Redundant Vehicle Processing Architecture for ASIL-D Fail-Operational Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current processing systems for vehicle automation lack the necessary robustness and scalability to meet high functional safety requirements, particularly for ASIL levels, and are not easily upgradable to address future unknown requirements, while also being resilient against errors and malfunctions.
Innovation Solution
A processing system comprising multiple simple and parallel processors with redundant configurations, a monitoring system, and a communication bus architecture that allows for 'native decomposition' and error detection, enabling the system to maintain functionality even when components malfunction, and is designed to satisfy ASIL requirements up to level D.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If a single powerful processor is used to execute data processing for vehicle automation, then processing capability is improved, but reliability and functional safety are worsened due to single point of failure
Solution Approach 1:
The processing system is divided into multiple independent processing units (simple processors and parallel processors) that can operate independently. Each processor handles specific tasks, and the system can partition workloads across multiple units, ensuring that failure of one unit does not compromise the entire system's functionality or safety.
Solution Approach 2:
Different types of processors (simple processors for sequential tasks, parallel processors for parallel tasks) are deployed with specific functional characteristics matched to specific processing needs. This allows optimal local processing capability while maintaining overall system reliability through diversity and specialization.
2Reliability
If redundant processor configurations are implemented to improve reliability, then functional safety is improved, but device complexity increases
Solution Approach 1:
The system segments redundancy into modular processing units with standardized interfaces. Each unit can be independently configured, tested, and replaced, reducing the complexity management burden compared to a monolithic redundant system.
Solution Approach 2:
The processing units are designed with universal interfaces and standardized communication protocols, allowing the same hardware architecture to serve multiple functions and be configured in various redundancy patterns (1:1, 1:2, etc.) without requiring different system designs.
3Reliability
If the processing system is designed to meet current ASIL requirements, then functional safety is improved, but adaptability to future unknown requirements is worsened
Solution Approach 1:
The processing system employs dynamic reconfiguration capabilities where processors can be dynamically added, removed, or reassigned based on changing requirements. The system can adapt its processing architecture in real-time or through planned upgrades, maintaining ASIL compliance while evolving to meet future demands.
Solution Approach 2:
The system uses universal processor interfaces and standardized communication bus architectures that can accommodate different processor types and configurations, enabling future upgrades and adaptations without requiring complete system redesign while maintaining safety compliance.
4Measurement precision
If simple processors are used for iterative calculations, then processing accuracy is improved, but processing speed is worsened compared to parallel processors
Solution Approach 1:
The system segments computational tasks by assigning iterative, accuracy-critical calculations to simple processors while delegating parallelizable, speed-critical operations to parallel processors. This task segmentation allows each processor type to operate in its optimal performance regime.
Solution Approach 2:
The system merges simple processors and parallel processors into a unified processing architecture that combines the strengths of both types, allowing iterative calculations to be performed with high accuracy on simple processors while parallel processors simultaneously handle other computationally intensive tasks.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
The system provides a scalable and resilient fail-operational platform capable of maintaining safety-critical functions, ensuring vehicle safety and meeting high ASIL standards, including ASIL-D, by allowing continued operation even when processors malfunction, and enabling advanced automation levels such as SAE J3016 level four or five.
Implementation Method 1
The heat sink can be part of an active cooling system that can comprise a closed liquid cooling circuit
Implementation Method 2
The heat sink can have a flat bearing surface for the processors that need to be cooled
Data Source
AI summary
A processing system for use in a vehicle comprises numerous simple processors, numerous parallel processors, an interface for connecting to a communication bus in the vehicle, and a monitoring device that is connected to the interface and each of the processors. The monitoring device is designed for redundant configuration of the simple processors and/or the parallel processors in relation to one another.