Robotic Control Module Evaluation for Fault-Tolerant Operation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing automotive systems face challenges in maintaining reliability and fault tolerance, particularly in advanced driving scenarios like SAE Levels 3, 4, and 5, where the absence of a human driver necessitates continuous system availability and fault-tolerant operation to ensure safe vehicle operation.
Innovation Solution
A method for controlling a robot device that involves representing signal values as binary values, calculating a probability distribution of these values, and setting an operating mode based on the evaluation of processing modules to ensure fault-tolerant operation, enabling real-time anomaly detection and switching to redundant elements if necessary.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single processing module is used to control the robot device, then the device complexity is reduced, but the reliability decreases due to lack of fault tolerance
Solution Approach 1:
The control system is segmented into multiple processing modules (first processing module and second processing module) that can independently evaluate signal values. Each module processes signals separately and can identify anomalies independently, providing fault tolerance without requiring a fully redundant complex system.
Solution Approach 2:
An intermediary evaluation mechanism is introduced that compares signal values processed by different modules against each other and against expected ranges. This intermediary layer detects anomalies without requiring complete system redundancy, maintaining reliability while controlling complexity.
2Reliability
If continuous monitoring of all signal values is performed, then the reliability is improved, but the computational demand increases
Solution Approach 1:
Instead of continuously analyzing all signal values in detail, the system performs partial monitoring by evaluating key signal values against expected ranges and comparing them between processing modules. This partial action approach maintains system availability while significantly reducing computational energy requirements.
Solution Approach 2:
The processing modules perform self-evaluation by comparing their own signal value assessments against each other. Each module serves as a mutual check, allowing the system to maintain reliability through self-monitoring without requiring additional computational resources for external verification.
3Reliability
If redundant processing modules are implemented, then the fault tolerance is improved, but the device complexity increases
Solution Approach 1:
The redundant processing capability is segmented into modular evaluation units that can be independently activated. The system divides the fault tolerance function into discrete signal evaluation tasks that can be performed by separate processing modules, reducing the overall complexity compared to fully redundant systems.
Solution Approach 2:
The processing modules are designed with multi-functionality, capable of both normal signal processing and anomaly detection. This universal design allows the same hardware to serve multiple purposes, providing fault tolerance without requiring separate dedicated redundant components, thus controlling device complexity.
Data Source
AI summary
A method for controlling a robot device. For each processing module of one or more processing modules of a control system of the robot device, the method includes: representing each signal value of a plurality of signal values received or generated by the processing module as at least one first binary value that indicates whether the signal value, or a respective value which is derived from and characterizes the signal value, has a respective standard value or not; generating a plurality of random second binary values; ascertaining a parameter of a probability distribution that describes the joint distribution of a set of binary values containing the first binary values and the second binary values; ascertaining an evaluation of the functionality of the processing module based on the ascertained parameter; setting an operating mode of the control system depending on said evaluation; and controlling the robot device using an output.


