Determination of reliability of vehicle control commands using a voting mechanism

1. A method, comprising:

receiving, in a controller, multiple commands respectively from multiple computing devices configured on an autonomous system;

determining, by the controller, vote counts for the multiple commands;

identifying, by the controller from the multiple commands, a first command having a winning vote count that satisfies a predetermined condition;

forwarding, from the controller, the first command for execution in the autonomous system, wherein the first command has the winning vote count when a vote count of the first command is above a threshold; and

comparing content retrieved from the memory of the first computing device with content retrieved from a memory of a second computing device among the multiple computing devices, the first command is provided from the second computing device.

2. The method of claim 1 , wherein the threshold is more than half of a count of the multiple computing devices.

3. The method of claim 1 , wherein the threshold is less than half of a count of the multiple computing devices.

4. The method of claim 1 , further comprising:

stopping matching the multiple commands with each other to identify additional matches within the multiple commands in response to a determination that the first command has a vote count that is above the threshold.

5. The method of claim 1 , further comprising:

in response to a determination that within the multiple commands there is a tie in winning vote count between two commands that do not match with each other, initiating tests of at least a portion of the multiple computing devices.

6. The method of claim 5 , wherein the portion includes tested devices that output commands, among the multiple commands received in the controller, that match any of the two commands having the tie.

7. The method of claim 6 , further comprising:

testing memories of the tested devices within the portion; and

breaking the tie based on a failed memory test in the tested devices.

8. The method of claim 7 , wherein the testing comprises:

testing the memories of the tested devices in parallel, section by section to identify a second command, in the two commands having the tie and generated by a computing device that failed a memory test.

9. The method of claim 1 , wherein the forwarding is performed before completion of matching in identifying all possible matches within the multiple commands and is in response to a determination that the first command has a vote count that is above the threshold.

10. The method of claim 9 , further comprising:

after the forwarding, continuing the matching to identify, among the multiple commands, a second command that does not match the first command; and

testing a memory of a first computing device among the multiple computing devices, wherein the second command is provided from the first computing device to the command controller.

11. The method of claim 10 , further comprising:

copying a portion of the content from the second computing device to the first computing device to replace a corresponding portion of the content previously stored in the first computing device in repairing a redundant function of the first computing device in producing commands to the command controller.

12. The method of claim 1 , further comprising:

skipping memory tests of the multiple computing devices in response to a determination that the first command has the winning vote count.

13. A system, comprising:

multiple computing devices having redundant functions in generating multiple commands during autonomous operations of the system to select a command to be effectuated by the system;

a controller coupled to the multiple computing devices, wherein the controller is configured to, in response to receiving the multiple commands from the multiple computing devices:

identify vote counts for the multiple commands;

identify, from the multiple commands, a first command having a winning vote count that satisfies a predetermined condition; and

forward the first command for execution in the system,

wherein the first command has the winning vote count when a vote count of the first command is above a threshold.

14. The system of claim 13 , wherein each respective computing device of the multiple computing devices is sealed in one integrated circuit package for a system on chip; and the controller is external to the system on chip.

15. The system of claim 13 , further comprising:

at least one sensor to generate input data for the respective computing device, wherein the respective computing device is configured to generate a respective command based on the input data.

16. The system of claim 15 , wherein the at least one sensor includes at least one of:

a camera;

an infrared camera;

a sonar;

a radar; and

a lidar.

17. The system of claim 15 , wherein the respective command is configured to adjust acceleration, speed, or direction, or a combination thereof.

18. A non-transitory computer storage medium storing instructions which, when executed by a computing system, cause the computing system to perform a method, the method comprising:

receiving, in a controller, multiple commands respectively from multiple computing devices configured in the computing system;

determining, by the controller, vote counts for the multiple commands;

identifying, by the controller from the multiple commands, a first command having a vote count that satisfies a predetermined condition;

forwarding, from the controller, the first command for execution, wherein the first command has the winning vote count when a vote count of the first command is above a threshold; and

testing the memories of the tested devices in parallel, section by section to identify a second command, in the two commands having the tie and generated by a computing device that failed a memory test.