Automated driving of a motor vehicle

Patent metadata

Field	Value
Publication number	US-11740627-B2
Application number	US-202217703601-A
Country	US
Kind code	B2
Filing date	Mar 24, 2022
Priority date	Mar 26, 2021
Publication date	Aug 29, 2023
Grant date	Aug 29, 2023

Abstract

Technologies and techniques for the at least the partially automated driving of a motor vehicle. A first application and at least one redundant second application provide output data depending on motor vehicle operating data and/or environmental data. Vehicle driving data for the at least partially automated driving of the motor vehicle are determined depending on the output data. Vehicle operating data from another vehicle are received, and, depending on the vehicle operating data, the at least one redundant second application switches from an active state to a standby state in which a computer instance of a computer unit used by the at least one redundant second application is at least executed at a lower frequency than in the active state.

First claim

The invention claimed is:

1. A method for the at least the partially automated driving of a motor vehicle, comprising:
providing output data via a first application and at least one redundant second application, the output data comprising at least one of motor vehicle operating data and/or environmental data;
determining vehicle driving data using the output data;
receiving vehicle operating data from another vehicle; and
depending on the vehicle operating data of the other vehicle, switching the at least one redundant second application from an active state to a standby state,
wherein the active state is configured to process output data from the at least one redundant second application,
wherein the standby state comprises processing a computer instance of a computer unit by the at least one redundant second application,
and wherein the processing of the computer instance is executed at a lower frequency than in the active state.

2. The method according to claim 1 , wherein
determining the vehicle driving data comprises determining the vehicle driving data before the switching of the at least one redundant second application from the active state to the standby state,
and wherein determining the vehicle driving data comprises determining the vehicle driving data for a predetermined time, independently of the output data from the at least one redundant second application.

3. The method according to claim 1 , wherein the switching of the at least one redundant second application from the active state to the standby state takes place depending on a comparison of the output data of the at least one redundant second application with the vehicle operating data of the other vehicle.

4. The method according to claim 1 , wherein the standby state comprises a passive state that does not use the computer instance.

5. The method according to claim 1 , further comprising comparing the output data of the first application with the vehicle operating data from the other vehicle.

6. The method according to claim 5 , wherein, depending on the comparing of the output data of the first application with the vehicle operating data from the other vehicle, the at least one redundant second application switches from the standby state to the active state.

7. The method according to claim 1 , wherein switching the at least one redundant second application from an active state to a standby state comprises processing a predetermined safety level prior to the switching.

8. The method according to claim 1 , further comprising emitting a warning signal depending on a comparison of the output data from at least the first or the at least one redundant second application with the vehicle operating data from the other vehicle.

9. The method according to claim 1 , further comprising one of:
determining a current vehicle state of the motor vehicle, wherein the at least one redundant second application is supplementarily operated in the active state or the standby state, depending on the current driving state;
determining the reliability of a communication connection to the other vehicle, wherein the at least one redundant second application is supplementarily operated in the active state or the standby state depending on the reliability;
determining a priority with respect to the first and the at least one redundant second application, wherein the at least one redundant second application is supplementarily operated in the active state or the standby state depending on the priority; or
determining a convoy operation, wherein the at least one redundant second application is supplementarily operated in the standby state, depending on the determined convoy operation.

10. A vehicle controller for the at least partially automated driving of a motor vehicle, comprising:
communications for receiving vehicle operating data from another vehicle; and
a program controlled computer unit, wherein the computer unit is configured to
provide output data via a first application and at least one redundant second application, the output data comprising at least one of motor vehicle operating data and/or environmental data;
determine vehicle driving data using the output data; and
depending on the vehicle operating data of the other vehicle, switch the at least one redundant second application from an active state to a standby state,
wherein the active state is configured to process output data from the at least one redundant second application,
wherein the standby state comprises processing a computer instance of a computer unit by the at least one redundant second application,
and wherein the processing of the computer instance is executed at a lower frequency than in the active state.

11. The vehicle controller according to claim 10 , wherein the computer unit is configured to
determine the vehicle driving data by determining the vehicle driving data before the switching of the at least one redundant second application from the active state to the standby state,
and wherein the computer unit is configured to determine the vehicle driving data by determining the vehicle driving data for a predetermined time, independently of the output data from the at least one redundant second application.

12. The vehicle controller according to claim 10 , wherein the computer unit is configured to switch the at least one redundant second application from the active state to the standby state depending on a comparison of the output data of the at least one redundant second application with the vehicle operating data of the other vehicle.

13. The vehicle controller according to claim 10 , wherein the standby state comprises a passive state that does not use the computer instance.

14. The vehicle controller according to claim 10 , wherein the computer unit is configured to compare the output data of the first application with the vehicle operating data from the other vehicle.

15. The vehicle controller according to claim 14 , wherein, depending on the comparing of the output data of the first application with the vehicle operating data from the other vehicle, the computer unit is configured to switch the at least one redundant second application from the standby state to the active state.

16. The vehicle controller according to claim 10 , wherein the computer unit is configured to switch the at least one redundant second application from an active state to a standby state by processing a predetermined safety level prior to the switching.

17. The vehicle controller according to claim 10 , wherein the computer unit is configured to emit a warning signal depending on a comparison of the output data from at least the first or the at least one redundant second application with the vehicle operating data from the other vehicle.

18. The vehicle controller according to claim 10 , wherein the computer unit is configured to perform one or more of:
determine a current vehicle state of the motor vehicle, wherein the at least one redundant second application is supplementarily operated in the active state or the standby state, depending on the current driving state;
determine the reliability of a communication connection to the other vehicle, wherein the at least one redundant second application is supplementarily operated in the active state or the standby state depending on the reliability;
determine a priority with respect to the first and the at least one redundant second application, wherein the at least one redundant second application is supplementarily operated in the active state or the standby state de

Assignees

• Volkswagen Ag

Inventors

• Martinez Flores Yael Abelardo
• Decke Hendrik
• Müller Julian-Steffen
• Aguirre Mehlhorn Marcel
• Kain Tobias

Classifications

• G05D1/87

  using redundant control arrangements · CPC title

• G05D1/695

  for maintaining a fixed relative position of the vehicles, e.g. for convoy travelling or formation flight · CPC title

• G05D1/0077 Primary

  using redundant signals or controls · CPC title

• G06F11/1479

  Generic software techniques for error detection or fault masking · CPC title

• G05D1/0293

  Convoy travelling · CPC title