BRAKING CONTROL ARCHITECTURES FOR AUTONOMOUS VEHICLES
Devices, systems, and methods for redundant braking systems and architectures are described. An example method for controlling a vehicle includes receiving, by a braking system, a first set of commands generated by a primary brake controller and a primary vehicle control unit (VCU) comprising multiple processors, receiving a second set of commands generated by the primary VCU and a secondary brake controller, receiving a third set of commands generated by a secondary VCU and the primary brake controller, receiving a fourth set of commands generated by the secondary VCU and the secondary brake controller, and selecting, based on an arbitration logic, exactly one of the first, second, third, and fourth sets of commands to operate the braking system, wherein the primary VCU and the secondary VCU are configured in a master/slave architecture.
1 . A system for controlling vehicle braking, comprising:
a braking system included in a vehicle and including a primary brake controller, a secondary brake controller, a primary vehicle control unit (VCU), and a secondary VCU, the braking system configured to operate brakes by generating multiple sets of commands based on different combinations of the primary brake controller, the secondary brake controller, the primary VCU, and the secondary VCU; and
a processor configured to operate the braking system based on one of the multiple sets of commands.
2 . The system of claim 1 , wherein the processor is further configured to select, based on an arbitration logic, the one of the multiple sets of commands.
3 . The system of claim 1 , wherein at least one of the primary VCU or the secondary VCU include multiple processors.
4 . The system of claim 1 , wherein the multiple sets of commands are generated by the different combinations including i) one of the primary brake controller and the secondary brake controller and ii) one of the primary VCU and the secondary VCU.
5 . The system of claim 1 , wherein the multiple sets of commands include:
a first set of commands generated by a primary brake controller and a primary vehicle control unit (VCU) comprising multiple processors,
a second set of commands generated by the primary VCU and a secondary brake controller,
a third set of commands generated by the primary brake controller and a secondary VCU comprising multiple processors, and
a fourth set of commands generated by the secondary VCU and the secondary brake controller.
6 . The system of claim 1 , wherein the primary VCU and the secondary VCU are coupled using a first communication protocol, and wherein the primary brake controller and the secondary brake controller are coupled using a second communication protocol.
7 . The system of claim 1 , further comprising:
a first power supply coupled to the primary VCU and the secondary brake controller; and
a second power supply coupled to the secondary VCU and the primary brake controller.
8 . The system of claim 1 , further comprising:
a first ignition signal source coupled to the primary VCU; and
a second ignition signal source coupled to the secondary VCU.
9 . The system of claim 1 , further comprising:
a parking brake controller coupled to the primary VCU and the secondary VCU.
10 . A method of controlling vehicle braking in a vehicle, comprising:
generating, by a braking system including a primary brake controller, a secondary brake controller, a primary vehicle control unit (VCU), and a secondary VCU, multiple sets of commands based on different combinations of the primary brake controller, the secondary brake controller, the primary VCU, and the secondary VCU; and
selecting, based on an arbitration logic, one of the multiple sets of commands to operate the braking system.
11 . The method of claim 10 , wherein the multiple sets of commands are generated by the different combinations including i) one of the primary brake controller and the secondary brake controller and ii) one of the primary VCU and the secondary VCU.
12 . The method of claim 10 , wherein the multiple sets of commands include:
a first set of commands generated by the a primary brake controller and a primary vehicle control unit (VCU) comprising multiple processors;
a second set of commands generated by the primary VCU and a secondary brake controller;
a third set of commands generated by a secondary VCU and the primary brake controller; and
a fourth set of commands generated by the secondary VCU and the secondary brake controller.
13 . The method of claim 12 , wherein the arbitration logic selects the one of the multiple sets of commands based on an indication of a failure in the primary VCU, the secondary VCU, the primary brake controller, or the secondary brake controller.
14 . The method of claim 13 , further comprising:
detecting the failure in the primary VCU; and
configuring, based on the detecting, the arbitration logic to select either the third set of commands or the fourth set of commands.
15 . A computer-readable storage medium having instructions stored thereupon, the instructions, upon execution by one or more processors, causing the one or more processors to implement a method comprising:
operating brakes included in a vehicle by generating multiple sets of commands based on different combinations of two of a primary brake controller, a secondary brake controller, a primary VCU, or a secondary VCU; and
wherein at least one of the multiple sets of commands is generated further based on an output of at least one sensor coupled to the primary brake controller or the secondary brake controller.
16 . The computer-readable storage medium of claim 15 , wherein the at least one sensor comprises a plurality of passive wheel speed sensors coupled to the primary brake controller.
17 . The computer-readable storage medium of claim 15 , wherein the at least one sensor comprises a steering angle sensor, a yaw rate sensor, and a plurality of passive wheel speed sensors coupled to the secondary brake controller.
18 . The computer-readable storage medium of claim 15 , wherein the at least one sensor comprises a radar unit or a camera module coupled to the secondary brake controller.
19 . The computer-readable storage medium of claim 15 , wherein the instructions further comprise:
checking the multiple sets of commands to detect a failure in one or more of the primary VCU, the secondary VCU, the primary brake controller, and the secondary brake controller.
20 . The computer-readable storage medium of claim 15 , wherein the instructions further comprise:
selecting, based on an arbitration logic, one of the multiple sets of commands.