Dual-Control Self-Moving Architecture for Safety Self-Checking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing self-moving devices, such as automatic lawn mowers, face challenges in ensuring safety and reliability due to increased complexity and processing demands, leading to difficulties in implementing effective safety standards and self-checking processes.
Innovation Solution
The implementation of a self-moving device architecture that utilizes two control modules, where one module performs safety assurance operations and self-checking, simplifying the self-checking process and improving sensitivity and operating speed while ensuring safety.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the processor specification and memory capacity are increased to handle complex safety checking, then the safety assurance capability is improved, but the device complexity and cost increase
Solution Approach 1:
The control system is divided into two independent control modules: a first control module for general device control and a second control module dedicated to safety assurance operations. This segmentation allows the safety-critical functions to be isolated in a simpler, dedicated module with lower processing requirements, while the main module handles complex non-safety functions.
Solution Approach 2:
Safety assurance functions are extracted from the general control module and placed in a dedicated second control module. This extraction enables the safety module to operate independently with simplified hardware requirements, while maintaining comprehensive safety monitoring capabilities.
2Reliability
If comprehensive self-checking is performed on both control modules, then the safety reliability is improved, but the operating speed and responsiveness decrease
Solution Approach 1:
The self-checking process is segmented such that only the second control module (dedicated to safety) performs self-checking according to a predetermined plan, while the first control module does not perform self-checking. This reduces the overall checking burden and maintains operating speed.
Solution Approach 2:
Instead of performing comprehensive self-checking on both control modules, the system performs partial self-checking only on the safety-critical second control module. This partial action is sufficient to ensure safety while avoiding the performance penalty of checking both modules.
3Device complexity
If simple control modules with low processing power are used, then the device complexity is reduced, but the capability to handle complex safety scenarios is limited
Solution Approach 1:
The first control module acts as an intermediary that handles complex data processing and non-safety control functions, while the second control module handles safety-critical decisions. The two modules communicate through defined interfaces, allowing the simple safety module to benefit from the processing power of the main module without compromising safety.
Solution Approach 2:
The first control module performs multiple functions including general device control, data processing, and communication, while the second control module is specialized for safety functions. This multi-functionality in the first module compensates for the simplicity of the second module.
Data Source
Figure 1~3
Figure 4~6
Figure 7~8
AI summary
The present invention provides a self-moving device and a working method for same. The self-moving device may include: a first control module and a second control module. The first control module and the second control module are configured to communicate with each other and work collaboratively to control a moving mechanism and a working module. The second control module is configured to: control the self-moving device to perform a safety assurance operation; and perform self-checking on hardware and a control program related to control of performing of the safety assurance operation. In the first control module and the second control module, only the second control module is configured to perform the self-checking according to a predetermined plan during working of the self-moving device. Implementations of this application provide a self-moving device with high safety performance.