HANDLING FAULTS IN AUTONOMOUS VEHICLES
An autonomous vehicle's control systems include an A-kit module that operates autonomy logic to generate a desired trajectory from sensor data. A B-kit module receives the desired trajectory and generates inputs for actuators such as steering, brake and throttle actuators based on the desired trajectory. Safing logic (which may be located in the A-kit, B-kit, both the A-kit and the B-kit or elsewhere within or outside of the vehicle) receives a sensor fault indication and executes a contingency trajectory such as a safing maneuver to bring the vehicle to a safe state.
1 . An apparatus for controlling an autonomous vehicle comprising:
an A-kit module that receives sensor data and operates autonomy logic to generate a desired trajectory and a contingency trajectory that specifies a safing maneuver;
a B-kit module that receives the desired trajectory, and generates corresponding inputs for steering, brake and/or throttle actuators of the vehicle based on the desired trajectory; and
safing logic, configured to receive a sensor fault indication and the contingency trajectory, and configured to perform the safing maneuver to operate corresponding inputs for the steering, brake, and other throttle actuators to bring the vehicle to a safe state.
2 . The apparatus of claim 1 wherein:
the A-kit sends the contingency trajectory to the B-kit module; and
the B-kit module executes the safing logic to perform the contingency trajectory.
3 . The apparatus of claim 1 wherein:
the B-kit module receives secondary sensor data and operates reduced level autonomy logic within the safing logic to perform the safing maneuver.
4 . The apparatus of claim 3 wherein the secondary sensor data is received from an OEM sensor accessed via a Controller Area Network (CAN) bus on the vehicle.
5 . The apparatus of claim 1 wherein:
the safing logic receives commands for the safing maneuver received from a companion vehicle via a wireless V2V link.
6 . The apparatus of claim 5 wherein:
the commands are provided by autonomy logic in the companion vehicle.
7 . The apparatus of claim 5 wherein the commands are provided by a human located in the companion vehicle.
8 . The apparatus of claim 1 wherein the safing maneuver results in bringing the vehicle to a stop to a roadside or results in the vehicle following a companion vehicle.
9 . The apparatus of claim 1 additionally comprising:
a drone, initially carried on the vehicle or a companion vehicle and activated upon the fault indication, to receive drone sensor data and operate autonomy logic to generate a contingency trajectory, and to forward the contingency trajectory to the safing logic over a wireless link; and
wherein the safing logic receives the contingency trajectory from the drone over the wireless link, and executes the contingency trajectory to perform the safing maneuver.
10 . The apparatus of claim 9 wherein the contingency trajectory is generated on the B-kit module based on sensor data received from the drone.
11 . The apparatus of claim 1 wherein the fault is a one or more of a sensor fault, autonomy logic fault, or interface fault that results in an inability to continuously generate desired trajectories within a certain time interval.