EP4347299A1

EP4347299A1 - Remotely controlled vehicle operations

Info

Publication number: EP4347299A1
Application number: EP22730837.6A
Authority: EP
Inventors: Jitesh PATEL; Daniel WOOLLISCROFT; David PETTINGER
Original assignee: Jaguar Land Rover Ltd
Current assignee: Jaguar Land Rover Ltd
Priority date: 2021-05-28
Filing date: 2022-05-26
Publication date: 2024-04-10
Also published as: GB2607099B; GB202107673D0; GB2607099A; WO2022248644A1

Abstract

Aspects of the invention relate to a control system (110) for a vehicle (100), to a vehicle (100), to a control system (210) for a portable electronic device (200), to a method (1), and to a computer program (115). The control system (110) for the vehicle (100) comprises one or more controllers (111) and is configured to: receive (3) a result (5) of an impairment test via wireless communication from a portable electronic device (200) authorised to remotely control one or more vehicle operations. If the result (5) is below a limit indicating impairment, the control system (110) is configured to enable (9) torque production for performing a vehicle operation requested by the portable electronic device (200).

Description

REMOTELY CONTROLLED VEHICLE OPERATIONS

TECHNICAL FIELD

The present disclosure relates to remotely controlled vehicle operations. In particular, but not exclusively it relates to remotely controlled vehicle operations for which impairment of the person in control should be tested. Aspects and embodiments of the invention provide control system for a vehicle, a vehicle, a control system for a portable electronic device, a method, and a computer program.

BACKGROUND

Some vehicles are configured to enable certain vehicle operations to be controlled remotely. To prevent drivers from operating a vehicle while impaired for driving, vehicles may be fitted with impairment testing equipment such as an alcohol interlock device. Alcohol interlock devices are typically installed within the vehicle’s cabin.

SUMMARY OF THE INVENTION

According to an aspect of the invention there is provided a control system for a vehicle, the control system comprising one or more controllers, wherein the control system is configured to: receive a result of an impairment test via wireless communication from a portable electronic device authorised to remotely control one or more vehicle operations; and if the result is below a limit indicating impairment, enable torque production for performing a vehicle operation requested by the portable electronic device.

This provides the advantage that vehicle operations requiring torque production can be remotely controlled even when an assessment of a vehicle operator’s fitness to drive or, conversely, their lack of impairment for driving is required prior to torque production.

Optionally, the control system comprises an electronic control module configured to authenticate torque requests to a torque source control module and a telematics control module configured to enable wireless communication with the portable electronic device.

According to an aspect of the invention there is provided a vehicle comprising the control system.

According to an aspect of the invention there is provided a control system for a portable electronic device, the control system comprising one or more controllers, wherein the control system is configured to: prompt a user to undertake an impairment test upon launch of an application configured to enable the user to remotely control one or more vehicle operations; and transmit a result of the impairment test to a control system for a vehicle.

According to an aspect of the invention there is provided a method comprising: receiving a result of an impairment test via wireless communication from a portable electronic device authorised to remotely control one or more vehicle operations; and if the result is below a limit indicating impairment, enabling torque production for performing a vehicle operation requested by the portable electronic device.

According to an aspect of the invention there is provided computer software that, when executed, is arranged to perform the method.

According to an aspect of the invention there is provided a non-transitory computer readable medium comprising computer readable instructions that, when executed by a processor, cause performance of the method.

The following portion of this “SUMMARY OF THE INVENTION” section, describes various features that may be features of any of the embodiments described in the foregoing portion of the “SUMMARY OF THE INVENTION” section. The description of a function should additionally be considered to also disclose any means suitable for performing that function.

Optionally, if the result is above a limit indicating impairment, the control system is configured to prevent torque production for performing a vehicle operation requested by the portable electronic device.

This provides the advantage of preventing a vehicle operator from controlling vehicle operations requiring torque production can be remotely if they are impaired.

Optionally, whether or not torque production is enabled is also controlled in dependence on an output from an in-vehicle alcohol interlock device.

Optionally, the one or more vehicle operations that the portable electronic device is authorised to remotely control comprise remote parking.

Optionally, the impairment test comprises alcohol detection.

Optionally, the impairment test comprises measurement of a test subject using one or more sensors of the portable electronic device.

Optionally, the impairment test comprises measurement of a test subject using an impairment test device configured to connect with portable electronic device.

Optionally, it is determined when the portable electronic device is within the vehicle. If the portable electronic device is determined to be within the vehicle when the result is received by the control system or within a first specified time period of the result being received by the control system, torque production is enabled to satisfy load requests derived from an output of cabin human machine interfaces (HMIs) during at least a second time period thereafter. Optionally, an identifier of a test subject, in respect of whom the impairment test was performed, is received via wireless communication from the portable electronic device.

According to an aspect of the invention there is provided a control system for a vehicle, the control system comprising one or more controllers, wherein the control system is configured to: receive a result of an impairment test via wireless communication from a portable electronic device authorised to remotely control one or more vehicle operations; and if the result is below a limit indicating impairment, enable performance of a vehicle operation requested by the portable electronic device.

BRIEF DESCRIPTION OF THE DRAWINGS

One or more embodiments of the invention will now be described, by way of example only, with reference to the accompanying drawings, in which:

FIG 1 illustrates an example vehicle;

FIG 2 illustrates example vehicle components and connection with a portable electronic device;

FIG 3 illustrates an example control system;

FIG 4 illustrates another example control system;

FIG 5 illustrates an example method;

FIG 6 illustrates an example of the method;

FIG 7 illustrates another example of the method; and

FIG 8 illustrates an example method for the portable electronic device.

DETAILED DESCRIPTION

FIG 1 illustrates an example of a vehicle 100 in which embodiments of the invention can be implemented. In some, but not necessarily all examples, the vehicle 100 is a passenger vehicle, also referred to as a passenger car or as an automobile. In other examples, embodiments of the invention can be implemented for other applications, such as commercial vehicles.

FIG 1 is a front perspective view and illustrates a longitudinal x-axis between the front and rear of the vehicle 100 representing a centreline, an orthogonal lateral y-axis between left and right lateral sides of the vehicle 100, and a vertical z-axis. A forward direction typically faced by a driver’s seat is in the positive x-direction; rearward is -x. A rightward direction as seen from the driver’s seat is in the positive y-direction; leftward is -y. These are a first lateral direction and a second lateral direction.

The vehicle 100 can comprise any appropriate torque source 120 (shown in FIG 2) for delivering tractive torque to vehicle wheels. For example, the vehicle 100 can comprise an electric traction motor. Additionally, or alternatively, the vehicle 100 can comprise an internal combustion engine. The vehicle 100 may be an electric vehicle, a hybrid electric vehicle, an internal combustion engine vehicle, or similar.

FIG 2 schematically illustrates elements of the vehicle 100 and peripherals which are most relevant to embodiments of the invention. There is provided a control system 110 for the vehicle 100, examples of which are described with reference to FIGS 3 and 4 below. The control system 110 can control on or more torque sources 120. A torque source can refer to a prime mover. As such, the one or more torque sources 120 can comprise an internal combustion engine and/or an electric traction motor.

The control system 110 can have a wireless connection 201 with a portable electronic device 200 or is at least configured to receive information transmitted from the portable electronic device via wireless communication. That is, the control system 110 may or may not comprise one or more receivers or transceivers for wireless communication but is at least configured to receive information derived from wireless signals received by the one or more receivers or transceivers. The wireless communication of information from (and, in some examples, to) the portable electronic device 200 may be via short-range radio communications such as Wi-Fi or Bluetooth (RTM), for example, or over long-range cellular radio links.

The portable electronic device 200 may be a mobile phone, smart watch, virtual reality glasses, etc. The portable electronic device 200 comprises a control system 210, comprising one or more controllers (not shown), and a human machine interface (HMI) 220. The HMI 220 is herein termed “remote HMI” in reference to its remoteness from the vehicle 100. Here, remote refers to being accessible only by means of a telecommunications network rather than the extent of physical separation.

The portable electronic device 200 can be authorised to remotely control one or more operations of the vehicle 100 (herein termed “vehicle operations”). The portable electronic device 200 can be authorised, for example, via a network user account associated with the vehicle 100. The network can provide, for the user account, a unique cryptographic identifier and set of Public/Private key certificates to authorize and establish secure wireless connection using, for example, transport layer security (TLS) protocol.

The one or more vehicle operations can be controlled by a user of the portable electronic device 200 via the remote HMI 220. Vehicle operations that the portable electronic device 200 can be authorised to remotely control can comprise those which load the one or more torque sources 120, necessitating torque production to enable their performance. In some of these vehicle operations, the torque production results in torque at the vehicle’s wheels and in others it does not.

An example of a vehicle operation that the portable electronic device 200 can be authorised to remotely control is remote parking. Remote parking enables manoeuvres into a parking space (“remote parking IN”) and manoeuvres out of a parking space (“remote parking OUT”).

Remote parking IN enables the driver to exit the vehicle 100 prior to commencement of the manoeuvre, which is convenient for parking in narrow garages or bays with limited space for opening a door.

Remote parking OUT enables the driver to manoeuvre the vehicle 100 prior to entering the vehicle 100, which is convenient when the vehicle has been parked in narrow garages or bays with limited space for opening a door.

The driver can use the remote HMI 220 at the portable electronic device 200 to send parking instructions such as forward exploration, rearward exploration, forward positional adjustment and/or rearward positional adjustment to the control system 110. Positional adjustment comprises the driver using the remote HMI 220 (e.g., slide and hold interaction) to manually trigger the control system 110 to cause one incremental longitudinal movement in response. The control system 110 may also use the sensors to prevent collision with sensed obstacles if following the driver trigger would cause a collision. The incremental longitudinal movement could be in the order of 1-10 centimetres, or at most less than 40 centimetres. In some examples, the incremental longitudinal movement is between 2.5 and 20 centimetres.

An exploration is a parking manoeuvre, in which the environment into which the vehicle is to be manoeuvred (either into or out of a parking space) has not scanned/determined well in advance and, accordingly, is unfamiliar. In this case the environment will be sensed on the fly (while vehicle in motion). Example use cases include parking the vehicle inside a garage or driving out from the garage.

Another example of a vehicle operation that the portable electronic device 200 can be authorised to remotely control is climate control for the vehicle’s cabin. Climate control adjusts the output of air-conditioning and heaters to achieve a requested temperature in the vehicle’s cabin. The air-conditioning compressor may be driven by torque from the one or more torque sources 120, for example via a belt output of an internal combustion engine.

In some examples, vehicle operations that the portable electronic device 200 can be authorised to remotely control can additionally or alternatively comprise those which do not load the one or more torque sources 120 and may instead draw electrical power from elsewhere such as, for example, directly from a vehicle battery.

Examples of such vehicle operations that the portable electronic device 200 can be authorised to remotely control are: vehicle access control, including the unlocking of vehicle doors; pre-adjusting the seats; activating the air ionizer to clean cabin air or sanitize the vehicle; sensor and windshield cleaning; reviewing dashcam footage; setting navigation destinations; reviewing vehicle status such as vehicle warnings or fuel level; and remote diagnostics.

Vehicles should not be operated by a person impaired. In some examples a person may be considered impaired in the context of operating a vehicle when they are not in a state, either physical or mental, to assess the environment and control the vehicle to avoid hazardous situations. Existing systems which assess the fitness or, conversely, impairment of a person in control of a vehicle are implemented within the vehicle. Where vehicle operations are remotely controlled, these existing systems may not be able to assess the person in control of a vehicle.

To this end, the portable electronic device 200 can comprise means 230A for performing an impairment test in respect of a test subject 300 and/or can be connected, whether by wires or wirelessly, to means 230B for performing an impairment test in respect of the test subject 300. The test subject 300 is the person in respect of whom the impairment test is performed, for example the driver of the vehicle 100 or the user of the portable electronic device 200. The means 230A for performing an impairment test in respect of a test subject 300 can comprise one or more sensors (not shown) of the portable electronic device 200. These one or more sensors can be dedicated to impairment testing or may be multipurpose and used by other applications of the portable electronic device 200.

The means 230B for performing an impairment test in respect of a test subject 300 can comprise an impairment testing device configured to connect with portable electronic device 200. The impairment testing device comprise one or more sensors dedicated to impairment testing. The impairment testing device can be a wearable device.

The one or more sensors comprised in either the means 230A or 230B can be configured to detect values of parameters that parameterise impairment such as, for example: breath alcohol concentration from breath of the test subject 300; transdermal alcohol concentration from perspiration or insensible perspiration of the test subject 300; or blood alcohol concentration of the test subject 300 where the impairment to be assessed is alcohol consumption or intoxication.

The one or more sensors comprised in either the means 230A or 230B can be configured to monitor parameters that parameterise the test subject’s behaviours that are affected by impairment to thereby infer impairment. For example, a test subject’s gait is affected by various impairments including a strong correlation with alcohol intoxication.

Examples of such sensors include without limitation: fuel cell or semiconductor gas sensors or infrared spectrometer for breath analysis or insensible perspiration analysis; amperometric sensors for blood analysis or perspiration analysis; accelerometers for gait analysis.

Though in the foregoing, examples were made referencing impairment tests comprising alcohol detection, it is to be appreciated that an impairment test within the scope of embodiments of the invention may additionally or alternatively test for other impairments such as fatigue or being under the influence of drugs.

FIG 3 illustrates an example of the control system 110 having one or more controllers 111.

The control system 110 is configured to receive information, such as a result of an impairment test, via wireless communication from the portable electronic device 200. In some examples, the control system 110 further receives input from one or more of: an in-vehicle alcohol interlock device 130; cabin HMIs 140; and vehicle sensors 150.

The in-vehicle alcohol interlock device 130 can comprise a breathalyser installed in vehicle 100, though it is to be appreciated that other alcohol monitoring devices may be used in place of a breathalyser. The control system 110 can be configured to immobilise the vehicle 100, provided the vehicle is not already in motion, until a breath sample having a breath alcohol concentration below a predefined limit is provided via the breathalyser. In some examples, if the vehicle 100 is already in motion, one or more alarms can be activated and remain active until the vehicle 100 is stopped, at which point it may be immobilised, unless a breath sample having a breath alcohol concentration below a predefined limit is provided via the breathalyser. An exception may be made for vehicle operations requested by the portable electronic device 200 if the result of an impairment test also received from the portable electronic device 200 is below a limit indicating impairment. In some examples, the cabin HMIs 140 are in particular those associated with a driver’s seat such as those for use by a driver. Examples include, without limitation: an accelerator pedal, manual or automatic transmission controls, a steering wheel, steering- wheel mounted switches, an ignition switch, an engine ON button, a climate control user interface, parking assistance control input, trailer assistance control input, a terrain mode selector, cruise control inputs including for terrain-based vehicle speed control, etc.

The vehicle sensors 150 are configured for obstacle, feature and/or pedestrian detection and enable driving assistance for remotely controlled vehicle operations involving driving such as remote parking. The vehicle sensors 150 may comprise vision sensors and/or ultrasonic sensors distributed around the vehicle 100, providing different fields of view. The vision sensors may be configured to detect electromagnetic radiation. Examples include visual light spectrum cameras, light detection and ranging (LIDAR), radio detection and ranging (RADAR), or near-infrared. The sensors 150 are configured to provide information about the vehicle’s environment upon which driving assistance, such as may be provided to the user remotely controlling parking manoeuvres, can be, at least in part, based.

The control system 110 is configured to control the one or more torque sources 120. In some examples, the control system 110 further controls a steering system 160.

I n various, but not necessarily all examples, the control system 110 can be configured to implement at least the method 1 described with reference to FIG 5 below. In some examples, the control system 110 can implement examples of the method 1 which include the method blocks of FIGS 6 and/or 7.

The one or more controllers 111 include at least one electronic processor 113; and at least one memory device 114 electrically coupled to the electronic processor 113 and having instructions 115 (e.g. a computer program) stored therein, the at least one memory device 114 and the instructions 115 configured to, with the at least one electronic processor 113, cause any one or more of the methods described herein to be performed. The at least one electronic processor 113 may have an interface such as an electrical input/output 1/0 112 or electrical input for receiving information and interacting with external components or devices such as the one or more torque sources 120 and the portable electronic device 200.

There is also in FIG 3 illustrated a non-transitory computer-readable storage medium 116 comprising the instructions 115 (computer software) and by means of which the instructions 115 may arrive at the control system 110.

For purposes of this disclosure, it is to be understood that the controller(s) described herein can each comprise a control unit or computational device having one or more electronic processors. A vehicle and/or a system thereof may comprise a single control unit or electronic controller or alternatively different functions of the controller(s) may be embodied in, or hosted in, different control units or controllers. A set of instructions could be provided which, when executed, cause said controller(s) or control unit(s) to implement the control techniques described herein (including the described method(s)). The set of instructions may be embedded in one or more electronic processors, or alternatively, the set of instructions could be provided as software to be executed by one or more electronic processor(s). For example, a first controller may be implemented in software run on one or more electronic processors, and one or more other controllers may also be implemented in software run on one or more electronic processors, optionally the same one or more processors as the first controller. It will be appreciated, however, that other arrangements are also useful, and therefore, the present disclosure is not intended to be limited to any particular arrangement. In any event, the set of instructions described above may be embedded in a computer-readable storage medium (e.g., a non-transitory computer- readable storage medium) that may comprise any mechanism for storing information in a form readable by a machine or electronic processors/computational device, including, without limitation: a magnetic storage medium (e.g., floppy diskette); optical storage medium (e.g., CD-ROM); magneto optical storage medium; read only memory (ROM); random access memory (RAM); erasable programmable memory (e.g., EPROM and EEPROM); flash memory; or electrical or other types of medium for storing such information/instructions.

FIG 4 illustrates an example of the control system 110 in which different functions are implemented by different modules 117 — 119. The modules 117 - 119 can be implemented in hardware or in software. For example, the modules 117 - 119 can be implemented by different respective control units or controllers or can be implemented with different instructions (e.g., computer programs) executed by the one or more electronic processors of a single control unit or controller.

There is provided a telematics control module 117 configured to enable wireless communication with the portable electronic device. The telematics control module 117 can provide relevant information, such as vehicle operation requests received from the portable electronic device 200 and the result of an impairment test received from the portable electronic device 200, to other modules 118, 119.

There is provided a torque source control module 119 configured to control the one or more torque sources 120. In some examples, the torque source control module is configured as an immobilizer which prevents the one or more torque sources 120 from producing torque unless load requests made of the one or more torque sources 120 are authenticated. In some examples, the torque source control module 119 is configured to seek authentication for load requests to be made of the one or more torque sources 120 before controlling the one or more torque sources 120 to satisfy the load requests.

There may be more than one torque source control module where the vehicle comprises more than one torque source 120.

Where the one or more torque sources 120 comprise an internal combustion engine, the torque source control module 119 can comprise a powertrain control module (PCM). The PCM is configured to control, for example and without limitation: cranking, fuelling, ignition, and the timings thereof.

Where the one or more torque sources 120 comprise an electric traction motor, the torque source control module 119 can comprise an electric power inverter converter control module (EPIC). The EPIC is configured to change the nature of the electrical power presented to it, for example to step-up or step-down voltages and to convert between AC and DC power. Most relevant to embodiments of the invention, the EPIC is configured to convert relatively low voltage DC power from a vehicle battery into high voltage AC power used to operate an electric traction motor.

There is provided another electronic control module 118 which may perform a variety of functions - for example it may be a body control module (BCM) and configured to control vehicle entry points such as the vehicle’s door locks, window opening and closing, lighting including interior lighting, climate in the vehicle’s cabin, among others - and it is at least configured to authenticate load requests provided to the torque source control module 119.

Though only three modules 117 - 119 are illustrated in the example control system 110 of FIG 4, it is to be appreciated that the control system 110 may comprise more or less modules, implementing different functions.

FIG 5 illustrates an example method 1. Method 1 is a method for enabling remote control of torque production at the vehicle 100. Method 1 enables torque production even when an assessment of a driver’s fitness to drive or, conversely, their lack of impairment for driving is required prior to torque production.

At block 3 of method 1, a result 5 of an impairment test is received via wireless communication from a portable electronic device 200 authorised to remotely control one or more vehicle operations.

The result 5 of the impairment test may, for example, comprise measurement data from means 230A or means 230B and/or data produced by processing of said measurement data. The processing of said measurement data may be performed locally at the means 230A or means 230B or can be otherwise performed at the portable user device 200. The data produced by the processing of said measurement data may be an indication of whether the measurement data has a value above or below a limit value which represents impairment of the test subject 300. Thus, the result 5 can be Boolean, either: above a limit indicating impairment; or below a limit indicating impairment.

A conditional operation at block 7 of method 1 determines which one of the two paths Y1 and N1 method 1 will follow.

If the result 5 is other than Boolean, the control system 110 can compare it with a stored limit indicating impairment to determine whether the result 5 is above or below this limit and thus whether the test subject 300 is impaired or not.

Path Y1 is followed if the result 5 is below a limit indicating impairment. Block 9 of method 1 is comprised in path Y1. At block 9 torque production for performing a vehicle operation requested by the portable electronic device 200 is enabled.

Accordingly, method 1 comprises enabling torque production for performing a vehicle operation requested by the portable electronic device 200 if the result 5 is below a limit indicating impairment.

In some examples, enabling torque production for performing a vehicle operation requested by the portable electronic device 200 comprises enabling an amount of torque to be produced which is just sufficient for performing the particular vehicle operation that has been requested. That is, the one or more torque sources 120 are controlled to produce an amount of torque sufficient for performing the particular vehicle operation that has been requested but no more. In some examples, further steps may be taken to restrict how the torque produced can be used.

In some examples, enabling torque production for performing a vehicle operation requested by the portable electronic device 200 comprises enabling torque production to perform only the vehicle operation requested by the portable electronic device 200. For example, if the requested vehicle operation does not involve driving, instructions to engage the vehicle transmission which originating from elsewhere (e.g., from other remote HMIs or from cabin HMIs 140) are not acted upon so that the torque production does not result in torque at the vehicle’s wheels. By way of another example, if the requested vehicle operation involves low speed driving (e.g., a parking manoeuvre), the amount of torque production is limited in dependence on a (low) speed setpoint.

In some examples, the torque production is only enabled for a specified time period. A retest in respect of the impairment of the test subject 300 may be required after a specified time period in order to continue torque production for performing a vehicle operation requested by the portable electronic device 200.

Path N1 is followed if the result 5 is above a limit indicating impairment. Block 11 of method 1 is comprised in path N1. At block 11 torque production for performing a vehicle operation requested by the portable electronic device 200 is prevented.

Accordingly, method 1 comprises preventing torque production for performing a vehicle operation requested by the portable electronic device 200 if the result 5 is above a limit indicating impairment.

In some examples, upon receipt of a result 5 which is above a limit indicating impairment, torque production may be prevented for a specified time period thereafter. The prevention can be restricted to load requests deriving from the portable electronic device 200 from which the result 5 was received. Torque production to satisfy load requests originating from other remote HMIs or from cabin HMIs 140 is not necessarily prevented during the specified time period. The prevention can be restricted to load requests derived from actions of the test subject 300 in respect of whom the impairment test, yielding the result 5, was performed. Torque production to satisfy load requests derived from the actions of another person is not necessarily prevented during the specified time period.

A vehicle operation requested by the portable electronic device 200 is received via wireless communication. The result 5 may be received as part of a message comprising the vehicle operation request or may be provided in a separate message.

The load that would be placed on the one or more torque source 120 in performing the vehicle operation is determined and, to perform the vehicle operation, a commensurate load request to be made of the one or more torque sources 120 is provided to the torque source control module 119.

Torque production can be enabled or prevented by means of, respectively, authenticating or not authenticating load requests to be made of the one or more torque sources 120. In some examples, the electronic control module 118 authenticates load requests provided to the torque source control module 119 if the result 5 is below a limit indicating impairment and does not authenticate load requests provided to the torque source control module 119 if the result 5 is above a limit indicating impairment. If load requests provided to the torque source control module 119 are not authenticated by the electronic control module 118, the torque source control module 119 will not control the torque source to produce torque. Thus, in the absence of authentication, no torque is produced. The authentication can comprise challenge-response authentication whereby the torque source control module 119 challenges the electronic control module 118 which only provides the valid response if result 5 is below a limit indicating impairment. In some examples, if the result 5 is above a limit indicating impairment, no load request may be provided to the torque source control module 119. The load that would be placed on the one or more torque source 120 in performing the vehicle operation may not be determined if the result 5 is above a limit indicating impairment.

Though in the example of FIG 4 the control system 110 is shown to comprise the telematics control module 117 and the torque source control module 119, it is to be appreciated that method 1 can be implemented by the electronic control module 118 and, accordingly, the control system 110 need not comprise the telematics control module 117 and the torque source control module 119. The electronic control module 118 receives the result 5 of an impairment test via wireless communication from a portable electronic device 200 authorised to remotely control one or more vehicle operations, even if it may also pass via the telematic control module 117 before reaching the electronic control module 118. The electronic control module 118 enables torque production for performing a vehicle operation requested by the portable electronic device 200 because, but for authenticating load requests provided to the torque source control module, no torque would be produced.

As described with references to FIG 2 above, not all vehicle operations that the portable electronic device 200 may be authorised to remotely control require torque production. If such vehicle operations are requested by the portable electronic device 200, method 1 can comprise enabling their performance if the result 5 is below a limit indicating impairment. Method 1 can comprise preventing their performance if the result 5 is above a limit indicating impairment.

FIG 6 illustrates another example of method 1. In the example of FIG 6, blocks 3, 7 and 11 are as described in the example of FIG 5. The example of FIG 6 differs in respect of path Y1, which further divides into two paths Y2 and N2.

At block 13 of method 1, the time 15 at which the result 5 is received from the portable electronic device 200 is obtained. If the time at which the impairment test was performed or the time at which the result 5 was determined is communicated to the control system 110, either of these times can be used instead of the time 15 at which the result 5 is received.

At block 17 of method 1, the time 19 at which the portable electronic device 200 enters the vehicle 100 (e.g., is within the vehicle cabin), if it does enter the vehicle 100, is obtained. The control system 110 can be configured to determine when (if) the portable electronic device 200 is within the vehicle 100. This can, for example, be determined using wireless localisation techniques such as Bluetooth (RTM) or ultra-wideband localisation or by comparing the data reported by position sensors of the vehicle 100 and portable electronic device 200.

A conditional operation at block 21 of method 1 determines which one of the two paths Y2 and N2 method 1 will follow when it is determined (at block 7) whether the result 5 is below a limit indicating impairment.

Path Y2 is followed if the time 21 that the portable electronic device 200 enters the vehicle 100 is within a first specified time period after the time 15 that the result 5 is received. In some examples, the first specified time period is zero, requiring the portable electronic device 200 to be within the vehicle 100 when the result 5 is received if path Y2 is to be followed. Block 23 of method 1 is comprised in path Y2. At block 23 torque production to satisfy load requests derived from an output of cabin HMIs 140 is enabled during at least a second time period thereafter. The second time period may be a specified period. In some examples the specified period may be between 10 and 20 minutes or as otherwise set by law. A retest after these 10 to 20 minutes or otherwise may enable torque production for another time period which could be randomised to provide for randomised retests. In other examples the second time period may be, for example, the time until the occurrence of a trigger event. Trigger events can include, without limitation: the stopping of one or more torque sources 120, the opening of a vehicle door, or the travelling of a specified distance. Load requests derived from an output of cabin HMIs 140 are, for example, authenticated by the electronic control module 118 during at least the second time period. Torque production for performing a vehicle operation requested by the portable electronic device 200 (e.g., via the remote HMI 220) is also enabled, as per block 9 in the example of FIG 5.

Path N2 is followed if the time 21 that the portable electronic device 200 enters the vehicle 100 is outside of a first specified time period after the time 15 that the result 5 is received. In some examples, the first specified time period is zero, such that if the portable electronic device 200 is not within the vehicle 100 when the result 5 is received, path N2 will be followed.

Block 25 of method 1 is comprised in path N2. At block 25 torque production for performing a vehicle operation requested by the portable electronic device 200 (e.g., via the remote HMI 220) is enabled, as per block 9 in the example of FIG 5. Additionally, torque production to satisfy load requests derived from an output of cabin HMIs 140 is prevented. Such load requests are, for example, not authenticated by the electronic control module 118.

FIG 7 illustrates another example of method 1. In the example of FIG 7, blocks 3, 7 and 11 are as described in the example of FIGS 5. The example of FIG 7 differs in respect of path Y1, which further divides into two paths Y3 and N3.

At block 27 of method 1 , an identifier 29 of the test subject 300, in respect of whom the impairment test was performed, is received via wireless communication from the portable electronic device 200. The identifier 29 may be comprised within the same message as the result 5 or may otherwise be suitably associated with the result 5.

The identifier 29 may be the secure user account which is used to access the portable electronic device 200 application that enables the remote control of vehicle operations.

The means 230A or 230B for testing impairment can comprise biometric sensors configured to determine the identifier 29 of the test subject 300. For example, iris or fingerprint scanners or facial recognition using a camera could be employed.

An Internet-of-things approach can also be used to determine the identifier 29 by determining devices nearby to the portable electronic device 200 such as, for example, a smart watch, vehicle key, another remote device, to assist in a probable determination of the test subject’s identity. At block 31 of method 1 , an identity 33 of the person occupying the driver’s seat is determined. The person occupying the driver’s seat is herein termed “driver”, though it is to be appreciated that they may not be permitted to drive the vehicle 100, or at least not by actuation of cabin HMIs 140, depending on the outcome of method 1.

In some examples, the identity 33 of the driver can be determined using computer vision to observe the driver's face. Existing in- vehicle cameras such as driving facing cameras and others used in cabin monitoring devices for driver conditions, attention, drowsiness, eye-tracking, etc. can be used. In other examples, an Internet-of-things approach can be used, determining relative locations of the portable electronic device 200 and the driver’s seat as well as, in some example, other personal devices such as a smart watch or vehicle key.

A conditional operation at block 35 of method 1 determines which one of the two paths Y3 and N3 method 1 will follow when it is determined (at block 7) that the result 5 is below a limit indicating impairment.

Path Y3 is followed if the identifier 29 matches the identity 33 of the driver. In some examples, the match between the identifier 29 the identity 33 of the driver being determined within a third specified time period after the time 15 that the result 5 is received is a condition for following path Y3. In such examples, block 13 described with reference to FIG 6 is also included in the present example of method 1, though it is not shown in FIG 7. In some examples, the third specified time period is zero, requiring the driver to be identified at the time when the result 5 is received if path Y3 is to be followed.

Block 37 of method 1 is comprised in path Y3. At block 37 torque production to satisfy load requests derived from an output of cabin HMIs 140 is enabled during at least a fourth time period thereafter. The fourth time period may be a specified period. In some examples the specified period may be between 10 and 20 minutes or as otherwise set by law. A retest after these 10 to 20 minutes or otherwise may enable torque production for another time period which could be randomised to provide for randomised retests. In other examples the fourth time period may be, for example, the time until the occurrence of a trigger event. Trigger events can include, without limitation: the stopping of one or more torque sources 120, the opening of a vehicle door, or the travelling of a specified distance. Load requests derived from an output of cabin HMIs 140are, for example, authenticated by the electronic control module 118 during at least the fourth time period. Torque production for performing a vehicle operation requested by the portable electronic device 200 (e.g., via the remote HMI 220) is also enabled, as per block 9 in the example of FIG 5.

Path N3 is followed if the identifier 29 does not match the identity 33 of the driver or, in some examples, if no match is determined within the third specified time period after the time 15 that the result 5 is received.

Block 39 of method 1 is comprised in path N3. At block 39 torque production for performing a vehicle operation requested by the portable electronic device 200 (e.g., via the remote HMI 220) is enabled, as per block 9 in the example of FIG 5. Additionally, torque production to satisfy load requests derived from an output of cabin HMIs 140 is prevented. Such load requests are, for example, not authenticated by the electronic control module 118. It is to be appreciated that the example of method 1 described with reference to FIG 7 can additionally comprise blocks 13, 17, 21, and 25 from FIG 6. For example, rather than dividing path Y1 at block 35, block 35 may instead divide path Y2 into paths Y3 and N3.

Examples of method 1 described with respect to FIGS 6 or 7 can be used as by a driver of the vehicle 100 as an alternative to the in-vehicle alcohol interlock device 130. In some examples, the in-vehicle alcohol interlock device 130 can therefore be omitted. In other examples, the in-vehicle alcohol interlock device 130 can still be provided and the control system 110 can be further configured to control whether or not torque production is enabled in dependence on an output from the in-vehicle alcohol interlock device 130. Thus, the driver can use either their portable electronic device 200 (or a means 230B for testing impairment that is connected to the portable electronic device 200) or the in-vehicle alcohol interlock device 130 in order to enable torque production.

FIG 8 illustrates an example method 41. Method 41 can be performed by the control system 210 of the portable electronic device 200. Method 41 enables an assessment of a driver’s fitness to drive or, conversely, their lack of impairment for driving to be made.

At block 43 of method 41 , a user of the portable electronic device 200 is prompted to undertake an impairment test upon launch of an application configured to enable the user to remotely control one or more vehicle operations.

In some examples, method 41 comprises controlling the means 230A to perform the impairment test.

The control system 210 receives either measurement data from means 230A or means 230B and/or data produced by processing of said measurement data. Either may embody the result 5 of the impairment test which is to be transmitted to the control system 110 for the vehicle 100. In other examples, the either measurement data or data produced by processing of said measurement data can be further processed by the control system 210 to produce the result 5 of the impairment test which is to be transmitted to the control system 110 for the vehicle 100.

In some examples, a time at which the impairment test was performed can be recorded.

In some examples, an identifier 29 of the user who undertook the impairment test is determined.

At block 45 of method 41, a result 5 of the impairment test is transmitted to the control system 110 for the vehicle 100. The result 5 is transmitted via wireless communication.

In some examples, if recorded, the time at which the impairment test was performed can be transmitted to the control system 110 for the vehicle 100. This time may be used as an alternative to the time 15 at which the result 5 is received from the portable electronic device 200 in the examples of method 1 described with reference to FIGS 6 and 7.

In examples where an identifier 29 of the user who undertook the impairment test is determined, the identifier 29 can be transmitted to the control system 110 for the vehicle 100. The identifier 29 can be used in the example of method 1 described with reference to FIG 7. Alternatively, where the means 230A and/or 230B monitor the user to determine if they are impaired for driving, portable electronic device 200, launch of an application configured to enable the user to remotely control one or more vehicle operations can trigger the transmission of the result 5 of the impairment test to the control system 110 for the vehicle 100.

It will be appreciated that various changes and modifications can be made to the present invention without departing from the scope of the present application.

The blocks illustrated in FIGS 5, 6, and 7 may represent steps in a method and/or sections of code in the computer program 115. The blocks illustrated in FIG 8 may represent steps in a method and/or sections of code in a computer program run by the control system 210. The illustration of a particular order to the blocks does not necessarily imply that there is a required or preferred order for the blocks and the order and arrangement of the block may be varied. Furthermore, it may be possible for some steps to be omitted.

Although embodiments of the present invention have been described in the preceding paragraphs with reference to various examples, it should be appreciated that modifications to the examples given can be made without departing from the scope of the invention as claimed.

Features described in the preceding description may be used in combinations other than the combinations explicitly described.

Although functions have been described with reference to certain features, those functions may be performable by other features whether described or not.

Although features have been described with reference to certain embodiments, those features may also be present in other embodiments whether described or not.

Whilst endeavoring in the foregoing specification to draw attention to those features of the invention believed to be of particular importance it should be understood that the Applicant claims protection in respect of any patentable feature or combination of features hereinbefore referred to and/or shown in the drawings whether or not particular emphasis has been placed thereon.

Claims

1. A control system for a vehicle, the control system comprising one or more controllers, wherein the control system is configured to: receive a result of an impairment test via wireless communication from a portable electronic device authorised to remotely control one or more vehicle operations; and if the result is below a limit indicating impairment, enable torque production for performing a vehicle operation requested by the portable electronic device.

2. The control system of claim 1 wherein if the result is above a limit indicating impairment, the control system is configured to prevent torque production for performing a vehicle operation requested by the portable electronic device.

3. The control system of any preceding wherein the control system is further configured to control whether or not torque production is enabled in dependence on an output from an in-vehicle alcohol interlock device.

4. The control system of any preceding claim wherein the one or more vehicle operations that the portable electronic device is authorised to remotely control comprise remote parking.

5. The control system of any preceding claim wherein the impairment test comprises alcohol detection.

6. The control system of any preceding claim wherein the impairment test comprises measurement of a test subject using one or more sensors of the portable electronic device.

7. The control system of any claims 1 to 5 wherein the impairment test comprises measurement of a test subject using an impairment test device configured to connect with portable electronic device.

8. The control system of any preceding claim wherein the control system is configured to: determine when the portable electronic device is within the vehicle; and if the portable electronic device is determined to be within the vehicle when the result is received by the control system or within a first specified time period of the result being received by the control system, enable torque production to satisfy load requests derived from an output of cabin human machine interfaces during at least a second time period thereafter.

9. The control system of any preceding claim wherein the control system is configured to receive an identifier of a test subject, in respect of whom the impairment test was performed, via wireless communication from the portable electronic device.

10. The control system of any preceding claim wherein the control system comprises an electronic control module configured to authenticate torque requests to a torque source control module and a telematics control module configured to enable wireless communication with the portable electronic device.

11 A vehicle comprising the control system of any preceding claim.

12. A control system for a portable electronic device, the control system comprising one or more controllers, wherein the control system is configured to: prompt a user to undertake an impairment test upon launch of an application configured to enable the user to remotely control one or more vehicle operations; and transmit a result of the impairment test to a control system for a vehicle.

13. A method comprising: receiving a result of an impairment test via wireless communication from a portable electronic device authorised to remotely control one or more vehicle operations; and if the result is below a limit indicating impairment, enabling torque production for performing a vehicle operation requested by the portable electronic device.

14. The method of claim 13 comprising preventing torque production for performing a vehicle operation requested by the portable electronic device if the result is above a limit indicating impairment.

15. Computer software that, when executed, is arranged to perform a method according to any one of claims 13 to 14.