Vehicle OS Open Interfaces With Safe Command Range Validation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing vehicle operating systems are inflexible and slow to adapt to user preferences, limiting the ability to personalize comfort and safety functions, and pose safety risks due to improper control commands.

Innovation Solution

A vehicle operating system with open interfaces for sensor data and control commands, allowing third-party development and ensuring safe operation by defining permissible value ranges, along with a communication module for backend server connectivity and personalization memory for user-specific settings.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the vehicle operating system uses closed interfaces with manufacturer-only programming, then safety and reliability are guaranteed, but adaptability and speed of function development are reduced

Engineering Contradiction:
Improvevehicle functionality safetyVSAvoidfunction development speed
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The system segments control commands into two categories: those within permissible value ranges (allowable) and those outside (impermissible). The interface separately handles validation of commands against pre-defined safe ranges, enabling third-party functions to operate freely within bounds while maintaining manufacturer-defined safety boundaries.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces an intermediary validation layer between the third-party function and the vehicle actuator. This intermediary checks control commands against permissible value ranges stored in memory, acting as a mediator that allows flexible third-party functionality while enforcing manufacturer-defined safety constraints before commands reach the vehicle systems.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If open interfaces are provided for third-party function development, then adaptability and function diversity increase, but safety risks from improper control commands arise

Engineering Contradiction:
Improvefunction customization capabilityVSAvoidsafety risk from control commands
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The system performs preliminary action by pre-defining permissible value ranges for all control commands during system configuration or manufacturing. These safe operating boundaries are stored in memory before any third-party functions are executed, enabling real-time validation without compromising safety while allowing full adaptability within the pre-established safe zones.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent converts the potential harm of unrestricted third-party control commands into a benefit by using the permissible value range constraints as a protective framework. The validation mechanism transforms what could be unsafe unrestricted access into a structured system that enables innovation while automatically blocking harmful commands, thus converting the risk into a safety feature.

Inventive Principle:
Principle #22Blessing in disguise (Convert harm into benefit)

3Reliability

If manufacturer-defined permissible value ranges are enforced for all control commands, then safety is guaranteed, but flexibility in function implementation is reduced

Engineering Contradiction:
Improvecontrol command safetyVSAvoidfunction implementation flexibility
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system applies dynamics by making the control command validation adaptive rather than static. While the permissible value ranges are pre-defined for safety, the system dynamically evaluates each control command against these ranges in real-time, allowing maximum flexibility within safe boundaries. This dynamic validation enables third-party functions to operate freely as long as they remain within the manufacturer-defined safe zones.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentUS11926269B2Vehicle operating system
Publication Date: 2024.03.12 MERCEDES BENZ GROUP AG
  • US11926269B2 patent drawing
  • US11926269B2 patent drawing

AI summary

A vehicle operating system includes a function memory for storing functions or applications and an interface for emitting set sensor data to the functions or applications. An interface is also included for forwarding control commands generated by the functions or applications to actuators of the vehicle. A memory is provided in which, on the part of the vehicle, set permissible value ranges for the control commands are stored. The interface for forwarding the control commands forwards the control commands only in the framework of the value ranges stored in the memory.