A sensor subsystem for vehicles, such as autonomous driving vehicles, has two network ports for which each network port is connectable to one of two in-vehicle computers (IVCs) for control, configuration, status and data transfers between the sensor subsystem and the two IVCs. The two IVCs can be structured as redundant IVCs. The sensor subsystem can replicate sensor data to the redundant IVCs. The sensor data can be raw image data, encoded image data, processed perception data, or a combination of the data. The two IVCs can be implemented with a modular design with each IVC disposed on a platform separate from the platform on which the second of the two redundant IVCs is disposed. The two IVCs can be replaced separately to reduce repair or replacement cost.

A sensor subsystem for vehicles, such as autonomous driving vehicles, has two network ports for which each network port is connectable to one of two in-vehicle computers (IVCs) for control, configuration, status and data transfers between the sensor subsystem and the two IVCs. The two IVCs can be structured as redundant IVCs. The sensor subsystem can replicate sensor data to the redundant IVCs. The sensor data can be raw image data, encoded image data, processed perception data, or a combination of the data. The two IVCs can be implemented with a modular design with each IVC disposed on a platform separate from the platform on which the second of the two redundant IVCs is disposed. The two IVCs can be replaced separately to reduce repair or replacement cost.

The present disclosure relates to an autonomous vehicle control system (100) for providing motion control of an autonomous vehicle (200), comprising: —a primary control unit (10) configured to perform longitudinal and lateral motion control of the vehicle during normal operation, —a secondary back-up control unit (20) configured to perform back-up longitudinal motion control when an emergency mode has been enabled, wherein the primary control unit is further configured to perform back-up lateral motion control when the emergency mode has been enabled. The invention further relates to a method for providing motion control of an autonomous vehicle and to an autonomous vehicle.

The present disclosure relates to an autonomous vehicle control system (100) for providing motion control of an autonomous vehicle (200), comprising: —a primary control unit (10) configured to perform longitudinal and lateral motion control of the vehicle during normal operation, —a secondary back-up control unit (20) configured to perform back-up longitudinal motion control when an emergency mode has been enabled, wherein the primary control unit is further configured to perform back-up lateral motion control when the emergency mode has been enabled. The invention further relates to a method for providing motion control of an autonomous vehicle and to an autonomous vehicle.

An autonomous driving control system comprises a main controller, a backup controller, main execution apparatuses and backup execution apparatuses. The backup controller is configured to decompose, when receiving a main control instruction from the main controller, the main control instruction to obtain backup control instructions corresponding to the backup execution apparatuses respectively, and send the backup control instructions to the backup execution apparatuses correspondingly; and the control system is configured to control, when detecting that an abnormality occurs in any one device of the main execution apparatuses, the backup execution apparatus corresponding to the device in which the abnormality has occurred to execute a corresponding backup control instruction. The system can solve the problem that an autonomous driving control system cannot operate normally when any controller or actuation mechanism fails at a single point.

An autonomous driving system includes: at least one sensor (1) configured to collect environment information around a vehicle; a primary decision unit (21) configured to calculate decision information based on the environment information collected by the at least one sensor (1), and transmit the decision information to a controller (3); an alternative decision unit (22) configured to calculate decision information based on the environment information collected by the at least one sensor (1) in response to detecting that the primary decision unit (21) is abnormal, and transmit the decision information to the controller (3); and the controller (3) configured to calculate vehicle control information based on the received decision information, and transmit the vehicle control information to a bottom vehicle controller. In this way, the stability and reliability of the autonomous driving system can be improved and safety of autonomous driving of the vehicle can be guaranteed.

Among other things, we describe techniques for implementing a vehicle response to sensor failure. In general, one innovative aspect of the subject matter described in this specification can be embodied in methods that include receiving information from a plurality of sensors coupled to a vehicle, determining that a level of confidence of the received information from at least one sensor of a first subset of sensors of the plurality of sensors is less than a first threshold, comparing a number of sensors in the first subset of sensors to a second threshold, and adjusting the driving capability of the vehicle to rely on information received from a second subset of sensors of the plurality of sensors, wherein the second subset of sensors excludes the at least one sensor of the first subset of sensors.

Among other things, we describe techniques for implementing a vehicle response to sensor failure. In general, one innovative aspect of the subject matter described in this specification can be embodied in methods that include receiving information from a plurality of sensors coupled to a vehicle, determining that a level of confidence of the received information from at least one sensor of a first subset of sensors of the plurality of sensors is less than a first threshold, comparing a number of sensors in the first subset of sensors to a second threshold, and adjusting the driving capability of the vehicle to rely on information received from a second subset of sensors of the plurality of sensors, wherein the second subset of sensors excludes the at least one sensor of the first subset of sensors.

Autonomous driving is one of the world's most challenging computational problems. Very large amounts of data from cameras, RADARs, LIDARs, and HD-Maps must be processed to generate commands to control the car safely and comfortably in real-time. This challenging task requires a dedicated supercomputer that is energy-efficient and low-power, complex high-performance software, and breakthroughs in deep learning AI algorithms. To meet this task, the present technology provides advanced systems and methods that facilitate autonomous driving functionality, including a platform for autonomous driving Levels 3, 4, and/or 5. In preferred embodiments, the technology provides an end-to-end platform with a flexible architecture, including an architecture for autonomous vehicles that leverages computer vision and known ADAS techniques, providing diversity and redundancy, and meeting functional safety standards. The technology provides for a faster, more reliable, safer, energy-efficient and space-efficient System-on-a-Chip, which may be integrated into a flexible, expandable platform that enables a wide-range of autonomous vehicles, including cars, taxis, trucks, and buses, as well as watercraft and aircraft.

An in-vehicle backup control apparatus includes a discharge circuit that discharges a power storage unit and a control unit that controls the discharge circuit. The control unit sets either one of a superimposable voltage or a supply completion voltage as an interruption threshold value, the superimposable voltage being set as a voltage condition of the power storage unit when electric power is supplied simultaneously to a plurality of target loads during an abnormal state, and the supply completion voltage being set in association with one of the plurality of target loads. The control unit interrupts or delays the supply of electric power to the one of the plurality of target loads to prohibit the plurality of target loads from simultaneously operating if a charge voltage of the power storage unit reaches a value less than or equal to the interruption threshold value during the abnormal state.