Vehicle Controller Authorization Logic for Safe Mode Transitions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Autonomous vehicles face challenges in safely transitioning between different operational modes without human intervention, as existing systems lack robust mechanisms to prevent direct mode changes between operator-controlled and autonomous modes, potentially leading to unsafe operations.
Innovation Solution
A vehicle controller initializes in a no-authorization state and manages mode transitions by receiving authorization requests to switch between autonomous and operator-controlled modes, ensuring that transitions occur through a standby state, preventing direct changes between modes and ensuring safety through synchronization with multiple control lanes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the system allows direct mode transitions between operator-controlled and autonomous modes, then the ease of operation is improved, but the reliability deteriorates due to potential unsafe operations
Solution Approach 1:
The patent introduces an intermediary authorization mechanism that mediates between operator-controlled mode and autonomous mode. The vehicle controller requires explicit authorization requests and grants before allowing mode transitions, preventing direct uncontrolled switching. This intermediary authorization layer ensures that only properly authorized mode changes are permitted, maintaining safety while enabling operational flexibility.
2Reliability
If the system implements robust authorization mechanisms for mode transitions, then the reliability is improved, but the device complexity worsens
Solution Approach 1:
The patent segments the control system into distinct functional components: a vehicle controller that manages mode transitions, an autonomy computing system that processes authorization requests, and separate control lanes for different operational modes. This segmentation allows each component to have a specific, simplified function while the overall system achieves robust safety through coordinated operation of these modular elements.
Solution Approach 2:
The system performs preliminary actions by requiring authorization requests to be processed and granted before mode transitions occur. The vehicle controller proactively checks for proper authorization before allowing switching between modes, preventing unsafe transitions before they can occur. This preliminary authorization check simplifies the control logic by establishing clear pre-conditions for mode changes.
3Reliability
If the system processes authorization requests through multiple control lanes, then the reliability is improved, but the use of energy worsens due to increased processor cycles
Solution Approach 1:
The patent implements partial processing where the vehicle controller handles only the critical authorization verification and mode transition control, while the autonomy computing system handles the heavier processing load of authorization request validation. This division of labor ensures that the most energy-sensitive vehicle controller performs only essential functions, reducing its processor energy consumption while maintaining reliable synchronized transitions through the coordinated action of both systems.
Data Source
AI summary
The present disclosure is directed to controlling state transitions in an autonomous vehicle. In particular, a computing system can initiate the autonomous vehicle into a no-authorization state upon startup. The computing system can receive an authorization request. The computing system determines whether the authorization request includes a request to enter the first or second mode of operations, wherein the first mode of operations is associated with the autonomous vehicle being operated without a human operator and the second mode of operations is associated with the autonomous vehicle being operable by a human operator. The computing system can transition the autonomous vehicle from the no-authorization state into a standby state in response to determining the authorization request includes a request to enter the first mode of operations or into a manual-controlled state in response to determining the authorization request is a request to enter the second mode of operations.