Method and a system for run-time operational monitoring of an autonomous vehicle

A system for controlling a vehicle, the system comprising at least one processor, at least one non-transitory computer-readable memory storing instructions, which, when executed by the at least one processor, cause the system to:

• execute a first processing pipeline, including:
• triggering control over the vehicle;
• and
• execute, in parallel to the first processing pipeline, a risk management processing pipeline, including:
• acquiring first monitoring data from a first monitoring source used in the first processing pipeline;
• acquiring second monitoring data from a second monitoring source used in the first processing pipeline;
• generating a cumulative risk assessment value based on a combination of the first monitoring data and the second monitoring data;
• in response to the cumulative risk assessment value being above a pre-determined main threshold, generating a warning notification;
• and
• in response to a frequency of occurrence of the generating the warning notification being above a pre-determined frequency threshold, triggering, independently from the first processing pipeline, a remedial action to be performed by the vehicle.

A computer-readable medium storing executable instructions for causing one or more computer processors to:

• execute a first processing pipeline, including:
• triggering control over the vehicle;
• and
• execute, in parallel to the first processing pipeline, a risk management processing pipeline, including:
• acquiring first monitoring data from a first monitoring source used in the first processing pipeline;
• acquiring second monitoring data from a second monitoring source used in the first processing pipeline;
• generating a cumulative risk assessment value based on a combination of the first monitoring data and the second monitoring data;
• in response to the cumulative risk assessment value being above a pre-determined main threshold, generating a warning notification;
• and
• in response to a frequency of occurrence of the generating the warning notification being above a pre-determined frequency threshold, triggering, independently from the first processing pipeline, a remedial action to be performed by the vehicle.