Command Controller Memory Testing for Reliable Autonomous Vehicle Commands

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Autonomous vehicle systems face reliability issues due to potential failures in computing devices, such as system on chips (SoCs), which can generate unreliable commands for vehicle control, posing safety risks during autonomous operation.

Innovation Solution

A command controller is introduced to determine the reliability of commands from SoCs by testing mission-critical memory areas, blocking unreliable commands and initiating emergency responses, ensuring safe vehicle operation by intercepting and validating commands before they reach control elements, and potentially requesting human intervention or activating safe-mode commands.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Extent of automation

If autonomous vehicle systems use computing devices to generate control commands, then automation and operational capability are improved, but system reliability deteriorates due to potential failures in computing devices

Engineering Contradiction:
Improveautonomous control capabilityVSAvoidcommand reliability
Core Design Contradiction:
Extent of automationVSReliability

Solution Approach 1:

A command controller is introduced as an intermediary component between the SoC and vehicle control elements. The command controller intercepts commands from the SoC, validates them against predefined criteria, and either forwards valid commands or blocks invalid ones. This intermediary layer prevents unreliable commands from reaching control elements, thereby maintaining system reliability while preserving autonomous operation capability.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If memory testing is performed on SoC to validate commands, then command reliability is improved, but system complexity and processing time increase

Engineering Contradiction:
Improvecommand validation accuracyVSAvoidsystem architecture complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

Instead of performing comprehensive memory testing on the entire SoC memory, the system performs selective validation by testing only specific memory addresses or regions that are critical for command generation. This partial testing approach provides sufficient reliability assurance while minimizing the complexity and time overhead associated with full memory testing.

Inventive Principle:
Principle #16Partial or excessive action

3Object-affected harmful factors

If unreliable commands are blocked by command controller, then vehicle safety is improved, but operational efficiency deteriorates due to increased validation overhead

Engineering Contradiction:
Improvesafety risks from unsafe commandsVSAvoidcommand processing efficiency
Core Design Contradiction:
Object-affected harmful factorsVSProductivity

Solution Approach 1:

The system performs preliminary validation of commands by checking specific memory addresses or regions before commands are executed. By validating critical memory areas in advance, the system ensures that only reliable commands reach the control elements, preventing safety issues while maintaining operational efficiency through targeted rather than exhaustive validation.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS20240166218A1Determination of reliability of vehicle control commands via memory test
Publication Date: 2024.05.23 LODESTAR LICENSING GROUP LLC
  • US20240166218A1 patent drawing
  • US20240166218A1 patent drawing
  • US20240166218A1 patent drawing

AI summary

A vehicle having a control element for the speed, acceleration or direction of the vehicle, a computing device to generate a command in autonomous driving of the vehicle, and a command controller coupled between the control element and the computing device. In response to the command, the command controller initiates a test of a portion of the memory of the computing device. If the portion of the memory passes the test, the command controller forwards the command for execution via the control element of the vehicle; otherwise, the command controller blocks the command and/or issues a replacement command for the vehicle.