Method for dynamic context-based distribution of software in a vehicle control system, and a control system

Patent metadata

Field	Value
Publication number	US-2021188294-A1
Application number	US-202017121575-A
Country	US
Kind code	A1
Filing date	Dec 14, 2020
Priority date	Dec 19, 2019
Publication date	Jun 24, 2021
Grant date	—

Abstract

Technologies and techniques for dynamic, context-based distribution of program codes in a control system in a vehicle. The control system includes numerous control units. The allocation of the program codes to the corresponding control units in the control system takes place using a global placement chart. The global placement chart is calculated on a computer, which may be located outside the control system. The data from the global placement chart are sent to the control system. Other aspects include an at least partially autonomous motor vehicle that has a control system for executing dynamic, context-based distribution of program codes.

First claim

1 - 15 . (canceled)

16 . A method for dynamic, context-based distribution of program codes in a control system of a vehicle, wherein the control system comprises a plurality of control units, comprising:
receiving a global placement chart in the control system; allocating program codes for fulfilling functions of an autonomous driving mode to corresponding control units in the control system via the global placement chart; monitoring, via a monitoring element, at least one of (i) the program codes and/or (ii) the control units to determine if at least one of the program codes and/or the control units have malfunctioned; and redistributing the program code to the control units in accordance with the global placement chart, if the monitoring determines that at least one of the program codes and/or the control units have malfunctioned.

17 . The method according to claim 16 , further comprising determining if the control system has an allocation plan for allocating remaining active program codes to available control units if the monitoring determines that at least one of the program codes and/or the control units have malfunctioned.

18 . The method according to claim 17 , further comprising allocating the remaining active program codes to the available control units via the allocation plan.

19 . The method according to claim 17 , further comprising determining whether a minimum number of necessary, redundantly-executed program codes are available for an autonomous driving mode if there is no allocation plan.

20 . The method according to claim 19 , further comprising one of (i) automatically bringing the vehicle to a standstill (ii) automatically navigating the vehicle to a stopping point via a fail-safe system, if a minimum number of redundantly executed program codes are available.

21 . The method according to claim 20 , further comprising operating the control system in an emergency mode, wherein an allocation plan is generated when enough necessary, redundant program codes are executed for an autonomous driving mode.

22 . The method according to claim 16 , further comprising determining which control units are unused or underutilized, and creating an allocation plan on the basis of which control units are available.

23 . The method according to claim 22 , wherein the program codes for fulfilling the functions of an autonomous driving mode are categorized in at least two orders of priority, wherein program codes of a lower order are stopped in order to provide additional computing power for executing higher order program codes.

24 . The method according to claim 16 , further comprising executing an optimization routine for optimizing program codes that are to be executed on remaining control units.

25 . The method according to claim 16 , wherein the global placement chart is determined based on information associated with different control systems in other motor vehicles.

26 . A system for dynamic, context-based distribution of program codes in a vehicle, comprising
a control system comprising a plurality of control units; communications for receiving a global placement chart in the control system; a monitoring element, for monitoring at least one of (i) the program codes and/or (ii) the control units to determine if at least one of the program codes and/or the control units have malfunctioned, wherein the control system is configured to allocate program codes for fulfilling functions of an autonomous driving mode to corresponding control units in the control system via the global placement chart, and redistributing the program code to the control units in accordance with the global placement chart, if the monitoring determines that at least one of the program codes and/or the control units have malfunctioned.

27 . The system according to claim 26 , wherein the control system is configured to determine if the control system has an allocation plan for allocating remaining active program codes to available control units if the monitoring determines that at least one of the program codes and/or the control units have malfunctioned.

28 . The system according to claim 27 , wherein the control system is configured to allocate the remaining active program codes to the available control units via the allocation plan.

29 . The system according to claim 27 , wherein the control system is configured to determine whether a minimum number of necessary, redundantly-executed program codes are available for an autonomous driving mode if there is no allocation plan.

30 . The system according to claim 29 , wherein the control system is configured to one of (i) automatically bring the vehicle to a standstill (ii) automatically navigate the vehicle to a stopping point via a fail-safe system, if a minimum number of redundantly executed program codes are available.

31 . The system according to claim 30 , wherein the control system is configured to operate in an emergency mode, wherein an allocation plan is generated when enough necessary, redundant program codes are executed for an autonomous driving mode.

32 . The system according to claim 26 , wherein the control system is configured to determine which control units are unused or underutilized, and creating an allocation plan on the basis of which control units are available.

33 . The system according to claim 32 , wherein the control system is configured to categorize program codes for fulfilling the functions of an autonomous driving mode in at least two orders of priority, wherein program codes of a lower order are stopped in order to provide additional computing power for executing higher order program codes.

34 . The system according to claim 26 , wherein the control system is configured to execute an optimization routine for optimizing program codes that are to be executed on remaining control units.

35 . The system according to claim 26 , wherein the global placement chart is determined based on information associated with different control systems in other motor vehicles.

Assignees

• Volkswagen Ag

Inventors

• Kain Tobias
• Wesche Maximilian
• Decke Hendrik
• Müller Julian-Steffen

Classifications

• G05D1/0088

  characterized by the autonomous decision making process, e.g. artificial intelligence, predefined behaviours (using knowledge based models G06N5/00) · CPC title

• G06F8/61 Primary

  Installation · CPC title

• B60W60/00

  Drive control systems specially adapted for autonomous road vehicles · CPC title

• B60W50/032 Primary

  Fixing failures by repairing failed parts, e.g. loosening a sticking valve · CPC title

• B60W50/023

  Avoiding failures by using redundant parts · CPC title