US 12,258,027 B1
Fault detection in vehicle control systems
Anne-Claire Elisabeth Marie Le Henaff, San Francisco, CA (US); Guillermo Duenas Arana, Chicago, IL (US); David Burdick Berman, San Mateo, CA (US); Soroush Dean Khadem, Boulder, CO (US); Richard Martin Murray, Pasadena, CA (US); Daniel Miller, San Jose, CA (US); and Francesco Papi, Sunnyvale, CA (US)
Assigned to Zoox, Inc., Foster City, CA (US)
Filed by Zoox, Inc., Foster City, CA (US)
Filed on Feb. 26, 2021, as Appl. No. 17/186,916.
Int. Cl. B60W 50/02 (2012.01); B60W 50/029 (2012.01); G06F 8/65 (2018.01)
CPC B60W 50/0205 (2013.01) [B60W 50/0225 (2013.01); B60W 50/029 (2013.01); G06F 8/65 (2013.01); B60W 2050/021 (2013.01); B60W 2050/0215 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A system comprising:
one or more processors; and
memory storing processor-executable instructions that, when executed by the one or more processors, configure the system to:
access log data associated with a vehicle operating in a physical environment, wherein the vehicle is at least partially controlled by a controller;
generate modified data at least in part by modifying the log data, the modified data being representative of a fault associated with the controller indicating one or more deviations from a location, an orientation, a speed, or an acceleration represented by the log data;
determine, based at least in part on the modified data, an error signal associated with the fault;
iteratively perform simulations based at least in part on the error signal to determine a threshold reaction time, wherein the iteratively performed simulations include the controller configured for autonomous operation of a first simulated vehicle in a simulated environment and wherein the threshold reaction time is a first time associated with a deviation of the first simulated vehicle being equal to a safety margin;
perform an additional simulation based at least in part on the modified data, wherein the additional simulation includes the controller configured for autonomous operation of a second simulated vehicle and wherein the additional simulation includes a simulated environment;
determine, based at least in part on the additional simulation, a second time associated with a reaction of the controller to the fault; and
based at least in part on determining that the second time associated with the reaction of the controller to the fault is equal to or less than the threshold reaction time, validate the controller.