Automated vehicle safety response methods and corresponding vehicle safety systems with serial-parallel computing architectures

Patent metadata

Field	Value
Publication number	US-11827243-B2
Application number	US-202017120212-A
Country	US
Kind code	B2
Filing date	Dec 13, 2020
Priority date	Dec 13, 2020
Publication date	Nov 28, 2023
Grant date	Nov 28, 2023

Abstract

Described herein are systems, methods, and non-transitory computer-readable media for implementing automated vehicle safety response measures to ensure continued safe automated vehicle operation for a limited period of time after a vehicle component or vehicle system that supports an automated vehicle driving function fails. When a critical vehicle component/system such as a vehicle computing platform fails, the vehicle is likely no longer capable of performing calculations required to safely operate and navigate the vehicle in an autonomous manner, or at a minimum, is no longer able to ensure the accuracy of such calculations. In such a scenario, the automated vehicle safety response measures disclosed herein can ensure—despite failure of the vehicle component/system—continued safe automated operation of the vehicle for a limited period of time in order to bring the vehicle to a safe stop.

First claim

What is claimed is:

1. A computer-implemented method, comprising:
receiving, by one or more processors of a vehicle, future vehicle trajectory data from at least one of a main vehicle computing platform of the vehicle or a secondary vehicle computing platform of the vehicle;
determining, by the one or more processors, that a safety response trigger event has occurred;
determining, by the one or more processors, whether the secondary vehicle computing platform has failed;
determining a set of vehicle safety response control commands based at least in part on whether the secondary vehicle computing platform has failed;
sending, by the one or more processors, the set of vehicle safety response control commands to one or more actuators of the vehicle to initiate a safety response measure for the vehicle;
during implementation of the safety response measure, determining, by the one or more processors, a deviation between an expected trajectory in accordance with the set of vehicle safety response control commands and an actual trajectory following the initiating of the safety response measure;
during implementation of the safety response measure, continuously receiving sensor data from an inertial measurement unit (IMU) and from a radar sensor as feedback data, wherein the continuously received sensor data comprises any changes in a wind speed and in a wind direction; and
during implementation of the safety response measure, based on the sensor data, the deviation between the expected trajectory and the actual trajectory, the any changes in the wind speed, and the any changes in the wind direction, augmenting the set of vehicle safety response control commands based on the sensor data from the IMU to decrease the deviation between the expected trajectory and the actual trajectory, wherein the augmenting of the set of vehicle safety response control commands comprises a braking force applied to the vehicle based on the IMU sensor data and increasing the braking force applied to the vehicle in response to an obstacle being detected by the radar sensor.

2. The computer-implemented method of claim 1 , wherein determining whether the secondary vehicle computing platform has failed comprises determining that the secondary vehicle computing platform has not failed, and wherein determining the set of vehicle safety response control commands comprises:
generating, by the secondary vehicle computing platform, the set of vehicle safety response control commands; and
sending, by the secondary vehicle computing platform, the set of vehicle safety response control commands to the one or more processors.

3. The computer-implemented method of claim 2 , wherein the set of vehicle safety response control commands comprises one or more advanced control commands that, when implemented, causes the one or more actuators of the vehicle to initiate a safety response measure for the vehicle to initiate at least one lane change maneuver to bring the vehicle to stop outside of a traffic lane of a roadway being traversed by the vehicle.

4. The computer-implemented method of claim 3 , wherein determining the set of vehicle safety response control commands further comprises:
receiving, by the secondary vehicle computing platform, sensor data from one or more sensors of the vehicle,
wherein generating the set of vehicle safety response control commands comprises generating, by the secondary vehicle computing platform, at least the one or more advanced control commands using the sensor data.

5. The computer-implemented method of claim 4 , wherein the sensor data comprises at least one of first sensor data received from an inertial sensor, second sensor data received from a radar-based sensor, third sensor data received from an image capture device, or fourth sensor data received from a light detection and ranging (LiDAR) sensor.

6. The computer-implemented method of claim 1 , wherein determining whether the secondary vehicle computing platform has failed comprises determining that the secondary vehicle computing platform has failed, and wherein determining the set of vehicle safety response control commands comprises generating, by the one or more processors, the set of vehicle safety response control commands based at least in part on the future vehicle trajectory data.

7. The computer-implemented method of claim 6 , wherein the future vehicle trajectory data is indicative of a planned trajectory of the vehicle for a period of time subsequent to a time of receipt of the future vehicle trajectory data.

8. The computer-implemented method of claim 1 , wherein determining that the safety response trigger event has occurred comprises:
receiving, by the one or more processors, a first set of vehicle control commands from the main vehicle computing platform;
receiving, by the one or more processors, a second set of vehicle control commands from the secondary vehicle computing platform; and
determining that the first set of vehicle control commands is inconsistent with the second set of vehicle control commands.

9. A system for automated control of a vehicle, comprising:
a main vehicle computing platform;
a secondary vehicle computing platform;
one or more actuators;
at least one processor; and
at least one memory storing computer-executable instructions, wherein the at least one processor is configured to access the at least one memory and execute the computer-executable instructions to:
receive future vehicle trajectory data from at least one of the main vehicle computing platform or the secondary vehicle computing platform;
determine that a safety response trigger event has occurred;
determine whether the secondary vehicle computing platform has failed;
determine a set of vehicle safety response control commands based at least in part on whether the secondary vehicle computing platform has failed;
send the set of vehicle safety response control commands to the one or more actuators to initiate a safety response measure for the vehicle;
during implementation of the safety response measure, determine a deviation between an expected trajectory in accordance with the set of vehicle safety response control commands and an actual trajectory following the initiating of the safety response measure;
during implementation of the safety response measure, continuously receive sensor data from an inertial measurement unit (IMU) and from a radar sensor as feedback data, wherein the continuously received sensor data comprises any changes in a wind speed and in a wind direction; and
during implementation of the safety response measure, based on the sensor data the deviation between the expected trajectory and the actual trajectory, the any changes in the wind speed, and the any changes in the wind direction, augment the set of vehicle safety response control commands based on the sensor data from the IMU to decrease the deviation between the expected trajectory and the actual trajectory, wherein the augmenting of the set of vehicle safety response control commands comprises a braking force applied to the vehicle based on the IMU sensor data and increasing the braking force applied to the vehicle in response to an obstacle being detected by the radar sensor.

10. The system of claim 9 , wherein the at least one processor is configured to determine whether the secondary vehicle computing platform has failed by executing the computer-executable instructions to determine that the secondary vehicle computing platform has not failed, and wherein the at least one processor is configured to determine the set of vehicle safety response control commands by executing the computer-executable instructions to receive the set of vehicle safety response control

Assignees

• Pony Ai Inc

Inventors

• Chen Bokai
• Wang Qi
• Yang Daniel

Classifications

• B60W60/00186 Primary

  related to the vehicle · CPC title

• B60W30/181

  Preparing for stopping · CPC title

• B60W30/18163

  Lane change; Overtaking manoeuvres · CPC title

• B60W50/0205

  Diagnosing or detecting failures; Failure detection models · CPC title

• B60W60/007 Primary

  Emergency override (Handing over between remote control and on-board control or handing over between remote control arrangements G05D1/227) · CPC title