Validating automotive safety functions

• US 10,023,164 B2
• Filed: 10/17/2014
• Issued: 07/17/2018
• Est. Priority Date: 10/17/2013
• Status: Active Grant

• Current Assignee: Robert Bosch GmbH, Robert Bosch LLC (Robert Bosch GmbH)
• Original Assignee: Robert Bosch GmbH
• Inventors: Schwindt, Oliver F., Garcia Bordes, Maria Eugenia, Pelosse, Jean-Francois, Dechant, Moritz
• Primary Examiner(s): Do, Truc M
• Application Number:
  US15/028,733
• Publication Number:
  US 20160264115A1
• Time in Patent Office: 1,369 Days
• Field of Search: None
• CPC Class Codes: B60T 2210/36 Global Positioning System [GPS]
• CPC Class Codes: B60T 2270/406 Test-mode; Self-diagnosis
• CPC Class Codes: B60T 8/885 using electrical circuitry

Abstract

Methods and systems of validating a vehicle safety function. In one implementation, a plurality of vehicle safety function software programs are developed. A first one of the software programs is installed in a memory of a vehicle controller. The program is run on the controller without delivering at least one vehicle actuator output of the controller generated as a result of running the program. Activation data for the safety function is recorded and the steps of installing, running, and recording with a second one of the plurality of vehicle safety function software programs are repeated.

Claims

1. A method of operating a vehicle safety system of a vehicle having a vehicle controller, and one or more vehicle actuators, the method comprising:

running a plurality of computer-executable, vehicle safety function software programs on the vehicle controller in parallel without delivering at least one vehicle actuator output of the vehicle controller generated in response to an activation of the at least one computer-implemented safety function by one or more of the plurality of computer-executable, vehicle safety function software programs, wherein each computer-executable vehicle safety function software program is configured to generate the activation of the at least one computer-implemented safety function in response to detected conditions based on one or more vehicle sensors;

recording in a data logger activations of each of the plurality of computer-executable vehicle safety function software programs, where the at least one computer-controlled safety function would have activated a vehicle actuator had the at least one vehicle actuator output of the vehicle controller been delivered to the one or more vehicle actuators;

selecting one computer-executable vehicle safety function software program of the plurality of computer-executable vehicle safety function software programs based on the recorded activations in the data logger;

subsequently running the selected computer-executable vehicle safety function software program on the vehicle controller, wherein running the selected computer-executable vehicle safety function software program on the vehicle controller includes

detecting one or more vehicle conditions based on outputs from one or more vehicle sensors, and

generating an activation of the at least one computer-implemented safety function in response to detecting the one or more vehicle conditions; and

controlling the vehicle safety system in response to a subsequent activation of the at least one computer-implemented safety function by the selected computer-executable vehicle safety function software program by delivering the at least one vehicle actuator output of the vehicle controller to the one or more vehicle actuators.

2. The method of claim 1, wherein each of the plurality of computer-executable, vehicle safety function software programs includes tunable parameters, the method further comprising setting the tunable parameters using a diagnostic command from a diagnostics tool.

3. The method of claim 2, further comprising encrypting the diagnostic commands.

4. The method of claim 1, wherein selecting one computer-executable vehicle safety function software program of the plurality of computer-executable vehicle safety function software programs includes using a diagnostics command to select the computer-executable, vehicle safety function software program for use in a sensor.

5. The method of claim 1, further comprising:

recording in the data logger

activation data for the activations of each of the plurality of computer-executable, vehicle safety function software programs,

post-evaluation results for each of the plurality of computer-executable, vehicle safety function software programs,

vehicle information for the activations of each of the plurality of computer-executable, vehicle safety function software programs, and

driver reaction information.

6. The method of claim 5, further comprising determining a number of false activations from the recorded activations of the plurality of computer-executable vehicle safety function software programs based at least in part on the activation data.

7. The method of claim 6, wherein GPS-coordinate information, odometer information, or both is used to determine the number of false activations.

8. The method of claim 6, wherein selecting one computer-executable vehicle safety function software program from the plurality of computer-executable, vehicle safety function software programs includes selecting one computer-executable vehicle safety function software program for use in the vehicle safety system based on the number of false activations.

9. The method of claim 1, wherein the one or more vehicle actuators includes one or more brake actuators,

wherein each vehicle safety function software program of the plurality of vehicle safety function software programs is configured to mitigate a forward-looking collision by causing the one or more brake actuators to apply a braking force in response to detecting conditions indicative of a possible forward-looking collision based on the one or more vehicle sensors, and

wherein controlling the vehicle safety system in response to the subsequent activation of the at least one computer-implemented safety function by the selected computer-executable vehicle safety function software program by delivering the at least one vehicle actuator output of the vehicle controller to the one or more vehicle actuators includes

delivering a brake actuation signal from the vehicle controller to the one or more brake actuators in response to detecting, by the selected computer-executable vehicle safety function software program, the condition indicative of the possible forward-looking collision based on the one or more vehicle sensors.