Surroundings Model Redundancy for Fault Isolation in Mobile Platforms
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Automated driving systems require a high level of safety and availability, especially in the transition from Level 3 to Level 4 automation, where a fault-tolerant system is necessary to maintain functionality in the event of component failures, while existing dual-duplex redundancy architectures increase the risk of system failure due to increased complexity and false-positive fault recognition.
Innovation Solution
A system with redundant subsystems and comparison systems to recognize and isolate faults, reducing the probability of a second failure during an emergency operation tolerance time interval, using fewer hardware components to minimize costs, energy consumption, and weight.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If dual-duplex redundancy architecture is used to improve fault tolerance, then system safety is improved, but device complexity increases and false-positive fault recognition occurs
Solution Approach 1:
The system divides fault detection into separate comparison units, each responsible for comparing outputs from specific sensor systems. This segmentation allows independent fault analysis without requiring complex cross-comparisons across all sensors, reducing overall system complexity while maintaining redundancy.
Solution Approach 2:
Comparison units act as intermediaries between sensor systems and the automated driving system. These intermediaries detect faults by comparing sensor outputs and only communicate with the automated driving system when no fault is detected, filtering out false positives before they reach the main control logic.
2Reliability
If redundant subsystems are added to maintain functionality after failure, then system availability is improved, but energy consumption increases
Solution Approach 1:
The comparison units continuously compare sensor outputs in real-time, enabling immediate fault detection. The system only ceases communication with the automated driving system when a fault is actually detected, avoiding continuous high-energy states while maintaining monitoring capability.
Solution Approach 2:
The system extracts and isolates fault detection functionality into separate comparison units that operate independently. This allows the main automated driving system to remain in a low-energy state while fault monitoring continues, consuming energy only when necessary for actual fault communication.
3Measurement precision
If more sensor systems are integrated to improve surroundings model accuracy, then measurement precision is improved, but device complexity increases
Solution Approach 1:
The system segments sensor inputs into distinct sensor systems, each processed by dedicated comparison units. This modular approach allows multiple sensor types to be integrated without creating complex cross-dependencies, maintaining measurement precision while managing complexity through structured organization.
Data Source
AI summary
A system for providing an output signal based on a generated surroundings model of surroundings of a mobile platform is proposed. The system includes: a first subsystem, a second subsystem, wherein the second subsystem is configured to redundantly provide a functionality of the first subsystem, and a third subsystem, wherein the third subsystem is configured to redundantly provide the functionality of the first subsystem and/or of the second subsystem; a first comparison system, a second comparison system, wherein the first comparison system and/or the second comparison system are configured to detect at least one fault in the first subsystem and/or a fault in the second subsystem and/or a fault in the third subsystem and/or to identify the corresponding faulty subsystem.