METHOD AND DEVICE IN A VEHICLE FOR EVALUATING AND STORING DATA

Abstract

A device and a method in a vehicle which is controlled in autonomous or highly-automated driving mode without intervention of the driver or in a manual driving mode by the driver of the vehicle, the device evaluating and storing data, and the device including a memory unit, in which data are recorded which at least include pieces of information about whether the autonomous or highly-automated driving mode was active or the manual driving mode was active at a collision point in time or up to shortly before the collision point in time. Sensor signals from driver-actuatable operating elements and from collision recognition units are evaluated.

Claims

1-11. (canceled)

12. A device in a vehicle, which is controlled in an autonomous or highly-automated driving mode without intervention of a driver of the vehicle or in a manual driving mode by the driver of the vehicle, the device comprising: a memory unit in which data are recorded, the data including at least include pieces of information as to whether the autonomous or highly-automated driving mode was active or the manual driving mode was active at a collision point in time or up to shortly before the collision point in time, wherein the device is configured to evaluate sensor signals supplied to the device, with the aid of which it is recognized whether the driver actuates driver-actuatable operating element of the vehicle, and wherein the device is configured to evaluate collision recognition signals supplied to the device, with the aid of which it is recognized whether an accident of the vehicle has taken place or is imminent.

13. The device as recited in claim 12, wherein sensors, whose sensor signals are supplied and with the aid of which it is recognized whether the driver actuates driver-actuatable operating elements of the vehicle, include one of the following: (a) a steering wheel sensor, or (b) an accelerator pedal sensor, or (c) a brake pedal sensor, or (d) a clutch sensor, or (e) any combination of (a)-(d).

14. The device as recited in claim 12, wherein the collision recognition signals supplied to the device, with the aid of which it is recognized whether an accident of the vehicle has taken place or is imminent, are: (i) signals from an airbag control device, which prompt freezing of present data in the memory unit upon triggering or partial triggering of an airbag, or (ii) signals of a surroundings sensor having collision recognition, which prompt freezing of the present data in the memory unit upon recognition of a collision situation which is no longer avoidable.

15. The device as recited in claim 12, wherein the memory unit is a ring buffer.

16. The device as recited in claim 12, wherein the device includes an evaluation device which evaluates the sensor signals and the collision recognition signals, and a collision recognition unit configured to recognize whether an accident of the vehicle has taken place or is imminent.

17. The device as recited in claim 16, wherein the evaluation device, the collision recognition unit, sensors that supply the sensor signals, and the memory are connected to one another by a communication bus.

18. The device as recited in claim 17, wherein timers in the evaluation device, in the sensors, in the collision recognition unit, and in the memory are synchronized with one another via the communication bus.

19. The device as recited in claim 12, wherein the data stored in the memory unit are stored with a timestamp.

20. A method for a vehicle, which is controlled in an autonomous or highly-automated driving mode without intervention of a driver of the vehicle or in a manual driving mode by the driver of the vehicle, the method comprising: recording data in a memory unit, the data including at least pieces of information as to whether the autonomous or highly-automated driving mode was active or the manual driving mode was active at a collision point in time or up to shortly before the collision point in time; evaluating sensor signals to recognize whether the driver actuates driver-actuatable operating elements of the vehicle; and evaluating collision recognition signals to recognize whether an accident of the vehicle has taken place or is imminent.

21. The method as recited in claim 20, wherein sensors, which recognize whether the driver actuates driver-actuatable operating elements of the vehicle, include: (a) a steering wheel sensor, or (b) an accelerator pedal sensor, or (c) a brake pedal sensor, or (d) a clutch sensor, or (e) any combination of (a)-(d).

22. The method as recited in claim 20, wherein the pieces of information stored in the memory unit, which indicates whether the autonomous or highly-automated driving mode was active or the manual driving mode was active at a collision point in time or up to shortly before a collision point in time, is mapped as a status bit.

23. The method as recited in claim 22, wherein at least the status bit and a timestamp are stored when: (a) the autonomous or highly-automated driving mode is started, or (b) the autonomous or highly-automated driving mode is ended, or (c) the vehicle outputs the message to the driver during the autonomous or highly-automated driving mode that the driver is to take over the control of the vehicle, or (d) the driver actuates a driver-actuatable operating element of the vehicle, or (e) a collision recognition signal is recognized, that an accident of the vehicle has taken place or is imminent, or (f) any combination of (a)-(e).

Description

BRIEF DESCRIPTION OF THE DRAWINGS

[0018] Exemplary embodiments of the present invention are explained hereafter on the basis of the figures.

[0019] FIG. 1 shows a schematic block diagram of one specific embodiment of the device according to the present invention.

[0020] FIG. 2 shows a schematic block diagram of the evaluation unit of the device according to the present invention.

[0021] FIG. 3 shows an illustration of a timeline which reflects an exemplary driving situation.

[0022] FIG. 4 shows a schematic flow chart to explain the method according to the present invention.

DETAILED DESCRIPTION OF EXAMPLE EMBODIMENTS

[0023] In FIG. 1, a communication bus 1, which connects multiple components to one another, is shown at the lower end by the horizontal bar. This communication bus 1 may be designed, for example, as a CAN bus. A control device 2 for the sensor evaluation, in which the method according to the present invention runs, for example, is connected to this CAN bus. Furthermore, different sensors are connected to communication bus 1. Thus, for example, a steering wheel sensor 3, an accelerator pedal sensor 4, a brake pedal sensor 5, and a clutch sensor 6 are indicated. These sensors are also connected to communication bus 1. In the case in which the vehicle includes an automatic transmission, the clutch sensor may be omitted. Alternatively, sensors 3 through 6 may also be directly connected to control unit 2 for the sensor evaluation. Furthermore, a further control device 7 is shown in FIG. 1, which may optionally be provided and is therefore shown by dashed lines in FIG. 7 and may be designed as an airbag control device. If a collision occurs, airbag triggering is thus ascertained with the aid of acceleration sensors. Collision recognition unit 7 may recognize a collision which has occurred by the evaluation of this deceleration signal or the impact signal and may relay this detection signal via communication bus 1 to control device 2 for sensor evaluation. Alternatively, it is also possible that collision recognition unit 7 is a surroundings sensor, which detects the vehicle surroundings and recognizes a critical approach of an object to the ego vehicle. In this case, the collision recognition unit would be designed as a component of control device 8 for autonomous or highly-automated driving. This control device 8 for autonomous or highly-automated driving receives pieces of information from the surroundings sensor of the vehicle and may recognize an imminent and possibly unavoidable collision situation and may replace optionally provided airbag control device 7, since then collision recognition unit 7 is designed as an integral component of control device 8. By way of such an evaluation of surroundings detection means, it is possible to recognize even before a collision has occurred that an unavoidable collision is imminent. In the case in which such a critical approach is recognized, or an unavoidable collision is imminent, a signal may also be transmitted via communication bus 1 to control device 2 for the sensor evaluation by the evaluation device of the surroundings sensor, which in this case is control device 8 for autonomous or highly-automated driving and assumes the function of collision recognition unit 7.

[0024] Furthermore, above-mentioned control device 8 for autonomous driving or highly-automated driving is shown. In the case in which this control device 8 for highly-automated or autonomous driving is connected to communication bus 1, the evaluation of the surroundings sensor by collision recognition unit 7 may be omitted and instead it may be executed by the control device for autonomous driving designed as a head unit. It may be detected with the aid of steering wheel sensor 3 whether the driver has his hands on the steering wheel or a steering activity of the driver exists. It may be detected with the aid of accelerator pedal sensor 4 whether the driver actuates the accelerator pedal. It may be detected with the aid of brake pedal sensor 5 whether the driver actuates the brake pedal and thus intends to end the autonomous or highly-automated driving mode and intends to take over the vehicle control manually again. It may be detected with the aid of optional clutch sensor 6 whether the driver actuates the clutch pedal and thus intends to end an autonomous driving mode or highly-automated driving mode and to continue to manually control the vehicle himself. Control device 2 is connected directly or via a communication bus 1 to sensors 3, 4, 5, 6.

[0025] Control device 2 processes the sensor signals and derives therefrom whether the driver intervenes in the driving actions by actuating either the steering wheel or a pedal. This piece of information may be mapped, for example, on a status bit, which is stored and represents whether the driver intervenes in the driving actions. In addition to this piece of information, the point in time of the intervention is also to be accurately documented. It is advantageous if, on the one hand, it is detected whether the driver intervenes in the driving actions or not, and also at which point in time A the driver possibly intervenes in the driving actions. These pieces of information are stored in a memory unit, in particular a ring buffer, which may be designed, for example, as part of control device 2 for the sensor evaluation. This memory unit may alternatively also be installed at another point in the vehicle and may be connected via communication bus 2. Furthermore, it is possible that this memory unit is situated outside the vehicle and the data to be stored are transmitted by control device 2 via communication bus 1 to a radio interface, from which these signals to be stored are transmitted into a data cloud provided outside the vehicle.

[0026] Control device 2 receives, via communication bus 1 from control device 8 responsible for the autonomous driving or the highly-automated driving, the piece of information as to whether the vehicle is presently controlled by the automatic vehicle controller. For this purpose, in addition to the status bit which represents whether or not driving is presently carried out autonomously or in a highly-automated manner, the time period since when the vehicle has been controlled by the autonomous vehicle controller or the highly-automated vehicle controller is also detected. These two pieces of information may be stored as a data pair in the memory unit of control device 2. In addition to the beginning of the autonomous or highly-automated driving, the point in time of the end of the autonomous or highly-automated driving may also be stored. Furthermore, it is also advantageous to store the information about the point in time at which the autonomous or highly-automated vehicle controller outputs a signal to the driver of the vehicle that the automatic vehicle controller is no longer capable of processing the upcoming driving situation and the driver has to take over the control of the vehicle. Such a takeover request to the driver has to take place in a timely manner and the driver has to take over the vehicle control within a maximum permitted time span upon this takeover request. It is therefore important to store the precise point in time of the output of the takeover request to the driver and to store the point in time at which the driver complies with the request and takes over the manual control of the vehicle again. These pieces of information are to be stored in the memory unit.

[0027] An exemplary embodiment of control device 2 for the sensor evaluation is shown in FIG. 2. Control device 2 has an input circuit 11, with the aid of which input variables may be supplied to control unit 2. Signals of driver-actuatable operating elements 9 are detected and supplied to input circuit 11 as one possible input variable. These driver-actuatable operating elements may be, for example, the sensors shown in FIG. 1 such as steering wheel sensor 3, accelerator pedal sensor 4, brake pedal sensor 5, and/or clutch sensor 6. With the aid of these signals, control device 2 may recognize whether the driver wishes to take over the vehicle control and, if a takeover request was output, at which point in time the driver takes over the vehicle control.

[0028] The output signal of a collision recognition unit 7 is supplied as a further input variable to input circuit 11. As described with respect to FIG. 1, this unit may be designed as an airbag control device, which recognizes a collision that has taken place, or may be designed as an evaluation unit of a surroundings detection unit, which recognizes objects in the vehicle surroundings and evaluates their relative velocity and movement direction and thus recognizes critical driving situations or collision situations which are already unavoidable and thus may output a collision recognition signal in the form of a warning signal to the driver before the collision point in time.

[0029] Furthermore, it is possible to supply further input variables 10 to input circuit 11. The signals of driver-actuatable operating elements 9 supplied to input circuit 11 are supplied via an internal data exchange unit 12 to a calculation unit 13, which may be designed, for example, as a microprocessor or microcontroller. It may be ascertained in this calculation unit 13 whether the driver presently actuates a driver-actuatable operating element, and also whether he has taken over the vehicle control himself. Furthermore, the input data of driver-actuatable operating elements 9 are relayed via the internal data exchange system to the memory unit 14, which is designed in particular as a ring buffer, and stored therein. If control unit 2 detects a signal of collision recognition unit 7 that a collision of the vehicle has taken place or a collision of the vehicle with an object in the surroundings is to take place soon, the data stored in memory unit 14 may thus be frozen, whereby subsequent changes and also deletion or overwriting of the data are prevented.

[0030] A timeline 15 of an exemplary collision situation is shown in FIG. 3. An event A is shown at point in time 16, at which the vehicle controller, which controls the vehicle autonomously or in a highly-automated manner, has output a takeover demand of the vehicle control by the driver (takeover request). In the further course of time, event B is shown at point in time 17, at which the driver has taken over the vehicle control by his manual intervention. This duration which was required between event A and event B may be referred to as takeover duration 19 and is of particular interest in the case of an accident reconstruction, since the takeover request has to be output in a timely manner before a possible collision point in time and the driver also has to have taken over the control within a maximum duration. At point in time 18, event C is shown, which represents the collision recognition by triggering of an occupant protection system. To enable accurate reconstruction of these data, it is necessary for the time data of various control devices 2, 7, 8 to have a shared time base. For this purpose, the timers of these control devices 2, 7, 8 have to be synchronized, for example, by a signal being provided on communication bus 1 which is used as a synchronization base. Alternatively, it is also possible that, for example, control device 2 for sensor evaluation outputs its time signal on the communication bus and other control devices 7, 8 synchronize with this time signal.

[0031] In the accident reconstruction, it is to be clarified whether the driver or the automatic vehicle control system had the control over the vehicle, three event points in time A, B, and C being evaluated for this purpose. For this purpose, it is necessary that the takeover signal of the automatic vehicle controller to the driver was not output excessively late. For example, the duration between event A 16 and event C 18 has to be at least two seconds. If this duration between event A and event C is excessively long, the takeover request thus comes excessively early, at which the acceptance of the automatic vehicle control by the driver decreases. Furthermore, the takeover of the vehicle control by the driver has to take place in a timely manner, since otherwise the driver is no longer able to avoid a collision. The duration between event B and event C is to be at least two seconds. If the driver takeover takes place excessively shortly before the collision recognition, the driver is thus no longer able to react and the driver thus may no longer be made liable for resulting damage. If the duration between event A and event C is more than two seconds and at the same time the duration between event B and event C is also greater than two seconds, the takeover request at point in time A by the automatic vehicle controller comes sufficiently early and the driver takes over the vehicle control in a timely manner.

[0032] If a collision according to event C is recognized by collision recognition unit 7, the data stored in the ring buffer are then frozen so that they may no longer be overwritten. Furthermore, a sequence of images of a possibly provided front camera of the vehicle may be stored with the collected pieces of information in memory unit 14. It is also possible to store further data from other sensors which are used for the autonomous driving or the highly-automated driving or which describe the collision situation. It is furthermore possible to store and freeze in memory unit 14 the last commands to relevant components of the autonomously driving vehicle or the vehicle driving in a highly-automated manner, such as signals to the engine control, the braking system, or the steering units.

[0033] Alternatively, control unit 2 may also be a partial function of control device 7 of the collision recognition unit or may be implemented in control device 8, which may be designed, for example, as a head unit or a main computer of an automated vehicle control system.

[0034] An exemplary flow chart is shown in FIG. 4, which begins in step 20. This starting step 20 may be executed when, for example, an automatic vehicle control system for a highly-automated vehicle control or an autonomous vehicle control is activated. It is alternatively also possible to execute this starting step 20 when the vehicle is started.

[0035] In subsequent step 21, the status of the driving mode is detected by establishing whether the vehicle is presently operated in an autonomous driving mode or a highly-automated driving mode or a manual operating mode.

[0036] This information may be represented, for example, as a status bit. In following step 22, sensor signals are detected, with the aid of which a driver activity is recognizable. Thus, for this purpose a steering wheel sensor 3, an accelerator pedal sensor 4, a brake pedal sensor 5, or a clutch sensor 6 may be evaluated for this purpose and it may be established whether the driver presently controls the vehicle or wishes to take over the vehicle control.

[0037] In following step 23, the input signal from a collision recognition unit is evaluated, with the aid of which it is established whether a collision has taken place or an unavoidable collision is imminent.

[0038] In following step 24, the data are written continuously into the ring buffer. If the memory of the ring buffer is full, the oldest stored data are thus overwritten using new data, so that the most up-to-date data are always stored in memory unit 14.

[0039] In step 25, the input signal of the collision recognition unit or the collision recognition signal of a surroundings sensor is evaluated and if a collision or an imminent collision is present, step 25 branches to yes and the sequence continues in step 26. If a collision has not taken place or a collision is not imminent, step 24 thus branches to no and the method is continued in step 21 by the status of the driving mode being detected again.

[0040] If a collision or an imminent collision is recognized in step 25, in following step 26, the data presently located in the ring buffer are thus frozen so that they are secured against updating, deletion, or modification. Alternatively, it is also possible that the data to be continuously stored in step 24 are written into a volatile memory, for example, also a ring buffer, and if a collision was recognized or an imminent collision situation was recognized in step 25, the data of the volatile memory are written into a nonvolatile memory and thus also protected against modification such as deletion, overwriting, or modification.