System on chip automotive safety monitoring
US-2024409106-A1 · Dec 12, 2024 · US
US2023406332A1 · US · A1
| Field | Value |
|---|---|
| Publication number | US-2023406332-A1 |
| Application number | US-202018033506-A |
| Country | US |
| Kind code | A1 |
| Filing date | Nov 16, 2020 |
| Priority date | Nov 16, 2020 |
| Publication date | Dec 21, 2023 |
| Grant date | — |
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
What the patent document calls the invention.
A short plain-language summary of the technical disclosure.
Who owns or filed the patent and who is credited as inventor.
Filing, priority, publication, and grant dates set the timeline.
The legal scope of protection — read this for what is actually claimed.
Technology tags used to group this patent with similar filings.
Prior art links and similar publications in this corpus.
Official abstract text for this publication.
In the case of an automated driving vehicle capable of autonomous traveling, it has to deal also with failures at two spots. In order to drive actuators at the time of failures of two controllers, it is necessary to additionally provide controllers capable of making real-time calculations and thus, there is a problem that the cost will increase. A vehicle control system according to this application is a vehicle control system which comprises a control device that has two calculation devices for real-time control and two calculation devices for non-real-time control, and that drives a drive unit on the basis of control target values; wherein these calculation devices are configured so that, when one or two of them have failed, another one of these calculation devices takes over functions of the failed calculation device or devices.
Opening claim text (preview).
1 . A vehicle control system, comprising: sensors that detect an environment around a vehicle; actuators that control the vehicle; a driver that drives the actuators; and a control device that has two calculation devices for real-time control and two calculation devices for non-real-time control, and that calculates control target values for the vehicle on a basis of signals of the sensors to thereby drive the driver on a basis of the control target values; wherein these calculation devices are configured so that, when one or two of these calculation devices have failed, another one of these calculation devices takes over functions of the failed calculation device or devices. 2 . The vehicle control system of claim 1 , wherein the calculation device for non-real-time control, when taking over functions of the calculation device for real-time control, preferentially executes functions related to steering, braking and security of the vehicle. 3 . The vehicle control system of claim 1 , wherein the calculation device for real-time control or the calculation device for non-real-time control generates drive signals to be given to the driver in a period from a current time to a time after an elapse of a predetermined transition period, and stores the drive signals in a memory; and wherein, when the calculation device for real-time control has failed and the calculation device for non-real-time control is going to take over functions of said calculation device for real-time control, the drive signals stored in the memory are supplied, in the transition period, to the driver at predetermined cycles. 4 . The vehicle control system of claim 1 , wherein, when the calculation device for real-time control has failed and the calculation device for non-real-time control is going to take over functions of said calculation device for real-time control, the calculation device for non-real-time control predicts a vehicle control state after an elapse of a predetermined prediction period and transfers expected drive signals based on the thus-predicted vehicle control state to a signal corrector; and wherein the signal corrector outputs interpolated drive signals on a basis of currently outputting drive signals and the expected drive signals after the elapse of the predetermined prediction period, to the driver at predetermined cycles. 5 . The vehicle control system of claim 4 , wherein the signal corrector generates the interpolated drive signals according to an output characteristic of each of the actuators. 6 . The vehicle control system of claim 4 , wherein the signal corrector generates the interpolated drive signal on a basis of a moving average value or a spline curve of a history about each of the expected drive signals after the elapse of the predetermined prediction period, received from the calculation device for non-real-time control. 7 . The vehicle control system of claim 1 , wherein each of the calculation devices for real-time control and the calculation devices for non-real-time control has a failure detection function and, when having detected a failure, informs the other calculation devices that it has failed. 8 . The vehicle control system of claim 1 , wherein the driver is connected through duplicated communication networks to the calculation devices for real-time control and the calculation devices for non-real-time control; and wherein one of said communication networks is used when all of these calculation devices are normal, and the other communication network is used when any one of these calculation devices has failed. 9 . The vehicle control system of claim 1 , wherein the sensors include a camera that detects the environment around the vehicle, and a locator that detects a location of the vehicle.
Avoiding failures by using redundant parts · CPC title
related to the vehicle · CPC title
Adapting to failures or work around with other constraints, e.g. circumvention by avoiding use of failed parts · CPC title
Diagnosing or detecting failures; Failure detection models · CPC title
Operations & Transport · mapped topic
Related publications grouped by family.
Answers are generated from the same data shown on this page.