Redundant Vehicle Remote Control for Command Verification

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing telematics systems face challenges in providing continuous and secure remote control of autonomous vehicles due to unstable 3G/4G wireless communication networks and lack of redundant architectures, which can lead to incorrect command execution or hacking.

Innovation Solution

Implementing a system with redundant communication protocols (e.g., LTE, Wi-Fi, DSRC) that checks and compares control commands across multiple protocols, ensuring execution only when copies match, and rejecting commands if they differ, along with a robust architecture including GPS, telematics, and security modules to mitigate hacking and coverage issues.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a single communication protocol is used for remote control commands, then the system is simpler to implement, but the system becomes vulnerable to network instability and hacking

Engineering Contradiction:
Improveremote control reliabilityVSAvoidcommunication system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies local quality by making different communication protocols serve different functions: the first protocol (e.g., LTE) is used for receiving control commands, while the second protocol (e.g., Wi-Fi) is used for verifying command integrity. This differentiation ensures that command execution relies on verified information, enhancing reliability without requiring all protocols to perform all functions.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The patent introduces an intermediary verification mechanism where control commands received via the first communication protocol are cross-checked against a second copy received via a second protocol. This intermediary verification step acts as a mediator that prevents unauthorized or corrupted commands from executing, thereby improving security and reliability.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If redundant communication protocols are implemented, then system reliability improves, but device complexity increases

Engineering Contradiction:
Improvecommand execution reliabilityVSAvoidsystem architecture complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements preliminary action by pre-configuring multiple communication protocols and their corresponding verification mechanisms before actual operation. The system is prepared in advance with redundant pathways, so when deployed, it can immediately begin verifying commands through multiple protocols without requiring complex real-time decision-making about which protocol to use.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If control commands are verified through multiple protocols, then security against hacking improves, but command execution time increases

Engineering Contradiction:
Improvesecurity against hackingVSAvoidcommand execution time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent applies parameter changes by dynamically adjusting the verification process based on protocol availability and command criticality. When both communication protocols are available, full verification is performed. When only one protocol is available or for non-critical commands, the system can proceed with available information, thereby reducing execution time while maintaining adequate security.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentEP3737595B1Real-time remote control of vehicles with high redundancy
Publication Date: 2023.12.27 TUSIMPLE INC
  • EP3737595B1 patent drawingFigure 1
  • EP3737595B1 patent drawingFigure 2
  • EP3737595B1 patent drawingFigure 3

AI summary

Described are devices, systems and methods for real-time remote control of vehicles with high redundancy. In some embodiments, two copies of at least one control command are received using two different wireless communication protocols, and are compared. The at least one control command is executed when the two copies are in agreement, but is rejected when the two copies differ. In other embodiments, additional wireless communication protocols may exist to provide a redundant mode of communication when one of the two different wireless communication protocols are unavailable. In yet other embodiments, redundant GPS units may be used to determine availability of any of the communication protocols, and relevant control commands may be downloaded in advance to circumvent the lack of coverage.