CN109917779A - Redundancy control system towards L3 automatic Pilot - Google Patents
Redundancy control system towards L3 automatic Pilot Download PDFInfo
- Publication number
- CN109917779A CN109917779A CN201910231143.6A CN201910231143A CN109917779A CN 109917779 A CN109917779 A CN 109917779A CN 201910231143 A CN201910231143 A CN 201910231143A CN 109917779 A CN109917779 A CN 109917779A
- Authority
- CN
- China
- Prior art keywords
- backup
- communication network
- instruction
- control system
- actuator
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000004891 communication Methods 0.000 claims abstract description 139
- 230000007257 malfunction Effects 0.000 claims description 33
- 230000004044 response Effects 0.000 claims description 24
- 230000015556 catabolic process Effects 0.000 claims description 6
- 238000006731 degradation reaction Methods 0.000 claims description 6
- 230000005540 biological transmission Effects 0.000 claims description 3
- 230000006870 function Effects 0.000 description 15
- 238000001514 detection method Methods 0.000 description 5
- 238000000034 method Methods 0.000 description 5
- 239000000203 mixture Substances 0.000 description 5
- 230000007423 decrease Effects 0.000 description 4
- 230000004927 fusion Effects 0.000 description 4
- 101150005287 EPS1 gene Proteins 0.000 description 3
- 238000005516 engineering process Methods 0.000 description 3
- 230000008447 perception Effects 0.000 description 3
- 238000011160 research Methods 0.000 description 3
- IJGRMHOSHXDMSA-UHFFFAOYSA-N Atomic nitrogen Chemical compound N#N IJGRMHOSHXDMSA-UHFFFAOYSA-N 0.000 description 2
- 230000001133 acceleration Effects 0.000 description 2
- 230000003044 adaptive effect Effects 0.000 description 2
- 230000008901 benefit Effects 0.000 description 2
- 238000012512 characterization method Methods 0.000 description 2
- 125000004122 cyclic group Chemical group 0.000 description 2
- 238000010586 diagram Methods 0.000 description 2
- 230000007246 mechanism Effects 0.000 description 2
- 238000012544 monitoring process Methods 0.000 description 2
- 230000008569 process Effects 0.000 description 2
- 238000012360 testing method Methods 0.000 description 2
- 230000007704 transition Effects 0.000 description 2
- 238000012795 verification Methods 0.000 description 2
- 230000004888 barrier function Effects 0.000 description 1
- 230000033228 biological regulation Effects 0.000 description 1
- 230000003116 impacting effect Effects 0.000 description 1
- 230000003993 interaction Effects 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 229910052757 nitrogen Inorganic materials 0.000 description 1
- 238000005457 optimization Methods 0.000 description 1
- 230000006641 stabilisation Effects 0.000 description 1
- 238000011105 stabilization Methods 0.000 description 1
Landscapes
- Control Of Driving Devices And Active Controlling Of Vehicle (AREA)
Abstract
The present invention provides a kind of redundancy control systems towards L3 automatic Pilot, include: master controller, backup controller, turn to redundancy control system, braking redundancy control system, main communication network and backup communication network, the master controller, the backup controller, the main communication network and the backup communication network constitute top level control system.The present invention sends control instruction using master controller and backup controller, the network of transmitting instruction uses main communication network and backup communication network, and the steering redundancy control system executed instruction and braking redundancy control system also use two and have the actuator independently executed, in this way, so that in the Single Point of Faliure for most serious occur, also the transmitting and execution that can guarantee instruction, to guarantee traffic safety.
Description
Technical field
The present invention relates to automatic Pilot technical fields, and in particular to a kind of redundancy control system towards L3 automatic Pilot.
Background technique
Benefit from diversified sensor technology, high-performance calculation platform technology, high-safety redundant chassis control technology
Rapid advances, automatic Pilot research are developed rapidly, vehicle factor, components supplying quotient, Internet enterprises and scientific research institution
All it is proposed automated driving system scheme and sample car.
In automatic Pilot, when a failure occurs, non-redundant system is easy to cause vehicle in the hole, jeopardizes driving
Therefore member and other people life effectively control the redundancy control system of automatic Pilot, are very important.
However, at present there is no discussion research is carried out for Redundant Control scheme necessary to L3 grades of automatic Pilots, it can
Control system single point failure is effectively detected, and guarantee enter failure can operational safety state technical solution.
Summary of the invention
In view of the above technical problems, the object of the present invention is to provide a kind of redundancy control system towards L3 automatic Pilot,
It can operating status cannot be introduced into failure when solving the problems, such as that single point failure occurs in current automated driving system.
The technical solution adopted by the present invention are as follows:
The embodiment of the invention provides a kind of redundancy control systems towards L3 automatic Pilot, comprising: master controller, backup
Controller turns to redundancy control system, braking redundancy control system, main communication network and backup communication network, the main control
Device, the backup controller, the main communication network and the backup communication network constitute top level control system;The main control
Device, for executing the control of the complete automatic Pilot of L1~L3 rank, by main communication network and backup communication network to described turn
Main crosswise joint instruction and main longitudinally controlled instruction are sent to redundancy control system and braking redundancy control system;The backup control
Device processed is used for the master controller information exchange when the master controller is in malfunction, executes L1~L3 rank portion
The control of point automatic Pilot, comprising: by main communication network and the backup communication network to the steering redundancy control system
The instruction of backup crosswise joint is sent with the braking redundancy control system and backs up longitudinally controlled instruction, is realized and is driven degradation and peace
Full cut-off vehicle;The steering redundancy control system, including the identical steering actuator of two structures, respectively with the main communication network
It is connected to the network with the backup communication, when two steering actuators are all in normal condition, is based on received main crosswise joint
Instruction or the instruction of backup crosswise joint, cooperate the steering operation for completing corresponding control instruction;The braking Redundant Control
System, including two different brake actuators of structure connect with the main communication network and the backup communication network respectively
It connects, when two brake actuators are all in normal condition, based on the longitudinally controlled instruction of received master or backs up longitudinally controlled
Instruction, cooperates the brake operating for completing corresponding control instruction.
Optionally, the master controller is performed the following operations when determining that the backup controller is in malfunction: being prohibited
Only enter automatic driving mode;If coming into automatic driving mode, prompts driver to take over and drive or be downgraded to substantially
L2 grades of auxiliary of type drive, and do not take over such as driver or do not confirm degraded functionality, then enter safe mode and stop.
Optionally, the backup controller is performed the following operations when determining that the master controller is in malfunction: being prohibited
Only enter automatic driving mode;If coming into automatic driving mode, prompts driver to take over and drive or be downgraded to substantially
L2 grades of auxiliary of type drive, and do not take over such as driver or do not confirm degraded functionality, then enter safe mode and stop.
Optionally, the backup controller is superfluous to the steering redundancy control system and the braking by main communication network
Remaining control system sends the instruction of backup crosswise joint and backs up longitudinally controlled instruction, realizes and drives degradation and secure parking, comprising:
It is superfluous to the steering redundancy control system and the braking when the master controller is in malfunction and driver does not take over
Remaining control system sends the instruction of backup crosswise joint and backs up the L3 rank automatic Pilot that preset time is completed in longitudinally controlled instruction,
And stop at safety zone;And
When the master controller is in malfunction and driver and takes over, to the steering redundancy control system and described
Braking redundancy control system sends the instruction of backup crosswise joint and backs up longitudinally controlled instruction, realizes that L1~L2 rank drives function
Energy.
Optionally, the steering actuator includes the first steering actuator and second turns to actuator, and described first turns to
Actuator is connect with the main communication network, and described second turns to actuator and backup communication network connection, wherein two
When a steering actuator is all in normal condition, based on received main crosswise joint instruction or the instruction of backup crosswise joint, phase
The steering operation that mutually corresponding control instruction is completed in cooperation specifically includes:
When the top level control system is in normal condition, in the main crosswise joint instruction of main communication network transmitting
When consistent with the main crosswise joint instruction of backup communication network transmitting, described first, which turns to actuator and described second, is turned to
Actuator cooperates the steering operation executed in response to the main crosswise joint instruction;
When the master controller is in malfunction, the main communication network transmitting backup crosswise joint instruction and
When the backup crosswise joint instruction of the backup communication network transmitting is consistent, described first, which turns to actuator and described second, is turned to
Actuator cooperates the steering operation for executing and instructing in response to the backup crosswise joint;And
When in the main communication network and the backup communication network, any one is in malfunction, described first turns to and holds
Row device and the second steering actuator execute response and refer to from received main crosswise joint from the communication network in normal condition
The steering operation of order.
Optionally, when any of two steering actuators are in malfunction, the actuator in normal condition
Based on received main crosswise joint instruction or the instruction of backup crosswise joint, the steering operation of corresponding control instruction is completed.
Optionally, the brake actuator includes the first brake actuator and the second brake actuator, first braking
Actuator is connect with the main communication network, and second brake actuator and the backup communication are connected to the network, wherein two
When a brake actuator is all in normal condition, based on the longitudinally controlled instruction of received master or longitudinally controlled instruction, phase are backed up
The brake operating that mutually corresponding control instruction is completed in cooperation specifically includes:
When the top level control system is in normal condition, in the longitudinally controlled instruction of master of main communication network transmitting
When consistent with the longitudinally controlled instruction of master of backup communication network transmitting, first brake actuator and second braking
Actuator cooperates the brake operating executed in response to the longitudinally controlled instruction of the master;
When the master controller is in malfunction, the main communication network transmitting backup it is longitudinally controlled instruction and
When the longitudinally controlled instruction of backup of the backup communication network transmitting is consistent, first brake actuator and second braking
Actuator cooperates the brake operating executed in response to the longitudinally controlled instruction of backup;And
When in the main communication network and the backup communication network, any one is in malfunction, first braking is held
Row device and second brake actuator execute response from the received longitudinally controlled finger of master from the communication network in normal condition
The brake operating of order.
Optionally, when any of two brake actuators are in malfunction, the actuator in normal condition
Based on the longitudinally controlled instruction of received master or longitudinally controlled instruction is backed up, completes the brake operating of corresponding control instruction.
It optionally, further include gateway, the gateway connects the backup controller and the backup communication network, and being used for will
The instruction that the backup controller is sent is sent to the backup communication network.
Redundancy control system provided in an embodiment of the present invention towards L3 automatic Pilot sends control instruction and uses master control
Device and backup controller processed, the network for transmitting instruction use main communication network and backup communication network, and execute instruction
It turns to redundancy control system and braking redundancy control system also uses two and has the actuator independently executed, in this way, making
In the Single Point of Faliure for most serious occur, the transmitting and execution of instruction also can guarantee, to guarantee traffic safety.
Detailed description of the invention
Fig. 1 is the structural schematic diagram of the redundancy control system provided in an embodiment of the present invention towards L3 automatic Pilot.
Specific embodiment
To keep the technical problem to be solved in the present invention, technical solution and advantage clearer, below in conjunction with attached drawing and tool
Body embodiment is described in detail.
Fig. 1 is the structural schematic diagram of the redundancy control system provided in an embodiment of the present invention towards L3 automatic Pilot.Such as Fig. 1
It is shown, the redundancy control system provided in an embodiment of the present invention towards L3 automatic Pilot, comprising: master controller 1, backup controller
2, redundancy control system 3, braking redundancy control system 4, main communication network 5 and backup communication network 6 are turned to, it is master controller 1, standby
Part controller 2, main communication network 5 and backup communication network 6 constitute top level control system.Wherein, the master controller 1, is used for
The control for executing the complete automatic Pilot of L1~L3 rank, by main communication network 5 and backup communication network 6 to the steering redundancy
Control system 3 and braking redundancy control system 4 send main crosswise joint instruction and main longitudinally controlled instruction;The backup controller
2, it with 1 information exchange of master controller, is used for when the master controller 1 is in malfunction, executes L1~L3 rank portion
The control of point automatic Pilot, comprising: by main communication network 5 and backup communication network 6 to 3 He of steering redundancy control system
The braking redundancy control system 4 sends the instruction of backup crosswise joint and backs up longitudinally controlled instruction, realizes and drives degradation and peace
Full cut-off vehicle;The steering redundancy control system 3, including the identical steering actuator of two structures, respectively with the principal communication net
Network 5 and the backup communication network 6 connection are based on received main transverse direction when two steering actuators are all in normal condition
Control instruction or the instruction of backup crosswise joint, cooperate the steering operation for completing corresponding control instruction;The braking redundancy
Control system 4, including two different brake actuators of structure, respectively with the main communication network 5 and the backup communication
Network 6 connects, vertical based on the longitudinally controlled instruction of received master or backup when two brake actuators are all in normal condition
To control instruction, the brake operating for completing corresponding control instruction is cooperated.
In embodiments of the present invention, the master controller 1 connects the related sensor that all intelligent drivings need, and passes through master
Communication network and backup communication are connected to the network the associated actuator that all intelligent drivings need, under the conditions of system worked well into
Row perception fusion, path planning, Decision Control send lateral control to turning to redundancy control system 3 and braking redundancy control system 4
System and longitudinally controlled instruction complete transverse and longitudinal comprehensively control, the complete Function for Automatic Pilot of L1~L3 can be supported, for example, L3 grades
Highway automatic Pilot (HWP) function, traffic congestion automatic Pilot (TJP) function, the highway auxiliary of other automatic Pilot
Drive (HWA), traffic congestion auxiliary drives (TJA), adaptive cruise (ACC) etc..The inside of master controller 1 is by performance core SoC
With control core MCU composition, have powerful and complete computing capability, it, can be by 2 eyeq4,1 as one embodiment
S32V234 and 2 TC297 composition.Sense and perceive level, master controller connect forward sight camera, forward sight millimetre-wave radar,
Anterior angle millimetre-wave radar, relief angle millimetre-wave radar, rearview camera, preceding laser radar, high-precision map and alignment sensor are looked around
With all automatic Pilot sensors such as ultrasonic system, and carry out most adequately sensing fusion, generation environment model, as one
Embodiment, detection coverage area can reach the coverage area of front 200m, rear 150m, side rear 100m, side 5m or more,
And each overlay area includes the sensor of at least two or more different testing principles, and has over the horizon priori perception energy
Power;In programmed decision-making level, master controller 1 can carry out complete path planning ability, as one embodiment, achievable list
(the autonomous lane-change and instruction lane-change etc.) path planning such as lane automatic Pilot, multilane automatic Pilot and obstacle avoidance ability;It is controlling
Level sends phase to two actuators for turning to redundancy control system 3 by main communication network and backup communication network simultaneously
Same corner and direct torque instruction are held by two of main communication network and backup communication network to braking redundancy control system
Row device sends identical acceleration-deceleration instruction simultaneously.As an example, main communication network can be CAN network, backup communication net
Network is also CAN network, and master controller 1 meets functional safety ASIL D grade.
In embodiments of the present invention, to related sensor before the backup controller 2 connects, connected by two communication networks
Actuator is connect, one is main communication network, and another is the network being made of gateway and backup communication network.Gateway is separately connected
Backup controller and backup communication network, for the execution of backup controller to be transmitted to backup communication network.In master controller 1
When failure, perception fusion, path planning, Decision Control are carried out, to steering redundancy control system 3 and braking redundancy control system 4
Crosswise joint and longitudinally controlled instruction are sent, transverse and longitudinal comprehensively control is completed, realizes secure parking function.Master controller 1 not
When failure, backup controller 2 is silent, and the course changing control that real-time monitoring master controller is issued to bus during silence is instructed, made
Dynamic control instruction and faults itself state, are prepared for adapter tube.When master controller 1 fails, it is responsible for the smooth of control instruction
Switching avoids control transition bring from impacting, avoids that comfort is caused to decline.Specifically, backup controller 2 can support L1
The part~L3 Function for Automatic Pilot, the highway auxiliary driving (HWA) including limited performance, the traffic congestion of limited performance are auxiliary
Help driving (TJA), adaptive cruise (ACC) of limited performance etc..It is internal comprising having the SoC and MCU of certain calculated performance,
It as one embodiment, is made of 1 eyeq3 and 1 TC234, is the mature scheme of L2 automatic Pilot forward sight, had higher
Cost performance and reliability.Level is being sensed and is perceiving, it is not connected to all the sensors to Standby control, and only connection drives strong correlation
Forward-looking sensors, as one embodiment, backup controller 2 connects forward sight camera and forward sight millimetre-wave radar, and carries out
Sensing fusion, generation environment model, as one embodiment, detecting coverage area can reach the covering model of front 150m or more
It encloses;In programmed decision-making level, backup controller 2 has the path planning and avoidance energy of the bicycle road automatic Pilot of limited performance
Power can send corner and direct torque instruction to redundancy control system 3 is turned to, send plus-minus to braking redundancy control system 4
Speed command.In embodiments of the present invention, there are two the main functions of backup controller 2: (1) being in the master controller 1
Malfunction and when driver does not take over, sends backup to the steering redundancy control system and the braking redundancy control system
Crosswise joint instructs and backs up longitudinally controlled instruction and completes the L3 rank automatic Pilot of preset time such as 8~10s, and stops at
Safety zone;(2) when the master controller 1 is in malfunction and driver takes over, to the steering redundancy control system
The instruction of backup crosswise joint is sent with the braking redundancy control system and backs up longitudinally controlled instruction, realizes the list for reducing performance
Lane automatic Pilot (L1~L2 rank) function.Wherein, safety zone situation difference different from according to locating for vehicle, if vehicle
Not in rightmost side runway, safety zone is straight way region recently in front of this lane;If vehicle in rightmost side runway and
There is Emergency Vehicle Lane on right side, and safety zone is right-hand lane;If vehicle is on the right side of rightmost side runway and its without Emergency Vehicle Lane, peace
Entire area is nearest straight way region in front of this lane.In control plane, backup controller 2 is to turning to the two of redundancy control system 3
A steering actuator sends corner and direct torque instruction, sends plus-minus to two brake actuators of braking redundancy control system
Speed command;Backup controller 2 connects main communication network (CAN network 1) and gateway, meets functional safety ASIL D grade.
Master controller 1 and backup controller 2 are monitored other side by privately owned CAN all the way, and monitoring signal includes other side
Malfunction, direct torque instruction, the instruction of corner control instruction, Acceleration Control, deceleration-based controller instruction of controller etc. are closed
Key control signal and status signal.If master controller 1 find backup controller failure, perform the following operations: do not allow into
Enter automatic driving mode;If coming into automatic driving mode, prompts driver to take over and drive or be downgraded to enhanced L2
Grade auxiliary drives, and does not take over such as driver or does not confirm degraded functionality, then enters safe mode and stop.If backup controller 2
It was found that 1 failure of master controller, then perform the following operations: not allowing access into automatic driving mode;If coming into automatic Pilot
Mode then prompts driver to take over and drives or be downgraded to L2 grades of auxiliary driving of basic model, function is not taken over or do not confirmed such as driver
It can degrade, then enter safe mode and stop.In addition, if backup controller 2 finds 1 failure of master controller, then control is carried out
Switching, backup controller is responsible for ensuring smoothly switching for control instruction at this time, avoid control transition bring impact, avoid
Comfort is caused to decline
In embodiments of the present invention, the actuator for independently executing turning function can be had by two by turning to redundancy control system
Composition can determine the object of response, including first by judging the fault-signal state of master controller 1 and backup controller 2
It turning to actuator and second and turns to actuator, the first steering actuator is connect with the main communication network, and described second turn
It is connected to the network to actuator and the backup communication, and private can be passed through between the first steering actuator and the second steering actuator
There is CAN to carry out information exchange.The two turn to the concrete operations of actuator are as follows: (1) in the main cross of main communication network transmitting
When consistent with the main crosswise joint instruction that the backup communication network transmits to control instruction, described first turns to actuator and institute
It states the second steering actuator and cooperates the steering operation executed in response to the main crosswise joint instruction, that is to say, that upper
When layer control system is in normal condition, first, which turns to actuator and second, turns to actuator for received main crosswise joint instruction
Mutually verified, when verifying consistent, characterization is consistent by the received instruction of main communication network and backup communication network,
At this moment, it turns to redundancy control system and is completed at the same time steering operation, in one example, Mei Gezhuan by two steering controllers
The steering operation that main crosswise joint instructs corresponding half respectively can be performed to actuator, i.e. output order corresponds to the one of steering force
Half.(2) when the master controller 1 is in malfunction, the main communication network 5 transmitting backup crosswise joint instruction and
When the backup crosswise joint instruction that the backup communication network 6 transmits is consistent, described first turns to actuator and second turn described
The steering operation for executing and instructing in response to the backup crosswise joint is cooperated to actuator, that is, be in event in master controller 1
When barrier state and top level control system other members are in normal condition, the first steering actuator and the second steering actuator can lead to
The backup crosswise joint for crossing response backup controller 2 instructs to execute steering operation.(3) in the main communication network 5 and described
Backup communication network 6 any one when being in malfunction, described first, which turns to actuator and described second, turns to actuator and executes
Respond the steering operation that received main crosswise joint instructs from the communication network in normal condition, enable in this way even if
One communication network breaks down, and can also receive instruction, completes steering operation.In addition, turning to appointing in actuator at two
One when being in malfunction, the actuator in normal condition is based on received main crosswise joint instruction or backup laterally control
System instruction, completes the steering operation of corresponding control instruction, that is, will be by another when a steering actuator breaks down wherein
A steering actuator executes steering operation, this, which normally turns to actuator, will compare from two received instructions of communication network
It is right, when comparing consistent, execute and steering operation identical when cooperating, i.e. complete independently steering operation.At of the invention one
In example, each steering actuator work independently when, can complete independently 50% steering force.As one embodiment, turn to superfluous
The composition of two actuators of remaining control system can be the EPS of two automorphis, for example, the first steering actuator can be
EPS1, second to turn to actuator can be EPS2, they have the classification to failure and degrade strategy, as one embodiment, they
When the Single Point of Faliure of most serious occurs, steering force can also support the 50% of maximum capacity to export, in addition to extreme urgent
Except turning avoidance operating condition, can meet the needs of L1-L3 automated driving system is to steering capability, meet the requirement of ECE-R79.
In addition, turning to redundancy control system in responding different Object Process, instruct the ride comfort of handoff procedure by upper
Layer control system guarantees that is, top level control system will not generate the step of course changing control instruction during switching, guarantees vehicle
Comfort.Also, the steering actuator (EPS1+ currently to work can be fed back to upper-level system by turning to redundancy control system
EPS2, EPS1, EPS2) and response upper-level system controller (master controller, backup controller).
In embodiments of the present invention, braking redundancy control system 4 is made of two isomery actuators, can be by judging master control
The fault-signal state of device 1 and backup controller 2 processed come determine response object, including the first brake actuator and second braking
Actuator, first brake actuator are connect with the main communication network, and second brake actuator and the backup are logical
Communication network connection, and between the first brake actuator and the second brake actuator information exchange can be carried out by privately owned CAN.This
The concrete operations of two brake actuators are as follows: (1) in the longitudinally controlled instruction of master of main communication network transmitting and the backup
When the longitudinally controlled instruction of the master of communication network transmitting is consistent, first brake actuator and second brake actuator are mutual
Cooperation executes the brake operating in response to the longitudinally controlled instruction of the master, that is to say, that is in normal shape in top level control system
When state, the first brake actuator and the second brake actuator are mutually verified the longitudinally controlled instruction of received master, are being verified
When consistent, characterization is consistent by the received instruction of main communication network and backup communication network, at this moment, brakes Redundant Control system
System is completed at the same time brake operating by two brake monitors, in one example, makes in the first brake actuator and second
When dynamic actuator is all in normal condition, the first brake actuator can be used as brake monitor, execute for controlling the second braking
Device executes brake operating.(2) vertical in the backup of the main communication network 5 transmitting when the master controller 1 is in malfunction
When consistent with the longitudinally controlled instruction of the backup that the backup communication network 6 transmits to control instruction, first brake actuator
The brake operating executed in response to the longitudinally controlled instruction of backup is cooperated with second brake actuator, that is, in master
Controller 1 is in malfunction and when other members of top level control system is in normal condition, the first brake actuator and second
Brake actuator can execute brake operating by the longitudinally controlled instruction that responds the backup of backup controller 2.(3) logical in the master
Communication network 5 and the backup communication network 6 any one when being in malfunction, first brake actuator and second system
Dynamic actuator executes brake operating of the response from the received longitudinally controlled instruction of master from the communication network in normal condition, in this way
It enables to break down even if a communication network, can also receive instruction, complete brake operating.In addition, being braked at two
When any of actuator is in malfunction, the actuator in normal condition be based on received master it is longitudinally controlled instruction or
Person backs up longitudinally controlled instruction, completes the brake operating of corresponding control instruction, that is, a brake actuator breaks down wherein
When, brake operating will be executed by another brake actuator, which can will receive from two communication networks
Instruction be compared, compare it is consistent when, execute and brake operating identical when cooperating, i.e. complete independently brake operating.Make
For one embodiment, the composition for braking two actuators of redundancy control system 4 can be ESC+eBooster, for example, the first system
Dynamic actuator is ESC, and the second brake actuator is eBooster.Braking redundancy control system 4 has the degradation of the classification to failure
Strategy, as one embodiment, when the second brake actuator eBooster failure, braking redundancy control system 4 is relied on
First brake actuator ESC can support to accelerate and slow down control, when supporting vehicle stabilization control, maximum deceleration and response
Between performance decline 30%, the basic drive assistance function of L2 and ramp to stop can be supported to safety zone;In the first brake actuator
When ESC fails, braking system can support deceleration control by the second brake actuator eBooster, can support to slow down and stop
Vehicle can support ramp to stop to safety zone, meet to safety zone, maximum deceleration and response time performance decline 30%
The regulations demand such as ECE-R13.In addition, braking redundancy control system instructs handoff procedure in responding different Object Process
Ride comfort is guaranteed that is, top level control system will not generate the rank of control for brake instruction during switching by top level control system
Jump guarantees vehicle comfort.Also, it brakes redundancy control system and feeds back the brake actuator (ESC+ currently to work
IBooster, ESC, iBooster) and response upper-level system controller (master controller, backup controller).
In embodiments of the present invention, the object that main communication network 5 connects mainly includes master controller, backup controller, net
It closes, turn to the controllers such as redundancy control system, braking redundancy control system, mainly cover automatic Pilot domain and chassis control domain,
Meanwhile related controller needed for all Function for Automatic Pilot such as main communication network connection drive system domain, comfort system domain.As
One embodiment, main communication network are selected at present using the extensive and higher CAN network of safety coefficient.System have counter,
The security mechanisms such as verification and cyclic redundancy check, bus node fault detection, bus-off detection, support entire control system
Reach ASIL D grade.Main control unit is undertaken in system worked well and turns to redundancy control unit, braking Redundant Control
Information communication work between unit, transmitting information are to support whole signals of the complete Function for Automatic Pilot of L1-L3, including institute
There are status signal related with drive safety, ride comfort, comfort, control instruction etc..
In embodiments of the present invention, backup communication network 6 connect object mainly include master controller, backup controller,
Gateway turns to the controllers such as redundancy control system, braking redundancy control system, only covers automatic Pilot domain and chassis control domain,
It is not connected to driving domain and comfortable domain, does not have acceleration control function.As one embodiment, the selection of backup communication network makes at present
With the higher CAN network of extensive and safety coefficient.System has counter, verification and cyclic redundancy check, bus node failure
The security mechanisms such as detection, bus-off detection, support entire control system to reach ASIL D grade.In main communication network failure item
Under part carry out controller between information interaction, transmitting information be support L3 rank automatic Pilot minimum signal set, part
The relevant signal of the comfort of non-safety-related is not retransmited for the angle of total inorganic nitrogen.It is logical in main control unit and master
When communication network works normally, backup communication network equally sends signal and instruction, carries out school for steering system and braking system
It tests.
To sum up, the redundancy control system provided in an embodiment of the present invention towards L3 automatic Pilot, due to sending the control of instruction
Device processed uses master controller and backup controller, and the network for transmitting instruction uses main communication network and backup communication network,
And the steering redundancy control system executed instruction and braking redundancy control system also use two and have holding of independently executing
Row device also can guarantee the transmitting and execution of instruction in this way, making in the Single Point of Faliure for most serious occur, to guarantee to drive a vehicle
Safety.Further, since the function of backup controller is less than the function of master controller, the object of backup communication network connection and transmission
Instruction be less than main communication network connection object and transmission instruction, can be in the premise for ensuring traffic safety, so that system
Optimization collocation reduces system cost.
Embodiment described above, only a specific embodiment of the invention, to illustrate technical solution of the present invention, rather than
It is limited, scope of protection of the present invention is not limited thereto, although having carried out with reference to the foregoing embodiments to the present invention detailed
Illustrate, those skilled in the art should understand that: anyone skilled in the art the invention discloses
In technical scope, it can still modify to technical solution documented by previous embodiment or variation can be readily occurred in, or
Person's equivalent replacement of some of the technical features;And these modifications, variation or replacement, do not make corresponding technical solution
Essence is detached from the spirit and scope of technical solution of the embodiment of the present invention, should be covered by the protection scope of the present invention.Therefore,
The protection scope of the present invention shall be subject to the protection scope of the claims.
Claims (9)
1. a kind of redundancy control system towards L3 automatic Pilot characterized by comprising master controller, turns backup controller
It is the master controller, described standby to redundancy control system, braking redundancy control system, main communication network and backup communication network
Part controller, the main communication network and the backup communication network constitute top level control system;
The master controller is logical by main communication network and backup for executing the control of the complete automatic Pilot of L1~L3 rank
Communication network sends main crosswise joint instruction to the steering redundancy control system and braking redundancy control system and master is longitudinally controlled
Instruction;
The backup controller is used for when the master controller is in malfunction, holds with the master controller information exchange
The control of row L1~L3 level part automatic Pilot, comprising: by main communication network and the backup communication network to described turn
The instruction of backup crosswise joint is sent to redundancy control system and the braking redundancy control system and backs up longitudinally controlled instruction, it is real
Now drive degradation and secure parking;
The steering redundancy control system, including the identical steering actuator of two structures, respectively with the main communication network and
The backup communication network connection, when two steering actuators are all in normal condition, is referred to based on received main crosswise joint
It enables or backup crosswise joint instructs, cooperate the steering operation for completing corresponding control instruction;
The braking redundancy control system, including two different brake actuators of structure, respectively with the main communication network
It is connected to the network with the backup communication, it is longitudinally controlled based on received master when two brake actuators are all in normal condition
Longitudinally controlled instruction is instructed or backed up, the brake operating for completing corresponding control instruction is cooperated.
2. the redundancy control system according to claim 1 towards L3 automatic Pilot, which is characterized in that the master controller
When determining that the backup controller is in malfunction, performs the following operations: being prohibited from entering automatic driving mode;If
Into automatic driving mode, then prompts driver to take over and drive or be downgraded to L2 grades of auxiliary driving of basic model, as driver does not connect
Pipe does not confirm degraded functionality, then enters safe mode and stop.
3. the redundancy control system according to claim 1 towards L3 automatic Pilot, which is characterized in that the Standby control
Device performs the following operations when determining that the master controller is in malfunction: being prohibited from entering automatic driving mode;If
Into automatic driving mode, then prompts driver to take over and drive or be downgraded to L2 grades of auxiliary driving of basic model, as driver does not connect
Pipe does not confirm degraded functionality, then enters safe mode and stop.
4. the redundancy control system according to claim 1 or 3 towards L3 automatic Pilot, which is characterized in that the backup
Controller sends backup laterally to the steering redundancy control system and the braking redundancy control system by main communication network
Control instruction and the longitudinally controlled instruction of backup, realize and drive degradation and secure parking, comprising:
When the master controller is in malfunction and driver does not take over, to the steering redundancy control system and the system
Dynamic redundancy control system transmission backup crosswise joint instruction and the L3 rank for backing up longitudinally controlled instruction completion preset time are automatic
It drives, and stops at safety zone;And
When the master controller is in malfunction and driver takes over, to the steering redundancy control system and the braking
Redundancy control system sends the instruction of backup crosswise joint and backs up longitudinally controlled instruction, realizes that L1~L2 rank drives function.
5. the redundancy control system according to claim 1 towards L3 automatic Pilot, which is characterized in that the steering executes
Device includes the first steering actuator and second turns to actuator, and the first steering actuator is connect with the main communication network,
Described second turns to actuator and backup communication network connection, wherein in two steering actuators all in normal condition
When, based on received main crosswise joint instruction or the instruction of backup crosswise joint, cooperates and complete turning for corresponding control instruction
It is specifically included to operation:
When the top level control system is in normal condition, in the main crosswise joint instruction of main communication network transmitting and institute
State backup communication network transmitting main crosswise joint instruction it is consistent when, it is described first turn to actuator and it is described second turn to execute
Device cooperates the steering operation executed in response to the main crosswise joint instruction;
When the master controller is in malfunction, the main communication network transmitting backup crosswise joint instruction and it is described
When the backup crosswise joint instruction of backup communication network transmitting is consistent, described first, which turns to actuator and described second, turns to execution
Device cooperates the steering operation for executing and instructing in response to the backup crosswise joint;And
When in the main communication network and the backup communication network, any one is in malfunction, described first turns to actuator
Actuator, which is turned to, with described second executes what response received main crosswise joint from the communication network in normal condition instructed
Steering operation.
6. the redundancy control system according to claim 1 or 5 towards L3 automatic Pilot, which is characterized in that turn at two
When being in malfunction to any of actuator, the actuator in normal condition is based on received main crosswise joint instruction
Or the instruction of backup crosswise joint, complete the steering operation of corresponding control instruction.
7. the redundancy control system according to claim 1 towards L3 automatic Pilot, which is characterized in that the braking executes
Device includes the first brake actuator and the second brake actuator, and first brake actuator is connect with the main communication network,
Second brake actuator and the backup communication are connected to the network, wherein in two brake actuators all in normal condition
When, based on the longitudinally controlled instruction of received master or longitudinally controlled instruction is backed up, cooperates the system for completing corresponding control instruction
Dynamic operation specifically includes:
The longitudinally controlled instruction of master and institute when the top level control system is in normal condition, in main communication network transmitting
State backup communication network transmitting master it is longitudinally controlled instruction it is consistent when, first brake actuator and it is described second braking execute
Device cooperates the brake operating executed in response to the longitudinally controlled instruction of the master;
When the master controller is in malfunction, the main communication network transmitting backup it is longitudinally controlled instruction and it is described
When the longitudinally controlled instruction of the backup of backup communication network transmitting is consistent, first brake actuator and second braking are executed
Device cooperates the brake operating executed in response to the longitudinally controlled instruction of backup;And
When in the main communication network and the backup communication network, any one is in malfunction, first brake actuator
Response is executed from the received longitudinally controlled instruction of master from the communication network in normal condition with second brake actuator
Brake operating.
8. the redundancy control system according to claim 1 or claim 7 towards L3 automatic Pilot, which is characterized in that made at two
When any of dynamic actuator is in malfunction, the actuator in normal condition is based on the longitudinally controlled instruction of received master
Or the longitudinally controlled instruction of backup, complete the brake operating of corresponding control instruction.
9. the redundancy control system according to claim 1 towards L3 automatic Pilot, which is characterized in that it further include gateway,
The gateway connects the backup controller and the backup communication network, the instruction hair for sending the backup controller
Give the backup communication network.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201910231143.6A CN109917779A (en) | 2019-03-26 | 2019-03-26 | Redundancy control system towards L3 automatic Pilot |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201910231143.6A CN109917779A (en) | 2019-03-26 | 2019-03-26 | Redundancy control system towards L3 automatic Pilot |
Publications (1)
Publication Number | Publication Date |
---|---|
CN109917779A true CN109917779A (en) | 2019-06-21 |
Family
ID=66966725
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201910231143.6A Pending CN109917779A (en) | 2019-03-26 | 2019-03-26 | Redundancy control system towards L3 automatic Pilot |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN109917779A (en) |
Cited By (57)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN110395236A (en) * | 2019-08-13 | 2019-11-01 | 苏州泛像汽车技术有限公司 | A kind of dual redundant brake-by-wire method |
CN110435569A (en) * | 2019-08-26 | 2019-11-12 | 爱驰汽车有限公司 | Automatic driving vehicle redundancy control system, method, equipment and storage medium |
CN110481462A (en) * | 2019-08-21 | 2019-11-22 | 北京汽车股份有限公司 | The active safety system and vehicle of vehicle |
CN110533947A (en) * | 2019-10-14 | 2019-12-03 | 北京百度网讯科技有限公司 | Control system, method, electronic equipment and the computer storage medium of the vehicles |
CN110682920A (en) * | 2019-12-09 | 2020-01-14 | 吉利汽车研究院(宁波)有限公司 | Automatic driving control system, control method and equipment |
CN110682876A (en) * | 2019-09-26 | 2020-01-14 | 泰牛汽车技术(苏州)有限公司 | Automatic driving method and system for vehicle, storage medium and automatic driving automobile |
CN110737192A (en) * | 2019-11-20 | 2020-01-31 | 东风商用车有限公司 | Automobile driving redundancy control system and method thereof |
CN111007713A (en) * | 2019-07-10 | 2020-04-14 | 沈阳中科一唯电子技术有限公司 | Heterogeneous redundant vehicle control unit conforming to functional safety |
CN111038480A (en) * | 2019-12-12 | 2020-04-21 | 苏州智加科技有限公司 | Automatic driving execution system and automatic driving control command execution method |
CN111371662A (en) * | 2020-05-28 | 2020-07-03 | 奥特酷智能科技(南京)有限公司 | Redundant automatic driving system and control method thereof |
CN112092824A (en) * | 2020-08-19 | 2020-12-18 | 浙江吉利汽车研究院有限公司 | Automatic driving control method, system, equipment and storage medium |
CN112109728A (en) * | 2020-08-19 | 2020-12-22 | 浙江吉利汽车研究院有限公司 | Automatic driving fault control method, system, equipment and storage medium |
CN112141107A (en) * | 2019-06-27 | 2020-12-29 | 现代摩比斯株式会社 | Apparatus for controlling an autonomous vehicle |
CN112158188A (en) * | 2020-09-30 | 2021-01-01 | 重庆长安汽车股份有限公司 | Intelligent driving vehicle service braking system and method and vehicle |
CN112298208A (en) * | 2020-10-21 | 2021-02-02 | 长城汽车股份有限公司 | Automatic driving transverse auxiliary control method and transverse auxiliary system |
CN112373477A (en) * | 2020-11-23 | 2021-02-19 | 重庆长安汽车股份有限公司 | Redundancy control method for automatic driving system, automobile, controller, and computer-readable storage medium |
CN112391908A (en) * | 2020-12-04 | 2021-02-23 | 天津大学 | Unmanned rolling machine control system |
CN112540592A (en) * | 2019-12-12 | 2021-03-23 | 百度(美国)有限责任公司 | Autonomous driving vehicle with dual autonomous driving system for ensuring safety |
CN112622901A (en) * | 2021-01-11 | 2021-04-09 | 一汽解放汽车有限公司 | Vehicle control method, device and equipment |
CN112622935A (en) * | 2020-12-30 | 2021-04-09 | 一汽解放汽车有限公司 | Automatic vehicle driving method and device, vehicle and storage medium |
CN112622930A (en) * | 2020-12-22 | 2021-04-09 | 北京百度网讯科技有限公司 | Unmanned vehicle driving control method, device and equipment and automatic driving vehicle |
CN112638739A (en) * | 2020-05-20 | 2021-04-09 | 华为技术有限公司 | Redundant electronic control system and equipment |
CN112660158A (en) * | 2020-12-28 | 2021-04-16 | 嬴彻科技(浙江)有限公司 | Driving assistance control system |
CN112748715A (en) * | 2019-10-31 | 2021-05-04 | Tttech汽车股份公司 | Safety monitor for advanced driver assistance system |
CN112782964A (en) * | 2020-12-25 | 2021-05-11 | 际络科技(上海)有限公司 | Automatic driving steering system, method, device, electronic equipment and storage medium |
CN112896128A (en) * | 2021-02-08 | 2021-06-04 | 一汽解放汽车有限公司 | Braking system |
CN112977479A (en) * | 2021-04-15 | 2021-06-18 | 苏州挚途科技有限公司 | Vehicle driving mode control method and system |
CN113022588A (en) * | 2021-03-10 | 2021-06-25 | 北京百度网讯科技有限公司 | Control system, control method, device, and storage medium for autonomous vehicle |
WO2021128974A1 (en) * | 2019-12-23 | 2021-07-01 | 浙江吉利控股集团有限公司 | Self-driving control system, control method and device |
CN113247022A (en) * | 2021-06-23 | 2021-08-13 | 智己汽车科技有限公司 | Automatic driving redundancy control system and method |
CN113267992A (en) * | 2021-07-19 | 2021-08-17 | 北京踏歌智行科技有限公司 | Mine card unmanned control system based on redundancy design |
CN113341940A (en) * | 2021-06-21 | 2021-09-03 | 安徽江淮汽车集团股份有限公司 | Parallel automatic driving system |
CN113602281A (en) * | 2021-07-30 | 2021-11-05 | 爱思盟汽车科技(重庆)有限公司 | Redundant backup system for unmanned vehicle |
CN113734201A (en) * | 2021-09-22 | 2021-12-03 | 中国第一汽车股份有限公司 | Vehicle redundancy control method, device, electronic equipment and medium |
CN113848950A (en) * | 2021-10-21 | 2021-12-28 | 广州文远知行科技有限公司 | Controller control method and device, vehicle and storage medium |
CN113968237A (en) * | 2021-11-04 | 2022-01-25 | 东风汽车集团股份有限公司 | Steering system of unmanned vehicle, operation method and storage device |
CN113994273A (en) * | 2019-06-25 | 2022-01-28 | 克诺尔商用车制动系统有限公司 | Apparatus and method for providing redundant communication within a vehicle architecture and corresponding control architecture |
CN114013390A (en) * | 2021-11-15 | 2022-02-08 | 奇瑞汽车股份有限公司 | Network architecture of automobile and automobile |
CN114104002A (en) * | 2021-12-21 | 2022-03-01 | 华人运通(江苏)技术有限公司 | Automatic driving system monitoring method, device, equipment and storage medium |
CN114137821A (en) * | 2021-10-29 | 2022-03-04 | 际络科技(上海)有限公司 | Automatic driving mode control system and method |
CN114167713A (en) * | 2021-10-29 | 2022-03-11 | 际络科技(上海)有限公司 | Driving mode switching system and method |
CN114185259A (en) * | 2021-10-29 | 2022-03-15 | 际络科技(上海)有限公司 | Automatic driving mode synchronous control structure and method |
CN114237104A (en) * | 2021-12-02 | 2022-03-25 | 东软睿驰汽车技术(沈阳)有限公司 | Automatic driving area controller and vehicle |
CN114326476A (en) * | 2021-11-30 | 2022-04-12 | 际络科技(上海)有限公司 | Automatic driving controller degradation control method and system |
CN114348020A (en) * | 2021-12-22 | 2022-04-15 | 东风悦享科技有限公司 | 5G remote and automatic driving safety redundancy system and control method |
CN114348027A (en) * | 2022-02-07 | 2022-04-15 | 中国第一汽车股份有限公司 | Vehicle control method, device, platform and storage medium |
CN114715171A (en) * | 2022-03-31 | 2022-07-08 | 重庆长安汽车股份有限公司 | Self-adaptive whole vehicle electronic and electric appliance framework capable of automatically driving at L4 level and above and vehicle |
CN114750771A (en) * | 2020-12-28 | 2022-07-15 | 本田技研工业株式会社 | Vehicle control system and vehicle control method |
CN114771433A (en) * | 2022-04-26 | 2022-07-22 | 上海伯镭智能科技有限公司 | Drive-by-wire system of unmanned mine car |
CN115042801A (en) * | 2022-06-28 | 2022-09-13 | 岚图汽车科技有限公司 | Intelligent cruise auxiliary redundancy control method and system |
CN115352522A (en) * | 2022-09-30 | 2022-11-18 | 华人运通(山东)科技有限公司 | Wire-controlled steering system, failure operation method and vehicle |
CN115402287A (en) * | 2022-08-31 | 2022-11-29 | 嬴彻星创智能科技(上海)有限公司 | Vehicle redundant braking system and control method |
WO2023040936A1 (en) * | 2021-09-16 | 2023-03-23 | 北京车和家信息技术有限公司 | Intelligent vehicle communication system |
WO2023077967A1 (en) * | 2021-11-04 | 2023-05-11 | 武汉路特斯汽车有限公司 | Autonomous driving control system and vehicle |
WO2023093536A1 (en) * | 2021-11-26 | 2023-06-01 | 宇通客车股份有限公司 | Autonomous driving control system and vehicle |
US11738799B2 (en) | 2020-10-12 | 2023-08-29 | Ford Global Technologies, Llc | Steering system with multiple controllers |
CN117565885A (en) * | 2024-01-17 | 2024-02-20 | 中国第一汽车股份有限公司 | Automatic driving transverse control system and vehicle |
Citations (8)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN105691209A (en) * | 2016-04-08 | 2016-06-22 | 同济大学 | Electrical system for controller with distribution type architecture and power supply redundancy electric intelligent vehicle |
CN205706189U (en) * | 2016-04-08 | 2016-11-23 | 同济大学 | The controller of distributed structure/architecture and power supply redundancy electronic intelligent automobile electrical system |
US20170028992A1 (en) * | 2015-07-30 | 2017-02-02 | Robert Bosch Gmbh | Actuator system for self-driving vehicles |
US20170139411A1 (en) * | 2015-11-16 | 2017-05-18 | Polysync Technologies, Inc. | Autonomous Vehicle Platform and Safety Architecture |
US20180099694A1 (en) * | 2016-10-06 | 2018-04-12 | Continental Automotive Systems, Inc. | Redundant steering controls for automated driving |
CN108082276A (en) * | 2018-01-22 | 2018-05-29 | 天津英创汇智汽车技术有限公司 | Forward method, apparatus and system based on bi-motor |
CN109017766A (en) * | 2018-08-03 | 2018-12-18 | 湖北汽车工业学院 | A kind of parallel space for automatic driving vehicle is automatically parked control system |
CN109032132A (en) * | 2018-07-06 | 2018-12-18 | 联合汽车电子有限公司 | Vehicle driving system and method |
-
2019
- 2019-03-26 CN CN201910231143.6A patent/CN109917779A/en active Pending
Patent Citations (8)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20170028992A1 (en) * | 2015-07-30 | 2017-02-02 | Robert Bosch Gmbh | Actuator system for self-driving vehicles |
US20170139411A1 (en) * | 2015-11-16 | 2017-05-18 | Polysync Technologies, Inc. | Autonomous Vehicle Platform and Safety Architecture |
CN105691209A (en) * | 2016-04-08 | 2016-06-22 | 同济大学 | Electrical system for controller with distribution type architecture and power supply redundancy electric intelligent vehicle |
CN205706189U (en) * | 2016-04-08 | 2016-11-23 | 同济大学 | The controller of distributed structure/architecture and power supply redundancy electronic intelligent automobile electrical system |
US20180099694A1 (en) * | 2016-10-06 | 2018-04-12 | Continental Automotive Systems, Inc. | Redundant steering controls for automated driving |
CN108082276A (en) * | 2018-01-22 | 2018-05-29 | 天津英创汇智汽车技术有限公司 | Forward method, apparatus and system based on bi-motor |
CN109032132A (en) * | 2018-07-06 | 2018-12-18 | 联合汽车电子有限公司 | Vehicle driving system and method |
CN109017766A (en) * | 2018-08-03 | 2018-12-18 | 湖北汽车工业学院 | A kind of parallel space for automatic driving vehicle is automatically parked control system |
Non-Patent Citations (2)
Title |
---|
徐平等: "自动驾驶中的电动助力转向系统", 《汽车电器》 * |
韩延光等: "全自动驾驶车辆网络系统的应用分析", 《铁道车辆》 * |
Cited By (87)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN113994273A (en) * | 2019-06-25 | 2022-01-28 | 克诺尔商用车制动系统有限公司 | Apparatus and method for providing redundant communication within a vehicle architecture and corresponding control architecture |
CN113994273B (en) * | 2019-06-25 | 2024-05-24 | 克诺尔商用车制动系统有限公司 | Apparatus and method for providing redundant communications within a vehicle architecture and corresponding control architecture |
CN112141107B (en) * | 2019-06-27 | 2024-07-05 | 现代摩比斯株式会社 | Apparatus for controlling an autonomous vehicle |
CN112141107A (en) * | 2019-06-27 | 2020-12-29 | 现代摩比斯株式会社 | Apparatus for controlling an autonomous vehicle |
CN111007713A (en) * | 2019-07-10 | 2020-04-14 | 沈阳中科一唯电子技术有限公司 | Heterogeneous redundant vehicle control unit conforming to functional safety |
CN110395236A (en) * | 2019-08-13 | 2019-11-01 | 苏州泛像汽车技术有限公司 | A kind of dual redundant brake-by-wire method |
CN110481462A (en) * | 2019-08-21 | 2019-11-22 | 北京汽车股份有限公司 | The active safety system and vehicle of vehicle |
CN110435569A (en) * | 2019-08-26 | 2019-11-12 | 爱驰汽车有限公司 | Automatic driving vehicle redundancy control system, method, equipment and storage medium |
CN110682876A (en) * | 2019-09-26 | 2020-01-14 | 泰牛汽车技术(苏州)有限公司 | Automatic driving method and system for vehicle, storage medium and automatic driving automobile |
CN110533947A (en) * | 2019-10-14 | 2019-12-03 | 北京百度网讯科技有限公司 | Control system, method, electronic equipment and the computer storage medium of the vehicles |
CN112748715A (en) * | 2019-10-31 | 2021-05-04 | Tttech汽车股份公司 | Safety monitor for advanced driver assistance system |
CN110737192A (en) * | 2019-11-20 | 2020-01-31 | 东风商用车有限公司 | Automobile driving redundancy control system and method thereof |
CN110682920A (en) * | 2019-12-09 | 2020-01-14 | 吉利汽车研究院(宁波)有限公司 | Automatic driving control system, control method and equipment |
CN110682920B (en) * | 2019-12-09 | 2020-04-21 | 吉利汽车研究院(宁波)有限公司 | Automatic driving control system, control method and equipment |
KR20220125227A (en) * | 2019-12-09 | 2022-09-14 | 쩌지앙 길리 홀딩 그룹 씨오., 엘티디. | Autonomous driving control system, control method and equipment |
US12172658B2 (en) | 2019-12-09 | 2024-12-24 | Zhejiang Geely Holding Group Co., Ltd | Autonomous driving control system and control method and device |
KR102768236B1 (en) * | 2019-12-09 | 2025-02-18 | 쩌지앙 길리 홀딩 그룹 씨오., 엘티디. | Autonomous driving control system, control method and equipment |
WO2021114794A1 (en) * | 2019-12-09 | 2021-06-17 | 浙江吉利控股集团有限公司 | Automatic driving control system, control method and device |
CN111038480B (en) * | 2019-12-12 | 2021-05-18 | 苏州智加科技有限公司 | Automatic driving execution system and automatic driving control command execution method |
CN112540592A (en) * | 2019-12-12 | 2021-03-23 | 百度(美国)有限责任公司 | Autonomous driving vehicle with dual autonomous driving system for ensuring safety |
US11345359B2 (en) * | 2019-12-12 | 2022-05-31 | Baidu Usa Llc | Autonomous driving vehicles with dual autonomous driving systems for safety |
CN111038480A (en) * | 2019-12-12 | 2020-04-21 | 苏州智加科技有限公司 | Automatic driving execution system and automatic driving control command execution method |
CN112540592B (en) * | 2019-12-12 | 2024-07-19 | 百度(美国)有限责任公司 | Autonomous driving vehicle with dual autonomous driving system for ensuring safety |
US12145607B2 (en) | 2019-12-23 | 2024-11-19 | Zhejiang Geely Holding Group Co., Ltd | Autonomous driving control system and control method and device |
WO2021128974A1 (en) * | 2019-12-23 | 2021-07-01 | 浙江吉利控股集团有限公司 | Self-driving control system, control method and device |
CN112638739B (en) * | 2020-05-20 | 2021-10-22 | 华为技术有限公司 | A redundant electronic control system and equipment |
WO2021232316A1 (en) * | 2020-05-20 | 2021-11-25 | 华为技术有限公司 | Redundant electronic control system and device |
CN112638739A (en) * | 2020-05-20 | 2021-04-09 | 华为技术有限公司 | Redundant electronic control system and equipment |
US12195017B2 (en) | 2020-05-20 | 2025-01-14 | Huawei Technologies Co., Ltd. | Redundant electronic control system and device |
CN111371662A (en) * | 2020-05-28 | 2020-07-03 | 奥特酷智能科技(南京)有限公司 | Redundant automatic driving system and control method thereof |
CN111371662B (en) * | 2020-05-28 | 2021-04-23 | 奥特酷智能科技(南京)有限公司 | Redundant automatic driving system and control method thereof |
CN112092824A (en) * | 2020-08-19 | 2020-12-18 | 浙江吉利汽车研究院有限公司 | Automatic driving control method, system, equipment and storage medium |
CN112109728A (en) * | 2020-08-19 | 2020-12-22 | 浙江吉利汽车研究院有限公司 | Automatic driving fault control method, system, equipment and storage medium |
CN112158188B (en) * | 2020-09-30 | 2022-12-09 | 重庆长安汽车股份有限公司 | Intelligent driving vehicle service braking system and method and vehicle |
CN112158188A (en) * | 2020-09-30 | 2021-01-01 | 重庆长安汽车股份有限公司 | Intelligent driving vehicle service braking system and method and vehicle |
US11738799B2 (en) | 2020-10-12 | 2023-08-29 | Ford Global Technologies, Llc | Steering system with multiple controllers |
CN112298208A (en) * | 2020-10-21 | 2021-02-02 | 长城汽车股份有限公司 | Automatic driving transverse auxiliary control method and transverse auxiliary system |
CN112373477A (en) * | 2020-11-23 | 2021-02-19 | 重庆长安汽车股份有限公司 | Redundancy control method for automatic driving system, automobile, controller, and computer-readable storage medium |
WO2022104925A1 (en) * | 2020-11-23 | 2022-05-27 | 重庆长安汽车股份有限公司 | Redundancy control method for automatic driving system, automatic driving system, automobile, controller, and computer readable storage medium |
CN112391908A (en) * | 2020-12-04 | 2021-02-23 | 天津大学 | Unmanned rolling machine control system |
CN112622930A (en) * | 2020-12-22 | 2021-04-09 | 北京百度网讯科技有限公司 | Unmanned vehicle driving control method, device and equipment and automatic driving vehicle |
CN112782964A (en) * | 2020-12-25 | 2021-05-11 | 际络科技(上海)有限公司 | Automatic driving steering system, method, device, electronic equipment and storage medium |
CN112660158A (en) * | 2020-12-28 | 2021-04-16 | 嬴彻科技(浙江)有限公司 | Driving assistance control system |
CN114750771A (en) * | 2020-12-28 | 2022-07-15 | 本田技研工业株式会社 | Vehicle control system and vehicle control method |
CN112622935A (en) * | 2020-12-30 | 2021-04-09 | 一汽解放汽车有限公司 | Automatic vehicle driving method and device, vehicle and storage medium |
CN112622901A (en) * | 2021-01-11 | 2021-04-09 | 一汽解放汽车有限公司 | Vehicle control method, device and equipment |
CN112896128A (en) * | 2021-02-08 | 2021-06-04 | 一汽解放汽车有限公司 | Braking system |
CN113022588A (en) * | 2021-03-10 | 2021-06-25 | 北京百度网讯科技有限公司 | Control system, control method, device, and storage medium for autonomous vehicle |
CN112977479B (en) * | 2021-04-15 | 2022-04-29 | 苏州挚途科技有限公司 | Vehicle driving mode control method and system |
CN112977479A (en) * | 2021-04-15 | 2021-06-18 | 苏州挚途科技有限公司 | Vehicle driving mode control method and system |
CN113341940A (en) * | 2021-06-21 | 2021-09-03 | 安徽江淮汽车集团股份有限公司 | Parallel automatic driving system |
CN113247022A (en) * | 2021-06-23 | 2021-08-13 | 智己汽车科技有限公司 | Automatic driving redundancy control system and method |
CN113267992A (en) * | 2021-07-19 | 2021-08-17 | 北京踏歌智行科技有限公司 | Mine card unmanned control system based on redundancy design |
CN113267992B (en) * | 2021-07-19 | 2021-09-28 | 北京踏歌智行科技有限公司 | Mine card unmanned control system based on redundancy design |
CN113602281B (en) * | 2021-07-30 | 2024-11-05 | 爱思盟汽车科技(重庆)有限公司 | A redundant backup system for unmanned vehicles |
CN113602281A (en) * | 2021-07-30 | 2021-11-05 | 爱思盟汽车科技(重庆)有限公司 | Redundant backup system for unmanned vehicle |
WO2023040936A1 (en) * | 2021-09-16 | 2023-03-23 | 北京车和家信息技术有限公司 | Intelligent vehicle communication system |
CN113734201A (en) * | 2021-09-22 | 2021-12-03 | 中国第一汽车股份有限公司 | Vehicle redundancy control method, device, electronic equipment and medium |
CN113848950A (en) * | 2021-10-21 | 2021-12-28 | 广州文远知行科技有限公司 | Controller control method and device, vehicle and storage medium |
CN114137821B (en) * | 2021-10-29 | 2024-04-19 | 际络科技(上海)有限公司 | Automatic driving mode control system and method |
CN114185259B (en) * | 2021-10-29 | 2024-04-19 | 际络科技(上海)有限公司 | Automatic driving mode synchronous control structure and method |
CN114167713B (en) * | 2021-10-29 | 2024-04-19 | 际络科技(上海)有限公司 | Driving mode switching system and method |
CN114137821A (en) * | 2021-10-29 | 2022-03-04 | 际络科技(上海)有限公司 | Automatic driving mode control system and method |
CN114167713A (en) * | 2021-10-29 | 2022-03-11 | 际络科技(上海)有限公司 | Driving mode switching system and method |
CN114185259A (en) * | 2021-10-29 | 2022-03-15 | 际络科技(上海)有限公司 | Automatic driving mode synchronous control structure and method |
CN113968237A (en) * | 2021-11-04 | 2022-01-25 | 东风汽车集团股份有限公司 | Steering system of unmanned vehicle, operation method and storage device |
WO2023077967A1 (en) * | 2021-11-04 | 2023-05-11 | 武汉路特斯汽车有限公司 | Autonomous driving control system and vehicle |
CN113968237B (en) * | 2021-11-04 | 2024-01-16 | 东风汽车集团股份有限公司 | Unmanned vehicle steering system, operation method and storage device |
CN114013390A (en) * | 2021-11-15 | 2022-02-08 | 奇瑞汽车股份有限公司 | Network architecture of automobile and automobile |
CN114013390B (en) * | 2021-11-15 | 2023-11-24 | 奇瑞汽车股份有限公司 | Network architecture of automobile and automobile |
WO2023093536A1 (en) * | 2021-11-26 | 2023-06-01 | 宇通客车股份有限公司 | Autonomous driving control system and vehicle |
CN114326476A (en) * | 2021-11-30 | 2022-04-12 | 际络科技(上海)有限公司 | Automatic driving controller degradation control method and system |
CN114326476B (en) * | 2021-11-30 | 2024-11-01 | 际络科技(上海)有限公司 | Automatic driving controller degradation control method and system |
CN114237104A (en) * | 2021-12-02 | 2022-03-25 | 东软睿驰汽车技术(沈阳)有限公司 | Automatic driving area controller and vehicle |
CN114104002B (en) * | 2021-12-21 | 2023-11-21 | 华人运通(江苏)技术有限公司 | Automatic driving system monitoring method, device, equipment and storage medium |
CN114104002A (en) * | 2021-12-21 | 2022-03-01 | 华人运通(江苏)技术有限公司 | Automatic driving system monitoring method, device, equipment and storage medium |
CN114348020B (en) * | 2021-12-22 | 2023-09-19 | 东风悦享科技有限公司 | 5G remote and automatic driving safety redundancy system and control method |
CN114348020A (en) * | 2021-12-22 | 2022-04-15 | 东风悦享科技有限公司 | 5G remote and automatic driving safety redundancy system and control method |
CN114348027B (en) * | 2022-02-07 | 2023-11-28 | 中国第一汽车股份有限公司 | Vehicle control method, device, platform and storage medium |
CN114348027A (en) * | 2022-02-07 | 2022-04-15 | 中国第一汽车股份有限公司 | Vehicle control method, device, platform and storage medium |
CN114715171A (en) * | 2022-03-31 | 2022-07-08 | 重庆长安汽车股份有限公司 | Self-adaptive whole vehicle electronic and electric appliance framework capable of automatically driving at L4 level and above and vehicle |
CN114771433B (en) * | 2022-04-26 | 2024-01-19 | 上海伯镭智能科技有限公司 | Drive-by-wire system of unmanned mine car |
CN114771433A (en) * | 2022-04-26 | 2022-07-22 | 上海伯镭智能科技有限公司 | Drive-by-wire system of unmanned mine car |
CN115042801A (en) * | 2022-06-28 | 2022-09-13 | 岚图汽车科技有限公司 | Intelligent cruise auxiliary redundancy control method and system |
CN115402287A (en) * | 2022-08-31 | 2022-11-29 | 嬴彻星创智能科技(上海)有限公司 | Vehicle redundant braking system and control method |
CN115352522A (en) * | 2022-09-30 | 2022-11-18 | 华人运通(山东)科技有限公司 | Wire-controlled steering system, failure operation method and vehicle |
CN117565885A (en) * | 2024-01-17 | 2024-02-20 | 中国第一汽车股份有限公司 | Automatic driving transverse control system and vehicle |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN109917779A (en) | Redundancy control system towards L3 automatic Pilot | |
CN110682876B (en) | Automatic driving method and system for vehicle, storage medium and automatic driving automobile | |
US11169521B2 (en) | Safety control system and method for autonomous vehicle | |
US20220363276A1 (en) | Asymmetric failsafe system architecture | |
CN114348020A (en) | 5G remote and automatic driving safety redundancy system and control method | |
JP7633772B2 (en) | Automatic vehicle control method and vehicle control system | |
JP6899769B2 (en) | How and equipment to operate the vehicle | |
CN110254512A (en) | Design method for functional safety architecture of distributed intelligent electric vehicle steering system | |
EP3665054A1 (en) | Multi-stage operation of autonomous vehicles | |
CN113825688B (en) | Autonomous vehicle control system | |
CN107908186A (en) | For the method and system for controlling automatic driving vehicle to run | |
CN112622930A (en) | Unmanned vehicle driving control method, device and equipment and automatic driving vehicle | |
CN102971175A (en) | Vehicle emergency evacuation device | |
CN109249873A (en) | A kind of automatic driving vehicle chassis system and Standby control method | |
US12084035B2 (en) | Vehicle brake control method, device, and storage medium | |
CN113247022A (en) | Automatic driving redundancy control system and method | |
CN106573625A (en) | Device and method for operating a vehicle | |
CN113173178B (en) | Automatic driving control method and system for vehicle | |
CN114348009A (en) | Functional safety concept stage analysis method and brake control system | |
CN110481564A (en) | Control method, system, equipment and the storage medium of automatic Pilot | |
JP7470168B2 (en) | EDGE INFRASTRUCTURE-BASED AUTONOMOUS DRIVING SAFETY CONTROL SYSTEM AND METHOD | |
EP4428632A1 (en) | Autonomous driving control system and vehicle | |
CN116331237A (en) | Control method for automatic driving vehicle | |
Huang et al. | Control system design of an automated bus in revenue service | |
CN110427014A (en) | Fault car control method and device, chassis control instruction executing method and device |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PB01 | Publication | ||
PB01 | Publication | ||
SE01 | Entry into force of request for substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
RJ01 | Rejection of invention patent application after publication |
Application publication date: 20190621 |
|
RJ01 | Rejection of invention patent application after publication |