Tttech Computertechnik Ag

Tttech Auto Ag

Stefan Traxler

Eric Schmidt

Georg Niedrist

Stefan Poledna

Hermann Kopetz

Wilfried Steiner

A fault-tolerant computer system (FTCS) for generating safe trajectories for a vehicle. The FTCS includes: a sensor part (SENSE), a primary part (PRIM), a secondary part (SEC), a tertiary part (TER), and a decide part (DECIDE). The PRIM and TER are configured to produce trajectories by interpreting information of the real world as perceived by the SENSE. The SEC is configured to produce a safe space estimate (FSE) by interpreting information of the real world as perceived by SENSE. The DECIDE and/or SEC are configured to execute correctness checks that take trajectories and FSE as inputs, and qualify a trajectory (TRJ) as safe when said TRJ is inside the FSE, and qualify a trajectory (UTRJ) as unsafe when said UTRJ is not inside the FSE.

Fault-tolerant computer system for assisted and autonomous driving

A method for transmitting control commands in a computer system, which includes components at least in the form of nodes, actuators and communication systems, wherein the control commands are communicated over the communication systems from the nodes to the actuators, and wherein one or more of the components may fail to operate according their specification. For consistently accepting control commands at the actuators, the nodes and their control commands are assigned priorities, wherein a node and its control commands have the same priority, wherein at least two priorities are used, wherein a high priority node produces high priority control commands and a low priority node produces low priority control commands, and wherein a high priority node is configured to communicate its control commands over at least two communication systems to the actuators and a low priority node is configured to communicate its low priority control commands over at least one communication system to the actuators. An actuator accepts the high priority control commands from the high priority node as long as it receives said high priority control commands on any one of the communication systems, and in this first case, it discards the low priority control commands, and stops to accept said high priority control commands in case said actuator does not receive said high priority control commands from any of the communication systems for a configurable duration, and in the second case, the actuator starts to accept low priority control commands.

Method and computer system to consistently control a set of actuators

Growing community of inventors

Vienna, Austria

Stefan Traxler