Vehicle Controller Device for Remote Driving During Sensor Failure

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing vehicle control systems fail to maintain vehicle travel when sensors lose function, particularly due to poor visibility in disaster scenarios, leading to compromised autonomous driving.

Innovation Solution

A vehicle controller device equipped with a communication section, acquisition section, travel plan generation section, travel control section, prediction section, and notification section that enables remote driving by predicting and notifying of compromised states, allowing for continued vehicle operation even when sensors malfunction.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Extent of automation

If autonomous driving is implemented based on sensor data, then the vehicle can operate independently, but the system becomes vulnerable to sensor failures in poor visibility conditions

Engineering Contradiction:
Improveautonomous driving capabilityVSAvoidsystem reliability under disaster conditions
Core Design Contradiction:
Extent of automationVSReliability

Solution Approach 1:

The patent introduces a communication section as an intermediary that enables remote driving capability. When sensors fail in poor visibility conditions, the system can switch from autonomous driving to remote driving mode, where an external operator controls the vehicle through transmitted operation information. This intermediary communication channel provides an alternative control path that bypasses the failed sensor-based autonomous system.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system dynamically switches between autonomous driving and remote driving modes based on environmental conditions and sensor status. The travel control section adjusts the driving mode in real-time, transitioning from fully autonomous operation to remote-controlled operation when compromised states are detected or predicted, ensuring continuous reliable operation under varying conditions.

Inventive Principle:
Principle #15Dynamics

2Object-affected harmful factors

If the vehicle stops when sensors lose function, then safety is maintained, but vehicle travel is interrupted

Engineering Contradiction:
Improvesafety under sensor failureVSAvoidvehicle travel continuity
Core Design Contradiction:
Object-affected harmful factorsVSProductivity

Solution Approach 1:

The communication section serves as an intermediary that enables continued vehicle operation through remote driving. Instead of stopping when sensors fail, the system activates remote driving mode where an external operator provides control inputs, allowing the vehicle to maintain travel continuity while safety is preserved through human oversight in the compromised condition.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The travel control section dynamically adjusts the vehicle's operational state based on sensor functionality. When sensor failure is detected or predicted, the system transitions from autonomous driving to remote driving mode, maintaining vehicle movement and productivity while ensuring safety through the alternative control mechanism.

Inventive Principle:
Principle #15Dynamics

3Reliability

If remote driving is always available, then vehicle operation can be maintained during sensor failure, but system complexity increases

Engineering Contradiction:
Improvevehicle operation continuityVSAvoidcontrol system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system implements dynamic mode switching between autonomous and remote driving based on actual operational needs. The travel control section activates remote driving functionality only when sensor failure or compromised states are detected or predicted, rather than maintaining constant remote driving capability. This dynamic activation reduces system complexity while ensuring reliability when needed.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The prediction section performs preliminary assessment of environmental conditions to anticipate sensor failures before they occur. By predicting compromised states based on meteorological information and current sensor performance, the system can proactively switch to remote driving mode, preventing complete operational interruption and reducing the need for complex emergency response mechanisms.

Inventive Principle:
Principle #10Preliminary action

4Productivity

If the vehicle waits for disaster occurrence before switching to remote driving, then autonomous driving efficiency is maintained, but response time to sensor failure is delayed

Engineering Contradiction:
Improveautonomous driving efficiencyVSAvoidresponse time to compromised state
Core Design Contradiction:
ProductivityVSLoss of time

Solution Approach 1:

The prediction section performs preliminary assessment of environmental conditions and sensor performance to forecast potential sensor failures before they actually occur. Based on meteorological information and current system state, the prediction section identifies upcoming compromised states, allowing the travel control section to switch to remote driving mode in advance, thereby minimizing interruption to autonomous driving efficiency while ensuring timely response to actual sensor failures.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS11584394B2Vehicle controller device and vehicle control system
Publication Date: 2023.02.21 TOYOTA JIDOSHA KK
  • US11584394B2 patent drawing
  • US11584394B2 patent drawing
  • US11584394B2 patent drawing

AI summary

A vehicle controller device including: a communication section configured to receive operation information to operate a vehicle from an operation device located externally to the vehicle; a first memory; and a first processor, the first processor being configured to: acquire peripheral information regarding a periphery of the vehicle from a peripheral information detection section; generate a travel plan for the vehicle based on the peripheral information of the vehicle; control autonomous driving in which the vehicle travels based on the generated travel plan and also control remote driving in which the vehicle travels based on the received operation information; predict that a compromised state in which autonomous driving of the vehicle becomes compromised will arise based on environmental information including meteorological information received by the communication section; and notify the operation device of the compromised state in a case in which the compromised state has been predicted to arise.