Vehicle Actuator Control with Dual Communication Fallback
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing advanced driver assistance systems in vehicles face challenges in ensuring secure operation when signal transmission errors occur, particularly in controlling actuators such as brakes and steering, which can compromise safety during automated driving functions.
Innovation Solution
A control apparatus with dual communication modules allows for redundant operation modes, enabling continued actuator control even if one communication module fails, by switching to an alternate communication path to ensure uninterrupted actuator command and feedback, thereby enhancing system security without increasing hardware complexity or cost.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single communication module is used for controlling actuators, then the device complexity is low, but the reliability deteriorates when communication errors occur
Solution Approach 1:
The patent implements a fallback communication mode that is prepared in advance. When the first communication module fails, the system can immediately switch to the second communication module without delay. This pre-prepared backup path cushions against communication failures and maintains system reliability.
Solution Approach 2:
The system changes the operational parameter of the communication module from a single active mode to a dual-mode configuration. The control apparatus can dynamically switch between using only the first communication module, using both modules, or using only the second communication module, thereby adapting to different failure scenarios and maintaining reliability.
2Reliability
If redundant communication modules are added, then the reliability improves, but the device complexity increases
Solution Approach 1:
The second communication module is designed with multi-functionality. It serves as a supplementary communication path during normal operation and becomes the primary communication path when the first module fails. This universal design allows the same hardware to fulfill different roles, reducing the need for completely separate redundant systems.
Solution Approach 2:
The patent merges the functionality of multiple communication modules into a single control apparatus. Both the first and second communication modules are integrated into the same device, sharing common processing resources and control logic. This merging approach reduces overall system complexity compared to having completely separate redundant systems.
3Reliability
If communication errors occur in automated driving functions, then the safety is compromised, but adding redundant systems increases hardware complexity and cost
Solution Approach 1:
The system implements partial redundancy by having a second communication module that can fully take over control functions, rather than requiring complete parallel redundant systems for all components. This partial redundancy approach provides sufficient safety for automated driving functions while avoiding the excessive hardware complexity of full redundancy.
Solution Approach 2:
The second communication module serves as a functional copy of the first communication module. Instead of creating entirely different backup systems, the patent uses a copied communication interface that can replicate the first module's functions, thereby maintaining safety without proportionally increasing hardware complexity.
Data Source
AI summary
It is an objective of the invention to improve security of advanced driver assistance systems. This objective is solved by a control apparatus 1 for an actuator arrangement 2 of a vehicle, the control apparatus 1 comprising: a driver module 4 for operating the actuator arrangement 2, a first communication module 6 for receiving first data and a second communication module 7 for receiving second data, whereby the control apparatus 1 is adapted for controlling the actuator arrangement 2 in a first operation mode on basis of the first data together with the second data; whereby the control apparatus 1 is adapted for controlling the actuator arrangement 2 in a second operation mode on basis of second data from the second communication module without the first communication module.