Device and method for computing driving parameters
AssigneesAmpere S.A.S., Nissan Motor Co., Ltd.
InventorsPatrice Bertrand, Eric Perraud
Life of this patent
Estimating the term…
Abstract
A computing device includes a first unit and a second unit. In response to receipt of a request corresponding to a computing function, the first unit may: determine an execution context; trigger a first execution of the function on the second unit, this delivering a first comparison parameter, a first temporal execution parameter being associated with the first comparison parameter; trigger a second execution of the function on the second unit, this delivering a second comparison parameter, a second temporal execution parameter being associated with the second comparison parameter; compare the first and second comparison parameters, a temporal comparison parameter being associated with the result of the comparison; and determine a computing status.
Claims17
A device for computing driving parameters that is configured to be located on board a vehicle, the device comprising:
- a first computing unit, associated with a given computing power and a given integrity level;
- and
- a second computing unit, comprising one or more computers, the second computing unit being associated with a computing power greater than the computing power associated with the first computing unit and with an integrity level lower than the integrity level associated with the first computing unit, the second computing unit being configured to execute one or more computation functions, to deliver, for each computation function, an output comprising a computation result and a comparison parameter representative of said computation result,
- wherein, in response to receipt of a request for computation from a control system of the vehicle for a driving parameter, the computation request corresponding to a given computation function, said first computing unit is configured to:
- determine an execution context of said given computation function on said second computing unit,
- trigger a first execution, called a nominal execution, of said given computation function, in said determined execution context, on said second computing unit, to deliver a first output comprising a first result of computation of said driving parameter and a first comparison parameter, a first execution time parameter being associated with said first comparison parameter,
- trigger a second execution, called a redundant execution, of said given computation function, in said determined execution context, on said second computing unit, to deliver a second output comprising a second result of computation of said driving parameter and a second comparison parameter, a second execution time parameter being associated with said second comparison parameter,
- compare said first comparison parameter and said second comparison parameter, a comparison time parameter being associated with the result of said comparison, and
- determine a computation status of said driving parameter as a function of a condition depending on the result of the comparison and as a function of said time parameters, said computation status being positive when the two comparison parameters are identical and the time parameters are valid,
- wherein the control system is configured to control the vehicle in response to receipt of the computation result and the computation status being positive.
A method for computing driving parameters that is configured to be implemented in a computing device located on board a vehicle, the computing device comprising:
- a first computing unit associated with a given computing power and a given integrity level;
- and
- a second computing unit comprising one or more computers, the second computing unit being associated with a computing power greater than the computing power associated with the first computing unit and with an integrity level lower than the integrity level associated with the first computing unit, the second computing unit being configured to execute one or more computation functions, to deliver, for each computation function, an output comprising a computation result and a comparison parameter representative of said computation result;
- the method comprising, in response to receipt of a request for computation from a control system of the vehicle for a driving parameter, the computation request corresponding to a given computation function:
- determining an execution context of said given computation function on said second computing unit;
- triggering a first execution, called a nominal execution, of said given computation function, in said determined execution context, on said second computing unit, to deliver a first output comprising a first result of computation of said driving parameter and a first comparison parameter, a first execution time parameter being associated with said first comparison parameter;
- triggering a second execution, called a redundant execution, of said given computation function, in said determined execution context, on said second computing unit, to deliver a second output comprising a second result of computation of said driving parameter and a second comparison parameter, a second execution time parameter being associated with said second comparison parameter;
- comparing said first comparison parameter and said second comparison parameter, a comparison time parameter being associated with the result of said comparison;
- and
- determining a computation status of said driving parameter as a function of a condition depending on the result of the comparison and as a function of said time parameters, said computation status being positive when the two comparison parameters are identical and the time parameters are valid,
- wherein the determining the execution context, the triggering the first execution, the triggering the second execution, the comparing, and the determining the computation status are implemented by said first computing unit, and
- wherein the control system is configured to control the vehicle in response to receipt of the computation result and the computation status being positive.
Dependencies are inferred from the claim text.