Autonomous Driving Redundancy Architecture for Brake-by-Wire Failure

Overview of Technical Issues:

When the brake-by-wire actuator fails in autonomous driving, the primary braking force generation function becomes insufficient or lost; if the redundant backup system cannot detect the failure quickly enough and switch control, or if the backup braking capacity itself is insufficient, the vehicle loses safe deceleration capability, creating critical safety risks; the goal is to design a redundancy architecture that ensures reliable fail-safe braking under all brake-by-wire failure scenarios.

Solution directions generated for this problem

Problem Direction 1 :

ImproveFailure detection response speed
VS
ConstraintSystem architectural complexity

Inspiration 1 : Cross-domain reference

Application Principle: #11 Beforehand cushioning
Cross-domain applicability Assess applicability
Three-phase polarity-encoded serial interface
Innovative Solution Refine solution

Pre-calibrated fault signature library for instant pattern-match detection

Pre-load fault signature library during vehicle startup
How to solve :
  • During vehicle initialization, pre-calibrate baseline signatures for all actuator failure modes (pressure drop curves, position deviation patterns, current anomalies) and store in dedicated flash memory (512KB capacity)
  • Embed a low-latency pattern-matching ASIC (application-specific integrated circuit) that compares real-time sensor data against pre-loaded signatures using parallel comparison logic, achieving detection in <30ms without multi-stage processing
  • Runtime detection reduces to simple delta comparison: sensor input minus baseline threshold triggers fault flag when deviation exceeds ±5% for ≥20ms, eliminating complex real-time calculation and additional processors
Expected Effect : Detection cycle <30ms; component count +8%; false alarm <0.3%
Risk Control :
  • signature library coverage incomplete
  • flash memory data corruption
  • ASIC pattern-matching accuracy drift

Problem Direction 2 :

ImproveBackup braking force output capacity
VS
ConstraintSystem architectural complexity

Inspiration 1 : Cross-domain reference

Application Principle: #35 Parameter changes
Cross-domain applicability Assess applicability
Front vehicle body structure
Innovative Solution Refine solution

Dual-state electromechanical actuator with capacitive pulse boost for backup braking

Reconfigure existing actuator to dual-state mode
How to solve :
  • Operate backup actuator in low-power standby mode (15W continuous) during normal operation, consuming minimal energy
  • Upon fault detection, switch to high-current pulse discharge mode using pre-charged capacitor bank (2200μF, 400V) delivering peak current 80-120A for 3-5 seconds to generate ≥80% primary braking force
  • Integrate solid-state relay matrix (switching time <5ms) between capacitor bank and actuator motor, enabling instant mode transition without additional mechanical actuators or hydraulic circuits
Expected Effect : Backup force 30%→82%, component count +8%, switching time <50ms
Risk Control :
  • capacitor aging reduces discharge capacity
  • thermal management during pulse mode
  • relay contact resistance variation

Problem Direction 3 :

ImproveFail-safe switching reliability
VS
ConstraintDetection false alarm rate

Inspiration 1 : Cross-domain reference

Application Principle: #35 Parameter changes
Cross-domain applicability Assess applicability
Systems and methods for detecting and scoring anomalies
Innovative Solution Refine solution

Context-adaptive threshold modulation for fail-safe switching

Modulate detection threshold by driving context
How to solve :
  • Implement three-tier threshold zones: emergency braking (vehicle speed >80 km/h, deceleration demand >0.6g) applies 3% degradation threshold
  • normal braking (50-80 km/h, 0.3-0.6g) uses 6% threshold
  • low-demand scenarios (<50 km/h, <0.3g) relaxes to 12% threshold — real-time switching based on CAN bus speed and brake pedal sensor inputs within 10ms
  • Deploy dual-parameter confirmation logic: require both hydraulic pressure deviation AND actuator position error to exceed threshold simultaneously for 40ms before triggering failover — cross-validation reduces noise-induced false positives by 85%
  • Integrate pre-staging buffer state: when any single parameter reaches 70% of active threshold, energize backup actuator to 30% standby pressure (consumes <5W) — upon confirmed fault, full engagement completes in <15ms, total response <50ms including detection
Expected Effect : Switching reliability 99.91%, false alarm rate 0.18%, detection latency 48ms average
Risk Control :
  • CAN bus latency jitter affecting threshold switching timing
  • dual-sensor synchronization drift over temperature range
  • backup actuator pre-staging energy consumption in extended standby

Problem Direction 4 :

ImproveFailure detection response speed
VS
ConstraintMust not deteriorate

Inspiration 1 : Cross-domain reference

Application Principle: #10 Preliminary action
Cross-domain applicability Assess applicability
Hyper temporal lidar with detection-based adaptive shot scheduling
Innovative Solution Refine solution

Pre-calibrated baseline fault detection with startup initialization

Shift complexity to vehicle startup phase
How to solve :
  • During vehicle startup, perform comprehensive baseline calibration of all brake actuator sensors (pressure, position, current) under no-load conditions, storing nominal signatures in dedicated fault detection ASIC with pre-computed threshold bands (±5% for critical parameters, ±8% for secondary)
  • runtime detection becomes simple delta comparison against stored baselines, achieving <30ms response without real-time filtering overhead
  • Implement two-stage temporal separation: Stage 1 (0-20ms) hardware comparator in ASIC flags any deviation >5% from baseline, immediately pre-charging backup actuator to 50% standby pressure
  • Stage 2 (20-50ms) confirms fault persistence via redundant sensor cross-check (pressure vs motor current correlation coefficient >0.95), triggering full failover only if both stages agree
  • During startup calibration, apply controlled test pulses (10-50 mA, 5-10 ms duration) to actuators, recording response curves at 10 kHz sampling
  • store 256-point signature vectors in ASIC SRAM, enabling pattern-matching detection with <15ms latency and <0.3% false alarm rate due to noise immunity built into pre-characterized baselines.
Expected Effect : Detection latency <30ms; false alarm rate <0.3%; 99.9% fault capture reliability
Risk Control :
  • baseline drift over actuator lifetime
  • startup calibration incomplete in cold conditions
  • ASIC pattern-matching accuracy degradation
Patsnap Eureka Solution