Redundant Automated Driving Control System for Fail-Safe Reliability
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current automated driving systems lack fail-safe reliability and operational dependability, particularly in the event of system component or communication failure, which can endanger vehicle occupants and other traffic participants.
Innovation Solution
The system employs independent signal transfer paths and redundant components for position identification, trajectory planning, and actuator control, allowing selective data conveyance and multiple signal paths to ensure fault redundancy, with independent processing and energy supply systems to maintain safe vehicle guidance even in the event of failures.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single automated driving system is used, then the device complexity is reduced, but the fail-safe reliability and operational dependability deteriorate
Solution Approach 1:
The automated driving system is segmented into multiple independent functional modules: sensor devices for environment perception, planning devices for trajectory generation, regulation devices for control signal generation, and actuator devices for vehicle control. Each module can operate independently, and the system can switch between different modules if one fails, thereby improving fail-safe reliability while managing complexity through modular design
Solution Approach 2:
The system implements redundant components and parallel signal transfer paths before failures occur. Multiple sensor devices, planning devices, and regulation devices are provided in parallel, along with independent signal transfer paths between them. This redundancy ensures that if one component fails, the system can continue operating using the remaining components, thereby cushioning against failures and improving reliability
2Reliability
If redundant components and independent signal transfer paths are implemented, then fail-safe reliability is improved, but device complexity increases
Solution Approach 1:
The system is divided into distinct functional segments (sensors, planners, regulators, actuators) with clear interfaces between them. This segmentation allows redundancy to be implemented at the module level without creating a monolithic complex system, making the redundant structure more manageable and maintainable
Solution Approach 2:
The redundant components are designed with universal interfaces and identical functions. Multiple sensor devices, planning devices, and regulation devices can all perform the same functions and communicate through standardized interfaces, reducing the complexity that would otherwise arise from managing diverse redundant components
3Reliability
If multiple independent processing paths are used, then fault redundancy is achieved, but the quantity of components increases
Solution Approach 1:
The system segments functionality into modular units that can be replicated. Instead of duplicating entire subsystems, only critical components (sensors, planners, regulators) are segmented and replicated in parallel, achieving fault redundancy while minimizing the total quantity of components needed
Solution Approach 2:
Multiple independent processing paths are merged at the output stage, where control signals from multiple regulation devices are combined and sent to actuator devices. This merging approach achieves fault redundancy through parallel processing while reducing the quantity of components by consolidating the final control interface
Data Source
AI summary
A method for operating a motor vehicle in an automated driving mode includes: identifying, using two devices, the current position, the objects and open spaces currently present in the vehicle surroundings; respectively identifying, by the two devices, a trajectory for independent vehicle guidance; and in two regulation devices, control signals for actuator devices are respectively identified and control is applied, in accordance with the previously calculated trajectory, to longitudinal-dynamics-influencing actuators and to transverse-dynamics-influencing actuators for vehicle control.