Autonomous Vehicle Redundant Power Switching for Fail-Safe Control

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In autonomous vehicles, ensuring safety in the event of power supply failure is critical to prevent accidents and ensure operational reliability, as existing systems lack effective power management schemes to maintain control and safety.

Innovation Solution

A dual-power output system with a master and slave computing unit, along with a power supply unit that includes a DC-DC converter and battery, allows for redundant power distribution and automatic switching to a limp mode in case of failure, ensuring continued control and safety through sensors and communication with external devices.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Device complexity

If a single power supply system is used to simplify the power distribution, then device complexity is reduced, but reliability deteriorates because power supply failure cannot be prevented

Engineering Contradiction:
Improvepower distribution systemVSAvoidpower supply reliability
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The power supply system is segmented into two independent power sources (first power source and second power source) with separate power output circuits. The first power source connects to the first power output circuit, and the second power source connects to the second power output circuit, creating independent power pathways that prevent single-point failures.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system prepares backup power arrangements in advance by configuring a second power source and second power output circuit before failure occurs. When power supply failure is detected in the first power output circuit, the system can immediately switch to the pre-prepared second power source, cushioning against the harmful effects of power failure.

Inventive Principle:
Principle #11Beforehand cushioning (Prior cushioning)

2Reliability

If redundant power sources are added to improve safety, then reliability is improved, but device complexity increases

Engineering Contradiction:
Improvepower supply reliabilityVSAvoidpower distribution system
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The power supply system is divided into two independent modules: a first power source with first power output circuit, and a second power source with second power output circuit. This segmentation allows redundancy without creating complex interconnections, as each module operates independently with clear separation of power pathways.

Inventive Principle:
Principle #1Segmentation

3Device complexity

If the master computing unit controls all operations to simplify the control architecture, then device complexity is reduced, but reliability deteriorates because a single point of failure exists

Engineering Contradiction:
Improvecontrol architectureVSAvoidcontrol system reliability
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The control architecture is segmented into a master computing unit and a slave computing unit with distinct responsibilities. The master computing unit handles normal control operations, while the slave computing unit is dedicated to monitoring power output and executing emergency control. This segmentation creates redundancy in the control system without significantly increasing overall complexity.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The slave computing unit acts as an intermediary safety mechanism between the power supply system and the vehicle control system. It monitors the power output and can intervene to control vehicle operations when power supply failure is detected, providing an intermediate layer of safety without replacing the master computing unit's primary control function.

Inventive Principle:
Principle #24Intermediary (Mediator)

4Reliability

If the slave computing unit monitors power output to detect failures, then reliability is improved, but device complexity increases

Engineering Contradiction:
Improvefailure detection capabilityVSAvoidcontrol system
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The slave computing unit serves as an intermediary monitoring component that specifically watches over the power output from the second power output circuit. It detects failures in this dedicated monitoring role and triggers appropriate emergency responses, adding failure detection capability without requiring the master computing unit to handle multiple functions.

Inventive Principle:
Principle #24Intermediary (Mediator)

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

The system enhances the safety of autonomous vehicles by preventing uncontrollable impacts due to power failures, enabling safe parking and maintaining L4 autonomous driving capabilities even when primary power sources fail, through redundant power management and sensor data utilization.

Implementation Method 1

a DC-DC converter coupled to the first power output and configured to perform DC-DC conversion on a power source of the autonomous vehicle to provide the first power output

Methodology Applied
Scientific EffectDC-DC conversion: Electromagnetic Induction

Implementation Method 2

a battery coupled in parallel with the DC-DC converter to the first power output

Methodology Applied
Scientific EffectBattery (electricity): Battery (electricity)

Data Source

PatentUS11912291B2Autonomous vehicle and system for autonomous vehicle
Publication Date: 2024.02.27 APOLLO INTELLIGENT DRIVING (BEIJING) TECHNOLOGY CO LTD
  • US11912291B2 patent drawing
  • US11912291B2 patent drawing
  • US11912291B2 patent drawing

AI summary

Embodiments of the present disclosure relate to an autonomous vehicle and a system for the autonomous vehicle. The system may include: a power supply including a first power output and a second power output; a master computing unit arranged to be powered by the first power output, configured to control operations of the autonomous vehicle in response to detecting the second power output, and configured to provide a third power output by adjusting the first power output; and a slave computing unit arranged to be powered by the second power output, and configured to control the operations of the autonomous vehicle in response to detecting a failure of the master computing unit.