Multi-SoC Vehicle Control for Real-Time Safety During Disconnection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing advanced driver assistance systems (ADAS) and autonomous driving vehicles rely on a single electronic control unit for vehicle control and information dissemination, which limits their ability to provide comprehensive safety information and react to changing conditions, especially when network connectivity is lost.
Innovation Solution
A multi-system-on-chip (multi-SoC) system is introduced, where a central information display (CID) SoC requests and combines information with an ADAS SoC using PCIe and CAN communication, enabling real-time safety assessments and vehicle control even in disconnected scenarios through a safety manager that predicts risks and transmits control commands.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single electronic control unit is used for vehicle control and information dissemination, then the system structure is simple, but the ability to provide comprehensive safety information and react to changing conditions is limited
Solution Approach 1:
The system divides the vehicle control architecture into multiple independent SoC modules (first SoC for infotainment, second SoC for ADAS) that can operate autonomously. Each SoC has dedicated safety functions, allowing comprehensive safety monitoring without requiring a monolithic complex system structure.
Solution Approach 2:
The system changes the operational parameters by implementing different communication modes (PCIe for high-speed direct communication, CAN for standard vehicle bus communication). This allows the system to adapt communication protocols based on safety criticality and network availability, enhancing safety information provision while managing complexity through parameter-based adaptation.
2Reliability
If real-time safety assessments are performed by combining multiple information sources, then the vehicle safety response improves, but the communication and processing complexity increases
Solution Approach 1:
The first SoC acts as an intermediary that receives information from multiple sources (second SoC, ADAS, navigation), processes it through a safety manager, and generates control commands. This intermediary architecture simplifies the overall system by centralizing the integration logic in one component while maintaining real-time safety assessment capabilities.
Solution Approach 2:
The system performs preliminary safety assessments by continuously monitoring multiple information sources and pre-processing data through the safety manager. When network disconnection occurs, the system has already accumulated and processed safety-critical information, allowing it to maintain safety functions without real-time network dependency.
3Duration of action of stationary object
If the system operates independently when disconnected from the network, then the safety continuity is maintained, but the system must handle more edge cases and operational complexity
Solution Approach 1:
The system implements prior cushioning by maintaining local copies of safety-critical information and algorithms in the first SoC. When network disconnection occurs, the system can continue operating using pre-stored safety data and algorithms, cushioning against the loss of network connectivity and maintaining safety functions without requiring complex real-time network dependency management.
Data Source
AI summary
Proposed is a method for controlling a vehicle through a multi System on Chip (SoC) system. Specifically, proposed is a method for controlling a vehicle, the method comprising the steps of: by means of a first SoC, requesting information to a second SoC or an Adaptive Driver Assistant System (ADAS); by means of the first SoC, receiving the information from the second SoC or the ADAS as a response to the request; by means of the first SoC, determining whether a vehicle is safe or not by using the received information; and by means of the first SoC, transmitting a command generated on the basis of the determination to the second SoC or the ADAS.