Domain isolation in an automotive automated driving system
AssigneeQUALCOMM Incorporated
InventorsAmit Aneja, Rahul Gulati, Sriram Hariharan
Life of this patent
Estimating the term…
Abstract
This disclosure provides systems, methods, and devices for vehicles with automated driving systems. In a first aspect, a method of isolation in an automated driving system includes detecting the error in a first domain of the automated driving system, isolating a second domain of the automated driving system from the first domain, maintaining operation of the second domain after isolating the second domain from the first domain, and bypassing, by the second domain, the first domain to transmit notifications to an external controller via a first communication interface. Other aspects and features are also claimed and described.
Claims27
A method for isolation in an automated driving system, comprising:
- detecting an error in a first domain of the automated driving system;
- isolating a second domain of the automated driving system from the first domain, wherein the first domain is configured according to a first safety integrity level and the second domain is configured according to a second safety integrity level, having a lower level than the first safety integrity level;
- maintaining operation of the second domain of the automated driving system after isolating the second domain from the first domain;
- and
- bypassing, by the second domain, the first domain to transmit one or more notifications to an external controller via a first communication interface between the second domain and the external controller after isolating the second domain of the automated driving system from the first domain.
An automated driving system, comprising:
- a memory storing processor-readable code;
- and
- at least one processor coupled to the memory, the at least one processor configured to execute the processor-readable code to cause the at least one processor to perform operations including:
- detecting an error in a first domain of the automated driving system, wherein the automated driving system includes the processor;
- isolating a second domain of the automated driving system from the first domain, wherein the first domain is configured according to a first safety integrity level and the second domain is configured according to a second safety integrity level, having a lower level than the first safety integrity level;
- maintaining operation of the second domain of the automated driving system after isolating the second domain from the first domain;
- and
- bypassing, by the second domain, the first domain to transmit one or more notifications to an external controller via a first communication interface between the second domain and the external controller after isolating the second domain of the automated driving system from the first domain.
A non-transitory computer-readable medium storing instructions that, when executed by a processor, cause the processor to perform operations comprising:
- detecting an error in a first domain of an automated driving system, wherein the automated driving system includes the processor;
- isolating a second domain of the automated driving system from the first domain, wherein the first domain is configured according to a first safety integrity level and the second domain is configured according to a second safety integrity level, having a lower level than the first safety integrity level;
- maintaining operation of the second domain of the automated driving system after isolating the second domain from the first domain;
- and
- bypassing, by the second domain, the first domain to transmit one or more notifications to an external controller via a first communication interface between the second domain and the external controller after isolating the second domain of the automated driving system from the first domain.
A vehicle, comprising:
- an automated driving system including:
- at least one processor, wherein at least one processor is configured to perform operations including:
- detecting an error in a first domain of the automated driving system;
- isolating a second domain of the automated driving system from the first domain, wherein the first domain is configured according to a first safety integrity level and the second domain is configured according to a second safety integrity level, having a lower level than the first safety integrity level;
- maintaining operation of the second domain of the automated driving system after isolating the second domain from the first domain;
- and
- bypassing, by the second domain, the first domain to transmit one or more notifications to an external controller via a first communication interface between the second domain and the external controller after isolating the second domain of the automated driving system from the first domain.
Dependencies are inferred from the claim text.