Control redundancy

Patent metadata

Field	Value
Publication number	US-11054826-B2
Application number	US-201916450517-A
Country	US
Kind code	B2
Filing date	Jun 24, 2019
Priority date	Apr 20, 2018
Publication date	Jul 6, 2021
Grant date	Jul 6, 2021

Abstract

In one embodiment, a method includes receiving data from one or more sensors associated with a vehicle; and receiving a message from a first processor. The message from the first processor includes a first control command for an actuator of the vehicle and a first certificate function. The method also includes receiving a message from the second processor. The message from the second processor includes a second control command for the actuator of the vehicle and a second certificate function. The method also includes computing a first certificate based on the first certificate function and the data; computing a second certificate based on the second certificate function and the data; determining a valid control signal based on an accuracy of the first second control command and second control command relative the first certificate and second certificate; and transmitting the valid control signal to the actuator of the vehicle.

First claim

What is claimed is:

1. A system associated with a vehicle, the system comprising:
a first processor configured to determine a first control command for an actuator of the vehicle based on data received from one or more sensors associated with the vehicle;
a second processor configured to determine a second control command for the actuator of the vehicle based on the data received from the one or more sensors; and
a device in communication with the actuator and configured to (1) calculate a first accuracy metric of the first control command and a second accuracy metric of the second control command, (2) determine a valid control command based on the first accuracy metric and the second accuracy metric, and (3) control the actuator to cause the vehicle to perform an action associated with the actuator based on the valid control command.

2. The system of claim 1 , wherein the valid control command is determined based on the first accuracy metric and the second accuracy metric with respect to a value determined by the device in communication with the actuator.

3. The system of claim 1 , wherein the first control command or the second control command corresponds to an instruction to modify an acceleration, deceleration, or steerage of the vehicle through the actuator.

4. The system of claim 1 , wherein the valid control command is associated with an amount of linear acceleration, an amount of linear deceleration, or a number of degrees of steerage.

5. The system of claim 1 , wherein the device is further configured to detect a fault in the first control command based on the first accuracy metric or in the second control command based on the second accuracy metric based on a determination that the first accuracy metric or the second accuracy metric fails to correspond to an expected range of values determined based on one or more characteristics of the vehicle.

6. The system of claim 5 , wherein the fault in the first control command or the second control command indicates a processor fault in the first processor or the second processor.

7. The system of claim 1 , wherein a first range of the first accuracy metric relative to a second range of the second accuracy metric is determined based on a first processing power of the first processor relative to a second processing power of the second processor.

8. The system of claim 1 , wherein the valid control command is determined based on a determination that the first control command or the second control command was calculated using valid data based on timestamp information of the data.

9. The system of claim 1 , wherein the first processor and the second processor calculate the first control command and the second control command, respectively, in response to receiving at least a portion of the data from the one or more sensors associated with the vehicle.

10. The system of claim 1 , wherein the valid control command is determined based on authenticating that the first control command was generated by the first processor or the second control command was generated by the second processor.

11. One or more computer-readable non-transitory storage media including instructions that are operable, when executed by one or more processors, to perform operations comprising:
receiving data from one or more sensors associated with a vehicle;
determining a first control command and a second control command for an actuator of the vehicle based on the received data; and
transmitting the first control command and the second control command to a device that communicates with the actuator and is configured to (1) calculate a first accuracy metric of the first control command and a second accuracy metric of the second control command, (2) determine a valid control command based on the first accuracy metric and the second accuracy metric, and (3) control the actuator to cause the vehicle to perform an action associated with the actuator based on the valid control command.

12. The one or more computer-readable non-transitory storage media of claim 11 , wherein the operations further comprise:
computing a certificate for validating the first control command and the second control command based on a certificate function and the data; and
transmitting the certificate to the device in communication with the actuator of the vehicle.

13. The one or more computer-readable non-transitory storage media of claim 11 , wherein the first control command or the second control command is for modifying an acceleration, deceleration, or steering angle of the vehicle through the actuator.

14. The one or more computer-readable non-transitory storage media of claim 11 , wherein the valid control command is associated with an amount of linear acceleration, an amount of linear deceleration, or a number of degrees of steerage.

15. The one or more computer-readable non-transitory storage media of claim 11 , wherein the first control command and the second control command are determined in response to receiving at least a portion of the data from the one or more sensors.

16. A method comprising, by a computing system:
receiving data from one or more sensors associated with a vehicle;
determining a first control command and a second control command for an actuator of the vehicle based on the received data; and
transmitting the first control command and the second control command to a device that communicates with the actuator and is configured to (1) calculate a first accuracy metric of the first control command and a second accuracy metric of the second control command, (2) determine a valid control command based on the first accuracy metric and the second accuracy metric, and (3) control the actuator to cause the vehicle to perform an action associated with the actuator based on the valid control command.

17. The method of claim 16 , further comprising:
computing a certificate for validating the first control command and the second control command based on a certificate function and the data; and
transmitting the certificate to the device in communication with the actuator.

18. The method of claim 16 , wherein the first control command or the second control command is for modifying an acceleration, deceleration, or steering angle of the vehicle through the actuator.

19. The method of claim 16 , wherein the valid control command is associated with an amount of linear acceleration, an amount of linear deceleration, or a number of degrees of steerage.

20. The method of claim 16 , wherein the first control command and the second control command are determined in response to receiving at least a portion of the data from the one or more sensors.

Assignees

• Lyft Inc

Inventors

• Hansel George James
• Joyce Gerard
• Talwar Palak
• Lurie Helen Ruth
• Hoffacker James Allen-White

Classifications

• H04L9/3236 Primary

  using cryptographic hash functions · CPC title

• H04L9/3263

  involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823) · CPC title

• H04L9/30

  Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy · CPC title

• G06F11/182

  based on mutual exchange of the output between redundant processing components · CPC title

• H04L9/3247

  involving digital signatures · CPC title