ADS ODD Expansion Using Constraint-Based Degraded Driving Modes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current Automated Driving Systems (ADS) face challenges in defining a complete set of Operational Design Domains (ODDs) due to the complexity of scenarios, leading to limitations in operational conditions and potential safety risks.
Innovation Solution
A computer-implemented method for dynamically evaluating scenarios outside the ODD by using a logic formula that combines hard and soft constraints, allowing the ADS to operate in a degraded mode while ensuring safety requirements are met.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the ODD conditions are strictly enforced to ensure safety requirements, then the safety level is improved, but the operational scope and uptime of the ADS are reduced
Solution Approach 1:
The patent applies dynamics by transitioning from static ODD conditions to dynamic scenario evaluation. The system continuously evaluates scenario parameters against safety requirements in real-time, allowing the ADS to adapt its operational status dynamically. This enables the system to respond flexibly to changing environmental conditions while maintaining safety, rather than being constrained by fixed pre-defined ODD boundaries.
Solution Approach 2:
The patent changes the parameter evaluation approach from binary ODD compliance (inside/outside) to continuous scenario parameter assessment. By evaluating multiple scenario parameters (weather, road, traffic, sensor performance) and their combinations, the system transforms the safety assessment from a static threshold check to a dynamic multi-parameter evaluation, enabling more nuanced operational decisions.
2Adaptability or versatility
If the ODD conditions are expanded to cover more scenarios, then the operational scope is improved, but the safety assurance capability is weakened
Solution Approach 1:
The patent segments the safety evaluation into multiple independent scenario parameters (weather conditions, road conditions, traffic conditions, sensor capabilities, etc.). Each parameter is evaluated separately against safety requirements, and the overall safety determination is made based on the combination of these segmented evaluations. This allows comprehensive scenario coverage while maintaining rigorous safety checks for each individual aspect.
Solution Approach 2:
The patent applies partial action by allowing the ADS to operate in degraded modes when certain non-critical safety requirements are not fully met. Instead of completely disabling the system for any ODD violation, the system permits limited operation with reduced functionality or increased monitoring, thereby expanding operational scope while maintaining adequate safety assurance through proportional response to scenario conditions.
3Reliability
If a complete set of ODD scenarios is defined to cover all possible conditions, then the safety coverage is improved, but the system complexity and difficulty of definition are increased
Solution Approach 1:
The patent creates a universal scenario evaluation framework that can handle diverse and evolving driving scenarios through a common set of parameter assessments. Rather than defining separate ODD rules for each specific scenario, the system uses a multi-functional evaluation mechanism that adapts to different conditions by assessing relevant scenario parameters, thereby reducing system complexity while maintaining comprehensive safety coverage.
Solution Approach 2:
The system applies self-service by automatically evaluating scenario parameters and determining safety compliance without requiring manual ODD definition for each new scenario. The automated evaluation process continuously monitors scenario conditions and makes real-time safety determinations, eliminating the need for exhaustive manual scenario enumeration and reducing the complexity of system definition and maintenance.
4Reliability
If the ADS is deactivated when leaving the ODD to maintain safety, then the safety level is improved, but the productivity and uptime are reduced
Solution Approach 1:
The patent applies partial action by allowing the ADS to continue operating in degraded modes when scenario parameters indicate reduced but still acceptable safety levels. Instead of complete deactivation for any ODD boundary crossing, the system permits limited operation with reduced functionality or increased monitoring, thereby maintaining productivity while preserving adequate safety assurance through proportional response to scenario conditions.
Solution Approach 2:
The system implements continuous feedback by monitoring scenario parameters in real-time and dynamically adjusting the ADS operational status. When scenario conditions deteriorate, the system provides feedback through degraded mode activation or handover requests, and when conditions improve, it can restore full functionality. This feedback mechanism enables the ADS to maintain higher uptime by avoiding unnecessary complete deactivations while still ensuring safety through continuous scenario assessment.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present invention is related to a computer-implemented method (100) for managing an Operational Design Domain (ODD) expansion for an Automated Driving System (ADS) of a vehicle. The method (100) comprises: obtaining (S102) a plurality of scenario parameters defining the environment of the vehicle, wherein each scenario parameter corresponds to a respective condition of the ODD; in response to the plurality of scenario parameters fulfilling the plurality of ODD conditions: allowing (S104) the ADS to be activated or to remain active; in response to one or more scenario parameter(s) not fulfilling one or more ODD condition(s): querying (S106) a logic formula based on the obtained plurality of scenario parameters, such that if at least one soft constraint of the logical formula is satisfied without violating any hard constraints of the logical formula, the ADS fulfils a plurality of predefined safety requirements; determining (S108), based on the logic formula and the obtained plurality of scenario parameters, a set of values of one or more variable state parameters which satisfies at least one soft constraint without violating any hard constraints; and allowing (S112) the ADS to be activated in a degraded mode or to switch to a degraded mode by limiting one or more variable state parameters of the ADS to conform to the determined set of values of the one or more variable state parameters.