Determination of reliability of vehicle control commands via memory test
A vehicle having a control element for the speed, acceleration or direction of the vehicle, a computing device to generate a command in autonomous driving of the vehicle, and a command controller coupled between the control element and the computing device. In response to the command, the command controller initiates a test of a portion of the memory of the computing device. If the portion of the memory passes the test, the command controller forwards the command for execution via the control element of the vehicle; otherwise, the command controller blocks the command and/or issues a replacement command for the vehicle.
1. A method comprising:
receiving input data from at least one sensor configured on a vehicle;
receiving, from a computing device configured on the vehicle, a command for operations of a control element of the vehicle, the command based on the input data,
in response to the command,
initiating a test of a portion of a memory of the computing device; and
determining whether the portion of the memory passes the test, wherein the portion of the memory is identified based on a type of the command;
forwarding the command for execution, in response to a determination that the portion of the memory passes the test; and
preventing the command from being executed, in response to a determination that the portion of the memory fails the test.
2. The method of claim 1 , wherein the at least one sensor includes at least one of:
a camera;
an infrared camera;
a sonar;
a radar; and
a lidar.
3. The method of claim 2 , wherein the computing device generates commands for autonomous driving of the vehicle.
4. The method of claim 2 , wherein the operations of the control element control at least one of:
acceleration of the vehicle;
speed of the vehicle; and
direction of the vehicle.
5. The method of claim 1 , wherein the portion of the memory stores the firmware and data used in generating the command.
6. The method of claim 5 , wherein a portion of the memory that is not included in the test does not store:
instructions for the generation of the command; and
data that has impact on the generation of the command.
7. The method of claim 1 , further comprising:
in response to the determination that the portion of the memory fails the test, generating a replacement command of the received command.
8. The method of claim 7 , wherein the replacement command is configured to perform at least one of:
requesting a human operator of the vehicle to take control of the vehicle;
starting a preprogrammed emergency response routine to place the vehicle in a safe condition; and
reducing the speed of the vehicle for a stop.
9. A vehicle, comprising:
a control element;
a computing device to generate a command in autonomous driving of the vehicle, the command generated based on input data received from at least one sensor configured on the vehicle, the command to be effectuated by the control element of the vehicle; and
a command controller coupled between the control element and the computing device, wherein in response to the command, the command controller:
initiates a test of a portion of a memory of the computing device;
determines whether the portion of the memory passes the test, wherein the portion of the memory is identified based on a type of the command; and
based on a result of the test, performs one of:
forwarding the command for execution, in response to a determination that the portion of the memory passes the test; and
preventing the command from being executed, in response to a determination that the portion of the memory fails the test.
10. The vehicle of claim 9 , wherein the computing device is sealed in one integrated circuit package for a system on chip.
11. The vehicle of claim 10 , wherein the command controller is external to the system on chip.
12. The vehicle of claim 10 , wherein the computing device includes a memory test circuitry that performs the test in response to a request from the command controller.
13. The vehicle of claim 9 , wherein the at least one sensor includes at least one of:
a camera;
an infrared camera;
a sonar;
a radar; and
a lidar.
14. The vehicle of claim 13 , wherein the control element adjusts at least one of:
acceleration of the vehicle;
speed of the vehicle; and
direction of the vehicle.
15. The vehicle of claim 9 , wherein the portion of the memory is identified based on a type of the command for storing:
one or more modules of the firmware used to generate the command; and
data used in generating the command.
16. The vehicle of claim 9 , wherein the command controller generates a replacement command of the received command in response to the determination that the portion of the memory fails the test.
17. A non-transitory computer storage medium storing instructions which when executed by a controller of a vehicle causes the controller to perform a method, the method comprising:
receiving input data from at least one sensor configured on the vehicle;
receiving, from a computing device configured on the vehicle, a command for operations of a control element of the vehicle, the command based on the input data;
in response to the command,
initiating a test of a portion of the memory of the computing device; and
based on a result of the test, performing one of:
forwarding the command for execution, in response to a determination that the portion of the memory passes the test, wherein the portion of the memory is identified based on a type of the command; and
preventing the command from being executed, in response to a determination that the portion of the memory fails the test.