MONITORING STATE-OF-HEALTH OF PROCESSING MODULES IN VEHICLES

• US 20130282238A1
• Filed: 03/14/2013
• Published: 10/24/2013
• Est. Priority Date: 11/16/2011
• Status: Abandoned Application

• Current Assignee: AutoConnect Holdings LLC
• Original Assignee: Flextronics America LLC (Flextronics International Limited)
• Inventors: Ricci, Christopher P., Swartz, Douglas W.
• Application Number:
  US13/830,066
• Publication Number:
  US 20130282238A1
• Time in Patent Office: Days
• US Class Current: 701/41
• CPC Class Codes: G06F 17/00 Digital computing or data processing equipment or methods, specially adapted for specific functions information retrieval, database structures or file system structures therefor G06F16/00
• CPC Class Codes: G06F 3/0484 for the control of specific functions or operations, e.g. selecting or manipulating an object, an image or a displayed text element, setting a parameter value or selecting a range
• CPC Class Codes: G06Q 10/00 Administration; Management
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G08G 1/0965 responding to signals from another vehicle, e.g. emergency vehicle
• CPC Class Codes: G08G 1/166 for active traffic, e.g. moving vehicles, pedestrians, bikes
• CPC Class Codes: G08G 1/167 Driving aids for lane monitoring, lane changing, e.g. blind spot detection
• CPC Class Codes: G08G 1/168 Driving aids for parking, e.g. acoustic or visual feedback on parking space
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04N 21/41422 located in transportation means, e.g. personal vehicle arrangements specially adapted for transportation systems in broadcast systems H04H20/62
• CPC Class Codes: H04N 21/4424 Monitoring of the internal components or processes of the client device, e.g. CPU or memory load, processing speed, timer, counter or percentage of the hard disk space used error monitoring in general G06F11/30; arrangements for monitoring conditions of receiving stations in broadcast systems H04H60/32; diagnosis, testing or measuring for television receivers H04N17/04
• CPC Class Codes: H04N 21/4433 Implementing client middleware, e.g. Multimedia Home Platform [MHP]

Abstract

The present disclosure describes a vehicle implementing one or more processing modules. These modules are configured to connect and interface with the various buses in the vehicle, where the various buses are connected with the various components of the vehicle to facilitate information transfer among the vehicle components. Each processing module is further modularized with the ability to add and replace other functional modules now or in the future. These functional modules can themselves act as distinct vehicle components. Each processing module may hand-off processing to other modules depending on its health, processing load, or by third-party control. Thus, the plurality of processing modules helps to implement a middleware point of control to the vehicle with redundancy in processing and safety and security awareness in their applications.

Claims

1. A vehicle, comprising:

at least one processing module to control at least one automated vehicle task, function, and/or operation; and

a health check module to determine a corresponding state of health of the at least one processing module to perform the at least one of task, function, and/or operation.

2. The vehicle of claim 1, wherein the at least one processing module comprises a plurality of processing modules, wherein the at least one automated vehicle task, function, and/or operation comprises a plurality of automated vehicle tasks, functions and/or operations, wherein a first processing module of the plurality of processing modules is in an active mode, whereby the first processing module is in primary control of at least most automated vehicle tasks, functions and/or operations, and a second processing module of the plurality of processing modules is in a standby mode, whereby the second processing module is ready to assume primary control of the at least most automated vehicle tasks, functions and/or operations.

3. The vehicle of claim 2, wherein the first and second processing modules are in wireless communication with one another, and wherein a state of the second processing module is maintained substantially in synchronicity with a state of the first processing module to a enable a stateful failover from the first processing module to the second processing module.

4. The vehicle of claim 1, wherein the at least one automated vehicle task, function and/or operation comprises monitoring, controlling and/or operating a plurality of the following:

an engine and/or power control unit, transmission control unit (TCU), a door setting, a window setting, a blind spot monitor, an airbag deployment control unit, a collision sensor, a nearby object sensing system, a seat belt control unit, a sensor for a seat belt setting, a power source controller, an energy output sensor, an engine temperature sensor, oil pressure, hydraulic pressure, a headlight, an emergency light, a brake light, a parking light, a fog light, an interior and/or passenger compartment light, a tail light, a vehicle control system sensor, a wireless network, a cellular data sensor, a steering sensor, a torque sensor, an engine, power steering, a display panel, switch state control unit, and a brake control unit.

5. The vehicle of claim 1, wherein the at least one automated vehicle task, function and/or operation comprises monitoring, controlling and/or operating a plurality of the following:

an emissions system, a seating system controller and/or sensor, an entertainment system, monitoring an ambient (outdoor) weather sensor, an odometer reading sensor, a trip mileage reading sensor, a road condition sensor, a radar transmitter/receiver output, a brake wear sensor, an oxygen sensor, an ambient lighting sensor, a vision system sensor, a ranging sensor, a parking sensor, a heating, venting, and air conditioning (HVAC) system and/or sensor, a water sensor, a air-fuel ratio meter, a hall effect sensor, a microphone, a radio frequency (RF) sensor, and/or an infrared (IR) sensor.

6. The vehicle of claim 1, wherein the at least one processing module comprises first and second processing modules, wherein the first and second processing modules are duplicated, and further comprising an arbitration module to arbitrate hand-off conflicts between the duplicated first and second processing modules.

7. The vehicle of claim 6, wherein the arbitration module selects one of the first and second processing modules to currently possess and/or own a token, the token indicating at least one of (i) which processing module is an active processing module and/or which processing module is a standby processing module and (ii) which processing module is responsible for a selected set of processing tasks, functions, and/or operations associated with the token.

8. The vehicle of claim 1, wherein the health check module performs a check and/or test, in response to an internally generated interrupt and/or request to determine the at least one processing module'"'"'s ability to perform the at least one automated vehicle task, function, and/or operation.

9. The vehicle of claim 1, wherein a health check module assigns a score to the at least one processing module based on the check and/or test results, and/or compares the score to one or more thresholds and/or to a score of a different processing module to determine a relative and/or absolute state of health of the at least one processing module.

10. The vehicle of claim 1, wherein the at least one processing module comprises first and second processing modules, wherein the first and second processing modules are duplicated, and further comprising an arbitration module to arbitrate hand-off conflicts between the duplicated first and second processing modules wherein the arbitration module, based on the relative and/or absolute state of health of each of the first and second processing modules selects one of the first and second processing modules as a primary processing module in primary control of the at least one automated vehicle task, function and/or operation and the other of the first and second processing modules as a secondary processing module in standby mode.

11. The vehicle of claim 10, wherein a hand-off procedure is activated whereby primary control is passed from the first processing module to the secondary processing module and the first processing module enters the standby mode.

12. The vehicle of claim 9, wherein the at least one automated vehicle task, function, and/or operation comprises a plurality of automated vehicle tasks, functions, and/or operations and wherein the relative weighting of at least some tasks, functions and/or operations in assigning the score is a function of geographic location of the vehicle.

13. The vehicle of claim 2, wherein, for a first set of tasks, functions, and/or operations, the first processing module is in primary control and the second processing module is in standby mode and, for a different second set of tasks, functions, and/or operations, the second processing module is in primary control and the first processing module is in standby mode.

14. The vehicle of claim 2, wherein, in the standby mode, the second processing module at least one of (a) performs shadow processing of the at least most automated vehicle tasks, functions and/or operations and (b) synchronizes stored time-stamped processing state information with time-stamped processing state information regarding the at least most automated vehicle tasks, functions and/or operations.

15. A non-transient, tangible computer readable medium comprising microprocessor executable instructions that, when executed, determine a corresponding state of health of at least one processing module to perform at least one automated vehicle task, function, and/or operation.

16. The computer readable medium of claim 15, wherein the at least one processing module comprises first and second processing modules, wherein the at least one automated vehicle task, function, and/or operation comprises plural automated vehicle tasks, functions, and/or operations, wherein the microprocessor executable instructions, when executed, designate a first processing module as being in an active mode, whereby the first processing module is in primary control of at least most automated vehicle tasks, functions and/or operations, and a second processing module as being in a standby mode, whereby the second processing module is ready to assume primary control of the at least most automated vehicle tasks, functions and/or operations.

17. The computer readable medium of claim 16, wherein the first and second processing modules are in wireless communication with one another, and wherein a state of the second processing module is maintained substantially in synchronicity with a state of the first processing module to a enable a stateful failover from the first processing module to the second processing module.

18. The computer readable medium of claim 15, wherein the at least one automated vehicle task, function, and/or operation comprises monitoring, controlling and/or operating a plurality of the following:

an engine and/or power control unit, transmission control unit (TCU), a door setting, a window setting, a blind spot monitor, an airbag deployment control unit, a collision sensor, a nearby object sensing system, a seat belt control unit, a sensor for a seat belt setting, a power source controller, an energy output sensor, an engine temperature sensor, oil pressure, hydraulic pressure, a headlight, an emergency light, a brake light, a parking light, a fog light, an interior and/or passenger compartment light, a tail light, a vehicle control system sensor, a wireless network, a cellular data sensor, a steering sensor, a torque sensor, an engine, power steering, a display panel, switch state control unit, and a brake control unit.

19. The computer readable medium of claim 15, wherein the at least one automated vehicle task, function, and/or operation comprises monitoring, controlling and/or operating a plurality of the following:

an emissions system, a seating system controller and/or sensor, an entertainment system, monitoring an ambient (outdoor) weather sensor, an odometer reading sensor, a trip mileage reading sensor, a road condition sensor, a radar transmitter/receiver output, a brake wear sensor, an oxygen sensor, an ambient lighting sensor, a vision system sensor, a ranging sensor, a parking sensor, a heating, venting, and air conditioning (HVAC) system and/or sensor, a water sensor, a air-fuel ratio meter, a hall effect sensor, a microphone, a radio frequency (RF) sensor, and/or an infrared (IR) sensor.

20. The computer readable medium of claim 16, wherein the first and second processing modules are duplicated and further comprising an arbitration module to arbitrate hand-off conflicts between the duplicated first and second processing modules.

21. The computer readable medium of claim 20, wherein the arbitration module selects one of the first and second processing modules to currently possess and/or own a token, the token indicating at least one of (i) which processing module is an active processing module and/or which processing module is a standby processing module and (ii) which processing module is responsible for a selected set of processing tasks, functions, and/or operations associated with the token.

22. The computer readable medium of claim 16, wherein the first and second processing modules are duplicated and wherein the instructions perform a check and/or test, in response to an internally generated interrupt and/or request to determine a selected processing module'"'"'s ability to perform critical and/or non-critical vehicle tasks, functions, and/or operations.

23. The computer readable medium of claim 15, wherein the instructions, when executed, assign a score to the at least one processing module based on the check and/or test results and/or compare the score to one or more thresholds and/or to a score of a different processing module to determine a relative and/or absolute state of health of the at least one processing module.

24. The computer readable medium of claim 23, wherein the at least one processing module comprises first and second processing modules, wherein the at least one automated vehicle task, function, and/or operation comprises plural automated vehicle tasks, functions, and/or operations, wherein an arbitration module, based on the relative and/or absolute state of health of each of the first and second processing modules selects one of the first and second processing modules as a primary processing module in primary control of the at least most automated vehicle tasks, functions and/or operations and the other of the first and second processing modules as a secondary processing module in standby mode.

25. The computer readable medium of claim 24, wherein a hand-off procedure is activated whereby primary control is passed from the first processing module to the secondary processing module and the first processing module enters the standby mode.

26. The computer readable medium of claim 23, wherein the at least one automated vehicle task, function, and/or operation comprises plural automated vehicle tasks, functions, and/or operations and wherein the relative weighting of at least some tasks, functions and/or operations in assigning the score is a function of geographic location of the vehicle.

27. The computer readable medium of claim 16, wherein, for a first set of tasks, functions, and/or operations, the first processing module is in primary control and the second processing module is in standby mode and, for a different second set of tasks, functions, and/or operations, the second processing module is in primary control and the first processing module is in standby mode.

28. The computer readable medium of claim 16, wherein, in the standby mode, the second processing module at least one of (a) performs shadow processing of the at least most automated vehicle tasks, functions and/or operations and (b) synchronizes stored time-stamped processing state information with time-stamped processing state information regarding the at least most automated vehicle tasks, functions and/or operations.

29. A method comprising:

determining, by a microprocessor executable health check module, a corresponding state of health of at least one processing module to perform at least one automated vehicle task, function, and operation.

30. The method of claim 29, wherein the at least one processing module comprises first and second processing modules, wherein the at least one automated vehicle task, function, and/or operation comprises plural automated vehicle tasks, functions, and/or operations, wherein a microprocessor executable arbitration module designates a first processing module as being in an active mode, whereby the first processing module is in primary control of at least most automated vehicle tasks, functions and/or operations, and a second processing module as being in a standby mode, whereby the second processing module is ready to assume primary control of the at least most automated vehicle tasks, functions and/or operations.

31. The method of claim 30, wherein the first and second processing modules are in wireless communication with one another, and wherein a state of the second processing module is maintained substantially in synchronicity with a state of the first processing module to a enable a stateful failover from the first processing module to the second processing module.

32. The method of claim 29, wherein the at least one automated vehicle task, function, and/or operation comprises monitoring, controlling and/or operating a plurality of the following:

an engine and/or power control unit, transmission control unit (TCU), a door setting, a window setting, a blind spot monitor, an airbag deployment control unit, a collision sensor, a nearby object sensing system, a seat belt control unit, a sensor for a seat belt setting, a power source controller, an energy output sensor, an engine temperature sensor, oil pressure, hydraulic pressure, a headlight, an emergency light, a brake light, a parking light, a fog light, an interior and/or passenger compartment light, a tail light, a vehicle control system sensor, a wireless network, a cellular data sensor, a steering sensor, a torque sensor, an engine, power steering, a display panel, switch state control unit, and a brake control unit.

33. The method of claim 29, wherein the at least one automated vehicle task, function, and/or operation comprises monitoring, controlling and/or operating a plurality of the following:

an emissions system, a seating system controller and/or sensor, an entertainment system, monitoring an ambient (outdoor) weather sensor, an odometer reading sensor, a trip mileage reading sensor, a road condition sensor, a radar transmitter/receiver output, a brake wear sensor, an oxygen sensor, an ambient lighting sensor, a vision system sensor, a ranging sensor, a parking sensor, a heating, venting, and air conditioning (HVAC) system and/or sensor, a water sensor, a air-fuel ratio meter, a hall effect sensor, a microphone, a radio frequency (RF) sensor, and/or an infrared (IR) sensor.

34. The method of claim 30, wherein the first and second processing modules are duplicated and wherein the arbitration module arbitrates hand-off conflicts between the duplicated first and second processing modules.

35. The method of claim 34, wherein the arbitration module selects one of the first and second processing modules to currently possess and/or own a token, the token indicating at least one of (i) which processing module is an active processing module and/or which processing module is a standby processing module and (ii) which processing module is responsible for a selected set of processing tasks, functions, and/or operations associated with the token.

36. The method of claim 30, wherein the first and second processing modules are duplicated and wherein the instructions perform a check and/or test, in response to an internally generated interrupt and/or request to determine a selected processing module'"'"'s ability to perform critical and/or non-critical vehicle tasks, functions, and/or operations.

37. The method of claim 29, wherein the health check module assigns a score to the at least one processing module based on the check and/or test results and/or compares the score to one or more thresholds and/or to a score of a different processing module to determine a relative and/or absolute state of health of the at least one processing module.

38. The method of claim 37, wherein the at least one processing module comprises first and second processing modules, wherein the at least one automated vehicle task, function, and/or operation comprises plural automated vehicle tasks, functions, and/or operations, wherein an arbitration module, based on the relative and/or absolute state of health of each of the first and second processing modules selects one of the first and second processing modules as a primary processing module in primary control of the at least most automated vehicle tasks, functions and/or operations and the other of the first and second processing modules as a secondary processing module in standby mode.

39. The method of claim 38, wherein a hand-off procedure is activated whereby primary control is passed from the first processing module to the secondary processing module and the first processing module enters the standby mode.

40. The method of claim 37, wherein the at least one automated vehicle task, function, and/or operation comprises plural automated vehicle tasks, functions, and/or operations and wherein the relative weighting of at least some tasks, functions and/or operations in assigning the score is a function of geographic location of the vehicle.

41. The method of claim 30, wherein, for a first set of tasks, functions, and/or operations, the first processing module is in primary control and the second processing module is in standby mode and, for a different second set of tasks, functions, and/or operations, the second processing module is in primary control and the first processing module is in standby mode.

42. The method of claim 30, wherein, in the standby mode, the second processing module at least one of (a) performs shadow processing of the at least most automated vehicle tasks, functions and/or operations and (b) synchronizes stored time-stamped processing state information with time-stamped processing state information regarding the at least most automated vehicle tasks, functions and/or operations.