WO2021253097A1 - Emergency braking of autonomous vehicle/robots - Google Patents
Emergency braking of autonomous vehicle/robots Download PDFInfo
- Publication number
- WO2021253097A1 WO2021253097A1 PCT/AU2021/050641 AU2021050641W WO2021253097A1 WO 2021253097 A1 WO2021253097 A1 WO 2021253097A1 AU 2021050641 W AU2021050641 W AU 2021050641W WO 2021253097 A1 WO2021253097 A1 WO 2021253097A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- brake
- power source
- main power
- autonomous vehicle
- backup power
- Prior art date
Links
Classifications
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B60—VEHICLES IN GENERAL
- B60T—VEHICLE BRAKE CONTROL SYSTEMS OR PARTS THEREOF; BRAKE CONTROL SYSTEMS OR PARTS THEREOF, IN GENERAL; ARRANGEMENT OF BRAKING ELEMENTS ON VEHICLES IN GENERAL; PORTABLE DEVICES FOR PREVENTING UNWANTED MOVEMENT OF VEHICLES; VEHICLE MODIFICATIONS TO FACILITATE COOLING OF BRAKES
- B60T8/00—Arrangements for adjusting wheel-braking force to meet varying vehicular or ground-surface conditions, e.g. limiting or varying distribution of braking force
- B60T8/17—Using electrical or electronic regulation means to control braking
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B60—VEHICLES IN GENERAL
- B60T—VEHICLE BRAKE CONTROL SYSTEMS OR PARTS THEREOF; BRAKE CONTROL SYSTEMS OR PARTS THEREOF, IN GENERAL; ARRANGEMENT OF BRAKING ELEMENTS ON VEHICLES IN GENERAL; PORTABLE DEVICES FOR PREVENTING UNWANTED MOVEMENT OF VEHICLES; VEHICLE MODIFICATIONS TO FACILITATE COOLING OF BRAKES
- B60T7/00—Brake-action initiating means
- B60T7/12—Brake-action initiating means for automatic initiation; for initiation not subject to will of driver or passenger
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B60—VEHICLES IN GENERAL
- B60T—VEHICLE BRAKE CONTROL SYSTEMS OR PARTS THEREOF; BRAKE CONTROL SYSTEMS OR PARTS THEREOF, IN GENERAL; ARRANGEMENT OF BRAKING ELEMENTS ON VEHICLES IN GENERAL; PORTABLE DEVICES FOR PREVENTING UNWANTED MOVEMENT OF VEHICLES; VEHICLE MODIFICATIONS TO FACILITATE COOLING OF BRAKES
- B60T13/00—Transmitting braking action from initiating means to ultimate brake actuator with power assistance or drive; Brake systems incorporating such transmitting means, e.g. air-pressure brake systems
- B60T13/74—Transmitting braking action from initiating means to ultimate brake actuator with power assistance or drive; Brake systems incorporating such transmitting means, e.g. air-pressure brake systems with electrical assistance or drive
- B60T13/741—Transmitting braking action from initiating means to ultimate brake actuator with power assistance or drive; Brake systems incorporating such transmitting means, e.g. air-pressure brake systems with electrical assistance or drive acting on an ultimate actuator
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B60—VEHICLES IN GENERAL
- B60T—VEHICLE BRAKE CONTROL SYSTEMS OR PARTS THEREOF; BRAKE CONTROL SYSTEMS OR PARTS THEREOF, IN GENERAL; ARRANGEMENT OF BRAKING ELEMENTS ON VEHICLES IN GENERAL; PORTABLE DEVICES FOR PREVENTING UNWANTED MOVEMENT OF VEHICLES; VEHICLE MODIFICATIONS TO FACILITATE COOLING OF BRAKES
- B60T17/00—Component parts, details, or accessories of power brake systems not covered by groups B60T8/00, B60T13/00 or B60T15/00, or presenting other characteristic features
- B60T17/18—Safety devices; Monitoring
- B60T17/22—Devices for monitoring or checking brake systems; Signal devices
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B60—VEHICLES IN GENERAL
- B60T—VEHICLE BRAKE CONTROL SYSTEMS OR PARTS THEREOF; BRAKE CONTROL SYSTEMS OR PARTS THEREOF, IN GENERAL; ARRANGEMENT OF BRAKING ELEMENTS ON VEHICLES IN GENERAL; PORTABLE DEVICES FOR PREVENTING UNWANTED MOVEMENT OF VEHICLES; VEHICLE MODIFICATIONS TO FACILITATE COOLING OF BRAKES
- B60T17/00—Component parts, details, or accessories of power brake systems not covered by groups B60T8/00, B60T13/00 or B60T15/00, or presenting other characteristic features
- B60T17/18—Safety devices; Monitoring
- B60T17/22—Devices for monitoring or checking brake systems; Signal devices
- B60T17/221—Procedure or apparatus for checking or keeping in a correct functioning condition of brake systems
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B60—VEHICLES IN GENERAL
- B60T—VEHICLE BRAKE CONTROL SYSTEMS OR PARTS THEREOF; BRAKE CONTROL SYSTEMS OR PARTS THEREOF, IN GENERAL; ARRANGEMENT OF BRAKING ELEMENTS ON VEHICLES IN GENERAL; PORTABLE DEVICES FOR PREVENTING UNWANTED MOVEMENT OF VEHICLES; VEHICLE MODIFICATIONS TO FACILITATE COOLING OF BRAKES
- B60T2270/00—Further aspects of brake control systems not otherwise provided for
- B60T2270/40—Failsafe aspects of brake control systems
- B60T2270/402—Back-up
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B60—VEHICLES IN GENERAL
- B60T—VEHICLE BRAKE CONTROL SYSTEMS OR PARTS THEREOF; BRAKE CONTROL SYSTEMS OR PARTS THEREOF, IN GENERAL; ARRANGEMENT OF BRAKING ELEMENTS ON VEHICLES IN GENERAL; PORTABLE DEVICES FOR PREVENTING UNWANTED MOVEMENT OF VEHICLES; VEHICLE MODIFICATIONS TO FACILITATE COOLING OF BRAKES
- B60T2270/00—Further aspects of brake control systems not otherwise provided for
- B60T2270/40—Failsafe aspects of brake control systems
- B60T2270/413—Plausibility monitoring, cross check, redundancy
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B60—VEHICLES IN GENERAL
- B60T—VEHICLE BRAKE CONTROL SYSTEMS OR PARTS THEREOF; BRAKE CONTROL SYSTEMS OR PARTS THEREOF, IN GENERAL; ARRANGEMENT OF BRAKING ELEMENTS ON VEHICLES IN GENERAL; PORTABLE DEVICES FOR PREVENTING UNWANTED MOVEMENT OF VEHICLES; VEHICLE MODIFICATIONS TO FACILITATE COOLING OF BRAKES
- B60T2270/00—Further aspects of brake control systems not otherwise provided for
- B60T2270/40—Failsafe aspects of brake control systems
- B60T2270/414—Power supply failure
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B60—VEHICLES IN GENERAL
- B60T—VEHICLE BRAKE CONTROL SYSTEMS OR PARTS THEREOF; BRAKE CONTROL SYSTEMS OR PARTS THEREOF, IN GENERAL; ARRANGEMENT OF BRAKING ELEMENTS ON VEHICLES IN GENERAL; PORTABLE DEVICES FOR PREVENTING UNWANTED MOVEMENT OF VEHICLES; VEHICLE MODIFICATIONS TO FACILITATE COOLING OF BRAKES
- B60T2270/00—Further aspects of brake control systems not otherwise provided for
- B60T2270/82—Brake-by-Wire, EHB
Definitions
- the present invention relates to autonomous drive by wire vehicles and robots, and in particular emergency braking by activation of braking by wire.
- the safety system on an autonomous vehicle will perform emergency braking once a critical failure or error is detected. And in the worst-case scenario, the power to the motor and control systems will be cut off to prevent the motor from driving the vehicle any further. However, this does not actively stop a moving vehicle in the emergency. Instead, the vehicle will then roll until friction consumes all the momentum. If the vehicle is on a decline, the vehicle will be accelerated toward the downhill due to the gravity. A similar situation, but in reverse, could occur when on an incline.
- an integrated redundant backup solution to the power supply of actuation system particularly for a brake-by-wire system which ensures a full emergency braking will be performed when there is a failure in main power supply.
- the backup power will be more than enough to bring the brake into its full braking position.
- a gear mechanism can lock the position in place to prevent any rolling after running out the backup power.
- the vehicle can be deployed in a dynamic environment with potential for human interaction. This solution minimises impact of failure associated to one of the most critical components on the vehicle, being the batteries.
- an autonomous vehicle comprising: a main power source; an independent backup power source; a brake which applies a braking force for stopping the vehicle when a brake signal is received by the brake, the brake operating by an electrical actuator being supplied with electrical power from either of the main power source or the backup power source; and a decision system which decides when to send the brake signal to the brake, the decision system decides to send the brake signal when a mission of the vehicle requires braking of the vehicle and the decision system decides to send the brake signal when the main power source drops below a trigger amount or there is a failure in the main power source.
- the backup power source supplies electrical power to the electrical actuator when the decision system sends the brake signal to the brake because the main power source drops below the trigger amount.
- the decision system also decides to send the brake signal when one or more emergency stop conditions are met.
- the backup power source supplies electrical power to the electrical actuator when the decision system sends the brake signal to the brake because one or more of the emergency stop conditions are met.
- the decision system comprises: a) a first sub-system for deciding when to brake according to mission requirements and which activates the brake when required with the main power source; and b) an independent second sub-system for deciding when to brake when the main power source drops below the trigger amount or there is the failure in the main power source and which activates the brake when required with the backup power source.
- the power requirement of the second sub-system can be less that the first sub-system.
- the second sub-system is configured to only deal with the cases in which it needs to decide to brake. This means that the design of the second sub-system can be simpler and can also reduce the points of failure.
- the main power source comprises a reverse current protection circuit.
- the backup power source comprises a reverse current protection circuit.
- the main power source inclusive of its reverse current protection circuit and the backup power source inclusive of its reverse current protection circuit are connected to the electrical actuator of the brake.
- the main power source comprises a voltage level monitor circuit.
- the decision system decides that the main power source drops below the trigger amount when the voltage level monitor circuit experiences a sudden drop in voltage of more than a predetermined amount.
- the backup power source comprises a voltage level monitor circuit.
- the decision system decides that there is an emergency stop condition when the voltage level monitor circuit of the backup power source drops a threshold voltage, which in an embodiment is a predetermined amount.
- the vehicle comprises a roll prevention mechanism that prevents un-powered rolling movement of the vehicle from stationary should power from the backup power source eventually fail.
- the roll prevention mechanism comprises a gear mechanism with a gear ratio from a drive motor to a wheel that requires too much torque from the wheel to overcome mechanical resistance in the motor (including friction in the motor) to allow rotation of the motor.
- the brake comprises a brake cable activated by an actuator and which is connected to a brake system that applies the braking force to a wheel.
- the brake system comprises a drum brake or a disc brake.
- a method of activation of an emergency brake on an autonomous vehicle comprising: providing a main power source; providing an independent backup power source; providing a brake which applies a braking force for stopping the vehicle when a brake signal is received by the brake, the brake operating by an electrical actuator being supplied with electrical power from either of the main power source or the backup power source; and providing a decision system which decides when to send the brake signal to the brake, the decision system decides to send the brake signal when a mission of the vehicle requires braking of the vehicle and the decision system decides to send the brake signal when the main power source drops below a trigger amount; experiencing the main power source dropping below the trigger amount; deciding to send the brake signal to the brake.
- the brake is actuated by use of the backup power source.
- a method of activation of an emergency brake on an autonomous vehicle comprising: monitoring a main power source for it to drop below a trigger amount; activating a brake of the vehicle when the main power source dropped below the trigger amount, wherein the brake is actuated by use of an independent backup power source.
- the brake is actuated by sending a brake signal to the brake, the brake signal also being send to the brake when a mission of the vehicle requires the vehicle to brake.
- Figure 1 is a block diagram of a system of an embodiment of the present invention.
- Figure 2 is a flow diagram of a method of an embodiment of the present invention.
- FIG. 1 there is shown a braking system 10 for a drive by wire autonomous vehicle (which itself is a brake by wire system) with integrated redundant backup braking.
- the main braking components of the system 10 comprise a main power source 12, which typically will also be the primary power source of the vehicle, a decision system 20 comprising an electronic stopping circuit 20 and a brake comprising a brake actuator 22.
- the decision system 20 decides when the vehicle should stop according to when a mission of the vehicle requires braking of the vehicle.
- the electronic stopping circuit 22 powers the actuator 24 with the main power source 12 to apply a braking force.
- the decision system 20 may comprise a high-level autonomous vehicle controller, or it may receive lower level commands from an autonomous vehicle controller.
- the decision system 20 may decide on the rate of braking, which causes the electronic stopping circuit 22 to control the braking force applied by the actuator 24 to the brake.
- the main power source 12 is a bank of rechargeable batteries that should during normal operation supply a substantially constant level of voltage output, even in high current demand situations. If the main power source is not able to provide the substantially constant level of voltage output then this is an indication that the charge in the batteries is near exhaustion, at least for operational purposes or there is some fault causing this situation.
- a main power source health status monitoring means 16 may be implemented by software which monitors the voltage from the voltage level monitor 14. This can determine how the battery is aging, its recharge capacity as it ages and when the battery might need replacement. The decision system 20 monitors the battery health status.
- a charging circuit 18 for recharging the main power source 12.
- This may comprise a generator for converting kinetic energy from movement in the vehicle to electrical energy for energy recovery and conservation purposes, including as a main brake of the vehicle, where the brake actuator 24 is only used when energy recovery does not provide sufficient or ongoing braking force.
- the main power source 12 may be provided with reverse protection circuit 30 to prevent reverse current flow in an unwanted situation.
- the backup braking system integrates with the main braking components of the system 10.
- the backup braking system comprises an independent backup power source 40 and the decision system 20 also circuitry/logic that decided to send a signal to the electronic stopping circuit 22 to cause the actuator 24 to apply a braking force in an emergency condition.
- the decision system 20 comprises decision sub-system A may be a high level control processor for deciding when to brake according to mission requirements and which activates the brake when required with the main power source; and decision sub-system B, which may be a low level logic control circuit for deciding when to brake when the main power source drops below the trigger amount or there is the failure in the main power source and which activates the brake when required with the backup power source.
- Decision sub-system A is independent from decision sub-system B.
- Decision subsystem B can operate even if the main power is lost and decision sub-system A is powered off. This means that the power draw requirement of sub-system B can be less that subsystem A and indeed sub-system B may only be powered by the backup power. In an embodiment, sub-system B is configured to only deal with the cases in which it needs to decide to brake. This means that the design of the second sub-system can be simpler and can also reduce the points of failure.
- the decision system 20 uses the backup power source 40 to actuate the actuator 24 to stop the vehicle. This will override the mission.
- the braking force applied is as much as necessary to safety stop the vehicle in as short a time as possible, or more simply it may be the maximum force.
- the backup power source 40 must be capable of supplying sufficient energy as high inrush current to drive the brake actuator upon failure of the main power source 12.
- the backup power source 40 comprises a reverse protection circuit 46 which prevents reverse current flow to the backup power source in an unwanted situation.
- a backup power source voltage level monitor 42 which monitors the voltage output from the backup power source 40.
- the backup power source 40 is a capacitor or battery(ies) that can provide sufficient power to handle an emergency situation.
- the backup power source 40 may be kept charged by the charging circuit 18. However, if the backup power source 40 voltage level drops or does not charge as required/expected, this may be regarded as an emergency situation and the vehicle may be caused to stop.
- This may be monitored by a backup power source health status monitoring means 44, which may be implemented by software or hardware which monitors the voltage from the voltage level monitor 42. The backup power is sufficient to bring the brake into its full braking position.
- a gear mechanism prevents the vehicle from moving further once it has come to a stop.
- the decision system 20 is also configured to decide to activate the brake in one or more other emergency stop conditions.
- the reverse current protection module 30 prevents high inrush current flow back from the backup power source 40 into main power source 12 when its voltage level drops.
- FIG. 2 there is shown a method 100 of activation of an emergency brake on an autonomous vehicle which starts at step 102 when the autonomous vehicle is started. There is a check 104 to ensure both the main power source 12 and the backup power source 40 are sufficiently charged. If not, path 120 is followed and the vehicle enters a shutdown mode 122.
- path 106 If both are sufficiently charged, path 106 is followed.
- the system boots into an idle mode at 108.
- the system then starts operation 110 to follow its mission.
- a check 112 is then performed by the decision system 20 to determine whether the main power source is higher than a threshold level (not dropped to or below the threshold level). If the main power source 12 is above the threshold level, then operation continues at 114 and the operation of the vehicle continues (back to 110).
- the emergency stop process is commenced 118 using the backup power source 40 to actuate the brake as described above, and then the vehicle is shut down at 112.
- the present invention requires no human control interface on vehicle or human supervision to aid on a system failure (either locally or remotely).
- This invention focuses on redundancy at subsystem level of a fully autonomous drive-by-wire system, in particular for the brake-by-wire system, rather than provide redundancy as secondary vehicle battery for entire on-vehicle system, which is way more cost efficient while still providing same level of safety.
Landscapes
- Engineering & Computer Science (AREA)
- Transportation (AREA)
- Mechanical Engineering (AREA)
- Valves And Accessory Devices For Braking Systems (AREA)
- Regulating Braking Force (AREA)
Abstract
An autonomous vehicle comprises a main power source; an independent backup power source; a brake which applies a braking force for stopping the vehicle when a brake signal is received by the brake. The brake operates by an electrical actuator being supplied with electrical power from either of the main power source or the backup power source. The vehicle further comprises a decision system which decides when to send the brake signal to the brake. The decision system decides to send the brake signal when a mission of the vehicle requires braking of the vehicle and the decision system decides to send the brake signal when the main power source drops below a trigger amount.
Description
Emergency Braking of Autonomous Vehicle/Robots
Field of the invention
[001] The present invention relates to autonomous drive by wire vehicles and robots, and in particular emergency braking by activation of braking by wire.
Background
[002] Like most of the existing technology in autonomous driving vehicle, the safety system on an autonomous vehicle will perform emergency braking once a critical failure or error is detected. And in the worst-case scenario, the power to the motor and control systems will be cut off to prevent the motor from driving the vehicle any further. However, this does not actively stop a moving vehicle in the emergency. Instead, the vehicle will then roll until friction consumes all the momentum. If the vehicle is on a decline, the vehicle will be accelerated toward the downhill due to the gravity. A similar situation, but in reverse, could occur when on an incline.
[003] This is not a critical issue for most of the known autonomous vehicles as there will be always options for human on board to perform emergency action through existing mechanical or electrical linkage to the actuation. However, for an unmanned/unsupervised autonomous security vehicle, there will be neither any human interface preserved on vehicle anymore, nor any human operator around the vehicle to perform such action.
[004] The presented invention has been developed so as to attempt to address this problem.
[005] In this specification, reference to any prior art in the specification is not and should not be taken as an acknowledgement or any form of suggestion that this prior art forms part of the common general knowledge in Australia or any other jurisdiction or that this prior art could reasonably expected to be combined by a person skilled in the art.
Summary of the Invention
[006] To address this issue, there is provided an integrated redundant backup solution to the power supply of actuation system particularly for a brake-by-wire system, which ensures
a full emergency braking will be performed when there is a failure in main power supply. The backup power will be more than enough to bring the brake into its full braking position. A gear mechanism can lock the position in place to prevent any rolling after running out the backup power. The vehicle can be deployed in a dynamic environment with potential for human interaction. This solution minimises impact of failure associated to one of the most critical components on the vehicle, being the batteries.
[007] According to a first aspect there is provided an autonomous vehicle comprising: a main power source; an independent backup power source; a brake which applies a braking force for stopping the vehicle when a brake signal is received by the brake, the brake operating by an electrical actuator being supplied with electrical power from either of the main power source or the backup power source; and a decision system which decides when to send the brake signal to the brake, the decision system decides to send the brake signal when a mission of the vehicle requires braking of the vehicle and the decision system decides to send the brake signal when the main power source drops below a trigger amount or there is a failure in the main power source.
[008] In an embodiment, the backup power source supplies electrical power to the electrical actuator when the decision system sends the brake signal to the brake because the main power source drops below the trigger amount.
[009] In an embodiment, the decision system also decides to send the brake signal when one or more emergency stop conditions are met. In an embodiment, the backup power source supplies electrical power to the electrical actuator when the decision system sends the brake signal to the brake because one or more of the emergency stop conditions are met.
[0010] In an embodiment, the decision system comprises: a) a first sub-system for deciding when to brake according to mission requirements and which activates the brake when required with the main power source; and b) an independent second sub-system for deciding when to brake when the main power source drops below the trigger amount or there is the failure in the main power source and which activates the brake when required with the backup power source. This means that the power requirement of the second sub-system can be less that the first sub-system.
[0011] In an embodiment the second sub-system is configured to only deal with the cases in which it needs to decide to brake. This means that the design of the second sub-system can be simpler and can also reduce the points of failure.
[0012] In an embodiment, the main power source comprises a reverse current protection circuit.
[0013] In an embodiment, the backup power source comprises a reverse current protection circuit.
[0014] In an embodiment, the main power source inclusive of its reverse current protection circuit and the backup power source inclusive of its reverse current protection circuit are connected to the electrical actuator of the brake.
[0015] In an embodiment, the main power source comprises a voltage level monitor circuit. In an embodiment the decision system decides that the main power source drops below the trigger amount when the voltage level monitor circuit experiences a sudden drop in voltage of more than a predetermined amount.
[0016] In an embodiment, the backup power source comprises a voltage level monitor circuit. In an embodiment the decision system decides that there is an emergency stop condition when the voltage level monitor circuit of the backup power source drops a threshold voltage, which in an embodiment is a predetermined amount.
[0017] In an embodiment, the vehicle comprises a roll prevention mechanism that prevents un-powered rolling movement of the vehicle from stationary should power from the backup power source eventually fail. In an embodiment, the roll prevention mechanism comprises a gear mechanism with a gear ratio from a drive motor to a wheel that requires too much torque from the wheel to overcome mechanical resistance in the motor (including friction in the motor) to allow rotation of the motor.
[0018] In an embodiment the brake comprises a brake cable activated by an actuator and which is connected to a brake system that applies the braking force to a wheel. In an embodiment the brake system comprises a drum brake or a disc brake.
[0019] According to a second aspect there is provided a method of activation of an emergency brake on an autonomous vehicle comprising: providing a main power source;
providing an independent backup power source; providing a brake which applies a braking force for stopping the vehicle when a brake signal is received by the brake, the brake operating by an electrical actuator being supplied with electrical power from either of the main power source or the backup power source; and providing a decision system which decides when to send the brake signal to the brake, the decision system decides to send the brake signal when a mission of the vehicle requires braking of the vehicle and the decision system decides to send the brake signal when the main power source drops below a trigger amount; experiencing the main power source dropping below the trigger amount; deciding to send the brake signal to the brake.
[0020] In an embodiment the brake is actuated by use of the backup power source.
[0021] According to a third aspect there is provided a method of activation of an emergency brake on an autonomous vehicle comprising: monitoring a main power source for it to drop below a trigger amount; activating a brake of the vehicle when the main power source dropped below the trigger amount, wherein the brake is actuated by use of an independent backup power source.
[0022] In an embodiment, the brake is actuated by sending a brake signal to the brake, the brake signal also being send to the brake when a mission of the vehicle requires the vehicle to brake.
[0023] In this specification, the term ‘comprises’ and its variants are not intended to exclude the presence of other integers, components or steps.
[0024] The present invention will now be more fully described with reference to the accompanying Examples and drawings. It should be understood, however, that the description following is illustrative only and should not be taken in any way as a restriction on the generality of the invention described above.
Brief Description of Drawings
[0025] In order to provide a better understanding of the present invention preferred embodiments will now be described with reference to the accompanying drawings, in which:
[0026] Figure 1 is a block diagram of a system of an embodiment of the present invention; and
[0027] Figure 2 is a flow diagram of a method of an embodiment of the present invention.
Detailed Description of Embodiments of the Invention
[0028] Referring to Figure 1 , there is shown a braking system 10 for a drive by wire autonomous vehicle (which itself is a brake by wire system) with integrated redundant backup braking.
[0029] The main braking components of the system 10 comprise a main power source 12, which typically will also be the primary power source of the vehicle, a decision system 20 comprising an electronic stopping circuit 20 and a brake comprising a brake actuator 22. The decision system 20 decides when the vehicle should stop according to when a mission of the vehicle requires braking of the vehicle. When that decision is made, the electronic stopping circuit 22 powers the actuator 24 with the main power source 12 to apply a braking force.
[0030] The decision system 20 may comprise a high-level autonomous vehicle controller, or it may receive lower level commands from an autonomous vehicle controller. The decision system 20 may decide on the rate of braking, which causes the electronic stopping circuit 22 to control the braking force applied by the actuator 24 to the brake.
[0031] Additionally, there is a voltage level monitor 14 which monitors the voltage output from the main power source 12. Typically, the main power source 12 is a bank of rechargeable batteries that should during normal operation supply a substantially constant level of voltage output, even in high current demand situations. If the main power source is not able to provide the substantially constant level of voltage output then this is an indication that the charge in the batteries is near exhaustion, at least for operational purposes or there is some fault causing this situation.
[0032] A main power source health status monitoring means 16 may be implemented by software which monitors the voltage from the voltage level monitor 14. This can determine how the battery is aging, its recharge capacity as it ages and when the battery might need replacement. The decision system 20 monitors the battery health status.
[0033] There may also be a charging circuit 18 for recharging the main power source 12. This may comprise a generator for converting kinetic energy from movement in the vehicle to electrical energy for energy recovery and conservation purposes, including as a main brake
of the vehicle, where the brake actuator 24 is only used when energy recovery does not provide sufficient or ongoing braking force.
[0034] The main power source 12 may be provided with reverse protection circuit 30 to prevent reverse current flow in an unwanted situation.
[0035] The backup braking system integrates with the main braking components of the system 10. The backup braking system comprises an independent backup power source 40 and the decision system 20 also circuitry/logic that decided to send a signal to the electronic stopping circuit 22 to cause the actuator 24 to apply a braking force in an emergency condition. In an embodiment, the decision system 20 comprises decision sub-system A may be a high level control processor for deciding when to brake according to mission requirements and which activates the brake when required with the main power source; and decision sub-system B, which may be a low level logic control circuit for deciding when to brake when the main power source drops below the trigger amount or there is the failure in the main power source and which activates the brake when required with the backup power source. Decision sub-system A is independent from decision sub-system B. Decision subsystem B can operate even if the main power is lost and decision sub-system A is powered off. This means that the power draw requirement of sub-system B can be less that subsystem A and indeed sub-system B may only be powered by the backup power. In an embodiment, sub-system B is configured to only deal with the cases in which it needs to decide to brake. This means that the design of the second sub-system can be simpler and can also reduce the points of failure.
[0036] Primarily that emergency condition is when the main power source is failing, or has a fault (which may be indicated as a fast drop in its voltage). In that case the decision system 20 uses the backup power source 40 to actuate the actuator 24 to stop the vehicle. This will override the mission. Preferably the braking force applied is as much as necessary to safety stop the vehicle in as short a time as possible, or more simply it may be the maximum force.
[0037] The backup power source 40 must be capable of supplying sufficient energy as high inrush current to drive the brake actuator upon failure of the main power source 12. The backup power source 40 comprises a reverse protection circuit 46 which prevents reverse current flow to the backup power source in an unwanted situation.
[0038] Additionally, there is a backup power source voltage level monitor 42 which monitors the voltage output from the backup power source 40. Typically, the backup power source 40
is a capacitor or battery(ies) that can provide sufficient power to handle an emergency situation. The backup power source 40 may be kept charged by the charging circuit 18. However, if the backup power source 40 voltage level drops or does not charge as required/expected, this may be regarded as an emergency situation and the vehicle may be caused to stop. This may be monitored by a backup power source health status monitoring means 44, which may be implemented by software or hardware which monitors the voltage from the voltage level monitor 42. The backup power is sufficient to bring the brake into its full braking position.
[0039] In a preferred embodiment, a gear mechanism prevents the vehicle from moving further once it has come to a stop.
[0040] In an embodiment, the decision system 20 is also configured to decide to activate the brake in one or more other emergency stop conditions.
[0041] The reverse current protection module 30 prevents high inrush current flow back from the backup power source 40 into main power source 12 when its voltage level drops.
[0042] Referring to Figure 2, there is shown a method 100 of activation of an emergency brake on an autonomous vehicle which starts at step 102 when the autonomous vehicle is started. There is a check 104 to ensure both the main power source 12 and the backup power source 40 are sufficiently charged. If not, path 120 is followed and the vehicle enters a shutdown mode 122.
[0043] If both are sufficiently charged, path 106 is followed. The system boots into an idle mode at 108. The system then starts operation 110 to follow its mission. A check 112 is then performed by the decision system 20 to determine whether the main power source is higher than a threshold level (not dropped to or below the threshold level). If the main power source 12 is above the threshold level, then operation continues at 114 and the operation of the vehicle continues (back to 110).
[0044] However, If the main power source 12 is (at or) below the threshold level then the emergency stop process is commenced 118 using the backup power source 40 to actuate the brake as described above, and then the vehicle is shut down at 112.
[0045] The present invention requires no human control interface on vehicle or human supervision to aid on a system failure (either locally or remotely). This invention focuses on
redundancy at subsystem level of a fully autonomous drive-by-wire system, in particular for the brake-by-wire system, rather than provide redundancy as secondary vehicle battery for entire on-vehicle system, which is way more cost efficient while still providing same level of safety.
[0046] Modifications and variations as will be apparent to the skilled addressee are intended to fall within the scope of the present invention.
Claims
1 . An autonomous vehicle comprising: a main power source; an independent backup power source; a brake which applies a braking force for stopping the vehicle when a brake signal is received by the brake, the brake operating by an electrical actuator being supplied with electrical power from either of the main power source or the backup power source; and a decision system which decides when to send the brake signal to the brake, the decision system decides to send the brake signal when a mission of the vehicle requires braking of the vehicle and the decision system decides to send the brake signal when the main power source drops below a trigger amount.
2. An autonomous vehicle according to claim 1 , wherein the backup power source supplies electrical power to the electrical actuator when the decision system sends the brake signal to the brake because the main power source drops below the trigger amount.
3. An autonomous vehicle according to claim 1 or 2, wherein the decision system also decides to send the brake signal when one or more emergency stop conditions are met.
4. An autonomous vehicle according to any one of claims 1 to 3, wherein the backup power source supplies electrical power to the electrical actuator when the decision system sends the brake signal to the brake because one or more of the emergency stop conditions are met.
5. An autonomous vehicle according to any one of claims 1 to 4, wherein the decision system comprises: a) a first sub-system for deciding when to brake according to mission requirements and which activates the brake when required with the main power source; and b) an independent second sub-system for deciding when to brake when the main power source drops below the trigger amount or there is the failure in the main power source and which activates the brake when required with the backup power source.
6. An autonomous vehicle according to claim 5, wherein the second sub-system is configured to only deal with the cases in which it needs to decide to brake.
7. An autonomous vehicle according to any one of claims 1 to 6, wherein the main power source comprises a reverse current protection circuit.
8. An autonomous vehicle according to any one of claims 1 to 7, wherein the backup power source comprises a reverse current protection circuit.
9. An autonomous vehicle according to any one of claims 1 to 8, wherein the main power source inclusive of its reverse current protection circuit and the backup power source inclusive of its reverse current protection circuit are connected to the electrical actuator of the brake.
10. An autonomous vehicle according to any one of claims 1 to 9, wherein the main power source comprises a voltage level monitor circuit.
11. An autonomous vehicle according to claim 10, wherein the decision system decides that the main power source drops below the trigger amount when the voltage level monitor circuit experiences a sudden drop in voltage of more than a predetermined amount.
12. An autonomous vehicle according to any one of claims 1 to 11 , wherein the backup power source comprises a voltage level monitor circuit.
13. An autonomous vehicle according to claim 12, wherein the decision system decides that there is an emergency stop condition when the voltage level monitor circuit of the backup power source drops a threshold voltage, which in an embodiment is a predetermined amount.
14. An autonomous vehicle according to any one of claims 1 to 14, wherein the vehicle comprises a roll prevention mechanism that prevents un-powered rolling movement of the vehicle from stationary should power from the backup power source eventually fail.
15. An autonomous vehicle according to claim 14, wherein the roll prevention mechanism comprises a gear mechanism with a gear ratio from a drive motor to a wheel that requires too much torque from the wheel to overcome mechanical resistance in the motor (including friction in the motor) to allow rotation of the motor.
16. An autonomous vehicle according to any one of claims 1 to 15, wherein the brake comprises a brake cable activated by an actuator and which is connected to a brake system that applies the braking force to a wheel.
17. A method of activation of an emergency brake on an autonomous vehicle comprising: providing a main power source;
providing an independent backup power source; providing a brake which applies a braking force for stopping the vehicle when a brake signal is received by the brake, the brake operating by an electrical actuator being supplied with electrical power from either of the main power source or the backup power source; and providing a decision system which decides when to send the brake signal to the brake, the decision system decides to send the brake signal when a mission of the vehicle requires braking of the vehicle and the decision system decides to send the brake signal when the main power source drops below a trigger amount; experiencing the main power source dropping below the trigger amount; deciding to send the brake signal to the brake.
18. A method according to claim 17, wherein the brake is actuated by use of the backup power source.
19. A method according to claim 17 or 18, wherein either the main power source or the backup power source are able to actuate the brake.
20. A method of activation of an emergency brake on an autonomous vehicle comprising: monitoring a main power source for it to drop below a trigger amount; activating a brake of the vehicle when the main power source dropped below the trigger amount, wherein the brake is actuated by use of an independent backup power source.
21 . A method according to claim 20, wherein the brake is actuated by sending a brake signal to the brake, the brake signal also being send to the brake when a mission of the vehicle requires the vehicle to brake.
22. A method according to claims 17 to 21 , comprising preventing un-powered rolling movement of the vehicle when main power source is below the trigger amount.
23. A method according to claims 17 to 22, comprising activating a brake cable with an actuator powered by the backup power source when the brake signal is sent to the brake.
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
AU2020902030 | 2020-06-18 | ||
AU2020902030A AU2020902030A0 (en) | 2020-06-18 | Emergency Braking of Autonomous Vehicle/Robots |
Publications (1)
Publication Number | Publication Date |
---|---|
WO2021253097A1 true WO2021253097A1 (en) | 2021-12-23 |
Family
ID=79268754
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/AU2021/050641 WO2021253097A1 (en) | 2020-06-18 | 2021-06-18 | Emergency braking of autonomous vehicle/robots |
Country Status (1)
Country | Link |
---|---|
WO (1) | WO2021253097A1 (en) |
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
WO2024120710A1 (en) * | 2022-12-05 | 2024-06-13 | Zf Cv Systems Global Gmbh | Brake system for a vehicle, in particular utility vehicle |
Citations (9)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20170166173A1 (en) * | 2015-12-10 | 2017-06-15 | Ford Global Technologies, Llc | Electric parking brake for autonomous vehicles |
US20180022335A1 (en) * | 2015-02-10 | 2018-01-25 | Robert Bosch Gmbh | Control device and method for operating a brake system of a vehicle |
US20180345931A1 (en) * | 2017-05-31 | 2018-12-06 | Jaguar Land Rover Limited | Eletrical system for use in a vehicle |
US20190061727A1 (en) * | 2016-05-26 | 2019-02-28 | Hitachi Automotive Systems, Ltd. | Braking system and vehicle |
US20190168724A1 (en) * | 2017-12-06 | 2019-06-06 | Uber Technologies, Inc. | Systems and Methods for Brake Redundancy for an Autonomous Vehicle |
US20190322262A1 (en) * | 2018-04-20 | 2019-10-24 | Robert Bosch Gmbh | Device and Method for Braking and Stopping a Vehicle in an Emergency |
WO2020057966A1 (en) * | 2018-09-18 | 2020-03-26 | Knorr-Bremse Systeme für Nutzfahrzeuge GmbH | Control architecture for electrified braking and electrified steering of a vehicle |
WO2020057904A1 (en) * | 2018-09-17 | 2020-03-26 | Knorr-Bremse Systeme für Nutzfahrzeuge GmbH | A supplementary power supply and a method for providing supplemental power |
US20200108809A1 (en) * | 2018-10-03 | 2020-04-09 | Toyota Jidosha Kabushiki Kaisha | Actuator controller and vehicle-installed system |
-
2021
- 2021-06-18 WO PCT/AU2021/050641 patent/WO2021253097A1/en active Application Filing
Patent Citations (9)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20180022335A1 (en) * | 2015-02-10 | 2018-01-25 | Robert Bosch Gmbh | Control device and method for operating a brake system of a vehicle |
US20170166173A1 (en) * | 2015-12-10 | 2017-06-15 | Ford Global Technologies, Llc | Electric parking brake for autonomous vehicles |
US20190061727A1 (en) * | 2016-05-26 | 2019-02-28 | Hitachi Automotive Systems, Ltd. | Braking system and vehicle |
US20180345931A1 (en) * | 2017-05-31 | 2018-12-06 | Jaguar Land Rover Limited | Eletrical system for use in a vehicle |
US20190168724A1 (en) * | 2017-12-06 | 2019-06-06 | Uber Technologies, Inc. | Systems and Methods for Brake Redundancy for an Autonomous Vehicle |
US20190322262A1 (en) * | 2018-04-20 | 2019-10-24 | Robert Bosch Gmbh | Device and Method for Braking and Stopping a Vehicle in an Emergency |
WO2020057904A1 (en) * | 2018-09-17 | 2020-03-26 | Knorr-Bremse Systeme für Nutzfahrzeuge GmbH | A supplementary power supply and a method for providing supplemental power |
WO2020057966A1 (en) * | 2018-09-18 | 2020-03-26 | Knorr-Bremse Systeme für Nutzfahrzeuge GmbH | Control architecture for electrified braking and electrified steering of a vehicle |
US20200108809A1 (en) * | 2018-10-03 | 2020-04-09 | Toyota Jidosha Kabushiki Kaisha | Actuator controller and vehicle-installed system |
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
WO2024120710A1 (en) * | 2022-12-05 | 2024-06-13 | Zf Cv Systems Global Gmbh | Brake system for a vehicle, in particular utility vehicle |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
JP5020420B2 (en) | Electric vehicle control device | |
EP1686029B1 (en) | Electrically powered brake system and control unit for electrically powered brake system | |
US8494699B2 (en) | Redundant hardware architecture for the control signals stage of system for braking a vehicle all of whose wheels are each linked to at least one rotary electric machine | |
CN108372850B (en) | Vehicle brake system | |
US20070222284A1 (en) | Brake control system | |
JP5335672B2 (en) | Redundancy hardware design philosophy for the power stage of a vehicle braking system in which all wheels are connected to at least one rotating electrical machine | |
US20130082514A1 (en) | Brake control device | |
JP5970953B2 (en) | Brake control device for vehicle and brake control method for vehicle | |
US10005442B2 (en) | Brake control device | |
JP4203362B2 (en) | Electric brake device | |
JP2007228721A (en) | Failure prevention device for regeneration and power factor function | |
JP5328625B2 (en) | Anti-lock brake system for accompanying cars | |
WO2021253097A1 (en) | Emergency braking of autonomous vehicle/robots | |
EP1741607B1 (en) | Brake system with auxiliary power supply | |
JPH08502009A (en) | Antilock braking system | |
WO2021106518A1 (en) | Vehicle control system | |
JP5677424B2 (en) | Hydraulic booster hydraulic braking system | |
CN115743058A (en) | Train emergency braking system and train | |
CA2609417A1 (en) | Fully charged battery protection | |
US7656056B2 (en) | Method and device for stabilizing an on-board electrical system of a vehicle electrical system | |
JP2004538206A (en) | A method for stabilizing an onboard power supply network by forming short-lived energy | |
KR102423381B1 (en) | Input power means and the control method of electromechanical braking system for railway vehicles | |
JP2001268705A (en) | Control method and its device for brake | |
JP2005245104A (en) | Electric vehicle | |
EP4015322B1 (en) | Backup system for an electronic parking brake and a method for providing a backup power |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 21825742 Country of ref document: EP Kind code of ref document: A1 |
|
NENP | Non-entry into the national phase |
Ref country code: DE |
|
122 | Ep: pct application non-entry in european phase |
Ref document number: 21825742 Country of ref document: EP Kind code of ref document: A1 |