5
Reliable and safe maps for automated driving
Maps do not replace sensors, which supply data about dynamic processes in the vehicle’s environment, e.g.,
the actions of pedestrians, cyclists, and other vehicles.
Reliance on a map for specic information means only that sensors cannot provide the information with the
required quality; the vehicle still needs sensors. For example: a camera cannot read an obscured sign, but the
data can be retrieved from a map. Conversely, a map cannot deliver information about the distance to other cars.
According to ISO 26262, map systems cannot be used to decompose safety requirements in conjunction with
sensor systems if only one of the systems provides the necessary information with the required quality, excluding
hardware or software failure.
A map system can thus only be used here either to rectify physical/algorithmic sensor system inadequacies
or for decomposition.
Safety related applications usually only require a subset of the map attributes to be highly reliable rather than
the entire map. These attributes are called reliable map attributes (RMA). Section 5 of this white paper gives an
example of how to derive the detailed RMA list for a given application.
3.1 Sensor range extension
Predicting situations
Map information can extend sensor range through advance identication of potential hazard situations. The
automated driving function can match or improve on an average driver’s skills, e.g., by adjusting speed when
speed limit signs are obscured, or braking before reaching an obstacle
Requesting driver takeover well before HAD route ends
HAD systems are currently only good enough for use in specic areas (e.g., highways).
In HAD mode, drivers generally do not monitor vehicle function and environmental conditions and are unaware
of functional restrictions. They are not therefore expected to identify in advance where HAD mode should end, or
to take immediate control of the vehicle when prompted (time is needed for reaction and situational awareness).
When sensors detect the HAD route end point, insufcient time may remain to transfer control to the driver.
Hazards and discomfort may result if emergency braking is needed, which is even more likely if sensors cannot
detect the end of the HAD route (e.g., signs obscured).
The system can compute the end of the HAD route from map data, and alert the driver in good time.
Steering to a safe stop
If the driver fails to take over, emergency in-lane braking is avoidable if, e.g., a hard shoulder is available.
A map can indicate if and where there is one.
The vehicle safety concept can also include this as the response to a safety-related component failure
or driver medical emergency.
我的内容管理
收起
我的收益 登录查看自己的收益
我的积分
登录查看自己的积分
我的C币
登录后查看C币余额
我的收藏 
我的下载 
下载帮助 
评论5