METHOD AND DEVICE FOR TRANSFERRING A TELEOPERABLE VEHICLE FROM AN INITIAL OPERATING MODE TO A TARGET OPERATING MODE

Abstract

A method for transferring a teleoperable vehicle from an initial operating mode to a target operating mode. In the method, upon request, a handover of the driving responsibility to an intended operator is planned and prepared. Areas of the driving responsibility and operating limits of the vehicle in the target operating mode are negotiated. The negotiated operating limits are set. The handover is initiated and brought to a successful conclusion in the target operating mode.

Claims

1-10. (canceled)

11. A method for transferring a teleoperable vehicle from an initial operating mode to a target operating mode, the method comprising the following steps: planning and preparing, upon request, a handover of the driving responsibility to an intended operator in the initial operating mode; negotiating areas of the driving responsibility and operating limits of the vehicle in the target operating mode; setting the negotiated operating limits; and initiating the handover and bringing the handover to a safe conclusion in the target operating mode.

12. The method as recited in claim 11, further comprising: prior to the initiation of the handover, checking whether the operator is available.

13. The method as recited in claim 12, further comprising: prior to the initiation of the handover, checking whether the operator is authorized to control the vehicle via a mobile telephony network.

14. The method as recited in claim 13, further comprising: prior to the initiation of the handover, using a map to calculate whether the mobile telephony network is available following the planned handover.

15. The method as recited in claim 13, further comprising: prior to the initiation of the handover, determining requirements of the target operating mode; and comparing functions and a compatibility of the vehicle with the requirements.

16. The method as recited in claim 15, wherein the checking and the comparing of the functions and compatibility is performed based on an operator database.

17. The method as recited in claim 11, wherein, in the event of a function error during the method, the handover is aborted and the initial operating mode is maintained.

18. A non-transitory machine-readable memory medium on which is stored a computer program for transferring a teleoperable vehicle from an initial operating mode to a target operating mode, the computer program, when executed by a computer, causing the computer to perform the following steps: planning and preparing, upon request, a handover of the driving responsibility to an intended operator in the initial operating mode; negotiating areas of the driving responsibility and operating limits of the vehicle in the target operating mode; setting the negotiated operating limits; and initiating the handover and bringing the handover to a safe conclusion in the target operating mode.

19. A device configured for transferring a teleoperable vehicle from an initial operating mode to a target operating mode, the device configured to: plan and prepare, upon request, a handover of the driving responsibility to an intended operator in the initial operating mode; negotiate areas of the driving responsibility and operating limits of the vehicle in the target operating mode; set the negotiated operating limits; and initiate the handover and bringing the handover to a safe conclusion in the target operating mode.

Description

BRIEF DESCRIPTION OF THE DRAWINGS

[0011] Exemplary embodiments of the present invention are shown in the figures and described in greater detail below.

[0012] FIG. 1 shows different actors and entities relevant within the scope of the present method.

[0013] FIG. 2 shows the flow diagram of the present method according to one example embodiment of the present invention.

DETAILED DESCRIPTION OF EXAMPLE EMBODIMENTS

[0014] Typically, the responsibility for the control of a vehicle and its type depend on the operating mode of the vehicle. The present embodiment is based on a partially automated or automated vehicle of the autonomy levels 2 through 5 according to SAE J3016, which presupposes a certain minimum number of sensors and actuators.

Examples of Operating Modes are:

[0015] The vehicle has—at least in a plannable region—full control of its driving functions (high or full automation of level 4 and level 5, respectively). [0016] A passenger, in particular the driver, is supported in carrying out the driving functions (partial automation or conditional automation according to level 2 and 3, respectively). [0017] An operator in the VCC without a direct line of sight directly or indirectly controls the actuators of the vehicle using a wireless network based on vehicle and environment information, which is received with the aid of sensors of the vehicle for the most part. [0018] An operator in the direct environment of the vehicle controls the vehicle by sight. The optional use of existing sensor equipment is possible but not required. [0019] In specified areas, the vehicle is controlled with the aid of existing environment sensor systems by an available infrastructure, for instance in a parking facility equipped accordingly. [0020] The vehicle is part of a vehicle convoy and is co-controlled by the vehicles driving ahead (platooning). [0021] A service vehicle automatically follows a person or another vehicle in order to carry out safeguarding tasks, for transport purposes or in order to perform other tasks. [0022] The vehicle follows gestures in order to be guided by a person.

[0023] A transition between such operating modes may be indicated for a variety of reasons: [0024] The current operating mode may not be safely maintained in the foreseeable future, for instance due to the state of health of the driver or limits of the operating mode. A handover is absolutely necessary for safety-related reasons. [0025] A handover from one mode to another is scheduled, for instance when leaving a parking facility and then driving on public roads. [0026] Comfort-related reasons suggest a handover, for instance when the current driver of the vehicle would like to relax or work. [0027] Resource planning seems to make the handover desirable, for instance when the operator is available only for a limited period of time.

[0028] In addition, the following triggers for a handover are possible: [0029] A spontaneous or anticipated detection of a safety problem with the current operating mode, [0030] Scheduling of a handover due to the known driving destination and suitable strategies for comfort and a cost reduction, or [0031] A manual request by the driver, operator or some other actor.

[0032] In this context, the following initiators of the handover have to be considered: [0033] the vehicle driver responsible in the current operating mode, [0034] the vehicle driver responsible in the scheduled subsequent mode, or [0035] a third party which believes to identify the need for a mode change.

[0036] Directly involved actors and entities are (see FIG. 1) [0037] a partially automated vehicle (1) that also allows for a remote operation, [0038] a driver or other passengers (2) possessing a driver's license, who assume(s) the direct control of the vehicle, [0039] police, rescue personnel or towing services (3), which assume the remote operation of the vehicle in the event of an emergency either via a mobile telephony network (4) or a direct wireless communication, [0040] a wireless local computer network (wireless local area network, WLAN) or a mobile telephony network (4) that allows for a remote operation, [0041] a VCC (5) as a working location of the operator, or [0042] an infrastructure (6), which monitors the vehicle (1) and controls it automatically within limited areas.

[0043] In the following text, a “handover” generally denotes a change from one operating mode to another mode. This change should ideally take place in moving traffic while driving in order to provide the greatest benefit possible. If this is not feasible or useful, then a handover at a reduced speed or at a standstill is to be carried out.

[0044] The handover takes place according to a generic sequence, which may be gathered from FIG. 2 and is specialized depending on the target operating mode (Y). The sequence starts in the initial operating mode (X) in response to a corresponding request (11). The sequence of the following steps is variable. As soon as a check step or preparatory step has not been carried out successfully or a time exceedance (timeout) occurs, the handover is aborted and the vehicle (1) remains in the initial operating mode (X).

[0045] Next, a check to ascertain the availability of the intended operator (12) takes place. It then has to be verified that said operator has the authority to assume (13) the control. Among other things, this step includes a check of the communications reliability in accordance with recognized IT security guidelines, for instance using a public key infrastructure (6) (PKI) and—depending on the target operating mode (Y)—the verification that a driver's license or a TOD license exists.

[0046] Next, an availability check (14) of the mobile radio network (4) on the scheduled driving route, a determination (15) of the requirements of the target operating mode (Y) and the intended operator, and a check (16) of the compatibility and functions (features) of the vehicle (1) take place. The latter includes a reconciliation of technical requirements with regard to sensors and actuators and a check for technical defects that could pose a risk to a handover.

[0047] After a successful conclusion of these checks, the handover is planned in terms of type, time and location (17) and prepared (18) and the areas of responsibility are negotiated (19) and corresponding limitations are specified (20). In the latter step, for instance, it has to be determined whether vehicle systems are to be utilized alternatively or are to be overridden or whether there are limits that are to be fixedly configured such as with regard to the speed, acceleration or distances.

[0048] Finally, the handover phase can be started (21). Upon a successful conclusion (22) of the handover, the current operator is informed and relieved from responsibility for the vehicle (1). As a consequence, the vehicle (1) is in the target operating mode (Y).

[0049] Depending on the source and target modes, different embodiments are possible without departing from the framework of the present invention.

[0050] If a passenger is located inside the vehicle (1) who would be able to safely control the vehicle (1) according to the law, then this may be scheduled as a fallback solution in the event of an interruption of the TOD. This allows for a TOD also on routes that do not allow for a reliable and uninterrupted remote control.

[0051] In this scenario, the passengers (2) may be given the option of intervening in the control after first checking their authority (13), for instance by overriding or with the aid of an emergency stop switch.

[0052] As soon as a person controls the vehicle (1), monitoring with the aid of what is known as a dead-man switch, for instance, may be used in order to initiate the handover as soon as there are signs that the control of the vehicle (1) may be unreliable. Evaluation functions, automatically or manually defined by users, are able to be utilized for selecting suitable operators that offer the greatest possible comfort.

[0053] If a vehicle (1) is to be given over to an infrastructure-based control (6), e.g., a parking facility, it is helpful if the vehicle (1) is parked in a dedicated spot and is taken over while at a standstill. This not only allows the passengers (2) to disembark without hindrance but also the transfer to a safe state. Resource problems and critical states as they may occur when the vehicle is in motion are avoided in this way. The location of the handover should be selected so that the possibly involved mobile radio network (4) offers sufficient coverage at that location.

[0054] In every handover it has to be ensured that the mode or the operator taking over is authorized for the individual vehicle type, the specific vehicle (1) and its destinations. This check (13) is able to be performed on the basis of a driver's license of the driver (2) in the vehicle (1) or of the operator in the VCC (5) or within a visual range of the vehicle (1). Also taken into account is a comparison with the vehicle environment (private property with or without the presence of persons, a location within city limits, a superhighway, a road reserved for automated vehicles, etc.) or possible authorization limitations by the manufacturer, fleet manager and owner.

[0055] Possible in addition is the control of the vehicle (1) by employees of rescue services, the police or towing services (3) located within the visual range. If a mobile radio connection is available, then the corresponding mode change should be centrally checked and recorded. However, a direct control of the vehicle (1) by authorized services (3) is possible as well, for instance if the vehicle is located in a dead spot without reception. To this end, cryptographic mechanisms have to be used on the part of the vehicle (1) and the control of the rescue personnel (3), which allow for a control only by authorized personnel (3) also without a mobile radio network (4).

[0056] For instance, this method (10) is able to be implemented in software or hardware or in a mixed form of software and hardware, e.g., in a control unit of the vehicle (1).

[0057] The following numbered Examples describe various example embodiments of the present invention.

[0058] Example 1. A method for transferring a teleoperable vehicle (1) from an initial operating mode (X) to a target operating mode (Y),

[0059] characterized by the following features: [0060] upon request (11), a handover of the driving responsibility to an intended operator is planned (17) and prepared (18) in the initial operating mode (X), [0061] areas of the driving responsibility and operating limits of the vehicle (1) in the target operating mode (Y) are negotiated (19), [0062] the negotiated operating limits are set (20), and [0063] the handover is initiated (21) and brought to a safe conclusion (22) in the target operating mode (Y).

[0064] Example 2. The method (10) as recited in Example 1,

[0065] characterized by the following feature: [0066] prior to the initiation (21) of the handover, it is checked whether the operator is available (12).

[0067] Example 3. The method (10) as recited in Example 2,

[0068] characterized by the following feature: [0069] prior to the initiation (21) of the handover, it is checked whether the operator is authorized to control (13) the vehicle (1) via a mobile telephony network (4).

[0070] Example 4. The method (10) as recited in Example 3,

[0071] characterized by the following feature: [0072] prior to the initiation (21) of the handover, a map (32) is used to calculate whether the mobile telephony network (4) is available (14) following the planned (17) handover.

[0073] Example 5. The method (10) as recited in Example 3 or 4,

[0074] characterized by the following features: [0075] prior to the initiation (21) of the handover, requirements of the target operating mode (Y) are determined (15), and [0076] functions and the compatibility of the vehicle (1) are compared (16) with the requirements.

[0077] Example 6. The method (10) as recited in Example 5,

[0078] characterized by the following feature: [0079] checking (12, 13) and comparing (16) the functions and compatibility is performed based on an operator database (31).

[0080] Example 7. The method (10) as recited in one of Examples 1 through 6,

[0081] characterized by the following feature: [0082] in the event of a function error (30) during the method (10), the handover will be aborted and the initial operating mode (X) be maintained.

[0083] Example 8. A computer program which is set up to carry out the method (10) as recited in one of Examples 1 through 7.

[0084] Example 9. A machine-readable memory medium on which the computer program as recited in Example 8 is stored.

[0085] Example 10. A device (1, 4, 5, 6) which is set up to carry out the method as recited in one of Examples 1 through 7.