-
公开(公告)号:US11593119B2
公开(公告)日:2023-02-28
申请号:US16388541
申请日:2019-04-18
Applicant: Tesla, Inc.
Inventor: Patryk Kaminski , Thaddeus Fortenberry , David Glasco
IPC: G06F9/4401 , B60R16/023 , G05D1/00
Abstract: An autonomous driving controller includes a plurality of parallel processors operating on common input data. Each of the plurality of parallel processors includes a general processor, a security processor subsystem (SCS), and a safety subsystem (SMS). The general processors, the SCSs, and the SMSs of the plurality of parallel processors are configured to first, boot the plurality of SCSs from ROM second, boot the plurality of SMSs of the plurality of parallel processors from RAM or ROM, and, third, boot the plurality of general processors of the plurality of parallel processors from RAM. Between booting of the SCSs and the SMSs, at least one of the plurality of SCSs may load SMS boot code into the RAM that is dedicated to the plurality of SMSs.
-
公开(公告)号:US11423178B2
公开(公告)日:2022-08-23
申请号:US16388451
申请日:2019-04-18
Applicant: TESLA, INC.
Inventor: David Glasco , Patryk Kaminski , Thaddeus Fortenberry
Abstract: A System on a Chip (SoC) includes a plurality of general purpose processors, a plurality of application specific processors, a plurality of SoC support processing components, a security processing subsystem (SCS), a general access Network on a Chip (NoC) coupled to and servicing communications between the plurality of general purpose processors and the plurality of SoC support components, and a proprietary access NoC coupled to and servicing communications for the plurality of application specific processors and the SCS. The SoC may further include a safety processor subsystem (SMS) coupled to the proprietary access NoC, wherein the proprietary access NoC further services communications for the SMS and isolates communications of the SMS from communications of the plurality of general purpose processors. The general access NoC and the proprietary access NoC isolate communications of the SCS and the SMS from communications of the plurality of general purpose processors.
-
公开(公告)号:US20210263811A1
公开(公告)日:2021-08-26
申请号:US17066288
申请日:2020-10-08
Applicant: Tesla, Inc.
Inventor: Daniel William Bailey , David Glasco
Abstract: A parallel processing system includes at least three processors operating in parallel, state monitoring circuitry, and state reload circuitry. The state monitoring circuitry couples to the at least three parallel processors and is configured to monitor runtime states of the at least three parallel processors and identify a first processor of the at least three parallel processors having at least one runtime state error. The state reload circuitry couples to the at least three parallel processors and is configured to select a second processor of the at least three parallel processors for state reload, access a runtime state of the second processor, and load the runtime state of the second processor into the first processor. Monitoring and reload may be performed only on sub-systems of the at least three parallel processors. During reload, clocks and supply voltages of the processors may be altered. The state reload may relate to sub-systems.
-
公开(公告)号:US20230274591A1
公开(公告)日:2023-08-31
申请号:US18298152
申请日:2023-04-10
Applicant: Tesla, Inc.
Inventor: Atchyuth Gorti , David Glasco , Daniel William Bailey
CPC classification number: G07C5/0816 , B60W60/001 , G06N20/00 , G07C5/0808
Abstract: A vehicular autonomous driving system includes a fault prediction unit, including a processor and memory, configured to predict a potential future fault condition by: monitoring performance data associated with the plurality of autonomous driving components; comparing the performance data associated with the plurality of autonomous driving components to a plurality of performance thresholds; and determining the potential future fault condition for one of the plurality of autonomous driving components, when the performance data associated with the one of the plurality of autonomous driving components compare unfavorably to corresponding one of the plurality of performance thresholds.
-
公开(公告)号:US11005649B2
公开(公告)日:2021-05-11
申请号:US16388352
申请日:2019-04-18
Applicant: TESLA, INC.
Inventor: Thaddeus Fortenberry , Samuel Douglas Crowder , Patryk Kaminski , Daniel William Bailey , David Glasco
Abstract: An autonomous driving controller includes a plurality of parallel processors operating on common input data received from the plurality of autonomous driving sensors. Each of the plurality of parallel processors includes communication circuitry, a general processor, a security processor subsystem (SCS), and a safety subsystem (SMS). The communication circuitry supports communications between the plurality of parallel processors, including inter-processor communications between the general processors of the plurality of parallel processors, communications between the SCSs of the plurality of parallel processors using SCS cryptography, and communications between the SMSs of the plurality of parallel processors using SMS cryptography, the SMS cryptography differing from the SCS cryptography. The SCS and/or the SMS may each include dedicated hardware and/or memory to support the communications.
-
公开(公告)号:US20210126874A1
公开(公告)日:2021-04-29
申请号:US16663229
申请日:2019-10-24
Applicant: Tesla, Inc.
Inventor: David Glasco
IPC: H04L12/927 , H04L12/911 , H04L12/26 , G06F15/78 , G06F9/54
Abstract: An example SoC includes a plurality of processing systems supporting respective Quality of Service (QoS) rules, channel circuitry that is configured to service communications for the plurality of processing systems and that includes a QoS manager. The QoS manager determines that a first processing system of the plurality of processing systems that operates according to first QoS rules desires to send a communication with a first QoS selection of the first QoS rules to a second processing system that operates according to second QoS rules, determines available communication receipt resources of the second processing system of the plurality of processing systems, the second processing system supporting second QoS rules, determines a communication resources allocation for the second processing system based upon the first QoS rules, the second QoS rules, and the first QoS selection, and directs the second processing system to operate according to the communication resource allocation.
-
公开(公告)号:US20200320807A1
公开(公告)日:2020-10-08
申请号:US16954755
申请日:2018-12-05
Applicant: Tesla, Inc.
Inventor: Atchyuth Gorti , David Glasco , Daniel William Bailey
Abstract: A vehicular autonomous driving system includes a fault prediction unit, including a processor and memory, configured to predict a potential future fault condition by: monitoring performance data associated with the plurality of autonomous driving components; comparing the performance data associated with the plurality of autonomous driving components to a plurality of performance thresholds; and determining the potential future fault condition for one of the plurality of autonomous driving components, when the performance data associated with the one of the plurality of autonomous driving components compares unfavorably to a corresponding one of the plurality of performance thresholds.
-
公开(公告)号:US20230281017A1
公开(公告)日:2023-09-07
申请号:US18173656
申请日:2023-02-23
Applicant: Tesla, Inc.
Inventor: Patryk Kaminski , Thaddeus Fortenberry , David Glasco
IPC: G06F9/4401 , B60R16/023 , G05D1/00
CPC classification number: G06F9/4405 , B60R16/023 , G05D1/0055 , G05D1/0088 , G05D2201/0213
Abstract: An autonomous driving controller includes a plurality of parallel processors operating on common input data. Each of the plurality of parallel processors includes a general processor, a security processor subsystem (SCS), and a safety subsystem (SMS). The general processors, the SCSs, and the SMSs of the plurality of parallel processors are configured to first, boot the plurality of SCSs from ROM second, boot the plurality of SMSs of the plurality of parallel processors from RAM or ROM, and, third, boot the plurality of general processors of the plurality of parallel processors from RAM. Between booting of the SCSs and the SMSs, at least one of the plurality of SCSs may load SMS boot code into the RAM that is dedicated to the plurality of SMSs.
-
公开(公告)号:US20230102197A1
公开(公告)日:2023-03-30
申请号:US18061620
申请日:2022-12-05
Applicant: Tesla, Inc.
Inventor: Daniel William Bailey , David Glasco
Abstract: A parallel processing system includes at least three parallel processors, state monitoring circuitry, and state reload circuitry. The state monitoring circuitry couples to the at least three parallel processors and is configured to monitor runtime states of the at least three parallel processors and identify a first processor of the at least three parallel processors having at least one runtime state error. The state reload circuitry couples to the at least three parallel processors and is configured to select a second processor of the at least three parallel processors for state reload, access a runtime state of the second processor, and load the runtime state of the second processor into the first processor. Monitoring and reload may be performed only on sub-systems of the at least three parallel processors. During reload, clocks and supply voltages of the processors may be altered. The state reload may relate to sub-systems.
-
公开(公告)号:US11526409B2
公开(公告)日:2022-12-13
申请号:US17066288
申请日:2020-10-08
Applicant: Tesla, Inc.
Inventor: Daniel William Bailey , David Glasco
IPC: G06F11/00 , G06F11/07 , G06F11/14 , G06F9/52 , G06F11/267 , G06F11/18 , G06F11/16 , G06F11/30 , G06F11/20
Abstract: A parallel processing system includes at least three processors operating in parallel, state monitoring circuitry, and state reload circuitry. The state monitoring circuitry couples to the at least three parallel processors and is configured to monitor runtime states of the at least three parallel processors and identify a first processor of the at least three parallel processors having at least one runtime state error. The state reload circuitry couples to the at least three parallel processors and is configured to select a second processor of the at least three parallel processors for state reload, access a runtime state of the second processor, and load the runtime state of the second processor into the first processor. Monitoring and reload may be performed only on sub-systems of the at least three parallel processors. During reload, clocks and supply voltages of the processors may be altered. The state reload may relate to sub-systems.
-
-
-
-
-
-
-
-
-