Vehicle Command Voting With SoC Memory Validation

The patent performs memory tests on the SoC before the autonomous driving computer generates control commands. By conducting the memory test in advance, the system ensures that the SoC is functioning properly before it processes sensor data and generates commands, thereby guaranteeing command reliability without adding time to the critical command generation path. The test result is stored and used for subsequent command validation.

The patent divides the reliability verification process into separate stages: (1) memory testing of the SoC, (2) command generation by the autonomous driving computer, and (3) command validation by comparing against test results. This segmentation allows the memory test to be performed independently before command generation, avoiding time delays in the critical command path while still ensuring reliability through staged verification.

The patent introduces a command controller as an intermediary component that coordinates between the autonomous driving computer, the SoC, and the memory test system. The command controller receives commands from the autonomous driving computer, validates them against pre-stored test results, and determines whether to execute or block the commands. This intermediary structure organizes the complexity into a clear validation workflow without requiring fundamental changes to the existing autonomous driving architecture.

The memory test is performed in advance and the results are stored in a predetermined location before the autonomous driving computer generates commands. This preliminary action eliminates the need for real-time coordination between memory testing and command generation, reducing system complexity by decoupling these functions. The command controller simply needs to retrieve and compare against pre-stored results, rather than managing complex real-time testing operations.

The patent creates a virtual copy of the memory test results and uses this copied data for validation purposes. Instead of implementing full redundant computing devices with duplicate hardware, the system copies the essential validation information (test results) and uses it to verify commands from the primary autonomous driving computer. This copying approach provides reliability verification without the full complexity and cost of complete hardware redundancy.

The command controller serves as an intermediary that implements a simplified voting mechanism. Rather than requiring multiple autonomous driving computers to independently generate and compare commands, the command controller acts as a central validator that compares commands against pre-stored test results. This intermediary approach provides reliability checking with reduced complexity compared to full distributed redundant computing systems.