Autonomous Vehicle Command Validation for Multi-Operator Intervention

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing autonomous vehicle systems lack fault-tolerance and reliability due to their reliance on a single human operator, which can lead to unavailability and communication link failures, especially in unmanned aerial vehicles (UAVs) performing complex tasks.

Innovation Solution

A system that allows multiple remote human operators to intervene in autonomous vehicle operations by selecting a pool of operators, providing real-time situation reports, and validating commands to ensure consistent and reliable operation, using a finite state machine to manage state transitions and prevent stale commands.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a single human operator is used to control autonomous vehicles, then the system is simpler to manage, but the system lacks fault-tolerance and reliability when the operator becomes unavailable or communication links fail

Engineering Contradiction:
Improvefault-toleranceVSAvoidoperator pool management
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system segments the operator function by creating a pool of multiple independent operators instead of relying on a single operator. Each operator can independently issue commands to the autonomous vehicle, providing redundancy and fault-tolerance. The command verification value mechanism segments the command validation process to ensure only valid commands from authorized operators are executed.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system changes the parameter of operator quantity from one to multiple, fundamentally altering the system's reliability characteristics. By introducing multiple operators with unique command verification values, the system transforms from a single-point-of-failure architecture to a redundant architecture that can tolerate operator unavailability.

Inventive Principle:
Principle #35Parameter changes

2Reliability

If multiple remote operators are allowed to intervene, then fault-tolerance improves, but command validation complexity increases to prevent stale or conflicting commands

Engineering Contradiction:
Improvecommand execution consistencyVSAvoidcommand verification mechanism
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system implements feedback through command verification values that are embedded in each command and validated by the autonomous vehicle before execution. This feedback mechanism ensures that commands are from authorized operators and have not become stale, maintaining command execution consistency while managing the complexity of multiple operator intervention.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The system performs preliminary action by embedding command verification values in commands before they are transmitted to the autonomous vehicle. This pre-validation approach prevents stale or unauthorized commands from being executed, ensuring reliability while the verification mechanism manages the complexity of multiple operators.

Inventive Principle:
Principle #10Preliminary action

3Ease of operation

If real-time situation reports are provided to operators, then operator awareness and response quality improve, but communication bandwidth and system complexity increase

Engineering Contradiction:
Improveoperator situational awarenessVSAvoidcommunication bandwidth
Core Design Contradiction:
Ease of operationVSLoss of information

Solution Approach 1:

The system applies partial action by providing situation reports that contain only the essential information needed for operator decision-making, rather than transmitting all possible data. This approach improves operator situational awareness while managing communication bandwidth constraints by transmitting only the most critical operational parameters.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentUS11016510B2System and method for human operator intervention in autonomous vehicle operations
Publication Date: 2021.05.25 ZIPLINE INTERNATIONAL INC
  • US11016510B2 patent drawing
  • US11016510B2 patent drawing
  • US11016510B2 patent drawing

AI summary

An autonomous vehicle system is configured to receive vehicle commands from one or more parties and to execute those vehicle commands in a way that prevents the execution of stale commands. The autonomous vehicle system includes a finite state machine and a command counter or stored vehicle timestamp, which are used to help reject invalid or stale vehicle commands.