LAYERED ARCHITECTURE SUPPORTS DISTRIBUTED FAILOVER FOR APPLICATIONS
First Claim
1. A method for vehicle control wherein vehicle devices are controlled by one of a plurality of computing nodes assigned to control one or more vehicle devices, with each computing node running a control application adapted to control the one or more vehicle devices based on input data from one or more input sources to effect a vehicle function, wherein the method comprises:
- initiating a first control application for a vehicle function in a first computing node;
receiving in said first computing node messages containing input data from an input source;
processing said input data in said first control application to determine a control output;
sending messages containing said control output from said first control application to the appropriate vehicle devices to control the vehicle devices; and
implementing a failover measure in dependence upon a criticality of said first control application.
0 Assignments
0 Petitions
Accused Products
Abstract
Methods and systems for distributed failover in a vehicle network, including processor load shedding to reallocate processing power to applications controlling critical vehicle functions and providing for failover in a vehicle network according to the criticality of the affected vehicle function. In embodiments of the presently disclosed vehicle control method and system, the components of the system, including sensors, actuators, and controllers, are implemented as nodes in a network or switch fabric capable of communicating with other nodes.
52 Citations
20 Claims
-
1. A method for vehicle control wherein vehicle devices are controlled by one of a plurality of computing nodes assigned to control one or more vehicle devices, with each computing node running a control application adapted to control the one or more vehicle devices based on input data from one or more input sources to effect a vehicle function, wherein the method comprises:
-
initiating a first control application for a vehicle function in a first computing node; receiving in said first computing node messages containing input data from an input source; processing said input data in said first control application to determine a control output; sending messages containing said control output from said first control application to the appropriate vehicle devices to control the vehicle devices; and implementing a failover measure in dependence upon a criticality of said first control application. - View Dependent Claims (2, 3, 4, 5)
-
-
6. A vehicle control system for a vehicle comprising:
-
a plurality of nodes; a vehicle network interconnecting said plurality of nodes, said vehicle network operating according to a communication protocol; a plurality of vehicle devices for controlling the vehicle, with each of said vehicle devices being coupled to at least two of said nodes through said vehicle network; a plurality of vehicle sensors for providing input data to at least two nodes through said vehicle network; processors at two or more of said nodes, with a first processor running a first control application for controlling vehicle devices assigned to that processor to effect a vehicle function, with said control application including program instructions for processing received input from one or more vehicle sensors to obtain a first result and for sending control messages to an assigned vehicle device according to said first result; and program instructions running on a processor for reassigning control of said vehicle devices to a second processor in dependence upon a criticality of said vehicle function in the case that said first processor fails. - View Dependent Claims (7, 8, 9, 10, 11, 12, 13)
-
-
14. A method for distributed failover in a vehicle control system wherein actuators are controlled by one of a plurality of computing nodes receiving input data from sensors, with each computing node running a control application to process the input, and each computing node is assigned to control one or more actuators to effect a vehicle function, wherein the method comprises:
-
detecting failure of a first computing node running a first control application; initiating a backup control application on a second computing node; routing messages containing input data from the sensors providing input data from the first computing node to the second computing node; and reassigning control of the one or more actuators controlled by the first computing node to the second computing node. - View Dependent Claims (15, 16, 17, 18, 19, 20)
-
Specification