Method for a Driver Assistance Application

Abstract

A driver assistance system with improved fault tolerance and a method for the same are provided. For this purpose, a control variable for an actuator for a reduced driver assistance system is calculated in a second control unit.

Description

Driver assistance systems such as active cruise control (ACC), overtaking assistant, lane departure warning systems, systems for traffic sign recognition or lighting control, and autonomous brake systems are components of modern vehicles.

In the systems that are currently approved, the driver is always part of the control loop, which means that the driver must remain attentive and intervene immediately if the driver assistance function fails. Such failure can be indicated, for example, by an alarm signal. In the future, it is planned to offer functionality for automated driving, i. e. the driver assistance system must be able to drive the vehicle safely for a predetermined period of time even in the event of a fault (such as a sensor failure). In this case, or if the driver does not immediately respond to a takeover request, at least a reduced driver assistance function must be available until the driver takes over or the driver assistance system is fully functional again.

It is the object of this invention to provide a driver assistance system with improved fault tolerance.

This object is achieved according to the features of the independent claims.

According to the invention, a method for a driver assistance system is provided. The driver assistance system includes at least one sensor unit (S1, S2, . . . Sx) for detecting the surroundings, which may be designed as a radar, LIDAR and/or camera sensor. The driver assistance system further comprises a first central control unit (SE1) with means for calculating a surroundings model (5) at a high degree of precision. The surroundings model is based on the data from the at least one sensor unit, preferably a multitude of similar and/or different sensor units (S1, S2 . . . Sx) is provided that have the same or different ranges of detection. Furthermore, the first central control unit is configured to calculate a control variable for a driver assistance application, such as a lane-keeping system, and for transmitting a first control signal (3) for an actuator control system (6), e. g. for the steering system of the vehicle, in accordance with the calculated control variable. A second control unit (SE2) is provided and includes means for calculating a second control variable based on data from the at least one sensor unit (S1, S2, . . . Sx) for a reduced driver assistance application (RF, RF1, RF2) and for transmitting a second control signal (4, 4a, 4b) to the actuator control system (6). Furthermore, the driver assistance system includes an actuator with an actuator control unit. The second control unit is in particular a component of a sensor unit (S1, S2, . . . Sx) or an actuator control unit.

In the event that the first control signal (3) is not available, the actuator is triggered

• • using the second control signal (4, 4a, 4b), or
  • a third control signal for triggering the actuator is calculated based on the last transmitted first control signal(s) (3) and the second control signal (4, 4b), or
  • the surroundings model calculated by the first control unit is transmitted to the second control unit (SE2) and a second control signal (4) for a reduced driver assistance application is calculated based on said model. In particular, the transmitted surroundings model can be updated with current data from the at least one sensor unit (S1, S2, . . . Sx).

In a preferred embodiment of the invention, fewer control cases are taken into account for calculating the second control variable (4, 4a, 4b) for the reduced driver assistance application (RF, RF1, RF2) as compared to calculating the control variable for use in the first control unit (SE1). In particular, control interventions are only performed if, for example, a collision is inevitable or the vehicle is at risk to depart from the lane.

It is preferred that no interventions are performed for comfort requests under the reduced driver assistance application (RF, RF1, RF2). Comfort requests include, for example, avoidance of abrupt transitions when controlling the longitudinal speed by limited acceleration or avoidance of fast, multiple changes between two control states, e. g. a swinging steering controller.

It is preferred that the calculation of a control variable for a reduced driver assistance application (4, 4a, 4b) is performed in an actuator control unit at least twice, using either data from different sensor units and/or different calculation methods (algorithms), and that a control signal for the actuator is calculated based on these at least two second control variables.

In a positive embodiment of the invention, the at least one sensor unit (S1, S2, . . . Sx) includes means for preprocessing sensor data. In particular, preprocessing includes object or free space detection. After preprocessing, the sensor data is transmitted to the first control unit (SE1) and completely or partially to the second control unit (SE2).

It is preferred that object or free space information is calculated in a sensor unit according to a first method and a different second method (AL1, AL2, AL3, AL4) for preprocessing. The redundantly generated information is checked for plausibility (7) for use in a surroundings model in the first control unit, and only information based on one of the two methods (e. g. AL1 and not AL2) is used in a second control unit (SE2) for a reduced driver assistance application (RF, RF1, RF2). In particular, one of the methods (AL1, AL4) is optimized for the reduced driver assistance application (RF, RF1, RF2).

In addition, a driver assistance system is claimed that includes at least one sensor unit (S1, S2, . . . Sx) for detecting the surroundings, e. g. a radar, LIDAR, and/or camera sensor system, and a first control unit (SE1) with means

• • for calculating a surroundings model (5) at a high degree of precision based on the data from the at least one sensor unit (S1, S2, . . . Sx) and
  • for calculating a control variable for a driver assistance application, and
  • for transmitting a first control signal (3) in accordance with the calculated control variable.

A second control unit (SE2) is provided and includes means for calculating a second control variable based on data from the at least one sensor unit (S1, S2, . . . Sx) for a reduced driver assistance application (RF, RF1, RF2) and for transmitting a second control signal (4, 4a, 4b) to the actuator control system (6). Furthermore, the driver assistance system includes an actuator with an actuator control unit. The second control unit is in particular a component of a sensor unit (S1, S2, . . . Sx) or an actuator control unit. The driver assistance system further includes means for calculating and transmitting a trigger signal for an actuator according to the independent method claim.

The invention will be explained in more detail below with reference to exemplary embodiments and figures.

A preferred embodiment of the invention is shown in FIG. 1. Preprocessing is performed in the sensor units S1, S2, S3, Sx, for example, an object and/or a free space is detected. A free space is an area which the vehicle can currently drive into, e. g. a road section without obstacles. This data 1 is transmitted to a first control unit. The first control unit SE1 is the central control unit for driver assistance functions (ADAS-ECU) in this embodiment. The surroundings model, a high-resolution image of the vehicle surroundings, is calculated here using computing-intensive algorithms. The surroundings model may, for example, be designed as an occupancy grid in which merged object data from surrounding objects is stored by various sensor units. The data 2 of the surroundings model is made available to the driver assistance application A1, A2, Ax, which derives a control variable 3 for an actuator, e. g. for the brake, engine controller, and steering system, from it. The actuator has its own controller, which typically has a high ASIL level. Calculation of the surroundings model 5 and the driver assistance application A1, A2, Ax A are optimized for high comfort, for which also an increased use of resources with respect to computing time is accepted.

To provide a redundant path without a second powerful and expensive controller, the sensor data 1 is transmitted completely or partially to the control unit of the actuator SE2. A reduced version of a driver assistance application is stored here, which derives a control variable 4 from it. The reduced driver assistance application a minimal version of the driver assistance application, which calculates the second control variable 4 using resources efficiently and without taking comfort requirements into consideration.

So, if the first control unit SE1 fails, there is a second control variable 4 available that can be used to bridge the period of time until the driver takes over or until the full functionality of the first control unit is restored. The limited comfort of the reduced driver assistance application, e. g. a swinging steering controller, can serve as an additional warning to the driver alerting him or her to take control of the vehicle.

In another embodiment, calculation of a multitude of reduced driver assistance applications is provided in the second control unit SE2. FIG. 2 shows an example of this case based on two reduced driver assistance applications RF1 and RF2. These can be based on the data from a single sensor or on data from various sensors or on merged data from multiple sensor units. The transmitted control variables 4a and 4b are checked for plausibility. If the control variables 4a and 4b cannot be checked for plausibility, each control variable 4a, 4b may for example be assigned a confidence value and the variable with the higher confidence value be selected for actuator control. The algorithms of the reduced driver assistance applications RF1 and RF 2 may preferably be different from one another and from the ones of the main application of the first control unit to be able to detect systematic errors in the analysis of the sensor data.

In a positive embodiment of the invention, the control variable 3 of the first control unit SE1 is further processed in the actuator for a plausibility check or fault strategy to bridge a limited period of time after a failure of the first control unit. In this way, another source of information is available for a limited period of time in combination with the control variable 4 or the control variables 4a, 4b of the reduced driver assistance applications RF1, RF2.

In a preferred embodiment of the invention, the surroundings model is transmitted to the second control unit and stored for a predetermined time. If the first control unit SE1 fails, the stored data can still be used for a specific period of time with a reduced driver assistance functionality. The data provided directly by the sensor units S1, S2, S3, Sx can supplement this history and thus facilitate a somewhat longer bridging time.

It is preferred to have the sensor units run multiple different methods AL1 and AL2 or AL3 and AL4, e. g. for free space detection, to exclude systematic errors caused by algorithms. FIG. 2. shows a schematic diagram of this process. The results of both methods can be checked against each other for plausibility before they are merged. Furthermore, one of the sensor outputs can be particularly optimized for a reduced driver assistance application RF1, RF2. In FIG. 2, these are the methods AL 1 and AL 4. If AL2 and 3 are used in the first control unit SE1 for the applications A1, A2, Ax, a completely different path to providing control inputs can be realized via the reduced driver assistance application RF. This path may be optimized for computing efficiency rather than for comfort to save costs for the overall system.

Claims

1. A method for a driver assistance system, including i) at least one sensor unit for detecting the surroundingsii) a first control unit with meansfor calculating a surroundings model (5) at a high degree of precision based on data from the at least one sensor unit andfor calculating a control variable for a driver assistance application, andfor transmitting a first control signal for an actuator in accordance with the calculated control variable,iii) an actuator with an actuator control unitiv) a second control unit (SE2) for calculating a second control variable for a reduced driver assistance application and a second control signal for the actuator based on data from the at least one sensor unit, wherein the second control unit is either disposed in the sensor unit or in the actuator unit,wherein a third control signal (7) is determined for triggering the actuator in the event that the first control signal is not available, whereinthe value of the second control signal (4) is used for the third control signal (7), ora third control signal for triggering the actuator is calculated based on the last transmitted first control signal(s) and the second control signal (7), orthe surroundings model calculated by the first control unit is transmitted to the second control unit and a third control signal (7) is calculated based on said model.

2. The method according to claim 1, characterized in that less computing time is needed for calculating the second control variable for the reduced driver assistance application as compared to calculating the control variable for the application in the first control unit because fewer control cases are considered.

3. The method according to claim 2, characterized in that the reduced driver assistance application does not include any comfort requirements.

4. The method according to claim 1, characterized in that the calculation of a control variable for a reduced driver assistance application is performed in an actuator control unit at least twice, using either data from different sensor units and/or different calculation methods (algorithms), and that a control signal for the actuator is calculated based on these at least two second control variables.

5. The method according to claim 1, characterized in that the at least one sensor unit comprises means for preprocessing sensor data, said preprocessing particularly including object and free space detection, and that the sensor data is transmitted to the first sensor unit and the actuator control unit after preprocessing.

6. The method according to claim 5, characterized in that for the preprocessing of a sensor unit, object or free space information is calculated in accordance with a first method and a different second method, then the redundantly generated information is checked for plausibility for use in a first control unit, then further processed, and only information based on one of the two methods is used in an actuator control unit.

7. A driver assistance system for performing the method according to claim 1, including I) at least one sensor unit for detecting the surroundingsii) a first control unit with meansfor calculating a surroundings model (5) at a high degree of precision based on data from the at least one sensor unit andfor calculating a control variable for a driver assistance application, andfor transmitting a first control signal for an actuator in accordance with the calculated control variableiii) an actuator with an actuator control unitiv) a second control unit (SE2) for calculating a second control variable for a reduced driver assistance application and a second control signal for the actuator based on data from the at least one sensor unit, wherein the second control unit is either disposed in the sensor unit or in the actuator unit,v) means for calculating and transmitting a trigger signal for an actuator in accordance with the method.

8. A method for operating a driver assistance system of a vehicle including at least one sensor unit, a first control unit, an actuator control unit, an actuator, and a second control unit incorporated in the sensor unit, the actuator control unit or the actuator, wherein the method comprises: with the at least one sensor unit, detecting surroundings of the vehicle and producing corresponding sensor data;with the first control unit, attempting to calculate a surroundings model based on the sensor data, calculate a first control variable for a first driver assistance application, and transmit a first control signal to trigger the actuator dependent on and in accordance with the first control variable;with the second control unit, calculating a second control variable for a second driver assistance application having reduced functionality compared to the first driver assistance application, and transmitting a second control signal to trigger the actuator based on the sensor data;if the first control signal is not available, then determining a third control signal to trigger the actuator, wherein a value of the second control signal is used for the third control signal, or the third control signal is calculated based on the second control signal and a last transmitted value of the first control signal, or the surroundings model is transmitted from the first control unit to the second control unit and the third control signal is calculated based on the surroundings model.

9. The method according to claim 8, wherein less computing time is needed for calculating the second control variable for the second driver assistance application than for calculating the first control variable for the first driver assistance application because fewer control cases are considered.

10. The method according to claim 8, wherein the second driver assistance application does not include any driver comfort requirements.

11. The method according to claim 8, wherein the at least one sensor unit includes at least two different sensor units that are different from one another, wherein the second control unit is incorporated in the actuator control unit, wherein the calculating of the second control variable for the second driver assistance application is performed in the actuator control unit at least twice to produce at least two second control variables respectively using the respective sensor data from the at least two different sensor units and/or at least two different calculation algorithms, and wherein the second control signal for triggering the actuator is calculated based on the at least two second control variables.

12. The method according to claim 8, wherein the at least one sensor unit includes a processor configured to preprocess the sensor data, wherein the method further comprises preprocessing the sensor data including object and free space detection of the sensor data in the processor of the at least one sensor unit, and wherein the sensor data is transmitted to the first control unit and to the second control unit after the preprocessing thereof.

13. The method according to claim 12, wherein for the preprocessing, object or free space information of the sensor data is calculated a first time in accordance with a first calculation method to produce a first preprocessing result and calculated a second time in accordance with a second calculation method different from the first calculation method to produce a second preprocessing result, then the first and second preprocessing results are compared to one another to check for plausibility thereof and produce a plausibilized result which is provided as the sensor data to the first control unit, and only either the first preprocessing result or the second preprocessing result is provided to the second control unit.

14. A driver assistance system for a vehicle, comprising: an actuator configured and arranged to actuate a control component of the vehicle;an actuator control unit configured and arranged to provide control signals for triggering the actuator;at least one sensor unit configured and arranged to detect surroundings of the vehicle and produce corresponding sensor data;a first control unit configured and arranged to calculate a surroundings model based on the sensor data, to calculate a first control variable for a first driver assistance application, and to transmit a first control signal to trigger the actuator dependent on and in accordance with the first control variable; anda second control unit that is incorporated in the sensor unit, the actuator control unit or the actuator, and that is configured and arranged to calculate a second control variable for a second driver assistance application having reduced functionality compared to the first driver assistance application, and to transmit a second control signal to trigger the actuator based on the sensor data, and wherein the second control unit is further configured and arranged to determine a third control signal to trigger the actuator if the first control signal is not available, wherein a value of the second control signal is used for the third control signal, or the third control signal is calculated based on a last transmitted value of the first control signal and the second control signal, or the surroundings model is transmitted from the first control unit to the second control unit and the third control signal is calculated based on the surroundings model.