Secure software communication with autonomous vehicles
AssigneeZoox, Inc.
InventorsCollin MacGregor, Ravi Gogna
Life of this patent
Estimating the term…
Abstract
Techniques for engaging and disengaging a vehicle from an autonomous operation mode are described. The techniques include receiving a request to engage or disengage the autonomous mode at a teleoperations system. The request is validated at the teleoperations system using a first set of conditions describing trust in the request and validity of the request. The request is then sent, if valid, to the vehicle where a second validation is performed using a second set of conditions describing the conditions or states of the vehicle. If the second conditions are valid then the request is performed and the vehicle engages or disengages from autonomous mode.
Claims20
A teleoperations system comprising:
- one or more processors;
- and
- one or more non-transitory computer-readable media storing instructions executable by the one or more processors, wherein the instructions, when executed, cause the one or more processors to perform operations comprising:
- receiving first data from an autonomous vehicle;
- receiving, as input remote from the autonomous vehicle, a request to transition the autonomous vehicle between a first mode associated with an autonomous mode and a second mode associated with a disengaged autonomous mode of the autonomous vehicle;
- determining, based at least in part on a set of first validity conditions, the request, and the first data, a first validity associated with the request,
- wherein the set of first validity conditions comprising determining whether the first data comprises an authorization to submit the request and determining whether the request comprises a valid operation for the autonomous vehicle to perform;
- transmitting, based at least in part on the first validity, the request;
- and
- receiving, from the autonomous vehicle, second data indicative of:
- a successful transition between the first mode and the second mode based at least in part on a set of second validity conditions being fulfilled, wherein the set of second validity conditions comprises determining whether an operating status of the autonomous vehicle indicates that the autonomous vehicle is on a mission or in a standby mode;
- or
- a rejection of the request transition between the first mode and the second mode based at least in part on the set of second validity conditions not being fulfilled.
A method comprising:
- receiving first data from an autonomous vehicle;
- receiving, from a computing device remote from the autonomous vehicle, a request to cause the autonomous vehicle to transition between operating in a first mode and operating in a second mode;
- determining, based at least in part on the first data, the request, and a first set of conditions, a first validity associated with the request,
- wherein the first validity associated with the request comprises determining whether the first data comprises an authorization to submit the request and determining whether the request comprises a valid operation for the autonomous vehicle to perform;
- sending the request to the autonomous vehicle based at least in part on the first validity associated with the request;
- and
- receiving an acknowledgement from the autonomous vehicle comprising of one or more of:
- a second validity associated with the request based on a second set of conditions different from the first set of conditions, wherein the second validity associated with the request comprises determining whether an operating status of the autonomous vehicle indicates that the autonomous vehicle is on a mission or in a standby mode;
- or
- an indication that the autonomous vehicle is performing or will perform the transition between operating in the first mode and operating in the second mode.
One or more non-transitory computer-readable media storing instructions executable by one or more processors, wherein the instructions, when executed, cause the one or more processors to perform operations comprising:
- receiving first data from an autonomous vehicle;
- receiving, from a computing device remote from the autonomous vehicle, a request to transition the autonomous vehicle between a first mode associated with an autonomous mode and a second mode associated with a disengaged autonomous mode of the autonomous vehicle;
- determining, based at least in part on a set of first validity conditions, the request, and the first data, a first validity associated with the request,
- wherein the set of first validity conditions comprising determining whether the first data comprises an authorization to submit the request and determining whether the request comprises a valid operation for the autonomous vehicle to perform;
- transmitting, based at least in part on the first validity, the request;
- and
- receiving, from the autonomous vehicle, second data indicative of:
- a successful transition between the first mode and the second mode based at least in part on a set of second validity conditions being fulfilled, wherein the set of second validity conditions comprises determining whether an operating status of the autonomous vehicle indicates that the autonomous vehicle is on a mission or in a standby mode;
- or
- a rejection of the request transition between the first mode and the second mode based at least in part on the set of second validity conditions not being fulfilled.
Dependencies are inferred from the claim text.