Command Controller Memory Validation for Autonomous Driving Commands
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Autonomous vehicle systems face challenges in ensuring the reliability of commands generated by computing devices, as damage to the System on Chip (SoC) can lead to unsafe operations, and existing methods lack efficient real-time monitoring and emergency response mechanisms.
Innovation Solution
A command controller is introduced to intercept and test the reliability of commands from the SoC by evaluating the health of its memory, blocking unreliable commands and initiating emergency responses, such as requesting human intervention or activating safe-mode operations, to ensure vehicle safety.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If real-time memory testing is performed to ensure command reliability, then safety is improved, but processing time increases
Solution Approach 1:
The patent performs memory testing in advance by testing memory portions before they are needed for command execution. The command controller maintains a buffer of pre-tested reliable memory portions, so when a command needs to be executed, already-validated memory locations are available immediately without requiring time-consuming tests at the moment of execution.
Solution Approach 2:
The patent divides the memory into multiple separate portions or segments. Instead of testing the entire memory space each time, the system tests and validates individual memory segments independently. This allows parallel testing of different segments and enables the command controller to select from multiple valid segments, reducing the overall time required to ensure memory reliability.
2Reliability
If memory testing is performed on the SoC, then command reliability is improved, but system complexity increases
Solution Approach 1:
The patent introduces a command controller as an intermediary component between the SoC and the actuators. This command controller is responsible for intercepting commands, performing or initiating memory tests, and deciding whether to forward commands based on test results. By placing this intermediary layer, the complexity of memory testing and reliability verification is isolated to a dedicated component rather than being distributed throughout the entire system.
Solution Approach 2:
The command controller serves multiple functions: it intercepts commands from the SoC, performs or initiates memory testing, validates command reliability, and controls command forwarding to actuators. By consolidating these diverse functions into a single multi-functional component, the overall system complexity is reduced compared to having separate dedicated components for each function.
3Reliability
If unsafe commands are blocked and emergency responses initiated, then vehicle safety is improved, but operational continuity deteriorates
Solution Approach 1:
The patent prepares emergency response protocols and safe-mode operations in advance. When memory testing identifies unreliable commands, the system has pre-established procedures ready to execute, such as switching to safe-mode operations or initiating controlled emergency stops. This beforehand preparation allows the system to respond to safety threats without requiring complex real-time decision-making, maintaining operational continuity through pre-planned transitions.
Solution Approach 2:
The patent implements dynamic command forwarding where the command controller adaptively decides whether to forward commands based on real-time memory test results. When memory portions are validated, commands are forwarded normally; when failures are detected, the system dynamically switches to alternative modes such as safe-mode operations or emergency protocols. This dynamic adaptation allows the system to maintain operational continuity by flexibly switching between different operational states based on current reliability conditions.
Data Source
AI summary
A vehicle having a control element for the speed, acceleration or direction of the vehicle, a computing device to generate a command in autonomous driving of the vehicle, and a command controller coupled between the control element and the computing device. In response to the command, the command controller initiates a test of a portion of the memory of the computing device. If the portion of the memory passes the test, the command controller forwards the command for execution via the control element of the vehicle; otherwise, the command controller blocks the command and/or issues a replacement command for the vehicle.