# Patent

## Title
Adaptive dynamic model for automated vehicle

## Abstract

An operating system for an automated vehicle includes a failure-detector and a controller. The failure-detector detects a component-failure on a host-vehicle. Examples of the component-failure include a flat-tire and engine trouble that reduces engine-power. The controller operates the host-vehicle based on a dynamic-model. The dynamic-model is varied based on the component-failure detected by the failure-detector.

## Background
CROSS-REFERENCE TO RELATED APPLICATION
This application is a division of and claims priority to U.S. patent application Ser. No. 15/622,284, filed Jun. 14, 2017, the entire contents of which is incorporated herein by reference.


TECHNICAL FIELD OF INVENTION
This disclosure generally relates to an operating system for an automated vehicle, and more particularly relates to a system that varies or adjusts a dynamic-model used to operate the vehicle to compensate for a component-failure of a component of the vehicle.
BACKGROUND OF INVENTION
It is known to use a dynamic-model of a host-vehicle to assist with the operation of the host-vehicle. For example, the dynamic model may indicate when brakes should be applied to prevent a collision, or a safe speed for an upcoming curve. However, if there is a component failure of the host-vehicle such as a flat-tire, the dynamic-model may no longer be suitable to operate the host-vehicle.
SUMMARY OF THE INVENTION
In accordance with one embodiment, an operating system for an automated vehicle is provided. The system includes a failure-detector and a controller. The failure-detector detects a component-failure on a host-vehicle. The controller operates the host-vehicle based on a dynamic-model. The dynamic-model is varied based on the component-failure detected by the failure-detector.
Further features and advantages will appear more clearly on a reading of the following detailed description of the preferred embodiment, which is given by way of non-limiting example only and with reference to the accompanying drawings.



BRIEF DESCRIPTION OF DRAWINGS
The present invention will now be described, by way of example with reference to the accompanying drawings, in which:
FIG. 1 is operating system for a host-vehicle in accordance with one embodiment; and
FIG. 2 is a traffic-scenario encountered by the host-vehicle equipped with the system of FIG. 1 in accordance with one embodiment.



DETAILED DESCRIPTION
FIG. 1 illustrates a non-limiting example of an operating system 10, hereafter referred to as the system 10. The system 10 is suitable for use by an automated vehicle, a host-vehicle 12 for example. As used herein, the term automated vehicle may apply to instances when the host-vehicle 12 is being operated in an automated-mode 14, i.e. a fully autonomous mode, where a human-operator (not shown) of the host-vehicle 12 may do little more than designate a destination in order to operate the host-vehicle 12. However, full automation is not a requirement. It is contemplated that the teachings presented herein are useful when the host-vehicle 12 is operated in a manual-mode 16 where the degree or level of automation may be little more than providing an audible or visual warning to the human-operator who is generally in control of the steering, accelerator, and brakes of the host-vehicle 12. For example, the system 10 may merely assist the human-operator as needed to avoid interference with and/or a collision with, for example, an object such as another-vehicle, a pedestrian, or a road sign.
The system 10 includes a failure-detector 20 that detects a component-failure 22 of a component on the host-vehicle 12. FIG. 1 illustrates the failure-detector 20 as being integrated into or part of a controller 24 of the system 10; however this is not a requirement. It is contemplated that the failure-detector 20 could be part of a separate engine-control-module (ECM) or a body-control-module (BCM) of the host-vehicle 12, and the failures could be communicated to the controller 24 on a data-buss of the host-vehicle 12, e.g. via a controller-area-network (CAN) buss. Non-limiting examples component failures of vehicle components whose failure could affect the operation of the host-vehicle 12 include, but are not limited to, a flat-tire 26, an engine-fault 28 (fuel-injector failure, engine-sensor failure), a perception-sensor failure (e.g. camera, radar, lidar; not shown), an anti-wheel-lock-sensor failure (not shown), a vehicle-accelerometer failure (not shown), an exterior-light failure (e.g. headlight or taillight; not shown), a low fluid level (oil, coolant, windshield-washer-fluid), and the like.
The controller 24 may include a processor (not specifically shown) such as a microprocessor or other control circuitry such as analog and/or digital control circuitry including an application specific integrated circuit (ASIC) for processing data as should be evident to those in the art. The controller 24 may include memory (not specifically shown), including non-volatile memory, such as electrically erasable programmable read-only memory (EEPROM) for storing one or more routines, thresholds, and captured data. The one or more routines may be executed by the processor to perform steps for operating the host-vehicle 12 as described herein.
The controller 24 operates the host-vehicle 12, e.g. controls steering and acceleration/braking, based on a dynamic-model 30. As used herein, the dynamic-model 30 represents a dynamic characterization of how the host-vehicle 12 will respond to various situations or stimuli. For example, the dynamic-model 30 may be used to predict a stopping-distance of the host-vehicle 12 based on information about traction-conditions (e.g. wet vs. dry roadway), roadway-slope (e.g. uphill/downhill vs. level), and the like. Prior examples of dynamic-models presume that all components on the vehicle being modeled are operating within normal parameters. For example, the prior dynamic-models presume that the tire-pressures in the tires of the vehicle are within some nominal range. However, if a flat-tire occurred, the prior dynamic-models are not particularly useful as they don't adapt to changes in dynamic behavior of the vehicle due to the flat-tire. The system 10 described herein is an improvement over the prior examples of dynamic-models because the dynamic-model 30 of the host-vehicle 12 is varied based on the component-failure 22 detected by the failure-detector 20.
FIG. 2 illustrates a non-limiting example of a traffic-scenario 32 that the host-vehicle 12, which is equipped with the system 10, may encounter. In this example, the host-vehicle 12 has recently turned onto a roadway 34 from a side-road 36. By way of example and not limitation, the dynamic-model 30 (FIG. 1) for the host-vehicle 12 may specify a maximum-acceleration 38 of the host-vehicle 12 that is considered prior to turning onto the roadway 34 so as to not interfere with an approaching-vehicle 40. That is, the system 10 may use the dynamic-model 30 to predict if the act of the host-vehicle 12 turning onto the roadway 34 will force the approaching-vehicle 40 to slow-down or decelerate an undesirable amount to avoid a collision with the host-vehicle 12. However, if there is something wrong with the engine of the host-vehicle 12, the host-vehicle 12 may not be able to accelerate at a rate comparable to the maximum-acceleration 38.
To address this situation, the system 10 may include an engine-status-detector 42 that operates to determine if the engine of the host-vehicle 12 is operating normally. The engine-status-detector 42 may be fully embedded in an engine-control-module (ECM, not shown) that outputs codes on a data-bus to indicate the operational status of the engine, as will be recognized by those in the art. If the engine is not operating properly, the component-failure 22 may be characterized as an engine-fault 28 when the engine of the host-vehicle 12 is operating at reduced-power, is operating in a limp-home mode. Accordingly, the maximum-acceleration 38 parameter of the dynamic-model 30 may be decreased when the engine of the host-vehicle 12 is operating at a reduced-power 44. As a result, the system 10 may decide to not turn onto the roadway 34 when the approaching-vehicle 40 is detected. As such, the dynamic-model 30 is varied based on the component-failure 22 detected by the failure-detector 20.
The system 10 may include a tire-pressure-detector 46, i.e. a tire-pressure-indicator. The component-failure 22 may indicate that the flat-tire 26 has occurred when a tire-pressure 48 is less than a pressure-threshold 50. The pressure-threshold 50 may be just barely above a completely flat-tire, or may be a pressure less than the recommended-pressure for a given tire where the dynamic behavior of the host-vehicle 12 is noticeably affected. It is also contemplated that multiple values of the pressure-threshold 50 may be used to continually adjust the dynamic-model 30 so that the flat-tire 26 covers both instances of a soft-tire and completely flat-tire. How the dynamic-model 30 is adjusted or varied may be determined by empirical testing and/or computer modeling. In situations when the host-vehicle is being operated on the manual-mode 16 where a human-operator is steering the host-vehicle 12, the adjustments to the dynamic model may be used by, for example, a lane-keeping-system that only operates to steer the host-vehicle when the operator allows the host-vehicle to deviate too far from the center of a travel-lane.
As a non-limiting example, if one of the front tires, e.g. the wheel 72 (FIG. 2), is soft or flat, the steering behavior may be asymmetrical. That is, the magnitude of change in direction of the host-vehicle 12 arising from a given magnitude of the steering-angle 62 for a left-turn may differ from that for a right-turn. For example, if the wheel 72 is the flat-tire 26, it may take a greater magnitude of the steering-angle 62 to turn the host-vehicle to the right that to make the same amount of turn to the left. The dynamic-model 30 may be varied or adjusted to anticipate this asymmetric behavior by increasing the expected change in steering necessary to steer the host-vehicle 12 through an upcoming curve.
The system 10 may include a steering-torque-detector 52 that monitors the amount steering torque applied to a hand-wheel (i.e. steering-wheel, not shown) operated by a human operator, or applied by an automated steering actuator of the host-vehicle 12. The component-failure 22 may indicate that a flat-tire 26 has occurred when a steering-torque 54 necessary to keep the host-vehicle 12 centered in a travel-lane 56 (FIG. 2) is greater than a torque-threshold 58. That is, the flat-tire 26 may cause the host-vehicle 12 to ‘pull’ in one direction, so a compensating steering torque is necessary to keep the host-vehicle 12 traveling near the center of the travel-lane 56. It is recognized that there are causes other than the flat-tire 26 that require a compensating steering torque to keep the host-vehicle 12 traveling near the center of the travel-lane 56. For example, a bent or worn suspension component may cause the same effect and the dynamic-model 30 may be adjusted to compensate in the same manner.
The system 10 may include a steering-angle-detector 60, and the component-failure 22 indicates that a flat-tire 26 has occurred when a steering-angle 62 necessary to keep the host-vehicle centered in the travel-lane 56 is greater than an angle-threshold 64. The effect on the dynamic behavior of the host-vehicle 12 due to the flat-tire 26 may be similar to the above described idea for compensating or adjusting the dynamic-model 30 based on the steering-torque 54. However, a commercially available example of the steering-angle-detector 60 may be more economical than a commercially available example of the steering-torque-detector 52.
The system 10 may include a wheel-speed-detector 66, and the component-failure 22 indicates that a flat-tire 26 has occurred when a wheel-speed 68 of a wheel 72 (FIG. 2) of the host-vehicle 12 does not correspond to a vehicle-speed 70 of the host-vehicle 12. Vehicles with anti-lock or anti-skid braking systems have a wheel-speed-detector at each wheel of a vehicle. The vehicle-speed 70 may be determined by taking an average wheel-speed of three wheels out of the four wheels that most agree with each other, and the fourth wheel that indicates a wheel speed most different from the other three may be presumed to be flat if the difference is greater than some threshold, one kilometer-per-hour (1 kph) for example. Alternatively, the vehicle-speed 70 may be determined using an independent means such as radar or lidar if the host-vehicle 12 is so equipped.
Once the component-failure 22 is identified, one or aspects or characteristics of the dynamic-model 30 may be varied, altered, or otherwise modified so the controller 24 has a version of the dynamic-model 30 that allows the system 10 to anticipate how the host-vehicle 12 is expected to respond to various inputs such as changes in the steering-angle 62, application of the brakes of the host-vehicle 12, or increasing engine power to accelerate the host-vehicle 12. By way of example and not limitation, the dynamic-model 30 may specify a maximum-curve-speed 74 for a curve-radius 76 of an upcoming curve of the travel-lane 56 (FIG. 2). If the component-failure 22 is something that reduces the ability of the host-vehicle 12 to safely navigate the upcoming curve, the dynamic-model 30 may be varied so the maximum-curve-speed 74 is decreased for a specified value of the curve-radius 78 when the component-failure 22 is, for example, a flat-tire 26, or a broken shock-absorber or spring of the suspension-system of the host-vehicle. Similarly, the dynamic-model 30 may specify a braking-distance 78 for a vehicle-speed 70 of the host-vehicle 12, and the braking-distance 78 may be increased when the component-failure 22 is a flat-tire 26.
Accordingly, an operating system (the system 10), a controller 24 for the system 10, and a method of operating the system 10 is provided. The dynamic-model 30 provides a means for the controller 24 to predict the dynamic-behavior of the host-vehicle 12 during various transient maneuvers such as cornering and braking. However, it has been observed that some types or instances of the component-failure 22 can change the dynamic-behavior. To overcome this change the dynamic-model 30 is varied or altered so that the dynamic-behavior of the host-vehicle 12 while the component-failure 22 is present can be predicted.
While this invention has been described in terms of the preferred embodiments thereof, it is not intended to be so limited, but rather only to the extent set forth in the claims that follow.

## Claims

1. A system comprising:
a engine-status-detector configured to detect that an engine of an automated vehicle is operating at reduced-power;
a processor configured to:
adjust a dynamic-model of the automated vehicle based on the detected reduced-power, the dynamic-model representing a dynamic characterization of the automated vehicle;
predict, using the adjusted dynamic model, a dynamic behavior of the automated vehicle in response to steering, braking, acceleration or deceleration of the automated vehicle; and

a controller that operates the automated vehicle based on the predicted dynamic behavior.

2. The system in accordance with claim 1, wherein the dynamic-model is adjusted by decreasing a maximum-acceleration parameter of the dynamic-model.

3. The system in accordance with claim 1, wherein the controller operates the automated vehicle to operate in a limp-home mode.

4. The system in accordance with claim 1, wherein the controller operates the automated vehicle to not turn on a roadway where an approaching vehicle is detected.

5. A method comprising:
detecting, with an engine-status-detector, that an engine of an automated vehicle is operating at reduced-power;
adjusting, with at least one processor, a dynamic-model of the automated vehicle based on the detected reduced-power, the dynamic-model representing a dynamic characterization of the automated vehicle;
predicting a dynamic behavior of the automated vehicle based on the adjusted dynamic model in response to steering, braking, acceleration or deceleration of the automated vehicle; and
operating, with a controller, the automated vehicle based on the predicted dynamic behavior.

6. The method in accordance with claim 5, wherein the dynamic-model is adjusted by decreasing a maximum-acceleration parameter of the dynamic-model.

7. The method in accordance with claim 5, wherein the controller operates the automated vehicle to operate in a limp-home mode.

8. The method in accordance with claim 5, wherein the controller operates the automated vehicle to not turn on a roadway where an approaching vehicle is detected.

9. A non-transitory, computer-readable storage medium having instructions stored thereon that when executed by one or more processors, cause the one or more processors to perform operations comprising:
detecting that an engine of an automated vehicle is operating at reduced-power;
adjusting a dynamic-model of the automated vehicle based on the detected reduced-power, the dynamic-model representing a dynamic characterization of the automated vehicle;
predicting a dynamic behavior of the automated vehicle based on the adjusted dynamic model in response to steering, braking, acceleration or deceleration of the automated vehicle; and
operating, with a controller, the automated vehicle based on the predicted dynamic behavior.

10. The non-transitory, computer-readable storage medium in accordance with claim 9, wherein the dynamic-model is adjusted by decreasing a maximum-acceleration parameter of the dynamic-model.

11. The non-transitory, computer-readable storage medium in accordance with claim 9, wherein the controller operates the automated vehicle to operate in a limp-home mode.

12. The non-transitory, computer-readable storage medium in accordance with claim 9, wherein the controller operates the automated vehicle to not turn on a roadway where an approaching vehicle is detected.