# US 10,501,092 B2 · Proactive health-based transition to redundant subsystems

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,501,092 B2
- Document ID: US10501092B2
- Status: Granted
- Kind: B2
- Application number: 15/725,930
- Filed: 2017-10-05
- Published: 2019-04-11
- Granted: 2019-12-10
- Earliest claimed: 2017-10-05
- Assignees: GM Global Technololgy Operations, Inc.
- Applicants: GM Global Technology Operations LLC
- Inventors: Xiaoyu Huang; Wen-Chiao Lin; Shengbing Jiang; Shiming Duan; Youssef A. Ghoneim; Steven W. Holland; Yilu Zhang
- Web page: https://patentgrep.com/patent/US10501092B2

## CPC

- B60W 50/029: Adapting to failures or work around with other constraints, e.g. circumvention by avoiding use of failed parts
- B60R 16/0232: {for measuring vehicle parameters and indicating critical, abnormal or dangerous conditions}
- B60W 10/18: including control of braking systems
- B60W 10/20: including control of steering systems
- B60W 30/18136: {Engine braking}
- B60W 50/0098: {Details of control systems ensuring comfort, safety or stability not otherwise provided for}
- B60W 50/023: Avoiding failures by using redundant parts
- G05D 1/0077: {using redundant signals or controls}
- B60W 2050/0297: {Control Giving priority to different actuators or systems}
- B60W: CONJOINT CONTROL OF VEHICLE SUB-UNITS OF DIFFERENT TYPE OR DIFFERENT FUNCTION; CONTROL SYSTEMS SPECIALLY ADAPTED FOR HYBRID VEHICLES; ROAD VEHICLE DRIVE CONTROL SYSTEMS FOR PURPOSES NOT RELATED TO THE CONTROL OF A PARTICULAR SUB-UNIT
- B60R: VEHICLES, VEHICLE FITTINGS, OR VEHICLE PARTS, NOT OTHERWISE PROVIDED FOR
- G05D: SYSTEMS FOR CONTROLLING OR REGULATING NON-ELECTRIC VARIABLES

## Abstract

A method proactively transitions performance of a functional operation from a primary subsystem to a secondary subsystem within a vehicle or other system having an electronic control unit (ECU). The method includes receiving health management information via the ECU when the primary subsystem is actively performing the functional operation within the system and the secondary subsystem operates in a standby mode, wherein the health information is indicative of a numeric state of health (SOH) of the primary subsystem. The method also includes comparing the numeric SOH to a calibrated non-zero threshold SOH, and then commanding, via the ECU, a transition of the performance of the functional operation to the secondary subsystem and placing the primary subsystem in the standby mode when the numeric SOH is less than the calibrated non-zero threshold SOH. A vehicle executes the method via the ECU.

## Claims

### Claim 1

A method for proactively transitioning performance of a functional operation from a primary subsystem to a secondary subsystem within a system having an electronic control unit (ECU) and the primary and secondary subsystems, the method comprising:
receiving health management information via the ECU when the primary subsystem is actively performing the functional operation within the system and the secondary subsystem operates in a standby mode, wherein the health information is indicative of a numeric state of health (SOH) of the primary subsystem;
comparing the numeric SOH to a calibrated non-zero threshold SOH; and
commanding, via the ECU, a transition of the performance of the functional operation to the secondary subsystem and placing the primary subsystem in the standby mode when the numeric SOH is less than the calibrated non-zero threshold SOH.

### Claim 2 (depends on 1)

The method of claim 1, further comprising: commanding a transition of the performance of the functional operation back to the primary subsystem and placing the secondary subsystem back in the standby mode in response to a predetermined condition.

### Claim 3 (depends on 2)

The method of claim 2, wherein the predetermined condition is a calibrated interval.

### Claim 4 (depends on 2)

The method of claim 2, further comprising measuring a temperature of the primary subsystem using a temperature sensor, wherein the predetermined condition is the measured temperature of the primary subsystem.

### Claim 5 (depends on 2)

The method of claim 2, wherein the primary and secondary subsystems are both steering subsystems, braking subsystems, or controllers.

### Claim 6 (depends on 1)

The method of claim 1, wherein the primary subsystem and the secondary subsystem are a steering subsystem and a braking subsystem, respectively.

### Claim 7 (depends on 6)

The method of claim 6, further comprising recording a diagnostic code indicative of a failed primary subsystem in response to the transition to the secondary subsystem.

### Claim 8 (depends on 1)

The method of claim 1, wherein the system is a vehicle having an internal combustion engine, wherein the primary subsystem is a braking subsystem, the secondary subsystem is the engine, and commanding the transition of the performance of the functional operation to the secondary subsystem includes commanding engine braking.

### Claim 9 (depends on 1)

The method of claim 1, wherein the calibrated non-zero threshold SOH is greater than about 0.2.

### Claim 10 (depends on 9)

The method of claim 9, wherein the calibrated non-zero threshold SOH is about 0.6-0.8.

### Claim 11

A vehicle comprising:
a primary subsystem;
a redundant secondary subsystem; and
an ECU in communication with the primary and secondary subsystems, wherein the ECU is configured to:
receive health management information when the primary subsystem is actively performing a functional operation within the vehicle and the secondary subsystem operates in a standby mode, the health information being indicative of a numeric state of health (SOH) of the primary subsystem;
compare the numeric SOH to a calibrated non-zero threshold SOH;
command a transition of the performance of the functional operation to the secondary subsystem and place the primary subsystem in the standby mode when the numeric SOH is less than the calibrated non-zero threshold SOH.

### Claim 12 (depends on 11)

The vehicle of claim 11, wherein the ECU is further configured to command a transition of the performance of the functional operation back to the primary subsystem and place the secondary subsystem back in the standby mode in response to a predetermined condition.

### Claim 13 (depends on 11)

The vehicle of claim 11, wherein the predetermined condition is a calibrated interval.

### Claim 14 (depends on 11)

The vehicle of claim 11, further comprising a temperature sensor configured to measure a temperature of the primary subsystem, wherein the predetermined condition is the measured temperature of the primary subsystem.

### Claim 15 (depends on 11)

The vehicle of claim 11, wherein the primary and secondary subsystems are both steering subsystems.

### Claim 16 (depends on 11)

The vehicle of claim 11, wherein the primary and secondary subsystems are both braking subsystems.

### Claim 17 (depends on 11)

The vehicle of claim 11, wherein the primary and secondary subsystems are both controllers.

### Claim 18 (depends on 11)

The vehicle of claim 11, wherein the primary subsystem and the secondary subsystem are a steering subsystem and a braking subsystem, respectively, and wherein the ECU is further configured to record a diagnostic code indicative of a failure mode of the steering subsystem in response to the transition to the braking subsystem.

### Claim 19 (depends on 11)

The vehicle of claim 11, wherein the vehicle includes an internal combustion engine, the primary subsystem is a braking subsystem, the secondary subsystem is the engine, and the ECU is configured to command the transition of the performance of the functional operation to the engine by commanding engine braking.

### Claim 20 (depends on 11)

The vehicle of claim 11, wherein the ECU is configured to determine a degradation trajectory for the numeric SOH of the primary subsystems, and to time the commanded transition in real-time using the degradation trajectory.