja proge in nadzorni sistem vlakov
DE102021001673B3 (de) 2021-03-30 2022-06-15 Mercedes-Benz Group AG Verfahren und Vorrichtung zur sicheren Anzeige von ASIL-relevanten Daten auf einer Anzeigevorrichtung eines Kraftfahrzeuges
FR3122491B1 (fr) * 2021-04-30 2023-06-02 Safran Electronics & Defense Système d’affichage d’informations critiques et non critiques
CN119583894B (zh) * 2024-11-22 2026-06-30 中国航空工业集团公司洛阳电光设备研究所 一种面向lcos平视显示器的安全性监控方法

Family Cites Families (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4639721A (en) * 1982-10-09 1987-01-27 Sharp Kabushiki Kaisha Data selection circuit for the screen display of data from a personal computer
US6822624B2 (en) * 2002-09-10 2004-11-23 Universal Avionics Systems Corporation Display generation system
US20060044328A1 (en) * 2004-08-26 2006-03-02 Rai Barinder S Overlay control circuit and method
WO2008062592A1 (fr) * 2006-11-22 2008-05-29 Sharp Kabushiki Kaisha Unité de commande d'affichage, système d'affichage embarqué, organe de commande d'affichage, et affichage embarqué
US8751067B2 (en) * 2007-02-27 2014-06-10 The Boeing Company Electronic flight bag system and method
FR2919951B1 (fr) * 2007-08-08 2012-12-21 Airbus France Systeme de traitement et d'affichage de donnees
US8073580B2 (en) * 2007-10-30 2011-12-06 Honeywell International Inc. Standby instrument system
CA2707373A1 (fr) * 2010-06-14 2011-12-14 Ievgenii Bakhmach Procede et plate-forme pour la mise en oeuvre de systemes critiques de securite

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See references of WO2013164181A1 *

Also Published As

Publication number Publication date
DE102012207439A1 (de) 2013-11-07
US20150109340A1 (en) 2015-04-23
WO2013164181A1 (fr) 2013-11-07

Similar Documents

Publication Publication Date Title
WO2013164181A1 (fr) Procédé de visualisation de données critiques pour la sécurité au moyen d'un module d'affichage et module d'affichage correspondant
EP2273369B1 (fr) Procédé de représentation d'une information relative à la sécurité sur un dispositif d'affichage et dispositif d'exécution du procédé
EP3605256B1 (fr) Système et procédé de surveillance de l'état d'un aéronef sans pilote
EP3712770B1 (fr) Unité de surveillance pour interfaces graphiques utilisateur relatives à la sécurité
DE10243713A1 (de) Redundante Steuergeräteanordnung
EP2367083A1 (fr) Dispositif de création d'un programme pour une commande programmable par mémoire, dispositif de programmation et procédé de programmation d'une commande programmable par mémoire
EP2833349B1 (fr) Procédé et dispositif de représentation d'un état relevant de la sécurité
DE112008003195T5 (de) Elektrischer Schaltkreis mit einem physikalischen Übertragungsschicht-Diagnosesystem
DE102019202862B4 (de) Vorrichtung zur Bereitstellung von Bilddaten
EP3074293B1 (fr) Procédé de révélation d'erreur dans un système calculateur de poste d'aiguillage et système de calcul de poste d'aiguillage
EP3839683B1 (fr) Système à fonction d'auto-contrôle et procédé de vérification de l'auto-contrôle d'un système
DE102010026392B4 (de) Verfahren zur sicheren Parametrierung eines Sicherheitsgeräts
DE102008021241B4 (de) Messwert-Anzeige, insbesondere im Führerstand eines Schienenfahrzeugs
WO2014048641A1 (fr) Interface utilisateur et procédé de diagnostic d'erreur d'une installation industrielle
EP3629141B1 (fr) Procédé et dispositif de contrôle d'une valeur paramétrique de configuration
EP3265360B1 (fr) Procédé et dispositif pour l'affichage d'une procédure d'au moins un équipement de sécurité ferroviaire et système de sécurité ferroviaire comprenant un dispositif de ce type
WO2014128036A1 (fr) Procédé de découverte d'erreurs dans un système informatique de poste d'aiguillage et système informatique de poste d'aiguillage
DE102014218191A1 (de) Verfahren zum Betreiben eines Verkehrsleitsystems
EP3629112B1 (fr) Procédé d'affichage des écarts entre un programme utilisateur pour une commande à mémoire programmable et sa copie
EP3646313B1 (fr) Appareil et méthode pour la représentation des données d'image dans un dispositif d'affichage sécurisé
EP3317856B1 (fr) Procédé pour vérifier l'exactitude d'une représentation de données d'image sur un moyen d'affichage et dispositif d'affichage
DE102005007477B4 (de) Programmierbare Steuerung zur Maschinen-und/oder Anlagenautomatisierung mit Standard-Steuerungs- und Sicherheitsfunktionen und Kommunikation mit einer Sicherheits-EA sowie Verfahren zum Betrieb der programmierbaren Steuerung
WO2011113405A1 (fr) Groupement d'appareils de commande
DE102019216030A1 (de) Verfahren und Vorrichtung zur Ausgabe von Repräsentationen für den sicheren Betrieb eines Fahrzeugs relevanter Zustände durch ein Ausgabemodul
EP4414826A1 (fr) Procédé et système de visualisation de données graphiques et textuelles relatives à la sécurité dans les transports ferroviaires

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

17P Request for examination filed

Effective date: 20141013

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

AX Request for extension of the european patent

Extension state: BA ME

DAX Request for extension of the european patent (deleted)
17Q First examination report despatched

Effective date: 20160421

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE APPLICATION IS DEEMED TO BE WITHDRAWN

18D Application deemed to be withdrawn

Effective date: 20160902