DE102017219301A1 - Method of increasing safety in dangerous situations concerning road traffic - Google Patents

Abstract

The present invention includes methods for increasing safety in hazardous situations on the road. The method includes receiving, at a back-end server, state data of a plurality of vehicles including an autonomous driving mode, the state data including at least current position data of the vehicles. The method also includes detecting, at the backend server, hazard situation data comprising a location and a type of hazard situation. The method comprises evaluating the status data and environmental data relating to the hazardous situation. With regard to the evaluated status data and environment data, the method comprises automatically initiating at least one protective measure, wherein the protective measure comprises controlling at least one vehicle comprising an autonomous driving mode.

Description

The present invention relates to a method for increasing safety in hazardous situations relating to road traffic.

There are a variety of dangerous situations - such as accidents, burning vehicles, storms, pile - ups, terrorist attacks, etc. - that affect road traffic and its road users. At the same time, vehicles comprising a fully autonomous driving mode are known. Such vehicles can be performed fully autonomously by means of a driver assistance device or an autopilot in traffic. The autopilot is able to guide the vehicle independently of a user or driver of the vehicle, so that the driver does not need to have his hands at the wheel of the vehicle when activated fully autonomous driving mode or does not necessarily have to be in the vehicle. A consideration of vehicles with a fully autonomous driving mode to increase safety in dangerous situations relating to road traffic does not take place.

The object of the invention is to provide a solution that increases safety in road traffic comprising vehicles with a fully autonomous driving mode in dangerous situations.

This object is achieved by the features of the independent claim. Preferred embodiments are subject of the dependent claims.

• Empfangen, an einem Backend-Server, von Zustandsdaten einer Vielzahl von Fahrzeugen umfassend einen autonomen Fahrmodus, wobei die Zustandsdaten zumindest aktuelle Positionsdaten der Fahrzeuge umfassen;
• Erfassen, am Backend-Server, von Gefahrensituationsdaten umfassend eine Position sowie eine Art einer Gefahrensituation;
• Auswerten der Zustandsdaten und von Umgebungsdaten mit Bezug auf die Gefahrensituation; und
• automatisches Einleiten zumindest einer Schutzmaßnahme mit Bezug auf die ausgewerteten Zustandsdaten und Umgebungsdaten, wobei die Schutzmaßnahme ein Steuern zumindest eines Fahrzeugs umfassend einen autonomen Fahrmodus umfasst.

According to a first aspect of the invention, there is provided a method of increasing safety in hazardous road situations, comprising:

• Receiving, at a back-end server, state data of a plurality of vehicles including an autonomous driving mode, the state data including at least current position data of the vehicles;
• Detecting, at the backend server, hazard situation data comprising a location and a type of hazard situation;
• Evaluating the condition data and environmental data related to the hazardous situation; and
• automatic initiation of at least one protective measure with respect to the evaluated state data and environment data, wherein the protective measure comprises controlling at least one vehicle comprising an autonomous driving mode.

The term "vehicle" covers in particular passenger cars (PKW), but also commercial vehicles (for example trucks (lorries), buses), campers, etc., which comprise at least one fully automatic driving mode. Vehicles with a fully autonomous driving mode can move in a known manner autonomously by means of an autopilot in traffic. Thus, the driving of the vehicle can be performed independently of a user or driver of the vehicle. While the fully autonomous drive mode is active, the autopilot continuously processes current sensor data. For this purpose, a plurality of different sensors is mounted in or on the vehicle to capture environmental data as sensor data. The sensors may be, for example, ultrasonic sensors, lidar sensors, radar sensors, cameras, etc. The sensed sensor data is then processed in the driver assistance device to create an environmental model of the vehicle. Based on the environment model, the fully autonomous driving mode is executed via the autopilot.

The backend server is a central data pool and may include a computational unit, as well as a storage unit, e.g. a database, in which data can be centrally or centrally controlled and stored, managed and processed outside the vehicle. It may be necessary for the user of each vehicle to first make a one-time registration of the vehicle (e.g., set up an appropriate account) at the back-end server (or other suitable computing unit providing a corresponding service).

The one-time registration may include the deposit of the drive concept (s) of the vehicle as drive data as well as a suitable vehicle identification number (ID). The drive data includes data regarding the drive (s) of the respective vehicle, e.g. exclusive combustion engine, plug-in hybrid, all-electric vehicle, (additional) pressure vessel for storage of natural gas or hydrogen (e.g., cyrogenic pressure vessel for storage of hydrogen, high pressure gas storage for storage of hydrogen, pressure vessel for storage of compressed or liquefied natural gas, etc.). Other common and / or future types of drive are conceivable. Thus, data that is subsequently sent by the respective vehicle to the back-end server, the vehicle and possibly the (the) drive concept (s) of the vehicle can be clearly assigned. The user of the vehicle may be, for example, its owner, administrator, driver, etc.

The backend server is set up, status data of a plurality of vehicles comprising an autonomous driving mode. The status data comprise at least current position data of the respective vehicle. Each vehicle may be configured to transmit the status data at predefinable or predefined time intervals, eg every minute, every 2, 5, 10 or 20 minutes, etc. In addition, or alternatively, each vehicle may be arranged to transmit the status data on predefined events, for example at each journey, at every stop, at each parking, after a predefined amount of energy consumption, at the availability of data transmission requirements (eg required mobile radio standard such as LTE, 3G, ...), Etc.

The current position or current position data of the vehicle can be determined by means of a navigation satellite system. The navigation satellite system can be any common and future global navigation satellite system (GNSS) for position determination and navigation by receiving the signals from navigation satellites and / or pseudolites. For example, these may be the Global Positioning System (GPS), GLOBAL NAVIGATION Satellite System (GLONASS), Galileo, positioning system, and / or BeiDou Navigation Satellite System. For example, the vehicle may comprise a module which is suitable for detecting a position of the vehicle in the respective system. In the example of GPS, the vehicle may include a position detection unit comprising a GPS module configured to determine the current GPS position of the vehicle.

Each vehicle may include a communication module. The communication module may be a communication module arranged in the vehicle, which is able to establish a communication connection with other communication participants, for example with the back-end server. The communication module may comprise a subscriber identity module or a SIM card, which serves to establish a communication connection via a mobile radio system. The subscriber identity module uniquely identifies the communication module in the mobile radio network. The communications link may be a data link (e.g., packet switch) and / or a wired communications link (e.g., circuit switch). Any communication between the vehicle and other communication participants may be via the communication module. Also, the transmission of the status data from the vehicle to the back-end server can be done via the communication module.

The backend server is also set up to record hazard situation data. The hazard situation data includes position data (see above, e.g., GPS position data) as well as a type of hazard situation. A type of dangerous situation, for example, a severe weather, a vehicle fire, a house fire, a (poison) -Gasaustritt from an industrial plant, a (terrorist) attack, a pile-up, a tumult, a wrong-way driver, an inattentive driver, a faulty autonomous vehicle function or one or erroneous trajectory planning in highly automated driving (HAF) or fully automated driving (VAF), a bomb finder, etc. Other dangerous situations are possible.

For example, the hazard situation data may be transmitted by a smart object and received at the backend server. The intelligent object can be, for example, a system of an emergency call center, which automatically transmits a data record containing the hazardous situation data to the back-end server when a dangerous situation occurs. Intelligent objects are capable of communicating with other communication participants, e.g., by means of a communication module (analogous to the communication module in the vehicle, see above). the backend server, in order to transfer data to the backend server. Further examples of intelligent objects are networked (road) infrastructure system objects, which can each use sensor sensors to capture their environment and transmit it to the backend server. An example is intelligent traffic lights, e.g. detect the passing of a red traffic light signal as a dangerous situation and transmit a data record comprehensive corresponding hazard situation data to the back-end server. Another example is intelligent motorway entrances, which can detect a wrong-way driver as a dangerous situation and can transmit a data record to the back-end server comprehensively corresponding hazard situation data. In addition, or alternatively, the backend server may be configured to provide hazard situation data at regular time intervals and / or to predefined events from a central hazard data pool, e.g. a central emergency call center to query or retrieve (polling). Each intelligent object can be registered once at the backend server by specifying appropriate parameters (for example, type and number of sensors, GPS position, etc.).

The back-end server is set up to evaluate the status data and the environment data with reference to the dangerous situation. For this purpose, known suitable techniques of data processing can be used. For example, the backend server can do a data analysis on the stored data as well as the environmental data relating to the hazard situation data (eg, machine learning analysis, data modeling, pattern recognition, predictive analysis, correlation analysis, etc.) to predict, calculate, or estimate implied relationships or conclusions for the stored hazard data identify. For this purpose, a variety of data learning algorithms and classification techniques such as Partial Least Square Regression (PLS regression), Random Forest and / or Principal Component Analysis (PCA) are considered.

The back-end server is set up to initiate at least one protective measure with respect to the evaluated status data and environment data. The protective measure includes controlling at least one vehicle having a fully autonomous driving mode.

Preferably, the environment data is retrieved periodically and / or with respect to the location of the threat situation by the backend server.

The backend server is set up to capture environmental data. The backend server can poll the environment data periodically for each predefined area. The backend server may poll the environment data over a suitable network, e.g. to retrieve the Internet from appropriate service providers or service providers. In addition, or alternatively, the backend server may be configured to collect the environment data via crowd sourcing (see below).

In addition or alternatively, the backend server is set up to actively retrieve environmental data related to the location of the hazardous situation. For example, the backend server may provide environmental data regarding a predefined range and / or radius of the location of the hazardous situation (e.g., digital road maps) over a suitable network, e.g. to retrieve the Internet from appropriate service providers or service providers.

• - Wetterdaten, die z.B. von ein oder mehreren Regen- und/oder Sonnen- und/oder Temperatursensoren im Fahrzeug und/oder am intelligenten Objekt erfasst werden;
• - aktuelle Umgebungsinformationen, die z.B. durch im oder am Fahrzeug und/oder am intelligenten Objekt angebrachte Kameras erfasst werden;
• - Wetterdaten;
• - aktuelle Verkehrsinformationen;
• - intelligente Verkehrszeichen;
• - Änderungen in der Straßenführung;
• - Daten von Drohnen die mit Sensoren (Bild, Video, Radar, etc.) ausgestattet sind;
• - Livebilder und/oder oder Daten aus der jüngsten Vergangenheit von mobilen Geräten wie z.B. Smartphones, Augmented Reality Brillen, Datenbrillen, Dashcams, etc.;)
• - weitere aktuelle Umgebungsdaten, die z.B. durch Kamera- und/oder Radar- und/oder Lidar- und/oder Sonarsensoren des Fahrzeugs und/oder des intelligenten Objekts angebracht werden.

In addition, or alternatively, the backend server may be configured to retrieve the environment data via crowd sourcing. In crowd sourcing, a wide variety of data from the vehicles and / or (possibly previously registered) intelligent objects can be transmitted to the central back-end server and centrally managed and evaluated beyond the hazard data. The additional data of the vehicles and / or intelligent objects may, for example, be:

• - Weather data, for example, of one or more rain and / or solar and / or temperature sensors detected in the vehicle and / or on the intelligent object;
• current environmental information acquired by, for example, cameras mounted in or on the vehicle and / or on the smart object;
• - weather data;
• - current traffic information;
• - intelligent traffic signs;
• - changes in the street management;
• - data from drones equipped with sensors (image, video, radar, etc.);
• - Live images and / or data from the recent past of mobile devices such as smartphones, augmented reality goggles, data glasses, dashcams, etc .;)
• - Other current environmental data, for example, by camera and / or radar and / or lidar and / or sonar sensors of the vehicle and / or the intelligent object are attached.

The intelligent objects can collect the data on predefined events and transmit it to the backend server. This can be done, for example, at regular time intervals, at predefined times and / or events. In addition or as an alternative to this, after the detected dangerous situation, the backend server can request intelligent objects and / or vehicles, which are located in a predefined area or radius around the dangerous situation, to detect one or more of the aforementioned data via the corresponding sensors and to the To transmit the backend server. In this example, it can be deposited in the single registration of the vehicles respectively, which sensors are installed on and / or in the vehicle.

• - eine Bevölkerungsdichte; und/oder
• - eine Verkehrsdichte zum Zeitpunkt der Gefahrensituation; und/oder
• - ein Gefahrenpotential von umliegenden Gebäuden, Arealen, Hallen, etc.; und/oder
• - Hauptverkehrsstraßen in einem vordefinierbaren Bereich um die Position der Gefahrensituation; und/oder
• - sonstige Gefahrendaten umfassend die den vordefinierbaren Bereich um die Position der Gefahrensituation.

Preferably, the environmental data include:

• - a population density; and or
• - a traffic density at the time of the dangerous situation; and or
• - a danger potential of surrounding buildings, areas, halls, etc .; and or
• - main roads in a predefinable area around the position of the dangerous situation; and or
• - other hazard data including the predefinable area around the position of the dangerous situation.

The state data preferably includes current fill state data of at least one energy store of the respective vehicle.

Depending on the drive concept of the vehicle, various energy stores are used, which can be detected during the single registration of the vehicle at the backend server, e.g. Fuel tank for internal combustion engine, (electric) battery for electric drive, hydrogen tank for hydrogen drive, etc. In hybrid drives, the respective drives in the vehicle are powered by different energy storage. In the combination of electric and combustion engine, for example, come as an energy storage battery and fuel tank used. The respective vehicle can determine or read out the filling state of the energy store (s), for example via a control unit. These correspond to the filling state data. Are relevant changes to the vehicle - such. a conversion, a tank enlargement, an extension of the battery storage, etc. - made, the data can change to the energy storage. If changes are made to the vehicle that lead to changes made to the back-end server, these must be updated on the back-end server. For this purpose, as part of the change, a "trigger" can be set via which the data is manually, e.g. be updated by the user of the vehicle, or automatically. In order to ensure a change of the data at the backend server, the trigger can for example be realized by a control unit of a sensor installed in the changed vehicle component (for example, expanded energy store). This controller is fixed (non-removable) to the changed vehicle component (e.g., pressure tank). At startup, the controller sends a component identification number (ID) to a central vehicle control unit. The central vehicle control unit matches the received component ID with (released) component IDs stored in the memory unit. If the component ID is not stored in the memory unit, the vehicle may transition to a safe state (e.g., no operation possible).

The increasing heterogeneity of the drive concepts of vehicles can harbor further dangers in dangerous situations, for example when it comes to a dangerous situation in connection with burning vehicles, further fires, terrorist attacks, etc. In particular, vehicles behave differently depending on the drive concept at high temperatures, fire, etc. It is difficult to impossible for rescue and / or emergency forces, the potential danger associated with the drive concepts of vehicles that are at or near such a dangerous situation to assess without further knowledge and thus to take appropriate security measures. The storage of the drive concepts for the respective vehicle (for example in the single registration at the backend server) as well as the acquisition of the current filling state data of the energy storage of the respective vehicle allow consideration of the drive concepts in the evaluation of the state data and environmental data with respect to the dangerous situation and during automatic initiation at least one protective measure with respect to the evaluated state data and environmental data. For example, the protective measure may include controlling or requesting vehicles whose drive concepts increase the danger situation to autonomously leave a predefinable area around the position of the dangerous situation. The protective measure preferably comprises transmitting an alternative route to vehicles affected by the dangerous situation and controlling the vehicles along the transmitted alternative route.

Each vehicle may include a navigation module in which a corresponding digital road map is stored locally in the vehicle. The navigation module and the position determination unit may be communicatively connected with each other. The backend server can detect vehicles that are affected by the dangerous situation.

For example, the hazardous situation may be a severe weather, e.g. a hailstorm, its. Evaluating the threat situation by the backend server may include identifying a current danger area on a digital map where the hailstorm is current, and identifying the areas that will pull from the hailstorm in the future. In a next step, the back-end server can determine vehicles comprising a fully autonomous driving mode whose route is located on the current and / or future hailstorm area and send them an alternative route. The backend server may control these vehicles to move along the avoidance route. The vehicles thus controlled may also evacuate people from hazardous areas and be taken to a safe geographical location (e.g., Hurricane Shelter) via a less dangerous route. When determining the alternative route, in addition to the weather data, traffic data, petrol station data, equipment data and availability at the safe geographical location (e.g., in the Hurricane Shelter) may be taken into account.

Preferably, the protective measure comprises transmitting an evacuation route to vehicles affected by the dangerous situation as well as controlling the vehicles along the evacuation route.

For example, the current hazardous situation may be a vehicle fire in a parking garage. The evaluation by the backend server can result in the determination of a danger zone around the position of the dangerous situation as well as the determination of vehicles which are located in the danger zone. The back-end server may transmit an evacuation route to the vehicles that are in the danger zone and steer the vehicles to move out of the danger zone along the evacuation route. For example, the evacuation route during vehicle fire in the underground car park can be a route out of the underground car park. Thus, all vehicles including an autonomous driving mode can be controlled so that they move out of the parking garage.

Preferably, the protective measure comprises controlling vehicles which are located in a predefined area around the dangerous situation, in such a way that no further road users can penetrate into the predefined area.

For example, the dangerous situation can be a burning building. The backend server can control vehicles located within a 1km radius of the hazardous situation to position themselves on roads leading to the burning building such that a roadblock results in roads leading to the burning building , Thus, no more vehicles can enter the area around the dangerous situation. When approaching rescue service vehicles of all kinds, the back-end server can control the vehicles in such a way that they allow the rescue service vehicles to enter and then reformat themselves to the roadblock.

• - Aktivieren der Warnblinkanlage; und/oder
• - Projizieren eines warnenden Leuchtsignals auf die Straße; und/oder
• - Aussenden eines digitalen Warnsignals an Infrastruktur-Objekte.

Preferably, controlling the at least one vehicle comprises

• - activate the hazard warning lights; and or
• - projecting a warning light signal on the road; and or
• - Send a digital warning signal to infrastructure objects.

The evaluation of the condition data and environment data with respect to the dangerous situation may include a determination of vehicles which are located in a predefined area around the position of the dangerous situation. The backend server may control the detected vehicles to activate the hazard warning lights and / or to project one or more warning beacons onto the road in a known manner to alert other road users. In addition, or alternatively, the backend server may control the detected vehicles to provide a suitable digital alert to digital infrastructure objects in the sense of vehicle-to-infrastructure (V2I) communication. V2I communication involves the communication of vehicles with (traffic) infrastructure objects such as e.g. Radio beacons, traffic lights, intelligent traffic systems, etc.

• 1 zeigt ein schematisches System, das geeignet ist, ein Verfahren zur Erhöhung der Sicherheit bei Gefahrensituationen im Straßenverkehr du rchzufü hren;
• 2 zeigt ein Flussdiagramm, das ein Verfahren zur Erhöhung der Sicherheit bei Gefahrensituationen im Straßenverkehr veranschaulicht.

These and other objects, features and advantages of the present invention will become more apparent from a study of the following detailed description of preferred embodiments and the accompanying drawings. It will be appreciated that although embodiments are described separately, individual features thereof may be combined to form additional embodiments.

• 1 shows a schematic system that is suitable for implementing a method for increasing safety in dangerous situations on the road;
• 2 shows a flowchart illustrating a method for increasing the safety in dangerous situations in traffic.

1 shows a schematic system 100 that is suitable for a procedure 200 to increase safety in hazardous situations on the road. The method will be discussed below with reference to 2 explained in more detail.

The system 100 includes at least one backend server 120 , The backend server 120 is a central data pool and can be a computing unit 124 , a communication unit 122 , as well as a storage unit 125 , eg a database. In the backend server 120 Data can be centrally stored, managed and processed centrally. In particular, vehicle-related data can also be stored, managed and processed outside the vehicle.

It may be necessary for the user of each vehicle 110 first at the backend server 120 (or any other suitable computing unit providing a corresponding service) a one-time registration of the vehicle 110 performed (eg set up or created a suitable account). The one-time registration may include the deposit of a suitable vehicle identification number (ID).

The one-time registration can also be the deposit of the or the drive concepts of the vehicle 110 as drive data. The drive data includes data regarding the drive (s) of the respective vehicle 110 , eg exclusive combustion engine, plug-in hybrid, pure electric vehicle, (additional) pressure vessel for storing natural gas or Hydrogen (eg cyrogenic pressure vessel for storage of hydrogen, high-pressure gas storage for storage of hydrogen, pressure vessel for storage of compressed or liquefied natural gas, etc.). Other common and / or future types of drive are conceivable. So can data following from the respective vehicle 110 to the backend server 120 be transmitted or sent to the vehicle 110 and the drive concept (s). Be relevant changes to the vehicle 110 - Such as a conversion, a tank magnification, an extension of the battery storage, etc. - made, the drive data may change. Changes are made to the vehicle resulting in changes to the backend server 120 stored drive data, they must be on the backend server 120 to be updated. For this purpose, a "trigger" can be set as part of the change, via which the drive data is manually, for example by the user of the vehicle 110 , or automatically updated. To change the data on the backend server 120 For example, the trigger can be realized by a control unit of a sensor installed in the modified vehicle component (eg expanded energy store). This control unit is fixed (not removable) with the changed vehicle component (eg pressure tank) connected. At startup, the controller sends a component identification number (ID) to a central vehicle control unit. The central vehicle control unit matches the received component ID with (released) component IDs stored in the memory unit. If the component ID is not stored in the memory unit, the vehicle can 110 go into a safe state (eg no operation possible).

The user of the vehicle 110 may for example be its owner, administrator, driver, etc.

The backend server 120 can be set up status data from a variety of vehicles 110 to recieve.

Under the term vehicle 110 fall in particular passenger cars (cars), but also commercial vehicles (eg trucks (trucks), campers), RVs, etc., but also manned flying objects and / or unmanned drones have at least a fully autonomous mode of travel or mode of travel. vehicles 110 , which include a fully autonomous or automatic driving mode, can autonomously in a known manner by means of an autopilot 114 move in traffic or in a traffic area or airspace. Thus, driving the vehicle 110 independent of a user or driver of the vehicle 110 respectively. While the fully autonomous driving mode is active, the autopilot processes 114 continuously updated environmental data. This is a variety of different sensors 118 in or on the vehicle 110 attached to current sensor data regarding the environment of the vehicle 110 capture. With the sensors 118 These may be, for example, ultrasonic sensors, lidar sensors, radar sensors, cameras, etc. The detected sensor data are then in the control unit or control device 116 to environmental data processed to an environmental model of the vehicle 110 to investigate. Based on the environment model, the fully autonomous driving mode is executed.

The status data comprise at least current position data of the respective vehicle 110 ,

In addition, the state data can be actual fill state data of at least one energy store of the respective vehicle 110 include. Depending on the drive concept of the vehicle 110 Various energy storage (not shown) are used, the one-time registration of the vehicle 110 on the backend server 120 can be detected, for example fuel tank in the internal combustion engine, (electric) battery in electric drive, hydrogen tank in hydrogen drive, etc. In hybrid drives, the respective drives in the vehicle are powered by different energy storage. In the combination of electric and combustion engine, for example, come as an energy storage battery and fuel tank used. The respective vehicle can the filling state of the (or the) energy storage (s), for example via the control unit 116 or another, the functionality providing unit determine or read. These correspond to the filling state data. In other words, the fill state data includes at least the currently stored amount of energy and the type of energy of the vehicle 110 , These are sent to the backend server 120 transfer. In the case of a pressure tank, the filling state data may also include its expansion energy in the respective state. In the case of chemical energy stores or in the case of the chemical storage of the energy, the filling state data can also contain information about the stored medium (hydrogen, natural gas, etc.). In the case of batteries, the filling state data can also include data relating to the installed or used cells, for example their chemical composition, size and / or design.

Advantageously, the filling state data allow the hazard potential of the respective vehicle 110 but also that this potential danger can be evaluated in combination with different events.

In another example, only the sensor data can be sent to the backend server 120 the fill state data and, if applicable, the expansion energy for the pressure tanks through the backend server 120 be determined in a manner known in the art.

Every vehicle 110 can be set up the state data in predefined or predefined time intervals, eg every minute, every 2, 5, 10 or 20 minutes to the backend server 120 to convey. In addition, or alternatively, any vehicle 110 be set up to transmit the status data to predefined events, for example at each journey, at every stop, at each parking, after a predefined amount of energy consumption, at availability of data transmission requirements (eg required mobile radio standard (eg LTE, 3G), etc.).

The current position or current position data of the vehicle 110 can be determined using a navigation satellite system. The navigation satellite system can be any common and future global navigation satellite system (GNSS) for position determination and navigation by receiving the signals from navigation satellites and / or pseudolites. For example, these may be Global Positioning System (GPS), GLOBAL NAvigation Satellite System (GLONASS), Galileo, positioning system, and / or BeiDou Navigation Satellite System. For example, the vehicle 110 comprise a module which is suitable for detecting a position of the vehicle in the respective system. In the example of GPS, the vehicle may have a position detection unit 115 comprising a GPS module (not shown) adapted to the current GPS position of the vehicle 110 to investigate.

Every vehicle 110 In addition, a communication module 112 include. The communication module 112 is able to communicate with other communication parties, such as the backend server 120 to build up. The communication module 112 may comprise a subscriber identity module or a SIM card (not shown) which serves to establish a communication connection via a mobile radio system. The subscriber identity module identifies the communication module 112 clearly in the mobile network. The communication connection may be a data connection (eg packet switching) and / or a wired communication connection (eg circuit switching). Any communication between the vehicle 110 and other communication participants - also transmitting the condition data from the vehicle 110 to the backend server 120 - can via the communication module 112 respectively.

The backend server 120 is also set up to capture environmental data. For example, the backend server 120 Recall the environment data periodically for each predefined area. The backend server 120 can retrieve the environment data via a suitable network, eg the Internet, from corresponding service providers or service providers.

In addition, or alternatively, the backend server 120 be set up to capture the environmental data via so-called crowd sourcing. The detection of the environment data will be described in more detail below.

The backend server 120 is also set up to record hazard situation data. The hazard situation data include a position or position data (see above, eg GPS position data) as well as a kind of dangerous situation. A dangerous situation may be, for example, a severe weather, a vehicle fire, a house fire, a (poison) -Gasaustritt from an industrial plant, a (terrorist) attack, a pile-up, a tumult, a wrong-way driver, a bomb, etc. All other dangerous situations are possible.

For example, the hazard situation data may be from a smart object 130A ... 130N transmitted and on the backend server 120 be received. The intelligent object 130 A ... 130N For example, it may be a system of an emergency call center which, upon the occurrence of a dangerous situation, automatically obtains a data record comprising the dangerous situation data to the backend server 120 transmitted. Intelligent objects are capable of using a communication module 132A ... 132N (analogous to the communication module 112 in the vehicle 110 , see above) a communication connection with other communication participants, such as the backend server 120 , build, and so data to the backend server 120 to convey. Other examples of intelligent objects are networked (road) infrastructure systems, each with corresponding sensors - analogous to vehicles 110 - be able to capture their environment and send it to the backend server 120 can transmit. In addition, or alternatively, the backend server 120 be set up to interrogate or retrieve hazardous situation data at regular intervals from a central hazard data pool, such as a central emergency call center, for example by a corresponding request to the communication module 132A ... 132N the corresponding intelligent object 130A ... 130N he follows. Thereupon, a control module 136A ... 136N the corresponding intelligent object (s) 130A ... 130N control such that the hazard situation data (for example, via appropriate sensors) detected and sent to the back-end server 120 be transmitted.

The backend server 120 may be configured to retrieve (possibly further) environmental data related to the location of the hazardous situation. This may in particular be the case if the dangerous situation is not detected by periodically retrieved environmental data. In another example, the backend server may be 120 always retrieve the environmental data related to the hazard situation when a hazardous situation is detected. For example, the backend server 120 Environment data concerning a predefined area and / or radius retrieve the position of the dangerous situation (eg digital road maps) via a suitable network, eg the Internet, from corresponding service providers or service providers.

• - Wetterdaten, die z.B. von ein oder mehreren Regen- und/oder Sonnen- und/oder Temperatursensoren des Fahrzeugs 110 und/oder des intelligenten Objekts 130A ... 130N erfasst werden;
• - aktuelle Umgebungsinformationen, die z.B. durch im oder am Fahrzeug 110 und/oder intelligenten Objekt angebrachte Kameras erfasst werden;
• - weitere aktuelle Umgebungsdaten, die z.B. durch Radar- und/oder Lidar- und/oder Sonarsensoren des Fahrzeugs 110 und/oder intelligenten Objekts 130A ... 130N erfasst werden; und/oder
• - Daten hinsichtlich einer Bevölkerungsdichte;
• - Daten hinsichtlich einer Verkehrsdichte zum Zeitpunkt der Gefahrensituation;
• - Daten hinsichtlich eines Gefahrenpotential von umliegenden Gebäuden, Arealen, Hallen, Fahrzeugen (z.B. unaufmerksame Fahrer oder fehlerhafte HAF oder VAF-Systeme), etc.;
• - Daten bezüglich Hauptverkehrsstraßen in einem vordefinierbaren Bereich um die Position der Gefahrensituation; und/oder
• - sonstige Gefahrendaten umfassend die den vordefinierbaren Bereich um die Position der Gefahrensituation.

In addition, or alternatively, the backend server 120 be set up to capture the environmental data via so-called crowd sourcing. With crowd sourcing, the most diverse data from the vehicles can go beyond the danger data 110 as well as other participating intelligent objects130A ... 130N to the backend server 120 be transmitted and managed centrally. In the environmental data of the vehicles 110 and / or the intelligent objects 130A ... 130N For example, it can be:

• - Weather data, for example, of one or more rain and / or sun and / or temperature sensors of the vehicle 110 and / or the intelligent object 130A ... 130N be recorded;
• - Current environment information, eg by in or on the vehicle 110 and / or intelligent object mounted cameras are detected;
• - Other current environmental data, for example, by radar and / or Lidar- and / or sonar sensors of the vehicle 110 and / or intelligent object 130A ... 130N be recorded; and or
• - population density data;
• - data concerning traffic density at the time of the dangerous situation;
• - Data regarding the potential danger of surrounding buildings, areas, halls, vehicles (eg inattentive drivers or faulty HAF or VAF systems), etc .;
• Data relating to major roads in a predefinable area around the position of the dangerous situation; and or
• - other hazard data including the predefinable area around the position of the dangerous situation.

The vehicles 110 and / or intelligent objects 130A ... 130N can capture the data about predefined events and to the backend server 120 to transfer. This can be done, for example, at regular time intervals, at predefined times and / or events. In another example, the vehicles may 110 and / or intelligent objects 130A ... 130N Data to the backend server 120 transmitted if detected via one or more sensors, at least one significant change. Advantageously, the transfer of relevant data to the backend server 120 reduces and thus relieves the data transmission medium used (eg mobile network). In addition, or alternatively, the backend server 120 after detected danger situation vehicles 110 and / or intelligent objects 130A ... 130N that are in a predefined area or radius around the dangerous situation, request to capture one or more of the aforementioned data via the corresponding sensors and to the backend server 120 to convey. In this example, at the single registration of the vehicles 110 and upon previous registration of the smart objects 130A ... 130N - eg by their operators - on the backend server 120 each deposited, which sensors on and / or in the vehicle 110 or intelligent object 130A ... 130N are installed. After a single registration, the intelligent objects 130A ... 130N capture other danger data, such as weather data, traffic information, changes in the road, etc. and to the backend server 120 to transfer.

The increasing heterogeneity of the drive concepts of vehicles 110 In the case of dangerous situations, it can harbor further dangers, for example if there is a dangerous situation in connection with burning vehicles, fires, terrorist attacks, etc. In particular, vehicles behave differently depending on the drive concept at high temperatures, fire, etc. It is for rescue and / or emergency services, it is difficult to impossible, the potential danger associated with the drive concepts of vehicles that are in or to such a dangerous situation without further knowledge and thus to take appropriate security measures. The deposit of the drive concepts for the respective vehicle (for example, during the single registration at the backend server) as well as the recording of the current one Fill state data of the energy storage of the respective vehicle 110 allow consideration of the drive concepts in the evaluation of the status data and environment data with reference to the danger situation by the backend server 120 and at the automatic initiation of at least one protective measure with respect to the evaluated status data and environmental data. For example, the protective measure may be driving or prompting vehicles 110 whose drive concepts increase the danger situation, for autonomous leaving a predefinable area to include the position of the dangerous situation.

The backend server 120 is set up to evaluate the status data and the environmental data with reference to the dangerous situation. For this purpose, known suitable techniques of data processing can be used. For example, the backend server 120 Perform data analysis on the stored data and environmental data related to the hazard situation data (eg, machine learning analysis, data modeling, pattern recognition, predictive analysis, correlation analysis, etc.) to predict implicit relationships or conclusions for the hazard potential data calculate or identify. For this purpose, a variety of data learning algorithms and classification techniques such as Partial Least Square Regression (PLS regression), Random Forest and / or Principal Component Analysis (PCA) are considered.

The backend server 120 is set up to initiate at least one protective measure with regard to the evaluated status data and environmental data. The protective measure comprises controlling at least one vehicle 120 which has a fully autonomous driving mode.

The at least one protective measure may be to transmit an alternative route to vehicles affected by the dangerous situation 110 as well as controlling the vehicles 110 along the transmitted alternative route.

Each vehicle can be a navigation module 117 include in which a corresponding digital road map is stored locally in the vehicle. The navigation module 117 and the position determination unit 115 can be communicatively connected. In this example, the navigation module 115 and the position determination unit comprises separate modules and part of the driver assistance device 114 , But they can also be designed as separate modules or units communicatively or electrically with the autopilot 114 are connected.

The backend server 120 can vehicles 110 which are affected or affected by the dangerous situation.

For example, the dangerous situation may be a storm, for example a hailstorm. The evaluation of the dangerous situation by the backend server 120 may include the identification of a current hazard area on a digital map where the hailstorm is current, and the identification of the hazard areas likely to be affected by the hailstorm. In a next step, the backend server 120 vehicles 110 comprehensively determining a fully autonomous driving mode whose route lies in or through the danger areas and transmit an alternative route to them. The backend server 120 can these vehicles 110 control so that they move along the evasive route. For example, the navigation module 117 take the alternative route. The backend server 120 can the autopilot 114 instruct the vehicle 110 to control autonomously along the evasive route.

In addition, or alternatively, the protective measure comprises transmitting an evacuation route to vehicles affected by the dangerous situation 110 as well as controlling the vehicles 110 along the evacuation route.

For example, the current hazardous situation may be a vehicle fire in a parking garage. The evaluation by the backend server 120 can be the identification of a danger zone around the position of the dangerous situation as well as the determination of vehicles 110 that are in the danger zone include. The backend server 120 can the vehicles 110 who are in the danger zone, submit an evacuation route and the vehicles 110 steer such that they move along the evacuation route. For example, the navigation module 117 take the evacuation route and the backend server 120 can the autopilot 114 instruct the vehicle 110 to control autonomously along the evasive route.

In another example, a vehicle may 110 include a hydrogen drive. The vehicle 110 can a corresponding energy storage, such as a pressure vessel system for a motor vehicle (eg passenger cars, motorcycles, commercial vehicles) include. The pressure vessel system is used to store under ambient conditions gaseous fuel. The pressure vessel system can be used for example in a motor vehicle which is operated with hydrogen.

Such a pressure vessel system comprises at least one pressure vessel, in particular a composite overwrapped pressure vessel (= COPV). The pressure vessel may be, for example, a cryogenic pressure vessel (= CcH2 or COP) or a high-pressure gas vessel (= CGH2).

High-pressure gas containers are designed to store fuel at ambient temperatures permanently at a nominal operating pressure (also called nominal working pressure or NWP) of about 350 bar (= overpressure relative to the atmospheric pressure), furthermore preferably of about 700 bar or more. A cryogenic pressure vessel is suitable to store the fuel at the aforementioned operating pressures even at temperatures well below the operating temperature of the motor vehicle.

Breaks near the vehicle 110 Fire off, it comes to a rising ambient temperature. The rising ambient temperature leads to a structural weakening of the pressure vessel, whereby the risk of tank rupture exists. To minimize this risk, the backend server can 120 the vehicle 110 submit an evacuation route and the vehicle 110 steer so that it moves along the evacuation route. For example, the navigation module 117 take the evacuation route and the backend server 120 can the autopilot 114 instruct the vehicle 110 to control autonomously along the evasive route.

In addition, or alternatively, the protective measure includes controlling vehicles 110 who are in a predefined area around the dangerous situation, to position themselves in such a way that no further road users can penetrate into the predefined area.

For example, the dangerous situation can be a burning building. The backend server 120 can vehicles 110 that control themselves at a predefined radius of, for example, 1km around the burning building so that they form in a formatting on roads that lead to the burning building, so that results in a roadblock. Thus, no other road users can penetrate into the predefined area around the dangerous situation, which reduces the risk potential.

• - Aktivieren der Warnblinkanlage; und/oder
• - Projizieren eines warnenden Leuchtsignals auf die Straße.

In addition or alternatively, the controlling of the at least one vehicle comprises 110 the

• - activate the hazard warning lights; and or
• - projecting a warning light signal on the road.

The evaluation of the status data and environment data with reference to the danger situation by the backend server 120 can be an investigation of vehicles 110 which are located in a predefined area around the position of the dangerous situation include. The backend server can determine the detected vehicles 120 control such that their hazard warning lights is activated and / or one or more warning flares is projected in a known manner on the road or the ground or are. Advantageously, thus other road users are warned.

2 shows a flowchart illustrating a method 200 to increase safety in hazardous situations in road traffic as described above with reference to 1 described, illustrated.

The procedure 200 includes receiving 210 , on a backend server 120 , condition data of a variety of vehicles 110 comprising an autonomous driving mode, wherein the status data at least current position data of the respective vehicle 110 include. In addition, the state data can be actual fill state data of at least one energy store of the respective vehicle 110 include. As already stated above, the fill state data include at least the currently stored amount of energy and the type of energy of the vehicle 110 , These are sent to the backend server 120 transfer. In the case of a pressure tank, the filling state data may also include its expansion energy in the respective state. In the case of chemical energy stores or in the case of the chemical storage of the energy, the filling state data can also contain information about the stored medium (hydrogen, natural gas, etc.). In the case of batteries, the filling state data can also include data relating to the installed or used cells, for example their chemical composition, size and / or design.

The method includes polling 215 of environmental data related to the hazardous situation. For example, the backend server 120 periodically retrieve the environmental data for each predefined area.

• - eine Bevölkerungsdichte;
• - eine Verkehrsdichte zum Zeitpunkt der Gefahrensituation;
• - ein Gefahrenpotential von umliegenden Gebäuden, Arealen, Hallen, etc.;
• - Hauptverkehrsstraßen in einem vordefinierbaren Bereich um die Position der Gefahrensituation; und/oder
• - sonstige Gefahrendaten umfassend die den vordefinierbaren Bereich um die Position der Gefahrensituation

umfassen.In addition, the method comprises a detection 220 , on the backend server 120 hazard situation data comprising a position and a type of dangerous situation. If a dangerous situation is detected, 220 , the procedure can retrieve 230 of environmental data related to the position of the hazardous situation, the environmental data

• - a population density;
• - a traffic density at the time of the dangerous situation;
• - a danger potential of surrounding buildings, areas, halls, etc .;
• - main roads in a predefinable area around the position of the dangerous situation; and or
• - other hazard data including the predefinable area around the position of the dangerous situation

include.

In particular, if the backend server detects a hazardous situation regardless of currently accessed environmental data related to the threat situation, the backend server may 120 may be configured to retrieve environmental data related to the location of the hazardous situation. For example, the backend server 120 Retrieve environmental data regarding a predefined area and / or radius around the position of the dangerous situation (eg digital road maps) via a suitable network, eg the Internet, from corresponding service providers or service providers.

In a next step, an evaluation takes place 240 the condition data and environment data with respect to the dangerous situation as well as an automatic initiation 250 at least one protective measure with respect to the evaluated state data and environmental data, wherein the protective measure comprises controlling at least one vehicle comprising an autonomous driving mode.

For example, the protective measure can be a transmission of an alternative route to vehicles affected by the dangerous situation 110 as well as controlling the vehicles 110 along the transmitted alternative route.

In addition, or alternatively, the protective measure may include transmitting an evacuation route to vehicles affected by the hazardous situation 110 as well as controlling the vehicles 110 along the evacuation route.

In addition, or alternatively, the protective measure may include controlling vehicles 110 which are in a predefined area around the dangerous situation to position themselves in such a way that no further road users can penetrate into the predefined area.

• - Aktivieren der Warnblinkanlage aktivieren; und/oder
• - Projizieren eines warnendes Leuchtsignal auf die Straße

umfassen.In addition or alternatively, the controlling of the at least one vehicle 110 on

• - activate activation of hazard warning lights; and or
• - projecting a warning light signal on the road

include.

Claims (8)

Method (200) for increasing safety in dangerous situations, comprising: Receiving (210), at a backend server (120), state data of a plurality of vehicles (110) including an autonomous driving mode, the state data including at least current position data of the vehicles (110); Detecting (220) at the backend server (120) hazard situation data comprising a location and a type of hazard situation; Evaluating (240) the condition data and environmental data related to the hazardous situation; and automatic (250) introducing at least one protection measure with respect to the evaluated state data and environment data, wherein the protection measure comprises controlling at least one vehicle (110) comprising an autonomous driving mode. Method according to Claim 1 wherein the environmental data may be retrieved periodically (215) from and / or with respect to the location of the hazardous situation (230) by the backend server (120). Method (200) according to Claim 1 or 2 , where the environmental data includes: - a population density; and / or - a traffic density at the time of the dangerous situation; and / or - a hazard potential of surrounding buildings, areas, halls, etc .; and / or major roads in a predefinable area around the location of the hazardous situation; and / or - other hazard data including the predefinable area around the position of the hazardous situation. Method (200) according to one of the preceding claims, wherein the state data comprise current fill state data of at least one energy store of the respective vehicle (110). Method (200) according to one of the preceding claims, wherein the protective measure includes transmitting an alternative route to vehicles affected by the dangerous situation (110) and controlling the vehicles along the transmitted alternative route. Method (200) according to one of the preceding claims, wherein the protective measure comprises transmitting an evacuation route to vehicles (110) affected by the dangerous situation as well as controlling the vehicles along the evacuation route. Method (200) according to one of the preceding claims, wherein the protective measure is to position a vehicle (110) which is located in a predefined area around the dangerous situation in such a way that no further road users can penetrate into the predefined area. Method (200) according to one of the preceding claims, wherein controlling the at least one vehicle (110) - activate activation of hazard warning lights; and or - projecting a warning light signal on the road; and or - Transmission of a digital warning signal to infrastructure objects includes.

Images