ASYMMETRIC SYSTEM ARCHITECTURE FOR FAIL-OPERATIONAL FUNCTIONS WITH LIMITED AVAILABILITY REQUIREMENTS

摘要

A vehicle system controller having an asymmetric system architecture and a method of operating the vehicle system controller is provided. The vehicle system controller includes a primary controller and a secondary controller in communications with the vehicle systems. Each of the controllers include a memory unit containing software application and a processor for executing the software to generate commands for the vehicle systems. The memory unit of the secondary controller contains only a subset of the total software applications contained in the memory unit of the primary controller. The subset of software applications is only for the operation of pre-identified features of the vehicle systems. The vehicle systems are configured to default to commands from the primary controller, but switches to the commands from the secondary controller for a predetermined length of time if the primary controller becomes fail-silent.