Risk-based control of a motor vehicle

Patent metadata

Field	Value
Publication number	US-10249108-B2
Application number	US-201615359007-A
Country	US
Kind code	B2
Filing date	Nov 22, 2016
Priority date	Dec 9, 2015
Publication date	Apr 2, 2019
Grant date	Apr 2, 2019

Abstract

A highly automated driving function for controlling a motor vehicle includes a plurality of function components. A method for controlling the motor vehicle includes steps of executing the driving function using a first function component, comparing the behavior of the first function component to a specified behavior, ascertaining that the behavior of the first function component deviates from the specified behavior, ascertaining a first accident risk if the driving function continues to be executed with the aid of the first function component, ascertaining a second accident risk if the execution of the driving function continues with the aid of a second function component, and executing the driving function with the aid of the particular function component whose allocated accident risk is the lowest.

First claim

What is claimed is:

1. A method for controlling a motor vehicle with the aid of a highly automated driving function, which encompasses a plurality of function components, the method comprising: executing a driving function using a first function component, wherein the driving function is a longitudinal or lateral control of the motor vehicle; comparing a behavior of the first function component to a specified behavior; ascertaining that the behavior of the first function component deviates from the specified behavior; ascertaining a first accident risk for the first function component, wherein the ascertaining of the first accident risk assumes a situation in which the driving function continues to be executed using the first function component; ascertaining a second accident risk for a second function component, wherein the ascertaining of the second accident risk assumes a situation in which the execution of the driving function switches over to and continues execution of the driving function of a using the second function component instead of the first function component, wherein the ascertaining of the second accident risk includes ascertaining a risk related to the switchover from the first function component to the second function component; and executing the driving function using a particular one of the first function component and the second function component, whose ascertained accident risk is the lowest.

2. The method of claim 1 , wherein each of the first function component and the second function component includes hardware, software, or a combination thereof.

3. The method of claim 1 , wherein the first function component is more complex than the second function component.

4. The method of claim 1 , wherein the first accident risk and the second accident risk are risks for an accident whose severity exceeds a predefined threshold value.

5. The method of claim 1 , wherein multiple second function components is provided, and the second accident risk is determined for each second function component.

6. The method of claim 1 , wherein a takeover of the driving function by a driver is initiated if the accident risk of the executed driving function lies above a predefined threshold value.

7. A non-transitory computer readable medium on which is stored a computer program including program code for controlling a motor vehicle with the aid of a highly automated driving function, which encompasses a plurality of function components, the computer program, when executed by a processor, causing the processor to perform: executing a driving function using a first function component, wherein the driving function is a longitudinal or lateral control of the motor vehicle; comparing a behavior of the first function component to a specified behavior; ascertaining that the behavior of the first function component deviates from the specified behavior; ascertaining a first accident risk for the first function component, wherein the ascertaining of the first accident risk assumes a situation in which the driving function continues to be executed using the first function component; ascertaining a second accident risk for a second function component, wherein the ascertaining of the second accident risk assumes a situation in which the execution of the driving function switches over to and continues execution of the driving function using the second function component instead of the first function component, wherein the ascertaining of the second accident risk includes ascertaining a risk related to the switchover from the first function component to the second function component; and executing the driving function the using a particular one of the first function component and the second function component, whose ascertained accident risk is the lowest.

8. A device for controlling a motor vehicle with the aid of a highly automated driving function, which encompasses a plurality of function components, comprising: a control arrangement including hardware configured to perform the following: executing a driving function using a first function component, wherein the driving function includes a longitudinal or lateral control of the vehicle; comparing a behavior of the first function component to a specified behavior; ascertaining that the behavior of the first function component deviates from the specified behavior; ascertaining a first accident risk for the first function component, wherein the ascertaining of the first accident risk assumes a situation in which the driving function continues to be executed using the first function component; ascertaining a second accident risk for a second function component, wherein the ascertaining of the second accident risk assumes a situation in which the execution of the driving function switches over to and continues execution of the driving function using the second function component instead of the first function component, wherein the ascertaining of the second accident risk includes ascertaining a risk related to the switchover from the first function component to the second function component; and executing the driving function using a particular one of the first function component and the second function component, whose ascertained accident risk is the lowest.

9. The method as recited in claim 1 , wherein each of the ascertaining of the first accident risk and ascertaining of the second accident risk includes ascertaining with regard to a predefined severity of an accident.

10. The method as recited in claim 1 , further comprising: based on the ascertaining that the behavior of the first function component deviated from the specified behavior, performing: comparing the ascertained first accident risk to the ascertained second accident risk; determining the ascertained second accident risk is not lower than the ascertained first accident risk; and based on determining the ascertained second accident risk is not lower than the ascertained first accident risk, continue executing the driving function using the first function component despite the ascertaining that the behavior of the first function component deviated from the specified behavior.

11. The method as recited in claim 1 , further comprising: based on the ascertaining that the behavior of the first function component deviated from the specified behavior, performing: comparing the ascertained first accident risk to the ascertained second accident risk; determining the ascertained second accident risk is lower than the ascertained first accident risk; and based on determining the ascertained second accident risk is lower than the ascertained first accident risk, switching over the driving function from executing the driving function using the first function component to executing the driving function using second function component.

12. The method as recited in claim 11 , further comprising: based on determining the ascertained second accident risk is lower than the ascertained first accident risk, prompting a driver of the vehicle to assume control of the motor vehicle.

Assignees

• Bosch Gmbh Robert

Inventors

• Schroeder Christoph
• Pink Oliver
• Nordbruch Stefan
• Wilhelm Ulf

Classifications

• G05D1/0088

  characterized by the autonomous decision making process, e.g. artificial intelligence, predefined behaviours (using knowledge based models G06N5/00) · CPC title

• B60W50/023

  Avoiding failures by using redundant parts · CPC title

• G05D1/0077 Primary

  using redundant signals or controls · CPC title

• B60W50/04

  Monitoring the functioning of the control system · CPC title

• G05D2201/0213

  Physics · mapped topic