JP2017196965A - Automatic drive control device and automatic drive control method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To continue automatic drive control of a vehicle even when a single failure occurs with a small scale system.SOLUTION: An automatic drive control device 101 comprises: a main calculation part 112 provided on a main ECU 11, and calculating an operation amount related to automatic drive control of a vehicle as a main operation amount a1, using plural sensors 31, 32, 33; a sub calculation part 212 provided on a sub ECU 21, and calculating an operation amount related to automatic drive control of the vehicle using sensors 31, 32 whose number is smaller than the number of sensors of the main calculation part 112, as a sub operation amount s2; a failure detection part for detecting failure of the main ECU 11 and the sub ECU 21; operation amount selection parts 411, 511, 611 for selecting any of the main operation amount a1 and sub operation amount a2, based on the failure detection result of the failure detection parts 111, 211; and an automatic drive control part for performing automatic drive control of the vehicle based on the operation amount selected by the operation amount selection parts 411, 511, 611.SELECTED DRAWING: Figure 1

Description

  The present invention relates to a technique for controlling automatic driving of a vehicle.

  Since an automatic operation control device is required to have high reliability, it is common to form a redundant system that performs the same processing with a plurality of CPUs (Central Processing Units) and compares the processing results. In assembling a redundant system, simply multiplexing each component of the system increases the system scale. Therefore, an invention for increasing the reliability while suppressing the system scale has been made.

  For example, the vehicle steering control device disclosed in Patent Literature 1 includes a main CPU and a sub CPU that calculate a steering control value. The sub CPU obtains the steering control value at a control cycle longer than that of the main CPU, and simply calculates only the sign of the steering control value at the same control cycle as the main CPU. If an abnormality is detected in the main CPU, the vehicle steering control device immediately stops motor control, and the driver performs steering control without assistance from the motor. According to this vehicle steering control device, a sub-CPU having a lower spec than the main CPU can be used.

  Further, the automatic driving control device of Patent Document 2 is based on an operation amount generation node that calculates an operation amount command value based on a driver's request signal and a vehicle state signal, and an operation amount command value from the operation amount generation node. And an actuator drive node for controlling the actuator. Each node has a failure detection function, and when the operation amount generation node fails, the actuator drive node receives a driver's request signal and calculates an operation amount command value. According to this automatic operation control device, even if the operation amount generation node is not multiplexed, the system does not become uncontrollable when the operation amount generation node fails, and the driving by the driver can be continued.

  On the other hand, in recent years, technological development relating to automatic driving of vehicles has been promoted. In automatic driving, recognition, judgment, and operation necessary for driving a vehicle are automated. Non-Patent Document 1 shows an architecture of an automatic driving system. The map module responsible for recognition creates a local dynamic map including road information and obstacle information around the vehicle from a plurality of sensors such as cameras or radar and GPS information. The artificial intelligence module responsible for the determination determines the travel route based on the local dynamic map. The speed control module and the steering control module responsible for the operation control the speed and the steering angle based on the travel route.

Japanese Patent No. 3777398 Japanese Patent No. 4848027

Yoshida Suda, “Development Trends and Technical Issues of Automated Driving Technology”, Information Management, 2015, Vol. 57, no. 11, P809-817.

  Since the vehicle steering control device of Patent Literature 1 and the automatic driving control device of Patent Literature 2 are targeted for electric power steering or automatic braking, etc., they are merely used to assist the driving operation mainly by the driver. Absent. Therefore, it is only necessary that the control by the driver can be continued without causing the control to be disabled when a failure occurs.

  However, in the automatic driving of the vehicle, it is required to continue the automatic driving for a certain time even if a single failure occurs. This is because the driver checks the situation around the vehicle after receiving the notification that the automatic driving cannot be continued, determines that the driving can be safely performed, and then starts driving by his own operation. Therefore, as in the case of the vehicle steering control device of Patent Document 1 and the automatic driving control device of Patent Document 2, if the automatic driving is immediately stopped due to a single failure, for example, when the vehicle is turning right at the intersection, There were problems that could come into contact with cars or pedestrians. There is also known a method of continuing automatic operation even when a single failure occurs due to a multiplex system, but in this case, there is a problem that the system scale becomes large.

  The automatic driving system of Non-Patent Document 1 is configured to input information on the inter-vehicle distance or the white line distance to the module group responsible for the operation, and automatic driving can be continued without an instruction from the artificial intelligence module. is there. However, the failure detection method and the operation after failure detection are not shown.

  The present invention has been made to solve the above-described problems, and an object of the present invention is to continue automatic driving control of a vehicle even if a single failure occurs in a small-scale system.

  A first automatic driving control device according to the present invention is provided in a main ECU, and is provided in a sub ECU with a main calculation unit that calculates an operation amount related to automatic driving control of the vehicle as a main operation amount using a plurality of sensors. A sub operation unit that calculates an operation amount related to automatic driving control of the vehicle as a sub operation amount using a smaller number of sensors than the main operation unit, a failure detection unit that detects a failure of the main ECU and the sub ECU, and a failure detection unit An operation amount selection unit that selects either the main operation amount or the sub operation amount based on the failure detection result, an automatic operation control unit that performs automatic driving control of the vehicle based on the operation amount selected by the operation amount selection unit, Is provided.

  A second automatic driving control apparatus according to the present invention is provided in the main ECU, and includes a main calculation unit that calculates an operation amount related to automatic driving control of the vehicle as a main operation amount using a plurality of sensors, and a sub ECU. A sub-operation unit that calculates an operation amount related to automatic driving control of the vehicle as a sub-operation amount; a failure detection unit that detects a failure of the main ECU and the sub-ECU; and a main operation based on a failure detection result of the failure detection unit An operation amount selection unit that selects either the amount or the sub operation amount, and an automatic operation control unit that performs automatic operation control of the vehicle based on the operation amount selected by the operation amount selection unit. A first sub calculation unit that calculates a sub operation amount using a smaller number of sensors than the calculation unit, and a calculation cycle that is longer than that of the main calculation unit, and more sensors than the first sub calculation unit. Includes a second sub-arithmetic unit for calculating the operation amount, the sub-ECU further includes a sub-operation switching unit to operate by selecting either the first sub-arithmetic unit or the second sub-arithmetic unit.

  In the automatic driving control method according to the present invention, an operation amount related to automatic driving control of a vehicle is calculated as a main operating amount using a plurality of sensors in a main ECU, and an operating amount related to automatic driving control of the vehicle is calculated in a sub ECU. Calculates as sub-operation amount using fewer sensors than ECU, detects failure of main ECU and sub-ECU, and selects either main operation amount or sub-operation amount based on failure detection result of main ECU or sub-ECU Then, automatic driving control of the vehicle is performed based on the selected operation amount.

  Even if a single failure occurs in one of the main ECU and sub-ECU, automatic operation control of the vehicle can be performed using the calculation result of the other ECU that has not failed, so automatic operation can be continued. is there. Further, in the sub ECU, the operation amount related to the automatic driving control of the vehicle is calculated with a unit time calculation amount smaller than that in the main ECU, and therefore, the low-spec components can be used for the sub ECU compared to the main ECU. Therefore, the system scale can be suppressed.

1 is a block diagram illustrating a configuration of an automatic operation control device according to a first embodiment. 4 is a flowchart illustrating an operation of a main failure detection unit according to the first embodiment. 3 is a flowchart illustrating an operation of an operation amount selection unit according to the first embodiment. It is a block diagram which shows the structure of the automatic driving | operation control apparatus which concerns on the modification of Embodiment 1. It is a block diagram which shows the structure of the automatic driving | operation control apparatus which concerns on Embodiment 2. FIG. 10 is a flowchart illustrating an operation of a sub failure detection unit according to the second embodiment. 6 is a flowchart illustrating an operation of a main failure detection unit according to the second embodiment. It is a block diagram which shows the structure of the automatic driving | operation control apparatus which concerns on Embodiment 3. 10 is a flowchart illustrating an operation of a sub-operation switching unit according to the third embodiment. 10 is a flowchart illustrating an operation of a sub-operation switching unit according to the third embodiment. It is a figure which shows the hardware constitutions of main ECU.

<A. Embodiment 1>
FIG. 1 is a block diagram illustrating a configuration of an automatic driving control apparatus 101 according to the first embodiment of the present invention. The automatic driving control device 101 is a device that controls automatic driving of a vehicle, and is mounted on a vehicle to be controlled, for example. In the present specification, a vehicle to be controlled by the automatic driving control device is simply referred to as a “vehicle”.

  The automatic operation control apparatus 101 includes a main ECU (Engine Control Unit) 11, a sub ECU 21, sensors 31, 32, 33, a GPS (Global Positioning System) receiver 34, a drive system ECU 41, a steering system ECU 51, a braking system ECU 61, and an HMI. (Human Machine Interface) 7 is provided. The main ECU 11, the sub ECU 21, the sensors 31, 32, 33 and the GPS receiver 34 are connected via a network 81. The main ECU 11, sub ECU 21, drive system ECU 41, steering system ECU 51, brake system ECU 61, and HMI 7 are connected by a network 82.

  The main ECU 11 acquires the data of the sensors 31, 32, and 33 and the position information of the GPS receiver 34 via the network 81, and outputs the main operation amount a1 and the main failure detection notification b1. In this specification, in order to distinguish an operation amount output from the main ECU 11 from an operation amount output from the sub ECU 21 described later, the former is referred to as “main operation amount a1” and the latter is referred to as “sub operation amount a2”. In particular, when the two are not distinguished, they are simply referred to as “operation amounts a1, a2”. The main failure detection notification b1 is a failure detection notification of the main ECU 11. On the other hand, a failure detection notification of the sub ECU 21 described later is called a sub failure detection notification b2. However, when the main failure detection notification b1 and the sub failure detection notification b2 are not particularly distinguished, they are simply referred to as “failure detection notifications b1 and b2.” The main ECU 11 includes a main failure detection unit 111 and a main calculation unit 112, which operate at a cycle of 20 milliseconds (ms).

  The sub ECU 21 acquires data of the sensors 31 and 32 via the network 81, and outputs a sub operation amount a2 and a sub failure detection notification b2. The sub ECU 21 includes a sub failure detection unit 211 and a sub calculation unit 212, which operate at a cycle of 20 milliseconds (ms).

  The drive system ECU 41 acquires the main operation amount a1 and the main failure detection notification b1 from the main ECU 11 and the sub operation amount a2 and the sub failure detection notification b2 from the sub ECU 21 via the network 82, respectively, and an accelerator actuator (not shown). ). However, the main failure detection notification b1 and the sub failure detection notification b2 are alternatives and are not acquired by the drive system ECU 41 at the same time. The drive system ECU 41 has an operation amount selection unit 411 that selects one of the main operation amount a1 and the sub operation amount a2, and operates the accelerator actuator using the operation amount selected by the operation amount selection unit 411. Let

  The steering system ECU 51 acquires the main operation amount a1 and the main failure detection notification b1 from the main ECU 11 and the sub operation amount a2 and the sub failure detection notification b2 from the sub ECU 21, respectively, via the network 82, and a steering actuator (not shown). ). However, the main failure detection notification b1 and the sub failure detection notification b2 are alternatives and are not acquired by the steering system ECU 51 at the same time. The steering system ECU 51 includes an operation amount selection unit 511 that selects one of the main operation amount a1 and the sub operation amount a2, and operates the steering actuator using the operation amount selected by the operation amount selection unit 511. Let

  The braking system ECU 61 acquires the main operation amount a1 and the main failure detection notification b1 from the main ECU 11 and the sub operation amount a2 and the sub failure detection notification b2 from the sub ECU 21, respectively, via the network 82, and a brake actuator (not shown). ). The braking system ECU 61 has an operation amount selection unit 611 that selects one of the main operation amount a1 and the sub operation amount a2, and operates the brake actuator using the operation amount selected by the operation amount selection unit 611. Let

  That is, the drive system ECU 41, the steering system ECU 51, and the brake system ECU 61 function as an automatic driving control unit that performs automatic driving control of the vehicle.

  The HMI 7 acquires the main failure detection notification b1 or the sub failure detection notification b2 via the network 82, and notifies the driver of the failure location by voice or display in accordance with the acquired failure detection notification. Encourage repairs.

  The main calculation unit 112 calculates the main operation amount a1 from the data of the sensors 31, 32, and 33 and the position information of the GPS receiver 34. The main calculation unit 112 creates a local dynamic map from the data of the sensors 31, 32, 33 and the position information of the GPS receiver 34, as shown in the automatic driving system architecture of Non-Patent Document 1, for example, and the local dynamic map A travel route is created based on the travel route, and a main operation amount a1 is created based on the travel route. For the sensors 31, 32, and 33, for example, a millimeter wave radar, a laser radar, or a camera can be used. Since it is difficult for these sensors to recognize complex environments alone, the recognition performance is improved by a sensor fusion technique using a plurality of sensors, and a highly accurate local dynamic map can be created.

  The sub calculation unit 212 calculates the sub operation amount a2 from the data of the sensors 31 and 32. A first example of the function of the sub-calculation unit 212 is a lane departure prevention support function that performs control so as not to deviate from the lane recognized by the camera. Lane departure assistance system (LKAS: Lane Keep Assist System (registered trademark)) of Honda Motor Co., Ltd. or Lane Keeping Assist (LKA: Lane Keeping Assist (registered trademark)) of Toyota Motor Corporation There is. A second example of the function of the sub-calculation unit 212 is an adaptive cruise control (ACC) function that detects the distance between the vehicle and the preceding vehicle using a millimeter wave radar and controls the distance so as to keep the distance between the vehicles. .

  The main calculation unit 112 calculates the main operation amount a1 using the data of the sensors 31, 32, and 33 and the position information of the GPS receiver 34, whereas the sub calculation unit 212 uses the data of the sensors 31 and 32. Then, the sub operation amount a2 is calculated. As described above, since the sub calculation unit 212 calculates the sub operation amount a2 using a smaller number of sensors than the main calculation unit 112, the calculation amount per unit time, that is, the unit time calculation amount is smaller than that of the main calculation unit 112. There is a characteristic that it is few. Accordingly, parts having lower specifications than the main ECU 11 can be used for the sub ECU 21, and therefore, the system of the automatic operation control apparatus 101 is compared with the case where parts having the same specifications are used for the main ECU 11 and the sub ECU 21. The scale can be suppressed.

  When the main failure detection unit 111 detects a failure in the main ECU 11, the main failure detection notification b1 is sent via the network 82 to the operation amount selection unit 411 of the drive system ECU 41, the operation amount selection unit 511 of the steering system ECU 51, and the braking system ECU 61. To the operation amount selection unit 611 and the HMI 7. When the sub failure detection unit 211 detects a failure in the sub ECU 21, the sub failure detection notification b2 is sent via the network 82 to the operation amount selection unit 411 of the drive system ECU 41, the operation amount selection unit 511 of the steering system ECU 51, and the braking system ECU 61. To the operation amount selection unit 611 and the HMI 7.

  FIG. 2 is a flowchart illustrating the operation of the main failure detection unit 111. Hereinafter, the operation of the main failure detection unit 111 will be described with reference to FIG. First, the main failure detection unit 111 compares the main operation amount a1 calculated by the main calculation unit 112 in the current cycle with the main operation amount a1 recorded in step S13 before the current cycle, and changes the main operation amount a1. Is determined to be normal (step S11). When the main failure detection unit 111 determines that the fluctuation of the main operation amount a1 is not normal, that is, abnormal, the main failure detection unit 111 determines that the main ECU 11 has failed, and sends the main failure detection notification b1 to the operation amount selection units 411, 511, 611 and the HMI 7 (Step S12). When determining that the fluctuation of the main operation amount a1 is normal, the main failure detection unit 111 records the main operation amount a1 calculated by the main calculation unit 112 in the current cycle in the main ECU 11 (step S13).

  In step S11, the main failure detection unit 111 determines that the fluctuation of the main operation amount a1 is abnormal when the difference in the main operation amount a1 exceeds the threshold between the current cycle and the previous cycle. May be. Alternatively, the main failure detection unit 111 determines that the difference in the main operation amount a1 exceeds the threshold value both between the current cycle and the previous cycle and between the current cycle and the previous cycle. The main operation amount a1 may be determined to be abnormal.

  In the example of FIG. 2, the main failure detection unit 111 determines that the main ECU 11 has failed when the variation in the main operation amount a1 is large. This determination method is based on the premise that the main operation amount a1 does not fluctuate greatly during the unit calculation cycle because the main operation unit 112 determines the next operation amount by feeding back the current vehicle surrounding situation. ing.

  The operation of the main failure detection unit 111 has been described above, but the operation of the sub failure detection unit 211 is the same as this. In the description of the operation of the main failure detection unit 111 described above, the main calculation unit 112 is the sub calculation unit 212, the main ECU 11 is the sub ECU 21, the main operation amount a1 is the sub operation amount a2, and the main failure detection notification b1 is the sub failure position detection notification. If each is replaced with b2, the operation of the sub failure detection unit 211 will be described.

  The operation amount selectors 411, 511, and 611 select one of the operation amounts a1 and a2 for the drive system ECU 41, the steering system ECU 51, and the brake system ECU 61 according to the failure detection notifications b1 and b2, respectively. FIG. 3 shows an example of the operation of the operation amount selection units 411, 511 and 611. Hereinafter, the operation of the operation amount selection units 411, 511, and 611 will be described with reference to FIG.

  First, the operation amount selection units 411, 511, and 611 determine whether or not the main ECU 11 has failed (step S21). Specifically, the operation amount selection units 411, 511, and 611 determine that the main ECU 11 has failed when the main failure detection notification b1 is acquired. When it is determined that the main ECU 11 has failed, the operation amount selection units 411, 511, 611 select the sub operation amount a2 (step S22), and when it is determined that the main ECU 11 has not failed, the main operation amount a1 is selected. Select (step S23).

  In the automatic operation control apparatus 101 according to the present embodiment, a network 81 that communicates data of the sensors 31, 32, and 33 and position information of the GPS receiver 34 is separated from a network 82 that communicates an operation amount and a failure detection notification. It was. However, these may be realized by a common network 83 as in the automatic operation control apparatus 101A according to the modification shown in FIG. In order to increase reliability, the networks 81, 82, and 83 may be made redundant.

  In the above description, the number of sensors used in the main calculation unit 112 is 3 and the number of sensors used in the sub calculation unit 212 is 2. However, the number of sensors used in the sub calculation unit 212 is used in the main calculation unit 112. Other values may be used as long as they are less than the number of sensors.

  In the above description, the calculation cycle of the main calculation unit 112 and the sub calculation unit 212 is 20 ms. However, other values may be used as long as both calculation cycles are the same.

  As described above, the automatic driving control apparatus 101 according to the present embodiment is provided in the main ECU 11, and uses the plurality of sensors 31, 32, 33 to determine the operation amount related to the automatic driving control of the vehicle as the main operation amount a1. And a sub calculation unit 212 that is provided in the sub ECU 21 and calculates an operation amount related to automatic driving control of the vehicle as a sub calculation amount a2 using a smaller number of sensors 31 and 32 than the main calculation unit 112. A main failure detection unit 111 that detects a failure of the main ECU 11, a sub failure detection unit 211 that detects a failure of the sub ECU 21, and a main operation based on the failure detection results of the main failure detection unit 111 and the sub failure detection unit 211. Operation amount selection units 411, 511, and 611 for selecting either the amount a1 or the sub operation amount a2, and the operation amount selection 411,511,611 driving system ECU41 performing automatic driving control of the vehicle based on the selected operation amount, comprising a steering system ECU 51, and the brake system ECU 61, the. The main failure detection unit 111 and the sub failure detection unit 211 do not need to have different configurations, and may be configured as a failure detection unit that detects a failure of the main ECU 11 and the sub ECU 21. With such a configuration, even if a single failure occurs in one of the main ECU 11 and the sub ECU 21, automatic operation control can be continued by the other ECU that has not failed. Furthermore, since the amount of calculation per unit time of the sub calculation unit 212 is smaller than that of the main calculation unit 112, the sub ECU 21 can be configured using parts having lower specifications than the main ECU 11. Therefore, the scale of the system of the automatic operation control device 101 can be suppressed as compared with the case where the main ECU 11 and the sub ECU 21 are configured using parts having the same specifications.

  Further, according to the automatic operation control apparatus 101, the operation amount selection units 411, 511, and 611 select the sub operation amount a2 when the main failure detection unit 111 detects a failure of the main ECU 11, so Automatic operation control by the sub ECU can be continued at the time of a single failure.

  Further, according to the automatic operation control apparatus 101, the sensors 31, 32, and 33 used by the main calculation unit 112 include the sensors 31 and 32 used by the sub calculation unit 212. In this way, by using some of the plurality of sensors used by the main calculation unit 112 in the sub calculation unit 212, when the main ECU 11 fails, the sub ECU 21 can continue automatic operation with low specifications while reducing accuracy. .

  Further, according to the automatic driving control method according to the present embodiment, the main ECU 11 uses the plurality of sensors 31, 32, 33 to calculate the operation amount related to the automatic driving control of the vehicle as the main operation amount a 1, and the sub ECU 21 , The operation amount related to the automatic driving control of the vehicle is calculated as the sub operation amount a2 using a smaller number of sensors than the main ECU 11, the failure of the main ECU 11 and the sub ECU 21 is detected, and the failure detection result of the main ECU 11 or the sub ECU 21 is obtained. Based on the selected main operation amount a1 or sub operation amount a2, the vehicle is automatically controlled. Therefore, even if a single failure occurs in one of the main ECU 11 and the sub ECU 21, automatic operation control can be continued by the other ECU that has not failed. In addition, since the calculation amount per unit time of the sub calculation unit 212 is smaller than that of the main calculation unit 112, the sub ECU 21 can be configured by using parts having lower specifications than the main ECU 11, and automatic operation control can be performed. The scale of the system to be performed can be suppressed.

<B. Second Embodiment>
In the automatic driving control apparatus according to the first embodiment, the main ECU 11 itself has a main failure detection unit 111 that detects a failure of the main ECU 11, and the drive system ECU 41, the steering system ECU 51, and the braking system ECU 61 are each an operation amount selection unit. 411,511,611. However, in the automatic driving control apparatus according to the second embodiment, a failure detection unit that detects a failure of the main ECU is provided independently of the main ECU, and the operation amount selection unit is a drive system ECU, a steering system ECU, and a braking system ECU. It is characterized by being provided independently.

  FIG. 5 is a block diagram showing the configuration of the automatic operation control apparatus 102 according to Embodiment 2 of the present invention. In FIG. 5, the same reference numerals are given to the same or corresponding components as those in the first embodiment shown in FIG. The automatic driving control device 102 includes a main ECU 12, a sub ECU 22, sensors 31, 32 and 33, a GPS receiver 34, networks 81 and 82, a drive system ECU 42, a steering system ECU 52, a braking system ECU 62, an HMI 7, and a control switching unit 9. It is prepared for.

  Unlike the main ECU 11 of the automatic driving control apparatus 101, the main ECU 12 of the automatic driving control apparatus 102 does not have a main failure detection unit.

  The sub ECU 22 includes a sub failure detection unit 221 and a sub calculation unit 212. In FIG. 5, the sub failure detection unit 221 is provided in the sub ECU, but the sub failure detection unit 221 may be independent of the sub ECU 22.

  The control switching unit 9 acquires the main operation amount a1 from the main ECU 12, the sub operation amount a2 and the sub failure detection notification b2 from the sub ECU 22, and selects the operation amount a selected from the main operation amount a1 or the sub operation amount a2. The sub failure detection notification b2 or the main failure detection notification b1 is output. The control switching unit 9 includes a main failure detection unit 91 and an operation amount selection unit 92. Instead of the control switching unit 9 having the operation amount selection unit 92, the drive system ECU 42, the steering system ECU 52, and the brake system ECU 62 are different from the drive system ECU 41, the steering system ECU 51, and the brake system ECU 61 of the first embodiment. Does not have a quantity selector.

  The drive system ECU 42, the steering system ECU 52, and the brake system ECU 62 acquire the operation amount a via the network 82, and operate the accelerator, steering, and brake actuators using the operation amount a, respectively.

  When the sub failure detection unit 221 detects a failure in the sub ECU 22, the sub failure detection unit 221 transmits a sub failure detection notification b2 to the control switching unit 9. FIG. 6 is a flowchart illustrating the operation of the sub failure detection unit 221. In the example of FIG. 6, the CPU or CPU core that realizes the sub calculation unit 212 of the sub ECU 22 is made redundant, and the sub failure detection unit 221 compares the calculation results by the redundant CPU or CPU core. The failure is detected.

  Hereinafter, the operation of the sub failure detection unit 221 will be described with reference to FIG. The sub failure detection unit 221 determines whether or not the operation results of the redundant CPUs or CPU cores that implement the sub operation unit 212 match (step S31). If the calculation results do not match in step S31, the sub failure detection unit 221 determines that the sub ECU 22 has failed, and transmits a sub failure detection notification b2 to the control switching unit 9 (step S32). If the calculation results match in step S31, the sub failure detection unit 221 ends the process.

  FIG. 7 is a flowchart showing an example of the operation of the main failure detection unit 91. In the example of FIG. 7, when the sub ECU 22 has not failed, the main operation amount a1 and the sub operation amount a2 are compared to detect a failure of the main ECU 12.

  The operation of the main failure detection unit 91 will be described along the flowchart of FIG. First, the main failure detector 91 determines whether or not the sub ECU 22 has failed (step S41). Specifically, the main failure detection unit 91 confirms whether the sub failure detection notification b2 has been acquired, and determines that the sub ECU 22 has failed if acquired. Then, if the sub ECU 22 has failed, the main failure detection unit 91 ends the process. If the sub ECU 22 has not failed, the main failure detection unit 91 compares the main operation amount a1 with the sub operation amount a2, and determines whether or not the main operation amount a1 is normal (step S42). If the main failure detection unit 91 determines that the main operation amount a1 is not normal, that is, abnormal in step S42, the main failure detection unit 91 determines that the main ECU 12 has failed, and transmits a main failure detection notification a1 to the operation amount selection unit 92 (step S43). ). When determining that the main operation amount a1 is normal in step S42, the main failure detection unit 91 ends the process as it is. In step S42, for example, the main failure detection unit 91 may determine that there is an abnormality if the difference between the main operation amount a1 and the sub operation amount a2 exceeds a threshold value. Alternatively, the main failure detection unit 91 prevents an erroneous determination as an abnormality by determining an abnormality when the difference between the main operation amount a1 and the sub operation amount a2 continuously exceeds the threshold for a certain time or more. You can also.

  The operation amount selection unit 92 selects either the main operation amount a1 or the sub operation amount a2 based on the failure detection notification and sets it as the operation amount a. Specifically, the operation amount selection unit 92 selects the sub operation amount a2 when acquiring the main failure detection notification b1, and acquires the failure detection notification when selecting the sub failure detection notification b2. If not, the main operation amount a1 is selected. The operation amount a selected by the operation amount selection unit 92 is sent to the drive system ECU 42, the steering system ECU 52, and the brake system ECU 62 via the network 82. The drive system ECU 42, the steering system ECU 52, and the brake system ECU 62 Actuator for accelerator, steering, and brake are operated based on a.

  According to the automatic operation control apparatus 102 of the second embodiment, in addition to the effects of the first embodiment, the following effects are obtained. That is, in the automatic driving control device 102, the operation amount selection unit 92 for switching control to the sub ECU 22 when the main ECU 12 fails is independent of the drive system ECU 42, the steering system ECU 52, and the brake system ECU 62. The system ECU 42, the steering system ECU 52, and the braking system ECU 62 do not need to be provided with an operation amount selection unit, and the configuration can be simplified.

<C. Embodiment 3>
In Embodiment 1, the lane departure prevention support function or the ACC function is given as an example of the function of the sub-calculation unit. The lane departure prevention support function or the ACC function is strongly recommended for use on expressways with fewer obstacles to be recognized than ordinary roads. Therefore, it is conceivable to reduce the amount of calculation per unit time by increasing the calculation cycle of the sub ECU, and to realize a lane departure prevention support function on a general road using a low-spec sub ECU. However, if the calculation cycle is lengthened, the calculation may not be in time during high-speed driving, and there has been a problem in continuing automatic driving on a highway.

  Therefore, in the third embodiment, the sub-ECU is provided with two sub-calculation units having different calculation cycles, and when the vehicle travels at a high speed, the sub-calculation unit having a short calculation cycle performs the calculation to prevent calculation delay. On the other hand, when the vehicle travels on a general road, the sub-calculation unit having a long calculation cycle performs the calculation to cope with a large amount of recognition.

  FIG. 8 is a block diagram showing a configuration of the automatic operation control apparatus 103 according to the present embodiment. In FIG. 8, the same or corresponding components as those in the first embodiment shown in FIG. The automatic operation control device 103 includes a sub ECU 23 instead of the sub ECU 21 as compared with the automatic operation control device 101 of the first embodiment. The sub ECU 23 includes a sub failure detection unit 211, a first sub calculation unit 232, a second sub calculation unit 233, and a sub calculation switching unit 234. Other configurations of the automatic driving control apparatus 103 are the same as those of the automatic driving control apparatus 101 according to the first embodiment.

  The first sub operation unit 232 is the same as the sub operation unit 212 of the first embodiment. That is, the first sub calculation unit 232 calculates the sub operation amount a2 from the data of the sensors 31 and 32 smaller than the main calculation unit 112, and the operation cycle is 20 ms.

  The second sub operation unit 233 has an operation cycle longer than that of the main operation unit 112 and the first sub operation unit 232, and operates at a cycle of 60 ms, for example. The second sub calculator 233 calculates the sub operation amount a2 from the data of the sensors 31, 32, 33 and the position information of the GPS receiver 34. That is, the second sub calculation unit 233 has a calculation cycle longer than that of the main calculation unit 112, and calculates the sub operation amount a2 using a larger number of sensors 31, 32, 33 than the first sub calculation unit 232. The sensors 31, 32, and 33 used by the first sub calculation unit 232 include the sensors 31 and 32 used by the second sub calculation unit 233. The sensors 31, 32, and 33 used by the main calculation unit 112 include the sensors 31 and 32 used by the second sub calculation unit 233. The sensors 31, 32, and 33 used by the main calculation unit 112 include the sensors 31, 32, and 33 used by the second sub calculation unit 233.

  The sub calculation switching unit 234 operates at the same 20 ms cycle as the main calculation unit 112 and the first sub calculation unit 232, and selects and operates either the first sub calculation unit 232 or the second sub calculation unit 233. That is, the first sub operation unit 232 and the second sub operation unit 233 do not operate simultaneously.

  9 and 10 are flowcharts illustrating the operation of the sub-operation switching unit 234. FIG. 9 shows a case where the sub-calculation unit is switched according to the speed of the vehicle, and FIG. 10 shows a case where the sub-calculation unit is switched according to whether the traveling road of the vehicle is an expressway. . As described above, since the operation cycle of the second sub operation unit 233 is three times the operation cycle of the sub operation switching unit 234, the same operation is performed three times when the second sub operation unit 233 calculates the sub operation amount a2. Output the result.

  The operation of the sub-operation switching unit 234 will be described with reference to FIG. First, the sub-calculation switching unit 234 determines whether or not the vehicle is operating at high speed (step S51). Here, the sub-calculation switching unit 234 may determine that the vehicle is operating at high speed when the vehicle speed exceeds a threshold value. Alternatively, the sub-calculation switching unit 234 determines that the vehicle is driving at high speed when the vehicle speed continues for a certain time or more and exceeds the threshold value, and cancels the determination for high-speed driving if the vehicle speed continues from that state for a certain time or more and is less than the threshold value By doing so, frequent switching may be suppressed. If the sub-operation switching unit 234 determines that the high-speed operation is performed in Step S51, the sub-operation switching unit 234 selects the first sub-calculation unit 232 (Step S52). On the other hand, when determining that the high-speed operation is not performed in Step S51, the sub-calculation switching unit 234 selects the second sub-calculation unit 233 (Step S53).

  Next, the operation of the sub-operation switching unit 234 will be described with reference to FIG. First, the sub-calculation switching unit 234 determines whether or not the vehicle is traveling on an expressway (step S61). The determination as to whether or not the vehicle is traveling on an expressway may be made from the position information of the GPS receiver 34, that is, GPS information, or from the entrance / exit information of the ETC on-board device (not shown), that is, ETC information. You can go. The rest is the same as FIG.

  In the third embodiment, the calculation cycle of the second sub calculation unit 233 is set to 60 ms, and the calculation cycle of the other units is set to 20 ms. However, the calculation cycle of the second sub calculation unit 233 is compared to the other units. Other values may be used as long as.

  In the third embodiment, the number of sensors used in the second sub calculation unit 233 is the same as that of the main calculation unit 112. However, if the number of sensors used in the first sub calculation unit 232 is larger, the main calculation unit It may be less than or equal to the number of sensors used in 112.

  As described above, the automatic driving control apparatus 103 according to the present embodiment is provided in the main ECU 11, and uses the plurality of sensors 31, 32, 33 to calculate the operation amount related to the automatic driving control of the vehicle as the main operation amount a1. A main calculation unit 112, a sub-ECU 23, sub-calculation units 232 and 233 that calculate an operation amount related to automatic driving control of the vehicle as a sub-operation amount a2, and a main failure detection unit 111 that detects a failure of the main ECU 11. , A sub-fault detection unit 211 that detects a fault in the sub-ECU 23, and an operation amount that selects either the main operation amount a1 or the sub-operation amount a2 based on the fault detection results of the main fault detection unit 111 and the sub-fault detection unit 211 Based on the operation amount selected by the selection unit 411,511,611 and the operation amount selection unit 411,511,611, Comprising a drive system ECU41 performing dynamic operation control, the steering system ECU 51, and the brake system ECU 61, the. The main failure detection unit 111 and the sub failure detection unit 211 do not need to have different configurations, and may be configured as a failure detection unit that detects a failure of the main ECU 11 and the sub ECU 21. In addition, the sub calculation units 232 and 233 have a calculation cycle longer than that of the main calculation unit 112 and the first sub calculation unit 232 that calculates the sub operation amount a2 using a smaller number of sensors 31 and 32 than the main calculation unit 112. A second sub operation unit 233 that calculates the sub operation amount a2 using a larger number of sensors 31, 32, 33 than the first sub operation unit 232, and the sub ECU 23 includes the first sub operation unit 232 or the second sub operation unit 232. A sub-operation switching unit 234 that selects and operates one of the two sub-operation units 233 is provided. According to the automatic operation control apparatus 103, in addition to the effects of the first embodiment, the following effects can be obtained. That is, according to the automatic operation control device 103, when it is necessary to perform automatic operation control with a short cycle, the first sub-calculation unit 232 that uses a short cycle but uses few sensors can be used. When required, by using the second sub-calculation unit 233 that has a long cycle but uses many sensors, it is possible to cope with different driving situations while reducing the unit-time calculation amount of the sub-ECU 23 from the main ECU 11. .

  Further, since the operation amount selection units 411, 511, and 611 select the sub operation amount a2 when the main failure detection unit 111 detects a failure of the main ECU 11, automatic operation control by the sub ECU at the time of a single failure of the main ECU. Can continue.

  For example, the sub calculation switching unit 234 selects and operates either the first sub calculation unit 232 or the second sub calculation unit 233 based on the traveling speed of the vehicle. Therefore, when driving at high speed, the automatic operation can be continued with the same calculation cycle as that of the main calculation unit 112 by performing the calculation using the first sub calculation unit 232. Further, during low-speed traveling, the automatic operation can be continued with the same recognition accuracy as the main calculation unit 112 by performing the calculation using the second sub calculation unit 233. Therefore, according to the automatic operation control device 103, it is possible to improve the reliability of the automatic operation control during low speed traveling.

  Alternatively, the sub-calculation switching unit 234 selects and operates the first sub-calculation unit 232 when the vehicle is traveling on an expressway with fewer obstacles than general roads, Automatic operation can be continued in the same calculation cycle. When the vehicle is traveling on a road other than an expressway, the automatic driving control can be continued with the same recognition accuracy as the control by the main calculating unit 112 by selecting and operating the second sub calculating unit 233. Therefore, according to the automatic driving control apparatus 103, the reliability at the time of driving | running | working a general road can be improved.

  Further, according to the automatic operation control apparatus 103, the sensors 31, 32, 33 used by the first sub calculation unit 232 include the sensors 31, 32 used by the second sub calculation unit 233. In this way, by using some of the plurality of sensors used by the first sub calculation unit 232 in the second sub calculation unit 233, the first sub calculation unit 232 and the second sub calculation unit 233 are switched to operate. However, automatic operation control can be continued.

  Further, according to the automatic operation control device 103, the sensors 31, 32, and 33 used by the main calculation unit 112 include the sensors 31 and 32 used by the second sub calculation unit 233. Thus, by using some of the plurality of sensors used by the main calculation unit 112 in the second sub calculation unit 233, even if the main ECU 11 breaks down, the automatic operation control can be continued by switching to the sub ECU 23.

  Further, according to the automatic operation control apparatus 103, the sensors 31, 32, 33 used by the main calculation unit 112 include the sensors 31, 32, 33 used by the first sub calculation unit 232. In this way, by using some of the plurality of sensors used by the main calculation unit 112 in the first sub calculation unit 232, even if the main ECU 11 fails, the automatic operation control can be continued by switching to the sub ECU 23.

<D. Hardware configuration>
FIG. 11 is a diagram illustrating a hardware configuration of the main ECU 11 in the automatic driving control apparatus 101 according to the first embodiment. As shown in FIG. 11, the main ECU 11 is realized by a processor 1001 and a memory 1002. The main failure detection unit 111 or the main calculation unit 112 included in the main ECU 11 is realized when the processor 1001 reads and executes a program stored in the memory 1002.

  Here, the processor 1001 is, for example, a central processing unit, a processing unit, an arithmetic unit, a microprocessor, a microcomputer, a digital signal processor, or the like. The memory 1002 is nonvolatile or non-volatile such as RAM (Random Access Memory), ROM (Read Only Memory), flash memory, EPROM (Electrically Programmable Read Only Memory), EEPROM (Electrically Erasable Programmable Read Only Memory). A volatile semiconductor memory, an HDD (Hard Disk Drive), a magnetic disk, a flexible disk, an optical disk, a compact disk, a mini disk, a DVD (Digital Versatile Disk), and a drive device thereof are included.

  The hardware configuration of the main ECU 12, the sub ECUs 21, 22, 23, the drive system ECUs 41 and 42, the steering system ECUs 51 and 52, the brake system ECUs 61 and 62, and the control switching unit 9 is also the same as the hardware configuration of the main ECU 11 shown in FIG. It is the same.

  It should be noted that the present invention can be freely combined with each other within the scope of the invention, and each embodiment can be appropriately modified or omitted.

  7 HMI, 9 Operation amount selection unit, 11, 12 Main ECU, 21, 22, 23 Sub ECU, 31, 32, 33 Sensor, 41, 42 Drive system ECU, 51, 52 Steering system ECU, 61, 62 Braking system ECU 81, 82, 83 network, 91, 111 main failure detection unit, 92 operation amount selection unit, 112 main operation unit, 211, 221 sub failure detection unit, 212 sub operation unit, 411, 511, 611 operation amount selection unit, 1001 processor, 1002 memory.

Claims (13)

A main ECU that is provided in the main ECU and calculates an operation amount related to automatic driving control of the vehicle as a main operation amount using a plurality of sensors;
A sub-operation unit that is provided in the sub-ECU and calculates an operation amount related to automatic driving control of the vehicle as a sub-operation amount using a smaller number of sensors than the main calculation unit;
A failure detection unit for detecting a failure of the main ECU and the sub ECU;
An operation amount selection unit that selects either the main operation amount or the sub operation amount based on the failure detection result of the failure detection unit;
An automatic operation control unit that performs automatic operation control of the vehicle based on the operation amount selected by the operation amount selection unit,
Automatic operation control device. The operation amount selection unit selects the sub operation amount when the failure detection unit detects a failure of the main ECU.
The automatic operation control device according to claim 1. A main ECU that is provided in the main ECU and calculates an operation amount related to automatic driving control of the vehicle as a main operation amount using a plurality of sensors;
A sub-operation unit that is provided in the sub-ECU and calculates an operation amount related to automatic driving control of the vehicle as a sub-operation amount;
A failure detection unit for detecting a failure of the main ECU and the sub ECU;
An operation amount selection unit that selects either the main operation amount or the sub operation amount based on the failure detection result of the failure detection unit;
An automatic operation control unit that performs automatic operation control of the vehicle based on the operation amount selected by the operation amount selection unit,
The sub-operation unit is
A first sub operation unit that calculates the sub operation amount using a smaller number of sensors than the main operation unit;
A second sub operation unit that has a calculation cycle longer than that of the main operation unit and calculates the sub operation amount using a larger number of sensors than the first sub operation unit;
The sub-ECU further includes a sub-operation switching unit that selects and operates either the first sub-operation unit or the second sub-operation unit.
Automatic operation control device. The operation amount selection unit selects the sub operation amount when the failure detection unit detects a failure of the main ECU.
The automatic operation control device according to claim 3. The sub-calculation switching unit selects and operates either the first sub-calculation unit or the second sub-calculation unit based on the traveling speed of the vehicle.
The automatic operation control device according to claim 3 or 4. The sub calculation switching unit selects and operates the first sub calculation unit when the vehicle is traveling on a highway, and the second sub calculation switching is performed when the vehicle is traveling on a road other than the highway. Select a part to operate,
The automatic operation control device according to any one of claims 3 to 5. The sub-operation switching unit determines whether or not the vehicle is traveling on a highway based on GPS information.
The automatic operation control device according to claim 6. The sub-operation switching unit determines whether or not the vehicle is traveling on a highway based on ETC information.
The automatic operation control device according to claim 6. The sensor used by the first sub calculation unit includes the sensor used by the second sub calculation unit.
The automatic operation control device according to any one of claims 3 to 8. The sensor used by the main calculation unit includes the sensor used by the second sub calculation unit.
The automatic operation control device according to any one of claims 3 to 9. The sensor used by the main calculation unit includes the sensor used by the first sub calculation unit.
The automatic operation control device according to any one of claims 3 to 9. The sensor used by the main calculation unit includes the sensor used by the sub calculation unit.
The automatic operation control device according to claim 1 or 2. In the main ECU, the operation amount related to the automatic driving control of the vehicle is calculated as a main operation amount using a plurality of sensors,
In the sub ECU, the operation amount related to the automatic driving control of the vehicle is calculated as a sub operation amount using a smaller number of sensors than the main ECU,
Detecting a failure of the main ECU and the sub ECU,
Based on the failure detection result of the main ECU or the sub ECU, either the main operation amount or the sub operation amount is selected,
Performing automatic driving control of the vehicle based on the selected operation amount;
Automatic operation control method.

Images