论文标题

实时可及性在自动驾驶汽车安全保证的实证分析

An Empirical Analysis of the Use of Real-Time Reachability for the Safety Assurance of Autonomous Vehicles

论文作者

Musau, Patrick, Hamilton, Nathaniel, Lopez, Diego Manzanas, Robinette, Preston, Johnson, Taylor T.

论文摘要

机器学习技术和感知的最新进展为人们认为,在不久的将来可能会实现安全,可访问和方便的自动驾驶汽车。尽管在这种情况下取​​得了巨大的进步,但围绕安全性和可靠性的基本挑战限制了它们的到来和全面采用。自动驾驶汽车通常的任务是在动态和不确定的环境中运行。结果,他们经常利用高度复杂的组件(例如机器学习方法)来处理感应,驱动和控制的细微差别。尽管这些方法非常有效,但众所周知,它们很难确保。此外,在不确定和动态的环境中,设计时间保证分析可能不足以确保安全性。因此,在运行时监视这些系统的正确性至关重要。单纯架构是一种可以不适合正式分析的组件的系统保证的一种方法,在该组件中,未经验证的组件用安全控制器包裹起来,而开关逻辑则旨在防止危险行为。在本文中,我们建议使用一种实时可及性算法实现单纯形架构,以确保1/10刻度的开源自动驾驶汽车平台(称为F1/10)的安全性。我们利用的可及性算法(a)提供了可证明的安全保证,(b)用于检测潜在的不安全情况。在我们的方法中,分析基础控制器的需求被抽象了,而是关注控制器决策对系统未来状态的影响。我们通过在模拟和嵌入式硬件平台上进行的大量实验来证明我们的体系结构的功效。

Recent advances in machine learning technologies and sensing have paved the way for the belief that safe, accessible, and convenient autonomous vehicles may be realized in the near future. Despite tremendous advances within this context, fundamental challenges around safety and reliability are limiting their arrival and comprehensive adoption. Autonomous vehicles are often tasked with operating in dynamic and uncertain environments. As a result, they often make use of highly complex components, such as machine learning approaches, to handle the nuances of sensing, actuation, and control. While these methods are highly effective, they are notoriously difficult to assure. Moreover, within uncertain and dynamic environments, design time assurance analyses may not be sufficient to guarantee safety. Thus, it is critical to monitor the correctness of these systems at runtime. One approach for providing runtime assurance of systems with components that may not be amenable to formal analysis is the simplex architecture, where an unverified component is wrapped with a safety controller and a switching logic designed to prevent dangerous behavior. In this paper, we propose using a real-time reachability algorithm for the implementation of the simplex architecture to assure the safety of a 1/10 scale open source autonomous vehicle platform known as F1/10. The reachability algorithm that we leverage (a) provides provable guarantees of safety, and (b) is used to detect potentially unsafe scenarios. In our approach, the need to analyze an underlying controller is abstracted away, instead focusing on the effects of the controller's decisions on the system's future states. We demonstrate the efficacy of our architecture through a vast set of experiments conducted both in simulation and on an embedded hardware platform.

扫码加入交流群

加入微信交流群

微信交流群二维码

扫码加入学术交流群,获取更多资源