Vehicle Control Device Abnormality Detection and Safe Transition
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In automatic driving systems, when an abnormality occurs in the microcomputer controlling vehicle operations, there is a risk of system failure and unsafe control transitions, particularly due to the difficulty in avoiding control transition times and varying risks based on external vehicle situations.
Innovation Solution
A vehicle control device and electronic control system that includes a monitoring circuit with dual abnormality detection times and an outside world recognition unit to assess collision potential, allowing for controlled transitions to a degeneration control microcomputer, thereby ensuring safe control transfer and minimizing control gaps.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the control is transferred to a degeneration control microcomputer, then the reliability during abnormality is improved, but a control transition time occurs which reduces productivity
Solution Approach 1:
The patent applies preliminary action by initiating the control transfer process before the actual reset occurs. The degeneration control microcomputer is notified in advance and begins preparing to take over control functions. This allows the transition to happen seamlessly during the buffer period between first and second abnormality detection times, minimizing any productivity impact.
Solution Approach 2:
The patent maintains continuity of useful action by ensuring that control functions remain active throughout the transition process. While the control microcomputer is being reset, the degeneration control microcomputer is already prepared and can immediately take over, ensuring that vehicle control functions continue without interruption or significant delay.
2Reliability
If the microcomputer operation is monitored continuously, then the reliability is improved, but the device complexity increases due to multiple monitoring units
Solution Approach 1:
The patent applies segmentation by dividing the monitoring function into two distinct monitoring units with different detection timings. The first monitoring unit detects abnormalities early to initiate preparation for control transfer, while the second monitoring unit confirms the abnormality before executing the reset. This segmentation allows reliable abnormality detection while keeping each monitoring unit's logic relatively simple and manageable.
Data Source
AI summary
Even in a case where an operation abnormality occurs in the arithmetic processing unit of the control device, control is safely shifted to the degeneration control microcomputer, and a vehicle control device capable of improving safety is realized.There are provided an outside world recognition microcomputer 10b, a control microcomputer 11b that outputs a control command to the actuator control device, and a degeneration control microcomputer 12b to which control is shifted in a case where an abnormality occurs in the control microcomputer 11b. The outside world recognition microcomputer 10b calculates a collision potential based on information from the outside world, and determines whether to reset the control microcomputer 11b when an abnormality occurs in the control microcomputer 11b or to shift control to the degeneration control microcomputer 12b.