Gm Global Technolgoy Operations, Inc.

Jeffrey Joyce

Rami I Debouk

Stephen Marc Baker

Thomas E Fuhrman

Massimo Osella

Joseph Gerard D'Ambrosio

Barbara J Czerny

Kevin M O′Dea

Vijaya Vittal Ramachandra

A fault tolerant controller system includes a first controller and a second controller. One of the first and second controllers designated as a primary controller for generating control signals intended to control actuation devices on a vehicle under non-fault operating conditions, and the other of the first and second controllers designated as a secondary controller generating control signals intended to control actuation devices on the vehicle. The actuation devices are responsive only to the designated primary controller. An error is detected in the primary controller and a message is transmitted from the faulty controller to the non-faulty controller identifying the error. The non-faulty controller is subsequently designated as the primary controller. The control signals including an identifier that identifies the non-faulty controller as the designated primary controller. In response to detecting the error, the faulty controller is reset to operate in a safe operating mode as the secondary controller.

Primary controller designation in fault tolerant systems

The present disclosure relates to an automated system for use in connection with longitudinal deceleration, longitudinal acceleration, and lateral acceleration functions. The system includes an interface receiving signals from and transmitting signals to a controller. The system also includes a safety kernel system comprising safety kernel software and a set of safety rules. Also disclosed are methods for use in a motion control system in connection with vehicle deceleration, acceleration, and lateral acceleration. The methods in some cases include receiving an initial request into a safety kernel software and determining whether the safety kernel software has received an override. The methods can also include detecting a violation of any primary safeguards defined by the safety kernel software, detecting a violation within a set of secondary safeguards defined by the safety kernel software, and adjusting the initial request to a modified level; and transmitting the modified level to an actuator.

Methods and apparatus for isolating safety functions in a motion control system for a vehicle

A method for ensuring operation of a limited-ability autonomous driving enabled vehicle includes monitoring a plurality of specific conditions necessary for preferred and reliable use of limited-ability autonomous driving, and initiating a fault handling and degradation strategy configured to maneuver the vehicle to a preferred state if the driver is unable to manually control the vehicle when at least one of the specific conditions is either violated or will become violated.

Method and system for ensuring operation of limited-ability autonomous driving vehicles

Growing community of inventors

Vancouver, Canada

Jeffrey Joyce