Detection of latent failures in autonomous vehicles based on performance and operational status of a vehicle
Systems and techniques are described for how to augment failure detection of a vehicle to detect failures that would otherwise go undetected by the control system of the vehicle, and to mitigate such failures when detected. Performance of the vehicle is observed over time, and based on these observations, the systems and methods determine whether the vehicle is exhibiting a performance characteristic that is indicative of a failure. If so, and if the control system does not identify the failure, then the system generates response data that causes the control system of the vehicle to respond to the performance characteristic that is indicative of the failure.
1 . A computer-implemented method, comprising:
receiving, by a data processing apparatus and for a vehicle, status data describing performance and operational status of the vehicle while in operation, wherein the data processing apparatus is a system that is separate from the vehicle and communicates with the vehicle by a wireless communication link;
accessing, by the data processing apparatus, a control policy for the vehicle that describes a range of actions for the vehicle that are acceptable for autonomous control and failure modes;
determining, by the data processing apparatus, based on the performance described by the status data, whether the vehicle is exhibiting a performance characteristic that is indicative of a failure;
in response to determining that the vehicle is exhibiting a performance characteristic that is indicative of a failure, determining, by the data processing apparatus, based on the operational status described by the status data, whether a control system of the vehicle has detected a failure in response to the exhibited performance characteristic;
in response to determining that the control system of the vehicle has not detected a failure in response to the exhibited performance characteristic, generating, by the data processing apparatus, for the control system of the vehicle, response data that causes the control system of the vehicle to respond to the performance characteristic that is indicative of the failure; and
providing, by the data processing apparatus, the response data to the control system of the vehicle;
wherein the data processing apparatus receives status data for a plurality of vehicles and generates respective response data for each of the plurality of vehicles, and further comprising:
determining, for each vehicle of the plurality of vehicles, a make and model of the vehicle;
providing, to respective manufactures of each of the plurality of vehicles for which respective response data is provided:
the status data describing performance and operational status of the vehicle while in operation;
the determined performance characteristic exhibited for the vehicle that is indicative of a failure; and
the response data generated for the vehicle.
2 . The computer-implemented method of claim 1 , wherein:
the response data comprises alert data that includes data indicating the performance characteristic is indicative of a failure; and
the alert data causes the control system of the vehicle to generate an alert that notifies a driver of the vehicle that the performance characteristic is indicative of a failure.
3 . The computer-implemented method of claim 2 , wherein:
the response data further comprises remediation data that causes the control system to adjust performance of the vehicle to mitigate the performance characteristic that is indicative of a failure.
4 . The computer-implemented method of claim 1 , wherein:
the response data comprises remediation data that causes the control system to adjust performance of the vehicle to mitigate the performance characteristic that is indicative of a failure.
5 . The computer-implemented method of claim 4 , wherein the remediation data causes the control system to adjust performance of the vehicle to mitigate the performance characteristic by causing the vehicle to traverse to a safe harbor region and park at the safe harbor region.
6 . The computer-implemented method of claim 4 , wherein the remediation data causes the control system to adjust performance of the vehicle to mitigate the performance characteristic by causing the vehicle to compensate in a manner that reduces the performance characteristic while continuing travel.
7 . A system, comprising:
a data processing apparatus comprising one or more computers;
a non-transitory computer readable medium storing instructions executable by a data processing apparatus and that upon such execution cause the data processing apparatus to perform operations comprising:
receiving, by a data processing apparatus and for a vehicle, status data describing performance and operational status of the vehicle while in operation, wherein the data processing apparatus is a system that is separate from the vehicle and communicates with the vehicle by a wireless communication link;
accessing, by the data processing apparatus, a control policy for the vehicle that describes a range of actions for the vehicle that are acceptable for autonomous control and failure modes;
determining, by the data processing apparatus, based on the performance described by the status data, whether the vehicle is exhibiting a performance characteristic that is indicative of a failure;
in response to determining that the vehicle is exhibiting a performance characteristic that is indicative of a failure, determining, by the data processing apparatus, based on the operational status described by the status data, whether a control system of the vehicle has detected a failure in response to the exhibited performance characteristic;
in response to determining that the control system of the vehicle has not detected a failure in response to the exhibited performance characteristic, generating, by the data processing apparatus, for the control system of the vehicle, response data that causes the control system of the vehicle to respond to the performance characteristic that is indicative of the failure; and
providing, by the data processing apparatus, the response data to the control system of the vehicle;
wherein the data processing apparatus receives status data for a plurality of vehicles and generates respective response data for each of the plurality of vehicles, and further comprising:
determining, for each vehicle of the plurality of vehicles, a make and model of the vehicle;
providing, to respective manufactures of each of the plurality of vehicles for which respective response data is provided:
the status data describing performance and operational status of the vehicle while in operation;
the determined performance characteristic exhibited for the vehicle that is indicative of a failure; and
the response data generated for the vehicle.
8 . The system of claim 7 , wherein:
the response data comprises alert data that includes data indicating the performance characteristic is indicative of a failure; and
the alert data causes the control system of the vehicle to generate an alert that notifies a driver of the vehicle that the performance characteristic is indicative of a failure.
9 . The system of claim 8 , wherein:
the response data further comprises remediation data that causes the control system to adjust performance of the vehicle to mitigate the performance characteristic that is indicative of a failure.
10 . The system of claim 7 , wherein:
the response data comprises remediation data that causes the control system to adjust performance of the vehicle to mitigate the performance characteristic that is indicative of a failure.
11 . The system of claim 10 , wherein the remediation data causes the control system to adjust performance of the vehicle to mitigate the performance characteristic by causing the vehicle to traverse to a safe harbor region and park at the safe harbor region.
12 . The system of claim 10 , wherein the remediation data causes the control system to adjust performance of the vehicle to mitigate the performance characteristic by causing the vehicle to compensate in a manner that reduces the performance characteristic while continuing travel.
13 . A non-transitory computer readable medium storing instructions executable by a data processing apparatus and that upon such execution cause the data processing apparatus to perform operations comprising:
receiving, for a vehicle, status data describing performance and operational status of the vehicle while in operation, wherein the data processing apparatus is a system that is separate from the vehicle and communicates with the vehicle by a wireless communication link;
accessing a control policy for the vehicle that describes a range of actions for the vehicle that are acceptable for autonomous control and failure modes;
determining based on the performance described by the status data, whether the vehicle is exhibiting a performance characteristic that is indicative of a failure;
in response to determining that the vehicle is exhibiting a performance characteristic that is indicative of a failure, determining based on the operational status described by the status data, whether a control system of the vehicle has detected a failure in response to the exhibited performance characteristic;
in response to determining that the control system of the vehicle has not detected a failure in response to the exhibited performance characteristic, generating, for the control system of the vehicle, response data that causes the control system of the vehicle to respond to the performance characteristic that is indicative of the failure; and
providing the response data to the control system of the vehicle;
wherein the data processing apparatus receives status data for a plurality of vehicles and generates respective response data for each of the plurality of vehicles, and further comprising:
determining, for each vehicle of the plurality of vehicles, a make and model of the vehicle;
providing, to respective manufactures of each of the plurality of vehicles for which respective response data is provided:
the status data describing performance and operational status of the vehicle while in operation;
the determined performance characteristic exhibited for the vehicle that is indicative of a failure; and
the response data generated for the vehicle.