Fault tolerant autonomous vehicle platform

1. A system for detecting faults in autonomous vehicle operation, the system comprising:

a vehicle component monitor configured to:

monitor data activity of a vehicle component of an autonomous vehicle, including monitoring communications to and from the vehicle component;

generate a normal operation model for the vehicle component based on one or more data patterns in the monitored data activity, wherein the one or more data patterns characterize valid operation of the vehicle component;

detect anomalous data activity using the normal operation model for the vehicle component;

determine whether the communications to and from the vehicle component are authorized; and

transmit a message indicating that a fault has been detected in the vehicle component based on the detection of anomalous activity or the determination of an unauthorized communication; and

a fault detection module configured to:

receive the message from the vehicle component monitor;

isolate the vehicle component; and

identify at least one redundant component that performs the same function as the vehicle component, and offload a workload of the vehicle component for which a fault has been detected to the at least one redundant component.

2. The system of claim 1 , wherein the fault detection module is further configured to restart the isolated vehicle component.

3. The system of claim 2 , wherein the fault detection module is further configured to:

store vehicle component metadata for the vehicle component based on the detected anomalous data activity; and

initialize the restarted vehicle component using the stored metadata.

4. The system of claim 1 , wherein:

the vehicle component monitor is further configured to analyze the data activity of the vehicle component using a system behavior specification; and

the detecting anomalous data activity comprises determining that data activity of the vehicle component does not conform to the system behavior specification.

5. The system of claim 4 , wherein the vehicle component monitor is further configured to:

generate a test using the system behavior specification; and

execute the generated test to validate the functionality of the vehicle component.

6. The system of claim 1 , wherein:

the detecting anomalous data activity comprises detecting anomalous activity of an application of the vehicle component; and

the vehicle component monitor is further configured to determine, based on the anomalous activity of the application, that the application of the vehicle component is in a fail state.

7. The system of claim 6 , wherein the fault detection module is further configured to:

stop the execution of the application on the vehicle component; and

start another execution of the application on another vehicle component.

8. A computing device comprising a processor and a memory storing executable instructions that, when executed by the processor, cause the computing device to perform operations, the operations comprising:

monitoring data activity for a vehicle component of an autonomous vehicle, including monitoring communications to and from the vehicle component;

analyzing the monitored vehicle component data activity using a system behavior specification for the autonomous vehicle, wherein the analyzing determines, based at least in part on a current state of the monitored vehicle component, whether at least one communication of the monitored vehicle component is not authorized;

determining that the monitored vehicle component data activity does not conform to the system behavior specification;

taking the vehicle component offline; and

identifying at least one redundant component that performs the same function as the vehicle component taken offline, and offloading a workload of the vehicle component taken offline to the at least one redundant component.

9. The computing device of claim 8 , wherein the operations further comprise restarting the offline vehicle component.

10. The computing device of claim 9 , wherein the operations further comprise:

storing vehicle component metadata based on the analyzed vehicle component data activity; and

initializing the restarted vehicle component using the stored metadata.

11. The computing device of claim 8 , wherein the operations further comprise:

generating a test using the system behavior specification; and

using the generated test to determine that the monitored vehicle component data activity does not conform to the system behavior specification.

12. The computing device of claim 8 , wherein the operations further comprise:

determining that an application of the vehicle component is in a fail state; and restarting the application.

13. The computing device of claim 12 , wherein restarting the application comprises:

stopping the execution of the application on the offline vehicle component; and

starting another execution of the application on another vehicle component.

14. The computing device of claim 8 , wherein the operations further comprise:

generating a normal operation model for the vehicle component based on the monitored data activity; and

detecting anomalous data activity using the normal operation model for the vehicle component.

15. A method for detecting faults in autonomous vehicle operation, the method comprising:

monitoring data activity for a plurality of vehicle components of an autonomous vehicle, including monitoring communications to and from the plurality of vehicle components;

determining, based at least in part on a current state of the plurality of vehicle components, whether the communications are authorized;

identifying, based at least in part on the monitored data activity, a pattern for normal operation of the autonomous vehicle, wherein the pattern characterizes valid operation of the autonomous vehicle;

detecting vehicle component data activity that deviates from the identified pattern for normal operation of the autonomous vehicle;

determining that a fault has occurred in a vehicle component, of the vehicle components, based on a determination that a communication is not authorized or the detection of data activity that deviates from the identified pattern for normal operation;

identifying at least one redundant component that performs the same function as the vehicle component for which a fault has occurred, and offloading a workload of the vehicle component for which a fault has occurred to the at least one redundant component;

restarting the vehicle component for which a fault has occurred; and

initializing the restarted vehicle component.

16. The method of claim 15 , further comprising:

storing vehicle component metadata based on the detected vehicle component activity; and

initializing the restarted vehicle component using the stored metadata.

17. The method of claim 15 , further comprising:

analyzing the monitored vehicle component data activity using a system behavior specification; and

wherein the determining that a fault has occurred in the vehicle component comprises determining that the detected vehicle component data activity does not conform to the system behavior specification.

18. The method of claim 17 , further comprising:

generating a software test program using the system behavior specification; and

executing the generated software test program to test the vehicle component.

19. The method of claim 15 , wherein:

determining that the fault has occurred in the vehicle component comprises determining that an application of the vehicle component is in a fail state; and

the method further comprises restarting the application.

20. The method of claim 19 , wherein restarting the application comprises:

stopping the execution of the application on the vehicle component; and starting another execution of the application on another vehicle component.