Active safety systems of vehicles with graphical microprocessors

• US 9,090,265 B2
• Filed: 08/28/2012
• Issued: 07/28/2015
• Est. Priority Date: 08/28/2012
• Status: Active Grant

• Current Assignee: GM Global Technology Operations LLC (General Motors Company)
• Original Assignee: GM Global Technology Operations LLC (General Motors Company)
• Inventors: Yousuf, Mohammed Abdulla
• Primary Examiner(s): Nguyen, John Q
• Assistant Examiner(s): Hutchinson, Alan D
• Application Number:
  US13/596,239
• Publication Number:
  US 20140067192A1
• Time in Patent Office: 1,064 Days
• US Class Current: 1/1
• CPC Class Codes: B60W 2050/0005 Processor details or data handling, e.g. memory registers or chip architecture
• CPC Class Codes: B60W 2050/0006 Digital architecture hierarchy
• CPC Class Codes: B60W 50/029 Adapting to failures or work around with other constraints, e.g. circumvention by avoiding use of failed parts

Abstract

A system of a vehicle includes an engine control module (ECM), a first processor module, sensors, a second processor module, and a third processor module. The ECM controls engine actuators based on driver inputs to a steering wheel, an accelerator pedal, a brake pedal, and a cruise control system. The first processor module includes a first microprocessor and selectively actuates at least one of an electric power steering motor, friction brakes, and a throttle valve based on processed data. The sensors sense features outside of the vehicle. The second processor module includes a second microprocessor and generates the processed data based on data from the sensors. The second microprocessor is a graphical microprocessor. The third processor module includes a third microprocessor and generates an indicator of whether a fault is present in the second processor module.

Claims

1. A system of a vehicle, comprising:

an engine control module (ECM) that controls engine actuators based on driver inputs to a steering wheel, an accelerator pedal, a brake pedal, and a cruise control system;

a first processor module that includes a first microprocessor and that selectively actuates at least one of an electric power steering motor, friction brakes, and a throttle valve based on processed data;

sensors that sense features outside of the vehicle;

a second processor module that includes a second microprocessor and that generates the processed data based on data from the sensors,

wherein the second microprocessor is a graphical microprocessor;

a third processor module that includes a third microprocessor and that generates an indicator of whether a fault is present in the second processor module; and

an external object calculation module that includes;

a fourth processor module that includes a fourth microprocessor and that, only in response to an indication that the fault is present in the second processor module, selectively actuates at least one of the electric power steering motor, the friction brakes, and the throttle valve based on second processed data;

a fifth processor module that includes a fifth microprocessor and that generates the second processed data based on the data from the sensors,

wherein the fifth microprocessor is a graphical microprocessor; and

a sixth processor module that includes a sixth microprocessor and that generates an indicator of whether a fault is present in the fifth processor module.

2. The system of claim 1 wherein:

the first microprocessor includes at least two processor cores; and

the second microprocessor includes at least four processor cores.

3. The system of claim 1 wherein the second microprocessor operates at a speed of at least 1 Gigahertz (GHz).

4. The system of claim 1 wherein the second microprocessor includes a rating of at least 9600 Dhrystone million instructions per second (DMIPS).

5. The system of claim 1 wherein the third processor module determines whether the fault is present in the second processor module based on whether the second processor module calls functions in a predetermined order.

6. The system of claim 5 wherein the third processor module determines that the fault is present in the second processor module when the second processor module calls functions in an order that is different than the predetermined order.

7. The system of claim 1 wherein the third processor module determines whether the fault is present in the second processor module based on whether the second processor module completes execution of a function within a predetermined period.

8. The system of claim 7 wherein the third processor module determines that the fault is present in the second processor module when the second processor module one of:

completes execution of the function in greater than the predetermined period; and

does not complete the execution of the function.

9. The system of claim 1 wherein the third processor module outputs a challenge to the second processor module and determines whether the fault is present in the second processor module based on whether the second processor module generates a predetermined response to the challenge.

10. The system of claim 9 wherein the third processor module determines that the fault is present in the second processor module when the third processor module generates a response that is different than the predetermined response.

11. The system of claim 1 wherein:

the second microprocessor includes at least four processor cores; and

the third processor module determines that the fault is present in the second processor module when the at least four processor cores are not synchronized.

12. The system of claim 1 wherein:

the third processor module generates a challenge;

the second microprocessor includes at least four processor cores;

a first processor core of the at least four processor cores generates a first result based on the challenge;

a second processor core of the at least four processor cores generates a second result based on the challenge;

a third processor core of the at least four processor cores compares the first and second results; and

the first, second, and third processor cores are different cores.

13. The system of claim 12 wherein:

the third processor core indicates whether the first and second results are the same; and

the third processor module determines whether the fault is present in the second processor module based on the indication of whether the first and second results are the same.

14. The system of claim 13 wherein the third processor module determines that the fault is present in the second processor module when the third processor core indicates that the first and second results are not the same.

15. The system of claim 1 wherein:

the fourth microprocessor includes at least two processor cores; and

the fifth microprocessor includes at least four processor cores.

16. The system of claim 1 wherein the fifth microprocessor operates at a speed of at least 1 Gigahertz (GHz).

17. The system of claim 1 wherein the fifth microprocessor includes a rating of at least 9600 Dhrystone million instructions per second (DMIPS).

18. The system of claim 1 wherein, when the fault is present in the second processor module, the third processor module prevents the first processor module from actuating the electric power steering motor, the friction brakes, and the throttle valve.