Vehicle Emergency Power Control for Unintended Motor Acceleration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Eco-friendly vehicles face the risk of accidents due to software-controlled controllers malfunctioning due to security issues like malicious code infections, leading to uncontrollable acceleration during emergencies.
Innovation Solution
A vehicle system with sensors and a main controller that detects brake signals and driving motor outputs to determine an emergency mode, reboots or shuts down the driving controller, and switches to a secondary battery to prevent acceleration, providing visual or auditory notifications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If software-controlled controllers are used to control driving, then ease of operation and adaptability are improved, but reliability deteriorates due to security problems like malicious code infections
Solution Approach 1:
The patent introduces a backup controller as an intermediary system that takes over when the primary software-controlled driving controller is compromised. This mediator system ensures continuous safe operation without directly interfering with normal software control operations, resolving the contradiction by providing a safety layer that doesn't diminish adaptability while restoring reliability.
Solution Approach 2:
The system implements prior cushioning by pre-preparing a backup controller that can immediately take over in case of security failures. This advance preparation ensures that when malicious code infections or software failures occur, the system already has a ready-to-deploy safety mechanism, thus maintaining reliability without compromising the software control capabilities.
2Reliability
If the driving controller is rebooted or shut down during emergency, then reliability is improved by preventing accidents, but productivity deteriorates due to loss of driving control
Solution Approach 1:
The system dynamically switches between the primary driving controller and the backup controller based on real-time security assessments. When threats are detected, control is transferred to the backup system, allowing the primary controller to be safely rebooted or shut down. This dynamic approach maintains reliability during emergencies while minimizing productivity loss through seamless transitions.
Solution Approach 2:
The backup controller is pre-configured with essential driving control functions, enabling it to immediately assume control when the primary controller needs to be shut down for security reasons. This preliminary preparation ensures that productivity is maintained during the transition, as the backup system can continue driving operations without interruption while the primary controller is restored.
3Reliability
If a backup controller is introduced to handle emergencies, then reliability is improved, but device complexity increases
Solution Approach 1:
The control system is segmented into distinct functional modules: a primary driving controller for normal operations and a separate backup controller for emergency situations. This segmentation allows each controller to be optimized for its specific function, improving reliability without requiring the entire system to be redesigned. The modular structure manages complexity by creating clear boundaries and independent operation zones.
Solution Approach 2:
The backup controller is designed with multi-functionality, serving both as a safety mechanism for emergency takeovers and as a potential primary controller during normal operations. This universal design reduces the need for entirely separate systems, as the backup controller can function in multiple roles, thereby improving reliability while limiting the increase in device complexity.
Data Source
AI summary
A vehicle includes an input unit, a first sensor provided to detect an input of a brake signal, a second sensor provided to detect an output of a driving motor, a driving controller provided to control the driving motor, and a main controller electrically connected to the input unit, the first sensor, the second sensor and the driving controller and configured to determine an electric power mode based on the input of the brake signal detected by the first sensor and the output of the driving motor detected by the second sensor when an input related to power off of the vehicle is received through the input unit while the vehicle is driving, wherein the main controller is configured to determine the electric power mode as an emergency mode when it is determined that the driving motor is accelerating while the input of the brake signal is being received.