Autonomous Vehicle Controller for Safe Self-Driving Resumption

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing self-driving vehicle systems lack a reliable method to determine when to resume self-driving after a malfunction, particularly in scenarios where an abnormal stop occurs, and to switch between remote driving modes efficiently.

Innovation Solution

A controller is designed to detect abnormal states in movable objects, such as vehicles, and execute control to resume self-driving only when specific conditions are met, allowing for seamless switching between remote driving modes based on predefined conditions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If the system automatically resumes self-driving after an abnormal stop, then the productivity and operational continuity are improved, but the reliability and safety may deteriorate due to potential undetected malfunctions

Engineering Contradiction:
Improveoperational continuityVSAvoidsafety
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The system implements a feedback mechanism where the detecting unit continuously monitors the movable object's state, and the control unit evaluates multiple conditions (first condition and second condition) before resuming self-driving. This feedback loop ensures that resumption only occurs when safety criteria are met, resolving the contradiction between operational continuity and safety.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

Before resuming self-driving, the system performs preliminary checks by detecting whether the abnormal state has been resolved and whether specific conditions are satisfied. This preliminary action ensures that the system only resumes operation when safe to do so, maintaining both productivity and reliability.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If the system requires multiple condition checks before resuming self-driving, then the reliability is improved, but the device complexity and response time increase

Engineering Contradiction:
Improvesafety verificationVSAvoidcontrol logic complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The control logic is segmented into distinct functional units: a detecting unit for monitoring abnormal states and a control unit for evaluating resumption conditions. This segmentation simplifies the overall system architecture while maintaining comprehensive safety checks, resolving the contradiction between reliability and device complexity.

Inventive Principle:
Principle #1Segmentation

3Reliability

If the system switches to remote manual driving mode after abnormal stop, then the safety is improved, but the productivity and operational efficiency deteriorate due to operator intervention requirements

Engineering Contradiction:
ImprovesafetyVSAvoidoperational efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The system dynamically switches between remote manual driving mode and self-driving mode based on real-time condition evaluation. When conditions are satisfied, it transitions back to self-driving mode, maximizing productivity while maintaining safety. When conditions are not met, it remains in remote manual mode to ensure safety.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentUS20250117014A1controller
Publication Date: 2025.04.10 TOYOTA JIDOSHA KK
  • US20250117014A1 patent drawing
  • US20250117014A1 patent drawing
  • US20250117014A1 patent drawing

AI summary

A controller that controls an operation of a movable object that travels in self-driving includes a detecting unit configured to, when the movable object is traveling in self-driving, detect occurrence of an abnormal state including an abnormal stop of the movable object, and a control unit. When (i) occurrence of the abnormal state is detected and (ii) a predetermined first condition is satisfied, the control unit is configured to execute control to resume the self-driving of the movable object. When (i) occurrence of the abnormal state is detected and (ii) the first condition is not satisfied, the control unit is configured not to execute control to resume the self-driving.