Dual-Protocol Vehicle Network Fault Tolerance

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current vehicle communication systems, particularly in electric and hybrid-electric vehicles, are limited by traditional design and infrastructure, failing to leverage new technologies and safety features, leading to inefficiencies in communication and autonomy levels.

Innovation Solution

The implementation of advanced communication networks and sensor systems, including LIDAR, RADAR, cameras, and ultrasonic sensors, integrated with a dual communication protocol system to ensure reliable and low-latency communication for autonomous driving, using Ethernet and CAN networks to maintain safety-critical message delivery.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a single communication network is used in traditional vehicle systems, then the system complexity is low, but the reliability and fault tolerance are insufficient for autonomous driving requirements

Engineering Contradiction:
Improvefault toleranceVSAvoidcommunication network complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The communication network is segmented into two distinct networks: a first communication network (CAN bus) for non-critical communications and a second communication network (Ethernet) for safety-critical autonomous driving communications. This segmentation isolates faults to specific networks, preventing single-point failures from compromising the entire system while maintaining manageable complexity through clear functional separation.

Inventive Principle:
Principle #1Segmentation

2Productivity

If traditional communication protocols are used, then the system is easier to implement, but the bandwidth and latency performance are insufficient for autonomous driving

Engineering Contradiction:
Improvecommunication bandwidthVSAvoidcommunication protocol complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

Different communication protocols are assigned to different networks based on their specific requirements: CAN protocol on the first network optimized for traditional vehicle control with its established reliability, and Ethernet protocol on the second network optimized for high-bandwidth autonomous driving data. This local optimization achieves high productivity where needed without unnecessarily complicating the entire communication architecture.

Inventive Principle:
Principle #3Local quality

3Reliability

If redundant communication pathways are implemented, then the fault tolerance improves, but the network congestion and message priority management become more complex

Engineering Contradiction:
Improvefault toleranceVSAvoidmessage routing complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system dynamically selects which communication network to use based on the criticality of the message and the operational status of each network. Safety-critical messages are routed through the second Ethernet network when available, while non-critical messages use the first CAN network. This dynamic routing strategy achieves fault tolerance through redundancy without requiring complex static routing tables, as the path selection adapts to real-time conditions.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentUS10608941B2Dual-network for fault tolerance
Publication Date: 2020.03.31 NIO TECH ANHUI CO LTD
  • US10608941B2 patent drawing
  • US10608941B2 patent drawing
  • US10608941B2 patent drawing

AI summary

Embodiments herein relate to a vehicle, including a first plurality of devices associated with a first vehicle function and a second plurality of devices associated with a second vehicle function. The first communication network communicatively couples each of the first plurality of devices to each other, communicatively couples each of the second plurality of devices to each other, and communicatively couple the first plurality of devices to the second plurality of devices. Further, a second communication network communicatively couples less than all of the first plurality of devices to less than all of the second plurality of devices, where the second communication network transmits messages determined to be critical from a first device of the first plurality of devices to a first device of the second plurality of devices.