Redundant Brake Controller Failover for Autonomous Vehicles
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In autonomous driving systems at levels 4 and 5, there is a challenge in ensuring reliable braking systems since drivers cannot easily intervene in emergency situations, necessitating redundancy to guarantee safe operation.
Innovation Solution
The apparatus includes a first and second brake controller that monitor each other's operation state through CAN communication, allowing control of the brake module to be transferred based on monitoring results, with sensor units providing driving state data and switching control in case of communication errors.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If a single brake controller is used in autonomous vehicles, then the device complexity is reduced, but the reliability of the braking system deteriorates because there is no redundancy to handle emergencies when drivers cannot intervene
Solution Approach 1:
The brake control system is divided into multiple independent brake controllers (first brake controller and second brake controller), each capable of independently controlling the brake module. This segmentation provides redundancy so that if one controller fails, the other can take over, thereby improving reliability without significantly increasing overall system complexity.
Solution Approach 2:
The brake controllers perform preliminary monitoring of each other's operation states through CAN communication before failures occur. By continuously exchanging monitoring information and detecting potential issues in advance, the system can prepare for failover scenarios, ensuring reliable operation even when drivers cannot intervene in emergencies.
2Reliability
If multiple brake controllers are implemented with monitoring capabilities, then the reliability of the braking system is improved through redundancy, but the device complexity and communication requirements increase
Solution Approach 1:
The brake controllers establish a feedback mechanism where each controller continuously monitors the operation state of the other through CAN communication. This feedback loop allows the system to detect failures and transfer control automatically, improving reliability while maintaining manageable complexity through standardized communication protocols.
Solution Approach 2:
The brake controllers perform self-monitoring and automatic failover without requiring external intervention. When a controller detects a failure in its counterpart, it automatically takes over the braking control function, enabling the system to service itself during emergencies and reducing the need for complex external monitoring systems.
3Reliability
If brake controllers continuously monitor each other through CAN communication, then the reliability is improved through early failure detection, but the communication load and potential for communication errors increase
Solution Approach 1:
The controllers exchange monitoring information in advance through CAN communication to detect potential failures before they affect braking operation. By continuously sharing operational status data, the system can identify issues early and prepare for failover, improving reliability while using established CAN protocols to manage communication load.
Solution Approach 2:
The brake controllers autonomously handle communication and failure detection without requiring external system intervention. Each controller independently monitors its own state and the state of its counterpart, making self-service decisions about control transfer based on communication data, thereby reducing the overall communication burden on the autonomous vehicle system.
Data Source
AI summary
An apparatus for controlling an autonomous vehicle brake, including a first brake controller configured to control a brake module of an autonomous vehicle by receiving a deceleration command from an autonomous controller for controlling autonomous driving of the autonomous vehicle, and a second brake controller configured to control the brake module of the autonomous vehicle by receiving a deceleration command from the autonomous controller. The first and second brake controllers exchange monitoring information with each other in a predetermined communication manner to monitor an operation state, so that control of the brake module is transferred according to the result of monitoring.