IP Library Granted Patent US 12,007,766
Granted Patent B2
US 12,007,766 · App. 17/027,001 · Granted Jun 11, 2024

Secure communication between vehicle components via bus guardians

Inventors: Helen Ruth Lurie (San Francsico, CA); George James Hansel (Redwood City, CA); James Allen-White Hoffacker (San Carlos, CA); Osama M. Salem (San Jose, CA)
Assignee: Woven by Toyota, U.S., Inc.
G05D1/0061B60W50/14G05D1/0077H04L9/14H04L67/12B60W2050/146H04L2012/40215H04L2012/40273
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,007,766
App. No.
17/027,001
Granted
Jun 11, 2024
Kind
B2
Abstract

In particular embodiments, a computing system may receive, by a processor in communication with an actuator of a vehicle, an instruction associated with an environment external to the vehicle and configured for controlling the actuator of the vehicle. The system may receive, by the processor, sensor data associated with the environment and generated by one or more sensors associated with the vehicle. The system may determine, by the processor, a state associated with an operation mode of the vehicle based on the received sensor data. The system may evaluate, by the processor, whether the instruction is invalid based on the state associated with the operating mode of the vehicle. The system may, subsequent to determining that the instruction is invalid, based on the evaluation, prevent transmission of the instruction to the actuator of the vehicle.

Claims (51)

1. A method comprising:

receiving, by a processor in communication with an actuator of a vehicle, an instruction associated with an environment external to the vehicle and configured for controlling the actuator of the vehicle;

receiving, by the processor, sensor data associated with the environment and generated by one or more sensors associated with the vehicle;

determining, by the processor, a state associated with an operation mode of the vehicle based on the sensor data;

evaluating, by the processor, whether the instruction is invalid based on the state associated with the operating mode of the vehicle; and

subsequent to determining that the instruction is invalid, based on the evaluation, preventing transmission of the instruction to the actuator of the vehicle.

2. The method of claim 1 , further comprising:

subsequent to evaluating that the instruction is invalid, causing an indication of the instruction to be signaled; or

altering the operating mode of the vehicle from an autonomous driving mode to a manual driving mode.

3. The method of claim 1 , wherein the instruction is configured for controlling the actuator of the vehicle, and a movement of the vehicle is responsive to the actuator receiving the instruction.

4. The method of claim 1 , further comprising sending, by the processor, the instruction to the actuator of the vehicle via one or more non-redundant communication networks subsequent to determining that the instruction is valid.

5. The method of claim 1 , further comprising:

subsequent to evaluating that the instruction is invalid, receiving one or more second instructions from one or more redundant communication networks; and

evaluating the instruction based on the one or more second instructions received from the one or more redundant communication networks.

6. The method of claim 1 , further comprising:

generating a second instruction by the processor based on one or more pre-determined instruction generating rules; and

evaluating the instruction based on the second instruction generated by the processor.

7. The method of claim 1 , wherein the instruction is determined to be invalid based on an inconsistency of the instruction with respect to the state associated with the operating mode of the vehicle.

8. The method of claim 1 , wherein the instruction is determined to be invalid based on one or more pre-determined rules, wherein each pre-determined rule is associated with a scenario encountered by the vehicle in a surrounding environment, and wherein that pre-determined rule is associated with one or more pre-determined actions for the vehicle to take under the scenario.

9. The method of claim 1 , wherein the instruction is determined to be invalid upon determining that the instruction has an authentication issue, further comprising:

subsequent to the determination that the instruction has the authentication issue, causing a second processor to stop receiving or transmitting subsequent instructions.

10. The method of claim 9 , further comprising:

subsequent to determining that the instruction has the authentication issue, disconnecting the processor and one or more second processors from one or more communication networks connected to the vehicle.

11. The method of claim 1 , further comprising:

storing the state of the vehicle and associated configurations, settings, and events into a computer storage; and

analyzing data packets of the instruction based on the state of the vehicle and the associated configurations, settings, and events stored in the computer storage.

12. The method of claim 1 , wherein the state of the vehicle is based on one or more parameters associated with the vehicle or a surrounding environment of the vehicle, the parameters comprising one or more of: a vehicle velocity, a vehicle moving direction, a vehicle acceleration, a vehicle position, a vehicle configuration, a vehicle operation mode, a battery level, a fuel level, a tire condition, a brake condition, a sensor condition, an odometer parameter, a navigation parameter, or a passenger input.

13. A system associated with an actuator of a vehicle comprising:

one or more processors in communication with the actuator; and

one or more computer-readable non-transitory storage media in communication with the one or more processors that are in communication with the actuator, the one or more computer-readable non-transitory storage media comprising instructions operable, when executed by the one or more processors, to cause the system associated with the actuator, to perform operations comprising:

receiving, by a processor of the one or more processors in communication with an actuator of a vehicle, an instruction associated with an environment external to the vehicle and configured for controlling the actuator of the vehicle;

receiving, by the processor, sensor data associated with the environment and generated by one or more sensors associated with the vehicle;

determining, by the processor, a state associated with an operation mode of the vehicle based on the sensor data;

evaluating, by the processor, whether the instruction is invalid based on the state associated with the operating mode of the vehicle; and

subsequent to determining that the instruction is invalid, based on the evaluation, preventing transmission of the instruction to the actuator of the vehicle.

14. The system of claim 13 , wherein the system is further configured to perform operations comprising:

subsequent to evaluating that the instruction is invalid, causing an indication of the instruction to be signaled; or

altering the operating mode of the vehicle from an autonomous driving mode to a manual driving mode.

15. The system of claim 13 , wherein the instruction is configured for controlling the actuator of the vehicle, and a movement of the vehicle is responsive to the actuator receiving the instruction.

16. The system of claim 13 , wherein the system is further configured to perform operations comprising sending, by the processor, the instruction to the actuator of the vehicle via one or more non-redundant communication networks subsequent to determining that the instruction is valid.

17. One or more computer-readable non-transitory storage media embodying software that is operable, when executed, to cause one or more processors in communication with an actuator of a vehicle to perform operations comprising:

receiving, by a processor in communication with an actuator of a vehicle, an instruction associated with an environment external to the vehicle and configured for controlling the actuator of the vehicle;

receiving, by the processor, sensor data associated with the environment and generated by one or more sensors associated with the vehicle;

determining, by the processor, a state associated with an operation mode of the vehicle based on the sensor data;

evaluating, by the processor, whether the instruction is invalid based on the state associated with the operating mode of the vehicle; and

subsequent to determining that the instruction is invalid, based on the evaluation, preventing transmission of the instruction to the actuator of the vehicle.

18. The one or more computer-readable non-transitory storage media of claim 17 , further embodying software to perform operations comprising:

subsequent to evaluating that the instruction is invalid, causing an indication of the instruction to be signaled; or

altering the operating mode of the vehicle from an autonomous driving mode to a manual driving mode.

19. The one or more computer-readable non-transitory storage media of claim 17 , wherein the instruction is configured for controlling the actuator of the vehicle, and a movement of the vehicle is responsive the actuator receiving the instruction.

20. The one or more computer-readable non-transitory storage media of claim 17 , wherein the software is further configured to perform operations comprising sending, by the processor, the instruction to the actuator of the vehicle via one or more non-redundant communication networks subsequent to determining that the instruction is valid.

Assignments (3)
CHANGE OF NAME Recorded Jun 22, 2023
From: WOVEN PLANET NORTH AMERICA, INC.
To: WOVEN BY TOYOTA, U.S., INC.
Reel/Frame 064065/0601 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 20, 2021
From: LYFT, INC.; BLUE VISION LABS UK LIMITED
To: WOVEN PLANET NORTH AMERICA, INC.
Reel/Frame 056927/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 12, 2021
From: LYFT, INC.; MAGNA AUTONOMOUS SYSTEMS, LLC
To: LYFT, INC.; MAGNA AUTONOMOUS SYSTEMS, LLC
Reel/Frame 057434/0623 →
Continuity (2)
Continuation 15959130 · Apr 20, 2018
Related Publication 20210072747A1 · Mar 11, 2021