SURVEILLANCE SYSTEM FOR AN AUTONOMOUS VEHICLE

Description

[0001] The invention relates to a method and a system for monitoring the control system of an autonomous vehicle and to an autonomous vehicle equipped with such a monitoring system.

[0002] In the foreseeable future, autonomous vehicles will be part of road traffic. Such autonomous vehicles do not necessarily require a driver, thus eliminating the driver's control function. Therefore, it is necessary to automatically monitor the function of the autonomous vehicle and its systems.

[0003] A vehicle monitoring system is known from document US 2015 / 158499 A1. A central processor determines whether one or more vehicles are in or approaching a dangerous condition.

[0004] If a defect occurs in an autonomous vehicle that prevents autonomous driving, two fundamentally different cases must be distinguished: In the first case, the system is still able to communicate with the infrastructure. In this case, the autonomous vehicle's system itself is able to send a message to inform the owner of the defect and / or call for assistance. In the second case, the system is so defective that it is no longer able to send such a message itself.

[0005] It is therefore desirable to improve the monitoring of the operation of an autonomous vehicle in such a way that the defect is also reported in the second case.

[0006] One aspect of the invention relates to a monitoring system for monitoring the control system of an autonomous vehicle having the features of claim 1.

[0007] A further aspect of the invention relates to a method for monitoring the control system of an autonomous vehicle having the features of claim 9.

[0008] Embodiments of the invention also include an autonomous vehicle having a control system configured to control the vehicle autonomously, and a monitoring system according to an embodiment of the invention capable of monitoring the control system of the autonomous vehicle independently thereof and reporting a detected malfunction of the control system to an external monitoring location.

[0009] A method and system for monitoring the control system of an autonomous vehicle enable the control system to be monitored independently of the (residual) functionality of the control system. Failures and malfunctions of the control system can therefore be reliably detected, even if they have resulted in the control system itself no longer being able to issue error messages. The operational reliability of an autonomous vehicle can be significantly improved in this way.

[0010] In one embodiment, the monitoring system is configured to use a communication device present in the autonomous vehicle to communicate with the external monitoring location. This eliminates the cost of an additional communication device and keeps the costs of the monitoring system low.

[0011] In one embodiment, the monitoring system is configured to use its own communication device, independent of the communication device of the autonomous vehicle, to communicate with the external monitoring location. This can increase operational reliability, as communication with the external monitoring location is possible even if the communication device of the autonomous vehicle is malfunctioning.

[0012] In one embodiment, the monitoring system is configured to first attempt to communicate with the external monitoring location via the autonomous vehicle's communication device and to use its own communication device if the autonomous vehicle's communication device is not functional. In this way, a particularly high level of operational reliability can be achieved.

[0013] In one embodiment, the monitoring system is configured to periodically communicate with the control system of the autonomous vehicle and to issue an error message if communication with the control system of the autonomous vehicle is interrupted or interrupted for more than a predetermined period of time. In this way, a complete failure of the control system, in which the control system is no longer able to issue an error message itself, can be reliably detected.

[0014] In one embodiment, the monitoring system is configured to transmit, after detecting a malfunction of the control system, not only an error message but also the current position of the autonomous vehicle to the monitoring station. This allows the owner and / or service personnel to be quickly guided to the autonomous vehicle to recover and / or repair it. The monitoring system can, in particular, be configured to determine the position using a satellite-based positioning system, such as a GPS system.

[0015] In one embodiment, the monitoring system is configured to activate at least one warning device of the autonomous vehicle, for example the hazard warning lights, after detecting a malfunction of the control system in order to warn drivers of other vehicles located in the vicinity of the autonomous vehicle of the danger point created by the no longer functional autonomous vehicle.

[0016] The type of message sent by the communication device may also depend on the current position of the autonomous vehicle. In particular, the monitoring system may be configured not to send a warning message if the autonomous vehicle is in a safe position, such as a parking lot, where it does not pose a threat.

[0017] The autonomous vehicle's control system is designed to report the start and end of each function performed by the control system to the monitoring system. In this case, the monitoring system always has up-to-date information about the autonomous vehicle's operating status and can issue an error message if the reported information contains inconsistencies, e.g., if an acceleration and braking event are reported simultaneously.

[0018] The monitoring system may also be equipped with its own sensors, in particular position, speed and / or acceleration sensors, in order to be able to monitor the operating status of the autonomous vehicle independently of the control system of the autonomous vehicle and its sensors.

[0019] In particular, the monitoring system can be configured to deactivate the control system and bring the autonomous vehicle to a standstill if it detects a malfunction in the control system. This can further increase the operational reliability of the autonomous vehicle, as malfunctions in the control system can be detected even more reliably. Character description

[0020] An embodiment of the invention is explained in more detail below with reference to the attached figure: The figure shows a schematic representation of an embodiment of an autonomous vehicle 10 which is equipped with a monitoring system 14 according to an embodiment of the invention.

[0021] The autonomous vehicle 10 has an electronic control system 12 that is designed to control the autonomous vehicle 10 autonomously, i.e. independently of a human driver.

[0022] The details of the control system 12 are not the subject of the present invention and are therefore not discussed further below.

[0023] In order to be able to detect a malfunction of the control system 12 independently of the latter, the autonomous vehicle 10 is equipped with a monitoring system 14 which is designed to continuously monitor the functions of the control system 12, to detect malfunctions of the control system 12 and to report a detected malfunction of the control system 12 to an external monitoring and control point 28, ie a monitoring and control point 28 which is arranged outside the autonomous vehicle 10.

[0024] This message is sent in particular via a suitable data connection 20, which can be implemented, for example, via a conventional mobile network.

[0025] To transmit the message, the monitoring system 14 may use a communication device 18, which is used in normal operation by the control unit 12 to communicate with the external monitoring and control station 28 and to receive travel orders.

[0026] In addition, a further communication device 16 may be provided which enables the monitoring system 14 to communicate with the external monitoring and control point 28 if the "normal" communication device 18 connected to the control unit 12 is faulty or damaged.

[0027] The monitoring device 14 can, in particular, be configured to communicate periodically, i.e., at predetermined time intervals, with the control system 12 in order to monitor its functionality. If the control unit 12 does not respond within a predetermined time interval and / or does not transmit a message to the monitoring device 14, the monitoring device 14 concludes that the control unit 12 is malfunctioning and transmits a corresponding message to the external monitoring and control point 28.

[0028] The monitoring device 14 also includes a positioning device 15. With the aid of the positioning device 15, the monitoring device 14 is able to determine the current position of the autonomous vehicle 10 independently of the control unit 12 and transmit it to the external monitoring and control center 28 if a malfunction of the control unit 12 has been detected. The positioning device 15 can include a receiver for a satellite-based navigation system and / or be based on other positioning technologies and, for example, use mobile radio and / or WLAN networks for location determination.

[0029] In one embodiment, the monitoring device 14 comprises its own power supply 17, for example, a battery or accumulator. This enables the monitoring device 14 to transmit an error message to the external monitoring and control center 28 even if the power supply of the autonomous vehicle 10 has failed.

[0030] By transmitting the current position of the autonomous vehicle 10 to the external monitoring and control center 28, the latter can send targeted service personnel to the malfunctioning autonomous vehicle 10 in order to eliminate the malfunction and restore the autonomous vehicle 10 to an operational state as quickly as possible.

[0031] The monitoring device 14 is further configured to activate acoustic and / or optical warning devices 22, 24, 26, for example the hazard warning lights 22, the headlights / headlight flashers 24 and / or the horn 26 of the autonomous vehicle 10, in order to warn the surroundings of the autonomous vehicle 10.

[0032] For example, the hazard warning lights 22 can be activated if the autonomous vehicle 10 has broken down on the road due to a malfunction and is no longer able to reach a safe parking space, in particular a parking lot.

[0033] If, for example, the monitoring device 14 detects while the autonomous vehicle 10 is driving that the braking system is malfunctioning and the autonomous vehicle 10 therefore cannot be brought to a standstill immediately, it may be useful to warn the surroundings of the autonomous vehicle 10 by activating the headlight flasher 24 and / or the horn 26, while at the same time transmitting an error message to the external monitoring and control center 28.

[0034] The monitoring device can also be connected and / or equipped with its own sensors 19, in particular position, speed, and / or acceleration sensors 19, which enable the function of the control unit 12 to be monitored independently of the sensors 21 of the control unit 12. In this way, a malfunction of the control unit 12 can be reliably detected even if it is based on a malfunction of the sensors 21 of the control unit 12. Such a malfunction could not be detected or could be detected only with difficulty by the monitoring device 14 if it relies on information from the same sensors 21 as the control unit 12.

Claims

1. Monitoring system (14) for monitoring the control system (12) of an autonomous vehicle (10), wherein the monitoring system (14) is independent of the control system (12) of the autonomous vehicle (10) and is configured: to monitor the functions of the control system (12) to detect malfunctions of the control system (12), and to report a detected malfunction of the control system (12) to an external monitoring point (28), characterized in that the monitoring system is designed to receive reports of the start and end of each function performed by the control system from the control system, so that the monitoring system (14) always has up-to-date information about the operating state of the autonomous vehicle (10) and outputs an error message if inconsistencies arise from the reported information.

2. Monitoring system (14) according to Claim 1, designed to use a communication device (18) of the autonomous vehicle (10) to communicate with the external monitoring point (28).

3. Monitoring system (14) according to Claim 1 or 2, designed to use a separate communication device (16), which is independent of the communication device (18) of the autonomous vehicle (10), to communicate with the external monitoring point (28).

4. Monitoring system (14) according to one of the preceding claims, wherein the monitoring system (14) is designed to communicate periodically with the control system (12) of the autonomous vehicle (10).

5. Monitoring system (14) according to Claim 4, wherein the monitoring system (14) is designed to report a malfunction of the control system (12) if the communication with the control system (12) of the autonomous vehicle (10) is interrupted for more than a predetermined period of time.

6. Monitoring system (14) according to one of the preceding claims, wherein the monitoring system (14) is designed to report the current position of the autonomous vehicle (10) to the monitoring point (28) after detecting a malfunction of the control system (12).

7. Monitoring system (14) according to one of the preceding claims, wherein the monitoring system (14) is designed to activate at least one warning device (22, 24, 26) of the autonomous vehicle (10) after detecting a malfunction of the control system (12).

8. Autonomous vehicle (10) having a control system (12) that is designed to autonomously control the vehicle (10), and having a monitoring system (14) according to one of the preceding claims.

9. Method for monitoring the control system (12) of an autonomous vehicle (10), wherein the method comprises monitoring functions of the control system (12) using a monitoring system (14) that is independent of the control system (12) of the autonomous vehicle (10) to detect malfunctions of the control system (12), and reporting a detected malfunction of the control system (12) to an external monitoring point (28), characterized in that the monitoring system receives reports of the start and end of each function performed by the control system from the control system, so that the monitoring system (14) always has up-to-date information about the operating state of the autonomous vehicle (10) and outputs an error message if inconsistencies arise from the reported information.