VEHICLE SAFETY SYSTEMS AND PROCEDURES

Abstract

Procedure, comprehensive: Receiving a destination and a route to the destination that an autonomous vehicle is to follow while transporting a minor passenger, by a vehicle safety system; Identifying one of the access keys assigned to the route by the vehicle security system; Transmitting the access key to a user designated to meet the autonomous vehicle at the destination and to assume responsibility for the minor passenger at the destination; and Unlocking the doors of the autonomous vehicle at the destination in response to confirmation by the vehicle security system that the user, who is intended to meet the autonomous vehicle at the destination, is in possession of the access key and is present at the destination.

Description

TECHNICAL AREA

[0001] The present disclosure relates to vehicle systems and in particular to systems and methods that secure the vehicle and its occupants. GENERAL STATE OF THE ART

[0002] Automobiles and other vehicles provide a significant portion of transportation for commercial, governmental, and private entities. Vehicles, including autonomous vehicles, travel on roads, parking lots, and other areas when transporting passengers or goods from one place to another. One example of an application for autonomous vehicles is operating as a taxi or shuttle service, picking up one or more passengers in response to a transportation request. When operating as a taxi or shuttle, the autonomous vehicle travels to a pickup location, allowing a passenger requesting the service to board. The vehicle then travels to a destination, enabling the passenger to disembark. In some situations, additional safety measures are desirable, such as when transporting children without adults in the autonomous vehicle.

[0003] The closest state of the art is considered to be the publications DE 10 2017 000 560 A1, DE 10 2017 200 151 A1 and DE 10 2017 120 189 A1. BRIEF DESCRIPTION OF THE INVENTION

[0004] The invention relates to a method and a device having the features of independent claims 1 and 14. Advantageous embodiments of the invention are described in the dependent claims. BRIEF DESCRIPTION OF THE DRAWINGS

[0005] Non-restrictive and non-exhaustive embodiments of the present disclosure are described with respect to the following figures, wherein in the various figures the same reference numerals refer to the same parts, unless otherwise stated. Fig. Figure 1 is a block diagram illustrating an embodiment of a vehicle control system that includes a vehicle safety system. Fig. Figure 2 is a block diagram illustrating one embodiment of a vehicle safety system. Fig. Figure 3 illustrates an embodiment of a vehicle with multiple cameras and other sensors for monitoring the interior and exterior of the vehicle. Fig. Figures 4A-4B illustrate an embodiment of a method for providing safe transport of a child in an autonomous vehicle to a destination. Fig. Figure 5 is a block diagram illustrating an embodiment for validating a user who picks up a child in an autonomous vehicle at a destination. Fig. Figure 6 illustrates an embodiment of a method for controlling a child's access to an autonomous vehicle. Fig. Figure 7 illustrates an embodiment of a method for monitoring a child traveling in an autonomous vehicle and for detecting potential problems with the child. DETAILED DESCRIPTION

[0006] The following disclosure refers to the accompanying drawings, which form part thereof and show specific implementations for illustration in which the disclosure can be carried out. It is understood that other implementations may be used and structural changes made without deviating from the scope of the present disclosure. References in the description to "an embodiment," "an exemplary embodiment," etc., indicate that the described embodiment may include a particular feature, structure, or property; however, not every embodiment necessarily includes that particular feature, structure, or property. Furthermore, such formulations do not necessarily refer to the same embodiment.Furthermore, it should be noted that if a particular feature, structure or property is described in connection with an embodiment, it is within the scope of the skilled person's knowledge to implement this feature, structure or property in connection with other embodiments, whether this is expressly described or not.

[0007] Embodiments of the systems, devices, and methods disclosed herein may include or utilize a specialized or general-purpose computer, which, as discussed herein, includes computer hardware such as one or more processors and one or more system memories. Embodiments within the scope of this disclosure may also include physical and other computer-readable media for carrying or storing computer-executable instructions and / or data structures. Such computer-readable media may be any available media accessible via a general-purpose or specialized computer system. Computer-readable media on which computer-executable instructions are stored are computer storage media (devices). Computer-readable media carrying computer-executable instructions are transmission media.Therefore, implementations of the disclosure may, for example, and not limitingly, include at least two distinctly different types of computer-readable media: computer storage media (devices) and transmission media.

[0008] Computer storage media (devices) include RAM, ROM, EEPROM, CD-ROM, solid state drives (“SSDs”) (e.g., based on RAM), flash memory, phase-change memory (“PCM”), other types of storage, other optical disk storage, magnetic disk storage or other magnetic storage devices, or any other medium that can be used to store desired program code resources in the form of computer-executable instructions or data structures and that can be accessed by a general-purpose or specialized computer.

[0009] An implementation of the devices, systems, and methods disclosed herein can communicate via a computer network. A "network" is defined as one or more data connections that enable the transport of electronic data between computer systems and / or modules and / or other electronic devices. When information is provided to or transmitted to a computer via a network or other communication link (either wired, wireless, or a combination of wired and wireless), the computer correctly views the link as a transmission medium. Transmission media can include a network and / or data links that can be used to transport desired program code resources in the form of computer-executable instructions or data structures and that can be accessed by a general-purpose or specialized computer.Combinations of the foregoing should also be included in the scope of computer-readable media.

[0010] Computer-executable instructions include, for example, instructions and data that, when executed on a processor, cause a general-purpose computer, a specialized computer, or a specialized processing device to perform a specific function or group of functions. Computer-executable instructions can be, for example, binary files, intermediate format instructions such as assembly language, or source code. Although the subject matter is described in a language specific to structural features and / or methodological actions, it is understood that the subject matter defined in the appended claims is not necessarily limited to the features or actions described therein. Rather, the described features and actions are disclosed as exemplary forms of implementation of the claims.

[0011] The person skilled in the art will understand that the disclosure can be applied in network computing environments with many types of computer system configurations, including dashboard vehicle computers, PCs, desktop computers, laptops, message processors, handheld devices, multiprocessor systems, microprocessor-based or programmable consumer electronics, network PCs, minicomputers, mainframe computers, mobile phones, PDAs, tablets, pagers, routers, switches, various storage devices, and the like. The disclosure can also be implemented in distributed system environments where both local computer systems and remote computer systems connected by a network (either by wired data links, wireless data links, or a combination of wired and wireless data links) perform tasks.In a distributed systems environment, program modules can reside in both local and remote storage devices.

[0012] Furthermore, the functions described herein may optionally be performed in one or more of the following: hardware, software, firmware, digital components, or analog components. One or more application-specific integrated circuits (ASICs), for example, may be programmed to perform one or more of the systems and operations described herein. Certain terms are used throughout the description and in the claims to refer to specific system components. The person skilled in the art will understand that components may be referred to by different designations. In this document, no distinction is made between components that differ in designation but not in function.

[0013] It should be noted that the sensor embodiments discussed herein may include computer hardware, software, firmware, or any combination thereof to perform at least some of their functions. For example, a sensor may include computer code configured to run on one or more processors and may include a hardware logic / electrical circuit controlled by the computer code. These exemplary devices are provided herein for illustrative purposes and are not intended to be limiting. Embodiments of the present disclosure may be implemented in other types of devices, as is known to the person skilled in the art.

[0014] At least some embodiments of the disclosure are applied to computer program products that include such logic (e.g., in the form of software) stored on any computer-usable medium. When executed in one or more data processing devices, such software causes a device to operate as described herein.

[0015] Fig. Figure 1 is a block diagram illustrating an embodiment of a vehicle control system 100 in a vehicle that includes a vehicle safety system 104. An automated driving / assistance system 102 can be used to automate or control the operation of a vehicle or to assist a human driver. For example, the automated driving / assistance system 102 can control one or more of the vehicle's braking, steering, seatbelt tension, acceleration, lights, warnings, driver notifications, radio, vehicle locking, or any other assistance systems. In another example, the automated driving / assistance system 102 may not be able to control any driving function (e.g.,While providing control over steering, acceleration, or braking, the vehicle control system 100 can also provide notifications and warnings to assist a human driver in driving safely. The vehicle control system 100 includes a vehicle safety system 104, which interacts with various components in the vehicle to control access to the vehicle in certain situations and to control the routes the vehicle follows. Although the vehicle safety system 104 is located in... Fig. 1 shown as a separate component, the vehicle safety system 104 can be integrated into the automated driving / assistance system 102 or any other vehicle component.

[0016] The vehicle control system 100 also includes one or more sensor systems / devices for detecting the presence of objects (or obstacles) in the vicinity or for determining the location of a parent vehicle (e.g., a vehicle that includes the vehicle control system 100). The vehicle control system 100 may, for example, include one or more radar (radio detection and ranging) systems 106, one or more lidar (light detection and ranging) systems 108, one or more camera systems 110, a global positioning system (GPS) 112, and / or ultrasonic systems 114. The one or more camera systems 110 may include a rear-facing camera mounted on the vehicle (e.g., a rear section of the vehicle), a forward-facing camera, and side-facing cameras.The camera systems 110 may also include one or more interior cameras that capture images of the vehicle interior, such as passengers and other objects inside the vehicle. The lidar systems 108 may include one or more lidar interior sensors that capture data related to the area inside the vehicle. The vehicle control system 100 may include a data storage device 116 for storing relevant or useful navigation and safety data, such as map data, driving history, or other data. The vehicle control system 100 may also include a transceiver 118 for wireless communication with a mobile or wireless network, other vehicles, infrastructure, or any other communication system.

[0017] The vehicle control system 100 may include vehicle control actuators 120 for controlling various aspects of driving the vehicle, such as electric motors, switches, or other actuators, to control braking, acceleration, steering, seatbelt tension, door locks, and the like. The vehicle control system 100 may also include one or more displays 122, speakers 124, microphones 126, or other devices to provide notifications to a human driver or passenger. A display 122 may include a front display, an instrument panel indicator or warning, a screen, or any other visual cue that can be viewed by a driver or passenger of a vehicle.The loudspeakers 124 can include one or more loudspeakers of a vehicle's sound system or can include a loudspeaker intended for driver or passenger notification. The microphones 126 can include any type of microphone located inside or outside the vehicle to pick up sounds originating from inside or outside the vehicle.

[0018] It is understood that the embodiment consists of Fig. Figure 1 serves only as an example. Other embodiments may include fewer or additional components without deviating from the scope of the disclosure. Furthermore, the illustrated components can be combined without restriction or integrated into other components.

[0019] In one embodiment, the automated driving / assistance system 102 is configured to control the driving or navigation of a parent vehicle. For example, the automated driving / assistance system 102 can control the vehicle control actuators 120 to drive a path on a road, parking lot, driveway, or other location. In some embodiments, the automated driving / assistance system 102 can determine a path based on information or perception data provided by any of the components 106-118. A path can also be determined based on a route along which the vehicle is maneuvered to avoid or mitigate a potential collision with another vehicle or object.The sensor systems / devices 106-110 and 114 can be used to obtain real-time sensor data so that the automated driving / assistance system 102 can assist a driver in real time or drive a vehicle in real time.

[0020] Fig. Figure 2 is a block diagram illustrating an embodiment of a vehicle safety system 104. As described herein, the “vehicle safety system” 104 can also be referred to as a “safety system”. As in Fig. As shown in Figure 2, the vehicle safety system 104 includes a communication management unit 202, a processor 204, and a memory 206. The communication management unit 202 enables the vehicle safety system 104 to communicate with other systems, such as the automated driving / assistance system 102, and with other users and systems outside the vehicle. The processor 204 executes various instructions to implement the functionality provided by the vehicle safety system 104, as discussed in this document. The memory 206 stores both these instructions and other data used by the processor 204 and other modules and components included in the vehicle safety system 104.

[0021] Furthermore, the vehicle safety system 104 includes an image processing module 208 that receives image data from one or more camera systems 110. The vehicle safety system 104 can receive images associated with the interior of the vehicle (e.g., passengers inside the vehicle) or areas outside the vehicle (e.g., people or objects located near the vehicle's exterior). The image data can include one or more still images, a sequence of still images captured over a period of time, or a video stream, such as live or recorded video streams. As discussed herein, the image processing module 208 identifies or analyzes people or objects in the image data and can determine a person's emotional state or stress level.The image processing module 208 can also transmit image data, such as live video streams, to a remote user via the communication management unit 202. For example, the image processing module 208 can transmit live video stream data showing a minor passenger in the vehicle to a parent of the minor passenger. In some embodiments, the image processing module 208 includes an image management algorithm or process that performs one or more functions, such as those discussed herein.

[0022] The vehicle safety system 104 also includes a route selection module 210, which can automatically identify one or more routes to a given destination. Furthermore, the route selection module 210 allows a user (such as a parent of a minor passenger) to define a specific route for an autonomous vehicle to follow when traveling to a destination. For example, if a child is traveling alone in an autonomous vehicle, the child's parent can select a route that follows main roads, avoids highways, and steers clear of potentially dangerous areas of the city. An access key management device 212 handles the generation, distribution, and verification of one or more access keys. As discussed herein, access keys are used to control access to an autonomous vehicle (e.g.,(to control who can access the autonomous vehicle at a destination to assume responsibility for a child riding in the autonomous vehicle). In some embodiments, the access key management device 212 can generate an access key for a specific autonomous vehicle transportation activity, transmit the access key to a person designated to assume responsibility for the child at the destination, and, when the autonomous vehicle reaches the destination, verify that this person has the correct access key before unlocking the doors of the autonomous vehicle. As discussed herein, the access key represents any type of digital key or cryptographic key to secure access to the autonomous vehicle. For example, the access key can include public and private key pairs.

[0023] A navigation management unit 214 assists the autonomous vehicle in following a selected route to a destination. In some situations, the autonomous vehicle may need to change its route due to road closures, road construction, or traffic accidents. In these situations, the navigation management unit 214 can assist in rerouting the autonomous vehicle and, if necessary, communicating with a parent of a minor passenger to confirm the alternative route recommendation.

[0024] The vehicle safety system 104 also includes a passenger vital signs management device 216, which monitors one or more vital signs of a passenger (e.g., a minor passenger), as discussed herein. In some embodiments, the passenger vital signs management device 216 monitors vital signs such as heart rate, respiratory rate, and the like. For example, heart rate sensors in a seat or seatbelt can detect the heart rate individually or in combination with image data from one or more cameras. Furthermore, the image data can be used to analyze the passenger's respiration and level of consciousness (e.g., whether the passenger is crying, screaming, or unconscious). Additionally, the passenger vital signs management device 216 can monitor a passenger's stress level, emotional state, and the like.For example, the stress level, emotional state, and so on of the passenger can be estimated based on heart rate, respiration, level of consciousness, and the like.

[0025] A vehicle locking management unit 218 controls the locking and unlocking of doors, trunks, hatches, and other vehicle access points associated with an autonomous vehicle. For example, when an autonomous vehicle arrives at a destination with a minor passenger, the vehicle locking management unit 218 can keep the vehicle doors locked until explicitly instructed to unlock them by the access key management unit 212 or another vehicle system or component. An alert generator 220 generates one or more alerts based on specific situations associated with the autonomous vehicle and its environment. For example, an alert can be generated and sent to a parent if an autonomous vehicle carrying a child needs to change routes or experiences significant delays.Furthermore, the warning generator 220 can generate a warning if the autonomous vehicle arrives at the destination but no person with the corresponding access key is present. In some embodiments, the warning generator 220 generates a warning for a parent if it is determined that a minor passenger is distressed or anxious.

[0026] A vehicle access module 222 determines when a person (e.g., a passenger or a person picking up a passenger at a destination) can access an autonomous vehicle. In some embodiments, the vehicle access module 222 can prevent access to an autonomous vehicle if it is carrying a minor passenger. After the autonomous vehicle has reached the desired destination and the correct access key has been validated, the vehicle access module 222 can allow the person with the access key to access the autonomous vehicle by instructing the vehicle locking management device 218 to unlock one or more doors of the autonomous vehicle.

[0027] Fig. Figure 3 illustrates an embodiment of a vehicle 300 with multiple cameras and other sensors for monitoring the vehicle's interior and exterior. In some embodiments, the vehicle 300 can be operated as an autonomous vehicle and perform at least some of the functions and operations discussed herein. As shown in Fig. As shown in Figure 3, the vehicle 300 has two interior cameras 302 and 306 and two interior sensors 304, 308. In some embodiments, the cameras 302, 306 are positioned and oriented in the vehicle 300 such that the passenger seats are within the field of view of at least one camera 302, 306. Other areas of the interior of the vehicle 300 may also be within the field of view of one or more of the cameras 302, 306. The sensors 304, 308 represent any type of sensor, such as radar systems 106, lidar systems 108, ultrasonic systems 114, and the like. In some embodiments, the data recorded by sensors 304, 308 are used in combination with the data recorded by cameras 302, 306 to identify both passengers in the vehicle 300 and the emotional state of the identified passengers. Although in Fig. Figure 3 shows two interior cameras 302, 306. In alternative embodiments, the vehicle 300 can have any number of interior cameras positioned at different locations throughout the vehicle and oriented at different angles. Likewise, in alternative embodiments, the vehicle 300 can have any number of interior sensors positioned at different locations throughout the vehicle, although in Fig. 3 Two internal sensors 304, 308 are shown.

[0028] The vehicle 300 also includes two external cameras 310 and 312, which are positioned and oriented such that areas outside the vehicle, but near the vehicle, are within the field of view of at least one camera 310 or 312. Although this is in Fig. Not shown in Figure 3, the vehicle 300 in some embodiments also includes one or more external sensors, such as sensors associated with radar systems 106, lidar systems 108, ultrasonic systems 114 and the like.

[0029] Fig. Figures 4A-4B illustrate an embodiment of a method 400 for providing safe transportation of a child in an autonomous vehicle to a destination. Initially, an adult user 402 initiates a trip in an autonomous vehicle for a minor passenger. For example, the adult user may initiate the trip using a smartphone application 402 or otherwise interact with an autonomous vehicle or a scheduling service associated with a fleet of autonomous vehicles. The method 400 proceeds with the receipt 404 of a starting location and a destination from the user by a safety system in the autonomous vehicle. In some embodiments, the starting location is the user's current location.The starting point and destination can be transmitted to the security system via a user-operated smartphone application or any other user interface that allows the user to identify the starting point and destination.

[0030] The safety system in the autonomous vehicle also receives a specific route from the user. For example, the user can specify particular roads to follow (or particular areas to avoid) when the autonomous vehicle travels to its destination. In some embodiments, the user may prefer that the autonomous vehicle follow main roads, avoid highways, and steer clear of certain neighborhoods or geographical areas. In certain implementations, the user can specify a particular route by drawing on a map or graphically highlighting specific roads to follow to reach the destination.

[0031] The security system also receives an access key from the user (e.g., from the user's smartphone application). As discussed herein, the access key is used to unlock the autonomous vehicle at the destination when a suitable person in possession of the access key is present. In some embodiments, the access key is managed by an access key management device 212 ( Fig. 2) generated. In certain embodiments, the access key is associated with a specific trip (or route) in an autonomous vehicle. For example, the access key is used to validate a person who is picking up a child from the autonomous vehicle at the destination. After this trip is completed, the access key is deleted. A new access key is generated for each future trip initiated by a user. The access key is also transmitted to a second user 410, who is designated to meet the autonomous vehicle at the destination and pick up the minor passenger there (e.g., to assume responsibility for them). In some embodiments, the access key is transmitted to a smartphone or other device controlled by the second user.

[0032] In some embodiments, any type of computing device can be used to initiate the journey 402. When the adult user initiates the journey 402, they can upload photos of their face as well as the face of the person the autonomous vehicle will meet at the destination. A biometric identity can be created to authenticate the person the autonomous vehicle will meet at the destination.

[0033] The autonomous vehicle then travels to the destination. After the autonomous vehicle arrives at the destination, the security system confirms that the second user is present and verifies the access key. For example, the security system confirms that the second user has a smartphone or other device containing the appropriate access key. Once the access key has been verified, the security system unlocks the doors of the autonomous vehicle, allowing the minor passenger to exit. In some embodiments, the security system deletes or deactivates the access key after the autonomous vehicle has been unlocked and the minor passenger has exited.In alternative embodiments, the security system can verify the second user's presence at the destination by capturing a phone number associated with the user's mobile device or by prompting the second user to provide a specific code pre-approved by the adult user who initiated the journey. In further embodiments, the security system verifies the second user based on facial recognition (e.g., biometric facial identity) by the security system or facial recognition by the adult user who initiated the journey.

[0034] In some embodiments, in addition to unlocking the doors of the autonomous vehicle, the safety system also unlocks (or releases) an “intelligent” seatbelt that restrains the underage passenger. The intelligent seatbelt can be unlocked or released by a remote computing system, such as the vehicle control system.

[0035] If the access key was not verified (416), the security system could not confirm that the second user was present to assume responsibility for the minor passenger. In this situation, the security system (420) at the destination captures images and / or a live video stream of the area near the autonomous vehicle. The images and / or live video stream may include interior sections of the autonomous vehicle and / or exterior areas near the vehicle. The images and / or live video stream are transmitted to the adult user who initiated the journey (422). The images and / or live video stream allow the adult user who initiated the journey to analyze the situation inside and outside the autonomous vehicle at the destination.If the adult user who initiated the journey sees the second user at the destination, they can allow the autonomous vehicle's doors to unlock. If the adult user who initiated the journey does not see the second user at the destination, they can instruct the autonomous vehicle to return to the starting point or to travel to a different location.

[0036] In this situation, the safety system requests instructions from the adult user who initiated the journey. As discussed previously, the safety system may request instructions including whether the doors should be unlocked, the autonomous vehicle should be returned to the starting point, or the autonomous vehicle should be driven to another location. Based on the instructions received, the safety system may unlock the doors of the autonomous vehicle, instruct the autonomous vehicle to return to the starting point, or instruct the autonomous vehicle to drive to another location specified by the adult user who initiated the journey. In some embodiments, the other location specified by the adult user who initiated the journey may include another drop-off point, a police station, a school, and the like.In certain implementations, the safety system can generate a new access key, which is assigned to the return journey to the starting point or to the route to the other location. In these implementations, the new access key is transmitted to the person authorized to assume responsibility for the child at the starting point or the other location.

[0037] As in Fig. As described in 4A-4B, the security system 420 captures images and / or a live video stream of the area near the autonomous vehicle if the access key has not been verified at 416. In alternative embodiments, the security system 420 captures images and / or a live video stream of the area near the autonomous vehicle even if the access key has been verified at 416. Furthermore, the images and / or live video data are transmitted to the adult user 422 who initiated the journey, enabling the adult user to analyze the situation at the destination (e.g., the activities taking place near the autonomous vehicle) before authorizing the security system to unlock the doors of the autonomous vehicle.If the situation at the destination makes the adult user who initiated the journey uncomfortable, they can instruct the autonomous vehicle to return to the starting point or to travel to another location, as explained above in reference 420-432.

[0038] Fig. Figure 5 is a block diagram illustrating an embodiment of Implementation 500 for validating a user who picks up a child in an autonomous vehicle at a destination. The example is from Fig. Figure 5 shows an autonomous vehicle 502 after it has arrived at a destination, such as a destination identified by an adult user who initiated a ride in the autonomous vehicle 502 for a minor passenger. The autonomous vehicle 502 incorporates the vehicle control system 100 (which includes the vehicle safety system 104), as discussed herein. A user 504 is present at the destination and operates a mobile device 506, such as a smartphone, tablet computer, or other computing system. The mobile device 506 communicates with the vehicle control system 100 via a data communication network 508 or a communication link 510. In some embodiments, the data communication network 508 includes a cellular communication network, the internet, or any combination of two or more communication networks.The communication link 510 includes any type of communication link that uses any communication protocol, such as Bluetooth®, WiFi, DSRC (Dedicated Short-Range Communications), and the like. In some embodiments, the mobile device 506 communicates with the vehicle control system 100 via the communication link 510 using TCP / IP (Transmission Control Protocol / Internet Protocol). For example, TCP can create message packets that are transmitted over IP.

[0039] As discussed herein, if user 504 is to pick up the minor passenger (as determined by the adult user who initiated the trip), then user 504 should have received a suitable access key when the trip was initiated. For example, user 504 may receive the access key on their mobile device 506 using an application running on the mobile device 506 or another access key management system or process. When the autonomous vehicle 502 arrives at the destination, the vehicle security system 104 in the vehicle control system 100 may attempt to communicate with the mobile device 506 and verify that the mobile device 506 contains the suitable access key for the specific trip assigned to the minor passenger.If the mobile device 506 contains the appropriate access key, the vehicle security system 104 unlocks the doors of the autonomous vehicle 502, allowing the user 504 to assume responsibility for the minor passenger. However, if the mobile device 506 does not contain the appropriate access key, the vehicle security system 104 keeps the doors of the autonomous vehicle 502 locked to protect the minor passenger. For example, when the vehicle arrives at its destination, the vehicle control system 100 sends an alert to the mobile device 506, which is operated by the user 504. The mobile device 506 then attempts to provide an authentication signal or communication.This authentication can be a cloud-based authentication process (where both the vehicle control system 100 and the mobile device 506 communicate with a cloud-based server) or the mobile device 506 transmits the access key directly to the vehicle control system 100.

[0040] In the example from Fig. 5. Another person 512 is located near the rear of the autonomous vehicle 502. In some embodiments, one or more vehicle cameras or other sensors can detect this person and transmit images (still image data or video data) to a user who initiated the journey. This user can view the images and determine whether the doors of the autonomous vehicle 502 should be unlocked. For example, if the person 512 appears to be hiding behind the autonomous vehicle 502, or if the user who initiated the journey is afraid of the person 512, the user who initiated the journey can instruct the autonomous vehicle 502 to keep the doors locked and to drive to another location (e.g., an alternative drop-off location or to return to the starting location).If the user who initiated the journey knows person 512 or is not concerned about the presence of person 512, they can instruct the autonomous vehicle 502 to unlock the doors and allow the minor passenger to exit the autonomous vehicle 502.

[0041] Fig. Figure 6 illustrates an embodiment of a method 600 for controlling a child's access to an autonomous vehicle. For example, the method 600 may be suitable for transporting older children, such as children aged 14-18. Initially, an adult user 602 identifies parameters associated with an approved transport of a child who is permitted to travel alone in an autonomous vehicle. Exemplary parameters include a time of day, a day of the week, approved pick-up locations, approved drop-off locations, and the like. Some parameters may include multiple factors; for example, a pick-up of the child from school may be approved Monday-Friday between 3 and 4 p.m. The identified parameters are stored by a security system on the autonomous vehicle 604.In some embodiments, the identified parameters can be stored on a database, remote server, remote storage system, or other storage mechanism accessible to one or more users and one or more autonomous vehicles. These parameters can then be retrieved by autonomous vehicles transporting the child. In certain implementations, the adult user identifies the parameters using a smartphone application, by accessing a website, or similar means. In some embodiments, any modification of the parameters is restricted to the adult who identified them or to another person authorized by that adult.

[0042] Procedure 600 continues with the receipt 606 of a transport request from the child (e.g., a child of the adult user who has identified the approved transport parameters) by the safety system. The safety system accesses 608 the parameters assigned to the child and determines 610, based on the accessed parameters, whether the child's transport request has been previously approved. If the child's transport request has been previously approved based on the accessed parameters, 612 the autonomous vehicle drives to the requested destination. However, if the child's transport request has not been previously approved (e.g., the transport request does not match an existing parameter), 614 the safety system contacts the adult user who identified the parameters and requests approval of the child's transport request.In alternative embodiments, other adult users can be contacted to approve the child's transportation request. In some examples, the request to approve the child's transportation request can be a message or alert sent to the adult user, specifying the name of the child requesting transportation, the requested pick-up location, and the requested drop-off location. The adult user can approve the request, deny the request, or modify the request (e.g., approve the pick-up location but provide a different drop-off location).

[0043] If the adult user approves the request (616), the autonomous vehicle (612) will travel to the requested destination (or an alternative destination provided by the adult user). However, if the adult user rejects the request (618), the safety system will deny the child's transportation request and provide alternative transportation options. These alternative options may include, for example, an alternative pick-up and / or drop-off location provided by an adult user. Furthermore, the alternative transportation options may include pick-up and / or drop-off locations based on the current day of the week, time of day, and similar factors that have been previously approved.In some embodiments, when a child is being transported based on an approved transportation request, the autonomous vehicle is prevented from making additional stops, such as dropping the child off at an unauthorized location. Furthermore, when the child is being transported based on an approved transportation request, the autonomous vehicle may be prevented from allowing other passengers to board. These restrictions can be overridden by the adult user on a case-by-case basis.

[0044] In some configurations, the minor passenger may be required to authorize the unlocking of the autonomous vehicle's doors at the destination. For example, the minor passenger may confirm that the autonomous vehicle is at the correct destination and that the child feels safe exiting the vehicle. Upon confirmation, the minor passenger authorizes the unlocking of the autonomous vehicle's doors by activating an appropriate button, making a voice command, or similar action. If the minor passenger does not feel safe exiting the autonomous vehicle, the child may request a different destination, or the vehicle's safety system may contact the adult user for further instructions.

[0045] Fig.Figure 7 illustrates an embodiment of a method 700 for monitoring a child traveling in an autonomous vehicle and detecting potential problems with the child. Initially, 702 an adult user initiates a ride in an autonomous vehicle for a minor passenger. A safety system in the autonomous vehicle receives 704 a starting location, a destination, and a desired route (from the starting location to the destination) from the adult user. The autonomous vehicle begins traveling 706 to the destination, following the desired route. While the autonomous vehicle is traveling to the destination, 708 the safety system monitors the child's vital signs, emotional state, and other characteristics to detect any problems with the child, such as high stress levels, illness, a medical condition, and the like.

[0046] When a problem is detected (710), the safety system (712) sends a notification about the problem to the adult user (e.g., via text message, phone call, alert sent to a mobile device application, etc.). The notification may include the location of the autonomous vehicle, details regarding the detected problem, and images (still image data or a live video stream) showing the face and body of the minor passenger. Furthermore, the safety system may initiate an audio or video chat session between the child and the adult user (714). This audio or video chat session allows the child to speak with the adult user and explain how they are feeling. For example, if the child is experiencing a high level of stress, the adult user can calmly talk to the child to determine the cause of the stress and try to reassure them.After initiating the chat session (714), the safety system (716) requests instructions from the adult user regarding whether the autonomous vehicle should continue to the destination. In some embodiments, the adult user can provide instructions to the safety system, such as continuing to the destination, returning to the starting point, or going to another location (e.g., a police station, a hospital, a school, and the like). Based on the adult user's instructions (718), the safety system instructs the autonomous vehicle to continue to the destination, return to the starting point, or go to another location.

[0047] While various embodiments of the present disclosure are described herein, it is understood that these serve only as examples and not as limitations. It is evident to the person skilled in the art that various modifications in form and detail can be made without departing from the spirit and scope of the disclosure. Therefore, the breadth and scope of the present disclosure are not intended to be limited by any of the described exemplary embodiments, but are merely defined in accordance with the following claims and their equivalents. The description is set forth herein for the purpose of illustration and description. It makes no claim to completeness and is not intended to limit the disclosure to the specific form disclosed. Many modifications and variations are possible in view of the disclosed teachings.Furthermore, it should be noted that any or all of the alternative implementations discussed herein can be used in any desired combination to form additional hybrid implementations of the revelation.

Claims

Method comprising: Receiving a destination and a route to the destination, which an autonomous vehicle is to follow while transporting a minor passenger, by a vehicle security system; identifying an access key associated with the route by the vehicle security system; transmitting the access key to a user designated to meet the autonomous vehicle at the destination and assume responsibility for the minor passenger at the destination; and unlocking the doors of the autonomous vehicle at the destination in response to confirmation by the vehicle security system that the user designated to meet the autonomous vehicle at the destination is in possession of the access key and is present at the destination. Method according to claim 1, wherein the autonomous vehicle follows the route to the destination. The method of claim 1, further comprising: capturing images or a live video of the interior of the autonomous vehicle; and transmitting the captured images or live video to a second user who has determined the destination and the route. Method according to the preceding claim, further comprising receiving instructions from the second user indicating whether the doors of the autonomous vehicle should be unlocked at the destination after the recorded images or live video have been transmitted to the second user. The method of claim 3, further comprising receiving instructions from the second user after transmitting the recorded images or the recorded live video to the second user, wherein the received instructions include an instruction to unlock the doors of the autonomous vehicle, an instruction to return the autonomous vehicle to a starting point of the route, and an instruction to drive the autonomous vehicle to another location. The method of claim 1, further comprising: capturing images or a live video of an area near and outside the autonomous vehicle, and transmitting the captured images or live video to a second user who has determined the destination and the route, wherein the unlocking of the doors of the autonomous vehicle is further permitted in response to the second user seeing the user who is designated to meet the autonomous vehicle at the destination in the captured images or live video. Method according to the preceding claim, further comprising receiving instructions from the second user indicating whether the doors of the autonomous vehicle should be unlocked at the destination after the recorded images or live video have been transmitted to the second user. The method of claim 6, further comprising receiving instructions from the second user after transmitting the recorded images or the recorded live video to the second user, wherein the received instructions include an instruction to unlock the doors of the autonomous vehicle, an instruction to return the autonomous vehicle to a starting point of the route, and an instruction to drive the autonomous vehicle to another location. Method according to claim 1, further comprising monitoring at least one of a passenger's vital signs or emotional state. A method according to the preceding claim, further comprising: generating a warning indicating a problem associated with the passenger based on a detected problem with the passenger's vital signs or emotional state; and transmitting the warning to a second user who has determined the destination and route. The method according to the preceding claim, further comprising initiating an audio chat session or a video chat session between the passenger and a second user who has determined the destination and the route. Method according to claim 1, further comprising unlocking a safety belt that restrains the minor passenger, in addition to unlocking the doors of the autonomous vehicle at the destination. The method of claim 1, comprising creating a biometric identity to identify the user who is intended to meet the autonomous vehicle at the destination, as an alternative to using the access key. Device comprising: a communication management device configured to receive from an adult user a destination and a route to the destination, which an autonomous vehicle carrying a minor passenger is to follow; an access key management device configured to identify an access key associated with the route, wherein the communication management device is further configured to transmit the access key to a user designated to meet the autonomous vehicle at the destination and assume responsibility for the minor passenger at the destination, and wherein the access key management device is further configured to verify that the user designated to meet the autonomous vehicle at the destination is in possession of the access key and is present at the destination;and a vehicle locking management device configured to unlock the doors of the autonomous vehicle in response to the access key management device confirming that the user designated to meet the autonomous vehicle at the destination is in possession of the access key and is present at the destination. Device according to the preceding claim, further comprising an image processing module configured to: capture images or live video of the interior of the autonomous vehicle, and transmit the captured images or live video to the adult user, wherein unlocking the doors of the autonomous vehicle is further permitted in response to the adult user seeing the user, who is intended to meet the autonomous vehicle at the destination, in the captured images or live video. Device according to the preceding claim, wherein the communication management device further receives instructions from the adult user indicating whether the doors of the autonomous vehicle should be unlocked at the destination after the adult user has received the recorded images or the recorded live video.

Images