Dual Control Unit Emergency Halt for Automated Vehicles
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In automated vehicles, there is a need for an extended emergency stop function and corresponding release and acknowledgment mechanisms, as existing systems lack passenger control and are vulnerable to malfunctions or manipulations, particularly in the absence of technical staff.
Innovation Solution
An emergency halt method that distinguishes between emergency stop and emergency halt signals, where the emergency halt is controlled by a separate control unit, allowing passengers to directly influence the vehicle's braking, and a dual-control unit system ensures secure operation and release through combined external and passenger acknowledgment signals.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If a single control unit is used for automated driving, then device complexity is reduced, but reliability deteriorates due to vulnerability to malfunctions or manipulations
Solution Approach 1:
The control system is segmented into a first control unit for automated driving control and a second control unit for emergency halt control. This segmentation allows the emergency halt function to operate independently of the automated driving control, preventing single-point failures and enabling direct passenger intervention even when the automated driving system is malfunctioning or manipulated.
2Ease of operation
If emergency stop is controlled by the automated driving system, then ease of operation is improved, but reliability deteriorates due to lack of direct passenger control
Solution Approach 1:
The second control unit acts as an intermediary that receives emergency halt signals directly from the passenger and bypasses the automated driving control system. This intermediary control path ensures that passengers maintain direct control capability over the vehicle's braking system, independent of the automated driving system's state or responsiveness.
3Ease of operation
If the first control unit remains active after emergency halt, then ease of operation is improved for resumption, but reliability deteriorates due to potential continued manipulation
Solution Approach 1:
Before allowing resumption of automated driving control, the system performs preliminary verification through a release signal from external infrastructure and acknowledgment from the passenger. This preliminary action ensures that the vehicle only resumes automated control when both the infrastructure and passenger confirm safety, preventing premature resumption that could expose passengers to continued manipulation or malfunction.
Data Source
AI summary
An emergency halt method for a vehicle driving at least partially in automated fashion. The method includes receiving an emergency halt signal; providing a blocking signal, a first control unit being blocked, and the control over controlling driving maneuvers of the vehicle being withdrawn from the first control unit; and providing a not-drive signal for starting an emergency halt maneuver of the vehicle.