External Server Control for Autonomous Driving Abort

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing driver assistance systems fail to effectively manage unplanned aborts of piloted or fully autonomous driving modes due to sensor malfunctions or lack of alert drivers, potentially leading to unsafe situations.

Innovation Solution

A method involving a motor vehicle-external control center or human pilot takes control of the vehicle by assessing piloting data and determining if the driving mode should be aborted, using communication with external server devices to intervene and ensure safe operation, even if the driver is not alert or cannot take control promptly.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If piloted or fully autonomous driving mode is implemented, then driving comfort and productivity are improved, but safety deteriorates when sensor malfunctions occur or drivers are not alert

Engineering Contradiction:
Improvedriving comfortVSAvoidsafety
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

A motor vehicle-external server device acts as an intermediary between the driver assistance device and the ultimate controller. When sensor malfunctions occur or driver alertness is insufficient, the server receives piloting data, determines whether an abort is imminent, and communicates control signals back to take over the driving mode, ensuring safety while maintaining autonomous driving benefits

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system performs preliminary determination of whether an abort of piloted or fully autonomous driving mode is imminent by analyzing piloting data before actual failure occurs. This proactive approach allows the external server to prepare and execute control signals in advance, preventing unsafe situations rather than reacting after problems arise

Inventive Principle:
Principle #10Preliminary action

2Reliability

If driver assistance systems intervene in drive and control, then safety is improved, but device complexity increases

Engineering Contradiction:
ImprovesafetyVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The complex decision-making function for determining abort conditions and generating control signals is extracted from the vehicle's onboard systems and placed in a motor vehicle-external server device. This separates the safety-critical analysis function from the vehicle's control architecture, improving safety through more sophisticated processing while managing complexity by offloading it to an external system

Inventive Principle:
Principle #2Taking out (Extraction)

3Reliability

If continuous remote control is implemented, then safety is improved, but loss of time occurs during control transfer

Engineering Contradiction:
ImprovesafetyVSAvoidcontrol transfer time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system continuously monitors piloting data and performs preliminary determination of whether an abort is imminent before actual failure occurs. This advance detection allows the external server to prepare control signals in advance, enabling rapid takeover when needed and minimizing control transfer time while maintaining continuous safety monitoring

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS11150652B2Method for operating a driver assistance device of a motor vehicle
Publication Date: 2021.10.19 AUDI AG
  • US11150652B2 patent drawing

AI summary

The invention relates to a method for operating a driver assistance system of a motor vehicle, wherein the motor vehicle is initially operated in a piloted or fully autonomous driving mode by a driver assistance device. Piloting data is provided by a control device of the motor vehicle, which describes at least one operating parameter of a motor vehicle system of the motor vehicle or the surroundings of the motor vehicle, and are navigation data. It is checked whether a totality of the provided piloting data meets a piloting condition, which stipulates a minimum requirement for the totality of the provided piloting data for implementing the piloted or fully autonomous driving mode. Upon failure to meet the piloting condition, an abort of the driving mode is determined and a driving situation signal is generated, which describes the piloting data and this signal is transmitted to a communication unit of a motor vehicle-external server device. The control device receives at least one control signal from the motor vehicle-external server device and transmits this control signal to the driver assistance device.