Command Controller Memory Testing for Reliable Autonomous Vehicle Commands
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Autonomous vehicle systems face reliability issues due to potential failures in computing devices, such as system on chips (SoCs), which can generate unreliable commands for vehicle control, posing safety risks during autonomous operation.
Innovation Solution
A command controller is introduced to determine the reliability of commands from SoCs by testing mission-critical memory areas, blocking unreliable commands and initiating emergency responses, ensuring safe vehicle operation by intercepting and validating commands before they reach control elements, and potentially requesting human intervention or activating safe-mode commands.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Extent of automation
If autonomous vehicle systems use computing devices to generate control commands, then automation and operational capability are improved, but system reliability deteriorates due to potential failures in computing devices
Solution Approach 1:
A command controller is introduced as an intermediary component between the SoC and vehicle control elements. The command controller intercepts commands from the SoC, validates them against predefined criteria, and either forwards valid commands or blocks invalid ones. This intermediary layer prevents unreliable commands from reaching control elements, thereby maintaining system reliability while preserving autonomous operation capability.
2Reliability
If memory testing is performed on SoC to validate commands, then command reliability is improved, but system complexity and processing time increase
Solution Approach 1:
Instead of performing comprehensive memory testing on the entire SoC memory, the system performs selective validation by testing only specific memory addresses or regions that are critical for command generation. This partial testing approach provides sufficient reliability assurance while minimizing the complexity and time overhead associated with full memory testing.
3Object-affected harmful factors
If unreliable commands are blocked by command controller, then vehicle safety is improved, but operational efficiency deteriorates due to increased validation overhead
Solution Approach 1:
The system performs preliminary validation of commands by checking specific memory addresses or regions before commands are executed. By validating critical memory areas in advance, the system ensures that only reliable commands reach the control elements, preventing safety issues while maintaining operational efficiency through targeted rather than exhaustive validation.
Data Source
AI summary
A vehicle having a control element for the speed, acceleration or direction of the vehicle, a computing device to generate a command in autonomous driving of the vehicle, and a command controller coupled between the control element and the computing device. In response to the command, the command controller initiates a test of a portion of the memory of the computing device. If the portion of the memory passes the test, the command controller forwards the command for execution via the control element of the vehicle; otherwise, the command controller blocks the command and/or issues a replacement command for the vehicle.


