Detecting and responding to propulsion and steering system errors for autonomous vehicles

Abstract

Aspects of the disclosure relate to stopping a vehicle. For instance, a vehicle is controlled in an autonomous driving mode by generating first commands for acceleration control and sending the first commands to an acceleration and/or steering actuator of an acceleration system of the vehicle in order to cause the vehicle to accelerate. Acceleration and/or orientation of the vehicle is monitored while the vehicle is being operated in an autonomous driving mode. The monitored acceleration and/or orientation is compared with the first commands. An error with the acceleration and/or steering system is determined based on the comparison. When the error is determined, the vehicle is controlled in the autonomous driving mode by generating second commands which do not require any acceleration and/or steering.

1 . A system for stopping a vehicle, the system comprising:
 one or more processors of one or more computing devices configured to:   generate first commands for control and sending the first commands to an actuator of a system of the vehicle in order to control the vehicle in the autonomous driving mode;   monitor behavior the vehicle while the vehicle is being operated in an autonomous driving mode;   compare the monitored behavior with the first commands;   determine that there is an error with the system based on the comparison; and   when the error is determined, control the vehicle in the autonomous driving mode by generating second commands which do not require use of the system.   
     
     
         2 . The system of  claim 1 , wherein one of the one or more computing devices is a monitor computing device configured to perform the monitoring and the determining, and another of the one or more computing devices is a control computing device configured to perform the controlling the vehicle in the autonomous driving mode by generating the first commands and the controlling the vehicle in the autonomous driving mode by generating the second commands. 
     
     
         3 . The system of  claim 2 , wherein the one or more processors are further
 configured to: use the comparison to generate a signal indicating the error; and   send the signal to the control computing device.   
     
     
         4 . The system of  claim 3 , wherein the signal indicates that there is too much acceleration. 
     
     
         5 . The system of  claim 3 , wherein the one or more processors are further configured to:
 receive the signal; and   in response to receiving the signal, turn off an ignition of the vehicle.   
     
     
         6 . The system of  claim 3 , wherein the one or more processors are configured to:
 receive the signal; and
 in response to receiving the signal, move a gear control to a neutral state thereby disengaging a transmission of the vehicle. 
   
     
     
         7 . The system of  claim 3 , wherein the signal indicates that there is not enough acceleration. 
     
     
         8 . The system of  claim 1 , wherein the one or more processors are further configured to:
 determine a first trajectory for maneuvering the vehicle by a planning system of the vehicle, wherein generating the first commands is based on the first trajectory, and when the error is detected, change a planning behavior of the planning system.   
     
     
         9 . The system of  claim 8 , wherein the one or more processors are further configured to, after changing the planning behavior of the planning system, determine a second trajectory for maneuvering the vehicle according to the changed planning behavior, and wherein the second commands are generated based on the second trajectory. 
     
     
         10 . The system of  claim 8 , wherein the change includes adding a rule that the vehicle cannot change lanes. 
     
     
         11 . The system of  claim 8 , wherein the change includes adding a rule that the vehicle must avoid intersections. 
     
     
         12 . The system of  claim 8 , wherein the change includes adding a rule that the vehicle must avoid railroad crossings. 
     
     
         13 . The system of  claim 1 , wherein the first commands are acceleration commands. 
     
     
         14 . The system of  claim 13 , wherein the actuator is an acceleration actuator. 
     
     
         15 . The system of  claim 1 , wherein the first commands are deceleration commands. 
     
     
         16 . The system of  claim 15 , wherein the actuator is a deceleration actuator. 
     
     
         17 . The system of  claim 1 , wherein the first commands are steering commands. 
     
     
         18 . The system of  claim 17 , wherein the actuator is a steering actuator. 
     
     
         19 . The system of  claim 1 , wherein comparing the monitored behavior with the first commands includes determining whether there is a mismatch. 
     
     
         20 . The system of  claim 1 , further comprising the vehicle.