公开(公告)号：US11634149B2

公开(公告)日：2023-04-25

申请号：US17532283

申请日：2021-11-22

Applicant: NVIDIA Corporation

Inventor： Mohammed Abdulla Yousuf ,  T. Y. Chan ,  Ram Ganapathi ,  Ashok Srinivasan ,  Mike Truog

IPC: B60W50/04 ,  G06F11/20 ,  B60W10/04 ,  B60W10/18 ,  G05D1/00 ,  G06F11/18 ,  G06F11/16 ,  G06F11/14 ,  B60W10/20 ,  B60W50/00

Abstract: In a self-driving autonomous vehicle, a controller architecture includes multiple processors within the same box. Each processor monitors the others and takes appropriate safe action when needed. Some processors may run dormant or low priority redundant functions that become active when another processor is detected to have failed. The processors are independently powered and independently execute redundant algorithms from sensor data processing to actuation commands using different hardware capabilities (GPUs, processing cores, different input signals, etc.). Intentional hardware and software diversity improves fault tolerance. The resulting fault-tolerant/fail-operational system meets ISO26262 ASIL-D specifications based on a single electronic controller unit platform that can be used for self-driving vehicles.

公开(公告)号：US11214273B2

公开(公告)日：2022-01-04

申请号：US15881426

申请日：2018-01-26

Applicant: NVIDIA Corporation

Inventor： Mohammed Abdulla Yousuf ,  T. Y. Chan ,  Ram Ganapathi ,  Ashok Srinivasan ,  Mike Truog

IPC: B60W50/04 ,  G06F11/20 ,  B60W10/04 ,  B60W10/18 ,  G05D1/00 ,  B60W10/20 ,  G06F11/18 ,  G06F11/16 ,  G06F11/14 ,  B60W50/00

Abstract: In a self-driving autonomous vehicle, a controller architecture includes multiple processors within the same box. Each processor monitors the others and takes appropriate safe action when needed. Some processors may run dormant or low priority redundant functions that become active when another processor is detected to have failed. The processors are independently powered and independently execute redundant algorithms from sensor data processing to actuation commands using different hardware capabilities (GPUs, processing cores, different input signals, etc.). Intentional hardware and software diversity improves fault tolerance. The resulting fault-tolerant/fail-operational system meets ISO26262 ASIL D specifications based on a single electronic controller unit platform that can be used for self-driving vehicles.