Restricted area autonomous vehicle control techniques
Various systems and methods for providing autonomous driving within a restricted area are discussed. In an examples, an autonomous vehicle control system can include an interface for receiving data from multiple sensors for detecting an environment about the vehicle, a security processor coupled to the configured to receive sensor information from the sensor interface, and autonomous driving system including one or more virtual machines configured to selectively receive information from the security processor based on a security request from infrastructure of the restricted area.
1. An autonomous vehicle control system (AVCS) comprising:
a sensor interface to obtain data from multiple sensors for detecting a first environment about a vehicle and to provide first sensor information;
a security processor configured to receive the first sensor information and to provide first autonomous driving information; and
an autonomous driving system including a set of virtual machines configured to receive the first autonomous driving information from the security processor;
wherein the security processor is configured to ignore first sensor information from the sensor interface in response to a first security request received from an infrastructure of a restricted area, and to provide second sensor information received from the infrastructure to the autonomous driving system in response to the first security request, the first security request dependent on a level of restriction assigned to the restricted area.
2. The AVCS of claim 1 including a bus configured to exchange the first autonomous driving information between the security processor and the set of virtual machines.
3. The AVCS of claim 2 , including a security monitor stub configured to receive and execute a set of instructions from the infrastructure for monitoring activity on the bus and to report the activity on the bus to the infrastructure.
4. The AVCS of claim 1 , wherein the set of virtual machines include a security monitor stub, the security monitor stub configured to receive and interface with a signed application received from the infrastructure.
5. The AVCS of claim 1 , wherein the set of virtual machines include a first virtual machine configured to selectively perform perception processing based on the first autonomous driving information.
6. The AVCS of claim 5 , wherein the set of virtual machines include a second virtual machine configured to selectively perform modeling of the first environment.
7. The AVCS of claim 6 , wherein the set of virtual machines include a third virtual machine configured to provide route planning through the first environment.
8. The AVCS of claim 7 , wherein the third virtual machine is configured to provide commands to actuators of the vehicle to execute a route through the first environment.
9. A method comprising:
authenticating an autonomous vehicle control system (AVCS) of a vehicle to infrastructure of a restricted area;
receiving a first security request at a security processor of the AVCS;
replacing, on a bus of the AVCS, first sensor information received from sensors of the vehicle with second sensor information from the infrastructure via a wireless network in response to the first security request, the first security request dependent on a level of restriction assigned to the restricted area; and
providing direction to the vehicle to move based on the second sensor information.
10. The method of claim 9 , wherein authenticating the AVCS to the infrastructure includes receiving a signed application from the infrastructure.
11. The method of claim 10 , including executing the signed application in a first virtual machine within the AVCS.
12. The method of claim 11 , including reporting activity of the bus to the infrastructure.
13. The method of claim 12 , including comparing the activity reported to the infrastructure with expected activity to determine whether the AVCS complied with the first security request; and
instructing the vehicle to stop if the AVCS did not comply with the first security request.
14. The method of claim 11 , including:
receiving a second security request from the infrastructure at the AVCS; and
replacing, on the bus, first perception information received from a second virtual machine of the AVCS with second perception information in response to the second security request, the second perception information received from the infrastructure.
15. At least one machine-readable medium including instructions for providing autonomous driving functions within a restricted area, the instructions when executed by a machine, cause the machine to perform operations comprising:
authenticating an autonomous vehicle control system (AVCS) of a vehicle to infrastructure of the restricted area;
receiving a first security request at a security processor of the AVCS, the first security request dependent on a level of restriction assigned to the restricted area;
replacing, on a bus of the AVCS, first sensor information received from sensors of the vehicle with second sensor information from the infrastructure via a wireless network in response to the first security request; and
moving the vehicle based on the second sensor information.
16. The at least one machine-readable medium of claim 15 , wherein the operation of authenticating the AVCS to the infrastructure includes:
receiving a signed application from the infrastructure;
executing the signed application in a first virtual machine within the AVCS; and
reporting activity of the bus to the infrastructure.
17. The at least one machine-readable medium of claim 16 , wherein the operations include:
receiving a second security request from the infrastructure at the AVCS; and
replacing, on the bus, first perception information received from a second virtual machine of the AVCS with second perception information in response to the second security request, the second perception information received from the infrastructure.
18. The AVCS of claim 1 wherein:
the security processor is configured to individually control functionality provided by each of the virtual machines based on instructions and information from the infrastructure,
the instructions and information are dependent on the level of restriction, and
each level of restriction controls replacement of a different set of information to be provided by the virtual machines with a set of information to be provided from the infrastructure.