Method for emergency vehicle stopping in an infrastructure network
The method and infrastructure system address the challenge of hardware-dependent emergency stop systems by using configuration-independent transformation tables to adapt emergency stop switch signals for vehicles, ensuring reliable and efficient emergency stops without hardware updates, and providing real-time switch location information.
Patent Information
- Authority / Receiving Office
- FR · FR
- Patent Type
- Applications
- Current Assignee / Owner
- ROBERT BOSCH GMBH
- Filing Date
- 2025-10-27
- Publication Date
- 2026-05-01
Smart Images

Figure 00000000_0000_ABST
Abstract
Description
Title of the invention: Method for emergency stopping of vehicles in an infrastructure network
[0001] The invention relates to a method for networked infrastructure vehicles. State of the art
[0002] In the prior art, emergency stop switches are known in various applications (e.g., manufacturing plants, machines, handling trucks, vehicle prototype testing) as a proven safety measure. Emergency stop switches are often wired and also include radio implementations, which require dedicated certified receiving hardware. In certain vehicle applications, particularly for vehicle functions controlled by radio interfaces (e.g., Wi-Fi, 5G) (e.g., in Automated Valet Parking (AVP / Automated Vehicle Maneuvering (AVM), Reliable Distributed Systems (RDS), etc.), the aim is to avoid additional hardware for implementing the emergency stop switch, since these are standard production vehicles. However, for the entire system, including infrastructure, an emergency stop measure may be required.
[0003] Patent application DE102022209181Al describes a method for remotely controlling an autonomous vehicle that has a processor arranged to determine whether the autonomous vehicle is in a state in which remote control is possible. In this respect, the processor can terminate (validate) the autonomous driving mode or the remote control mode and switch to a manual driving mode if a driver activates any steering device or an acceleration or deceleration device, or if, during autonomous driving or remote control mode, the driver activates an emergency trigger button for autonomous vehicles.
[0004] Patent application EP3756929A1 describes a device for the autonomous speed regulation of a vehicle, which is provided for in an autonomous vehicle. It further describes an emergency stop service unit for receiving a stop command on the autonomous vehicle, and a vehicle speed control unit that can cause the autonomous vehicle to stop by giving priority to the stop instruction entered by the emergency stop service unit over the vehicle speed control instructions entered by the digital panel and the mechanical service unit.
[0005] Patent application EP3855273A1 describes a system for controlling a plurality of autonomous vehicles on a mine site, a centralized platform comprising a complete list of vehicles and portable devices in an environment (work area). Furthermore, a portable device assists all vehicles in a circle around the portable device, and a user of the portable device can select one or more of the displayed vehicles to stop the operation of only the selected vehicle(s).
[0006] Description of the invention
[0007] It can therefore be seen as an object of the invention to make available a reliable method for operating an infrastructure system for assisting the driving of motor vehicles in a guided network in at least partially automated manner.
[0008] It can be seen as an additional object of the invention to make available an infrastructure system for the assistance of driving motor vehicles in a network guided in at least partially automated manner, which exhibits a high level of reliability.
[0009] According to a first aspect of the invention, a method is proposed for an emergency vehicle stopping function in an infrastructure network; in which - A configuration unit establishes, from lookup tables corresponding to a current system configuration, with knowledge of a control table independent of a target configuration, a transformation table; - A computer unit providing information executes the following stages: a) reception and / or reading by the configuration unit of the transformation table, which depends on the system configuration, b) reception of initial signals from one or more emergency stop switches from an infrastructure, c) transformation of a useful dataset using the initial signals and the transformation table, d) return of the transformed useful data to a computer platform of a vehicle in an infrastructure network, and in which - at least one IT platform assigned to a vehicle in the infrastructure network executes the following stages for the actuator control of the vehicle in the infrastructure network: e) receiving useful data transformed by the computer unit providing information, f) representation of the control table, which is independent of the configuration, g) retransformation of the useful data using the control table and thus control of the validity of the useful data; h) upon finding an invalidity, execution of a pre-defined safety maneuver.
[0010] A consultation table is assigned to an emergency stop switch. The generic consultation table is prescribed in this case and may, in particular, have variants (for example, manufacturer-specific).
[0011] The configuration unit is in particular only required for configuration and can be taken offline during operation (as soon as the current transformation table has been read or received by the computer unit providing information.
[0012] The method according to the invention advantageously provides an emergency stop method that can be extended and is independent of the hardware, and in particular does not require a special transmitter / receiver in the vehicle. The integration of an additional emergency stop switch, its replacement, or modification of the configuration is thus particularly simple, since it only requires adapting the transformation table and no update (hardware or software) is necessary on the participating vehicle to ensure that even in the event of a reconfiguration related to the activation of an emergency stop switch, the safe operation of the infrastructure is guaranteed.
[0013] The pre-defined safety maneuver preferably includes the immediate stopping of one, several, or all of the vehicles. Safety can thus be restored in a particularly comprehensive and effective manner.
[0014] In a preferred embodiment of the invention, wherein the emergency stop switch(es) cyclically send initial signals comprising unique identity information and current status information, in particular "actuated" or "not activated", to the information-providing computer unit.
[0015] It is further preferred that the information-providing computer unit provides current status information for each emergency stop switch, in which the status information is particularly suitable for being represented on an HMI.
[0016] In this respect, it is particularly preferable for the status information to include the position of the respective emergency stop switch within the infrastructure. This allows, for example, infrastructure personnel to efficiently determine the position within the infrastructure of the emergency stop switch that triggered an emergency stop. This is especially useful if there are a large number of emergency stop switches.
[0017] According to another aspect of the invention, an infrastructure system for networked vehicles is proposed, comprising - an IT infrastructure unit, which is set up to produce useful data, in particular control data for networked vehicles within a defined infrastructure; - a computer unit providing information, which is arranged to receive useful data from the infrastructure computer unit to produce, using the useful data, a message, in particular a vehicle message, and to send the message; - one or more emergency stop switches, which are arranged within the infrastructure and which are / are constituted to send initial signals to the information-providing computer unit; - a configuration unit having a database, comprising one or more lookup tables, in which a lookup table is assigned to each emergency stop switch and in which the database comprises: - a definition of the infrastructure system being configured which indicates, in particular, the emergency stop switches being assigned to the infrastructure system; - a transformation table established by means of the configuration definition, in which the transformation table is established from the lookup tables with knowledge of a control table to be reached independent of the configuration; - in which the information-providing computer unit is arranged to call the database transformation table and, by means of the first signals received, - to transform the useful data at the transformation table and send it to a vehicle in the infrastructure network.
[0018] According to a third aspect, a networked infrastructure vehicle is proposed, which is designed to be guided in at least a partially automated manner within an infrastructure comprising an infrastructure system including: - a computer platform for controlling vehicle actuators, which is arranged - to receive useful, transformed data from the IT unit providing information about the infrastructure system, - to receive and / or read a control table, - to transform the useful data using the control table and to check the validity of the useful data using the control table; - in the event of a detected disability, to control the vehicle's actuators in order to perform a predefined safety maneuver.
[0019] Preferably, the computer platform is arranged to receive / or read the transformation table.
[0020] According to the present invention, a computer platform for controlling the actuators of a vehicle can be made available. For the safe implementation of an emergency stop function, an additional "data watchdog" can be inserted, which includes the evaluation of a checksum. The checksum is thus formed using input data from emergency stop switches.
[0021] According to a fourth facet of the invention, a method for configuring an infrastructure system for networked vehicles is proposed, comprising the steps a. a defined number of emergency stop switches are provided, b. a configuration-independent control table is provided, c. each emergency stop switch is coupled to a unique lookup table, d. using the lookup tables, a transformation table is produced taking into account the control table, e. the transformation table and the control table are made available.
[0022] Preferably, a respective position information is established for all emergency stop switches and stored in memory so that the information-providing computer unit has access to the respective position information so that it can be displayed in an HMI where the activated emergency stop switch is located.
[0023] An infrastructure system according to the invention may be constituted, for example, as an AVM system or an AVP system, AVM standing for "automated vehicle maneuvering" and describing the partial or fully automated guidance of a vehicle (for example, a motor vehicle or a robot) in a defined environment, for example in a manufacturing hall, a charging station, or a parking facility. AVP is an abbreviation, AVP standing for "automated valet parking," therefore a system in which motor vehicles can, in a defined environment, be guided and parked in a partially or fully automated manner.
[0024] The term "infrastructure network vehicle" includes vehicles, for example, a motor vehicle or a robot, that have a suitable communication device by which the infrastructure network vehicle can exchange data with an infrastructure system. For this purpose, a wireless data communication is established by which the infrastructure network vehicle can send and / or receive data. This may preferably be a radio communication, for example, a mobile phone communication, or a direct wireless link. Such communication between infrastructure network vehicles and another traffic participant is also referred to as V21 or C21 communication.
[0025] The formulation "automated at least" includes one or more of the following: assisted driving, partially automated driving, highly automated driving, fully automated driving of a vehicle, for example, of a motor vehicle or of a robot.
[0026] Assisted driving means that a driver of the vehicle continuously performs either lateral or longitudinal steering. The other respective driving task (i.e., controlling the longitudinal or lateral steering of the vehicle) is performed automatically. This therefore means that in assisted driving, either lateral or longitudinal steering is controlled automatically.
[0027] Partially automated driving means that in a specific situation (for example: driving on a motorway, driving in a parking space, overtaking an object, driving in a lane marked by markers) and / or for a certain period of time, the longitudinal and lateral driving of the vehicle are automatically controlled. The driver of the vehicle must not manually control the longitudinal and lateral driving. However, the driver must continuously monitor the automatic control of the longitudinal and lateral driving in order to be able to intervene manually if necessary. The driver must be able to take full control of the vehicle at all times.
[0028] Highly automated driving means that for a certain period of time in a specific situation (for example, driving on a motorway, driving in a parking space, overtaking an object, driving in a lane marked by deflections) the longitudinal and lateral driving of the vehicle are controlled automatically. The driver of the vehicle therefore does not have to manually control the longitudinal and lateral driving of the vehicle. The driver does not have to continuously monitor the automatic control of the longitudinal and lateral driving so that manual intervention is possible if necessary. If necessary, the driver is automatically prompted to take over the control of the longitudinal and lateral driving, and is given, in particular, sufficient time to do so.The driver must therefore be potentially able to take over control of both longitudinal and lateral driving. The limits of automatic control of lateral and longitudinal driving are automatically identified. In highly automated driving, it is not possible to automatically create a minimum hazard state in every initial situation.
[0029] Fully automated driving means that in a specific situation (for example: driving on a motorway, driving in a garage space, Overtaking an object, driving in a lane marked by markers) (longitudinal and lateral vehicle control) is automatically controlled. Therefore, the vehicle driver must not manually control the longitudinal and lateral vehicle control. The driver must not control the automatic longitudinal and lateral vehicle control so that manual intervention is possible if necessary. Before the automatic lateral and longitudinal vehicle control is deactivated, the driver is automatically prompted to take over the driving task (controlling the vehicle's longitudinal and lateral vehicle control), specifically by being given sufficient time. As soon as the driver does not take over the driving task, the vehicle automatically returns to a minimal danger state.The limits of the automatic control of transverse and longitudinal driving are automatically identified. It is possible in all situations to automatically return to a minimally dangerous system state.
[0030] Driverless operation means that, regardless of a specific application (e.g., driving on a motorway, driving in a parking space, overtaking an object, driving in a lane marked by markers), the longitudinal and lateral steering of the vehicle is automatically controlled. A driver does not need to manually control the longitudinal and lateral steering of the vehicle. The driver does not need to monitor the automatic control of the longitudinal and lateral steering in order to be able to intervene manually if necessary. The longitudinal and lateral steering of the vehicle is thus controlled automatically, for example, on all types of roads, in all speed ranges, and under all ambient conditions. The entire driving task of the driver is thus taken over automatically. The driver is therefore no longer required.The vehicle can therefore also travel without a driver from any starting position to any destination position. Potential problems are resolved automatically, without driver assistance.
[0031] Remote control of the vehicle means that both lateral and longitudinal control of the vehicle is remotely controlled. This means, for example, that remote control signals are sent to the vehicle to control lateral and longitudinal steering. The remote control is carried out, for example, by means of a remote control device.
[0032] Brief description of the drawings
[0033] With reference to the attached figures, detailed embodiments of the invention are described:
[0034] Fig. 1 represents an infrastructure system based on an example of an embodiment of the second facet, illustrating the execution of a process based on an example of an embodiment of the first facet, a networked vehicle being automated at least in part within an infrastructure based on an example of an embodiment of the third facet.
[0035] Fig. 2 represents the process following an example of the realization of the fourth facet and the first facet.
[0036] Fig. 3 represents an example of a possible embodiment of the lookup tables, the transformation table and the control table.
[0037] Preferred embodiment of the invention
[0038] In the following description of examples of embodiments of the invention, the same elements are identified by the same reference numerals, without needing to redescribe these elements where necessary. The figures represent the object of the invention only schematically.
[0039] Figure 1 represents an infrastructure system 10. The infrastructure system 10, which is constituted, for example, as an AVP system, comprises two emergency stop switches 12 and 14, a configuration unit 20, an information-providing computing unit 30, an infrastructure computing unit 40, and an HMI (Human-Machine Interface) system 50. A networked vehicle 60 is configured to communicate wirelessly with the information-providing computing unit 30 and drives, at least in an automated manner, at least partially, within a defined infrastructure controlled by the infrastructure system 10. The information-providing computing unit 30 can be constituted, for example, in a cloud 35.
[0040] The infrastructure computing unit 40 is configured to produce useful data 42, in particular, control data for the networked vehicle 30 within the defined infrastructure. The infrastructure system 10 is an AVP system, so that the infrastructure computing unit 40 can, for example, assign a location to the vehicle 30 and calculate a route and trajectory plan during at least one automated, preferably fully automated, vehicle 60 journey to and from the location, and produce corresponding control instructions for the vehicle.
[0041] The information-giving computer unit 30 is arranged to receive useful data 42 from the infrastructure computer unit 40, to produce, using the useful data, a message, in particular, a Vehicle Message 34 and to send the message to the vehicle 60.
[0042] Within the infrastructure, two emergency stop switches 12 and 14 are provided, for example, for manual actuation in case of emergency. Emergency stop switches 12 and 14 are configured to send initial signals 13, particularly cyclic signals, to the information-providing computer unit 30.
[0043] The configuration unit 20 comprises a database 21 in which a lookup table 22, 24 is stored, assigned to each of the emergency stop switches 12 and 14. The database 21 further comprises a current configuration definition 25 of the infrastructure system 10, which indicates, in particular, the emergency stop switches 12, 14 currently assigned to the infrastructure system 10. A transformation table 26, established by means of the current configuration definition 25, is also stored in memory. In this table, the transformation table 26 is established from the lookup tables 22, 24, knowing a control table 28 to be accessed, which is also stored in memory.Consultation tables 22 and 24 contain, for example, specific data that the respective emergency stop switch sends, for example, via a radio interface (Wifi, 5G...) or via cable data communication.
[0044] The data from lookup tables 22, 24 can be stored, for example upon delivery, in the respective emergency stop switch 12, 14 and assigned during configuration (see [Fig. 2]) by the partial part number to the transformation table 26. Alternatively, the lookup tables 22, 24 are loaded during the initial commissioning of the respective emergency stop switch 12, 14 and / or are accessed during operation by switches 12, 14 from an external data source (not shown) and used.
[0045] The information-providing computer unit 30 is arranged to call the transformation table 26 of the database 21 and to transform, by means of the first signals 13 received by the emergency stop switches 12, 14 and the transformation table 26, the data 42 useful for sending, for example, what are called Vehicle Messages 34 to the vehicle 60 in the infrastructure network.
[0046] The vehicle 60 of an infrastructure network includes a computer platform 62 for controlling the actuators of the vehicle 60, which is arranged to receive useful, calculated and transformed data from the computer unit 30 providing information from the infrastructure system 10.
[0047] The control table 28 can be received and / or read, for example once, and stored in the computer platform 62. Using control table 28, the useful data is evaluated and its validity is checked. If the useful data is found to be invalid, for example, because one or both of the emergency stop switches 12, 14 have been activated or are out of order, the computer platform 62 can control the actuators of vehicle 60. way to perform a pre-defined safety maneuver, for example, an emergency stop.
[0048] It can further be provided that the emergency stop switches 12, 14 cyclically transmit a unique identifier (e.g., a serial number) as well as their current state ("activated" / "not activated") to the information-providing computer unit 30. A unique deduction is thus made possible in the information-providing computer unit 30 as to which of the emergency stop switches has been activated. The information-providing computer unit 30 can then provide information 32 on which of the emergency stop switches 12, 14 has been activated. This information 32 can be displayed on an HMI 50, for example on a (mobile) device, such as tablets, smartphones, smartwatches, or on a display in a manufacturing infrastructure.Furthermore, during the system configuration, position information for the emergency stop switches 12, 14 (e.g., GP coordinates, indications in layers, markers on a map, etc.) can be established and stored so that the computer unit 30 providing the information has access to this position information. It can then be displayed directly in the HMI 50 where the activated emergency stop switch is located.
[0049] Figure [Fig.2] represents a flowchart 200 of the process following a preferred embodiment example of the invention (on the example of the infrastructure system 10 of [Fig.1]).
[0050] The unfolding is subdivided into two parts 201, 202. The entire system can be configured manually based on the setting during the unfolding or during initial commissioning and at each modification.
[0051] In configuration phase 201, in stage 210, for each emergency stop switch 12, 14 present in an infrastructure system, a specific lookup table 22, 24 is placed in a database 21 of the configuration unit 20. The specific lookup table 22, 24 contains, for example, specific data that the respective emergency stop switch 12, 14 sends via a radio interface (Wi-Fi, 5G, etc.).
[0052] In stage 220, it is determined how many emergency stop switches are in the system and are assigned to the system (for example, by entering the part numbers of the switches used). The switch information (in the form of lookup tables 12, 14) is then combined into a transformation table 26. The transformation table is generated such that a fixed combination of the lookup tables 12, 14 with the transformation table 26 leads to a fixed result in a control table 28. The transformation table is transmitted to unit 30 providing information or is made available to it.
[0053] Stages 210 and 220 are executed, for example, in configuration unit 20. After the end of configuration phase 201, configuration unit 20 can be switched off.
[0054] In phase 202 of operation, the calculation of useful data takes place in stage 230. This involves the first signals 13 from the emergency stop switches 12-14 being received by the information-providing computer unit 30. At the start of the communication, a handshake is required between the emergency stop switches 12-14 and the information-providing computer unit 30 to ensure that the two processing stages occur simultaneously. The information-providing computer unit 30 receives / loads the data from the transformation table 26 (for safety reasons, the information-providing computer unit 30 must not have access to the control table 28), and calculates the useful data using the first signals 13 from the emergency stop switches 12-14 and the transformation table 26. The resulting vehicle message (Vehicle Message) 34 is sent to vehicle 60.By using transformation table 26, which depends on the system configuration, it is ensured that messages with an unmodified transformation can be sent to vehicle 60, even during modifications, throughout the entire system. This might be necessary, for example, if emergency stop switches in the overall system need to be added, replaced, and / or removed. The relevant data can be generated within the computer unit 62 itself, be present there, or be received from an external source, for example, from the computer unit 30 providing information.
[0055] At stage 240, the retransformation and control of the useful data and, respectively, of the vehicle message 34, take place by the computer platform 62 for the control of the vehicle 60 actuators. This computer platform 62 receives the vehicle message 34 and receives / loads data from the control table 28. The data in the control table 28 remains unchanged even if the entire system is modified. The transformation table 26—adapted as necessary if there are modifications—maintains this. The data from control table 28 can be displayed, for example, once during operation in vehicle 60, or can be continuously retrieved from the vehicle via a data interface (if needed), or can be programmed by the vehicle manufacturer according to predetermined rules. The necessary transformation of the data from consultation tables 22-24 can be carried out by adapting transformation table 26.
[0056] The computer platform 62 processes the vehicle message 34 and checks its validity. This verifies whether the emergency stop switches are functioning correctly and have not been activated. Preferably, the validity check can be combined with an existing watchdog (for example, for a safety check). If the check matches the control table, it is concluded that none of the emergency stop switches 12, 14 have been activated, and the vehicle 60 executes, in stage 242, the traffic instructions included, where applicable, by the relevant data.
[0057] If the check results in a failure, it can be inferred that an emergency stop switch 12, 14 has been activated or, for example, that there is a malfunction or a signal interruption between at least one of the emergency stop switches 12, 14 and the information-providing computer unit. In this case, the vehicle 60 performs, in stage 244, a previously defined safety maneuver ("minimum danger maneuver"). This means, for example, that the computer platform 62 puts the vehicle 60 into a safe state (e.g., stopped).
[0058] Figure 3 shows a computer instruction on how the transformation table 26 is formed from the input information of table 22, lookup table 24, and control table 28. In the example shown, the signal values (according to lookup tables 22 and 24) received from the emergency stop switches 12 and 14 at each time t0, t1, t2, etc., are summed together. The corresponding input (offset) of the transformation table is thus determined so that, by adding it to the offset generated by the transformation table 26 at each time t0, t1, t2, etc., the target value for control table 28 is obtained. For example, the emergency stop switches 12 and 14 are thus required to send the values "2" and "5" at time t1. The offset of "3" is assigned to the transformation table 26 for tl so that by adding the target value according to the control table 28 for tl, we obtain "10".This calculation rule simply serves to explain how to proceed and can be formed in any other mathematical way (such as by multiplication, etc.).
Claims
Demands
1. A method for an emergency vehicle stop function (60) in an infrastructure network; wherein - a configuration unit (20) establishes, from lookup tables (22, 24) corresponding to a current system configuration, with knowledge of a control table (28) independent of a target configuration, a transformation table (26), - a computer unit (30) providing information performs the following stages: a) reception and / or reading by the configuration unit (20) of the transformation table (26), which depends on the system configuration, b) reception of first signals (13) from one or more emergency stop switches (12, 14) from an infrastructure, c) transformation of a useful data set (42) using the first signals (13) and the transformation table (26),d) return of the transformed useful data (34) to a computer platform (62) of a vehicle (60) in an infrastructure network, and wherein - at least one computer platform (62) assigned to a vehicle (60) in an infrastructure network, performs, for the actuator control of the vehicle (60) in the infrastructure network, the following stages: e) reception of the transformed useful data (34) by the computer unit (30) providing information, f) representation of the control table (28), which is independent of the configuration, g) retransformation of the useful data (34) using the control table (28) and thus checking the validity of the useful data; h) upon detection of an invalidity, execution of a predefined safety maneuver.
2. A method according to claim 1, wherein the pre-defined safety maneuver includes an immediate stop of the vehicle (60).
3. A method according to any one of claims 1 or 2, wherein the emergency stop switch(es) (12, 14) cyclically send first signals (13) comprising unique identity information as well as current status information, in particular " activated” or “not activated”, to the computer unit (30) giving information.
4. A method according to claim 3, wherein the information-giving computer unit (30) provides current status information (32) for each emergency stop switch (12, 14), wherein the status information (32) is in particular suitable for being represented on an HMI (50).
5. A method according to any one of claims 3 or 4, wherein the status information (32) includes a position of the respective emergency stop switch (12, 14) within the infrastructure.
6. Infrastructure system (10) for networked vehicles (60), comprising: - an infrastructure computing unit (40), which is constituted to produce useful data (42), in particular control data for networked vehicles (60) within a defined infrastructure; - an information-giving computing unit (30), which is arranged to receive the useful data (42) from the infrastructure computing unit (40) to produce, using the useful data (42), a message (34), in particular a vehicle message, and to send the message (34); - one or more emergency stop switches (12, 14), which are arranged within the infrastructure and which is / are constituted to send initial signals (13) to the information-giving computing unit (30);- a configuration unit (20) having a database (21), comprising one or more lookup tables (22, 24), in which a lookup table (22, 24) is assigned to each emergency stop switch (12, 14) and in which the database (21) comprises: - a configuration definition (25) of the infrastructure system (10) which indicates, in particular, the emergency stop switches (12, 14) being assigned to the infrastructure system (10); - a transformation table (26) established by means of the configuration definition (25), in which the transformation table (26) is established from the lookup tables (22, 24) with knowledge; of a control table (28) to be reached independent of the configuration; - in which the information-giving computer unit (30) is arranged to call the transformation table (26) of the database (21) and by means of the first signals (13) received, - to transform the useful data (42) at the transformation table (26) and send them to a vehicle (60) in the infrastructure network.
7. A vehicle (60) in an infrastructure network, which is constituted to be guided in a manner at least partially automated within an infrastructure comprising an infrastructure system (10) according to claim 6 comprising: - a computer platform (62) for controlling vehicle actuators, which is arranged - to receive transformed useful data (34) from the computer unit (30) providing information from the infrastructure system (10), - to receive and / or read a control table (28), - to retransform the useful data using the control table (28) and to check the validity of the useful data using the control table (28); - in the event of a detected invalidity, to control the actuators of the vehicle (60) so as to perform a predefined safety maneuver.
8. Vehicle according to claim 7, the computer platform (62) being configured to receive and / or read the transformation table.
9. A method for configuring a networked vehicle infrastructure system (10) according to claim 6, comprising the steps a. a defined number of emergency stop switches (12, 14) are provided, b. a configuration-independent control table (28) is provided, c. each emergency stop switch (12, 14) is coupled to a one-to-one lookup table (22, 24), d. using the lookup tables, a transformation table (26) is produced taking into account the control table (28), e. the transformation table (26) and the control table (28) are made available.
10. A method according to claim 9, wherein a respective position information is established for all the emergency stop switches (12, 14) and stored in such a way that the information-providing computer unit (30) has access to the respective position information so that it can be displayed in an HMI (50) where the activated emergency stop switch (12, 14) is located.
Citation Information
Patent Citations
AUTONOMOUS VEHICLE, METHOD FOR QUERYING THE REMOTE CONTROL THEREOF
DE102022209181A1
Autonomous vehicle speed control device
EP3756929A1
A system for controlling a plurality of autonomous vehicles on a mine site
EP3855273A1
Method and apparatus for operating a vehicle
US20180286249A1
Control device, system, control method, and storage medium storing program
US20230049918A1