Autonomous Vehicle Fallback Architecture With Partial Redundancy
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Autonomous vehicles face challenges in maintaining driving capabilities when sensors or components fail due to degradation, especially with size, cost, and placement constraints, necessitating a feasible redundant architecture.
Innovation Solution
Implement partial redundancy in sensor and computing systems with fallback configurations, utilizing distinct operating domains for sensors and computing subsystems, along with independent power distribution, to ensure minimum functionality and safe operation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If complete redundancy of every component and subsystem is implemented, then reliability is improved, but device complexity and cost increase significantly
Solution Approach 1:
The system divides sensors and computing subsystems into distinct operating domains (first set of sensors with first computing subsystem, second set of sensors with second computing subsystem). This segmentation allows partial redundancy where each domain can independently operate, providing reliability without requiring complete redundancy of all components.
Solution Approach 2:
The patent implements partial redundancy rather than complete redundancy. Each computing subsystem is configured to process sensor data from its associated sensors independently, providing sufficient redundancy for safe operation without the excessive complexity and cost of duplicating every component.
2Reliability
If complete redundancy of every component and subsystem is implemented, then reliability is improved, but cost increases significantly
Solution Approach 1:
By segmenting the system into distinct operating domains with associated sensors and computing subsystems, the patent achieves reliability through partial redundancy. This approach reduces manufacturing cost compared to complete redundancy while maintaining the ability to operate safely when components fail.
Solution Approach 2:
The patent applies redundancy locally to critical components (sensors and computing subsystems in separate operating domains) rather than uniformly to all components. This local quality approach ensures reliability where needed while reducing overall system cost.
3Reliability
If sensor suites are expanded to provide full redundancy, then reliability is improved, but vehicle size and placement constraints are violated
Solution Approach 1:
The patent segments sensors into first and second sets associated with different operating domains, allowing compact arrangement on the vehicle. This segmentation provides reliability through domain independence while respecting vehicle size constraints by avoiding the need for extensive sensor expansion.
Solution Approach 2:
The patent implements partial redundancy with sensor sets distributed across different operating domains rather than complete redundancy requiring extensive sensor suites. This approach achieves sufficient reliability while maintaining compliance with vehicle size and placement constraints.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The technology relates to partially redundant equipment architectures for vehicles able to operate in an autonomous driving mode. Aspects of the technology employ fallback configurations, such as two or more fallback sensor configurations that provide some minimum amount of field of view (FOV) around the vehicle (Figs. 11B, 11C and 11D). For instance, different sensor arrangements are logically associated with different operating domains of the vehicle (Fig. 12). Fallback configurations for computing resources (1202a, 1202b) and/or power resources (1302a, 1302b) are also provided. Each fallback configuration may have different reasons for being triggered (1408), and may result in different types of fallback modes of operation (1410, 1412). Triggering conditions may relate, e.g., to a type of failure, fault or other reduction in component capability, the current driving mode, environmental conditions in the vicinity of vehicle or along a planned route, or other factors. Fallback modes may involve altering a previously planned trajectory, altering vehicle speed, and/or altering a destination of the vehicle.