Risk-based control of a motor vehicle

• US 10,249,108 B2
• Filed: 11/22/2016
• Issued: 04/02/2019
• Est. Priority Date: 12/09/2015
• Status: Active Grant

• Current Assignee: Robert Bosch GmbH
• Original Assignee: Robert Bosch GmbH
• Inventors: Schroeder, Christoph, Pink, Oliver, Nordbruch, Stefan, Wilhelm, Ulf
• Primary Examiner(s): Heinle, Courtney D
• Assistant Examiner(s): Martinez Borrero, Luis A
• Application Number:
  US15/359,007
• Publication Number:
  US 20170169628A1
• Time in Patent Office: 861 Days
• CPC Class Codes: B60W 50/023 Avoiding failures by using redundant parts
• CPC Class Codes: B60W 50/04 Monitoring the functioning of the control system
• CPC Class Codes: G05D 1/0077 using redundant signals or controls
• CPC Class Codes: G05D 1/0088 characterized by the autonomous decision making process, e.g. artificial intelligence, predefined behaviours using knowledge based models G06N5/00
• CPC Class Codes: G07C 5/0808 Diagnosing performance data testing of vehicles G01M17/00; testing of electrical installation on vehicles G01R31/005

Abstract

A highly automated driving function for controlling a motor vehicle includes a plurality of function components. A method for controlling the motor vehicle includes steps of executing the driving function using a first function component, comparing the behavior of the first function component to a specified behavior, ascertaining that the behavior of the first function component deviates from the specified behavior, ascertaining a first accident risk if the driving function continues to be executed with the aid of the first function component, ascertaining a second accident risk if the execution of the driving function continues with the aid of a second function component, and executing the driving function with the aid of the particular function component whose allocated accident risk is the lowest.

Claims

1. A method for controlling a motor vehicle with the aid of a highly automated driving function, which encompasses a plurality of function components, the method comprising:

executing a driving function using a first function component, wherein the driving function is a longitudinal or lateral control of the motor vehicle;

comparing a behavior of the first function component to a specified behavior;

ascertaining that the behavior of the first function component deviates from the specified behavior;

ascertaining a first accident risk for the first function component, wherein the ascertaining of the first accident risk assumes a situation in which the driving function continues to be executed using the first function component;

ascertaining a second accident risk for a second function component, wherein the ascertaining of the second accident risk assumes a situation in which the execution of the driving function switches over to and continues execution of the driving function of a using the second function component instead of the first function component, wherein the ascertaining of the second accident risk includes ascertaining a risk related to the switchover from the first function component to the second function component; and

executing the driving function using a particular one of the first function component and the second function component, whose ascertained accident risk is the lowest.

2. The method of claim 1, wherein each of the first function component and the second function component includes hardware, software, or a combination thereof.

3. The method of claim 1, wherein the first function component is more complex than the second function component.

4. The method of claim 1, wherein the first accident risk and the second accident risk are risks for an accident whose severity exceeds a predefined threshold value.

5. The method of claim 1, wherein multiple second function components is provided, and the second accident risk is determined for each second function component.

6. The method of claim 1, wherein a takeover of the driving function by a driver is initiated if the accident risk of the executed driving function lies above a predefined threshold value.

9. The method as recited in claim 1, wherein each of the ascertaining of the first accident risk and ascertaining of the second accident risk includes ascertaining with regard to a predefined severity of an accident.

10. The method as recited in claim 1, further comprising:

based on the ascertaining that the behavior of the first function component deviated from the specified behavior, performing;

comparing the ascertained first accident risk to the ascertained second accident risk;

determining the ascertained second accident risk is not lower than the ascertained first accident risk; and

based on determining the ascertained second accident risk is not lower than the ascertained first accident risk, continue executing the driving function using the first function component despite the ascertaining that the behavior of the first function component deviated from the specified behavior.

11. The method as recited in claim 1, further comprising:

based on the ascertaining that the behavior of the first function component deviated from the specified behavior, performing;

comparing the ascertained first accident risk to the ascertained second accident risk;

determining the ascertained second accident risk is lower than the ascertained first accident risk; and

based on determining the ascertained second accident risk is lower than the ascertained first accident risk, switching over the driving function from executing the driving function using the first function component to executing the driving function using second function component.

12. The method as recited in claim 11, further comprising:

based on determining the ascertained second accident risk is lower than the ascertained first accident risk, prompting a driver of the vehicle to assume control of the motor vehicle.

7. A non-transitory computer readable medium on which is stored a computer program including program code for controlling a motor vehicle with the aid of a highly automated driving function, which encompasses a plurality of function components, the computer program, when executed by a processor, causing the processor to perform:

executing a driving function using a first function component, wherein the driving function is a longitudinal or lateral control of the motor vehicle;

comparing a behavior of the first function component to a specified behavior;

ascertaining that the behavior of the first function component deviates from the specified behavior;

ascertaining a first accident risk for the first function component, wherein the ascertaining of the first accident risk assumes a situation in which the driving function continues to be executed using the first function component;

ascertaining a second accident risk for a second function component, wherein the ascertaining of the second accident risk assumes a situation in which the execution of the driving function switches over to and continues execution of the driving function using the second function component instead of the first function component, wherein the ascertaining of the second accident risk includes ascertaining a risk related to the switchover from the first function component to the second function component; and

executing the driving function the using a particular one of the first function component and the second function component, whose ascertained accident risk is the lowest.

8. A device for controlling a motor vehicle with the aid of a highly automated driving function, which encompasses a plurality of function components, comprising:

a control arrangement including hardware configured to perform the following;

executing a driving function using a first function component, wherein the driving function includes a longitudinal or lateral control of the vehicle;

comparing a behavior of the first function component to a specified behavior;

ascertaining that the behavior of the first function component deviates from the specified behavior;

ascertaining a first accident risk for the first function component, wherein the ascertaining of the first accident risk assumes a situation in which the driving function continues to be executed using the first function component;

ascertaining a second accident risk for a second function component, wherein the ascertaining of the second accident risk assumes a situation in which the execution of the driving function switches over to and continues execution of the driving function using the second function component instead of the first function component, wherein the ascertaining of the second accident risk includes ascertaining a risk related to the switchover from the first function component to the second function component; and

executing the driving function using a particular one of the first function component and the second function component, whose ascertained accident risk is the lowest.