Method for the self-check of driving functions of an autonomous or semi-autonomous vehicle

Patent metadata

Field	Value
Publication number	US-11364925-B2
Application number	US-201816020315-A
Country	US
Kind code	B2
Filing date	Jun 27, 2018
Priority date	Jun 28, 2017
Publication date	Jun 21, 2022
Grant date	Jun 21, 2022

Abstract

A method for the self-check of at least one driving function of an autonomous or semi-autonomous vehicle in vehicle operation, after an error message about the at least one driving function, in which in one step, at least one vehicle electronic system and/or at least one sensor is/are restarted, a check is made for a further appearance of the error message after each restart, and in the event an error message is not repeated after the restart, the driving function in question is checked during operation of the autonomous or semi-autonomous vehicle.

First claim

What is claimed is:

1. A self-check function-diagnostic method for an autonomous or semi-autonomous vehicle, the method comprising:
in response to an initial generation of an error message during operation of the autonomous or semi-autonomous vehicle, the error message indicating occurrence of an error, performing steps to identify which of a plurality of functions of the autonomous or semi-autonomous vehicle is a source of the occurrence of the error, the steps including the following steps (a)-(c) all as a single unit, the single unit of the steps being performed in its entirety for each respective one of at least a subset of the plurality of functions, in consecutive iterations function by function so that each respective one of the iterations of the performance of the entire single unit of the steps, other than a first one of the iterations, begins after completion of another one of the iterations that immediately precedes the respective iteration, until the source is identified:
(a) switching the respective function off, while others of the plurality of functions remain operational;
(b) subsequent to the switching off of the respective function, restarting the respective function; and
(c) determining whether the error message is present after the restart, the respective function being identified as the source by a result of the determination being that the error message is not present after the restart; and

responsive to the identification of the source, selecting a further operation to perform and performing the further operation;
wherein the method is performed in an instance in which the source is not identified in the first one of the iterations so that the at least the subset of the plurality of functions includes at least two of the plurality of functions.

2. The method of claim 1 , wherein the initial generation of the error message is produced by at least one in-vehicle error, and the method further comprises assigning a degree of severity to the at least one in-vehicle error.

3. The method of claim 1 , wherein depending on a degree of severity of the error indicated by the error message, the autonomous or semi-autonomous vehicle is deactivated during the performance of the steps to identify which of the plurality of functions of the autonomous or semi-autonomous vehicle is the source of the occurrence of the error indicated by the error message.

4. The method of claim 1 , wherein depending on a degree of severity of the error indicated by the error message, the autonomous or semi-autonomous vehicle is switched to a manual operating state during which the steps to identify which of the plurality of functions of the autonomous or semi-autonomous vehicle is the source of the error indicated by the error message are performed.

5. The method of claim 1 , wherein the further operation includes communicating with an off-board server unit, by which a repair service or a towing service is contacted.

6. The method of claim 1 , wherein the further operation includes initiating performance of an error diagnosis by an off-board server unit that transmits a result of the error diagnosis to a repair service or a towing service.

7. The method of claim 1 , wherein the further operation includes initiating performance of an error diagnosis by a server unit that is off-board of the autonomous or semi-autonomous vehicle or on-board the autonomous or semi-autonomous vehicle while the autonomous or semi-autonomous vehicle is prevented from driving above a predefined threshold.

8. The method of claim 1 , wherein the further operation includes initiating performance of an error diagnosis by a server unit that is off-board of the autonomous or semi-autonomous vehicle or on-board the autonomous or semi-autonomous vehicle using at least one diagnostic algorithm.

9. The method of claim 1 , wherein the further operation is a test of one or more of the functions that has been involved in or affected by the error.

10. The method of claim 9 , further comprising, responsive to a result of the test being that the error message is regenerated, deactivating the one or more of the functions that has been involved in or affected by the error.

11. The method of claim 9 , further comprising, responsive to a result of the test being that the error message is regenerated, deactivating an autonomous driving by the autonomous or semi-autonomous vehicle.

12. The method of claim 9 , further comprising, responsive to a result of the test being that the error message is regenerated, deactivating the autonomous or semi-autonomous vehicle.

13. The method of claim 9 , wherein the test of the one or more of the functions that has been involved in or affected by the error is performed while the autonomous or semi-autonomous vehicle is in a safe mode.

14. The method of claim 13 , further comprising, responsive to a result of the test being that the error is not regenerated by the performance of the test, removing the autonomous or semi-autonomous vehicle from the safe mode.

15. The method of claim 13 , wherein maintaining the autonomous or semi-autonomous vehicle in the safe mode during the performance of the test of the one or more of the functions that has been involved in or affected by the error is dependent on a severity of the error.

16. The method of claim 9 , wherein the test of the one or more of the functions that has been involved in or affected by the error is performed while the autonomous or semi-autonomous vehicle is prevented from driving above a predefined threshold speed.

17. The method of claim 1 , further comprising placing the autonomous or semi-autonomous vehicle into a safe mode in response to the initial generation of the error message, wherein the steps to identify which of the plurality of functions of the autonomous or semi-autonomous vehicle is the source of the occurrence of the error are performed while the autonomous or semi-autonomous vehicle is in the safe mode.

18. The method of claim 17 , wherein the further operation is a test of one or more of the functions that has been involved in or affected by the error, and the method further comprises, responsive to a result of the test being that the error is not regenerated by the performance of the test, removing the autonomous or semi-autonomous vehicle from the safe mode.

19. A method for an autonomous or semi-autonomous vehicle, the method comprising:
in response to an initial generation of an error message during operation of the autonomous or semi-autonomous vehicle, the error message indicating occurrence of an error, executing steps in an attempt to identify which of a plurality of functions of the autonomous or semi-autonomous vehicle is a source of the occurrence of the error, the steps including the following steps (a)-(c) all as a single unit, the single unit of the steps being performed in its entirety for each respective one of the plurality of functions, in consecutive iterations function by function so that each respective one of the iterations of the performance of the entire single unit of the steps, other than a first one of the iterations, begins after completion of another one of the iterations that immediately precedes the respective iteration:
(a) switching the respective function off, while others of the plurality of functions remain operational;
(b) subsequent to the switching off of the respective function, restarting the respective function; and
(c) determining whether the error message is no longer present after the restart as an indication of the respective function being the so

Assignees

• Bosch Gmbh Robert

Inventors

• Schoenfeld Daniel
• Ewert Marlon Ramon
• Schoenfeld Stefanie

Classifications

• G06F11/1441 Primary

  Resetting or repowering · CPC title

• B60W2050/021

  Means for detecting failure or malfunction · CPC title

• B60W50/04 Primary

  Monitoring the functioning of the control system · CPC title

• B60W2050/007

  Switching between manual and automatic parameter input, and vice versa · CPC title

• B60W2050/0295

  Inhibiting action of specific actuators or systems · CPC title