Eliminate security enable hardware by using CAN transceiver wake-up function

Abstract

In example embodiments, methods, systems, and vehicles are provided in which a vehicle includes a vehicle system, a communication bus, a first processor, and a communication bus transceiver. The first processor is configured to at least facilitate: determining whether there is a potential safety issue related to controlling the vehicle system; and providing a communication along the communication bus of the vehicle, the communication including an indication of the potential safety issue. The communication bus transceiver is coupled to the first processor and is configured to at least facilitate: identifying the indication of the potential safety issue; and inhibiting control of the vehicle system when the communication bus transceiver identifies the indication of the potential safety issue.

Description

TECHNICAL FIELD

[0001] The technical field generally relates to vehicles, and more specifically, to methods and systems for providing secure hardware control using vehicle hardware. BACKGROUND

[0002] Today's vehicles include various systems that can require oversight of one or more other systems or devices, for example, to help ensure safety. However, existing systems or devices can not always be optimal.

[0003] Accordingly, it is desirable to provide improved methods and systems for providing oversight of vehicle systems, for example, to help ensure safety. Additionally, other desirable features and characteristics of the present disclosure will become apparent from the subsequent detailed description and the appended claims, taken in conjunction with the accompanying drawings and the foregoing technical field and background. SUMMARY

[0004] In an example embodiment, a method is provided that includes determining, via a first processor, whether a potential safety issue exists related to control of one or more vehicle systems of a vehicle; providing, via the first processor, a communication along a communication bus of the vehicle, the communication including an indication of the potential safety issue; identifying, via a communication bus transceiver, the indication of the potential safety issue; and inhibiting control of the one or more vehicle systems when the indication of the potential safety issue is identified via the communication bus transceiver.

[0005] Also in an example embodiment, the communication bus includes a vehicle CAN communication bus; and the communication bus transceiver includes a CAN transceiver coupled to the vehicle CAN communication bus.

[0006] Also in an example embodiment, the step of identifying the indication includes identifying the indication of the potential safety issue via a pattern recognition with respect to a message received by the communication bus transceiver from the first processor along the communication bus.

[0007] Also in an example embodiment, the step of providing the communication includes providing, via the first processor, a separate message indicating the potential safety issue along the communication bus; and the step of identifying the indication includes identifying, via the communication bus transceiver, the separate message.

[0008] Also in an example embodiment, the step of providing the communication includes providing, via the first processor, a modified control message indicating the potential safety issue along the communication bus; and the step of identifying the indication includes identifying, via the communication bus transceiver, the modified control message.

[0009] Also in example embodiments, the step of providing the communication includes providing the communication to a second processor of the vehicle via the first processor along a communication bus of the vehicle, the communication including the instructions for control and the indication of the potential safety issue; and the step of inhibiting control of the one or more vehicle systems includes inhibiting implementation of the control instructions when the indication of the potential safety issue is identified via the communication bus transceiver.

[0010] Also in example embodiments, the step of providing the communication includes providing the communication to a second processor of the vehicle via the first processor along a communication bus of the vehicle, the communication including the instructions for control and the indication of the potential safety issue; and the step of inhibiting control of the one or more vehicle systems includes inhibiting implementation of the control instructions when the indication of the potential safety issue is identified via the communication bus transceiver.

[0011] In another example embodiment, a system is provided that includes a first processor and a communication bus transceiver. The first processor is configured to at least facilitate: determining whether there is a potential safety issue related to control of one or more vehicle systems of a vehicle; and providing a communication along a communication bus of the vehicle, the communication including an indication of the potential safety issue; and the communication bus transceiver is coupled to the first processor and is configured to at least facilitate: identifying the indication of the potential safety issue; and inhibiting control of the one or more vehicle systems when the indication of the potential safety issue is identified via the communication bus transceiver.

[0012] Also in example embodiments, the communication bus transceiver is configured to at least facilitate identifying the indication of the potential safety issue via pattern recognition with respect to messages received by the communication bus transceiver from the first processor along the communication bus.

[0013] Also in example embodiments, the first processor is configured to at least facilitate providing a separate message along the communication bus indicating the potential safety issue; and the communication bus transceiver is configured to at least facilitate identifying the indication by identifying the separate message.

[0014] Also in example embodiments, the first processor is configured to at least facilitate providing a modified control message along the communication bus indicating the potential safety issue; and the communication bus transceiver is configured to at least facilitate identifying the indication by identifying the modified control message.

[0015] Also in example embodiments, the first processor is configured to at least facilitate providing a communication to a second processor of the vehicle along a communication bus of the vehicle, the communication including instructions for control and an indication of a potential safety issue; and the communication bus transceiver is configured to at least facilitate inhibiting the control of the one or more vehicle systems by inhibiting implementation of the control instructions when the indication of the potential safety issue is identified via the communication bus transceiver.

[0016] Also in example embodiments, the communication bus transceiver is configured to at least facilitate inhibiting the control of the one or more vehicle systems by inhibiting output of instructions from the second processor for implementing the control when the communication bus transceiver identifies the indication of the potential safety issue.

[0017] In another example embodiment, a vehicle is provided that includes one or more vehicle systems, a communication bus, a first processor, and a communication bus transceiver. The first processor is configured to at least facilitate: determining whether there is a potential safety issue related to control of the one or more vehicle systems; and providing a communication along the communication bus of the vehicle, the communication including an indication of the potential safety issue. The communication bus transceiver is coupled to the first processor and is configured to at least facilitate: identifying the indication of the potential safety issue; and inhibiting the control of the one or more vehicle systems when the indication of the potential safety issue is identified via the communication bus transceiver.

[0018] Also in example embodiments, the communication bus includes a vehicle CAN communication bus; and the communication bus transceiver includes a CAN transceiver coupled to the vehicle CAN communication bus.

[0019] Also in example embodiments, the communication bus transceiver is configured to at least facilitate identifying the indication of the potential safety issue via a pattern recognition with respect to messages received by the communication bus transceiver from the first processor along the communication bus.

[0020] Also in example embodiments, the first processor is configured to at least facilitate providing a separate message along the communication bus indicating the potential safety issue; and the communication bus transceiver is configured to at least facilitate identifying the indication by identifying the separate message.

[0021] Also in example embodiments, the first processor is configured to at least facilitate providing a modified control message along the communication bus indicating the potential safety issue; and the communication bus transceiver is configured to at least facilitate identifying the indication by identifying the modified control message.

[0022] Also in example embodiments, the first processor is configured to at least facilitate providing communications to a second processor of the vehicle along a communication bus of the vehicle, the communications including instructions for control and an indication of a potential safety issue; and the communication bus transceiver is configured to at least facilitate inhibiting the control of the one or more vehicle systems by inhibiting implementation of the control instructions when the indication of the potential safety issue is identified via the communication bus transceiver.

[0023] Also in example embodiments, the communication bus transceiver is configured to at least facilitate inhibiting the control of the one or more vehicle systems by inhibiting an output from the second processor for implementing instructions for control when the communication bus transceiver identifies an indication of a potential safety issue. BRIEF DESCRIPTION OF DRAWINGS

[0024] The present disclosure will hereinafter be described in conjunction with the following drawings wherein like numerals denote like elements and wherein:

[0025] Figure 1 is a functional block diagram of a vehicle including a control system for providing supervision of one or more vehicle systems in accordance with example embodiments;

[0026] Figure 2 is a functional block diagram of a control system in accordance with example embodiments; Figure 1 and

[0027] Figure 3 is a flowchart of a process for providing supervision of one or more vehicle systems in accordance with example embodiments and the process can be implemented in conjunction with Figure 1 a vehicle of Figure 1 and Figure 2 a control system of DETAILED DESCRIPTION

[0028] The following detailed description is merely exemplary in nature and is not intended to limit the disclosure or the application and uses of it. Furthermore, there is no intention to be bound by any theory of operation presented in the preceding background or the following detailed description.

[0029] Figure 1 A vehicle 100 in accordance with example embodiments is shown. As described in further detail below, in accordance with example embodiments, the vehicle 100 includes a control system 102 configured for providing supervision of one or more vehicle systems in view of potential safety issues.

[0030] In various embodiments, the vehicle 100 comprises an automobile. The vehicle 100 can be any of a variety of different types of automobiles, such as a sedan, a four-door car, a truck, or a sport utility vehicle (SUV), and in certain embodiments can be two-wheel drive (2WD) (i.e., rear-wheel drive or front-wheel drive), four-wheel drive (4WD), or all-wheel drive (AWD) and / or various other types of vehicles. In certain embodiments, the vehicle 100 can also comprise a motorcycle or other vehicle, such as an airplane, a spacecraft, a boat, etc., and / or one or more other types of mobile platforms (e.g., robots and / or other mobile platforms).

[0031] The vehicle 100 includes a body 104 disposed on a chassis 116. The body 104 substantially encloses other components of the vehicle 100. The body 104 and the chassis 116 can collectively form a frame. The vehicle 100 also includes a plurality of wheels 112. The wheels 112 are each rotatably coupled to the chassis 116 near a respective corner of the body 104 to facilitate movement of the vehicle 100. In one embodiment, the vehicle 100 includes four wheels 112, although this can vary in other embodiments (e.g., for trucks and certain other vehicles).

[0032] The drive system 110 is mounted on the chassis 116 and drives the wheels 112, e.g., via the axles 114. In certain embodiments, the drive system 110 includes a propulsion system having a motor 111. In certain example embodiments, the motor 111 comprises an internal combustion engine, an electric motor / generator, and / or a hybrid motor, and the drive system 110 further includes a drive system coupled with a transmission thereof. In certain embodiments, the drive system 110 can vary, and / or two or more drive systems 110 can be used. By way of example, the vehicle 100 can also include any one or combination of a variety of different types of propulsion systems, such as a gasoline or diesel fuel combustion engine, a "flexible fuel vehicle" (FFV) engine (i.e., using a mixture of gasoline and alcohol), a gaseous compound (e.g., hydrogen and / or natural gas) fuel engine, a combustion / electric motor hybrid engine, and an electric motor and hybrid electric motor.

[0033] As Figure 1As shown, in various embodiments, the vehicle also includes a braking system 106 and a steering system 108. In exemplary embodiments, the braking system 106 controls braking of the vehicle 100 using braking components that are controlled via input provided by a driver (e.g., via a brake pedal in certain embodiments) and / or automatically via the control system 102 and / or via one or more other control systems of the vehicle 100. Also in exemplary embodiments, the steering system 108 controls steering of the vehicle 100 via steering components (e.g., steering columns coupled to axles 114 and / or wheels 112) that are controlled via input provided by a driver (e.g., via a steering wheel in certain embodiments) and / or automatically via the control system 102 and / or via one or more other control systems of the vehicle 100.

[0034] Also in various embodiments, the vehicle 100 also includes a plurality of other systems 109. In various embodiments, the other systems 109 can include a fuel pump system, a battery charging system, a fuel injector system, a vehicle light system (e.g., for illuminating a road on which the vehicle 100 is traveling), and / or any number of other different types of systems.

[0035] In various embodiments, the control system 102 controls operation of vehicle systems (including, but not limited to, the above-described vehicle systems 106, 108, 109, and 110), including providing oversight thereof (including modifying and / or disabling systems, etc., as appropriate for safety considerations).

[0036] As Figure 1 As depicted in various embodiments, the control system 102 includes a sensor array 130, a first controller 120, a second controller 122, a communication bus (e.g., a vehicle CAN bus) 124, one or more transceivers 126, one or more actuators 128, and the sensor array 130.

[0037] In various embodiments, the sensor array 130 includes various sensors that measure and / or obtain sensor data regarding operation of the vehicle 100 and its systems, including but not limited to potential problems and / or safety issues. In certain embodiments, the sensor array 130 includes one or more wheel speed sensors, a vehicle speed sensor, an engine speed sensor, an accelerometer, a temperature sensor, and / or other sensors related to operation of the vehicle 100 and its systems, including but not limited to potential problems and / or safety issues.

[0038] In various embodiments, the first controller 120 receives sensor data from the sensor array 130 and makes determinations regarding potential problems or safety issues with the vehicle 100 based on the sensor data. In certain embodiments, the first controller 120 receives the sensor data via the communication bus 124. In certain embodiments, one or more sensors of the sensor array 130 can be part of and / or otherwise coupled to the first controller 120.

[0039] Also in various embodiments, the first controller 120 provides instructions to the second controller 122 via the communication bus 124 for controlling various vehicle systems, such as the vehicle systems 106, 108, 109, and / or 110 described above, including in certain embodiments via one or more actuators 128 that are part of and / or coupled to the vehicle systems. Also in various embodiments, the first controller 120 provides oversight of the second controller 122, the vehicle systems, and the actuators 128 (when applicable), including by controlling commands for controlling the vehicle systems (e.g., in certain embodiments, commands for controlling the actuators 128 of the vehicle systems) in appropriate situations where there are potential problems or safety issues. Also in certain embodiments, the first controller 120 provides instructions for disabling and / or otherwise prohibiting control commands from the second controller 122 for controlling the vehicle systems (e.g., in certain embodiments, by prohibiting control commands to the actuators 128) in such situations where there are potential problems or safety issues, for example as set forth in further detail below in connection with the functional block diagram of the control system 102 of Figure 2 and the process 300 of Figure 3 In certain embodiments, the first controller 120 also includes a transceiver (e.g., a CAN transceiver) similar to the transceiver 126 described further below in connection with the second controller 122.

[0040] Additionally, in various embodiments, the second controller 122 receives instructions from the first controller 120 via the communication bus 124 and provides commands for controlling the vehicle systems (e.g., in certain embodiments, commands for operating the actuators 128) in accordance with the instructions. Figure 1

[0041] ​The second controller 122 includes or is coupled to transceiver 126. In various embodiments, transceiver 126 includes a CAN transceiver with pattern recognition capabilities to determine when the first processor 242 provides instructions to disable control of the vehicle system (e.g., in some embodiments, by disabling actuator 128), and to disable outputs from the second processor 262 (e.g., in some embodiments, disabling outputs from the second processor 262 to actuator 128) when the first processor 242 provides instructions to disable outputs. In various embodiments, the second controller 122 and transceiver 126 (together with the first controller 120) are combined... Figure 2 Functional block diagram of control system 102 and Figure 3 The process 300 provides these functions. In various embodiments, transceiver 126 includes a physical medium attachment device used in conjunction with a communication bus (e.g., a CAN bus).

[0042] Figure 2 This is according to an exemplary embodiment. Figure 1 Functional block diagram of control system 102. (See diagram below.) Figure 2 As shown, in various embodiments, the first controller 120 provides instructions for control commands 272 to the second controller 122 via a communication bus 124. These control commands 272 are provided from the second controller 122 for controlling the vehicle system (and / or, in some embodiments, for the actuator 128) to control its operation. Similarly, as... Figure 2 As shown, in various embodiments, transceiver 126 uses pattern recognition to determine when a problem or potential security issue exists based on messages provided by the first controller 120. Additionally, as... Figure 2 As shown, transceiver 126 blocks the output of second controller 122 via one or more transceiver actions 270, thereby providing safety control of the vehicle system (e.g., via actuator 128 in some embodiments).

[0043] Similarly, Figure 2 As shown, the first controller 120 and the second controller 122 each include a corresponding first computer system 240 and a second computer system 260, as described in more detail below with reference to exemplary embodiments. In various embodiments, the first computer system 240 and the second computer system 260 may respectively include the first controller 120 and the second controller 122.

[0044] like Figure 2 As shown, in an exemplary embodiment, the first computer system 240 includes a processor 242, a memory 244, an interface 246, a storage device 248, and a computer bus 250.

[0045] Processor 242 performs the computational and control functions of first computer system 240, and can include any type of processor or multiple processors, a single integrated circuit such as a microprocessor, or any suitable number of integrated circuit devices and / or circuit boards working in cooperation to perform the functions of a processing unit. During operation, processor 242 executes one or more programs 252 contained in memory 244, and thus controls the overall operation of first computer system 240 and the general operation of the computer system of which first computer system 240 is a part, typically in accordance with the Figure 3 Further described process 30.

[0046] Memory 244 can be any suitable type of memory. For example, memory 244 can include various types of dynamic random access memory (DRAM), such as synchronous DRAM (SDRAM), various types of static RAM (SRAM), and various types of non-volatile memory (PROM, EPROM, and flash memory). In some examples, memory 244 is on and / or co-located with processor 242 on the same computer chip(s). In the depicted embodiment, memory 244 stores programs 252 described above, as well as one or more stored values 274 (e.g., including one or more threshold values for providing supervision and / or control of vehicle system actions, in various embodiments).

[0047] Bus 250 serves to transmit program code, data, status, and other information or signals between the various components of first computer system 240. Interface 246 allows for communications from other computer systems or devices, such as from system drives and / or another computer system to first computer system 240, and can be implemented using any suitable method and apparatus for accomplishing such communication. In one embodiment, interface 246 obtains various data from sensor array 130, as well as other possible data sources. Interface 246 includes one or more network interfaces to communicate with other systems or components. In various embodiments, interface 246 includes one or more network interfaces for communicating with a technician, and / or one or more storage interfaces for connecting to storage devices, such as storage device 248.

[0048] Storage device 248 can be any suitable type of storage device, including various different types of direct access storage and / or other memory devices. In one example embodiment, storage device 248 includes a program product from which memory 244 can receive programs 252 that perform one or more embodiments of one or more processes of the present disclosure, such as process 30 described below in connection with FIG. 3. Figure 3The steps of process 300 are discussed further. In another exemplary embodiment, the program product may be stored directly in memory 244 and / or disk (e.g., disk 256) and / or otherwise accessed by memory 244 and / or disk (e.g., disk 256), such as the disk referenced below.

[0049] Bus 250 can be any suitable physical or logical device for connecting computer systems and components. This includes, but is not limited to, direct hardwired connections, fiber optic, infrared, and wireless bus technologies. During operation, program 252 is stored in memory 244 and executed by processor 242.

[0050] It should be understood that although this exemplary embodiment has been described in the context of a full-featured computer system, those skilled in the art will recognize that the mechanisms of this disclosure are capable of being distributed as a program product in which one or more types of non-transitory computer-readable signal-bearing media are used to store the program and its instructions and to perform its distribution. Non-transitory computer-readable media, such as those carrying a program and containing computer instructions stored therein, are used to cause a computer processor (such as processor 242) to execute and run the program. Such program products can take various forms, and this disclosure applies equally to any particular type of computer-readable signal-bearing medium used to perform the distribution. Examples of signal-bearing media include recordable media, such as floppy disks, hard disk drives, memory cards, and optical disks, and transmission media, such as digital and analog communication links. It should be understood that cloud-based storage and / or other technologies may also be utilized in some embodiments. It will be similarly understood that the first computer system 240 may also be otherwise connected to… Figure 2 The embodiments depicted differ from those described herein, for example, by coupling to or otherwise utilizing one or more remote computer systems and / or other control systems.

[0051] Similarly, Figure 2 As shown, in various embodiments, the second computer system 260 includes a processor 262, a memory 264 in which a program 272 and a stored value 274 are stored, a bus 124, an interface 266, a storage device 268 and / or a disk 276, having a structure and / or function similar to the corresponding components of the first computer system 240 as described above.

[0052] In addition, such as Figure 2As depicted in FIG. 1, in certain embodiments, the transceiver 126 (e.g., a CAN transceiver as described above) includes at least some processing capability, including one or more components such as one or more ASICs, controllers, processors, analog and / or digital components, for identifying and / or determining when potential problems or safety are involved based on pattern recognition of messages received by the transceiver 126 from the first controller 120 via the communication bus 124. In certain embodiments, the transceiver 126 includes one or more components for such identification and / or determination, such as one or more ASICs, controllers, processors, analog and / or digital components.

[0053] Figure 3 is a flowchart of a process 300 for providing oversight of one or more vehicle systems according to an exemplary embodiment. In various embodiments, the process 300 can be implemented in conjunction with Figure 1 the vehicle 100 of Figure 1 and Figure 2 the control system 102 of

[0054] As shown in FIG. 3, in various embodiments, the process 300 begins at step 302. In one embodiment, the process 300 begins when a vehicle drive or ignition cycle begins, such as when a driver approaches or enters the vehicle 100, or when the driver turns on the vehicle and / or its ignition (e.g., by turning a key, engaging a key fob or start button, etc.). In one embodiment, the steps of the process 300 are performed continuously during operation of the vehicle. Figure 3

[0055] Sensor data is obtained (step 304). In various embodiments, sensor data is obtained via the sensor array 130 of Figure 1 the vehicle 100, such as described above in connection with Figure 1 For example, in various embodiments, the sensor array includes values for wheel speed, vehicle speed, vehicle acceleration, motor speed, temperature, etc. related to operation of the vehicle and vehicle systems.

[0056] In various embodiments, a determination is made regarding the sensor data (step 306). In certain embodiments, the first processor 242 of Figure 1 determines Figure 1 ​preferred operating conditions of the various vehicle systems 106-110, and desired instructions for the vehicle systems and / or actuators 128 associated therewith. Moreover, in various embodiments, the first processor 242 also makes determinations regarding potential safety issues related to the actuators 128, vehicle systems, and / or vehicle 100. For example, in certain embodiments, the processor 242 makes one or more determinations as to whether the current and / or proposed operation of the vehicle systems (e.g., via the actuators 128 of the vehicle systems) causes any safety issues for the vehicle 100 (e.g., based on whether the actuators 128 are operating correctly and / or within range, whether the vehicle systems are operating correctly and / or within range, whether sensor values are within acceptable ranges, whether the processor 262 of the second controller 122 is operating within acceptable ranges, etc.).

[0057] A determination is made as to whether there are potential safety issues (step 308). In various embodiments, this determination is part of or based on the determinations or evaluations of step 306 via the first processor 242.

[0058] If it is determined that there are not potential safety issues, the process proceeds to step 310. During step 310, the first processor 242 generates standard messages for operation of the vehicle systems 106-110 and instructions for the actuators 128 of the vehicle systems and / or vehicle 100 to control such operation. Figure 2 For example, in certain embodiments, during step 310, the first processor 242 generates standard safety messages for commands that are to be provided to the actuators 128 of the vehicle systems 106-110 for controlling operation of the vehicle systems 106-110. Figure 2 For example, in certain embodiments, during step 310, the first processor 242 generates standard safety messages for commands that are to be provided to the actuators 128 of the vehicle systems 106-110 for controlling operation of the vehicle systems 106-110. Figure 1 For example, in certain embodiments, during step 310, the first processor 242 generates standard safety messages for commands that are to be provided to the actuators 128 of the vehicle systems 106-110 for controlling operation of the vehicle systems 106-110.

[0059] Conversely, if it is determined that there is one or more potential safety issues (e.g., related to the operation of the actuator 128 and / or vehicle systems 106-110 currently being discussed during this step), the first processor 242 generates one or more modified messages related to the potential safety issue (step 312). For example, in certain embodiments, during step 312, the first processor 242 generates a separate message reflecting the potential safety issue, or removes the message specifically identifying that the system should continue to operate and is healthy. In certain other embodiments, during step 312, the first processor 242 modifies the original or standard message (e.g., of step 310) to indicate the potential safety issue, such as by modifying the original or standard message (e.g., to include a unique message identification or different data byte that the transceiver has been configured to recognize and indicate receipt of).

[0060] After step 310 and / or 312, the communication is performed (step 314). In various embodiments, the communication is performed from the first controller 120 to the second controller 122 of the vehicle 100. In various embodiments, the communication includes any instructions for the vehicle systems and / or actuator 128 of the vehicle 100, and any potential safety issues related thereto. Also in various embodiments, the communication is performed along the communication bus 124 (e.g., the vehicle CAN bus) of the vehicle 100. In various embodiments, the communication includes or omits the message of step 310 and / or 312 that is sent via instructions provided by the first processor 242 and received by the second controller 122 and transceiver 126 of the vehicle 100. Figure 1 and Figure 2 In various embodiments, the communication includes any instructions for the vehicle systems and / or actuator 128 of the vehicle 100, and any potential safety issues related thereto. Also in various embodiments, the communication is performed along the communication bus 124 (e.g., the vehicle CAN bus) of the vehicle 100. In various embodiments, the communication includes or omits the message of step 310 and / or 312 that is sent via instructions provided by the first processor 242 and received by the second controller 122 and transceiver 126 of the vehicle 100. Figure 2 and Figure 1 In various embodiments, the communication includes any instructions for the vehicle systems and / or actuator 128 of the vehicle 100, and any potential safety issues related thereto. Also in various embodiments, the communication is performed along the communication bus 124 (e.g., the vehicle CAN bus) of the vehicle 100. In various embodiments, the communication includes or omits the message of step 310 and / or 312 that is sent via instructions provided by the first processor 242 and received by the second controller 122 and transceiver 126 of the vehicle 100. Figure 2 and Figure 1 In various embodiments, the communication includes any instructions for the vehicle systems and / or actuator 128 of the vehicle 100, and any potential safety issues related thereto. Also in various embodiments, the communication is performed along the communication bus 124 (e.g., the vehicle CAN bus) of the vehicle 100. In various embodiments, the communication includes or omits the message of step 310 and / or 312 that is sent via instructions provided by the first processor 242 and received by the second controller 122 and transceiver 126 of the vehicle 100. Figure 2 and In various embodiments, the communication includes any instructions for the vehicle systems and / or actuator 128 of the vehicle 100, and any potential safety issues related thereto. Also in various embodiments, the communication is performed along the communication bus 124 (e.g., the vehicle CAN bus) of the vehicle 100. In various embodiments, the communication includes or omits the message of step 310 and / or 312 that is sent via instructions provided by the first processor 242 and received by the second controller 122 and transceiver 126 of the vehicle 100.

[0061] Figure 2 In various embodiments, the communication includes any instructions for the vehicle systems and / or actuator 128 of the vehicle 100, and any potential safety issues related thereto. Also in various embodiments, the communication is performed along the communication bus 124 (e.g., the vehicle CAN bus) of the vehicle 100. In various embodiments, the communication includes or omits the message of step 310 and / or 312 that is sent via instructions provided by the first processor 242 and received by the second controller 122 and transceiver 126 of the vehicle 100. Figure 1 and In various embodiments, the communication includes any instructions for the vehicle systems and / or actuator 128 of the vehicle 100, and any potential safety issues related thereto. Also in various embodiments, the communication is performed along the communication bus 124 (e.g., the vehicle CAN bus) of the vehicle 100. In various embodiments, the communication includes or omits the message of step 310 and / or 312 that is sent via instructions provided by the first processor 242 and received by the second controller 122 and transceiver 126 of the vehicle 100.

[0062] In various embodiments, a determination is made whether an indication of a potential safety issue is identified by the transceiver (step 318). In various embodiments, this determination is made by the transceiver 126 based on the pattern recognition of step 316.

[0063] In various embodiments, if the message sent from the controller 1120 in step 318 does not indicate a potential safety issue, and thus the transceiver 126 did not observe a potential safety issue, then the actuator commands are provided normally (step 320). In certain embodiments, during step 320, Figure 1 The second processor 262 of the second controller 122 provides commands to the actuator 128 to operate the vehicle systems 106-110 (and / or in certain embodiments, the commands are provided directly to the vehicle systems) based on the instructions provided from the first processor 242, as reflected in the communicated messages of steps 310 and 314 (e.g., as initially determined based on the sensor data of step 304). Moreover, in various embodiments, the transceiver 126 does not inhibit these commands because no potential safety issue was detected. In various embodiments, these commands are then implemented (step 322) in operating the vehicle systems 106-110 (e.g., by the actuator 128 and / or by the vehicle systems themselves), and the process then proceeds to step 328 (described further below).

[0064] In contrast, in various embodiments, if the message sent from the controller 1120 and observed by the transceiver 126 in step 318 indicates a potential safety issue, then in contrast, the commands are inhibited or blocked (step 324). Specifically, in various embodiments, the transceiver 126 inhibits or blocks the output of the second controller 122 (i.e., its second processor 262) so that instructions are not provided to the actuator 128 and / or the vehicle systems. Thus, in various embodiments, the actuator is stopped and / or the vehicle systems are stopped (step 326) in view of the potential safety issue (e.g., causing operation of the vehicle systems 106-110 to cease). For example, in certain embodiments, during steps 324 and 326, fuel injectors, lights, or other components can be turned off completely, or can be fixed to an existing state (e.g., on or off).

[0065] During step 328, a determination is made whether the process 300 is complete. For example, in certain embodiments, the process 300 is determined to be complete when the vehicle 100 is turned off, and / or if the function or system using the process 300 is turned off, etc.

[0066] In various embodiments, if the process 300 is not complete, then the process 300 returns to step 304 in a new iteration. In various embodiments, new and updated sensor information is utilized in the new iteration of the process 300, starting with step 304, and the process 300 continues.

[0067] In contrast, in various embodiments, if the determination process 300 is complete, the process 300 terminates at step 330.

[0068] Accordingly, methods, systems, and vehicles for providing oversight of vehicle systems and control over potential safety issues are provided. In various embodiments, a communication bus (e.g., CAN bus) transceiver utilizes pattern recognition of messages obtained from a first controller along the communication bus to identify potential safety issues, and when a potential safety issue is identified, stops an actuator and / or vehicle system operation (and / or change thereof) by preventing an output of a second controller.

[0069] In various embodiments, the methods, systems, and vehicles provide independence for vehicle components and systems, such as those required by safety standards such as ISO 26262.

[0070] It should be appreciated that the systems, vehicles, and methods can vary from the systems, vehicles, and methods depicted in the figures and described herein. For example, Figure 2 the vehicle 100, Figure 3 and Figure 3 the control system 102 and / or components thereof can vary in different embodiments. It will be similarly appreciated that the steps of the process 300 can vary from the steps depicted in ​ and / or individual steps of the process 300 can occur simultaneously and / or in a different order than depicted in ​ .

[0071] While at least one example embodiment has been presented in the foregoing detailed description, it should be appreciated that a vast number of modifications exist. It should also be appreciated that the example embodiment(s) are only examples and are not intended to limit the scope, applicability, or configuration of the disclosure in any way. Rather, the foregoing detailed description will provide those skilled in the art with a convenient road map for implementing an example embodiment of the disclosure. It should be understood that various changes can be made in the function and arrangement of elements without departing from the scope of the disclosure as set forth in the appended claims and their legal equivalents.

Claims

1. A method of providing safe hardware control, comprising: providing, via a first processor on a vehicle, instructions for controlling one or more vehicle systems of the vehicle, the vehicle systems controlling operation of the vehicle, the one or more vehicle systems including one or more actuators; providing, via a second processor disposed on the vehicle and coupled between the first processor and the one or more vehicle systems via a communication bus, the second processor configured to provide commands for controlling the one or more vehicle systems via the one or more actuators in accordance with the instructions received from the first processor; providing, via the first processor, supervision and control of the second processor and the one or more vehicle systems, including disabling or inhibiting commands from the second processor for controlling the one or more vehicle systems; determining, via the first processor, whether there is a potential safety issue related to control of the one or more vehicle systems of the vehicle, wherein the potential safety issue is deemed to exist when the one or more actuators are operating outside of a predetermined acceptable range of values, based on vehicle sensor data; providing, via the first processor, communication along the communication bus of the vehicle, the communication including an indication of the potential safety issue and a modification instruction for disabling or inhibiting commands of the second processor to the one or more actuators of the one or more vehicle systems; identifying, via the communication bus transceiver, the modification instruction and the indication of the potential safety issue from the first processor by pattern recognition; and inhibiting the control of the one or more vehicle systems by disabling or inhibiting commands from the second processor to the one or more actuators of the one or more vehicle systems in accordance with the modification instruction provided by the first processor when the indication of the potential safety issue is identified via the communication bus transceiver.

2. The method of providing safe hardware control of claim 1, wherein: the communication bus comprises a vehicle CAN communication bus; and the communication bus transceiver comprises a CAN transceiver coupled to the vehicle CAN communication bus.

3. The method of providing safe hardware control of claim 1, wherein the step of identifying the indication comprises identifying the indication of the potential safety issue via pattern recognition with respect to a message received by the communication bus transceiver from the first processor along the communication bus.

4. The method of providing safe hardware control of claim 1, wherein: the step of providing the communication comprises providing, via the first processor, a separate message along the communication bus indicating the potential safety issue; and the step of identifying the indication comprises identifying, via the communication bus transceiver, the separate message.

5. The method of providing safe hardware control of claim 1, wherein: the step of providing the communication comprises providing, via the first processor, a modified control message along the communication bus, the modified control message indicating the potential safety issue; and the step of identifying the indication comprises identifying, via the communication bus transceiver, the modified control message.

6. The method of providing safe hardware control of claim 1, wherein: The step of providing the communication includes providing a communication to a second processor of the vehicle along the communication bus of the vehicle via the first processor, the communication including instructions for control and the indication of the potential safety issue; and The step of inhibiting control of the one or more vehicle systems includes inhibiting implementation of the control instructions when the indication of the potential safety issue is identified via the communication bus transceiver.

7. The method of providing safety hardware control of claim 6, wherein: The step of inhibiting control of the one or more vehicle systems includes inhibiting output from the second processor for implementing control instructions via the communication bus transceiver when the indication of the potential safety issue is identified via the communication bus transceiver.

8. A vehicle comprising: one or more vehicle systems including one or more actuators, the vehicle systems controlling operation of the vehicle; a communication bus; a first processor disposed on the vehicle and configured to provide instructions for controlling the one or more vehicle systems; and a second processor disposed on the vehicle and coupled between the first processor and the one or more vehicle systems via the communication bus, the second processor configured to receive the instructions from the first processor and provide commands in accordance with the instructions for controlling the one or more vehicle systems via the one or more actuators; wherein the first processor is connected to the second processor via the communication bus and is further configured to at least facilitate: providing supervision and control of the second processor and the one or more vehicle systems including disabling or inhibiting commands from the second processor for controlling the one or more vehicle systems; determining whether a potential safety issue exists related to control of the one or more vehicle systems, wherein the potential safety issue is deemed to exist based on vehicle sensor data when the one or more actuators are operating outside of a predetermined acceptable range of values; and providing a communication along the communication bus of the vehicle, the communication including an indication of the potential safety issue, wherein the first processor is configured to provide the communication including the indication of the potential safety issue and modification instructions for disabling or inhibiting commands of the second processor to the one or more actuators of the one or more vehicle systems; and a communication bus transceiver coupled to the first processor and configured to at least facilitate: identifying the indication of the potential safety issue and the modification instructions from the first processor via pattern recognition; and inhibiting the control of the one or more vehicle systems by disabling or inhibiting commands from the second processor to the one or more actuators of the one or more vehicle systems in accordance with the modification instructions provided by the first processor when the indication of the potential safety issue is identified via the communication bus transceiver.

9. The vehicle of claim 8, wherein: the first processor is configured to at least facilitate providing communications to a second processor of the vehicle along the communication bus of the vehicle, the communications including instructions for control and the indication of the potential safety issue; and the communication bus transceiver is configured to at least facilitate inhibiting the control of the one or more vehicle systems by inhibiting implementation of the control instructions when the indication of the potential safety issue is identified via the communication bus transceiver.

10. The vehicle of claim 9, wherein, the communication bus transceiver is configured to at least facilitate inhibiting the control of the one or more vehicle systems by inhibiting output from the second processor for implementing control instructions when the indication of the potential safety issue is identified via the communication bus transceiver.

Images