Automated vehicle safety response methods and corresponding vehicle safety systems with serialized computing architectures

Patent metadata

Field	Value
Publication number	US-11667302-B2
Application number	US-202017120211-A
Country	US
Kind code	B2
Filing date	Dec 13, 2020
Priority date	Dec 13, 2020
Publication date	Jun 6, 2023
Grant date	Jun 6, 2023

Abstract

Described herein are systems, methods, and non-transitory computer-readable media for implementing automated vehicle safety response measures to ensure continued safe automated vehicle operation for a limited period of time after a vehicle component or vehicle system that supports an automated vehicle driving function fails. When a critical vehicle component/system such as a vehicle computing platform fails, the vehicle is likely no longer capable of performing calculations required to safely operate and navigate the vehicle in an autonomous manner, or at a minimum, is no longer able to ensure the accuracy of such calculations. In such a scenario, the automated vehicle safety response measures disclosed herein can ensure—despite failure of the vehicle component/system—continued safe automated operation of the vehicle for a limited period of time in order to bring the vehicle to a safe stop.

First claim

What is claimed is:

1. A computer-implemented method, comprising:
receiving, by one or more processors of a vehicle, future vehicle trajectory data from a vehicle computing platform of the vehicle, the future vehicle trajectory data indicating a planned trajectory of the vehicle for a period of time subsequent to a time of receipt of the future vehicle trajectory data;
determining, by the one or more processors, that the vehicle computing platform has failed;
determining, by the one or more processors, a set of vehicle safety response control commands based at least in part on the future vehicle trajectory data;
sending, by the one or more processors, the set of vehicle safety response control commands to one or more actuators of the vehicle to initiate a safety response measure for the vehicle in response to failure of the vehicle computing platform;
during a period of time in which the safety response measure is undertaken, continuously receiving over time, at the one or more processors, sensor data from one or more sensors of the vehicle, wherein the one or more sensors comprise an inertial sensor, wherein the sensor data comprises first sensor data from the inertial sensor, the first sensor data comprising linear velocity, linear position, angular rate, and angular orientation, and indicating actual vehicle trajectory data;
updating the set of vehicle safety response control commands based on any deviation between the actual vehicle trajectory data and the planned trajectory; and
transmitting the updated set of vehicle safety response control commands to the one or more actuators.

2. The computer-implemented method of claim 1 , wherein determining that the vehicle computing platform has failed comprises receiving, by the one or more processors from the vehicle computing platform, a failure signal indicating that the vehicle computing platform has failed.

3. The computer-implemented method of claim 1 , wherein determining that the vehicle computing platform has failed comprises determining, by the one or more processors, that connectivity between the vehicle safety system and the vehicle computing platform has been lost for at least a threshold period of time.

4. The computer-implemented method of claim 1 , wherein determining the set of vehicle safety response control commands comprises processing the future vehicle trajectory data at the vehicle safety system to generate the set of vehicle safety response commands.

5. The computer-implemented method of claim 1 , wherein updating the set of vehicle safety response control commands comprises:
determining, by the one or more processors, a current location of the vehicle using the first sensor data;
determining, by the one or more processors and based at least in part on the future vehicle trajectory data, that the current location of the vehicle deviates from an expected location of the vehicle; and
modifying, by the one or more processors, a vehicle steering control command of the set of vehicle safety response control commands to obtain an updated vehicle steering control command of the set of updated vehicle safety response control commands, wherein the updated vehicle steering control command, when implemented, causes the one or more actuators to adjust a steering control for the vehicle to reduce the deviation between the current location of the vehicle and the expected location of the vehicle.

6. The computer-implemented method of claim 5 , wherein the expected location of the vehicle corresponds to a center of a lane of a roadway being traversed by the vehicle, and wherein the updated vehicle steering control command, when implemented, causes the one or more actuators to adjust the steering control to move the vehicle from the current location of the vehicle towards the center of the lane.

7. The computer-implemented method of claim 1 , wherein the one or more sensors comprise a radar-based sensor, wherein the sensor data comprises second sensor data received from the radar-based sensor, and wherein updating the set of vehicle safety response control commands comprises:
determining, by the one or more processors and using the first sensor data, that an obstacle is present along a planned trajectory of the vehicle indicated by the future vehicle trajectory data; and
modifying, by the one or more processors, one or more control commands of the set of vehicle safety response control commands to obtain one or more updated vehicle safety response control commands of the set of updated vehicle safety response control commands, wherein the one or more updated vehicle safety response control commands, when implemented, cause the one or more actuators to adjust at least one of a steering control or a braking control for the vehicle to cause the vehicle to deviate from the planned trajectory in order to avoid the obstacle.

8. The computer-implemented method of claim 1 , further comprising prior to determining that the vehicle computing platform has failed:
receiving, by the one or more processors, a set of vehicle control commands from the vehicle computing platform; and
relaying, by the one or more processors, the set of vehicle control commands to the one or more actuators.

9. The computer-implemented method of claim 1 , wherein the one or more processors comprise a minimal risk condition control (MRCC) vehicle safety system.

10. The computer-implemented method of claim 9 , wherein the one or more actuators comprises a drive-by-wire (DBW) actuator.

11. The computer-implemented method of claim 10 , wherein the MRCC vehicle safety system and the DBW actuator constitute part of an integrated system, and wherein the MRCC vehicle safety system communicates with the DBW actuator using a proprietary vehicle communication protocol.

12. The computer-implemented method of claim 1 , wherein the vehicle computing platform is a primary computing platform of the vehicle.

13. A system for automated control of a vehicle, comprising:
a vehicle computing platform;
one or more actuators; and
at least one processor; and
at least one memory storing computer-executable instructions, wherein the at least one processor is configured to access the at least one memory and execute the computer-executable instructions to:
receive future vehicle trajectory data from the vehicle computing platform, the future vehicle trajectory data indicating a planned trajectory of the vehicle for a period of time subsequent to a time of receipt of the future vehicle trajectory data;
determine that the vehicle computing platform has failed;
determine a set of vehicle safety response control commands based at least in part on the future vehicle trajectory data;
send the set of vehicle safety response control commands to the one or more actuators to initiate an automated safety response measure for the vehicle in response to failure of the vehicle computing platform;
during a period of time in which the safety response measure is undertaken, continuously receiving over time, at the one or more processors, sensor data from one or more sensors of the vehicle, wherein the one or more sensors comprise an inertial sensor, wherein the sensor data comprises first sensor data from the inertial sensor, the first sensor data comprising linear velocity, linear position, angular rate, and angular orientation, and indicating actual vehicle trajectory data;
updating the set of vehicle safety response control commands based on any deviation between the actual vehicle trajectory data and the planned trajectory; and
transmitting the updated set of vehicle safety response control commands to the one or more actuators.

14. The

Assignees

• Pony Ai Inc

Inventors

• Chen Bokai
• Wang Qi
• Yang Daniel

Classifications

• B60W60/001 Primary

  Planning or execution of driving tasks · CPC title

• G07C5/02

  Registering or indicating driving, working, idle, or waiting time only (apparatus forming part of taximeters G07B13/00) · CPC title

• B60W50/038

  Limiting the input power, torque or speed · CPC title

• H04L67/12

  specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks · CPC title

• B60W50/029 Primary

  Adapting to failures or work around with other constraints, e.g. circumvention by avoiding use of failed parts · CPC title