IP Library › Granted Patent US 12,570,296
Granted Patent B2
US 12,570,296 · App. 17/642,739 · Granted Mar 10, 2026

Driving safety systems

Inventors: Ignacio J. Alvarez (Portland, OR); Florian Geissler (Munich, DE); Haitao Ji (Beijing, CN); Fei Li (Beijing, CN); Fabian Oboril (Karlsruhe, DE); Rafael Rosales (Unterhaching, DE); Kay-Ulrich Scholl (Malsch, DE); Xiangbin Wu (Beijing, CN); Xinxin Zhang (Beijing, CN); Zhiyuan Zhang (Beijing, CN); Qianying Zhu (Beijing, CN)
Assignee: Mobileye Vision Technologies Ltd.
B60W50/0098B60W60/0015B60W2050/0022B60W2050/0028B60W2530/00B60W2540/00B60W2555/20B60W2555/60B60W2556/40B60W2556/45
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,570,296
App. No.
17/642,739
Granted
Mar 10, 2026
Kind
B2
Abstract

A safety system ( 200 ) for a vehicle ( 100 ) is provided. The safety system ( 200 ) may include one or more processors ( 102 ). The one or more processors ( 102 ) may be configured to control a vehicle ( 100 ) to operate in accordance with the predefined stored driving model parameters, to detect vehicle operation data during the operation of the vehicle ( 100 ), to determine whether to change predefined driving model parameters based on the detected vehicle operation data and the driving model parameters, to change the driving model parameters to changed driving model parameters, and to control the vehicle ( 100 ) to operate in accordance with the changed driving model parameters.

Claims (118)

1 . A safety system of a vehicle, the safety system comprising:

one or more processors configured to

detect vehicle operation data during operation of the vehicle, wherein the vehicle operation data includes information associated with conditions detected in an environment of the vehicle including at least one distance between the vehicle and one or more objects in the environment of the vehicle;

determine one or more dangerous situations using the vehicle operation data in accordance with a predefined driving policy, wherein the one or more dangerous situations is based on the at least one distance between the vehicle and the one or more objects in the environment of the vehicle relative to at least one distance threshold;

classify the one or more dangerous situations into one or more predefined situation classes;

generate a situation report message comprising information about the one or more classified situation classes associated with a time information, wherein the time information indicates at which time a respective classified situation class occurred, and wherein the one or more classified situation classes is further associated with a location information indicating at which location a respective classified situation class occurred;

based on the generated situation report message, cause generation or updating of a digital risk map, wherein the digital risk map includes a representation of at least one region associated with the one or more dangerous situations, and wherein a point in the digital risk map is associated with a temperature vector including a criticality of one or more dangerous situations encountered at the point in the digital risk map; and

cause at least one of the vehicle or at least one second vehicle to be operated based on the digital risk map.

2 . The safety system of claim 1 ,

wherein the one or more processors are configured to implement a safety driving model.

3 . The safety system of claim 1 ,

wherein the one or more processors are configured to classify a dangerous situation of the one or more dangerous situations into a predefined situation class of the one or more predefined situation classes only if the dangerous situation has been determined for a predefined time period.

4 . The safety system of claim 1 ,

wherein the situation report message further comprises at least one of the following:

response information indicating how the safety system reacted on a dangerous situation of the one or more dangerous situations;

duration information indicating a time duration of a dangerous situation of the one or more dangerous situations;

criticality information indicating a severity measure of a dangerous situation of the one or more dangerous situations;

safety system parameters in effect during the dangerous situation;

vehicle parameters that impact actuation;

vehicle's observed variables.

5 . The safety system of claim 1 ,

wherein the one or more dangerous situations comprise a plurality of dangerous situations; and

wherein a probability of a dangerous situation is assigned to each dangerous situation of the plurality of dangerous situations.

6 . The safety system of claim 1 ,

wherein the one or more processors are configured to provide vehicle control information to control the vehicle in accordance with the digital risk map comprising one or more regions in which a probability of an associated dangerous situation is indicated.

7 . The safety system of claim 1 ,

wherein the one or more processors are further configured to control the vehicle to operate in accordance with a predefined stored driving model parameter set from a plurality of driving model parameter sets and a driving model, and

wherein the safety system further comprises a memory storing the plurality of driving model parameter sets, each driving model parameter set of the plurality of driving model parameter sets comprising a plurality of driving model parameters.

8 . The safety system of claim 7 ,

wherein the one or more processors are further configured to

determine whether to select a second stored driving model parameter set from the plurality of driving model parameter sets based on the detected vehicle operation data and the driving model parameter set from the plurality of driving model parameter sets;

select the driving model parameter set from the plurality of driving model parameter sets as a newly selected driving model parameter set; and

control the vehicle to operate in accordance with the newly selected driving model parameter set.

9 . The safety system of claim 8 ,

wherein the one or more processors are further configured to

check if the newly selected driving model parameter set meets with a safety guarantee in accordance with the driving model; and

use the newly selected driving model parameter set to control the vehicle to operate in accordance with the newly selected driving model parameter set only in case the newly selected driving model parameter set meets with a safety guarantee in accordance with the driving model.

10 . The safety system of claim 8 ,

wherein the one or more processors are further configured to negotiate with another device to select yet another driving model parameter set of the plurality of driving model parameter sets.

11 . The safety system of claim 7 ,

wherein at least some driving model parameter sets of the plurality of stored driving model parameter sets are associated with a driving lane characteristic;

wherein the one or more processors are further configured to

determine a driving lane characteristic of the driving lane the vehicle is driving on; and

select the driving model parameter set of the plurality of driving model parameter sets in accordance with the determined driving lane characteristic.

12 . The safety system of claim 7 ,

wherein the one or more processors are further configured to

determine a weighted combination of the detected vehicle operation data;

determine whether the weighted combination triggers a change of the driving model parameters to changed driving model parameters; and

control the vehicle to operate in accordance with the changed driving model parameters.

13 . The safety system of claim 12 ,

wherein the one or more processors are configured to

quantize the weighted combination of the detected vehicle operation data; and

determine whether the quantized weighted combination triggers a change of the driving model parameters to changed driving model parameters.

14 . The safety system of claim 12 ,

wherein the one or more processors are configured to check if the changed driving model parameters fulfill a predefined smoothness criterion, wherein the predefined smoothness criterion describes a smoothness of the change of the driving model parameters to the changed driving model parameters when controlling a control system of the vehicle to operate in accordance with the changed driving model parameters, and wherein the one or more processors are further configured to use the changed driving model parameters to control a control system of the vehicle to operate if the smoothness criterion is fulfilled.

15 . The safety system of claim 12 ,

wherein the one or more processors are configured to

check if the changed driving model parameters meet with a safety guarantee in accordance with the driving model; and

use the changed driving model parameters to control the control system of the vehicle to operate in accordance with the changed driving model parameters if the changed driving model parameters meet with a safety guarantee in accordance with the driving model.

16 . The safety system of claim 1 ,

wherein the vehicle operation data is selected from a group consisting of:

a current road condition of the road on which the vehicle is traveling;

a weather condition in an environment of the vehicle;

the digital risk map comprising one or more regions in which a probability of a dangerous situation is indicated;

a type of the vehicle;

a status of the vehicle;

a digital map; and

a passenger input.

17 . The safety system of claim 1 , wherein detecting vehicle operation data comprises:

using one or more image acquisition devices of the safety system of the vehicle to capture and analyze image data,

wherein the one or more image acquisition devices includes one or more cameras mounted on the vehicle.

18 . The safety system of claim 1 , wherein the at least one distance includes a longitudinal distance and a lateral distance between the vehicle and the one or more objects.

19 . The safety system of claim 1 , wherein the one or more dangerous situations includes a dangerous lateral situation, a dangerous longitudinal situation, or a combination of a dangerous longitudinal and dangerous lateral situation.

20 . A safety system server, the safety system server comprising:

one or more processors configured to

receive at least one situation report message comprising information about one or more classified situation classes associated with a time information, wherein the time information indicates at which time a respective classified situation class occurred, and wherein the one or more classified situation classes are determined by a safety system of a vehicle and further associated with a location information and vehicle operation data, wherein the location information indicates at which location a respective classified situation class occurred at the vehicle, and wherein the vehicle operation data includes information associated with conditions detected in an environment of the vehicle including at least one distance between the vehicle and one or more objects in the environment of the vehicle;

generate or update a digital risk map comprising one or more regions in which one or more probabilities of one or more dangerous situations is indicated, wherein a point in the digital risk map is associated with a temperature vector including a criticality of one or more dangerous situations encountered at the point in the digital risk map, wherein the digital risk map is generated or updated based on the received at least one situation report message, wherein at least one probability is assigned to at least one respective dangerous situation, wherein the one or more dangerous situations is based on the at least one distance between the vehicle and the one or more objects in the environment of the vehicle relative to at least one distance threshold; and

cause at least one of the vehicle or at least one second vehicle to be operated based on the digital risk map.

21 . The safety system server of claim 20 ,

wherein the one or more processors are configured to receive at least one situation report message from a plurality of vehicles, respectively.

22 . A method of operating a safety system of a vehicle, the method comprising:

detecting vehicle operation data during operation of the vehicle, wherein the vehicle operation data includes information associated with conditions detected in an environment of the vehicle including at least one distance between the vehicle and one or more objects in the environment of the vehicle;

determining one or more dangerous situations using the vehicle operation data in accordance with a predefined driving policy, wherein the one or more dangerous situations is based on the at least one distance between the vehicle and the one or more objects in the environment of the vehicle relative to at least one distance threshold;

classifying the one or more dangerous situations into one or more predefined situation classes;

generating a situation report message comprising information about the one or more classified situation classes associated with a time information, wherein the time information indicates at which time a respective classified situation class occurred, and wherein the one or more classified situation classes is further associated with a location information indicating at which location a respective classified situation class occurred;

based on the generated situation report message, cause generation or updating of a digital risk map, wherein the digital risk map includes a representation of at least one region associated with the one or more dangerous situations, and wherein a point in the digital risk map is associated with a temperature vector including a criticality of one or more dangerous situations encountered at the point in the digital risk map; and

cause at least one of the vehicle or at least one second vehicle to be operated based on the digital risk map.

23 . The method of claim 22 ,

the method further comprising implementing a safety driving model.

24 . The method of claim 22 ,

the method further comprising classifying a dangerous situation of the one or more dangerous situations into a predefined situation class of the one or more predefined situation classes only if the dangerous situation has been determined for a predefined time period.

25 . The method of claim 22 ,

wherein the situation report message further comprises at least one of the following:

response information indicating how the safety system reacted on a dangerous situation of the one or more dangerous situations;

duration information indicating a time duration of a dangerous situation of the one or more dangerous situations;

criticality information indicating a severity measure of a dangerous situation of the one or more dangerous situations;

safety system parameters in effect during the dangerous situation;

vehicle parameters that impact actuation;

vehicle's observed variables.

26 . The method of claim 22 ,

the method further comprising providing vehicle control information to control the vehicle in accordance with the digital risk map comprising one or more regions in which a probability of an associated dangerous situation is indicated.

27 . A non-transitory computer readable medium comprising executable instructions that when executed by at least one processing device cause the at least one processing device to perform operations comprising:

detecting vehicle operation data during operation of a vehicle, wherein the vehicle operation data includes information associated with conditions detected in an environment of the vehicle including at least one distance between the vehicle and one or more objects in the environment of the vehicle;

determining one or more dangerous situations using the vehicle operation data in accordance with a predefined driving policy, wherein the one or more dangerous situations is based on the at least one distance between the vehicle and the one or more objects in the environment of the vehicle relative to at least one distance threshold;

classifying the one or more dangerous situations into one or more predefined situation classes;

generating a situation report message comprising information about the one or more classified situation classes associated with a time information,

wherein the time information indicates at which time a respective classified situation class occurred, and wherein the one or more classified situation classes is further associated with a location information indicating at which location a respective classified situation class occurred;

based on the generated situation report message, cause generation or updating of a digital risk map, wherein the digital risk map includes a representation of at least one region associated with the one or more dangerous situations, and wherein a point in the digital risk map is associated with a temperature vector including a criticality of one or more dangerous situations encountered at the point in the digital risk map; and

cause at least one of the vehicle or at least one second vehicle to be operated based on the digital risk map.

28 . The non-transitory computer readable medium of claim 27 , the operations further comprising classifying a dangerous situation of the one or more dangerous situations into a predefined situation class of the one or more predefined situation classes only if the dangerous situation has been determined for a predefined time period.

29 . The non-transitory computer readable medium of claim 27 , wherein the situation report message further comprises at least one of the following:

response information indicating how the safety system reacted on a dangerous situation of the one or more dangerous situations;

duration information indicating a time duration of a dangerous situation of the one or more dangerous situations;

criticality information indicating a severity measure of a dangerous situation of the one or more dangerous situations;

safety system parameters in effect during the dangerous situation;

vehicle parameters that impact actuation;

vehicle's observed variables.

30 . The non-transitory computer readable medium of claim 27 , the operations further comprising providing vehicle control information to control the vehicle in accordance with the digital risk map comprising one or more regions in which a probability of an associated dangerous situation is indicated.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 22, 2023
From: INTEL CORPORATION
To: MOBILEYE VISION TECHNOLOGIES LTD.
Reel/Frame 062773/0766 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 31, 2022
From: ALVAREZ, IGNACIO J.; GEISSLER, FLORIAN; JI, HAITAO; LI, FEI; OBORIL, FABIAN; ROSALES, RAFAEL; SCHOLL, KAY-URLICH; WU, XIANGBIN; ZHANG, XINXIN; ZHANG, ZHIYUAN; ZHU, QIANYING
To: INTEL CORPORATION
Reel/Frame 059453/0125 →
Continuity (1)
Related Publication 20220324467A1 · Oct 13, 2022
References Cited (36)
US 20130131920A1 · Meitinger et al. · 2013 [cited by applicant]
US 20130218467A1 · Ogawa et al. · 2013 [cited by applicant]
US 20140330503A1 · Johansson et al. · 2014 [cited by applicant]
US 20150002808A1 · Rizzo, III · 2015 [cited by examiner]
US 20160117871A1 · McClellan · 2016 [cited by examiner]
US 20160288923A1 · Hausmann · 2016 [cited by examiner]
US 20160328647A1 · Lin · 2016 [cited by examiner]
US 20170137013A1 · Sato · 2017 [cited by applicant]
US 20180170375A1 · Jang et al. · 2018 [cited by applicant]
US 20180210464A1 · Switkes · 2018 [cited by examiner]
US 20180239359A1 · Jian · 2018 [cited by applicant]
US 20180285736A1 · Baum · 2018 [cited by examiner]
US 20180292222A1 · Lin · 2018 [cited by examiner]
US 20180339712A1 · Kislovskiy · 2018 [cited by examiner]
US 20190351899A1 · Adam · 2019 [cited by examiner]
US 20200004242A1 · Kim · 2020 [cited by examiner]
US 20210191407A1 · Benisch · 2021 [cited by examiner]
CN 102905916A · 2013 [cited by applicant]
CN 103998276A · 2014 [cited by applicant]
CN 104590263A · 2015 [cited by applicant]
CN 106740854A · 2017 [cited by applicant]
CN 106985656A · 2017 [cited by applicant]
EP 3159235A1 · 2017 [cited by applicant]
JP 2018167647A · 2018 [cited by applicant]
KR 102012550B1 · 2019 [cited by applicant]
KR 20190105172A · 2019 [cited by applicant]
Federal Highway Research Institute (BASt) et al.; “German In-Depth Accident Study—GIDAS”; https://www.gidas.org; 1 page; retrieved on Mar. 8, 2022. [cited by applicant]
United States Department of Transportation; https://crashstats.nhtsa.dot.gov; National Highway Traffic Safety Administration; 1 page; retrieved on Mar. 8, 2022. [cited by applicant]
Rostislav Netek et al., “Implementation of Heat Maps in Geographical Information System—Exploratory Study on Traffic Accident Data”, May 2, 2018, pp. 367-384, De Gruyter. [cited by applicant]
Shai Shalev-Shwartz et al.; “On a Formal Model of Safe and Scalable Self-driving Cars”; https://arxiv.org/abs/1708.06374; Mobileye; 2017; 37 pages. [cited by applicant]
David Nister et al.; “The Safety Force Field”; https://www.nvidia.com/content/dam/en-zz/Solutions/self-driving-cars/safety-force-field/thesafety-force-field.pdf; Mar. 2019; 24 pages; retrieved on Mar. 8, 2022. [cited by applicant]
Bernd Gasmann et al., “Towards Standardization of AV Safety: C++ Library for Responsibility Sensitive Safety”, Proceedings of the 2019 IEEE Intelligent Vehicles Symposium (IV), Jun. 9-12, 2019, pp. 2265-2281, IEEE, Pari… [cited by applicant]
International Search Report issued for the corresponding international patent application No. PCT/CN2019/129169 dated Sep. 17, 2020, 4 pages (for informational purpose only). [cited by applicant]
Extended European Search Report in counterpart European Patent Application No. 19957147.2 dated Jul. 26, 2023 (16 pages). [cited by applicant]
Examination Report in counterpart European Patent Application No. 19957147.2 dated Jun. 25, 2024 (8 pages). [cited by applicant]
Summons to attend oral proceedings pursuant to Rule 115(1) EPC of the European Patent Office in Application No. 19957147.2 dated Jul. 8, 2025 (17 pages). [cited by applicant]