Formal Verification of V2I aided Autonomous Driving Ishan Pardesi - - PowerPoint PPT Presentation

formal verification of v2i aided autonomous driving
SMART_READER_LITE
LIVE PREVIEW

Formal Verification of V2I aided Autonomous Driving Ishan Pardesi - - PowerPoint PPT Presentation

Formal Verification of V2I aided Autonomous Driving Ishan Pardesi Dhruv Mahajan A hybrid systems approach 1 The problem Safety of Autonomous cars is paramount! It is important to invest in developing formal verification techniques to


slide-1
SLIDE 1

Formal Verification of V2I aided Autonomous Driving A hybrid systems approach

Ishan Pardesi Dhruv Mahajan

1

slide-2
SLIDE 2

The problem

Safety of Autonomous cars is paramount! It is important to invest in developing formal verification techniques to ensure safety of autonomous vehicles.

2

slide-3
SLIDE 3

3

Proposed Solution

Formally verify all car maneuvers for safety using differential dynamic logic while designing the system Use smart road infrastructure to validate all car maneuvers for safety before the maneuver is made in real time

slide-4
SLIDE 4

If a car maintains sufficient distance from other cars such that it can

  • brake or
  • change lanes

in time to avoid a collision, then it is safe.

4

Defining Safety

slide-5
SLIDE 5

Can that be Guaranteed?

An autonomous car always operates from a limited awareness of its environment. If only the car new everything about its environment well in advance, there would be no collisions.

5

slide-6
SLIDE 6

Smart Infrastructure as a solution

Intelligent nodes at regular distances

  • n the Highway
  • Allows the car to see beyond it’s

sensing capabilities

  • Enforces dynamic regulations,
  • eg. Speed Limits
  • Better & accurate control

decisions

  • Increases safety - more

determinism

  • Increases efficiency

6

slide-7
SLIDE 7

The Model

7

slide-8
SLIDE 8

Elements of the Model

Highway A two lane smart highway laid with intelligent nodes at regular distance creating a robust V2I infrastructure Autonomous Car Objective is to reach the goal without any collision Obstacles Obstructions for the car

  • static, or moving,

introduced one at a time every D/2 distance

8

slide-9
SLIDE 9
  • Two Lanes
  • Highway Speed Limit (VSL)-

~ 155 mph

  • Inter Node Distance (D/2)

= 150 meters (can be higher)

  • Range diameter of node - (D)

= 300 meters (can be higher)

  • Finite Time to change lanes

~ 1-2 seconds

  • Next Control Decision - within

1 meter

  • Can change lanes within D/2 distance (even at VSL )

General Assumptions - Highway

9

slide-10
SLIDE 10

Modelling overview

(Preconditions) -> [ (Controller; differential dynamics)* @ invariant ] (Post Condition)

10

slide-11
SLIDE 11

Let’s Build the Models Step by Step

11

slide-12
SLIDE 12

No obstacle on the road

12

slide-13
SLIDE 13

Introducing an obstacle

▸ Constant Velocity ▸ Car & obstacle in same lane ▸ Time to change lanes δ = 1 sec ▸ Single Obstacle

13

slide-14
SLIDE 14

Model Explained

Car is safe initially -> [ { {If sufficient distance to change lanes after 1 control cycle => Continue or change lanes Else Change lanes NOW}; {Differential dynamics} } @ {If lane changing =>must complete without collision OR it must be safe to change lanes} ] (No collision - Safety Condition)

14

slide-15
SLIDE 15

Limited Sensing Capability

▸ Upto 80-100 meters ▸ Can’t see beyond 1-2 vehicles ▸ Nodes allow to see beyond ▸ Allows better control decisions

15

slide-16
SLIDE 16

Model explained

▸ Constant Velocity ▸ Multiple obstacles on road ▸ New obstacle in next D/2 block of road ▸ New information available after each node

16

slide-17
SLIDE 17

Model explained

17

slide-18
SLIDE 18

Car is safe initially -> [ ] (No collision)

Model explained

18

slide-19
SLIDE 19

Car is safe initially -> [ {Crosses Node and gets info about next D distance} { {If sufficient distance to change lanes after 1 control cycle => Continue or change lanes Else Change lanes NOW}; ] (No collision)

Model explained

19

slide-20
SLIDE 20

Car is safe initially -> [ {Crosses Node and gets info about next D distance} { {If sufficient distance to change lanes after 1 control cycle => Continue or change lanes Else Change lanes NOW}; {Differential dynamics}} ] (No collision)

Model explained

20

slide-21
SLIDE 21

Car is safe initially -> [ {Crosses Node and gets info about next D distance} { {If sufficient distance to change lanes after 1 control cycle => Continue or change lanes Else Change lanes NOW}; {Differential dynamics}} @ {If lane changing =>must complete without collision OR it must be safe to change lanes} ] (No collision)

Model explained

21

slide-22
SLIDE 22

Consider all cases in the model. For example

Proof strategy intuition

22

slide-23
SLIDE 23

Consider all cases in the model. For example If lane change just completed

Proof strategy intuition

23

slide-24
SLIDE 24

Consider all cases in the model. For example If lane change just completed If the car just crossed a node

Proof strategy intuition

24

slide-25
SLIDE 25

Consider all cases in the model. For example If lane change just completed If the car just crossed a node If there is a node ahead in the same lane

Proof strategy intuition

25

slide-26
SLIDE 26

Consider all cases in the model. For example If lane change just completed If the car just crossed a node If there is a node ahead in the same lane If the car will not have time to change lanes after the next time cycle T

Proof strategy intuition

26

slide-27
SLIDE 27

Consider all cases in the model. For example If lane change just completed If the car just crossed a node If there is a node ahead in the same lane If the car will not have time to change lanes after the next time cycle T Begin the lane change procedure immediately.

Proof strategy intuition

27

slide-28
SLIDE 28

Consider all cases in the model. For example If lane change just completed If the car just crossed a node If there is a node ahead in the same lane If the car will not have time to change lanes after the next time cycle T Begin the lane change procedure immediately. Solve the ODE and check if the car is safe or not

Proof strategy intuition

28

slide-29
SLIDE 29

Subsequent Models

In the subsequent models, we allow the following capabilities while ensuring safety- ▸ Accelerate ▸ Decelerate ▸ Lane changing (even when not necessary)

29

slide-30
SLIDE 30

Future Work

▸ Moving Obstacles ▸ Dynamic change in # of lanes ▸ Combining all into one ▸ Hybrid Games (dGL) Approach

30

slide-31
SLIDE 31

Implications of the approach

Policy Implications Ownership of accident responsibility Infrastructure ensured safe driving - more freedom to automakers. Ensuring strict enforcement

  • f road laws

Technology Implications Brings determinism and safety guarantees in autonomous driving High driving efficiency by increased road awareness Allows better transport planning and traffic optimization.

31

slide-32
SLIDE 32

Acknowledgements

▸ Professor André Platzer ▸ Yong Kiam Tan (TA) ▸ Mengze Li (TA)

32

slide-33
SLIDE 33

References

  • Original reference of Image on slide 6 (largely modified)
  • https://bit.ly/2LaorIi
  • Presentation template by SlidesCarnival

33

slide-34
SLIDE 34

THANKS!

Questions?

34