Autonomous driving method, ads, and autonomous driving vehicle

1. An autonomous driving method performed by an autonomous driving system (ADS), the method comprising:

obtaining real-time physiological data of a vehicle occupant collected by a monitoring device;

comparing the obtained real-time physiological data with a healthy physiological data range, the healthy physiological data range being an applicable range added to an operational design domain (ODD) deployed on the ADS;

determining that a difference between the real-time physiological data and a healthy physiological data range exceeds a preset value and that a duration for which the real-time physiological data deviates from the healthy physiological data range exceeds a preset duration;

degrading, in response to the determining, an autonomous driving service being executed by an autonomous vehicle;

executing a first driving policy based on the determined difference between the real-time physiological data and the healthy physiological data range and the determined duration for which the real-time physiological data deviates from the healthy physiological data range; and

after executing the first driving policy:

determining that the real-time physiological data does not return to the healthy physiological data range within a second preset duration,

sending, in response to the determining that the real-time physiological data does not return to the healthy physiological data range within the second preset duration, an authorization request, and

executing a second driving policy in response to the vehicle occupant or another vehicle occupant accepting the authorization request.

2. The method according to claim 1 , wherein the second driving policy comprises:

stopping on a roadside, calling for a rescue, establishing a communication connection to a medical institution, planning a traveling path between the autonomous driving vehicle and the medical institution, reserving a medical resource, and/or requesting to arrange an emergency medical treatment channel.

3. The method according to claim 1 , wherein an autonomous driving level is L4 or L5, and the step of executing the first driving policy based on the determined difference between the real-time physiological data and the healthy physiological data range and the determined duration for which the real-time physiological data deviates from the healthy physiological data range comprises:

determining a health level of the vehicle occupant based on the determined difference between the real-time physiological data and the healthy physiological data range and the determined duration for which the real-time physiological data deviates from the healthy physiological data range; and

executing the first driving policy based on the health level when determining that the health level is a mild abnormality, wherein the first driving policy comprises controlling, by the ADS, the autonomous driving vehicle to: decrease a speed to be lower than a preset speed, travel on a roadside, and/or turn on a hazard warning signal light.

4. The method according to claim 3 , further comprising:

executing the first driving policy based on the health level when determining that the health level is a severe abnormality, wherein the first driving policy comprises controlling, by the ADS, the autonomous driving vehicle to: slowly decrease the speed to zero, stop on a roadside, turn on a hazard warning signal light, run at an idle speed, turn on an external circulation of the vehicle, turn on an internal circulation of the vehicle, set an in-vehicle target temperature, and/or unlock a central door lock.

5. The method according to claim 1 , wherein an autonomous driving level is L3, and the step of executing the first driving policy based on the determined difference between the real-time physiological data and the healthy physiological data range and the determined duration for which the real-time physiological data deviates from the healthy physiological data range comprises:

making the ADS invariably occupy control permission of the autonomous driving vehicle;

determining a health level of the vehicle occupant based on the determined difference between the real-time physiological data and the healthy physiological data range and the determined duration for which the real-time physiological data deviates from the healthy physiological data range; and

executing the first driving policy based on the health level when determining that the health level is a mild abnormality, wherein the first driving policy comprises controlling, by the ADS, the autonomous driving vehicle to: decrease a speed to be lower than a preset speed, travel on a roadside, and/or turn on a hazard warning signal light.

6. The method according to claim 5 , further comprising:

executing the first driving policy based on the health level when determining that the health level is a severe abnormality, wherein the first driving policy comprises controlling, by the ADS, the autonomous driving vehicle to: slowly decrease the speed to zero, stop on a roadside, turn on a hazard warning signal light, run at an idle speed, turn on an external circulation of the vehicle, turn on an internal circulation of the vehicle, set an in-vehicle target temperature, and/or unlock a central door lock.

7. The method according to claim 1 , wherein after the step of executing the first driving policy based on the determined difference between the real-time physiological data and the healthy physiological data range and the determined duration for which the real-time physiological data deviates from the healthy physiological data range, the method further comprises:

controlling the autonomous driving vehicle to resume execution of the autonomous driving service when the real-time physiological data is restored to fall within the health physiological data range within the second preset duration.

8. The method according to claim 1 , further comprising:

generating an event log based on the real-time physiological data, wherein the event log records the real-time physiological data and an operation of the ADS during a period when the real-time physiological data deviates from the healthy physiological data range; and

periodically reporting the event log to a cloud server corresponding to the autonomous driving vehicle.

9. The method according to claim 1 , wherein the real-time physiological data comprises:

real-time blood pressure, a real-time heart rate, real-time blood oxygen, and/or a real-time body temperature of the vehicle occupant.

10. An autonomous driving system (ADS) comprising:

a memory storing executable instructions; and

a processor configured to execute the executable instructions so as to:

obtain real-time physiological data of a vehicle occupant collected by a monitoring device,

compare the obtained real-time physiological data with a healthy physiological data range, the healthy physiological data range being an applicable range added to an operational design domain (ODD) deployed on the ADS;

determine that a difference between the real-time physiological data and a healthy physiological data range exceeds a preset value and that a duration for which the real-time physiological data deviates from the healthy physiological data range exceeds a preset duration;

degrade, in response to the determining, an autonomous driving service being executed by an autonomous vehicle, and

execute a first driving policy based on the determined difference between the real-time physiological data and the healthy physiological data range and the determined duration for which the real-time physiological data deviates from the healthy physiological data range; and

after executing the first driving policy:

determine that the real-time physiological data does not return to the healthy physiological data range within a second preset duration,

send, in response to the determining that the real-time physiological data does not return to the healthy physiological data range within the second preset duration, an authorization request, and

execute a second driving policy in response to the vehicle occupant or another vehicle occupant accepting the authorization request.

11. The ADS according to claim 10 , wherein the second driving policy comprises:

stopping on a roadside, calling for a rescue, establishing a communication connection to a medical institution, planning a traveling path between the autonomous driving vehicle and the medical institution, reserving a medical resource, and/or requesting to arrange an emergency medical treatment channel.

12. The ADS according to claim 10 , wherein an autonomous driving level is L4 or L5, and the processor is configured to execute the first driving policy by:

determining a health level of the driver/passenger based on the determined difference between the real-time physiological data and the healthy physiological data range and the determined duration for which the real-time physiological data deviates from the healthy physiological data range; and

executing the first driving policy based on the health level when determining that the health level is a mild abnormality, wherein the first driving policy comprises controlling, by the ADS, the autonomous driving vehicle to: decrease a speed to be lower than a preset speed, travel on a roadside, or turn on a hazard warning signal light.

13. The ADS according to claim 12 , wherein the processor is further configured to execute the executable instructions to:

execute the first driving policy based on the health level when determining that the health level is a severe abnormality, wherein the first driving policy comprises controlling, by the ADS, the autonomous driving vehicle to slowly decrease the speed to zero, stop on a roadside, turn on a hazard warning signal light, run at an idle speed, turn on an external circulation of the vehicle, turn on an internal circulation of the vehicle, set an in-vehicle target temperature, and/or unlock a central door lock.

14. The ADS according to claim 10 , wherein an autonomous driving level is L3, and the processor is configured to execute the first driving policy by:

making the ADS invariably occupy control permission of the autonomous driving vehicle;

determining a health level of the driver/passenger based on the determined difference between the real-time physiological data and the healthy physiological data range and the determined duration for which the real-time physiological data deviates from the healthy physiological data range; and

executing the first driving policy based on the health level when determining that the health level is a mild abnormality, wherein the first driving policy comprises controlling, by the ADS, the autonomous driving vehicle to: decrease a speed to be lower than a preset speed, travel on a roadside, or turn on a hazard warning signal light.

15. The ADS according to claim 14 , wherein the processor is further configured to execute the executable instructions to:

execute the first driving policy based on the health level when determining that the health level is a severe abnormality, wherein the first driving policy comprises controlling, by the ADS, the autonomous driving vehicle to: slowly decrease the speed to zero, stop on a roadside, turn on a hazard warning signal light, run at an idle speed, turn on an external circulation of the vehicle, turn on an internal circulation of the vehicle, set an in-vehicle target temperature, and/or unlock a central door lock.

16. The ADS according to claim 10 , wherein the processor is further configured to execute the executable instructions to:

control the autonomous driving vehicle to resume execution of the autonomous driving service when the real-time physiological data is restored to fall within the health physiological data range within the second preset duration.

17. The ADS according to claim 10 , wherein the processor is further configured to execute the executable instructions to:

generate an event log based on the real-time physiological data, wherein the event log records the real-time physiological data and an operation of the ADS during a period when the real-time physiological data deviates from the health physiological data range; and

periodically report the event log to a cloud server corresponding to the autonomous driving vehicle.

18. The ADS according to claim 10 , wherein the real-time physiological data comprises: real-time blood pressure, a real-time heart rate, real-time blood oxygen, or a real-time body temperature of the vehicle occupant.