Safety system for a vehicle and method for operating a vehicle having a safety system

Abstract

Safety system (100) for a vehicle, comprising a sensor unit (110) for detecting vehicle characteristics, driver characteristics and environmental characteristics and a central control unit (120), wherein the central control unit (120) comprises means for comparing (121) the detected vehicle characteristics, driver characteristics and environmental characteristics with stored vehicle characteristics, driver characteristics and environmental characteristics and means for triggering (122) an action relating to the operation of the vehicle depending on a result of the comparison of the characteristics, wherein the central control unit (120) comprises means for calculating (123) a potential for the operation of the vehicle,wherein the central control unit (120) is designed taking into account a result of the calculation of the potential when triggering the action and wherein the means for calculating (123) comprise means for calculating (124) a potential of the vehicle to operate the vehicle and means for calculating (125) a potential of a human driver to operate the vehicle.

Description

[0001] The present invention relates to a safety system for a vehicle, comprising a sensor unit for detecting vehicle characteristics, driver characteristics and environmental characteristics and a central control unit, wherein the central control unit has means for comparing the detected vehicle characteristics, driver characteristics and environmental characteristics with stored vehicle characteristics, driver characteristics and environmental characteristics and means for triggering an action relating to the operation of the vehicle depending on a result of the comparison of the characteristics.

[0002] Furthermore, the present invention relates to a method for operating a vehicle having a safety system, comprising the steps of: detecting vehicle characteristics, driver characteristics and environmental characteristics by means of a sensor unit of the safety system; comparing the detected vehicle characteristics, driver characteristics and environmental characteristics with stored vehicle characteristics, driver characteristics and environmental characteristics in a central control unit of the safety system; and triggering an action relating to the operation of the vehicle depending on a result of the comparison of the characteristics by means of the central control unit.

[0003] Such safety systems and methods for operating them are known in the prior art. For example, patent application WO 2009 / 071 345 A1 describes a vehicle with several driver assistance systems controlled by a central control unit. At least one of the driver assistance systems is equipped with environmental sensors. The acquired sensor information is evaluated in the central control unit, and status and control commands are fed back to the driver assistance systems. A preferred driver assistance system is an emergency braking system. During the evaluation, non-redundant sensor information is checked using analytical redundancies to achieve the required level of safety necessary for autonomous interventions by the control unit in the vehicle's driving dynamics.An autonomous intervention, such as emergency braking, is an intervention for which neither explicit nor implicit consent from the vehicle's driver is requested. A disadvantage of the described safety system or procedure is that, in the event of an overload of the safety system, the autonomous intervention occurs too late or not at all, which regularly leads to very serious accidents.

[0004] It is therefore an object of the present invention to provide a safety system and a method of the type mentioned at the outset which enable the safe operation of the vehicle.

[0005] To solve the device problem, the present invention proposes a safety system of the type mentioned above, wherein the central control unit comprises means for calculating a potential for operating the vehicle, and wherein the central control unit is designed to take into account the result of the potential calculation when triggering the action. A potential for operating the vehicle within the meaning of the present invention is the ability to operate the vehicle in a controlled manner without overloading resources and infrastructure. The safety system according to the invention is advantageously designed to trigger semi-autonomous or autonomous actions under the premise that the vehicle or its driver is not, and will not become, overloaded. Thus, overloading of the vehicle and the driver is avoided, and safe operation of the vehicle is ensured.

[0006] In a particularly advantageous embodiment of the present invention, the means for calculating the vehicle's potential to operate the vehicle and the potential of a human driver to operate the vehicle are provided. Determining these two potentials is particularly useful since, as a rule, only the vehicle or its human driver is capable of operating the vehicle. The means for calculating the vehicle's potential and the means for calculating the driver's potential use the recorded and / or stored vehicle characteristics, driver characteristics, and environmental characteristics to comprehensively assess the current operating situation of the vehicle. One result of this assessment is the calculated probabilities for the vehicle and the driver to successfully manage the current operating situation.Exemplary vehicle characteristics include: vehicle identification number, maximum positive acceleration, maximum negative acceleration, current speed, turning circle, permissible total weight, fault status, maximum processor performance, current processor load, and coolant temperature. Exemplary driver characteristics include: person, age, official driver's license, preferred driving style (e.g., sport, comfort, or eco), driving skill, health, attentiveness, and driving intention. Exemplary environmental characteristics include: route, road layout, road surface condition, precipitation, outside temperature, traffic volume, obstacles in the direction of travel, and specifications from authorized third parties, such as the police, original equipment manufacturers, or vehicle insurers. Furthermore, the present invention essentially encompasses the potential for a remote control to operate the vehicle.The remote controller can be a human operator located remotely from the vehicle or a control device located remotely from the vehicle. In these cases, the means of calculation include means of calculating a remote controller's potential to operate the vehicle.

[0007] In a highly advantageous embodiment of the present invention, the triggering means include means for transferring control of the vehicle to the vehicle. In another highly advantageous embodiment of the present invention, the triggering means include means for transferring control of the vehicle to a human driver. The potentials provided by the computational means serve as a basis for deciding who or what retains or receives control of the vehicle. If, on the one hand, the potential calculated for the vehicle is greater than the potential calculated for the driver, control of the vehicle should remain with the vehicle in order to ensure the safest possible operation of the vehicle. If control of the vehicle already resides with the vehicle, i.e., the vehicle is driving autonomously, the triggering means do not initiate any action.If the driver is in control of the vehicle, the means for transferring control to the vehicle trigger the action "Transferring control to the vehicle." Conversely, if the potential calculated for the vehicle is lower than the potential calculated for the driver, control should remain with the driver to ensure the safest possible operation. If the driver is already in control of the vehicle, meaning the vehicle is being driven by the driver, the means for triggering the action do not trigger any action. If the vehicle is in control, the means for transferring control to the driver trigger the action "Transferring control to the vehicle."Based on a holistic assessment of the vehicle's current operating situation, the safety system logically decides who or what should take control of the vehicle and, if necessary, transfers control depending on the outcome of this holistic assessment. Examples of vehicle-driver-environment constellations and their corresponding actions are: high speed, a tired driver, and an obstacle ahead result in autonomous emergency braking by the vehicle; high speed, an experienced driver, and a curve ahead result in no action; and high speed, a novice driver, and a curve ahead result in autonomous controlled braking by the vehicle to a speed appropriate for the curve.

[0008] In an advantageous embodiment of the present invention, the safety system includes a storage unit for the non-volatile storage of vehicle, driver, and environmental characteristics. This allows the storage unit to store characteristics that can be used for comparison with the recorded vehicle, driver, and environmental characteristics. Such a local storage unit within the vehicle makes the vehicle independent with respect to a data connection to a remotely located data source. The safety system thus functions, for example, even in regions with poor mobile network coverage.

[0009] Alternatively or additionally to the previous embodiment of the present invention, it is provided that the safety system includes a communication unit for retrieving vehicle, driver, and environmental properties stored remotely by the safety system. The communication unit is preferably designed for wireless communication. By means of the communication unit, the vehicle is in a permanent data connection to a remotely located data source, for example, a data server, a data network, or a data cloud, which enables centralized management and provision of the vehicle, driver, and environmental properties.For example, agencies, authorities, or companies (such as the police, original equipment manufacturers, or vehicle insurers) can identify a reported stolen vehicle using its vehicle identification number (VIN) and mark it as stolen. This defines an insurmountable potential in favor of the vehicle, along with a command that the vehicle will automatically immobilize itself. In the subsequent calculation cycle of potentials, the vehicle's insurmountable potential results in control of the vehicle remaining with the vehicle or being transferred to the vehicle, allowing it to immobilize itself as commanded. It is also conceivable that the vehicle insurer could specify a maximum permissible driving style based on driver characteristics to preclude accident-prone combinations of vehicle, driver, and environmental factors.Generally, specifications from authorized third parties regarding environmental characteristics can serve as a basis for controlling the vehicle. The communication unit is preferably also designed for vehicle-to-vehicle communication.

[0010] In a further advantageous embodiment of the present invention, the safety system features a human-machine interface for displaying the action. The human-machine interface informs the driver about often inconspicuous actions and allows them to maintain an overview of the vehicle's operating situation. For example, the characteristics of freezing outside temperature, onset of precipitation, and a winding road lead to the action of limiting the maximum travel speed to 80 km / h, which is signaled to the driver by means of a visual display and / or a rebounding accelerator pedal. Generally, the human-machine interface is designed to address any of the driver's sensory channels. Preferred sensory channels are sight, hearing, and touch.

[0011] To solve the problem described above, the present invention proposes a method of the type mentioned above, wherein the method comprises the step of calculating a potential for operating the vehicle, taking into account the result of the potential calculation when the action is triggered. The advantages and effects described for the safety system also apply to the method according to the invention, which is suitable for operating the safety system. In this respect, the method enables the safe operation of the vehicle.

[0012] In a very advantageous embodiment of the present invention, it is provided that the step of calculating the potential to operate the vehicle comprises calculating a potential of the vehicle to operate the vehicle and calculating a potential of a human driver to operate the vehicle.

[0013] In a highly advantageous embodiment of the present invention, the step of triggering the action comprises transferring control over the vehicle to the vehicle.

[0014] In another highly advantageous embodiment of the present invention, which is an alternative to the previous embodiment, the step of triggering the action comprises transferring control of the vehicle to a human driver.

[0015] In a very advantageous embodiment of the present invention, it is provided that the step of comparing the properties includes retrieving vehicle properties, driver properties and environmental properties stored non-volatilely in a storage unit of the safety system.

[0016] In a further highly advantageous embodiment of the present invention, the step of comparing the properties comprises retrieving vehicle properties, driver properties, and environmental properties stored remotely by the safety system using a communication unit of the safety system. Retrieving locally stored properties and retrieving remotely stored properties can be provided alternatively or cumulatively in the method according to the invention.

[0017] In an advantageous embodiment of the present invention, the method comprises the step of representing the action by means of a human-machine interface of the safety system.

[0018] The present invention is described in a preferred embodiment by way of example with reference to the drawings, with further advantageous details being shown in the figures of the drawings.

[0019] The figures in the drawings show, in detail: Fig. 1 a schematic representation of a security system according to the present invention; and Fig. 2 a flowchart of a process according to the present invention.

[0020] The Fig. Figure 1 shows a schematic representation of a safety system 100 according to the present invention. The safety system 100 is intended for a vehicle, in particular a motor vehicle, preferably a passenger car or a commercial vehicle. The safety system 100 comprises a sensor unit 110 for detecting vehicle characteristics, driver characteristics, and environmental characteristics, and a central control unit 120, wherein the central control unit 120 has means for comparing 121 the detected vehicle characteristics, driver characteristics, and environmental characteristics with stored vehicle characteristics, driver characteristics, and environmental characteristics, and means for triggering 122 an action relating to the operation of the vehicle depending on the result of the comparison of the characteristics.A key aspect of the invention is that the central control unit 120 comprises means for calculating 123 a potential for operating the vehicle, wherein the central control unit 120 is designed to take into account the result of the potential calculation when triggering the action. The means for calculating 123 comprise means for calculating 124 a potential of the vehicle for operating the vehicle and means for calculating 125 a potential of a human driver for operating the vehicle. The means for triggering 122 comprise means for transferring 126 control of the vehicle to the vehicle and means for transferring 127 control of the vehicle to a human driver. Furthermore, the safety system 100 comprises a storage unit 130 for non-volatile storage of vehicle properties, driver properties, and environmental properties to be stored.Additionally, the safety system 100 has a communication unit 140 for retrieving vehicle properties, driver properties, and environmental properties stored remotely by the safety system 100. Furthermore, the safety system 100 has a human-machine interface 150 for displaying the action. In . Fig. The functional connections between the individual units and means are not shown. These functional connections are preferably designed as electrically conductive connections for transmitting electrical signals in which relevant information is encoded.

[0021] The Fig. Figure 2 shows a flowchart of a method according to the present invention. The method is suitable for operating a vehicle having a safety system 100. The method comprises the steps: acquiring vehicle characteristics, driver characteristics, and environmental characteristics S210 by means of a sensor unit 110 of the safety system 100; comparing the acquired vehicle characteristics, driver characteristics, and environmental characteristics with stored vehicle characteristics, driver characteristics, and environmental characteristics S220 in a central control unit 120 of the safety system 100; and triggering an action S240 relating to the operation of the vehicle depending on a result of the comparison of the characteristics S220 by means of the central control unit 120.A key aspect of the invention is that the method comprises the step of calculating a potential for operating the vehicle S230, wherein a result of the calculation of potential S230 is taken into account when triggering action S240. For this purpose, the step of calculating the potential for operating the vehicle S230 comprises calculating a potential of the vehicle to operate the vehicle S231 and calculating a potential of a human driver to operate the vehicle S232. Furthermore, the step of triggering action S240 comprises transferring control of the vehicle to the vehicle S241 or transferring control of the vehicle to a human driver S242.The step of comparing properties S220 comprises retrieving vehicle properties, driver properties, and environmental properties S221 stored non-volatilely in a memory unit 130 of the safety system 100, and retrieving vehicle properties, driver properties, and environmental properties S222 stored remotely by the safety system 100 using a communication unit 140 of the safety system 100. Finally, the procedure comprises the step of representing the action S250 using a human-machine interface 150 of the safety system 100. The steps are preferably in the in . Fig. The steps are carried out in the sequence shown in point 2. Further steps before, between, or after the described steps are conceivable and technically feasible according to the invention. Reference sign 100 security system 110 sensor unit 120 Central control unit 121 means of comparison 122 means of triggering 123 means of calculation 124 means of calculation 125 means of calculation 126 means of handing over 127 means of handing over 130 storage units 140 communication unit 150 Human-Machine Interface S210 Capturing the properties S220 Comparing the properties S221 Retrieving properties stored in the storage unit S222 Retrieving remotely stored properties S230 Calculating the potential S231 Calculating the vehicle's potential S232 Calculating the potential of the human driver S240 Triggering the action relating to the operation of the vehicle S241 Transferring control of the vehicle to the vehicle S242 Handing over control of the vehicle to the human driver S250 Depicting the action

Claims

Safety system (100) for a vehicle, comprising a sensor unit (110) for detecting vehicle characteristics, driver characteristics and environmental characteristics and a central control unit (120), wherein the central control unit (120) comprises means for comparing (121) the detected vehicle characteristics, driver characteristics and environmental characteristics with stored vehicle characteristics, driver characteristics and environmental characteristics and means for triggering (122) an action relating to the operation of the vehicle depending on a result of the comparison of the characteristics, wherein the central control unit (120) comprises means for calculating (123) a potential for the operation of the vehicle,wherein the central control unit (120) is designed taking into account a result of the calculation of the potential when triggering the action and wherein the means for calculating (123) comprise means for calculating (124) a potential of the vehicle to operate the vehicle and means for calculating (125) a potential of a human driver to operate the vehicle. Safety system (100) according to claim 1, characterized in that the means for triggering (122) comprise means for transferring (126) control over the vehicle to the vehicle. Safety system (100) according to one of the preceding claims, characterized in that the means for triggering (122) comprise means for transferring (127) control of the vehicle to a human driver. Security system (100) according to one of the preceding claims, characterized in that the security system (100) has a storage unit (130) for non-volatile storage of vehicle properties, driver properties and environmental properties to be stored. Safety system (100) according to one of the preceding claims, characterized in that the safety system (100) has a communication unit (140) for retrieving vehicle properties, driver properties and environmental properties stored remotely by the safety system (100). Safety system (100) according to one of the preceding claims, characterized in that the safety system (100) has a human-machine interface (150) for displaying the action. Method for operating a vehicle having a safety system (100), comprising the steps of: acquiring vehicle characteristics, driver characteristics and environmental characteristics (S210) by means of a sensor unit (110) of the safety system (100); comparing the acquired vehicle characteristics, driver characteristics and environmental characteristics with stored vehicle characteristics, driver characteristics and environmental characteristics (S220) in a central control unit (120) of the safety system (100);and triggering an action (S240) relating to the operation of the vehicle depending on a result of comparing the properties (S220) by means of the central control unit (120), wherein the method includes the step of calculating a potential to operate the vehicle (S230), wherein a result of the calculation of the potential (S230) is taken into account when triggering the action (S240), and wherein the step of calculating the potential to operate the vehicle (S230) includes a calculation of a potential of the vehicle to operate the vehicle (S231) and a calculation of a potential of a human driver to operate the vehicle (S232). Method according to claim 7, characterized in that the step of triggering the action (S240) comprises transferring control of the vehicle to the vehicle (S241). Method according to claim 7, characterized in that the step of triggering the action (S240) comprises transferring control of the vehicle to a human driver (S242). Method according to one of claims 7 to 9, characterized in that the step of comparing the properties (S220) comprises retrieving vehicle properties, driver properties and environmental properties (S221) stored non-volatilely in a storage unit (130) of the safety system (100). Method according to one of claims 7 to 10, characterized in that the step of comparing the properties (S220) comprises retrieving vehicle properties, driver properties and environmental properties (S222) stored remotely by the safety system (100) by means of a communication unit (140) of the safety system (100). Method according to one of claims 7 to 11, characterized in that the method comprises the step of representing the action (S250) by means of a human-machine interface (150) of the safety system (100).

Images