Dual-SoC Autonomous Driving Failover for Safe Parking

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The use of multiple high-performance SoCs in autonomous driving systems increases implementation costs while requiring redundancy for stability, which is not efficiently addressed by existing technologies.

Innovation Solution

A system on chip (SoC) architecture with a high-performance and a low-performance SoC, where the low-performance SoC is selectively driven for lower autonomous driving levels to reduce costs, and the high-performance SoC takes over in case of failure, ensuring stability and safe parking functions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If multiple high-performance SoCs are used for redundancy in autonomous driving systems, then system stability and safety are improved, but implementation cost increases

Engineering Contradiction:
Improvesystem stabilityVSAvoidimplementation cost
Core Design Contradiction:
ReliabilityVSEase of manufacture

Solution Approach 1:

The patent divides the SoC system into two distinct segments: a first SoC and a second SoC with different performance levels. This segmentation allows the system to use a lower-performance SoC for basic autonomous driving functions while reserving a higher-performance SoC specifically for redundancy and failure scenarios, thereby reducing overall system cost while maintaining reliability

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent changes the performance parameter of the SoC based on operational needs. The system dynamically selects between a first SoC with lower operating performance for normal autonomous driving operations and a second SoC with higher operating performance for redundancy and failure recovery, optimizing the balance between cost and reliability

Inventive Principle:
Principle #35Parameter changes

2Reliability

If multiple high-performance SoCs are used for redundancy in autonomous driving systems, then system stability is improved, but device complexity increases

Engineering Contradiction:
Improvesystem stabilityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the redundancy function into a dedicated second SoC that operates independently from the primary first SoC. This clear segmentation simplifies the system architecture by defining distinct roles for each component, making the system easier to manage and understand despite having multiple SoCs

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent implements a simplified copying mechanism where the second SoC serves as a standby copy that can take over from the first SoC in case of failure. This copying approach provides redundancy without requiring complex real-time synchronization or active-active configurations, thereby reducing system complexity

Inventive Principle:
Principle #26Copying

Data Source

PatentUS12409854B2System on chip, autonomous driving system including the same, and operating method of the autonomous driving system
Publication Date: 2025.09.09 SAMSUNG ELECTRONICS CO LTD
  • US12409854B2 patent drawing
  • US12409854B2 patent drawing
  • US12409854B2 patent drawing

AI summary

An autonomous driving system including: a first system on chip (SoC) configured to control an autonomous driving function of a vehicle and including a first safe parking module configured to control parking of the vehicle according to first failure information; and a second SoC configured to be driven at a higher operating performance than an operating performance of the first SoC, configured to control the autonomous driving function of the vehicle, and including a second safe parking module configured to control the parking according to second failure information provided, wherein the first SoC or the second SoC is configured to be selectively driven according to level information corresponding to an autonomous driving level, and, based on a failure occurring in the first SoC, the second safe parking module is further configured to control the parking or stopping of the vehicle in response to receiving the second failure information.