Dual Brake Controller Handover for Autonomous Vehicle Redundancy
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In autonomous driving systems at levels 4 or 5, there is a challenge in ensuring reliable brake control without driver intervention, particularly in emergency situations where redundancy in the braking system is critical.
Innovation Solution
The apparatus includes a first and second brake controller that monitor each other's operation state through CAN communication, allowing for the transfer of brake module control based on the monitoring results. This setup ensures that even if an emergency occurs, the brake system can operate safely and reliably.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If a single brake controller is used in autonomous vehicle level 4 or 5, then the device complexity is reduced, but the reliability of the braking system deteriorates because driver intervention is not available to cope with emergencies
Solution Approach 1:
The braking system is segmented into two independent brake controllers (first and second brake controllers) that operate in parallel. Each controller can independently control the brake module, creating redundancy in the system. This segmentation allows the system to maintain reliability by having backup control capability while keeping each individual controller relatively simple in structure.
Solution Approach 2:
The system changes the operational parameter of control authority by dynamically transferring control from one brake controller to the other based on monitoring results. When the active controller detects an abnormality or receives a takeover request, control parameters are changed to switch which controller is actively controlling the brake module, thereby maintaining system reliability through parameter adjustment rather than structural complexity.
2Reliability
If two brake controllers are implemented with mutual monitoring, then the reliability of the braking system is improved through redundancy, but the device complexity and communication requirements increase
Solution Approach 1:
Both brake controllers are designed with identical functionality and capabilities. Each controller can perform both active control and monitoring functions, and either can take over control of the brake module. This universality means that the system doesn't require complex specialized components - the same controller design serves multiple purposes, reducing overall system complexity while maintaining reliability through redundancy.
Solution Approach 2:
The brake controllers implement mutual monitoring through CAN communication, creating a feedback loop where each controller continuously reports its operational status to the other. This feedback mechanism allows the system to detect abnormalities and trigger control transfer automatically. The feedback is simple in nature (status monitoring) rather than complex, allowing reliability improvement without excessive complexity increase.
3Reliability
If continuous monitoring and control transfer capability are implemented between brake controllers, then the reliability during emergencies is improved, but the use of energy for communication and monitoring increases
Solution Approach 1:
The monitoring between brake controllers is implemented as periodic communication rather than continuous data streaming. The controllers exchange status information at regular intervals through CAN communication, which reduces energy consumption compared to continuous monitoring while still providing timely detection of abnormalities. This periodic action maintains emergency response reliability by ensuring status checks occur frequently enough to detect issues promptly.
Data Source
AI summary
An apparatus for controlling an autonomous vehicle brake, including a first brake controller configured to control a brake module of an autonomous vehicle by receiving a deceleration command from an autonomous controller for controlling autonomous driving of the autonomous vehicle, and a second brake controller configured to control the brake module of the autonomous vehicle by receiving a deceleration command from the autonomous controller. The first and second brake controllers exchange monitoring information with each other in a predetermined communication manner to monitor an operation state, so that control of the brake module is transferred according to the result of monitoring.