Abstract:
A fault tolerant controller system includes a first controller and a second controller. One of the first and second controllers designated as a primary controller for generating control signals intended to control actuation devices on a vehicle under non-fault operating conditions, and the other of the first and second controllers designated as a secondary controller generating control signals intended to control actuation devices on the vehicle. The actuation devices are responsive only to the designated primary controller. An error is detected in the primary controller and a message is transmitted from the faulty controller to the non-faulty controller identifying the error. The non-faulty controller is subsequently designated as the primary controller. The control signals including an identifier that identifies the non-faulty controller as the designated primary controller. In response to detecting the error, the faulty controller is reset to operate in a safe operating mode as the secondary controller.
Abstract:
Systems and methods are provided for effecting control through multi-stage voting. A control system may be in communication with an actuator device responsive to a voted command. A multi-stage voting system may be configured to determine the voted command. A set of controllers and a monitor controller may provide commands to the multi-stage voting system. The multi-stage voting system includes logic with a first stage that compares the commands of the set of controllers to each other, and a second stage that compares at least one of those commands to the monitor command. The multi-stage voting system delivers the voted command to the actuator device based on the comparisons made in the first and second stages. The actuator device effects an operation in response to the voted command.
Abstract:
An automotive vehicle includes a vehicle steering system, an actuator configured to control the steering system, a first controller, and a second controller. The first controller is in communication with the actuator. The first controller is programmed with a primary automated driving system control algorithm and is configured to communicate an actuator control signal based on the primary automated driving system control algorithm. The second controller is in communication with the actuator and with the first controller. The second controller is configured to, in response to a first predicted vehicle path based on the actuator control signal deviating from a current lane, control the actuator to maintain a current actuator setting. The second controller is also configured to, in response to the first predicted vehicle path being within the current lane, control the actuator according to the actuator control signal.
Abstract:
The present disclosure relates to an automated system for use in connection with longitudinal deceleration, longitudinal acceleration, and lateral acceleration functions. The system includes an interface receiving signals from and transmitting signals to a controller. The system also includes a safety kernel system comprising safety kernel software and a set of safety rules. Also disclosed are methods for use in a motion control system in connection with vehicle deceleration, acceleration, and lateral acceleration. The methods in some cases include receiving an initial request into a safety kernel software and determining whether the safety kernel software has received an override. The methods can also include detecting a violation of any primary safeguards defined by the safety kernel software, detecting a violation within a set of secondary safeguards defined by the safety kernel software, and adjusting the initial request to a modified level; and transmitting the modified level to an actuator.
Abstract:
A fault tolerant controller system includes a first controller and a second controller. One of the first and second controllers designated as a primary controller for generating control signals intended to control actuation devices on a vehicle under non-fault operating conditions, and the other of the first and second controllers designated as a secondary controller generating control signals intended to control actuation devices on the vehicle. The actuation devices are responsive only to the designated primary controller. An error is detected in the primary controller and a message is transmitted from the faulty controller to the non-faulty controller identifying the error. The non-faulty controller is subsequently designated as the primary controller. The control signals including an identifier that identifies the non-faulty controller as the designated primary controller. In response to detecting the error, the faulty controller is reset to operate in a safe operating mode as the secondary controller.
Abstract:
Systems and method are provided for monitoring an operator of a vehicle. In one embodiment, a method includes: receiving, by a processor, data generated by the vehicle; determining, by the processor, causal time series event data based on the received data; computing, by the processor, a score for at least one of safety and quality based on a first machine learning model and the causal time series event data; computing, by the processor, at least one explanation for the score based on a second machine learning model; and generating, by the processor, display data to display at least one of the causal time series event data, the score, and the explanation to an end user.
Abstract:
An automotive vehicle includes a vehicle steering system, an actuator configured to control the steering system, a first controller, and a second controller. The first controller is in communication with the actuator. The first controller is programmed with a primary automated driving system control algorithm and is configured to communicate an actuator control signal based on the primary automated driving system control algorithm. The second controller is in communication with the actuator and with the first controller. The second controller is configured to, in response to a first predicted vehicle path based on the actuator control signal deviating from a current lane, control the actuator to maintain a current actuator setting. The second controller is also configured to, in response to the first predicted vehicle path being within the current lane, control the actuator according to the actuator control signal.
Abstract:
An automotive vehicle a vehicle steering system, an actuator configured to control the steering system, a first controller, and a second controller. The first controller is in communication with the actuator, and the second controller is in communication with the actuator and with the first controller. The first controller is configured to communicate an actuator control signal based on a primary automated driving system control algorithm. The actuator control signal includes a commanded actuator setting. The second controller is configured to, in response to a first condition being satisfied, control the actuator according to the actuator control signal. The second controller is also configured to, in response to a second condition being satisfied, control the actuator according to a modified actuator control signal. The modified actuator control signal corresponds to an intermediate actuator setting between the commanded actuator setting and a current actuator setting.