DUPLICATED PROCESSING IN VEHICLES

• US 20130204493A1
• Filed: 03/14/2013
• Published: 08/08/2013
• Est. Priority Date: 11/16/2011
• Status: Active Grant

• Current Assignee: AutoConnect Holdings LLC
• Original Assignee: Flextronics America LLC (Flextronics International Limited)
• Inventors: Ricci, Christopher P., Swartz, Douglas W.
• Granted Patent: US 9,081,653 B2
• Time in Patent Office: Days
• US Class Current: 701/41
• CPC Class Codes: B60R 16/0234 related to maintenance or repairing of vehicles
• CPC Class Codes: B60W 10/06 including control of combustion engines
• CPC Class Codes: B60W 10/10 including control of change-speed gearings
• CPC Class Codes: B60W 2050/0006 Digital architecture hierarchy
• CPC Class Codes: B60W 50/023 Avoiding failures by using redundant parts
• CPC Class Codes: G06F 11/2023 Failover techniques
• CPC Class Codes: G06F 11/2038 with a single idle spare processing component
• CPC Class Codes: G06F 11/3055 Monitoring arrangements for monitoring the status of the computing system or of the computing system component, e.g. monitoring if the computing system is on, off, available, not available error or fault processing without redundancy G06F11/0703; error detection or correction by redundancy in data representation G06F11/08; error detection or correction by redundancy in operation G06F11/14; error detection or correction by redundancy in hardware G06F11/16
• CPC Class Codes: G06F 17/00 Digital computing or data processing equipment or methods, specially adapted for specific functions information retrieval, database structures or file system structures therefor G06F16/00
• CPC Class Codes: G06F 2201/81 Threshold
• CPC Class Codes: G06F 3/0484 for the control of specific functions or operations, e.g. selecting or manipulating an object, an image or a displayed text element, setting a parameter value or selecting a range
• CPC Class Codes: G06F 3/0488 using a touch-screen or digitiser, e.g. input of commands through traced gestures
• CPC Class Codes: G07C 5/008 communicating information to a remotely located station transmission systems for measured values G08C
• CPC Class Codes: G07C 5/085 using electronic data carriers

Abstract

The present disclosure describes a vehicle implementing one or more processing modules. These modules are configured to connect and interface with the various buses in the vehicle, where the various buses are connected with the various components of the vehicle to facilitate information transfer among the vehicle components. Each processing module is further modularized with the ability to add and replace other functional modules now or in the future. These functional modules can themselves act as distinct vehicle components. Each processing module may hand-off processing to other modules depending on its health, processing load, or by third-party control. Thus, the plurality of processing modules helps to implement a middleware point of control to the vehicle with redundancy in processing and safety and security awareness in their applications.

Claims

1. A vehicle, comprising:

a plurality of processing modules to control a plurality of automated vehicle tasks, functions and/or operations, wherein a first processing module is in an active mode whereby the first processing module is in primary control of at least most automated vehicle tasks, functions and/or operations and a second processing module is in a standby mode whereby the second processing module is ready to assume primary control of the at least most automated vehicle tasks, functions and/or operations.

2. The vehicle of claim 1, wherein the first and second processing modules are in wireless communication with one another, and wherein a state of the second processing module is maintained substantially in synchronicity with a state of the first processing module to a enable a stateful failover from the first processing module to the second processing module.

3. The vehicle of claim 1, wherein the plurality of automated vehicle tasks, functions and/or operations comprise monitoring, controlling and/or operating a plurality of the following:

an engine and/or power control unit, transmission control unit (TCU), a door setting, a window setting, a blind spot monitor, an airbag deployment control unit, a collision sensor, a nearby object sensing system, a seat belt control unit, a sensor for a seat belt setting, a power source controller, an energy output sensor, an engine temperature sensor, oil pressure, hydraulic pressure, a headlight, an emergency light, a brake light, a parking light, a fog light, an interior and/or passenger compartment light, a tail light, a vehicle control system sensor, a wireless network, a cellular data sensor, a steering sensor, a torque sensor, an engine, power steering, a display panel, switch state control unit, and a brake control unit.

4. The vehicle of claim 1, wherein the plurality of automated vehicle tasks, functions and/or operations comprise monitoring, controlling and/or operating a plurality of the following:

an emissions system, a seating system controller and/or sensor, an entertainment system, monitoring an ambient (outdoor) weather sensor, an odometer reading sensor, a trip mileage reading sensor, a road condition sensor, a radar transmitter/receiver output, a brake wear sensor, an oxygen sensor, an ambient lighting sensor, a vision system sensor, a ranging sensor, a parking sensor, a heating, venting, and air conditioning (HVAC) system and/or sensor, a water sensor, a air-fuel ratio meter, a hall effect sensor, a microphone, a radio frequency (RF) sensor, and/or an infrared (IR) sensor.

5. The vehicle of claim 1, wherein the first and second processing modules are duplicated and further comprising an arbitration module to arbitrate hand-off conflicts between the duplicated first and second processing modules.

6. The vehicle of claim 5, wherein the arbitration module selects one of the first and second processing modules to currently possess and/or own a token, the token indicating at least one of (i) which processing module is an active processing module and/or which processing module is a standby processing module and (ii) which processing module is responsible for a selected set of processing tasks, functions, and/or operations associated with the token.

7. The vehicle of claim 1, wherein the first and second processing modules are duplicated and further comprising a health check module to determine a corresponding state of health of each of the duplicated first and second processing modules to perform at least one of critical and non-critical tasks, functions, and operations.

8. The vehicle of claim 7, wherein the health check module performs a check and/or test, in response to an internally generated interrupt and/or request to determine a selected processing module'"'"'s ability to perform critical and/or non-critical vehicle tasks, functions, and/or operations, assign a score to the selected processing module based on the check and/or test results, and/or compare the score to one or more thresholds and/or to a score of a different processing module to determine a relative and/or absolute state of health of the selected processing module.

9. The vehicle of claim 8, wherein the arbitration module, based on the relative and/or absolute state of health of each of the first and second processing modules selects one of the first and second processing modules as a primary processing module in primary control of the at least most automated vehicle tasks, functions and/or operations and the other of the first and second processing modules as a secondary processing module in standby mode.

10. The vehicle of claim 9, wherein a hand-off procedure is activated whereby primary control is passed from the first processing module to the secondary processing module and the first processing module enters the standby mode.

11. The vehicle of claim 8, wherein the relative weighting of at least some tasks, functions and/or operations in assigning the score is a function of geographic location of the vehicle.

12. The vehicle of claim 1, wherein, for a first set of tasks, functions, and/or operations, the first processing module is in primary control and the second processing module is in standby mode and, for a different second set of tasks, functions, and/or operations, the second processing module is in primary control and the first processing module is in standby mode.

13. The vehicle of claim 1, wherein, in the standby mode, the second processing module at least one of (a) performs shadow processing of the at least most automated vehicle tasks, functions and/or operations and (b) synchronizes stored time-stamped processing state information with time-stamped processing state information regarding the at least most automated vehicle tasks, functions and/or operations.

14. A non-transient, tangible computer readable medium comprising microprocessor executable instructions that, when executed, designate a first processing module as being in an active mode whereby the first processing module is in primary control of at least most automated vehicle tasks, functions and/or operations and a second processing module as being in a standby mode whereby the second processing module is ready to assume primary control of the at least most automated vehicle tasks, functions and/or operations.

15. The computer readable medium of claim 14, wherein the first and second processing modules are in wireless communication with one another, and wherein a state of the second processing module is maintained substantially in synchronicity with a state of the first processing module to a enable a stateful failover from the first processing module to the second processing module.

16. The computer readable medium of claim 14, wherein the plurality of automated vehicle tasks, functions and/or operations comprise monitoring, controlling and/or operating a plurality of the following:

an engine and/or power control unit, transmission control unit (TCU), a door setting, a window setting, a blind spot monitor, an airbag deployment control unit, a collision sensor, a nearby object sensing system, a seat belt control unit, a sensor for a seat belt setting, a power source controller, an energy output sensor, an engine temperature sensor, oil pressure, hydraulic pressure, a headlight, an emergency light, a brake light, a parking light, a fog light, an interior and/or passenger compartment light, a tail light, a vehicle control system sensor, a wireless network, a cellular data sensor, a steering sensor, a torque sensor, an engine, power steering, a display panel, switch state control unit, and a brake control unit.

17. The computer readable medium of claim 14, wherein the plurality of automated vehicle tasks, functions and/or operations comprise monitoring, controlling and/or operating a plurality of the following:

an emissions system, a seating system controller and/or sensor, an entertainment system, monitoring an ambient (outdoor) weather sensor, an odometer reading sensor, a trip mileage reading sensor, a road condition sensor, a radar transmitter/receiver output, a brake wear sensor, an oxygen sensor, an ambient lighting sensor, a vision system sensor, a ranging sensor, a parking sensor, a heating, venting, and air conditioning (HVAC) system and/or sensor, a water sensor, a air-fuel ratio meter, a hall effect sensor, a microphone, a radio frequency (RF) sensor, and/or an infrared (IR) sensor.

18. The computer readable medium of claim 14, wherein the first and second processing modules are duplicated and further comprising an arbitration module to arbitrate hand-off conflicts between the duplicated first and second processing modules.

19. The computer readable medium of claim 18, wherein the arbitration module selects one of the first and second processing modules to currently possess and/or own a token, the token indicating at least one of (i) which processing module is an active processing module and/or which processing module is a standby processing module and (ii) which processing module is responsible for a selected set of processing tasks, functions, and/or operations associated with the token.

20. The computer readable medium of claim 14, wherein the first and second processing modules are duplicated and further comprising a health check module to determine a corresponding state of health of each of the duplicated first and second processing modules to perform at least one of critical and non-critical tasks, functions, and/or operations.

21. The computer readable medium of claim 20, wherein the health check module performs a check and/or test, in response to an internally generated interrupt and/or request to determine a selected processing module'"'"'s ability to perform critical and/or non-critical vehicle tasks, functions, and/or operations, assign a score to the selected processing module based on the check and/or test results, and/or compare the score to one or more thresholds and/or to a score of a different processing module to determine a relative and/or absolute state of health of the selected processing module.

22. The computer readable medium of claim 21, wherein the arbitration module, based on the relative and/or absolute state of health of each of the first and second processing modules selects one of the first and second processing modules as a primary processing module in primary control of the at least most automated vehicle tasks, functions and/or operations and the other of the first and second processing modules as a secondary processing module in standby mode.

23. The computer readable medium of claim 22, wherein a hand-off procedure is activated whereby primary control is passed from the first processing module to the secondary processing module and the first processing module enters the standby mode.

24. The computer readable medium of claim 21, wherein the relative weighting of at least some tasks, functions and/or operations in assigning the score is a function of geographic location of the vehicle.

25. The computer readable medium of claim 14, wherein, for a first set of tasks, functions, and/or operations, the first processing module is in primary control and the second processing module is in standby mode and, for a different second set of tasks, functions, and/or operations, the second processing module is in primary control and the first processing module is in standby mode.

26. The computer readable medium of claim 14, wherein, in the standby mode, the second processing module at least one of (a) performs shadow processing of the at least most automated vehicle tasks, functions and/or operations and (b) synchronizes stored time-stamped processing state information with time-stamped processing state information regarding the at least most automated vehicle tasks, functions and/or operations.

27. A method comprising:

designating, by a microprocessor executable arbitration module, a first processing module as being in an active mode, whereby the first processing module is in primary control of at least most automated vehicle tasks, functions and/or operations, and a second processing module as being in a standby mode, whereby the second processing module is ready to assume primary control of the at least most automated vehicle tasks, functions and/or operations.

28. The method of claim 27, wherein the first and second processing modules are in wireless communication with one another, and further comprising:

maintaining a state of the second processing module substantially in synchronicity with a state of the first processing module to a enable a stateful failover from the first processing module to the second processing module.

29. The method of claim 27, wherein the plurality of automated vehicle tasks, functions and/or operations comprise monitoring, controlling and/or operating a plurality of the following:

an engine and/or power control unit, transmission control unit (TCU), a door setting, a window setting, a blind spot monitor, an airbag deployment control unit, a collision sensor, a nearby object sensing system, a seat belt control unit, a sensor for a seat belt setting, a power source controller, an energy output sensor, an engine temperature sensor, oil pressure, hydraulic pressure, a headlight, an emergency light, a brake light, a parking light, a fog light, an interior and/or passenger compartment light, a tail light, a vehicle control system sensor, a wireless network, a cellular data sensor, a steering sensor, a torque sensor, an engine, power steering, a display panel, switch state control unit, and a brake control unit.

30. The method of claim 27, wherein the plurality of automated vehicle tasks, functions and/or operations comprise monitoring, controlling and/or operating a plurality of the following:

an emissions system, a seating system controller and/or sensor, an entertainment system, monitoring an ambient (outdoor) weather sensor, an odometer reading sensor, a trip mileage reading sensor, a road condition sensor, a radar transmitter/receiver output, a brake wear sensor, an oxygen sensor, an ambient lighting sensor, a vision system sensor, a ranging sensor, a parking sensor, a heating, venting, and air conditioning (HVAC) system and/or sensor, a water sensor, a air-fuel ratio meter, a hall effect sensor, a microphone, a radio frequency (RF) sensor, and/or an infrared (IR) sensor.

31. The method of claim 27, wherein the first and second processing modules are duplicated and further comprising a microprocessor executable arbitration module to arbitrate hand-off conflicts between the duplicated first and second processing modules.

32. The method of claim 31, wherein the arbitration module selects one of the first and second processing modules to currently possess and/or own a token, the token indicating at least one of (i) which processing module is an active processing module and/or which processing module is a standby processing module and (ii) which processing module is responsible for a selected set of processing tasks, functions, and/or operations associated with the token.

33. The method of claim 27, wherein the first and second processing modules are duplicated and further comprising a microprocessor executable health check module to determine a corresponding state of health of each of the duplicated first and second processing modules to perform at least one of critical and non-critical tasks, functions, and operations.

34. The method of claim 33, wherein the health check module performs a check and/or test, in response to an internally generated interrupt and/or request to determine a selected processing module'"'"'s ability to perform critical and/or non-critical vehicle tasks, functions, and/or operations, assign a score to the selected processing module based on the check and/or test results, and/or compare the score to one or more thresholds and/or to a score of a different processing module to determine a relative and/or absolute state of health of the selected processing module.

35. The method of claim 34, wherein the arbitration module, based on the relative and/or absolute state of health of each of the first and second processing modules selects one of the first and second processing modules as a primary processing module in primary control of the at least most automated vehicle tasks, functions and/or operations and the other of the first and second processing modules as a secondary processing module in standby mode.

36. The method of claim 35, wherein a hand-off procedure is activated whereby primary control is passed from the first processing module to the secondary processing module and the first processing module enters the standby mode.

37. The method of claim 34, wherein the relative weighting of at least some tasks, functions and/or operations in assigning the score is a function of geographic location of the vehicle.

38. The method of claim 27, wherein, for a first set of tasks, functions, and/or operations, the first processing module is in primary control and the second processing module is in standby mode and, for a different second set of tasks, functions, and/or operations, the second processing module is in primary control and the first processing module is in standby mode.

39. The method of claim 27, wherein, in the standby mode, the second processing module at least one of (a) performs shadow processing of the at least most automated vehicle tasks, functions and/or operations and (b) synchronizes stored time-stamped processing state information with time-stamped processing state information regarding the at least most automated vehicle tasks, functions and/or operations.