Autonomous operation verification device and autonomous system

• US 10,459,446 B2
• Filed: 02/12/2015
• Issued: 10/29/2019
• Est. Priority Date: 02/12/2015
• Status: Expired due to Fees

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: Nishi, Masataka
• Primary Examiner(s): Nguyen, Kira
• Application Number:
  US15/550,415
• Publication Number:
  US 20180032079A1
• Time in Patent Office: 1,720 Days
• Field of Search: 701 23
• CPC Class Codes: B60W 30/09 Taking automatic action to avoid collision, e.g. braking and steering
• CPC Class Codes: B60W 30/0956 the prediction being responsive to traffic or environmental parameters
• CPC Class Codes: B60W 50/00 Details of control systems for road vehicle drive control not related to the control of a particular sub-unit , e.g. process diagnostic or vehicle driver interfaces
• CPC Class Codes: B60W 50/14 Means for informing the driver, warning the driver or prompting a driver intervention
• CPC Class Codes: B60W 60/0011 involving control alternatives for a single driving scenario, e.g. planning several paths to avoid obstacles
• CPC Class Codes: B60W 60/0015 specially adapted for safety
• CPC Class Codes: B60W 60/0016 of the vehicle or its occupants
• CPC Class Codes: B60W 60/00272 relying on extrapolation of current movement
• CPC Class Codes: B60W 60/00274 considering possible movement changes
• CPC Class Codes: G08G 1/16 Anti-collision systems road vehicle drive control systems for predicting or avoiding probable or impending collision otherwise than by control of a particular sub-unit B60W30/08
• CPC Class Codes: G08G 1/165 for passive traffic, e.g. including static obstacles, trees
• CPC Class Codes: G08G 1/166 for active traffic, e.g. moving vehicles, pedestrians, bikes

Abstract

A mechanism having an autonomous operation verification device having a function of determining satisfiability of expected operation and safety requirement under a predetermined operation-time precondition and determining occurrence possibility of hazard violating the safety requirement in a predictive manner and achieving operation safety of an autonomous system operating in an open environment is provided. A function for determining whether the expected operation and operation safety are satisfiable or not in a case where operation planning means provides a planned operation and evaluating the operation safety of the planned operation during operation is provided. Further, an autonomous system having a function of calculating an alternative operation by using the predictive determination function and recovering operation safety by avoiding the hazard is provided.

Claims

1. An autonomous system of autonomous vehicles, comprising:

a processor configured to;

measure an internal state value of a vehicle;

measure an external state of the vehicle;

set an operation-time constraint limiting a possible range that could be taken by the internal state value until a predetermined time point;

set an operation-time precondition limiting a possible range that could be taken by the external state until a predetermined time point by using the external state;

set a safety requirement constraining a relationship between the internal state and the external state;

set an expected operation for commanding an operation to be executed by the system in question;

calculate a planned operation for the purpose of achieving the expected operation;

convert all of the operation-time constraint, the operation-time precondition, the safety requirement, the expected operation, the planned operation into a constraint form with a quantifier; and

determine whether there is a satisfying solution for the constraint form with the quantifier,

wherein the processor provides a satisfiability determination solution of the constraint form with the quantifier when the vehicle is operating based on the planned operation, and

wherein the autonomous system further comprises a presenting device having a display screen and configured to;

illuminate an abnormality lamp in a case where there is no safety of the planned operation;

display, on the display screen, a target performing a dangerous operation violating the operation-time precondition on the screen; and

display, on the display screen, an alternative planned operation that satisfies the safety requirement under the operation-time precondition.

2. The autonomous system according to claim 1, wherein the processor is further configured to:

determine whether there is any satisfying solution of the expected operation and the safety requirement;

determine whether there is any satisfying solution of the external state and the operation-time precondition, and identify the target performing the dangerous operation violating the operation-time precondition;

determine whether there is any time series sequence value in the outside state violating the safety requirement under the operation-time precondition; and

determine whether there is any alternative planned operation satisfying the safety requirement under the operation-time precondition.

3. The autonomous system according to claim 2, wherein the processor is configured to notify:

safety of the planned operation based on a result of the achieving possibility determination function;

a target for performing a dangerous operation based on a result of the hazard factor identification function;

a hazard factor based on a result of the hazard occurrence possibility determination function; and

an alternative planned operation based on a result of the hazard avoidance possibility determination function.

4. The autonomous system according to claim 3, wherein every time data of the constraint form with the quantifier is received, the processor is configured to output data of results determined by the processor based on received data, together with a registration time point and a valid period of the data, to a recording device.

5. The autonomous system according to claim 2, wherein the processor is configured to replace the planned operation with the alternative planned operation to satisfy the safety requirement in a case where the alternative planned operation is obtained.