VEHICLE PATH-PLANNER MONITOR AND CONTROLLER

• US 20190113916A1
• Filed: 10/17/2017
• Published: 04/18/2019
• Est. Priority Date: 10/17/2017
• Status: Active Grant

• Current Assignee: NIO Technology Company Limited (Shanghai Anbin Technology Co., Ltd.)
• Original Assignee: Nio Usa Inc.
• Inventors: Guo, Bo, Liu, Xiaodong
• Granted Patent: US 10,635,109 B2
• Time in Patent Office: Days
• CPC Class Codes: A61B 5/02 Detecting, measuring or recording pulse, heart rate, blood pressure or blood flow; Combined pulse/heart-rate/blood pressure determination; Evaluating a cardiovascular condition not otherwise provided for, e.g. using combinations of techniques provided for in this group with electrocardiography or electroauscultation; Heart catheters for measuring blood pressure
• CPC Class Codes: A61B 5/6893 Cars
• CPC Class Codes: B60K 28/02 responsive to conditions relating to the driver
• CPC Class Codes: B60W 10/20 including control of steering systems
• CPC Class Codes: B60W 2050/0075 Automatic parameter input, automatic initialising or calibrating means
• CPC Class Codes: B60W 2050/022 Actuator failures
• CPC Class Codes: B60W 2556/45 External transmission of data to or from the vehicle
• CPC Class Codes: B60W 30/08 Active safety systems predicting or avoiding probable or impending collision or attempting to minimise its consequences
• CPC Class Codes: B60W 40/08 related to drivers or passengers
• CPC Class Codes: B60W 50/02 Ensuring safety in case of control system failures, e.g. by diagnosing, circumventing or fixing failures
• CPC Class Codes: B60W 50/0205 Diagnosing or detecting failures; Failure detection models
• CPC Class Codes: B60W 50/029 Adapting to failures or work around with other constraints, e.g. circumvention by avoiding use of failed parts
• CPC Class Codes: B60W 50/14 Means for informing the driver, warning the driver or prompting a driver intervention
• CPC Class Codes: B60W 60/001 Planning or execution of driving tasks
• CPC Class Codes: B60W 60/0015 specially adapted for safety
• CPC Class Codes: G05D 1/0055 with safety arrangements
• CPC Class Codes: G05D 1/0061 for transition from automatic pilot to manual pilot and vice versa
• CPC Class Codes: G05D 1/0088 characterized by the autonomous decision making process, e.g. artificial intelligence, predefined behaviours using knowledge based models G06N5/00
• CPC Class Codes: G05D 1/0212 with means for defining a desired trajectory involving a plurality of land vehicles G05D1/0287
• CPC Class Codes: G05D 2201/0213 Road vehicle, e.g. car or truck

Abstract

Systems of an autonomous vehicle and the operations thereof are provided. Autonomous vehicles may rely on data inputs, processes, and output commands. Errors due to translation errors, failed or faulty equipment, connections, and other components may cause a dynamic vehicle path to approach a dynamic safe zone. If so, a warning message may be sent and processed by the motion control system, when the vehicle is responding to commands correctly, or actuator control, when the vehicle is not responding to commands correctly. Should the vehicle'"'"'s path approach the safe zone, a failure message is sent to the appropriate system for mitigation.

Claims

1. An autonomous driving system, comprising:

a processor, the processor further comprising circuitry and a memory;

a sensor, in communication with the processor;

an actuator control programmed to receive a motion control command and convert the motion control command into an actuator command;

an actuator configured, in response to receiving an actuator command, to execute an operation controlling an aspect of locomotion for the vehicle and further provide an actuator feedback signal;

a motion control system programmed to determine a planned path and provide motion control commands to the actuator to cause the vehicle to traverse the planned path; and

wherein the processor, in communication with the actuator control and the motion control system, is programmed to;

access a safety envelope for the vehicle;

receive indicia of an observed path from the vehicle from the sensor;

determine the observed path has breached the safety envelope;

in response to determining the safety envelope has been breached, determine whether the actuator feedback is divergent from the motion control commands;

in response to determining the actuator feedback is divergent from the motion control command, process a failure in accord with an actuator failure; and

wherein processing the failure comprises executing a mitigating action to mitigate the vehicle'"'"'s breach or potential breach of the safety envelope.

2. The autonomous driving system of claim 1, wherein the processor, in response to determining the actuator feedback is not divergent from the motion control command, processing the failure in accord with a motion control failure.

3. The autonomous driving system of claim 2, wherein processing the failure, when in accord with the motion control failure, is further processed by the motion control system to cause the motion control system to execute a motion control failure protocol.

4. The autonomous driving system of claim 1, wherein processing the failure, when in accord with the actuator failure, is further processed by the actuator control to cause the actuator control system to execute an actuator control failure protocol.

5. The autonomous driving system of claim 1, wherein the processor further:

accesses a path envelope for the vehicle;

receives indicia of an observed path from the vehicle from the sensor;

determines the observed path has breached the path envelope;

in response to determining the path envelope has been breached, determine whether the actuator feedback is divergent from the motion control commands;

in response to determining the actuator feedback is divergent from the motion control command, processing a warning in accord with the actuator failure; and

wherein processing the warning comprises executing the mitigating action to mitigate the vehicle'"'"'s breach of the path envelope.

6. The autonomous driving system of claim 5, wherein the processor, in response to determining the actuator feedback is not divergent from the motion control command, processing the warning in accord with a motion control warning.

7. The autonomous driving system of claim 6, wherein processing the warning, when in accord with the motion control warning, is further processed by the motion control system to cause the motion control system to execute a motion control warning protocol.

8. The autonomous driving system of claim 5, wherein processing the warning, when in accord with the actuator failure, is further processed by the actuator control system to cause the actuator control system to execute an actuator control warning protocol.

9. The autonomous driving system of claim 5, wherein the processor determines the observed path has breached the path envelope, further comprises the processor determining the observed path, absent a corrective action, will breach the safety envelope.

10. The autonomous driving system of claim 1, wherein the processor determines the observed path has breached the safety envelope, further comprises the processor determining the observed path, absent a corrective action, will breach the safety envelope.

11. The autonomous driving system of claim 1, wherein at least one of the path envelope or the safety envelope is dynamically generated by the processor comprising inputs from at least one of stored data comprising static roadway features or sensor data comprising observed roadway features.

12. The autonomous driving system of claim 1, wherein the mitigating action comprises at least one of, alerting an occupant of the vehicle to resume manual control, alerting persons nearby with a visual and/or audible distress signal, applying the brakes, or navigating the vehicle to a portion of the roadway having reduced hazard.

13. A method, comprising:

accessing, by a processor, a safety envelope for the vehicle;

receiving, by the processor, indicia of an observed path of the vehicle;

determining, by the processor, the observed path has breached the safety envelope;

in response to determining the safety envelope has been breached, determining, by the processor, whether the actuator feedback is divergent from the motion control commands;

in response to determining the actuator feedback is divergent from the motion control command, processing, by the processor, a failure in accord with an actuator failure;

in response to determining the actuator feedback is not divergent from the motion control command, processing, by the processor, the failure in accord with a motion control failure; and

performing, by the processor, a mitigating action to mitigate the vehicle'"'"'s breach or potential breach of the safety envelope.

14. The method of claim 13, wherein:

the mitigating action, when the failure is in accord with the motion control warning, is provided to a motion control system to execute a motion control failure protocol; and

the mitigating action, when the failure is in accord with the actuator control warning, is provided to an actuator control system to execute a motion control failure protocol.

15. The method of claim 13, further comprising:

accessing a path envelope for the vehicle;

receiving indicia of an observed path from the vehicle from the sensor;

determining the observed path has breached the path envelope;

in response to determining the path envelope has been breached, determining whether the actuator feedback is divergent from the motion control commands;

in response to determining the actuator feedback is divergent from the motion control command, processing a warning in accord with the actuator failure;

in response to determining the actuator feedback is not divergent from the motion control command, processing a warning in accord with the motion control failure; and

performing a mitigating action to mitigate the vehicle'"'"'s breach of the path envelope.

16. The method of claim 15, wherein:

the mitigating action, when the warning is in accord with the motion control warning, is provided to a motion control system to execute a motion control warning protocol; and

the mitigating action, when the warning is in accord with the actuator control warning, is provided to an actuator control system to execute an actuator warning protocol.

17. The method of claim 15, wherein the mitigating action comprises a limit on at least one of the vehicle'"'"'s speed, rate of speed change, turning, and/or rate of turn.

18. The method of claim 13, wherein the mitigating action comprises at least one of alerting an occupant of the vehicle to resume manual control, alerting persons nearby with a visual and/or audible distress signal, applying the brakes, or navigating the vehicle to a portion of the roadway having reduced hazard.

19. A system for autonomously driving a vehicle, comprising:

a processor, the processor further comprising circuitry and a memory;

a sensor, in communication with the processor;

an actuator control configured to receive a motion control command and convert the motion control command into an actuator command;

an actuator configured, in response to receiving an actuator command, to execute an operation controlling an aspect of locomotion for a vehicle and further provide an actuator feedback signal;

a motion control system programmed to determine a planned path and provide motion control commands to the actuator to cause the vehicle to traverse the planned path; and

wherein the processor, in communication with the actuator control and the motion control system, is programmed to;

access a safety envelope for the vehicle;

receive indicia of an observed path from the vehicle from the sensor;

determines the observed path has breached the safety envelope;

in response to determining the safety envelope has been breached, determine whether the actuator feedback is divergent from the motion control commands;

in response to determining the actuator feedback is divergent from the motion control command, process a failure in accord with an actuator failure;

in response to determining the actuator feedback is not divergent from the motion control command, process the failure in accord with a motion control failure; and

wherein processing the failure comprises executing a mitigating action to mitigate the vehicle'"'"'s breach of the safety envelope.

20. The system for autonomously driving a vehicle of claim 19, wherein the processor:

accesses a path envelope for the vehicle;

receives indicia of an observed path from the vehicle from the sensor;

determines the observed path has breached the path envelope;

in response to determining the path envelope has been breached, determine whether the actuator feedback is divergent from the motion control commands;

in response to determining the actuator feedback is divergent from the motion control command, processing a warning in accord with the actuator failure; and

wherein processing the warning comprises executing the mitigating action to mitigate the vehicle'"'"'s breach of the path envelope.