Automated vehicle control system architecture

Information

  • Patent Grant
  • 10921822
  • Patent Number
    10,921,822
  • Date Filed
    Tuesday, January 2, 2018
    6 years ago
  • Date Issued
    Tuesday, February 16, 2021
    3 years ago
Abstract
Controllers, control architectures, systems and methods are described for controlling a host vehicle's participation in a platoon. Described vehicle platooning control systems may include a platoon controller and a vehicle interface controller. The platoon controller is configured to determine torque and braking requests for at least partially automatically controlling the host vehicle to platoon with a platoon partner. The vehicle interface controller manages communications between the platoon controller and one or more host vehicle control units. The vehicle interface controller may also include a safety monitor including one or more safety monitoring algorithms In some embodiments, the vehicle interface controller is at least ASIL-C compliant, whereas the platoon controller and an optional gateway processor may be QM rated under ISO 26262. The platoon controller may be configured as a listener capable of receiving but not transmitting messages on the host vehicle's control related communication bus(es).
Description
BACKGROUND

The present application relates generally to controllers, architectures, methods and systems for enabling vehicles to drive in a partially or fully autonomous mode and/or closely follow one another safely using automatic or partially automatic control.


In recent years significant strides have been made in the field of automated vehicle control. One segment of vehicle automation relates to connected vehicle control such as vehicular convoying systems that enable vehicles to follow closely together in a safe, efficient and convenient manner Following closely behind another vehicle has the potential for significant fuel savings benefits, but is generally unsafe when done manually by the driver. One type of vehicle convoying system is sometimes referred to as vehicle platooning in which a second, and potentially additional, vehicle(s) is/are automatically or semi-automatically controlled to closely follow a lead vehicle in a safe manner


The fuel efficiency advantages of platooning are particularly noticeable in fields such as the trucking industry in which long distances tend to be traveled at highway speeds. One of the on-going challenges of vehicle platooning and convoying systems is creating controller systems architectures that are cost effective, efficient and meet the stringent safety standards required for integration into mainstream road vehicles. Although existing gap control system architectures work well, there are continuing efforts to develop improved platoon controllers that provide safe and fuel efficient operation while delivering a comfortable user experience.


Beyond platooning there are a wide variety of partially or fully autonomous vehicle control application in which verified knowledge about what a second vehicle is doing can be very helpful in managing the partially or fully autonomous control of a host vehicle.


There are several industry and government standards relating to road vehicle safety. One well known international standard for classifying the functional safety of electrical and electronic system in road vehicles is the ASIL (Automotive Safety Integrity Level) standard defined by ISO 26262—Functional Safety for Road Vehicles standard. There are four safety integrity levels identified by the ASIL standard (ASIL-A, ASIL-B, ASIL-C and ASIL-D) with ASIL-A corresponding to the lowest level compliance requirements and ASIL-D representing the highest integrity requirements. Items having safety requirements that are not dictated by the standard are designed as QM (Quality Management).


Many ECUs, powertrain control modules (PCMs) and other controllers used in commercially available road vehicles are designed to expect that all commands that they receive come from ASIL compliant components that conform to a particular minimum ASIL level. Therefore, in some circumstances, it is desirable for control commands issued from the platoon controller to be ASIL rated or to meet other designated reliability criteria or standard. At the same time, some of the data (such as GPS position data) that is useful in platoon control does not itself have a reliability that can is suitable for ASIL rating. The present application describes platoon control system architectures that are particularly well suited for efficiently handling platooning control related tasks using information available from a variety of sources. When desired, the powertrain control commands ultimately issued by the control system may be ASIL rated.


SUMMARY

A variety of controllers, control architectures, systems, methods and algorithms are described for at least partially automatically controlling a host vehicle's based at least in part on information received from a second vehicle, as for example second vehicle sensor information. One such example is controlling the host vehicle's participation in a platoon.


In some embodiments, a vehicle control system includes at least two of (i) a connected vehicle or platoon controller, (ii) a gateway processor, and (iii) a vehicle interface controller. The connected vehicle/platoon controller is configured to determine vehicle control commands for at least partially automatically controlling the host vehicle based at least in part on current operating state information received from the second vehicle. The gateway processor coordinates communications between a host vehicle and the second vehicle/platoon partner. The vehicle interface controller manages communications between the connected vehicle/platoon controller and one or more host vehicle control units. The vehicle interface controller may also include a safety monitor that includes one or more safety monitoring algorithms that verify that connected vehicle/platooning operation is safe.


In some embodiments, the vehicle interface controller is at least ASIL-C compliant, whereas the connected vehicle/platoon controller and the gateway processor may be rated at a lower ASIL rating or QM rated under ISO 26262.


In some embodiments, the platoon controller is configured as a listener capable of receiving messages transmitted on at least one of the host vehicle's communication buses, but is not capable of transmitting messages onto any of the vehicle's control related communication buses. The vehicle interface controller is configured to transmit and receive messages on at least one of the vehicle communication buses (e.g. a CAN bus). The gateway processor is not coupled to any of the vehicle's control related buses and is not capable of receiving or transmitting any messages on any such vehicle buses.


In some embodiments, the control commands include torque and braking requests, and an interface between the connected vehicle/platoon controller and the vehicle interface controller includes the connected vehicle/platoon controller's torque and braking request. In some embodiments, the interface also includes verified partner state information indicative of at least a speed and a braking level of the second vehicle. The verified partner state information is preferably information sent and verified by a vehicle interface controller on the second vehicle and may be used in at least one of the safety monitoring algorithms implemented by the host vehicle's vehicle interface controller.


In some implementations, the verified partner state information received by the gateway processor from the second vehicle is passed to the connected vehicle/platoon controller without modification by the gateway processor. The connected vehicle/platoon controller in turn passes the verified state information to the vehicle interface controller without modification while also using that information in the determination of the vehicle control commands In some embodiments, the verified partner state information is passed in data blocks that each include a checksum applied by the vehicle interface controller on the partner vehicle. The host vehicle's vehicle interface controller may then utilize the checksums to verify the integrity of the partner state information.


In some embodiments, the gateway processor also receives unverified partner state information such as GNSS position data from the partner vehicle. The unverified partner state information is passed to the connected vehicle/platoon controller and used by the connected vehicle/platoon controller in the determination of the vehicle control commands, but is not passed to the vehicle interface controller.


In various embodiments, the interface between a platoon controller and the vehicle interface controller may optionally further include one or more of (i) a platoon state indicator that indicates when the platoon controller believes its vehicle control commands should be directing operation of the host vehicle, (ii) a driver input indicator, (iii) a retarder command, (iv) a steering command.


In some embodiments, the connected vehicle/platoon controller is configured as a first system on module (SOM), the gateway processor is configured as second system on module (SOM), and the vehicle interface controller is implemented as a single packaged integrated circuit.


In some embodiments, the gateway processor receives host vehicle state information from the platoon controller and passes the host vehicle state information to the platoon partner, the host vehicle state information being indicative of at least a speed, a braking level and a position of the host vehicle. In some preferred embodiments the speed and braking level information is verified by the vehicle interface controller and is passed through the platoon controller and gateway processor without modification.


In some embodiments, the gateway processor is configured to wirelessly communicate with the platoon partner using a short-range, vehicle-to-vehicle wireless communications protocol, as for example the DSRC protocol. The gateway processor may also be configured to communicate with a networks operations center using cellular or satellite communications.


In some embodiments, a dedicated communications link directly connects the platoon controller to the gateway processor, with no other devices being coupled to the dedicated communications link. The connected vehicle/platoon controller and the gateway processor may be arranged to communicate over the dedicated communication link using a standard communications protocols such as Ethernet.


In some embodiments, the gateway processor also receives a video stream from the partner vehicle and forwards the video stream to a display mounted in the cabin so that the video stream can be viewed by the driver. The video stream, which may be a view of the road in front of the partner vehicle, is not passed to the platoon controller.


In some embodiments, the gateway processor includes a message logger and the connected vehicle/platoon controller does not have any logging capabilities. The message logger may be configured to log all of the partner state information and host state information passed through the gateway processor. In some embodiments, the platoon controller passes the torque and braking requests, and any other information that the system designers desire to be logged to the gateway controller for logging purposes.


In some embodiments, the vehicle control system comprises the aforementioned connected vehicle/platoon controller and vehicle interface controller with or without the described gateway processor.


In other embodiments, the vehicle control system comprises the aforementioned connected vehicle/platoon controller and gateway processor with or without the described vehicle interface controller.


In yet another aspect, a vehicle control system includes a vehicle controller configured to determine vehicle control commands for at least partially automatically controlling the host vehicle based at least in part on sensor information. The vehicle control commands are arranged to be directly or indirectly utilized by one or more host vehicle control units resident on the host vehicle. The vehicle control system also includes one or more safety monitoring algorithms that, during at least partially automated driving, verify that selected vehicle control commands received from the vehicle controller meet selected safety criteria. At least some of the safety algorithms utilize sensor data in the verification of the commands received from the vehicle controller. The sensor data used by the safety algorithms may come from the host vehicle and/or a second vehicle. In some embodiments, the vehicle controller may include any of the components described above.





BRIEF DESCRIPTION OF THE DRAWINGS

The invention and the advantages thereof, may best be understood by reference to the following description taken in conjunction with the accompanying drawings in which:



FIG. 1 is a block diagram of a controller architecture suitable for use in an automated or partially automated vehicle control system that supports platooning.



FIG. 2 is a block diagram of a representative platoon controller architecture suitable for use in the automated or partially automated vehicle control system of FIG. 1.



FIG. 3 is a block diagram of a gap controller in accordance with one embodiment.



FIGS. 4A-4C are a series of diagrams illustrating different control states used by a gap regulator in accordance with one embodiment during different operational states.



FIG. 5 is a state space diagram illustrating a sliding mode control scheme.



FIG. 6 is a specific ASIL compliant controller hardware architecture suitable for use in an automated or partially automated vehicle control system that supports platooning.



FIG. 7 illustrates components of a gateway in accordance with one embodiment.





DETAILED DESCRIPTION

The present invention will now be described in detail with reference to several embodiments thereof as illustrated in the accompanying drawings. In the following description, numerous specific details are set forth in order to provide a thorough understanding of embodiments of the present invention, including the description of a plurality of different aspects of the invention, including, in some case, one or more alternatives. It will be apparent to those skilled in the art that the invention can be practice without implementing all of the features disclosed herein.


The Applicant has proposed various vehicle platooning systems in which a second, and potentially additional, vehicle(s) is/are automatically, or semi-automatically controlled to closely follow a lead vehicle in a safe manner By way of example, U.S. application Ser. Nos. 15/605,456, 15/607,902; 13/542,622 and 13/542,627; U.S. Provisional Application Nos. 62/377,970 and 62/343,819; and PCT Application Nos. PCT/US2014/030770, PCT/US2016/049143 and PCT/US2016/060167 describe various vehicle platooning systems in which a trailing vehicle is at least partially automatically controlled to closely follow a designated lead vehicle. Each of these earlier applications is incorporated herein by reference.


One of the goals of platooning is typically to maintain a desired longitudinal distance between the platooning vehicles, which is frequently referred to herein as the “desired gap”. That is, it is desirable for the trailing vehicle (e.g., a trailing truck) to maintain a designated gap relative to a specific vehicle (e.g., a lead truck). The vehicles involved in a platoon will typically have sophisticated control systems suitable for initiating a platoon, maintaining the gap under a wide variety of different driving conditions, and gracefully dissolving the platoon as appropriate.


The architecture and design of control systems suitable for implementing vehicle platooning may vary widely. The specific controller design can vary based on the level of automation contemplated for the controller, as well as the nature of and equipment available on the host vehicles participating in the platoon. By way of example, FIG. 1 diagrammatically illustrates a vehicle control architecture that is suitable for use with platooning tractor-trailer trucks. The specific controller illustrated is primarily designed for use in conjunction with a platooning system in which both vehicles include an active driver. The driver of the lead vehicle being fully responsible for control of the front vehicle. The a driver of the trailing vehicle is responsible for steering the trailing vehicle, but the platoon controller 110 is primarily responsible for controlling the trailing vehicles torque and braking requests during active platooning. However it should be appreciated that generally similar control schemes can be used in systems which contemplate more automated control of one or both of the platoon partners or which utilize vehicle control commands other than or in addition to torque and braking requests.


In the illustrated embodiment illustrated in FIG. 1, a platoon controller 110, receives inputs from a number of sensors 130 on the tractor and/or one or more trailers or other connected units, and a number of actuators and actuator controllers 150 arranged to control operation of the tractor's powertrain and other vehicle systems. An actuator interface 160 may be provided to facilitate communications between the platoon controller 110 and the actuator controllers 150. The platoon controller 110 also interacts with an inter-vehicle communications controller 170 which orchestrates communications with the platoon partner and a NOC communications controller 180 that orchestrates communications with a network operations center (NOC). The vehicle also preferably has selected configuration files 190 that include known information about the vehicle.


Some of the functional components of the platoon controller 110 include gap controller 112, a variety of estimators 114, one or more partner vehicle trackers 116 and various monitors 118. In many applications, the platoon controller 110 will include a variety of other components 119 as well. Exemplary embodiments of the platoon controller 110 and gap controller 112 are described in more detail below with reference to FIGS. 2 and 3.


Some of the sensors utilized by the platoon controller 110 may include GNSS (GPS) unit 131, wheel speed sensors 132, inertial measurement devices 134, radar unit 137, lidar unit 138, cameras 139, accelerator pedal position sensor 141, steering wheel position sensor 142, brake pedal position sensor 143, and various accelerometers 144. Of course, not all of these sensors will be available on all vehicles involved in a platoon and not all of these sensors are required in any particular embodiment. A variety of other sensor 149 (now existing or later developed or commercially deployed) may be additionally or alternatively be utilized by the platoon controller in other embodiments. In the primary embodiments described herein, GPS position data is used. However, GPS is just one of the currently available global navigation satellite systems (GNSS). Therefore, it should be appreciated that data from any other GNSS system or from other suitable position sensing systems may be used in place of, or in addition to the GPS system.


Many (but not all) of the described sensors, including wheel speed sensors, 132, radar unit 137, accelerator pedal position sensor 141, steering wheel position sensor 142, brake pedal position sensor 143, and accelerometer 144 are relatively standard equipment on newer trucks (tractors) used to pull semi-trailers. However, others, such as the GNSS unit 131 and lidar unit 138 (if used) are not currently standard equipment on such tractors or may not be present on a particular vehicle and may be installed as needed or desired to help support platooning.


Some of the vehicle actuators controllers 150 that the platoon controller may direct at least in part include engine torque controller 152 (which is often part of the integrated functionality of an engine control unit (ECU) or powertrain control module (PCM)); transmission controller 154; brake controller 156; steering controller 157 (when automated steering is provided); and clutch controller 158. Of course, not all of these actuator controllers will be available or are required in any particular embodiment and it may be desirable to interface with a variety of other vehicle actuator controllers 159 that may be available on the controlled vehicle as well. Therefore, it should be appreciated that the specific actuator controllers 150 directed or otherwise utilized by the platoon controller on any particular controlled vehicle may vary widely. Further, the capabilities of any particular actuator controller (e.g. engine torque controller 152), as well as its interface (e.g., the nature and format of the commands, instructions, requests and messages it can handle or generate) will often vary with the make and model of that particular actuator controller. Therefore, an actuator interface 160 is preferably provided to translate requests, commands, messages and instructions from the platoon controller 110 into formats that are appropriate for the specific actuator controller hardware and software utilized on the controlled vehicle. The actuator interface 160 also provides a mechanism for communicating/translating messages, commands, instructions and requests received from the various actuator controllers back to the platoon controller 110. Typically an appropriate actuator interface would be provided to interact with each of the specific vehicle controllers utilized. In various embodiments, this may include one or more of: an engine torque interface 161; a brake interface 162; a transmission interface 164; a retarder interface 165 (if a separate retarder controller is used); a steering interface 167; and/or any other appropriate controller interface 169.


Large trucks and other heavy vehicles frequently have multiple systems for “braking” the truck. These include the traditional brake system assemblies mounted in the wheels of the vehicle—which are often referred to in the industry as the “foundation brakes.” Most large trucks/heavy vehicles also have a mechanism referred to as a “retarder” that is used to augment the foundation brakes and serve as an alternative mechanism for slowing the vehicle or to help prevent the vehicle from accelerating down a hill. Often, the retarder will be controlled by the engine torque controller 152 and in such embodiments, the retarder can be controlled by sending appropriate torque commands (which may be negative) to the engine torque controller 152. In other embodiments a separate retarder controller (not shown) may be accessible to, and therefore directed by, platoon controller 110 through an appropriate retarder interface 165. In still other embodiments, the platoon controller 110 may separately determine a retard command that it sends to the actuator interface 160. In such embodiments the actuator interface will interpret the retard command and pass on appropriate retardation control commands to the ECU or other appropriate vehicle controller.


The communications between vehicles may be directed over any suitable channel and may be coordinated by inter-vehicle communications controller 170. By way of example, the Dedicated Short Range Communications (DSRC) protocol (e.g. the IEEE 802.11p protocol), which is a two-way short to medium range wireless communications technology that has been developed for vehicle to vehicle communications, works well. Of course other communications protocols and channels may be used in addition to or in place of a DSRC link. For example, the inter vehicle communications may additionally or alternatively be transmitted over a cellular communications channel such as 4G LTE Direct, 5G, a Citizen's Band (CB) Radio channel, one or more General Mobile Radio Service (GMRS) bands, one or more Family Radio Service (FRS) bands, Wi-Fi, Zigbee or any other now existing or later developed communications channels using any suitable communication protocol.


The specific information transmitted back and forth between the vehicles may vary widely based on the needs of the controllers. In various embodiments, the transmitted information may include the current commands generated by the platoon controller 110 such as requested/commanded engine torque 280, requested/commanded braking deceleration 282. They may also include steering commands, gear commands, etc. when those aspects are controlled by platoon controller 110. Corresponding information is received from the partner vehicle, regardless of whether those commands are generated by a platoon controller or other suitable controller on the partner vehicle (e.g., an adaptive cruise control system (ACC) or a collision mitigation system (CMS)), or through other or more traditional mechanisms—as for example, in response to driver inputs (e.g., accelerator pedal position, brake position, steering wheel position, etc.).


In many embodiments, much or all of the tractor sensor information provided to platoon controller 110 is also transmitted to the platoon partner and corresponding information is received from the platoon partner so that the platoon controllers 110 on each vehicle can develop an accurate model of what the partner vehicle is doing. The same is true for any other relevant information that is provided to the platoon controller, including any vehicle configuration information 190 that is relevant to the platoon controller. It should be appreciated that the specific information transmitted may vary widely based on the requirements of the platoon controllers 110, the sensors and actuators available on the respective vehicles, and the specific knowledge that each vehicle may have about itself.


The information transmitted between vehicles may also include information about intended future actions. For example, if the lead vehicle knows it approaching a hill, it may expect to increase its torque request (or decrease its torque request in the context of a downhill) in the near future and that information can be conveyed to a trailing vehicle for use as appropriate by the platoon controller 110. Of course, there is a wide variety of other information that can be used to foresee future torque or braking requests and that information can be conveyed in a variety of different forms. In some embodiments, the nature of the expected events themselves can be indicated (e.g., a hill, or curve or exit is approaching) together with the expected timing of such events. In other embodiments, the intended future actions can be reported in the context of expected control commands such as the expected torques and/or other control parameters and the timing at which such changes are expected. Of course, there are a wide variety of different types of expected events that may be relevant to the platoon control.


The communications between the vehicles and the NOC may be transmitted over a variety of different networks, such as the cellular network, various Wi-Fi networks, satellite communications networks and/or any of a variety of other networks as appropriate. The communications with the NOC may be coordinated by NOC communications controller 180. The information transmitted to and/or received from the NOC may vary widely based on the overall system design. In some circumstances, the NOC may provide specific control parameters such as a target gap tolerance. These control parameters or constraints may be based on factors known at the NOC such as speed limits, the nature of the road/terrain (e.g., hilly vs. flat, winding vs. straight, etc.) weather conditions, traffic or road conditions, etc. In other circumstances the NOC may provide information such information to the platoon controller. The NOC may also provide information about the partner vehicle including its configuration information and any known relevant information about its current operational state such as weight, trailer length, etc.


The configuration file 190 may include a wide variety of information about the host vehicle that may be considered relevant to the controller. By way of example, some of the information might include the vehicle's specification including such things as engine performance characteristics, available sensors, the nature of its braking system, the location of its GNSS antenna relative to the front of the cab, gear ratios, differential ratios etc.



FIG. 2 illustrates a particular embodiment of a platoon controller 110. In the illustrated embodiment, the platoon controller 110 includes a gap controller 112, a plurality of estimators 114, one or more trackers 116, any desired monitors 118 and potentially any of a variety of other components 119.


In the illustrated embodiment, the gap controller 112 includes a target and state setter 200, a gap regulator 210 and a gap estimator 240. In general, the target and state setter 200 is arranged to determine the intended operational mode (state) of the gap regulator 210 and the values of any variable control parameters that are appropriate for use in that operational mode.


The gap regulator 210 is arranged to control the trailing platoon partner in the manner designated by the target and state setter 200. In the gap control operational mode, the gap regulator 210 controls the vehicle in a manner that seeks to attain and maintain the desired gap in accordance with any designated control parameters specified by the state setter 200. In other modes, the gap regulator 210 controls the vehicle in a manner that seeks to attain the appropriate response for the selected operational mode.


The gap estimator 240 is arranged to estimate/determine the current gap based on actual measurements and/or other information that is available to the platoon controller 110. It should be apparent that an accurate understanding of the current gap is important to successful operation of the gap regulator. At the same time, it should be appreciated that any measurement system has inherent tolerances and can be subject to reporting errors and/or may become unavailable in some circumstances. Thus, the gap estimator 240 is configured to receive information from multiple position or relative position related sensors and to fuse such data into a reliable estimate of the current gap.


The torque and braking requests generated by GAP regulator 210 are sent to the appropriate actuator interface (e.g., engine torque interface 161 and brake interface 162 respectively). The engine torque interface 161 then forwards an appropriate torque command to engine torque controller 152 which directs the delivery of the requested torque by directing various engine operating parameters such as fuel charge, valve timing, retarder state, etc. appropriately. The brake interface 162 generates an appropriate brake request that is sent to the brake controller 156.


A particular embodiment of gap controller 112 is described in more detail below with reference to FIG. 3.


Returning to FIG. 2, there are a variety of estimators 114 that are useful for the gap controller 112. In various embodiments these may include one or more of a mass estimator 271, a drag estimator 273, a ground speed estimator 275, a gyro bias estimator 277 and/or other estimators 279.


The mass estimator 271 is arranged to estimate the respective masses of the platoon partners. These mass estimations may be used by the gap controller 112 to help scale its torque and brake requests appropriately based on the respective weights (masses) of the platoon partners.


The drag estimator 273 is arranged to estimate the respective drag resistances of the platoon partners. These drag resistance estimates may also be used by the gap controller to help adjust its torque and brake requests appropriately. In general, the drag resistance of any particular truck or other vehicle can vary based on a variety of factors including: (a) its drag profile (which in the context of a truck may change based on the trailer being pulled—if any, or other characteristics of the load); (b) the vehicle's current speed, (c) wind speed and direction, (d) rolling resistance, (e) platoon state (e.g., whether a platoon is active, the position of the vehicle within the platoon, the gap), (f) bearing wear, etc.


The ground speed estimator 275 is arranged to estimate the actual ground speed of the respective platoon partners. Many trucks and other vehicles have wheel speed sensors that can quite accurately measure the rotational speed of the associated wheels. The actual ground speed at which the vehicles are traveling will vary based on the respective diameters of the wheels and slip conditions of the tires. The precise diameter of the wheels can vary based on the tires used. Furthermore, the diameter of the wheels will vary over time with tire wear, changes in ambient temperature and other factors. The wheel diameter will even change over the course of a particular trip as the tires heat up (or otherwise change in temperature) during use. In practice, all of these variations in wheel diameter are potentially significant enough to impact the gap estimation and gap control. Therefore, the ground speed estimator 275 is arranged to estimate the actual ground speed based on measured wheel speed and other available information such as GNSS information. The ground speed estimates are particularly useful in times when tracker based gap measurements (e.g., radar, cameras, lidar, ultrasound etc.) aren't available—which may occur, for example, when the platoon partners are laterally offset due to a lane change, etc.


Several of the measurements utilized by the gap controller 112 are inertial measurements that are gyro based. These may include yaw measurements which indicate the rate at which the associated vehicle is turning, longitudinal acceleration measurements, etc. Gyros often have an inherent measurement error referred to as a gyro bias that can affect measurements. The gyro bias estimator 277 estimates such biases to allow the gap controller to compensate for such gyro based measurement errors.


The platoon controller 110 can include any other estimators 279 that may be useful to any particular gap controller 112 as well.


The platoon controller 110 may also include one or more trackers 116. Each tracker 116 is arranged to measure or otherwise determine the gap. One type of tracker that is used in many implementations is a radar based radar tracker 283. Newer commercially available trucks often come equipped with a radar unit as standard equipment and radar trackers are particularly well suited for use in such vehicles. Of course, one or more radar units may be installed on any vehicle that does not come pre-equipped with a radar unit to facilitate use of radar tracker 283. By way of example, some specific radar trackers are described in more detail in co-pending U.S. application Ser. Nos. 15/590,715 and 15/590,803, both filed May 9, 2017, both of which are incorporated herein by reference.


Lidar is another distance measuring technology that is well suited for measuring the gap between vehicles. Lidar is quickly gaining popularity for use in automated and autonomous driving applications. Lidar tracker 286 is well suited for use on vehicles that have or are provided with lidar units. Cameras and stereo cameras are also becoming more popular distance measuring tools for use in various automated and autonomous driving applications.


Of course, other distance measuring technologies can be used to measure or estimate the gap between vehicles as represented by other trackers 289. By way of example, a GPS tracker could be used that is based primarily on the respective reported GPS positions of the vehicles. In another example, ultrasound based distance measuring unit may be used.


The tracker(s) used in many embodiments are configured to fuse data from multiple sensors to help validate the measurements of the primary sensors used by the respective trackers. The aforementioned radar tracker application describes a variety of methods for fusing data to help validate measurements of a primary sensor in that manner


In various embodiments, the gap estimator 240 could replace or be replaced by one or more of the trackers, or could be thought of as a tracker itself since it determines/estimates the gap based on inputs from multiple sensors. In the illustrated embodiment, the gap estimator 240 is shown separately as part of gap controller 112 since it fuses distance data from the tracker(s) and any other available sources such as GNSS sensors on each of the vehicles.


The platoon controller 110 may also include one or more monitors 118 that are configured to monitor specific components that are relevant to gap control. By way of example, one specific monitor that is particularly useful to the control of platooning trucks is brake health monitor 291. The brake health monitor 291 is configured to monitor the brake system and to identify circumstances in which the brakes may not be able to deliver the level of braking normally expected for platoon control—as for example could occur if the foundation brakes include drum brakes that have been used while traveling downhill in the mountains to the extent that they are close to overheating. If the brake health monitor 291 identifies such a circumstance, it informs the platoon controller, which can take the appropriate remedial action. The appropriate remedial action will vary based on the specific circumstances identified by the brake health monitor, but may include, for example, actions such as dissolving the platoon, increasing the target gap to a level more appropriate for the brake conditions, etc. Of course, the brake health monitor can also configured to identify circumstances in which the condition of the brakes has improved (e.g., the brakes have cooled sufficiently) and inform the platoon controller of those circumstances as well so that the platoon controller can act accordingly. For example, improved braking status may allow the target gap to be reduced, a platoon to be reestablished or other appropriate actions.


The platoon controller may include any of a variety of other monitors 299 that are configured to monitor the state or status of other components, systems, environmental conditions, road or traffic conditions, etc. that may be relevant to platoon control. For example, a DSRC link monitor may be provided to monitor the status of a DSRC communication link between the platoon partners.


Referring next to FIG. 3, another embodiment of gap controller 112 will be described in more detail. Similarly to the embodiment illustrated in FIG. 2, the gap controller 112 includes a target and state setter 200, a gap regulator 210 and a gap estimator 240. In the embodiment of FIG. 3, the target and state setter 200 includes an operating state selector 203, and a control parameter selector 206 that determines, selects, sets or otherwise indicates to the gap regulator the values of any variable control parameters that are appropriate for use in the selected operational mode.


The operating state selector 203 is arranged to determine the intended operational mode (state) of the gap regulator 210. In some specific embodiments, the operational modes might include a “normal” or “gap control” operational mode in which the gap regulator is configured to control towards attaining an maintaining a designated gap between the vehicles. In the gap control operational mode control parameter variables dictated by the control parameter selector might include the target gap itself (e.g. 10 m, 12 m, etc.)—which may vary somewhat based on driving conditions (e.g., weather, terrain, road conditions, traffic, etc.). Other control parameters during normal operation may include parameters that impact the draw-in speed, the tightness of the control, tolerances or variations between torque control and braking control, etc. In other embodiments, “initiate platoon” and/or “draw-in” or “pull-in” may be one or more separate states that are used to establish a platoon and/or to bring the platoon partners together in a safe manner under at least partially automated control.


Another potential operational mode is a “dissolve” mode in which the platoon controller transitions the trailing vehicle toward/to a position at which the driver of the trailing vehicle (or an automatic cruise control system) can safely take over control of the vehicle. Generally, dissolving a platoon includes increasing the gap between the vehicles in a controlled manner to/towards a point at which the platoon can be dissolved and vehicle control can be safely transferred to manual control by the driver or to control through the use of a different system such as adaptive cruise control. The dissolve mode may optionally be triggered by a wide variety of different circumstances, as for example, in response to one of the platoon partners or the NOC deciding to terminate the platoon; the detection of a car cutting-in between the platooning vehicles; the loss of communications between the vehicles for an extended period; the detection of an object in front of the lead vehicle that is too slow or too close to the platoon; etc.


Another potential operational mode may be a velocity control or relative velocity control mode. Velocity control, or relative velocity control may be preferable to trying to control to maintain a particular gap in a variety of specific circumstances—as for example when the trailing vehicle's radar (or other) tracking unit loses sight of the partner vehicle, as can occur when there is a lateral offset between the vehicles due to a lane change or other conditions.


Of course, there can be a variety of other operational modes as well.


The gap regulator 210 is arranged to control the trailing platoon partner in the manner designated by the target and state setter 200. In the embodiment illustrated in FIG. 3, the gap regulator 210 includes a scaler 212 and two separate controllers which are used in different combinations in different operating modes. In the illustrated embodiment, the controllers include a sliding mode controller 215 (which performs gap control) and a velocity/relative velocity controller 218. It should be appreciated that in other embodiments, a single controller, additional and/or different may be provided as appropriate for any particular implementation.


In the illustrated embodiment, the feed forward scaler 212 is configured to scale the torque and brake signals from the front vehicle before adding them to the outputs from the sliding mode and relative velocity controllers 215, 218 to create the torque and brake request to the engine and brake controllers. Such scaling may be based on factors such as the respective weights (masses) of the platoon partners, the respective drags of the vehicles, the severity of a braking event (e.g., in high braking scenarios, the braking command may be increased a bit to provide a margin of safety to account for uncertainties in braking performance and reactions times), etc. In other embodiments, such scaling functions can be integrated into the respective controllers themselves if desired.


The sliding mode controller 215 is configured to control the trailing vehicle in a manner that seeks to attain and maintain the desired gap in accordance with the target gap and any other control parameters specified by the control parameter selector 206. Thus, its primary function is gap control. The velocity controller 218 is configured to control the trailing vehicles in a manner that maintains a designated velocity relative to the lead vehicle, or in some circumstances, simply a designated velocity. In the illustrated embodiment, these two separate controllers are provided so that the gap regulator 210 can provide different types of control, as may be appropriate in different operational circumstances. A few specific examples are described with reference to FIGS. 4A-4C. In the described embodiments, both the controllers 215 and 218 are operated continuously during platooning and the selector/adder 250 is used to select the appropriate signals to output based on the current operating mode. An optional braking monitor 255 is a safety feature that may be utilized to help ensure that the brake commands outputted by selector/adder 250 don't overly aggressively brake the trailing vehicle except in where necessary from a safety/crash prevention standpoint. This is to reduce the risk of traffic behind the trailing platoon partner from being impacted by unexpected aggressive braking of the trailing platoon partner.


The sliding mode controller 215 is arranged to control the trailing vehicle in a manner such that its relative velocity relative to the front vehicle varies as a function of the gap between the vehicles. This characteristic is illustrated in the state space diagrams of FIG. 5 which show a control scheme in accordance with one specific implementation. More specifically, FIG. 5 plots relative velocity between the vehicles (the Y-axis) vs. gap between the vehicles (the X-axis). FIG. 5 also show a torque request controller target control line 320. In the illustrated embodiment, the nominal desired gap is 12 meters—which is represented by line 310. Thus, the target control point 311 is 12 meters with zero relative velocity, which is the point represented by the intersection of line 310 (12 meters gap) and line 312 (zero relative velocity).


The torque request controller component 221 of gap regulator 210 is configured to generate a torque request that is appropriate to control the gap in accordance with target control line 320. The torque request is then implemented by engine torque controller 152. As can be seen in FIG. 5, when the gap is larger than the desired gap, the rear truck is controlled to travel slightly faster than the front truck is traveling such that the relative velocity of the rear truck has a small positive value. As the rear truck draws closer to the lead truck, its relative velocity is reduced in a smooth manner until the gap is reduced to the target control point 311, at which point the relative velocity would be zero if perfect control were attained. If the rear truck gets closer than the desired gap, it is slowed so that it has a negative relative velocity relative to the lead truck to reestablish the desired gap.


The sliding mode controller 215 utilizes a unified sliding mode control scheme during both the “pull-in” and gap maintenance stages of platooning. Configuring the sliding mode controller to control towards target control line 320 helps ensure that the relative speed vs. gap relationship stays within a region safe for platooning.


In the embodiment illustrated in FIG. 3, the sliding mode controller 215 includes separate controllers (e.g. torque request controller 221 and brake request generator components 223) which are configured to control towards different gap control targets. The different control targets are illustrated in the state space diagrams of FIG. 5 which show a control scheme in accordance with one specific implementation. More specifically, FIG. 5 shows a brake request controller target control line 330 in addition to torque request controller target control line 320. FIG. 5 additionally shows representative transition paths from various points in the state space to the torque request target control line 320.


For most open highway driving conditions, modulating the torque request alone is sufficient to control the gap appropriately without requiring the use of the foundation brakes. This is in part because the torque request can be negative to a certain degree without needing to actuate the foundation brakes through the use of engine braking and/or the retarder (if available). As mentioned above, when fuel is cut-off there will be some pumping losses and some frictional losses in the powertrain, so some level of negative torque can be provided while using normal valve timing by simply reducing the fuel charge appropriately. When larger negative torque is needed, the engine torque controller 152 can create larger negative torques by actuating the retarder and/or by taking other appropriate measures.


Separately, the brake request controller component 223 of gap regulator 210 is arranged to generate brake requests during normal operation that are generally arranged to maintain a different gap—specifically a smaller gap—than the torque request controller 221 targets. This difference in the gaps that the torque and brake request controllers control to is sometimes referred to herein as the gap tolerance 340. In general, brake requests 213 are not generated unless or until the gap is reduced at least the gap tolerance below the torque request target control line 320. Since the brakes can only be used to slow the vehicle, the effect of this difference is that the trailing truck will be allowed to creep in a relatively small amount (2 meters in the example) before the foundation brakes are actuated when the gap regulator 210 cannot maintain the desired gap through control of the torque request alone. When the desired gap can be restored by modulating the torque requests alone without crossing target brake control line 330, then the foundation brakes do not need to be used at all. This has the effect of safely maintaining a gap while reducing the probability that the foundation brakes will be deployed unnecessarily.


Normal gap control is illustrated in FIG. 4A. During normal gap control, the sliding mode controller 215 is use to determine torque and brake requests that are appropriate to attain and maintain the target gap set by control parameter selector 206. When appropriate, the torque and brake requests generated by the sliding mode controller 215 may be scaled appropriately by selector/adder 250 based on inputs from feed forward scaler 212. In this normal gap control mode, the outputs of the relative velocity controller 218 are not used in the control of the trailing vehicle.


In some embodiments, the sliding mode controller 215 includes separate torque request and brake request controllers 221, 223 as illustrated in FIG. 3. The torque request and brake request controllers 221, 223 are configured to control the engine and brakes respectively towards different gap targets which tends to provide a smoother, more comfortable ride and reduce the use of wheel brakes (e.g., the foundation brakes in tractor-trailer rigs) compared to control in which the engine and brakes are controlled to the same target gap. Such a gap control architecture is described in more detail in U.S. Provisional application No. 62/489,662, which is incorporated herein by reference.


Although the sliding mode controller 215 works very well to control the gap, there will be operational circumstances in which different types of control may be appropriate. For example, a different type of control may be desirable when it is necessary to dissolve a platoon and return the trailing vehicle to manual or other automated control. Typically, the gap between vehicles during platooning will be smaller, often much smaller, than can safely be maintained by a driver under manual control. Therefore, in general, when a platoon is dissolved with the intent to restoring manual control of the trailing vehicle, it will be desirable to grow the gap to a distance that is appropriate for manual control before relinquishing control to the driver. This can be accomplished in a smooth manner by relative velocity controller 218.


When operating state selector 203 determines that the platoon should be dissolved, it directs the GAP regulator 210 to transition to a dissolve mode as represented by FIG. 4B. In the dissolve mode, primary control is provided by relative velocity controller 218. The control parameter selector 206 may designate a desired (target) relative velocity for the trailing truck during the dissolve. The specific target relative velocity may vary based on the nature of the circumstances and/or the vehicles involved in the platoon. In general, it is desirable to select a relative velocity that will cause the vehicles to gradually, but expeditiously separate, without requiring the trailing vehicle to slow excessively (which could unduly hinder following traffic) and preferably without requiring the lead vehicle to alter its drive plan. By way of example, relative velocities during dissolves on the order of 0.5 to 4 meters per second, as for example, 1-2 m/s, have been found to work well in the context of platooning trucks.


During a dissolve, the lead vehicle may take a variety of actions. For example, the lead truck may accelerate or increase its torque command aggressively. In such cases, it may not be desirable to try to accelerate the trailing truck in a similar manner thereby allowing the lead vehicle to pull away more than would otherwise occur under relative velocity control. One way to accomplish this in the context of platooning trucks is to ignore or otherwise disable positive torque commands from feed forward scaler 212.


Another potential scenario is that the lead truck brakes or slows significantly while under velocity control. In some circumstances, the velocity controller 218 may be configured to permit a certain amount of gap shrinkage when the gap is relatively larger to thereby reduce the overall amount of braking required. In the illustrated embodiment, the sliding mode controller is configured to ensure that the gap between the vehicles is always sufficient to give the trailing vehicle sufficient time to respond in a manner that prevents the trailing vehicle from running into the back of the lead vehicle regardless of the occurrence of (reasonable) unexpected events. Therefore, if the sliding mode controller is outputting a braking or negative torque signal that has a greater magnitude than the relative velocity controller, then that larger braking/negative torque command should be passed to the vehicle's engine and braking controllers. Therefore, during a dissolve, the selector/adder 250 is configured to only utilize negative commands (i.e., braking commands and negative torque commands) from the sliding mode controller 215 and to only use such commands when they are greater in magnitude than the commands from the relative velocity controller 218.


There may also be operational circumstances outside of dissolves in which relative velocity control or simply velocity control is desired. For example, there may be circumstances in which the back of the lead vehicle moves out of view of the trailing vehicle's tracker(s) 116 or the tracker(s) 116 otherwise loses sight of the back of the platoon partner. This can occur, for example, as a result of a lane change by one of the platoon partners. In such a circumstance the gap regulator may not have an accurate measure of the longitudinal gap between the vehicles—and may have to rely on less accurate approaches for determining the gap such as the vehicle's respective GNSS positions. In such circumstances, it may be desirable to control the trailing vehicle to slowly drop back until the back of the lead vehicle comes within the tracker's view. Again, the relative velocity controller 218 is well suited for use in this circumstance—although the preferred relative velocity control may be a bit different than occurs during a dissolve. Specifically, the goal is typically not to drop back as quickly or as far as would occur during a dissolve—thus a smaller relative velocity (e.g. 0.5 m/s vs. 2 m/s), may be appropriate.


One approach to such relative velocity control is illustrated in FIG. 4C. In the velocity control scheme of FIG. 4C velocity controller 218 is used in conjunction with normal scaling from feed forward scaler 212. This causes the trailing platoon partner to better follow lead vehicle accelerations and/or torque increases than occurs during the dissolve state illustrated in FIG. 4B. At the same time, for safety purposes, braking requests and negative torque request from the sliding mode controller 215 may be utilized as appropriate by selector/adder 250 in a manner similar to the approach described above with respect to FIG. 4B.


Safety Focused Architecture


When developing an autonomous vehicle controller, it is important for the system to be safe (truly safe). It is also important for the system to be verifiably safe. That is, it is desirable to be able to verify with a high degree of confidence that the system is safe. As discussed in the background, some standards organizations and governments have promulgated guidelines and/or standards intended to classify the safety risks associated with vehicle operation. One such effort is the Automotive Safety Integrity Level (ASIL) risk classification scheme defined by ISO 26262—Functional Safety for Road Vehicles standard. There are currently four safety integrity levels identified by the ASIL standard: ASIL-A, ASIL-B, ASIL-C, and ASIL-D. ASIL-D represents the highest integrity requirements and ASIL-A corresponds to the lowest level compliance requirements of the defined standards. Matters that are not directly covered by the standard are identified as QM for “Quality Management” which from the context of ASIL, means that their integrity levels are not represented to fall within the copy of any of the ASIL standards.


There are potentially significant advantages to making a platoon control system verifiably safe, as for example, by making the platoon controller ASIL compliant (and/or compliant with other safety integrity level standards). Most notably, many ECUs, powertrain control modules (PCMs) and other controllers used in commercially available road vehicles are designed to expect that all commands that they receive come from ASIL compliant components that conform to a particular minimum ASIL level—as for example, at the ASIL-C level or higher. Therefore, it is desirable for control commands issued from the platooning system to be ASIL rated or to meet other designated reliability criteria or standards. It is also desirable for the overall system to be safe to some chosen level. Processes and standards like ISO 26262 are also useful to guide the development of safe systems.


ASIL compliance is a rigorous standard which requires extensive command integrity checking and data verification. In general, data used in ASIL integrity checking must come from, or be verified by ASIL compliant devices of at least the same integrity level. Inputs from QM rated devices (or lower level ASIL devices) may be used in ASIL compliant devices, as long as the reasonableness of their commands or data are verified by the ASIL device to the appropriate standards.


Some of the data used in platoon control (such as GPS position data) cannot itself be readily verified to a level required by ASIL. As such, it can be challenging to design every component in the entire platoon control system in a manner that meets the ASIL standards and thus ensures that the commands are proper to achieve safety targets. Therefore, it can be useful to divide the platoon control system into distinct QM and ASIL components (or different ASIL level components), with all of the components that send instructions directly to any of the vehicles control systems being ASIL compliant (or compliant to the higher ASIL level).



FIG. 6 illustrates a platoon control system hardware architecture that is particularly well suited suitable for ASIL compliant platoon control. The illustrated embodiment includes three separate controller hardware units. These include platoon controller 410, vehicle interface controller 460 and gateway processor 470. Selected components of a representative gateway processor 470 are illustrated in FIG. 7. As best seen in FIG. 6, the platoon controller 410 communicates with the vehicle interface controller 460 through an interface 420 and with gateway 470 through a direct link 478. In some embodiments, the link 478 is a dedicated direct wired connection and no other devices are coupled to that link. The wired connection may be provided by any suitable form of cabling or traces, as for example co-ax cable, twisted pair wirings, fiber optics or any other suitable physical connection medium.


In the illustrated embodiment, the platoon controller 410 incorporates all of the functionality of platoon controller 110 described above. The vehicle interface controller 460 (also sometimes referred to as a system manager) performs the functionality of actuator interface 160 and further includes a number of safety monitors. In some embodiments, the safety monitors are arranged to execute ASIL compliant safety monitoring algorithms and the vehicle interface controller 460 is designed as an ASIL compliant device.


In general, the vehicle interface controller 460 includes a higher safety level processor and software (including the safety monitors) that independently verify the commands transmitted by the platoon controller 110 before they are passed on to the vehicle actuators. These verifications use a subset of the available sensor inputs, together with verification algorithms that are independent and distinct from those used by the platoon controller.


The gateway processor 470 is arranged to coordinate communications between a host vehicle and the platoon partner(s) and to coordinate communication between the host and the network operation center and/or any other entities that are external to the vehicle. As such, in a specific implementation of the system illustrated in FIG. 1 the gateway processor 470 includes the inter-vehicle communications controller 170 and NOC communication controller 180 as best illustrated in FIG. 7. Typically the inter-vehicle communications controller utilizes a short-range, vehicle-to-vehicle wireless communications protocol, as for example the DSRC protocol. The NOC communication controller typically communicates with a networks operations center using cellular or satellite communications.


In some embodiments, the connection (link 478) between the gateway processor 470 and the platoon controller 410 is a dedicated direct wired connection and no other devices are coupled to the link. In some implementations an Ethernet or similar standardized wired communications protocol is used to pass information between the gateway processor and the platoon controller. This facilitates high speed, high reliability communications between the gateway processor and the platoon controller. In a specific example, a 100BASE or higher (e.g. 1000BASE, 10GBASE, etc.) Ethernet physical layer may be used, although it should be appreciated that a variety of other physical layers may be used in other embodiments.


In some embodiments, the gateway processor 470 is also arranged to communicate with a forward facing camera 477 mounted on the vehicle and a dashboard display 475. When the host vehicle is the lead vehicle in a platoon, the gateway processor transmits a video feed received from the forward facing camera 477 to the trailing vehicle(s) so that the driver of the trailing vehicle has a view of what is in front of the lead vehicle. When the host vehicle is a trailing vehicle in the platoon, the gateway processor 470 receives such a video feed from the gateway processor on the lead vehicle and transmits the feed to the dashboard display 475 where it is displayed to give the driver of the host vehicle a view of what is in front of the lead vehicle. Displaying a view of what is in front of the lead vehicle to drivers of a trailing vehicle is desirable since the to give the driver of the trailing vehicle a sense of comfort and the ability to independently react to situations that occur in front of the platoon. This can be particularly important because in many platoons (e.g. platoons that involve tractor trailer trucks) the trailing vehicle will be very close to the lead vehicle (much closer than normal manual driving) and the lead vehicle will effectively block the view of the trailing vehicle which can be an uncomfortable experience for drivers and/or passengers in a trailing platoon partner—especially when they do not have access to a view of what is going on in front of the platoon.


The video streams passed through the gateway may be managed by a video manager 474. Since the gateway 470 communicates directly with the camera 477 and/or dashboard display 475, the platoon controller 410 is not in any way burdened by the need to manage that data flow.


In some embodiments the gateway 470 also includes a message logger 473 that logs various messages and other information passed there through in order to provide a record for diagnostic purposes and the like. The functionality of the message logger 473 will be described in more detail below.


The platoon controller 410 is configured as a listener on any appropriate vehicle communications buses where it can directly obtain information about the vehicle's operational state—such as the vehicle's current wheel speed, any brake or accelerator pedal inputs, steering wheel position (as appropriate), transmission gear, etc.. It is also coupled to sensor units such as GPS unit 131 to receive positional information about the location of the vehicle, and to forward looking radar unit 137 to receive information about the position of objects outside the vehicle (e.g., radar scenes). Similar information may be obtained from other sensors as well, such as lidar 138, camera(s) 139 etc. Since the platoon controller 410 is configured strictly as a listener on the vehicle's communication bus(es) and does not itself transmit information over such bus(es), it does not need to be ASIL compliant, as long as the control commands it outputs to the vehicle interface controller are verified to ASIL standards by the vehicle interface controller 460.


The vehicle interface controller 460 (also sometimes referred to as the system manager 460), which is ASIL compliant, is arranged to send commands to, and otherwise communicate with, the vehicle's engine controller (EECU), the brake controller (BECU), and/or any other appropriate controllers either directly or via one or more communications buses, such as the vehicle's CAN bus(es).


In the illustrated embodiment, the interface 420 between platoon controller 410 and vehicle interface controller 460 (also sometimes referred to as the system manager 460) is fairly narrowly defined. It includes the substantive commands generated by the platoon controller—which in the illustrated embodiment include torque request 422, brake request 424, and optionally a retarder request 426. When the platoon controller also controls the steering or other aspects of the host vehicle steering and/or other appropriate control commands (not shown) may be included as well.


The interface 420 also includes a platooning state indicator 428 that is a signal from the platoon controller indicating whether or not it believes that its output should be directing operation of the vehicle. The platooning state indicator 428 may take many forms, as for example a simple flag that when high indicates that the platoon controller 410 believes that platooning is/should be active and that its torque, braking and retard commands 422, 424, 426 should be followed. In such an arrangement, a low flag state indicates that the platoon controller believes that it is not controlling the vehicle. The vehicle interface controller 460 does not forward any torque, braking, retard or other control commands at any time that the platooning state indicator 428 indicates that platoon control is not active. In the event (generally unlikely) that one of the safety monitors 465 indicates that platooning is not appropriate when the platoon controller 410 believes that platooning is valid (as indicated by platooning state indicator 428), the vehicle interface controller/system manager 460 initiates a termination of the platoon.


The interface 420 also facilitates the transmission of certain state information—which is preferably ASIL validated state information—about both the host vehicle and the partner truck that is useful to the safety monitors. Specifically, the host vehicle state information 441 includes state information about the host vehicle that has been validated (e.g., ASIL-C validated) by the system manager 460 and is useful to one or more safety monitors on the partner vehicle. The partner vehicle state information 444 includes state information about the partner vehicle that has been validated by the partner vehicle's system manager and is useful for one or more safety monitors 465 on the host vehicle. Host vehicle state information 441 is transmitted to the platoon controller 410, which forwards such information without modification to the gateway 470, which in turn forwards the host vehicle state information to the gateway on the partner vehicle. Partner vehicle state information 444 received by gateway 470 from the partner vehicle's gateway is forwarded without modification to the platoon controller 410 and from there to system manager 460 (again without modification). Preferably the host state information 441 is transmitted with a checksum or other suitable data integrity verification mechanism that allows the receiving system manager to verify that the data it receives is uncorrupted. Any corrupted information can then be ignored. With this approach the ASIL validated state information is passed without modification from one ASIL compliant device (system manager 460 on a first platoon partner) to another (system manager 460 on a second platoon partner) and therefore is suitable for use in ASIL compliant safety checking algorithms—even when intermediate transmitting devices (e.g., platoon controller 410, gateway 470) are not themselves ASIL compliant.


The host and partner vehicle state information may include any ASIL validated state information that is used by any of the safety monitors. This may include, for example, vehicle wheel speeds, brake requests, torque requests and/or delivered torque, brake air supply pressure, steering position, accelerometer readings, brake pad wear, tire pressure, engine temperature, pedal position and/or any other information about the partner vehicle used by the system manager 460 as part of a safety monitor. To the extent that the platoon controller 410 utilizes partner state information originated by an ASIL validated device beyond the state information used by the system manager 460, that information can optionally be included in the vehicle state information 441, 444 as well—although such inclusion is not necessary and usually not desirable since such information can typically be obtained and sent by the partner vehicle's platoon controller, which reduces the bandwidth that needs to be allocated to the interface 420.


It is noted that some of the host vehicle's sensor information (e.g., wheel speed, brake pedal position, radar scenes, etc) is used by both the platoon controller 410 and the system manager 460. Since the platoon controller 410 is preferably an authorized listener on any appropriate vehicle control bus(es), the platoon controller does not need to wait to receive such information from the system manager. Rather, it obtains any relevant host vehicle sensor information directly from the appropriate sensor over any suitable connection such as an appropriate CAN bus. However any sensor information relevant to the system manager on the partner vehicle is read by the system manager (regardless of whether it is also read by the platoon controller) and included in host vehicle state information 441 so that the partner vehicle's system manager is ensured that such information is ASIL verified. In other embodiments any host vehicle sensor information that is not directly accessible by the platoon controller can be received via the system manager 460 acting as an intermediary.


Although there will be some overlap in the sensor information used, it should be appreciated that the host vehicle sensor information used by the host vehicle platoon controller 410 and the host vehicle system manager 460 will often vary and may further vary from the partner vehicle sensor information of interest. For example, the host platoon controller utilizes GNSS position data in the determination of the torque and braking requests, however the GNSS position information may not be utilized by the System Manager since it is not ASIL compliant.


Some of the sensor information that is used by the safety monitor on the host vehicle may not be needed by the safety monitor on the partner vehicle. This may include information such as the radar scenes, the accelerator pedal position, inputs from a host vehicle driver interface device 469, etc. To the extent that such sensor information is not used by the partner vehicle, there is no need for such information to be included in the vehicle state information 441, 444.


Some of a host vehicle's sensor information that is used by the platoon controller on the partner vehicle may not be ASIL compliant and therefore may not be used in the safety monitors on the partner vehicle. Such, sensor information that is not relevant to the safety monitors on the partner vehicle does not need to be included as part of vehicle state information 441, 444. Rather, such data may be obtained by the platoon controller 410 and sent to the corresponding platoon controller on the partner vehicle (by way of communication controllers 470). For example, it is extremely difficult to ASIL validate GPS or other GNSS position data. Therefore, GNSS position data is preferably not included in the vehicle state information 441, 444. Rather, such information is passed from the host vehicle's platoon controller to the partner vehicle's platoon controller via the gateways 470.


The driver interface device 469 may be a button or other suitable mechanism positioned at a convenient location on the host vehicle dashboard or elsewhere in the host vehicle cabin. The driver interface device 469 is a mechanism that the driver may press as appropriate to indicate that the driver is ready to platoon during initiation of a platoon, or to initiate the dissolution of a platoon when platooning is no longer desired. The use of the driver interface device 469 is described in more detail in U.S. patent application Ser. No. 15/607,902 which is incorporated herein by reference. In the illustrated embodiment, commands from the driver interface device 469 (which are preferably ASIL compliant) are sent to the vehicle interface controller 460 and passed from there to the platoon controller 410. Similarly, requests to the driver interface device pass from the platoon controller to the vehicle interface controller 460 and from the vehicle interface controller 460 to the driver interface device 469. This architecture simplifies the work that must be done to make the driver interface device 469 ASIL compliant. It should be appreciated, however, that in other embodiments, the platoon controller 410 may also be a direct listener to commands from the driver interface device. In the embodiment illustrated in FIG. 6, interface 420 includes driver platoon related requests and commands 427 which represent the request sent to and commands received from the driver interface device 469.


In some specific embodiments, the vehicle interface controller 460 is implemented as a single dedicated integrated circuit chip and the platoon controller 410 and gateway processor 470 are each implemented as separate system on modules (SOMs).


The platoon control system hardware architecture illustrated in FIG. 6 is particularly well suited for efficiently handling platooning control related tasks in an ASIL compliant manner using information available from a variety of sources including sources that are not themselves ASIL. With the described arrangement, the powertrain control commands ultimately issued by the control system may be ASIL rated.


The hardware architecture of FIG. 6 also has several advantages from a security standpoint. In the illustrated embodiment, the gateway processor 470 is not connected to any of the vehicle's control related communications buses (e.g., the CAN bus(es)). Therefore, the gateway processor 470, which is potentially the least secure of the three hardware components, is not able to transmit any information directly onto any of the more secure vehicle communications buses or receive any information directly from such buses—which is advantageous from a security standpoint since a nefarious entity cannot gain control the vehicle in any way by somehow hacking into the gateway processor 470. Furthermore, with this arrangement, the gateway processor 470 does not need to be ASIL compliant which greatly simplifies its certification.


In some embodiments, at least one of the vehicle communications buses is a dedicated sensor information bus that only carries sensor based information. The use of sensor information buses is particularly useful for transmitting high volume information such as the information or data transmitted by radar units, lidar units, camera units, ultrasound units, GNSS units, etc. In most applications, the information transmitted over a sensor information bus will be synthesized information. For example, in the context of a radar unit, the information transmitted over the sensor information bus may be the identification of objects detected by the radar unit together with the relative position and relative velocity of such objects. Similar types of information may be received from lidar, cameras and/or other distance measuring technologies. Information transmitted from camera units and/or other sensors may also arranged to predict future movements or intentions of detected objects.


The specific information transmitted over the sensor information bus may vary widely in accordance with the needs and capabilities of any system, and when desired, the transmitted information may include, or take the form of rawer forms for sensor data. An advantage of using one or more dedicated sensor information buses is that the sensor information, which may be both relatively high volume and time critical, does not unduly clog other vehicle information buses and is not delayed by the transmission of other types of information over such buses. It also makes it easy to provide access to the sensor information to components needing such information while still controlling such components access to controllers or devices that such components don't need to have access to—which is desirable from a security standpoint.


Safety Algorithms


In the primary embodiments described above, the safety monitors 465 are resident on the vehicle interface controller 460. Although this architecture is particularly desirable, it should be appreciated that safety monitors may be provided at other locations in the system in addition to, or in some circumstances, in place of, being located on the vehicle interface controller. For example, in some embodiments, it may be desirable for various vehicle controllers such as an ECU or a brake controller to execute its own safety monitors in addition to, or in place of safety monitors executed as part of the vehicle interface control.


An extremely wide variety of different safety algorithms can be implemented by the safety monitors and the information used by the safety algorithms may come from a wide variety of sources. In many circumstances, a safety monitor will utilizes sensor information from the host vehicle and/or a connected or partner vehicle. Virtually any sensor information deemed useful to a safety check may be used. By way of example, some of the sensor information that may be used by one or more safety monitors may come from radar units, lidar units, one or more cameras, ultrasonic distance measuring units, a compass, gyroscopes, GNSS sensors, accelerometers, wheel speed sensors, tire pressure sensors, brake pad wear sensors, brake pressure sensors, engine temperature sensors, ambient temperature sensors, humidity sensors, weather sensors, pedal position sensors, engine speed sensors, engine torque sensors, transmission configuration sensors, engine speed sensors, tire wear sensors, vehicle weight sensors, suspension pressure sensors, trailer identification information, system fault sensors, occupant detection sensors, seatbelt status sensors, etc. The safety monitors may also use system faults identified by various engine or other vehicle diagnostic systems.


In many circumstances, the safety monitors fuse information received from one or more host vehicle sensors, with information (e.g. sensor information) received from other vehicles to verify the reasonableness of the commands (e.g., torque and braking commands) received from the connected vehicle/platoon controller 110. Other safety algorithms may utilize information received from driver inputs alone or in combination with sensor information received from one or both vehicles. Such driver inputs may take the form of inputs to the host (or partner vehicle) driver interface device 469, driver initiated movement of an accelerator or brake pedal, actuation of a retarder or any other available source. Still other safety monitors can utilize information from external sources such as a network operation center or a source of traffic or road information as part of a safety check.


The ability to fuse verified information received from a second (e.g. partner vehicle) with sensor data received from the host vehicle itself and/or host vehicle driver inputs as part of the safety algorithm check is particularly powerful.


In implementations that utilize a vehicle interface controller is often desirable to execute any safety algorithms that utilized verified data received from another vehicle or other external sources on the vehicle interface controller. In this way, any safety algorithms executed on the host vehicle controller cannot be influenced by, and do not need to be aware of, anything that occurs outside of the vehicle, which inherently provides another layer of security.


Message Logging


As mentioned above, the gateway 470 preferably includes a message logger 473 that is configured to log a variety of messages and other information passed there through in order to provide a comprehensive record of platoon session that can be useful for diagnostic, machine learning purposes and other purposes. In general, it is desirable to log all of the control related messages that pass between the vehicles through the gateway. This includes the verified partner state information 444 and the verified host vehicle state information 441 that is passed between the system managers 460 through the gateway 470. It also includes any sensor information transmitted to, from or between the platoon controllers 410, such as GNSS position data (such information is sometimes referred to herein as unverified state information since it is not ASIL verified by the system manager even though it should be appreciated that various data verification can be performed on such data by a GPS unit, the platoon controller, the gateway itself or any other suitable unit if desired).


In some embodiments the platoon controller itself does not have any logging capability—which has the advantage of simplifying the platoon controller's tasks and relieving it of the complexity and computational load associated with logging. In such embodiments it is desirable to transmit commands generated by the platoon controller such as the torque request 422, the braking request 424, retarder request 426 and platoon state request 428 to the gateway for logging purposes even if those commands are not conveyed to the partner vehicle.


When desired, other sensor information that is utilized by the platoon controller but not passed to the partner vehicle such as accelerator pedal inputs, radar scenes or scenes from other environmental sensors such as lidar, camera systems, etc. may be recorded as desired for diagnostic purposes. The specific information recorded may vary based on the design goals of the logging and/or diagnostic system. It is noted that high bandwidth streams that are not directly used in platoon control such as the partner vehicle video feed transmitted to dashboard display 475 or received from the forward facing camera 477 would typically not be logged, although that is possible.


In many embodiments, the system manager 460 also does not have any independent logging capabilities. When that is the case, the system manager can be configured to send any information desired to be logged to the gateway 470 as well. (Such messages pass through the platoon controller 410 in the illustrated embodiments). Examples of information that may be desirable to log may include messages relating to any safety monitor algorithms that detect an unusual situation or a potential problem; the commands receive from the driver interface device, the actions of the safety monitor itself, etc.


In general, all of the messages logged are time stamped so that their order and relative timing can readily be reconstructed as desired.


In the description above, a safety focused architecture that is well suited for use in autonomous vehicle and connected vehicle is described. Although the invention has been described primarily in the context of a platoon control system, it should be appreciated that the described architecture is very well suited for use in a wide variety of connected vehicle application in which the control of a host vehicle is based in part on sensor inputs from one or more other vehicles. Thus, exactly the same architectures can be used in systems in which a connected vehicle controller that generates torque, braking and/or other control commands based in part on inputs from a second vehicle is substituted for the platoon controller.


More broadly, the described use of higher safety level processing of control commands generated by a vehicle controller by a separate system can be used in a wide variety of different autonomous and automated vehicle applications (including both partially and fully autonomous/automated vehicle control). For example, a wide variety of different autonomous/automated vehicle controllers can readily be substituted for the described platoon controller.


Although particular platoon and gap controller architectures are illustrated in FIGS. 2, 3 and 6, it should be appreciated that the specific architectures utilized may vary widely to meet the needs of any particular platooning or other automated vehicle control scheme. As will be apparent to those familiar with the art, the described control functionality can be implemented algorithmically using software or firmware algorithms executing on one or more processors, using programmable logic, using digital or analog components or using any combination of the preceding.


In the detailed description above, it is assumed that the controlled power plant is an internal combustion engine, as for example a diesel engine. However, it should be appreciated that the described control approach can be utilized regardless of the nature of the power plant used to provide torque to drive the host vehicle. Thus, for example, the control techniques are equally applicable to electric vehicles, hybrid vehicles, vehicles using turbine engines and/or any other type of powerplant. Furthermore, although the invention has been described primarily in the context of particular applications related to platooning and vehicle convoying, it should be appreciated that the invention may be applied to a variety of other vehicle control systems involving any of level 1-5 automation, including adaptive cruise control, highway-only automation systems, low-speed only automation systems, etc. Therefore, the present embodiments should be considered illustrative and not restrictive and the invention is not to be limited to the details given herein, but may be modified within the scope and equivalents of the appended claims.

Claims
  • 1. A connected vehicle control system for at least partially automatically controlling a host vehicle having one or more vehicle communication buses, based at least in part on information received from a second vehicle, the connected vehicle control system comprising: a connected vehicle controller configured to determine vehicle control commands for at least partially automatically controlling the host vehicle, the connected vehicle controller being configured as a listener capable of receiving messages transmitted on at least one of the vehicle communication buses;a gateway processor arranged to coordinate communications between the host vehicle and the second vehicle, the gateway processor further being configured to communicate with the connected vehicle controller; anda vehicle interface controller arranged to manage communications between the connected vehicle controller and one or more host vehicle control units, the vehicle interface controller being configured to receive the vehicle control commands from the connected vehicle controller and to communicate corresponding vehicle control commands to the appropriate host vehicle control unit(s), the vehicle interface controller including a safety monitor that includes one or more safety monitoring algorithms that, during at least partially automated driving, verify that commands received from the connected vehicle controller meet selected safety criteria, and wherein the vehicle interface controller is configured to transmit and receive messages on at least one of the vehicle communication buses.
  • 2. A connected vehicle control system recited in claim 1, wherein the vehicle control commands including at least one of a torque request and a braking request.
  • 3. A connected vehicle control system as recited in claim 1, wherein the vehicle interface controller has an ASIL rating that is at least ASIL-C compliant.
  • 4. A connected vehicle control system as recited in claim 3, wherein the connected vehicle controller and the gateway processor each have an ASIL rating that is lower than the ASIL rating of the vehicle interface controller.
  • 5. A connected vehicle control system as recited in claim 4, wherein the connected vehicle controller and the gateway processor are each QM rated under ISO 26262.
  • 6. A connected vehicle control system as recited in claim 1, wherein an interface between the connected vehicle controller and the vehicle interface controller includes one or more items from the group consisting of: torque requests from the connected vehicle controller,brake requests from the connected vehicle controller, andverified second vehicle state information indicative of at least a speed and a braking level of the second vehicle.
  • 7. A connected vehicle control system as recited in claim 6, wherein the interface between the connected vehicle controller and the vehicle interface controller further includes verified second vehicle state information indicative of at least a speed and a braking level of the second vehicle; and wherein at least one of the safety monitoring algorithms utilizes at least some of the verified second vehicle state information.
  • 8. A connected vehicle control system as recited in claim 7, wherein the verified second vehicle state information is information prepared and verified by a vehicle interface controller on the second vehicle and wherein the verified second vehicle state information is: received from the second vehicle by the gateway processor;passed from the gateway processor to the connected vehicle controller without modification by the gateway processor;passed from the connected vehicle controller to the vehicle interface controller without modification by the connected vehicle controller;used by the connected vehicle controller in the determination of vehicle control commands; andused by at least one of the safety monitoring algorithms.
  • 9. A connected vehicle control system as recited in claim 8, wherein: the gateway processor is further configured to receive unverified state information from the second vehicle, the unverified second vehicle state information including at least GNSS position information indicative of a position of the second vehicle; andthe unverified second vehicle state information is passed to the connected vehicle controller and used by the connected vehicle controller in the determination of vehicle control commands.
  • 10. A connected vehicle control system as recited in claim 9, wherein the unverified second vehicle state information is not passed to the vehicle interface controller.
  • 11. A connected vehicle control system as recited in claim 7, wherein: the verified second vehicle state information is passed in second vehicle state information data blocks, each second vehicle state information data block including a checksum applied by the vehicle interface controller on the second vehicle; andthe host vehicle interface controller is configured to utilize the checksums to verify the integrity of the second vehicle state information.
  • 12. A connected vehicle control system as recited in claim 6, wherein the interface between the connected vehicle controller and the vehicle interface controller further includes: verified host vehicle state information indicative of at least a speed and a braking level of the host vehicle.
  • 13. A connected vehicle control system as recited in claim 12, wherein the host vehicle state information is transmitted from the vehicle interface controller to the connected vehicle controller for subsequent unmodified transmission to the second vehicle via the gateway processor.
  • 14. A connected vehicle control system as recite in claim 6, wherein at least one of the host vehicle control units includes one or more additional safety monitoring algorithms configured to verify that commands received from the vehicle interface controller meet selected safety criteria.
  • 15. A connected vehicle control system as recited in claim 1, wherein: the connected vehicle controller is configured to be unable to transmit messages onto any of the vehicle communication buses.
  • 16. A connected vehicle control system as recited in claim 1, wherein: one of the vehicle communication buses is a sensor information bus connected to one or more host vehicle sensors, the sensor information bus being dedicated to carry only host sensor information, the vehicle interface controller being arranged to receive at least some of the host sensor information carried on the sensor information bus; andat least one of the safety monitoring algorithms is configured to use selected host sensor information received over the sensor information bus in the verification that the commands received from the connected vehicle controller meet the selected safety criteria.
  • 17. A connected vehicle control system as recited in claim 16, wherein the one or more host vehicle sensors include at least one sensor selected from the group consisting of: radar, lidar, a camera, an ultrasonic distance measuring unit, a compass, a gyroscope, a GNSS sensor, an accelerometer, a wheel speed sensor, a tire pressure sensor, a brake pad wear sensor, a brake pressure sensor, an engine temperature sensor, an ambient temperature sensor, a humidity sensor, a weather sensor, a pedal position sensor, an engine speed sensor, an engine torque sensor, a transmission configuration sensor, an engine speed sensor, a tire wear sensor, a vehicle weight sensor, a suspension pressure sensor, trailer identification information, system faults, an occupant detection sensor, and a seatbelt status sensor.
  • 18. A connected vehicle control system as recited in claim 16, wherein the connected vehicle controller is connected to the sensor information bus.
  • 19. A connected vehicle control system as recited in claim 1, wherein the gateway processor is not capable of receiving or transmitting any messages on any of the vehicle buses.
  • 20. A connected vehicle control system as recited in claim 1, wherein the gateway processor is not coupled to any of the vehicle buses.
  • 21. A connected vehicle control system as recited in claim 1, wherein the one or more vehicle buses are Controller Area Network (CAN) buses.
  • 22. A connected vehicle control system as recited in claim 1, wherein: the connected vehicle controller is configured as a first system on module (SOM);the gateway processor is configured as second system on module (SOM); andthe vehicle interface controller is implemented as a single packaged integrated circuit.
  • 23. A connected vehicle control system as recited in claim 1, wherein the connected vehicle controller is a platoon controller and the second vehicle is a platoon partner and the safety monitoring algorithms are configured to verify that selected safety criteria are met during platooning.
  • 24. A connected vehicle control system as recited in claim 23, wherein an interface between the platoon controller and the vehicle interface controller includes one or more items from the group consisting of: torque requests from the platoon controller;brake requests from the platoon controller; andverified platoon partner state information indicative of at least a speed and a braking level of the platoon partner.
  • 25. A connected vehicle control system as recited in claim 24, wherein: the interface includes verified platoon partner state information indicative of at least a speed and a braking level of the platoon partner; andat least one of the safety monitoring algorithms utilizes at least some of the verified platoon partner state information.
  • 26. A connected vehicle control system as recited in claim 24, wherein the interface between the platoon controller and the vehicle interface controller further includes: a platoon state indicator that indicates when the platoon controller believes its vehicle control commands should be directing operation of the host vehicle.
  • 27. A connected vehicle control system as recited in claim 24, wherein the interface between the platoon controller and the vehicle interface controller further includes a platoon controller retard request that designates a desired level of retarder based braking.
  • 28. A connected vehicle control system as recited in claim 24, further comprising: a driver interface device arranged to receive driver commands to authorize platooning and to dissolve platooning, the driver interface device being configured to communicate platoon authorization and platoon dissolve commands to the vehicle interface controller; andwherein the platoon authorization and platoon dissolve commands are utilized by at least one of the safety monitor algorithms.
  • 29. A connected vehicle control system as recited in claim 28, wherein the interface between the platoon controller and the vehicle interface controller further includes a driver interface device state indicator indicative of commands inputted by a driver using the driver interface device.
  • 30. A connected vehicle control system as recited in claim 24, wherein the interface between the platoon controller and the vehicle interface controller further includes a platoon controller steering request that conveys steering commands from the platoon controller to the vehicle interface controller.
  • 31. A connected vehicle control system as recited in claim 1, wherein the host vehicle and the second vehicle are both trucks.
  • 32. A vehicle control system for at least partially automatically controlling a host vehicle, the vehicle control system comprising: a vehicle controller configured to determine torque and braking requests for at least partially automatically controlling the host vehicle; anda vehicle interface controller arranged to manage communications between the vehicle controller and one or more host vehicle control units, the vehicle interface controller being configured to receive the torque and braking requests from the vehicle controller and to communicate corresponding torque and braking requests to the appropriate host vehicle control unit(s), the vehicle interface controller including a safety monitor that includes one or more safety monitoring algorithms that, during at least partially automated driving, verify that commands received from the vehicle controller meet selected safety criteria; andan interface between the vehicle controller and the vehicle interface controller includes torque requests from the vehicle controller, brake requests from the vehicle controller, verified second vehicle state information indicative of at least a speed and a braking level of a second vehicle, and verified host vehicle state information indicative of at least a speed and a braking level of the host vehicle; andwherein the safety monitor receives the verified second vehicle state information from the vehicle controller and utilizes the second vehicle state information in at least one of the safety monitoring algorithms; andwherein the host vehicle state information is transmitted from the vehicle interface controller to the vehicle controller for subsequent unmodified transmission to the second vehicle.
  • 33. A vehicle control system as recited in claim 32, wherein the vehicle interface controller has an ASIL rating and the vehicle controller is QM under ISO 26262.
  • 34. A vehicle control system as recited in claim 32, wherein the vehicle interface controller has an ASIL rating and the vehicle controller has an ASIL rating that is lower than the ASIL rating of the vehicle interface controller.
  • 35. A vehicle control system as recited in claim 32 for use on a vehicle having one or more vehicle communication buses, wherein: the vehicle controller is configured as a listener capable of receiving messages transmitted on at least one of the vehicle communication buses, but is not configured to transmit messages onto any of the vehicle communication buses; andthe vehicle interface controller is configured to transmit and receive messages on at least one of the vehicle communication buses.
  • 36. A vehicle control system as recited in claim 35, wherein at least one of the vehicle communication buses is a Controller Area Network (CAN) bus.
  • 37. A vehicle control system as recited in claim 35, wherein: one of the vehicle communication buses is a sensor information bus connected to one or more host vehicle sensors, the sensor information bus being dedicated to carry only host sensor information, the vehicle interface controller being arranged to receive at least some of the host sensor information carried on the sensor information bus; andat least one of the safety monitoring algorithms is configured to use selected host sensor information received over the sensor information bus in the verification that the commands received from the vehicle controller meet the selected safety criteria.
  • 38. A vehicle control system as recited in claim 37, wherein the one or more host vehicle sensors include at least one selected from the group consisting of: radar, lidar, a camera, an ultrasonic distance measuring unit, a compass, a gyroscope, a GNSS sensor, an accelerometer, a wheel speed sensor, a tire pressure sensor, a brake pad wear sensor, a brake pressure sensor, an engine temperature sensor, an ambient temperature sensor, a humidity sensor, a weather sensor, a pedal position sensor, an engine speed sensor, an engine torque sensor, a transmission configuration sensor, an engine speed sensor, a tire wear sensor, a vehicle weight sensor, a suspension pressure sensor, trailer identification information, system faults, an occupant detection sensor, and a seatbelt status sensor.
  • 39. A connected vehicle control system as recited in claim 37, wherein the connected vehicle controller is connected to the sensor information bus.
  • 40. A vehicle control system as recited in claim 32, wherein the verified second vehicle state information is information sent and verified by a vehicle interface controller on the second vehicle, and wherein the verified second vehicle state information is: received a by the vehicle controller in verified second vehicle state information data blocks, each verified second vehicle state information data block including a checksum applied by a vehicle interface controller on the second vehicle; andused by the vehicle interface controller in at least one of the safety monitoring algorithms, and wherein the vehicle interface controller is further configured to utilize the checksums to verify the integrity of the second vehicle state information.
  • 41. A vehicle control system as recited in claim 32, wherein the host vehicle is a tractor-trailer truck.
  • 42. A vehicle control system as recited in claim 32, wherein the vehicle controller is a platoon controller and the safety monitoring algorithms are configured to verify that selected safety criteria are met during platooning.
  • 43. A vehicle control system as recited in claim 42, wherein an interface between the platoon controller and the vehicle interface controller includes: torque requests from the platoon controller, brake requests from the platoon controller, verified partner state information indicative of at least a speed and a braking level of a platoon partner vehicle, and verified host vehicle state information indicative of at least a speed and a braking level of the host vehicle; andwherein the safety monitor receives the verified partner state information from the platoon controller and utilizes the partner state information in at least one of the safety monitoring algorithms; andwherein the host vehicle state information is transmitted from the vehicle interface controller to the platoon controller for subsequent unmodified transmission to the platoon partner vehicle.
  • 44. A vehicle control system as recited in claim 43, wherein the verified partner state information is information sent and verified by a vehicle interface controller on the platoon partner vehicle, and wherein the verified partner state information is: received by the platoon controller in verified partner state information data blocks, each verified partner state information data block including a checksum applied by the vehicle interface controller on the platoon partner vehicle;passed without modification from the platoon controller to the vehicle interface controller; andused by the vehicle interface controller in at least one of the safety monitoring algorithms, and wherein the vehicle interface controller is further configured to utilize the checksums to verify the integrity of the partner state information.
  • 45. A vehicle control system as recited in claim 44, wherein the platoon controller is further configured to receive unverified partner state information from the platoon partner vehicle, the unverified partner state information including at least GNSS position information indicative of a position of the platoon partner vehicle, wherein the unverified partner state information is used by the platoon controller in the determination of the torque and braking requests.
  • 46. A vehicle control system as recited in claim 45, wherein the unverified partner state information is not passed to the vehicle interface controller.
  • 47. A vehicle control system as recited in claim 43, wherein the interface between the platoon controller and the vehicle interface controller further includes a platoon state indicator that indicates when the platoon controller believes its torque and braking requests should be directing operation of the host vehicle.
  • 48. A vehicle control system as recited in claim 43, wherein the host vehicle and the platoon partner vehicle are both tractor-trailer trucks.
  • 49. A vehicle control system as recited in claim 42, wherein: the platoon controller is configured as a system on module (SOM); andthe vehicle interface controller is implemented as a single packaged integrated circuit.
CROSS-REFERENCE TO RELATED APPLCATIONS

This application is a Continuation-in-Part of PCT Application No. PCT/US2017/047825 filed Aug. 21, 2017, which claims priority of U.S. Provisional Patent Application No. 62/377,970, filed on Aug. 22, 2016. Each of these priority applications is incorporated herein by reference in its entirety.

US Referenced Citations (339)
Number Name Date Kind
3725921 Weidman et al. Apr 1973 A
4370718 Chasek Jan 1983 A
5166881 Akasu Nov 1992 A
5295551 Sukonick Mar 1994 A
5331561 Barrett et al. Jul 1994 A
5572449 Ting et al. Nov 1996 A
5633456 Stander May 1997 A
5680122 Mio Oct 1997 A
5777451 Kobayashi et al. Jul 1998 A
5781119 Yamashita et al. Jul 1998 A
5815825 Tachibana et al. Sep 1998 A
5880958 Helms et al. Mar 1999 A
6032097 Iihoshi et al. Feb 2000 A
6125321 Tabata et al. Sep 2000 A
6128559 Saitou et al. Oct 2000 A
6188950 Tsutsumi et al. Feb 2001 B1
6265990 Isogai et al. Jul 2001 B1
6285929 Hashimoto Sep 2001 B1
6345603 Abboud et al. Feb 2002 B1
6356820 Hashimoto et al. Mar 2002 B1
6370475 Breed et al. Apr 2002 B1
6397149 Hashimoto May 2002 B1
6418370 Isogai et al. Jul 2002 B1
6484078 Kageyama Nov 2002 B1
6510381 Grounds et al. Jan 2003 B2
6604038 Lesesky et al. Aug 2003 B1
6633006 Wolf et al. Oct 2003 B1
6765495 Dunning et al. Jul 2004 B1
6879910 Shike et al. Apr 2005 B2
6898585 Benson et al. May 2005 B2
6963795 Haissig et al. Nov 2005 B2
6975246 Trudeau Dec 2005 B1
7286825 Shishido et al. Oct 2007 B2
7460951 Altan et al. Dec 2008 B2
7554435 Tengler et al. Jun 2009 B2
7593811 Schmidt et al. Sep 2009 B2
7596811 Schmidt et al. Sep 2009 B2
7729823 Ruoppolo Jun 2010 B2
7782227 Boss et al. Aug 2010 B2
7831345 Heino et al. Nov 2010 B2
7894982 Reeser et al. Feb 2011 B2
8026833 Villaume et al. Sep 2011 B2
8073574 Yamamoto et al. Dec 2011 B2
8116921 Ferrin et al. Feb 2012 B2
8139109 Broggi et al. Mar 2012 B2
8224551 Grolle et al. Jul 2012 B2
8275491 Ferrin et al. Sep 2012 B2
8326473 Simpson et al. Dec 2012 B2
8352111 Mudalige Jan 2013 B2
8352112 Mudalige Jan 2013 B2
8354955 Miyake et al. Jan 2013 B2
8442735 Hrovat et al. May 2013 B2
8514825 Addepalli et al. Aug 2013 B1
8538656 Yamashiro Sep 2013 B2
8554468 Bullock Oct 2013 B1
8618922 Debouk et al. Dec 2013 B2
8620517 Caveney et al. Dec 2013 B2
8660779 Shida Feb 2014 B2
8666587 Anderson Mar 2014 B2
8676466 Mudalige Mar 2014 B2
8682511 Andreasson Mar 2014 B2
8688349 Grolle et al. Apr 2014 B2
8738238 Rekow May 2014 B2
8744666 Switkes et al. Jun 2014 B2
8775060 Solyom et al. Jul 2014 B2
8798907 Shida Aug 2014 B2
8947531 Fischer et al. Feb 2015 B2
8948995 Pandita et al. Feb 2015 B2
8954272 Adam et al. Feb 2015 B2
8970401 Molander et al. Mar 2015 B2
8992391 Seastrom et al. Mar 2015 B2
9037389 You May 2015 B2
9079587 Rupp et al. Jul 2015 B1
9141112 Loo et al. Sep 2015 B1
9145137 Doi et al. Sep 2015 B2
9174672 Zeng et al. Nov 2015 B2
9221396 Zhu et al. Dec 2015 B1
9224300 Lee et al. Dec 2015 B2
9355423 Slusar May 2016 B1
9367065 Dolgov et al. Jun 2016 B2
9396661 Okamoto Jul 2016 B2
9412271 Sharma Aug 2016 B2
9423794 Lind et al. Aug 2016 B2
9449258 Palacio et al. Sep 2016 B1
9460622 Ferguson et al. Oct 2016 B1
9494944 Alam et al. Nov 2016 B2
9511764 Pilutti et al. Dec 2016 B2
9582006 Switkes et al. Feb 2017 B2
9598078 Moran et al. Mar 2017 B2
9613466 Bullock Apr 2017 B1
9616743 Mays et al. Apr 2017 B1
9632507 Korn Apr 2017 B1
9645579 Switkes et al. May 2017 B2
9665102 Switkes et al. May 2017 B2
9721474 Eskilson Aug 2017 B2
9771070 Zagorski et al. Sep 2017 B2
9799224 Okamoto Oct 2017 B2
9823166 Dudar et al. Nov 2017 B2
9852475 Konrardy et al. Dec 2017 B1
9878657 Wunsche, III et al. Jan 2018 B2
9884631 James et al. Feb 2018 B2
9927816 Li et al. Mar 2018 B2
9928746 MacNeille et al. Mar 2018 B1
9940840 Schubert et al. Apr 2018 B1
10013877 Lu et al. Jul 2018 B2
10017039 Colavincenzo Jul 2018 B1
10017179 Alden et al. Jul 2018 B2
10027024 Powell Jul 2018 B2
10031522 Moran et al. Jul 2018 B2
20010001138 Zhu et al. May 2001 A1
20020077748 Nakano Jun 2002 A1
20020135507 Winner et al. Sep 2002 A1
20020152015 Seto Oct 2002 A1
20020198632 Breed et al. Dec 2002 A1
20030094858 Shiue et al. May 2003 A1
20030225517 Schiffmann Dec 2003 A1
20040046448 Brown Mar 2004 A1
20040078133 Miller et al. Apr 2004 A1
20040140143 Saeki Jul 2004 A1
20040245853 Odagawa et al. Dec 2004 A1
20040252863 Chang et al. Dec 2004 A1
20060074557 Mulligan et al. Apr 2006 A1
20060095195 Nishimura et al. May 2006 A1
20060106534 Kawamata et al. May 2006 A1
20060161341 Haegebarth et al. Jul 2006 A1
20060195250 Kawaguchi Aug 2006 A1
20060229804 Schmidt et al. Oct 2006 A1
20070005609 Breed Jan 2007 A1
20070021915 Breed et al. Jan 2007 A1
20070027614 Reeser et al. Feb 2007 A1
20070032245 Alapuranen Feb 2007 A1
20070043502 Mudalige et al. Feb 2007 A1
20070060045 Prautzsch Mar 2007 A1
20070083318 Parikh Apr 2007 A1
20070210953 Abraham et al. Sep 2007 A1
20070213915 Tange Sep 2007 A1
20070233337 Plishner Oct 2007 A1
20070256481 Nishiyama et al. Nov 2007 A1
20070276597 Kato et al. Nov 2007 A1
20080009985 Plishner Jan 2008 A1
20080033649 Hasegawa et al. Feb 2008 A1
20080059007 Whittaker et al. Mar 2008 A1
20080119965 McCrary May 2008 A1
20080122652 Tengler et al. May 2008 A1
20080147253 Breed Jun 2008 A1
20080154629 Breed et al. Jun 2008 A1
20080249667 Horvitz et al. Oct 2008 A1
20080255722 McClellan et al. Oct 2008 A1
20080258890 Follmer et al. Oct 2008 A1
20090012666 Simpson et al. Jan 2009 A1
20090051510 Follmer et al. Feb 2009 A1
20090062974 Tamamoto et al. Mar 2009 A1
20090079839 Fischer et al. Mar 2009 A1
20090118889 Heino et al. May 2009 A1
20090157461 Wright et al. Jun 2009 A1
20090164082 Kobayashi et al. Jun 2009 A1
20090198427 Christopher et al. Aug 2009 A1
20090219161 Kocher Sep 2009 A1
20090222186 Jensen Sep 2009 A1
20090271083 Kumar Oct 2009 A1
20090286648 Vesenjak Nov 2009 A1
20090287412 Menzel et al. Nov 2009 A1
20090326799 Crook Dec 2009 A1
20100044998 Franchineau Feb 2010 A1
20100045507 Yamano et al. Feb 2010 A1
20100049374 Ferrin et al. Feb 2010 A1
20100094509 Luke et al. Apr 2010 A1
20100106356 Trepagnier et al. Apr 2010 A1
20100191449 Iwamoto Jul 2010 A1
20100194638 Rivard Aug 2010 A1
20100256835 Mudalige Oct 2010 A1
20100256836 Mudalige Oct 2010 A1
20100256852 Mudalige Oct 2010 A1
20100332101 Braunberger et al. Dec 2010 A1
20110010022 Beavin Jan 2011 A1
20110083011 DiCrescenzo Apr 2011 A1
20110093177 Horn Apr 2011 A1
20110112730 Rekow May 2011 A1
20110118967 Tsuda May 2011 A1
20110184596 Andreasson Jul 2011 A1
20110184605 Neff Jul 2011 A1
20110210872 Molander Sep 2011 A1
20110270514 Shida Nov 2011 A1
20110270520 Kronenberg Nov 2011 A1
20110274523 Petalas Nov 2011 A1
20110301779 Shida Dec 2011 A1
20120061154 Pfister Mar 2012 A1
20120089294 Fehse et al. Apr 2012 A1
20120105270 Miyake et al. May 2012 A1
20120109421 Scarola May 2012 A1
20120109610 Anderson et al. May 2012 A1
20120139549 Sufrin-Disler et al. Jun 2012 A1
20120166057 Amato et al. Jun 2012 A1
20120206282 Gorbold Aug 2012 A1
20120221235 Prudhomme-Lacroix et al. Aug 2012 A1
20120226965 Hammerschmidt et al. Sep 2012 A1
20120252415 Menzel et al. Oct 2012 A1
20120259516 Grolle et al. Oct 2012 A1
20120259538 Oexmann Oct 2012 A1
20120323474 Breed et al. Dec 2012 A1
20130015984 Yamashiro Jan 2013 A1
20130018766 Christman Jan 2013 A1
20130024084 Yamashiro Jan 2013 A1
20130030606 Mudalige et al. Jan 2013 A1
20130030657 Chatterjee et al. Jan 2013 A1
20130041567 Yamashiro Feb 2013 A1
20130041576 Switkes Feb 2013 A1
20130066511 Switkes et al. Mar 2013 A1
20130079953 Kumabe Mar 2013 A1
20130080040 Kumabe Mar 2013 A1
20130080041 Kumabe Mar 2013 A1
20130090803 Stahlin et al. Apr 2013 A1
20130116861 Nemoto May 2013 A1
20130124064 Nemoto May 2013 A1
20130144465 Shida Jun 2013 A1
20130151058 Zagorski et al. Jun 2013 A1
20130158852 Stahlin et al. Jun 2013 A1
20130165146 Stahlins et al. Jun 2013 A1
20130173114 Pillai Jul 2013 A1
20130211624 Lind et al. Aug 2013 A1
20130218365 Caveney et al. Aug 2013 A1
20130231820 Solyom et al. Sep 2013 A1
20130317676 Cooper et al. Nov 2013 A1
20130325306 Caveney et al. Dec 2013 A1
20140005875 Hartmann et al. Jan 2014 A1
20140005906 Pandita et al. Jan 2014 A1
20140019031 Solyom et al. Jan 2014 A1
20140067220 Seiler Mar 2014 A1
20140100734 Yamashiro Apr 2014 A1
20140107867 Yamashiro Apr 2014 A1
20140129075 Carleton May 2014 A1
20140136044 Conrad May 2014 A1
20140142799 Ferguson et al. May 2014 A1
20140142801 Shah May 2014 A1
20140145838 Tuukkanen May 2014 A1
20140148994 Ando May 2014 A1
20140156118 Wiemeyer et al. Jun 2014 A1
20140172265 Funabashi Jun 2014 A1
20140197967 Modica et al. Jul 2014 A1
20140210645 Sharma Jul 2014 A1
20140214255 Dolgov et al. Jul 2014 A1
20140222278 Fujita Aug 2014 A1
20140236449 Horn Aug 2014 A1
20140244144 You Aug 2014 A1
20140249693 Stark et al. Sep 2014 A1
20140277608 Debouk et al. Sep 2014 A1
20140297063 Shida Oct 2014 A1
20140303870 Switkes et al. Oct 2014 A1
20140306799 Ricci Oct 2014 A1
20140306826 Ricci Oct 2014 A1
20140309836 Ollis Oct 2014 A1
20140316671 Okamoto Oct 2014 A1
20140316865 Okamoto Oct 2014 A1
20140324339 Adam et al. Oct 2014 A1
20140350756 Schoonmaker et al. Nov 2014 A1
20140350793 Schrabler et al. Nov 2014 A1
20140350835 Martin Nov 2014 A1
20150012204 Breuer et al. Jan 2015 A1
20150015267 Mueller et al. Jan 2015 A1
20150025731 Uehara Jan 2015 A1
20150061492 Braunberger Mar 2015 A1
20150100192 Lee et al. Apr 2015 A1
20150120137 Zeng et al. Apr 2015 A1
20150151737 Birch et al. Jun 2015 A1
20150153733 Ohmura et al. Jun 2015 A1
20150154871 Rothoff et al. Jun 2015 A1
20150161894 Duncan et al. Jun 2015 A1
20150178998 Attard et al. Jun 2015 A1
20150262481 Selin Sep 2015 A1
20150274161 Stierlin Oct 2015 A1
20150279122 Lorenzen Oct 2015 A1
20150296019 Onishi et al. Oct 2015 A1
20150314790 Deragarden et al. Nov 2015 A1
20150334371 Galera et al. Nov 2015 A1
20150356635 Thurston Dec 2015 A1
20150378722 Zuniga-Hernandez Dec 2015 A1
20160009288 Yu Jan 2016 A1
20160019782 Alam et al. Jan 2016 A1
20160026187 Alam et al. Jan 2016 A1
20160039412 Stahlin Feb 2016 A1
20160054735 Switkes et al. Feb 2016 A1
20160170021 Rashid et al. Jun 2016 A1
20160194014 Rajendran Jul 2016 A1
20160198303 Grotendorst et al. Jul 2016 A1
20160267796 Hiroma et al. Sep 2016 A1
20160272207 Dolgov et al. Sep 2016 A1
20160297447 Suzuki Oct 2016 A1
20160300186 Scharaswak et al. Oct 2016 A1
20160359741 Cooper et al. Dec 2016 A1
20160373261 Tschache et al. Dec 2016 A1
20160375732 Lazar et al. Dec 2016 A1
20170011633 Boegel Jan 2017 A1
20170058477 Niroumand Mar 2017 A1
20170069203 Sharma Mar 2017 A1
20170083844 Baker et al. Mar 2017 A1
20170115666 Kolhouse et al. Apr 2017 A1
20170122841 Dudar et al. May 2017 A1
20170132299 Fox et al. May 2017 A1
20170146801 Stempora May 2017 A1
20170168503 Amla et al. Jun 2017 A1
20170178536 Manci et al. Jun 2017 A1
20170186327 Uysal et al. Jun 2017 A1
20170197544 Wang et al. Jul 2017 A1
20170197615 Elie et al. Jul 2017 A1
20170212511 Ferreira et al. Jul 2017 A1
20170227972 Sabau Aug 2017 A1
20170235316 Shattil Aug 2017 A1
20170238321 Sartori et al. Aug 2017 A1
20170242095 Schuh et al. Aug 2017 A1
20170261997 Switkes et al. Sep 2017 A1
20170289864 Narasimha et al. Oct 2017 A1
20170293296 Stenneth et al. Oct 2017 A1
20170308097 Switkes et al. Oct 2017 A1
20170309187 Lin Oct 2017 A1
20170323244 Rani et al. Nov 2017 A1
20170329348 Li et al. Nov 2017 A1
20170344023 Laubinger et al. Nov 2017 A1
20170349058 Bernier et al. Dec 2017 A1
20170349176 Alden et al. Dec 2017 A1
20170361762 Wunsche, III et al. Dec 2017 A1
20180006365 Powell Jan 2018 A1
20180018605 Light-Holets et al. Jan 2018 A1
20180032072 Hoye Feb 2018 A1
20180047293 Dudar Feb 2018 A1
20180050697 Kuszmaul et al. Feb 2018 A1
20180082590 MacNeille et al. Mar 2018 A1
20180082591 Pandy Mar 2018 A1
20180084511 Wu et al. Mar 2018 A1
20180111611 MacNeille et al. Apr 2018 A1
20180120861 Saxena et al. May 2018 A1
20180137763 Deragarden et al. May 2018 A1
20180188725 Cremona et al. Jul 2018 A1
20180188745 Pilkington Jul 2018 A1
20180188746 Lesher et al. Jul 2018 A1
20180190119 Miller, Jr. et al. Jul 2018 A1
20180190128 Saigusa Jul 2018 A1
20180210461 Cremona et al. Jul 2018 A1
20190171226 Kim Jun 2019 A1
20190220037 Vladimerou et al. Jul 2019 A1
Foreign Referenced Citations (73)
Number Date Country
10 2007 058 192 Jun 2009 DE
102011002275 Oct 2012 DE
3316064 May 1918 EP
0 982 173 Mar 2000 EP
0 991 046 Mar 2005 EP
1 975 901 Mar 2009 EP
2 390 744 Nov 2011 EP
2540039 Jan 1917 GB
2551248 Dec 1917 GB
2557001 Jun 1918 GB
2557434 Jun 1918 GB
2558051 Jul 1918 GB
05-170008 Jul 1993 JP
2995970 Dec 1999 JP
2010-030525 Feb 2010 JP
2014-056483 Mar 2012 JP
5141849 Feb 2013 JP
2017-215681 Dec 2017 JP
WO 2016087555 Jun 1916 WO
WO 2004077378 Sep 2004 WO
WO 2009024563 Feb 2009 WO
WO 2009043643 Apr 2009 WO
WO 2009071345 Jun 2009 WO
WO 2010098554 Sep 2010 WO
WO 2011125193 Oct 2011 WO
WO 2013006826 Jan 2013 WO
WO 2013165297 Apr 2013 WO
WO 2013147682 Oct 2013 WO
WO 2013187835 Dec 2013 WO
WO 2014062118 Apr 2014 WO
WO 2014092628 Jun 2014 WO
WO 2014133425 Sep 2014 WO
WO 2014137270 Sep 2014 WO
WO 2014137271 Sep 2014 WO
WO 2014145918 Sep 2014 WO
WO 2015047174 Apr 2015 WO
WO 2015047175 Apr 2015 WO
WO 2015047176 Apr 2015 WO
WO 2015047177 Apr 2015 WO
WO 2015047178 Apr 2015 WO
WO 2015047179 Apr 2015 WO
WO 2015047181 Apr 2015 WO
WO 2015047182 Apr 2015 WO
WO 2015156731 Oct 2015 WO
WO 2016065055 Apr 2016 WO
WO 2016087901 Jun 2016 WO
WO 2016134610 Sep 2016 WO
WO 2016134770 Sep 2016 WO
WO 2016135207 Sep 2016 WO
WO 2016182489 Nov 2016 WO
WO 2016201435 Dec 2016 WO
WO 2017048165 Mar 2017 WO
WO 2017070714 Apr 2017 WO
WO 2017148113 Sep 2017 WO
WO 2017164792 Sep 2017 WO
WO 2017179193 Oct 2017 WO
WO 2017184062 Oct 2017 WO
WO 2017184063 Oct 2017 WO
WO 2017196165 Nov 2017 WO
WO 2017200433 Nov 2017 WO
WO 2017204712 Nov 2017 WO
WO 2017209124 Dec 2017 WO
WO 2017209666 Dec 2017 WO
WO 2018000386 Jan 2018 WO
WO 2018035145 Feb 2018 WO
WO 2018043519 Mar 2018 WO
WO 2018043520 Mar 2018 WO
WO 2018043753 Mar 2018 WO
WO 2018054520 Mar 2018 WO
WO 2018106774 Jun 2018 WO
WO 2018111177 Jun 2018 WO
WO 2018135630 Jul 2018 WO
WO 2018137754 Aug 2018 WO
Non-Patent Literature Citations (61)
Entry
Jacobson et al. “Functional Safety in Systems of Road Vehicles,” SP Technical Research Institute of Sweden, ISBN 978-91-86319-43-4, Jul. 31, 2010, [retrieved on Jul. 31, 2017]. http://www.diva-portal.Org/smash/get/diva2:962529/FULLTEXT01.pdf.
International Search Report and Written Opinion dated Dec. 7, 2017, from International Application No. PCT/US2017/047825.
U.S. Office Action dated Apr. 5, 2018 from U.S. Appl. No. 15/860,024.
Bergenheim et al., “Overview of Platooning Systems”, http://publications.lib.chalmers.se/records/fulltext/174621.pdf, 2012.
Alam et al., “An Experimental Study on the Fuel Reduction Potential of Heavy Duty Vehicle Platooning”, 2010 13th International IEEE, Annual Conference on Intelligent Transportation Systems, Sep. 19-22, 2010.
U.S. Office Action dated Aug. 7, 2018 from U.S. Appl. No. 15/860,024.
“Automated Highway System: Milestone 2 Report, Task C2: Downselect System Configurations and Workshop #3” (National Automated Highway System Consortium, Troy, MI, Jun. 1997), 604 pages.
Wille, Matthias et al., “KONVOI: Electronically coupled truck convoys”, in Human Factors for Assistance and Automation, D. de Waard et al. (Eds.) (Shaker Publishing, Maastricht, the Netherlands, Jan. 2008), pp. 243-256.
Shladover, Steven E. et al. “Development and Evaluation of Selected Mobility Applications for VII: Concept of Operations”, California PATH Working Paper UCB-ITS-PWP-2009-3 (U.C. Berkeley, Berkeley, CA, Mar. 2009), 14 pages.
Shladover, Steven E. et al., “Development and Evaluation of Selected Mobility Applications for VII”, California PATH Research Report UCB-ITS-PRR-2011-09, (U.C. Berkeley, Jun. 2011), 109 pages.
Al Alam, Assad et al. “Establishing Safety for Heavy Duty Vehicle Platooning: A Game Theoretical Approach”, Proceedings of the 18th World Congress, The International Federation of Automatic Control (IFAC'11) Milano, Italy, Sep. 2011, pp. 3818-3823.
Roeth, Michael, “CR England Peloton Technology Platooning Test Nov. 2013”, (North American Council on Freight Efficiency (NACFE.org), Fort Wayne, IN, Dec. 2013);Retrieved Aug. 23, 2018 at https://nacfe.org/wp-content/uploads/2018/02/Peloton-NACFE-Fuel-Test-Report-120213.pdf.
Bevly, David et al. “Heavy Truck Cooperative Adaptive Cruise Control: Evaluation, Testing, and Stakeholder Engagement for Near Term Deployment: Phase One Final Report”, Report to Federal Highway Administration (Auburn University, Auburn, AL, Apr. 2015), 135 pages; Retrieved Aug. 23, 2018 at http://atri-online.org/wp-content/uploads/2015/05/DATPPhase1FinalReport.pdf.
Nowakowski, Christopher et al., “Heavy vehicle automation: Human factors lessons learned”, Procedia Manufacturing vol. 3, Jul. 2015, pp. 2945-2952.
Zhao, Siyang et al., “Vehicle to Vehicle Communication and Platooning for EV with Wireless Sensor Network”, SICE Annual Conference 2015, Hangzhou, China, Jul. 2015, pp. 1435-1440.
Brizzolara, Davide & Toth, Andrea, “The Emergence of Truck Platooning”, Baltic Transport Journal, Mar. 2016, pp. 58-59.
Kuszmaul et al., U.S. Appl. No. 15/605,456, filed on May 25, 2017.
Klaus et al., U.S. Appl. No. 15/860,024, filed on Jan. 2, 2018.
Price et al., U.S. Appl. No. 15/860,450, filed on Jan. 2, 2018.
Switkes et al., International Application No. PCT/US17/47771, filed on Aug. 21, 2017.
Browand et al., “Fuel Saving Achieved in the Field Test of Two Tandem Trucks”, California PATH Research Report, UCB-ITS-PRR-2001-20, Jun. 2004.
Shladover et al., “Demonstration of Automated Heavy-Duty Vehicles”, California PATH Research Report, UCB-ITS-PRR-2005-23, Jun. 2005.
Shladover et al., “Development and Evaluation of Selected Mobility Applications for VII (a.k.a. IntelliDrive)”, http://slideplayer.com/slide/6981587/, Jul. 1, 2009.
Tsugawa, “An Overview on an Automated Truck Platoon Within the Energy ITS Project”, 7th IFAC Symposium on Advances in Automotive Control, Tokyo, Japan, Sep. 4-7, 2013.
Sugimachi et al., “Development of Autonomous Platooning System for Heavy-Duty Trucks”, 7th IFAC Symposium on Advances in Automotive Control, Tokyo, Japan, Sep. 4-7, 2013.
Sheikholeslam et al., “Longitudinal Control of a Platoon of Vehicles; III; Nonlinear Model”, Program on Advanced Technology for the Highway, Institute of Transportation Studies, University of California at Berkeley, Apr. 1, 1990.
Sheikholeslam et al., “Longitudinal Control of a Platoon of Vehicles”, Department of Electrical Engineering and Computer Science, University of California, Berkeley, May 1990.
Sheikholeslam et al., “A System Level Study of the Longitudinal Control of a Platoon of Vehicles”, Department of Electrical Engineering and Computer Science, University of California, Berkeley, Jun. 1992.
Porche et al., “Real Time Task Manager for Communications and Control in Multicar Platoons”, Department of Electrical Engineering and Computer Science, University of California, Berkeley, Jun. 1992.
Gerdes et al., “Brake System Requirements for Platooning on an Automated Highway”, Department of Mechanical Engineering, University of California, Berkeley, Jun. 1995.
Zabat et al., “The Aerodynamic Performance of Platoons: Final Report”, California PATH Research Report, California PATH Program, Institute of Transportation Studies, University of California, Berkeley, Oct. 1995.
Gerdes et al., “Vehicle Speed and Spacing Control via Coordinated Throttle and Brake Actuation”, Department of Mechanical Engineering, University of California, Berkeley, Sep. 1997.
Alvarez et al., “Safe Platooning in Automated Highway Systems Part I: Safety Regions Design”, Department of Mechanical Engineering, University of California, Berkeley, 1999.
Alvarez et al., “Safe Platooning in Automated Highway Systems Part II: Velocity Tracking Controller”, Department of Mechanical Engineering, University of California, Berkeley, 1999.
Michaelian et al., “Field Experiments Demonstrate Fuel Savings for Close-Following”, University of Southern California, California PATH Research Report, Sep. 2000.
Simon Halle, “Automated Highway Systems: Platoons of Vehicles Viewed as a Multiagent System”, University of Quebec, Jun. 2005.
Friedrichs et al., “A Generic Software Architecture for a Driver Information System to Organize and Operate Truck Platoons”, https://www.researchgate.net/publication/256195846, May 2008.
Meisen et al., “A Data-Mining Technique for the Planning and Organization of Truck Platoons”, https://www.researchgate.net/publication/256195756, May 2008.
Ramakers et al., “Electronically Coupled Truck platoons on German Highways”, IEEE International Conference on Systems, Man, and Cybernetics, San Antonio, TX, Oct. 2009.
Kunze et al., “Organization and Operation of Electronically Coupled Truck Platoons on German Highways”, RWTH Aachen University, Center for Learning and Knowledge Management and Department of Information Management in Mechanical Engineering, Aachen, Germany, Dec. 2009.
Kunze et al., “Efficient Organization of Truck Platoons by Means of Data Mining”, 7th International Conference on Informatics in Control, Automation and Robotics, RWTH Aachen University, Center for Learning and Knowledge Management and Department of Information Management in Mechanical Engineering, Aachen, Germany, Jan. 2010.
Jacobson et al., “Functional Safety in Systems of Road Vehicles”, SP Technical Research Institute of Sweden, Jul. 2010.
Nowakowski et al., “Cooperative Adaptive Cruise Control: Testing Driver's Choices of Following Distances”, California Path Program, Institute of Transportation Studies, University of California, Berkeley, Jan. 2011.
Tsugawa et al., “An Automated Truck Platoon for Energy Saving”, IEEE/RSJ International Conference on Intelligent Robots and Systems, San Francisco, CA, Sep. 25-30, 2011.
Desjardins et al., “Cooperative Adaptive Cruise Control: A Reinforcement Learning Approach”, IEEE Transactions on Intelligent Transportation Systems, vol. 12, No. 4, Dec. 2011.
Larson et al., “Coordinated Route Optimization for Heavy-duty Vehicle Platoons”, Proceedings of the 16th International IEEE Annual Conference on Intelligent Transportation Systems (ITSC 2013), The Hague, The Netherlands, Oct. 6-9, 2013.
Aoki, “Research and Development of Fully Automated Vehicles”, ITS Research Division, Japan Automobile Research Institute, Tokyo, Japan, Nov. 2013.
Lu et al., “Automated Truck Platoon Control and Field Test, Road Vehicle Automation”, https://www.researchgate.net/publication/266390502, Aug. 2014.
White Paper, “Automated Driving and Platooning Issues and Opportunities”, ATA Technology and Maintenance Council Future Truck Program, Sep. 21, 2015.
Nowakowski et al., “Cooperative Adaptive Cruise Control (CACC) for Truck Platooning: Operational Concept Alternatives”, California PATH, California Partners for Advanced Transportation Technology, UC Berkeley, Mar. 2015.
Erlien, “Shared Vehicle Control Using Safe Driving Envelopes for Obstacle Avoidance and Stability”, A Dissertation submitted to the Department of Mechanical Engineering and the Committee on Graduate Studies of Stanford University, Mar. 2015.
Shladover et al., “Cooperative Adaptive Cruise Control, Definitions and Operating Concepts”, Transportation Research Record 2489, 2015.
Tsugawa et al., “A Review of Truck Platooning Projects for Energy Savings”, IEEE Transactions on Intelligent Vehicles, vol. 1, No. 1, Mar. 2016.
Geiger et al., “Team AnnieWAY's Entry to the 2011 Grand Cooperative Driving Challenge”, IEEE Transactions on Intelligent Transportation Systems, vol. 13, No. 3, Sep. 2012.
Bergenheim et al., “Vehicle-to-Vehicle Communication for a Platooning System”, SP Technical Research Institute of Sweden, Procedia—Social and Behavioral Sciences vol. 48, 2012.
Bae et al., “Road Grade and Vehicle Parameter Estimation for Longitudinal Control Using GPS”, 2001 IEEE Intelligent Transportation Systems Conference Proceedings, Oakland, CA, Aug. 25-29, 2001.
Holm, “Vehicle Mass and Road Grade Estimation Using Kalman Filter”, MSc Thesis, Department of Electrical Engineering, Sweden, Aug. 2011.
Kidambi et al., “Methods in Vehicle Mass and Road Grade Estimation”, SAE International, University of Michigan, Apr. 1, 2014.
Paulsson et al., “Vehicle Mass and Road Grade Estimation Using Recursive Least Squares”, MSc Thesis, Lund University, 2016.
U.S. Office Action dated Jan. 24, 2020 from U.S. Appl. No. 15/860,450.
U.S. Final Office Action dated Aug. 21, 2020 from U.S. Appl. No. 15/860,450.
Related Publications (1)
Number Date Country
20180143650 A1 May 2018 US
Provisional Applications (1)
Number Date Country
62377970 Aug 2016 US
Continuation in Parts (1)
Number Date Country
Parent PCT/US2017/047825 Aug 2017 US
Child 15860333 US