Vehicle Control Arbitration for Authenticated External Commands

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current autonomous driving control systems face challenges in safely managing operation requests from external devices versus internal user inputs, lacking effective authentication and priority determination mechanisms to ensure safe vehicle operation.

Innovation Solution

A server and vehicle system that authenticates external operation requests using encryption keys and driving condition information, determines priority based on pre-stored information, and arbitrates between internal and external operation requests to ensure safe and authorized vehicle operations.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If the vehicle accepts operation requests from external devices, then the functionality and adaptability of the vehicle are improved, but the safety and reliability may deteriorate due to unauthorized or conflicting control signals

Engineering Contradiction:

ImprovefunctionalityVSAvoidsafety

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The server acts as an intermediary between external devices and the vehicle. It receives operation requests from external devices, authenticates them using encryption keys, determines priority based on driving conditions, and then transmits authenticated requests to the vehicle. This mediator role ensures that only authorized requests reach the vehicle while maintaining the ability to accept external control signals.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The system performs preliminary authentication and priority determination before the operation request reaches the vehicle. The server verifies encryption keys, checks driving condition information, and establishes priority levels in advance. This preliminary action ensures that safety checks are completed before the vehicle executes any external operation requests.

Inventive Principle:

Principle #10Preliminary action

2Reliability

If the vehicle prioritizes external operation requests over internal user inputs, then the safety and control authority are improved, but the user experience and ease of operation may worsen

Engineering Contradiction:

Improvecontrol authorityVSAvoiduser experience

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The priority between external and internal operation requests is not fixed but dynamic. The server determines priority based on real-time driving condition information such as autonomous driving mode, speed, and location. This dynamic priority assignment allows the system to flexibly adjust control authority based on current operational context, balancing safety requirements with user convenience.

Inventive Principle:

Principle #15Dynamics

3Reliability

If the vehicle implements comprehensive authentication and priority determination mechanisms, then the safety and reliability are improved, but the device complexity and processing time increase

Engineering Contradiction:

ImprovesafetyVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The complex authentication and priority determination functions are extracted from the vehicle and placed in the external server. The server handles encryption key verification, driving condition analysis, and priority calculation, while the vehicle only needs to receive and execute authenticated requests. This extraction reduces the computational burden and complexity within the vehicle system.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The system is segmented into distinct functional components: the external server handles authentication and priority determination, while the vehicle handles execution. This segmentation allows each component to be optimized independently, with the server focusing on security and decision-making, and the vehicle focusing on reliable execution of authorized commands.

Inventive Principle:

Principle #1Segmentation

4Productivity

If the vehicle processes multiple operation requests simultaneously from different sources, then the productivity and response time are improved, but the reliability may deteriorate due to conflicting commands

Engineering Contradiction:

Improveresponse timeVSAvoidoperational consistency

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The server performs preliminary priority determination before transmitting operation requests to the vehicle. By establishing the execution order in advance based on driving conditions and request types, the system ensures that conflicting commands are resolved before reaching the vehicle, maintaining operational consistency while enabling simultaneous processing of multiple requests.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS11853055B2Vehicle, server, control method of vehicle and control method of server

Publication Date: 2023.12.26 HYUNDAI MOTOR CO LTD

AI summary

A vehicle includes at least one output device; an input device configured to receive at least one in-vehicle input from a user; a communication device configured to receive an operation authentication message including an operation request message, an encryption key, and priority setting information from an external server; and a controller configured to generate a new operation request signal corresponding to the operation request message when the encryption key is identical to an encryption key of the vehicle stored in advance, determine priority between the new operation request signal and at least one existing operation request signal corresponding to the at least one in-vehicle input based on the priority setting information, and control an output device corresponding to a target operation to perform the target operation based on the priority.