Vehicle Control Device Seamless Automatic Driving Redundancy
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Automatic driving systems face challenges in maintaining seamless control when an operation abnormality occurs in the microcomputer, leading to potential control gaps during transitions between redundant microcomputers, which can compromise safety and functionality.
Innovation Solution
A vehicle control device and system that includes a first and second control command generation unit and a communication circuit, where the communication circuit is latched in a disabled state upon detecting an abnormality in the first unit, preventing the transmission of actuator control commands and ensuring seamless control by isolating the faulty unit until normal operation is restored.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If control is transferred between main system microcomputer and sub system microcomputer when abnormalities occur, then system reliability is improved, but control gaps occur during transitions causing seamless control to become difficult
Solution Approach 1:
The patent applies preliminary action by having the backup microcomputer generate and hold control commands in advance, so when a switch is needed, the backup unit already has ready-to-execute commands that match the current system state, eliminating control gaps during transition
Solution Approach 2:
The patent uses feedback mechanisms where microcomputers continuously monitor each other's operation status and compare control commands, enabling automatic detection of abnormalities and seamless switching while maintaining control continuity through real-time status awareness
2Ease of operation
If uniform stopping (resetting) of microcomputer is performed in response to abnormality, then abnormality handling is simplified, but the function of the automatic driving system stops
Solution Approach 1:
The patent applies segmentation by dividing the control system into multiple independent microcomputers (main system and sub system) that can operate independently, allowing one unit to handle abnormalities while the other maintains system functionality
Solution Approach 2:
The patent implements beforehand cushioning by preparing a backup microcomputer that stands ready to take over control functions immediately when the main microcomputer experiences an abnormality, cushioning against complete system failure
Data Source
AI summary
Achieved is a vehicle control device capable of performing seamless automatic driving control even when an operation abnormality occurs in an operation processing unit in a vehicle control device, and improving safety.When operation processing of an actuator control command is performed by two microcomputers of microcomputers 11b and 12b in synchronization, and a monitoring circuit 11m detects an abnormality of the microcomputer 11b, a communication circuit 11c that communicates the actuator control command of the microcomputer 11b to a brake control unit 13 or the like is latched in a disabled state, and the actuator control command from an icon 12b is transmitted to the brake control unit 13 or the like via the communication circuit 12c. The disabled state of the communication circuit 11c is maintained until an IGNSW or an automatic driving SW of the vehicle toggles, and until that time, the actuator control command from the microcomputer 12b is transmitted to the brake control unit 13 or the like. The control moves from the microcomputer 11b to the microcomputer 12b to the microcomputer 11b, so that it is possible to suppress the occurrence of the control gap at every control transition of multiple times, and it is possible to maintain the seamless automatic driving control.