Fail-Operational Service Handover in Autonomous Vehicles
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current fail-operational systems in autonomous vehicles rely on structural redundancy, which is inflexible and not adaptable to varying operational conditions, limiting their ability to ensure safe vehicle operation in case of primary system failure.
Innovation Solution
Implementing a service-oriented architecture that enables dynamic redundancy, allowing for the reconfiguration of redundant functions and prioritization of service providers based on availability, quality, and conditions, thereby reducing network usage and enhancing flexibility.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If structural redundancy is used to ensure fail-operational behavior, then system reliability is improved, but device complexity and inflexibility increase
Solution Approach 1:
The patent implements dynamic redundancy by enabling the service consumer to dynamically select between primary and secondary service providers based on real-time service quality, availability, and operational conditions. This dynamic selection mechanism replaces static structural redundancy with adaptive dynamic redundancy, allowing the system to flexibly reconfigure fail-operational behavior without requiring complex pre-configured redundant structures.
Solution Approach 2:
The patent changes the parameter of redundancy from fixed structural to dynamic configurable by introducing service quality metrics, availability parameters, and condition-based selection criteria. The service consumer evaluates multiple service providers using these parameters and dynamically switches between them, transforming the redundancy mechanism from a static structural property to a dynamic parameter-driven process.
2Reliability
If multiple service providers are always active to ensure fail-operational capability, then system reliability is improved, but energy consumption and network usage increase
Solution Approach 1:
The patent implements periodic monitoring of service quality and availability metrics instead of continuous active engagement of all service providers. The service consumer periodically evaluates service providers and switches to secondary providers only when needed, transforming continuous energy-consuming redundant operation into periodic assessment with conditional activation, thereby reducing overall energy consumption while maintaining service availability.
Solution Approach 2:
The patent extracts the secondary service provider from continuous active operation and places it in a standby or latent state, activating it only when the primary service provider fails or degrades. This extraction principle allows the system to maintain fail-operational capability by having the secondary provider available when needed, while avoiding the continuous energy consumption that would result from keeping all providers fully active.
3Reliability
If pre-configured fail-operational behavior is implemented, then system reliability is improved, but adaptability to varying operational conditions deteriorates
Solution Approach 1:
The patent replaces pre-configured static fail-operational behavior with dynamic adaptive behavior by enabling the service consumer to evaluate service providers based on real-time conditions such as service quality, availability, and operational context. This dynamic evaluation and selection process allows the system to adapt its fail-operational strategy to varying operational conditions, transforming rigid pre-configured behavior into flexible adaptive behavior.
Solution Approach 2:
The patent introduces feedback mechanisms where the service consumer continuously monitors service quality, availability, and operational conditions, using this feedback to dynamically adjust service provider selection. This feedback-driven approach enables the system to adapt its fail-operational behavior based on actual system state and environmental conditions, replacing static pre-configured behavior with responsive adaptive behavior.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Provided a computer-implemented method for fail-operational handover for vehicle (310) operation, the method comprising the steps, it is an object of the present invention to improve the flexibility of the method. The object is solved by a) receiving a first signal (120) with a first service offer from a first service provider, the first signal including a first address, and a first identifier of a first service type; b) receiving a second signal (122) with a second service offer from a second service provider, the second signal including a second address, and a second identifier of a second service type; c) determining that the first identifier and the second identifier correspond to an identifier of a desired service type; d) storing the second address as a fail-operational address of the desired service type; e) sending a third signal (124) to the first address with a request to subscribe to the first service offer; f) operating the vehicle at least partially based on a service in accordance with the first service offer; and g) determining if the first service provider suffers an error and/or fault, and if so: i) send a fourth signal (130) to the second address with a request to subscribe to the second service offer, and ii) operating the vehicle at least partially based on a service in accordance with the second service offer.