Redundancy for automated vehicle operations

摘要

A vehicle sub-system controller is configured to receive a first message and a second message, wherein the first message includes at least a command for the controller, and the second message includes at least a target value for the controller to achieve. A fault may be detected with respect to the first message; and an adjustment to the sub-system may be locally determined in the sub-system controller to achieve the target value.

主权项

1. A system, comprising a controller for a vehicle sub-system, comprising a processor and a memory, the memory storing instructions executable by the processor to:
receive a first message and a second message, wherein the first message includes at least a command for the controller, and the second message includes at least a target value for the controller to achieve, wherein the target value is provided along with a series of values and a corresponding set of parameters according to which additional target values can be estimated, the parameters including at least one of a time traveled parameter and a distance traveled parameter; detect a fault with respect to the first message; and locally determine an adjustment to the sub-system to achieve the target value.