Method of using a single controller (ecu) for a fault-tolerant/fail-operational self-driving system
US-2018370540-A1 · Dec 27, 2018 · US
US11091106B2 · US · B2
| Field | Value |
|---|---|
| Publication number | US-11091106-B2 |
| Application number | US-201916248426-A |
| Country | US |
| Kind code | B2 |
| Filing date | Jan 15, 2019 |
| Priority date | Jan 15, 2019 |
| Publication date | Aug 17, 2021 |
| Grant date | Aug 17, 2021 |
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
What the patent document calls the invention.
A short plain-language summary of the technical disclosure.
Who owns or filed the patent and who is credited as inventor.
Filing, priority, publication, and grant dates set the timeline.
The legal scope of protection — read this for what is actually claimed.
Technology tags used to group this patent with similar filings.
Prior art links and similar publications in this corpus.
Official abstract text for this publication.
A vehicle power network includes a bus providing power to an automotive safety integrity level (ASIL)-rated load and an auxiliary-rated load. The ASIL-rated load includes a processor and memory storing instructions executable by the processor. The instructions include, to, in response to determining a minimal risk condition (MRC), selectively terminate power to the auxiliary-rated load.
Opening claim text (preview).
What is claimed is: 1. A vehicle power network, comprising: a hybrid power network comprising a bus, an automotive safety integrity level (ASIL)-rated load, and an auxiliary load; and a base power network comprising additional auxiliary-rated loads; the bus providing power to the ASIL-rated load and the auxiliary-rated load, the ASIL-rated load, comprising a processor and memory storing instructions executable by the processor, the instructions comprising, to: in response to determining a fault condition, selectively terminate power to the auxiliary-rated load; and the hybrid power network and the base power network being load-balanced within a predetermined threshold. 2. The vehicle power network of claim 1 , wherein the ASIL-rated load controls vehicle steering or vehicle braking. 3. The vehicle power network of claim 1 , wherein the ASIL-rated load receives sensor data from at least one of a LIDAR sensor, a camera sensor, and a radar sensor; and uses the sensor data to control an autonomous mode of a vehicle. 4. The vehicle power network of claim 1 , wherein instructions further comprise: based on the fault condition, controlling a vehicle to a stop. 5. The vehicle power network of claim 1 , further comprising a power converter that converts voltage from a first direct current voltage to a second direct current voltage. 6. The vehicle power network of claim 1 , further comprising a second ASIL-rated load connected to the bus of the hybrid power network, and a redundant power network that provides redundant power to a third ASIL-rated load of the hybrid power network during a single-point fault, the third ASIL-rated load being a backup of the second ASIL-rated load. 7. The vehicle power network of claim 1 , wherein the instructions further comprise, actuating a switch to terminate power to the auxiliary-rated load. 8. The vehicle power network of claim 1 , wherein the determining the fault condition is based on at least one of (i) a fault condition of the auxiliary-rated load, and (ii) a fault condition of a power converter. 9. The vehicle power network of claim 8 , further comprising: a current sensor that measures current draw of the auxiliary-rated load, wherein the instructions further comprise: based on the current draw, determine the fault condition of the auxiliary-rated load. 10. A vehicle power network, comprising: a bus providing power to: a plurality of auxiliary-rated loads each coupled to the bus via a different switch, one of the auxiliary-rated loads controlling vehicle acceleration; a first automotive safety integrity level (ASIL)-rated load that controls vehicle steering or vehicle braking; and a second ASIL-rated load that is programmed to: determine a fault condition; and then, actuate at least one of the switches to terminate power to a corresponding one of the plurality of auxiliary-rated loads. 11. The vehicle power network of claim 10 , wherein the second ASIL-rated load is programmed to: receive sensor data from at least one of a LIDAR sensor, a camera sensor, and a radar sensor; and use the sensor data to control an autonomous mode of a vehicle. 12. The vehicle power network of claim 10 , wherein the second ASIL-rated load is programmed to, in response to determining the fault condition, control a vehicle to a stop. 13. The vehicle power network of claim 10 , further comprising a power converter that converts voltage from a first direct current voltage to a second direct current voltage. 14. The vehicle power network of claim 10 , further comprising a hybrid power network comprises the bus, the plurality of auxiliary-rated loads, the first ASIL-rated load, the second ASIL-rated load, and at least one of the switches, wherein the vehicle power network further comprises a base power network comprising additional auxiliary-rated loads, wherein the hybrid power network and the base power network are load-balanced within a predetermined threshold. 15. The vehicle power network of claim 14 , further comprising a redundant power network that provides redundant power to a third ASIL-rated load during a single-point fault, the third ASIL-rated load being a backup of the first ASIL-rated load. 16. The vehicle power network of claim 10 , wherein the fault condition is determined based on at least one of (i) a fault condition of the plurality of auxiliary-rated loads, and (ii) a fault condition of a power converter. 17. The vehicle power network of claim 16 , further comprising: a plurality of current sensors that measure current draw of a corresponding auxiliary-rated load, wherein based on the current draw, the second ASIL-rated load is programmed to determine the fault condition of the corresponding auxiliary-rated load. 18. A system of a vehicle, comprising: a first bus providing power to a first plurality of auxiliary-rated loads; and a second bus providing power to: a second plurality of auxiliary-rated loads each coupled to the second bus via a different switch, one of the second plurality of auxiliary-rated loads controlling vehicle acceleration; a first automotive safety integrity level (ASIL)-rated load that controls vehicle steering or vehicle braking; and a second ASIL-rated load that is programmed to: determine a fault condition based on at least one of (i) a fault condition of the second plurality of auxiliary-rated loads, and (ii) a fault condition of a power converter; and then actuate at least one of the switches to terminate power to a corresponding one of the second plurality of auxiliary-rated loads.
for transfer of electric power between AC and DC networks, e.g. for supplying the DC section within a load from an AC mains system · CPC title
including control of braking systems · CPC title
Steering systems · CPC title
for supply of electrical power to vehicle subsystems {or for (circuit arrangements for charging batteries H02J7/00)} · CPC title
Registering or indicating performance data other than driving, working, idle, or waiting time, with or without registering driving, working, idle or waiting time · CPC title
Related publications grouped by family.
Answers are generated from the same data shown on this page.