Measurement data evaluation for vehicle-dynamics systems having protection of the intended function

Patent metadata

Field	Value
Publication number	US-12017644-B2
Application number	US-202017419201-A
Country	US
Kind code	B2
Filing date	Jan 22, 2020
Priority date	Feb 6, 2019
Publication date	Jun 25, 2024
Grant date	Jun 25, 2024

Abstract

A method for evaluating measurement data that are obtained by a plurality of sensors. The method includes: the measurement data originating from sensors of a first group are processed by a function evaluation module to form a function signal that, when it is supplied to a driving dynamics system of a vehicle, causes the driving dynamics system to carry out a driving task; the measurement data originating from a second group of sensors are processed by at least a first safety evaluation module to form a first safety signal that, when it is supplied to the driving dynamics system, causes the driving dynamics system to prevent a specified undesired event of the vehicle, the second group containing a proper subset of the first group; the function signal is aggregated with the first safety signal to form a control signal that is capable of being outputted to the driving dynamics system.

First claim

What is claimed is:

1. A method for evaluating measurement data that are obtained by a plurality of sensors through physical observation of a surrounding environment and/or of one or more operating states of a vehicle, for a driving dynamics system that is configured to carry out at least one specified driving task by controlling at least one actuator of the vehicle in an at least partly automated manner, the method comprising the following steps:
processing, by a function evaluation module, the measurement data originating from sensors of a first group of the plurality of sensors, to form a function signal that, when the function signal is supplied to the driving dynamics system, causes the driving dynamics system to carry out the driving task;
processing, by a first safety evaluation module, the measurement data originating from a second group of the plurality of sensors, to form a first safety signal that, when the first safety signal is supplied to the driving dynamics system, causes the driving dynamics system to prevent a specified undesired event of the vehicle, the second group containing a proper subset of the first group, wherein the first safety evaluation module is separate from the function evaluation module; and
aggregating the function signal from the function evaluation module with the first safety signal from the first safety module to form a control signal that is output to the driving dynamics system;
wherein the aggregating includes a test of whether at least one driving dynamics intervention that takes place when the driving dynamics system is controlled with the first safety signal instead of the function signal, also takes place when the driving dynamics system is controlled with the function signal instead of the first safety signal; and
wherein, in response to a determination that the driving dynamics intervention takes place when the driving dynamics system is controlled with the first safety signal, but does not take place when the driving dynamics system is controlled with the function signal, the control signal is influenced in such a way that, when the driving dynamics system is controlled with the control signal, the driving dynamics intervention takes place.

2. The method as recited in claim 1 , further comprising:
processing, by a second safety evaluation module, the measurement data originating from sensors of a third group of the plurality of sensor, to form a second safety signal that, when the second safety signal is supplied to the driving dynamics system, causes the driving dynamics system to prevent a specified undesired event of the vehicle, the third group being different from the second group, and the function signal being aggregated with the first safety signal and with the second safety signal to form the control signal that is capable of being output to the driving dynamics system.

3. The method as recited in claim 2 , wherein the third group is disjoint from the second group.

4. The method as recited in claim 2 , wherein the second group and/or the third group contain at most five sensors.

5. The method as recited in claim 1 , wherein the influencing of the control signal is noted in an event memory, and, in response to a condition that a number and/or a temporal sequence of noted events fulfills a prespecified criterion, an error is output to an error memory of the vehicle.

6. The method as recited in claim 1 , wherein, in both the function evaluation module and the first safety evaluation module, regions are respectively ascertained in the surrounding environment of the vehicle that are free of specified types of objects.

7. The method as recited in claim 1 , wherein, in both the function evaluation module and the first safety evaluation module, regions are respectively ascertained in the surrounding environment of the vehicle that are occupied by specified types of objects.

8. The method as recited in claim 1 , wherein the control signal contains a spatial representation of the surrounding environment of the vehicle.

9. The method as recited in claim 1 , wherein the undesired event includes a frontal collision of the vehicle, and/or a rear collision against the vehicle, and/or a departure of the vehicle from its lane, and/or a side collision.

10. The method as recited in claim 1 , wherein, in the first safety evaluation module, in comparison to the function evaluation module:
the measurement data evaluated is from a smaller spatial region; and/or
the measurement data are evaluated with regard to presence of a more limited class of objects; and/or
objects recognized in the measurement data are evaluated in relation to a more limited class of features.

11. A method for evaluating measurement data that are obtained by a plurality of sensors through physical observation of a surrounding environment and/or of one or more operating states of a vehicle, for a driving dynamics system that is configured to carry out at least one specified driving task by controlling at least one actuator of the vehicle in an at least partly automated manner, the method comprising the following steps:
processing, by a function evaluation module, the measurement data originating from sensors of a first group of the plurality of sensors, to form a function signal that, when the function signal is supplied to the driving dynamics system, causes the driving dynamics system to carry out the driving task;
processing, by a first safety evaluation module, the measurement data originating from a second group of the plurality of sensors, to form a first safety signal that, when the first safety signal is supplied to the driving dynamics system, causes the driving dynamics system to prevent a specified undesired event of the vehicle, the second group containing a proper subset of the first group, wherein the first safety evaluation module is separate from the function evaluation module; and
aggregating the function signal from the function evaluation module with the first safety signal from the first safety module to form a control signal that is output to the driving dynamics system;
wherein the aggregating includes a test of whether all items of information that are used for a determination of a driving dynamics intervention and that are present in the first safety signal are also present in the function signal.

12. The method as recited in claim 11 , in which in response to a determination that not all items of information present in the first safety signal for the determination of the driving dynamics intervention are also present in the function signal, the control signal is influenced in such a way that the control signal contains all the items of information.

13. A method for evaluating measurement data that are obtained by a plurality of sensors through physical observation of a surrounding environment and/or of one or more operating states of a vehicle, for a driving dynamics system that is configured to carry out at least one specified driving task by controlling at least one actuator of the vehicle in an at least partly automated manner, the method comprising the following steps:
processing, by a function evaluation module, the measurement data originating from sensors of a first group of the plurality of sensors, to form a function signal that, when the function signal is supplied to the driving dynamics system, causes the driving dynamics system to carry out the driving task;
processing, by a first safety evaluation module, the measurement data originating from a second group of the plurality of sensors, to form a first safety signal that, when the first safety signal is supplied to the driving dynamics system, causes the driving dy

Assignees

• Bosch Gmbh Robert

Inventors

• Hering Michael
• Mueller Bernd
• Berger Ingmar

Classifications

• B60W40/105

  Speed · CPC title

• B60W30/18109

  Braking · CPC title

• B60R21/0134

  responsive to imminent contact with an obstacle {, e.g. using radar systems} · CPC title

• B60W30/08 Primary

  Active safety systems} predicting or avoiding probable or impending collision {or attempting to minimise its consequences · CPC title

• G05B19/0425 Primary

  Safety, monitoring · CPC title