vehicle

Abstract

To appropriately switch a control state of a vehicle between automatic driving and manual driving in the vehicle mounted with an automatic driving system.SOLUTION: The VCIB2 executes a process including a step (S104) of controlling evacuation traveling when there is a switching command from the VCIB1 (YES in the S100) and there is an evacuation command from the ADC2 (YES in the S102), a step (S108) of invalidating a PCS stopping command when manual driving is being performed (YES in the S106) even when there is the PCS stopping command from the ADC2 (YES in the), and a step () of outputting the PCS stopping command when manual driving is not being performed (NO in the). S110 S108 S112.SELECTED DRAWING: Figure 3

Description

[Technical Field]

[0001] The present disclosure relates to vehicles. [Background technology]

[0002] In recent years, autonomous driving systems that allow vehicles to travel without receiving user operations have been developed. For example, autonomous driving systems may be provided separately from the vehicle via an interface so that they can be installed in existing vehicles.

[0003] For example, Japanese Patent Application Laid-Open Publication No. 2018-132015 (Patent Document 1) discloses a technology in which automatic driving control of a vehicle is comprehensively executed by a computer constituting an automatic driving system provided in the vehicle. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Japanese Patent Application Publication No. 2018-132015 Summary of the Invention [Problem to be solved by the invention]

[0005] During autonomous driving using an autonomous driving system such as the one described above, vehicle control is executed based on commands from the autonomous driving system. Therefore, during autonomous driving, it is required to stop the vehicle control in order to suppress interference, such as execution of vehicle control separate from commands from the autonomous driving system. However, if an abnormality occurs in the autonomous driving system during autonomous driving, the state of the vehicle control may not be appropriately switched. Specifically, when an abnormality occurs in the autonomous driving system and the vehicle is driven to evacuate, and then switched to manual driving, if the vehicle control is stopped, the vehicle control may not be executed during manual driving.

[0006] The present disclosure has been made to solve the above-mentioned problems, and its purpose is to provide a vehicle equipped with an autonomous driving system that can appropriately switch vehicle control states between autonomous driving and manual driving. [Means for solving the problem]

[0007] A vehicle according to an aspect of the present disclosure includes an autonomous driving system that performs autonomous driving of the vehicle and a vehicle platform capable of receiving commands from the autonomous driving system. The vehicle platform includes a base vehicle and a vehicle control interface that interfaces between the vehicle platform and the autonomous driving system. The base vehicle includes a vehicle control device that controls vehicle equipment independently of commands from the autonomous driving system. The autonomous driving system outputs a stop command to the base vehicle via the vehicle control interface, requesting that control of the vehicle using the vehicle control device be stopped while autonomous driving is being performed. The vehicle control interface does not accept the stop command from the autonomous driving system while manual driving is being performed.

[0008] In this way, stop commands from the automatic driving system are disabled during manual driving, thereby preventing the control of the vehicle using the vehicle control device from being stopped during manual driving.

[0009] In one embodiment, the vehicle control device controls the vehicle to avoid a vehicle collision when a condition in which a vehicle collision is predicted occurs.

[0010] In this way, collision avoidance vehicle control by the vehicle control device is stopped during automatic driving, thereby suppressing interference with automatic driving.

[0011] In yet another embodiment, the vehicle control interface includes a first control device and a second control device. The automated driving system includes a first automated driving device that outputs commands to the base vehicle via the first control device, and a second automated driving device that outputs commands to the base vehicle via the second control device when an abnormality occurs in the first automated driving device. When an abnormality occurs in the first automated driving device, a command to perform evacuation driving using the second automated driving device and the second control device is output to the base vehicle. The second control device does not accept a stop command from the second automated driving device when manual driving is performed after the evacuation driving.

[0012] In this way, it is possible to execute control of the vehicle using the vehicle control device during manual driving after the execution of the evacuation control. [Effects of the Invention]

[0013] According to the present disclosure, it is possible to provide a vehicle equipped with an autonomous driving system that can appropriately switch the vehicle control state between autonomous driving and manual driving. [Brief explanation of the drawings]

[0014] [Figure 1] 1 is a diagram illustrating an overview of a vehicle according to an embodiment of the present disclosure. [Figure 2] FIG. 2 is a diagram for explaining in detail the configurations of ADS, VCIB, and VP. [Figure 3] 10 is a flowchart illustrating an example of processing executed by the VCIB. [Figure 4] FIG. 10 is a diagram for explaining an example of the operation of the VCIB. DETAILED DESCRIPTION OF THE INVENTION

[0015] Hereinafter, embodiments of the present disclosure will be described in detail with reference to the drawings. In the drawings, the same or corresponding parts are designated by the same reference numerals, and description thereof will not be repeated.

[0016] Fig. 1 is a diagram illustrating an overview of a vehicle 10 according to an embodiment of the present disclosure. Referring to Fig. 1, the vehicle 10 includes an autonomous driving kit (hereinafter referred to as an "ADK (Autonomous Driving Kit)") 200 and a vehicle platform (hereinafter referred to as a "VP (Vehicle Platform)") 120. The ADK 200 and the VP 120 are configured to be able to communicate with each other via a vehicle control interface.

[0017] The vehicle 10 performs automatic driving in accordance with a control request (command) from the ADK 200 attached to the VP 120. The ADK 200 is attached to the rooftop or the like of the base vehicle 100, which will be described later. The ADK 200 is configured to be detachable from the VP 120. When the ADK 200 is detached, the VP 120 can be manually driven by a user. In this case, the VP 120 executes driving control in manual mode.

[0018] The ADK 200 includes an autonomous driving system (hereinafter referred to as "ADS (Autonomous Driving System)") 202 for autonomously driving the vehicle 10. The ADS 202 creates a driving plan for the vehicle 10 and outputs various commands (control requests) to the VP 120 for driving the vehicle 10 in accordance with the created driving plan, in accordance with an API (Application Program Interface) defined for each command. The ADS 202 receives various signals indicating the state of the VP 120 (vehicle state) from the VP 120 in accordance with the API defined for each signal, and reflects the received vehicle state in creating the driving plan.

[0019] The VP 120 includes a base vehicle 100 and a vehicle control interface box (hereinafter referred to as a "VCIB (Vehicle Control Interface Box)") 111 that is provided in the base vehicle 100 and that realizes a vehicle control interface.

[0020] The VCIB 111 can communicate with the ADK 200 via a CAN (Controller Area Network) or the like. The VCIB 111 executes a predetermined API defined for each communicated signal to receive various commands from the ADK 200 and also outputs the status of the VP 120 to the ADK 200. That is, when the VCIB 111 receives a control request from the ADK 200, it outputs a control command corresponding to the control request to a system corresponding to the control command via the integrated control manager 115. The VCIB 111 also acquires various pieces of information about the base vehicle 100 from various systems via the integrated control manager 115 and outputs the status of the base vehicle 100 to the ADK 200 as a vehicle status.

[0021] The VP 120 includes various systems and sensors for controlling the base vehicle 100. The VP 120 executes various vehicle controls in accordance with control requests from the ADK 200 (specifically, the ADS 202), thereby performing automatic driving of the vehicle 10. The VP 120 includes, for example, a brake system 121, a steering system 122, a powertrain system 123, an active safety system 125, and a body system 126.

[0022] The brake system 121 is configured to be able to control a plurality of braking devices provided on each wheel of the base vehicle 100. The braking devices include, for example, a disc brake system that operates using hydraulic pressure adjusted by an actuator.

[0023] Wheel speed sensors 127A and 127B, for example, are connected to the brake system 121. Wheel speed sensor 127A is provided, for example, on the front wheels of base vehicle 100 and detects the rotational speed of the front wheels. Wheel speed sensor 127A outputs the rotational speed of the front wheels to brake system 121. Wheel speed sensor 127B is provided, for example, on the rear wheels of base vehicle 100 and detects the rotational speed of the rear wheels. Wheel speed sensor 127B outputs the rotational speed of the rear wheels to brake system 121. Brake system 121 outputs the rotational speed of each wheel to VCIB 111 as one piece of information included in the vehicle state.

[0024] The brake system 121 generates a braking command for the braking device in accordance with a predetermined control request output from the ADK 200 via the VCIB 111 and the integrated control manager 115, and controls the braking device using the generated braking command.

[0025] The steering system 122 is configured to be able to use a steering device to control the steering angle of the steering wheels of the vehicle 10. The steering device includes, for example, a rack and pinion type EPS (Electric Power Steering) that is capable of adjusting the steering angle using an actuator.

[0026] A pinion angle sensor 128 that detects the rotation angle (pinion angle) of a pinion gear connected to a rotation shaft of an actuator that constitutes a steering device is connected to the steering system 122. The steering system 122 outputs the detected pinion angle to the VCIB 111 as one piece of information included in the vehicle state.

[0027] The steering system 122 generates a steering command for the steering device in accordance with a predetermined control request (steering request) output from the ADK 200 via the VCIB 111 and the integrated control manager 115, and controls the steering device using the generated steering command.

[0028] The powertrain system 123 controls an EPB (Electric Parking Brake) provided on at least one of the multiple wheels provided on the vehicle 10, a parking lock (hereinafter referred to as P-Lock) device provided on the transmission of the vehicle 10, a shift device configured to be able to select one of multiple shift ranges, and the drive source of the vehicle 10.

[0029] The active safety system 125 uses a camera 129A and radar sensors 129B, 129C to detect obstacles (obstacles or people) in front or behind the vehicle, and if it determines that there is a possibility of a collision based on the distance to the obstacle or the direction of movement of the vehicle 10, it outputs a braking command to the brake system 121 via the integrated control manager 115 to increase the braking force.

[0030] The body system 126 is configured to be able to control components such as turn signals, a horn, or wipers in accordance with the driving state or driving environment of the vehicle 10. The body system 126 controls the above-mentioned components in accordance with a predetermined control request output from the ADK 200 via the VCIB 111 and the integrated control manager 115.

[0031] Vehicle 10 may be employed as one component of a MaaS (Mobility as a Service) system. In addition to vehicle 10, the MaaS system may further include, for example, a data server, a Mobility Service Platform (MSPF), and an autonomous driving-related mobility service (none of which are shown).

[0032] Vehicle 10 further includes a DCM (Data Communication Module) (not shown) as a communication I / F (interface) for wireless communication with the data server described above. The DCM outputs various vehicle information, such as speed, position, and autonomous driving status, to the data server. The DCM also receives various data for managing the travel of autonomously driven vehicles, including vehicle 10, from the mobility service via the MSPF and the data server, for example, in an autonomous driving-related mobility service.

[0033] 2 is a diagram for explaining in detail the configuration of the ADS 202, the VCIB 111, and the VP 120. As shown in FIG. 2, the ADS 202 includes a computer assembly (hereinafter referred to as "CA") 210, an HMI (Human Machine Interface) 230, a recognition sensor 260, an attitude sensor 270, and a sensor cleaner 290.

[0034] During autonomous driving of the vehicle 10, the CA 210 acquires information about the environment around the vehicle, the vehicle's attitude, behavior, and position using various sensors described below, and also acquires the vehicle state from the VP 120 described below via the VCIB 111 to set the next operation of the vehicle 10 (such as acceleration, deceleration, or turning). The CA 210 outputs various commands to the VCIB 111 to realize the set next operation of the vehicle 10. The CA 210 includes computer modules for autonomous driving (hereinafter referred to as "ADC") 210A and 210B. In this embodiment, "ADC 210A" and "ADC 210B" correspond to the "first autonomous driving device" and the "second autonomous driving device," respectively. Each of the ADCs 210A and 210B is configured to be able to communicate with the VCIB 111.

[0035] The HMI 230 presents information to the user and accepts operations during automatic driving, during driving requiring user operation, or during transition between automatic driving and manual driving requiring user operation. The HMI 230 is configured to be connectable to input / output devices such as a touch panel display provided on the base vehicle 100, a display device, and an operation device.

[0036] The recognition sensor 260 includes a sensor for recognizing the environment around the vehicle 10, and is configured by, for example, at least one of a LIDAR (Laser Imaging Detection and Ranging), a millimeter wave radar, and a camera.

[0037] LIDAR is a distance measurement device that emits pulsed laser light (infrared light) and measures distance based on the time it takes for the light to reflect off an object and return. Millimeter-wave radar is a distance measurement device that emits short-wavelength radio waves toward an object and detects the radio waves returning from the object to measure the distance and direction to the object. The camera is placed, for example, behind the rearview mirror inside the vehicle and is used to capture images of the area ahead of the vehicle. Information acquired by the recognition sensor 260 is output to the CA 210. Image processing of the images and videos captured by the camera using artificial intelligence (AI) and an image processing processor enables the vehicle 10 to recognize other vehicles, obstacles, or people ahead.

[0038] The attitude sensor 270 includes a sensor that detects the attitude, behavior, or position of the vehicle 10, and is configured by, for example, an IMU (Inertial Measurement Unit) or a GPS (Global Positioning System).

[0039] The IMU detects, for example, acceleration in the longitudinal, lateral, and vertical directions of the vehicle, and angular velocities in the roll, pitch, and yaw directions of the vehicle 10. The GPS detects the position of the vehicle 10 using information received from multiple GPS satellites orbiting the Earth. The information acquired by the attitude sensor 270 is output to the CA 210.

[0040] Sensor cleaner 290 is configured to remove dirt that adheres to various sensors while the vehicle is traveling. For example, sensor cleaner 290 removes dirt from camera lenses, laser and radio wave emitting parts, etc., using cleaning fluid, wipers, etc.

[0041] The VCIB111 includes VCIB111A and VCIB111B. "VCIB111A" and "VCIB111B" correspond to the "first control device" and the "second control device," respectively. The VCIB111A and VCIB111B incorporate a central processing unit (CPU) and memory (including, for example, read-only memory (ROM) and random access memory (RAM)) (not shown). The VCIB111A has the same functions as the VCIB111B, but the connections to the multiple systems that make up the VP120 are partially different.

[0042] The VCIB 111A and the VCIB 111B are communicably connected to the ADC 210A and the ADC 210B, respectively, of the CA 210. Furthermore, the VCIB 111A and the VCIB 111B are communicably connected to each other.

[0043] Each of the VCIBs 111A and 111B relays various commands corresponding to control requests from the ADS 202 and outputs them as control commands to the corresponding systems of the VP 120. More specifically, each of the VCIBs 111A and 111B uses information such as programs stored in memory (for example, APIs) to generate control commands used to control the corresponding systems of the VP 120 using various command commands output from the ADS 202, and outputs the control commands to the corresponding systems. Each of the VCIBs 111A and 111B also relays vehicle information output from each system of the VP 120 and outputs it to the ADS 202 as a vehicle status. Note that the information indicating the vehicle status may be the same information as the vehicle information, or may be information extracted from the vehicle information to be used in processing executed by the ADS 202.

[0044] By providing VCIB111A and VCIB111B, which have equivalent functions for the operation of some systems (for example, braking and steering), the control system between ADS202 and VP 120 is made redundant. Therefore, when a failure occurs in part of the system, the function of VP 120 (turning, stopping, etc.) can be maintained by switching the control system as appropriate or by shutting off the control system where the failure occurred.

[0045] The brake system 121 includes brake systems 121A and 121B. The steering system 122 includes steering systems 122A and 122B. The powertrain system 123 includes an EPB system 123A, a P-Lock system 123B, and a propulsion system 124. The VCIB 111A, and among the multiple systems of the VP 120, the brake system 121A, the steering system 122A, the EPB system 123A, the P-Lock system 123B, the propulsion system 124, and the body system 126 are connected to each other via a communication bus so as to be able to communicate with each other. Furthermore, the VCIB 111B, and among the multiple systems of the VP 120, the brake system 121B, the steering system 122B, and the P-Lock system 123B are connected to each other via a communication bus so as to be able to communicate with each other.

[0046] Both brake systems 121A and 121B are configured to be able to control multiple braking devices provided on each wheel of the vehicle. Brake system 121A may have the same function as brake system 121B, or, for example, one of them may be configured to be able to independently control the braking force of each wheel when the vehicle is traveling, and the other may be configured to be able to control so that the same braking force is generated on each wheel when the vehicle is traveling.

[0047] The brake systems 121A and 121B generate braking commands for the brake devices in accordance with control requests output from the ADS 202 via the VCIB 111A and VCIB 111B, respectively. Either of the brake systems 121A and 121B is used to control the brake devices, and if an abnormality occurs in one of the brake systems, the other is used to control the brake device.

[0048] Both the steering systems 122A and 122B are configured to be able to use a steering device to control the steering angle of the steering wheels of the vehicle 10. The steering system 122A has similar functions as the steering system 122B.

[0049] The steering systems 122A and 122B generate steering commands for the steering devices in accordance with control requests output from the ADS 202 via the VCIB 111A and VCIB 111B, respectively. Either of the steering systems 122A and 122B is used to control the steering devices, and if an abnormality occurs in one of the steering systems, the other is used to control the steering device.

[0050] The EPB system 123A is configured to be able to control the EPB. The EPB fixes the wheels by operating the actuator. The EPB system 123A controls the EPB in accordance with a control request output from the ADS 202 via the VCIB 111A.

[0051] The P-Lock system 123B is configured to be able to control the P-Lock device. The P-Lock system 123B controls the P-Lock device in accordance with a control request output from the ADS 202 via the VCIB 111A. For example, the P-Lock system 123B activates the P-Lock device when the control request output from the ADS 202 via the VCIB 111A includes a control request to change the shift range to parking range (hereinafter referred to as P range), and deactivates the P-Lock device when the control request includes a control request to change the shift range to a range other than P range.

[0052] The propulsion system 124 is configured to be capable of switching the shift range using a shift device and to be capable of controlling the driving force of the vehicle 10 in the direction of movement of the vehicle 10 using a driving source. The switchable shift ranges include, for example, a P range, a neutral range (hereinafter referred to as an N range), a forward driving range (hereinafter referred to as a D range), and a reverse driving range (hereinafter referred to as an R range). The driving source includes, for example, a motor generator, an engine, etc.

[0053] The propulsion system 124 controls the shift device and the drive source in accordance with the control request output from the ADS 202 via the VCIB 111A. For example, when the control request output from the ADS 202 via the VCIB 111A includes a control request to change the shift range to P range, the propulsion system 124 controls the shift device so that the shift range is set to P range.

[0054] The active safety system 125 is communicatively connected to the brake system 121A. The active safety system 125 includes a pre-crash safety system (PCS) 125A and a front camera module (FCM) 125B configured by a camera 129A and a radar sensor 129B. As described above, the PCS 125A detects obstacles, etc. (obstacles or people) ahead using the camera 129A and the radar sensor 129B, and when predicting the possibility of a collision based on the distance to the obstacle, etc., outputs a braking command to the brake system 121A to increase the braking force to avoid the collision. The PCS 125A corresponds to a "vehicle control device." Note that the active safety system 125 (PCS 125A) may be communicatively connected to the VCIB 111A via the brake system 121A, for example, or may be communicatively connected directly.

[0055] The body system 126 controls components such as a turn signal, a horn, or a wiper in accordance with a control request output from the ADS 202 via the VCIB 111A.

[0056] Note that an operating device (not shown) that allows a user to manually operate the above-mentioned braking device, steering device, EPB, P-Lock device, shift device, drive source, etc. is provided separately. The brake system 121, steering system 122, and propulsion system 124 constitute the VSC 100A.

[0057] The various commands corresponding to the control requests output from ADS202 to VCIB111 include a propulsion direction command requesting a change in the shift range, a stationary command requesting activation or deactivation of the EPB or P-Lock device, an acceleration command requesting acceleration or deceleration of the vehicle 10, a tire turning angle command requesting the tire turning angle of the steering wheels, a vehicle mode command requesting a change in the vehicle mode state between the automatic driving mode and the manual mode, and a stop command requesting the vehicle to be held stationary or the vehicle to be released from the stationary state.

[0058] In the vehicle 10 having the above configuration, for example, when the autonomous driving mode is selected as the vehicle mode state by a user's operation on the HMI 230, autonomous driving is performed. As described above, the ADS 202 first creates a driving plan during autonomous driving. The driving plan includes a plurality of plans for the operation of the vehicle 10, such as a plan to continue driving straight, a plan to turn left or right at a predetermined intersection along a predetermined driving route, or a plan to change the driving lane to a lane different from the lane in which the vehicle is driving.

[0059] The ADS202 extracts control physical quantities (e.g., acceleration or deceleration, tire turning angle, etc.) necessary for the vehicle 10 to operate in accordance with the created driving plan. The ADS202 divides the physical quantities for each execution cycle of the API. The ADS202 executes the API using the divided physical quantities and outputs various commands to the VCIB111. Furthermore, the ADS202 acquires vehicle states (e.g., the actual moving direction of the vehicle 10, the vehicle's immobilization state, etc.) from the VP120 and recreates a driving plan that reflects the acquired vehicle states. In this way, the ADS202 enables autonomous driving of the vehicle 10. Note that when predetermined conditions are met, the ADS202 outputs a stop command (hereinafter referred to as a PCS stop command) to the base vehicle 100 via the VCIB111 to stop the operation of the PCS125A, which operates independently of autonomous driving. The predetermined conditions may include, for example, a condition that autonomous driving is being executed.

[0060] The ADS 202 mounted on such a vehicle 10 is provided with the ADCs 210A and 210B for redundancy, enabling autonomous driving as described above. Therefore, for example, if a communication abnormality occurs with the VCIB 111A on the vehicle side while autonomous driving is being performed using the ADC 210A, autonomous driving can be continued using the ADC 210B. If a communication abnormality occurs with the ADC 210A, the VCIB 111A outputs an evacuation running execution command to the base vehicle 100 and the VCIB 111B using the ADC 210B and the VCIB 111B. After the vehicle 10 has performed evacuation running, the vehicle is switched to manual driving. In this case, if a PCS stop command is output in response to a request from the ADC 210B and the operation of the PCS 125A is stopped, vehicle control by the PCS 125A may not be performed during manual driving.

[0061] Therefore, in this embodiment, while the VCIB 111 is in manual operation, it is assumed that it does not accept a stop command from the ADS 202. More specifically, even if the VCIB 111B receives a PCS stop command from the ADC 210B while it is in manual operation, it is assumed that it does not accept the received PCS stop command.

[0062] In this way, during manual driving, the stop command from the ADS 202 is invalidated, and therefore it is possible to prevent the control of the vehicle 10 using the PCS 125A from being stopped during manual driving.

[0063] The processing executed by the VCIB 111B will be described below with reference to Fig. 3. Fig. 3 is a flowchart showing an example of the processing executed by the VCIB 111B. For example, the VCIB 111B repeatedly executes the following processing at each execution cycle of the API.

[0064] In step (hereinafter, step will be abbreviated as S) 100, the VCIB 111B determines whether or not there is a switching command from the VCIB 111A.

[0065] For example, if a state in which the VCIB 111A does not receive various signals from the ADC 210A continues for a predetermined time, the VCIB 111A determines that communication with the ADC 210 is abnormal. If it is determined that an abnormality has occurred in communication with the ADC 210A, the VCIB 111A outputs a switching command. For example, the VCIB 111A outputs a switching command to each of the VSC 100A and the VCIB 111B to switch the control entity from the VCIB 111A to the VCIB 111B. If it is determined that a switching command has been issued from the VCIB 111A (YES in S100), the process proceeds to S102.

[0066] In S102, the VCIB 111B determines whether or not there is an evacuation command from the ADC 210B. For example, when the ADC 210B receives information from the ADC 210A indicating that an abnormality has occurred in communication with the VCIB 111A, the ADC 210B outputs an evacuation travel execution command to the VCIB 111B as an evacuation command. If it is determined that there is an evacuation command from the ADC 210B (YES in S102), the process proceeds to S104.

[0067] In S104, the VCIB 111B executes evacuation travel control. The evacuation travel may include, for example, control to adjust the braking force and acceleration to stop the vehicle 10, or control to adjust the braking force and acceleration to stop the vehicle 10 while steering the vehicle 10 to pull over to the shoulder of the road, or control to operate the EPB 123A or the P-Lock system 123B to restrict movement of the vehicle 10 after the vehicle has stopped. Furthermore, after the evacuation travel is completed, the VCIB 111B switches to manual driving mode to enable the user to drive the vehicle. Then, the process proceeds to S106.

[0068] In S106, the VCIB 111B determines whether or not a PCS stop command has been received from the ADC 210B. For example, when it is determined that communication between the VCIB 111A and the ADC 210A is abnormal, the ADC 210B outputs a PCS stop command to the VCIB 111B if it determines that a predetermined condition (for example, a condition that automatic driving is being performed) is satisfied. If the PCS stop command has been received from the ADC 210B and it is determined that a PCS stop command has been received (YES in S106), the process proceeds to S108.

[0069] In S108, the VCIB 111B determines whether the vehicle is being manually driven. For example, if the vehicle mode state is the manual driving mode, the VCIB 111B determines that the vehicle is being manually driven. If it is determined that the vehicle is being manually driven (YES in S108), the process proceeds to S110.

[0070] In S110, the VCIB 111B invalidates the PCS stop command received from the ADC 210B. For example, the VCIB 111B does not accept the PCS stop command received from the ADC 210B, and does not output the PCS stop command to the PCS 125A via the VCIB 111A. Thereafter, the process ends. Note that if it is determined that the vehicle is not in manual operation (NO in S108), the process proceeds to S112.

[0071] In S112, the VCIB 111B outputs a PCS stop command to the PCS 125A via the VCIB 111A. Upon receiving the PCS stop command, the PCS 125A stops vehicle travel control by the PCS 125A. Thereafter, the process ends. Note that if it is determined that there is no switching command from the VCIB 111B (NO in S100), if it is determined that there is no evacuation command from the ADC 210B (NO in S102), or if it is determined that there is no PCS stop command from the ADC 210B (NO in S106), this process ends.

[0072] The operation of the VCIB 111 based on the above-described structure and flowchart will be described with reference to Fig. 4. Fig. 4 is a diagram for explaining an example of the operation of the VCIB 111.

[0073] Hereinafter, it is assumed that an abnormality occurs in communication between the ADC 210A and the VCIB 111A during automatic driving, as shown in FIG. 4(A).

[0074] When it is determined that an abnormality has occurred in the communication between the ADC 210A and the VCIB 111A, a switching command is output to the VSC 100A and the VCIB 111B to switch the control entity from the VCIB 111A to the VCIB 111B, as shown in (B) and (C) of FIG. 4. When the switching command is received in the VCIB 111B (YES in S100), it is determined whether or not there is an evacuation command from the ADC 210B. When the ADC 210B acquires information about the communication abnormality between the ADC 210A and the VCIB 111A from the ADC 210A, a command to execute evacuation travel (evacuation command) is output from the ADC 210B to the VCIB 111B, as shown in (D) of FIG. When the evacuation command is received in the VCIB 111B (YES in S102), the VCIB 111B executes evacuation control on the VSC 100A (S104), as shown in (E) of FIG. 4, and the vehicle 10 performs evacuation travel. After the evacuation travel is completed, the driving mode is changed to the manual driving mode, as shown in (F) of FIG. 4. Meanwhile, the ADC 210B determines that a predetermined condition is met, and outputs a PCS stop command to the VCIB 111B, as shown in (G) of FIG. 4. If the PCS stop command is received from the ADC 210B (YES in S106) and manual driving is in progress (YES in S108), the PCS stop command is invalidated (S110), as shown in (H) of FIG. 4. That is, the PCS stop command is not accepted, and stopping of the vehicle 10 by the PCS 125A is inhibited. That is, transmission of a PSC stop command from the VCIB 111B to the PCS 125A via the VCIB 111A is inhibited. Therefore, a state in which the vehicle can be controlled by the PCS 125A is maintained.

[0075] As described above, according to vehicle 10 according to the present embodiment, the stop command from ADC 210B is disabled during manual driving, so that it is possible to prevent control of vehicle 10 using PCS 125A from being stopped during manual driving. Therefore, it is possible to provide a vehicle equipped with an automatic driving system that appropriately switches the vehicle control state between automatic driving and manual driving.

[0076] Modifications will be described below.

[0077] In the above-described embodiment, control of vehicle 10 by PCS125A has been described as an example of control of vehicle 10 that is performed independently of automatic driving, but this is not particularly limited to control of vehicle 10 by PCS125A.

[0078] Furthermore, in the above embodiment, it has been described that VCIB111B does not accept a PCS stop command from ADC210B when manual driving is performed after evacuation driving, but VCIB111A may also not accept a PCS stop command from VCIB111B when manual driving is performed.

[0079] The above-described modifications may be implemented in whole or in part in appropriate combination.

[0080] The embodiments disclosed herein should be considered to be illustrative in all respects and not restrictive. The scope of the present invention is defined by the claims, not by the above description, and is intended to include all modifications within the meaning and scope of the claims. [Explanation of symbols]

[0081] 10 vehicles, 100 base vehicles, 111,111A,111B VCIB, 115 integrated control manager, 120 VP, 200 ADK.

Claims

1. An autonomous driving system that automatically drives a vehicle; a vehicle platform capable of receiving commands from the automated driving system; the vehicle platform includes a base vehicle and a vehicle control interface that interfaces between the vehicle platform and the automated driving system; the base vehicle includes a vehicle control device that controls equipment of the vehicle independently of commands from the automated driving system; the autonomous driving system outputs a stop command to the base vehicle via the vehicle control interface, requesting that control of the vehicle using the vehicle control device be stopped while the autonomous driving is being performed; A vehicle, wherein the vehicle control interface does not accept the stop command from the automated driving system while manual driving is being performed.

2. The vehicle according to claim 1 , wherein the vehicle control device controls the vehicle to avoid a collision of the vehicle when a state in which a collision of the vehicle is predicted occurs.

3. the vehicle control interface includes a first control device and a second control device; The automated driving system includes a first automated driving device that outputs a command to the base vehicle via the first control device, and a second automated driving device that outputs a command to the base vehicle via the second control device when an abnormality occurs in the first automated driving device, When an abnormality occurs in the first automatic driving device, an instruction to execute evacuation traveling using the second automatic driving device and the second control device is output to the base vehicle, The vehicle according to claim 1 or 2, wherein the second control device does not accept the stop command from the second automatic driving device when the manual driving is performed after the evacuation traveling.

Images