Autonomous, not driverless

<table cellpadding="0" cellspacing="0" class="tr-caption-container" style="float: right; margin-left: 1em; text-align: right;"><tbody><tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPI9R5JTdt8f_Ry79uqtwziv8H7RhE7h4-8jj5Fwvo5eMTii56luXWSbYBYEEXAHARqnLNh1faz_6U6_ZyEEMd7i8pWvCf8zs-ucTDpGkQhgXNcB9BJGaVuH5zZoto6kethLv8bdXLK_w/s1600/paul_leroux_photo_crop_v3_thumb.jpg" imageanchor="1" style="clear: right; margin-bottom: 1em; margin-left: auto; margin-right: auto;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPI9R5JTdt8f_Ry79uqtwziv8H7RhE7h4-8jj5Fwvo5eMTii56luXWSbYBYEEXAHARqnLNh1faz_6U6_ZyEEMd7i8pWvCf8zs-ucTDpGkQhgXNcB9BJGaVuH5zZoto6kethLv8bdXLK_w/s1600/paul_leroux_photo_crop_v3_thumb.jpg" /></a></td></tr><tr align="center"><td class="tr-caption"><span style="font-size: x-small;"><b>Paul Leroux</b></span></td></tr></tbody></table>I don't know about you, but I'm looking forward to the era of self-driving cars. After all, why spend countless hours negotiating rush-hour traffic when the car could do all the work? Just think of all the things you could do instead: read a novel, Facebook with friends, or even watch Babylon 5 re-runs.<br /><br />Unlike Babylon 5, this scenario is no longer a page out of science fiction. It’s coming soon, <a href="http://qnxauto.blogspot.ca/2012/12/volvo-to-ship-self-driving-cars-in-2014.html">faster than many imagine</a>. That said, the story of the self-driving car still has a few unfinished chapters — chapters in which the human driver still has an important role to play. Yes, that means you.<br /><br />As I’ve discussed in <a href="http://qnxauto.blogspot.ca/2012/07/future-of-self-driving-car-aint-what-it.html">previous posts</a>, the fully autonomous car is a work in progress. In fact, some of the technologies that will enable cars to drive themselves (adaptive cruise control, forward collision avoidance, etc.) are already in place. Moreover, research suggests that these technologies can, among other things, <a href="http://qnxauto.blogspot.ca/2012/09/will-adaptive-cruise-control-spell-end.html">improve traffic flow</a> and <a href="http://qnxauto.blogspot.ca/2012/07/will-autonomous-car-tech-save-your-life.html">reduce accidents</a>. But does that mean you will soon be able to sit back, close your eyes, and let the car do everything? Not quite.<br /><br /><span style="color: #073763;"><b>Evolution, not revolution</b></span><br />If you ask me, <a href="http://www.wired.com/opinion/2013/01/forget-the-internet-of-things-here-comes-the-internet-of-cars/">Thilo Koslowski</a> of Gartner hit the bull's eye when he said that self-driving cars will go through three evolutionary phases: from automated to autonomous to unmanned. Until we reach the endpoint, we should pay heed to the words of <a href="http://www.usatoday.com/story/driveon/2013/01/07/audi-toyota-driverless-cars/1815399/">Toyota's Jim Pisz</a>: autonomous does not mean driverless.<br /><br /><table cellpadding="0" cellspacing="0" class="tr-caption-container" style="float: right; margin-left: 1em; text-align: right;"><tbody><tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgBaa1fpcHilPB1URKQlSj7PFIlhap3uH5QCcRdRdF8jdydMD4jkys4HOp9TthmsMZLltmaNa5UJd8lLZZXsX3rHCR_M8TNT9_bGPqeYP-IFQ_eZQzyM8020aD65i0yZCXP2cTZItyXfQo/s1600/jet_327_px.jpg" imageanchor="1" style="clear: right; margin-bottom: 1em; margin-left: auto; margin-right: auto;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgBaa1fpcHilPB1URKQlSj7PFIlhap3uH5QCcRdRdF8jdydMD4jkys4HOp9TthmsMZLltmaNa5UJd8lLZZXsX3rHCR_M8TNT9_bGPqeYP-IFQ_eZQzyM8020aD65i0yZCXP2cTZItyXfQo/s1600/jet_327_px.jpg" /></a></td></tr><tr><td class="tr-caption" style="text-align: left;"><div style="text-align: center;"><b><i><span style="font-size: small;">If planes can do it…</span></i></b></div></td></tr></tbody></table>Some folks hear this and are disappointed. They point to auto-pilot technology in planes and ask why we can’t have driverless cars sooner than later. The argument goes something like this: "It's much harder to fly a plane, yet we have no problem with a computer handling such a complex task. So why not let a computer drive your car?”<br /><br />If only life were so simple. For one thing, automakers will have to make autonomous cars affordable — doable but not easy. They’ll also have to negotiate a variety of legal hurdles. And in any case, driving and flying have less in common than you might think. <br /><br />When you drive, you must remain alert on a continuous basis. Lose your attention for a second, and you stand a good chance of hitting something or somebody. The same doesn't always hold true in flight. When a plane is cruising at 30,000 feet along a proscribed flight path, the pilot can avert his or her attention for 5 seconds and incur little chance of hitting anything. In comparison, a driver who becomes distracted for 5 seconds is hell on wheels.<br /><br />And, of course, auto-pilot doesn’t mean pilot-less. As Ricky Hudi of Audi <a href="http://ces.cnet.com/8301-34438_1-57563376/is-there-a-self-driving-car-in-your-future/">points out</a>, pilots may rely on autopilot, but they still retain full responsibility for flying the plane. So just because your car is on auto-pilot doesn’t mean you can watch YouTube on your tablet. Bummer, I know.<br /><br /><b style="background-color: white;"><span style="color: #073763;">An alarming solution</span></b><br /><table cellpadding="0" cellspacing="0" class="tr-caption-container" style="float: right; margin-left: 1em; text-align: right;"><tbody><tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjCaoqP3HuMqILfVSFL4bX9GJmuArh9U9kSUxgbaGcU8smIRVNunucbYQz7W7Y2mZu2Er8C6G84rf63b0pM6TvUHH0ZOxiInSV4YjZPPgMMF5913uj-YhhrbiY88h5BACN-BcWRedLr-8k/s1600/alarm_glasses_adas.jpg" imageanchor="1" style="clear: right; margin-bottom: 1em; margin-left: auto; margin-right: auto;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjCaoqP3HuMqILfVSFL4bX9GJmuArh9U9kSUxgbaGcU8smIRVNunucbYQz7W7Y2mZu2Er8C6G84rf63b0pM6TvUHH0ZOxiInSV4YjZPPgMMF5913uj-YhhrbiY88h5BACN-BcWRedLr-8k/s1600/alarm_glasses_adas.jpg" /></a></td></tr><tr><td class="tr-caption" style="text-align: center;"><div style="font-size: medium; text-align: start;"></div><div style="text-align: center;"><div style="text-align: left;"><span style="font-size: x-small;">Source: </span><a href="http://blog.modernmechanix.com/"><span style="font-size: xx-small;">Modern Mechanix blog</span></a><span style="font-size: x-small;"> </span><span style="font-size: x-small;">(and yes, that should </span><br /><span style="font-size: x-small;">read Frankfurt)</span></div></div><div><span style="font-size: x-small;"><br /></span></div></td></tr></tbody></table>All of which to say, the driver of an autonomous car will have to remain alert most or all of the time — until, of course, autonomous vehicles become better than humans at handling every potential scenario. Now <a href="http://www.scientificamerican.com/article.cfm?id=autonomous-driverless-car-brain">that could happen</a>, but it <i>will</i> take a while. <br /><br />It seems that someone anticipated this problem in the early 50s when they invented “alarming glasses” — take a gander at the accompanying photo from the August 1951 issue of <i>Modern Mechanix</i>.<br /><br />Scoff if you will, but a kinder and gentler form of this technology is exactly what autonomous cars need. No, I'm not suggesting that scientists find a better way to glue wires to eyelids. But I am saying that, until cars become fully and safely autonomous, drivers will need to pay attention — after all, it’s tempting to drift off when the car is doing all the work. And, indeed, technologies to keep drivers alert <a href="http://www.tobii.com/gaze-interaction/global/Gaze-Interaction-fields-of-use/advanced-driver-assistance/">are already being developed</a>.<br /><br /><b><span style="color: #073763;">Pre-warned means prepared</span></b><br />Mind you, it isn’t enough to keep the driver alert; the car may also need to issue “pre-warnings” for when the driver needs to take over. For instance, let’s say driving conditions become too challenging for the car’s autonomous mode to handle — these could heavy rain, a street filled with pedestrians, or an area where lane markers are obscured by snow. In that case, the car can’t wait until it can no longer drive itself before alerting the driver, for the simple reason that the driver may simply take too long to assess the situation. The car will need to provide ample warning ahead of time.<br /><br /><b><span style="color: #073763;">The more, the better</span></b><br />That cars will become autonomous is inevitable. In fact, the more autonomous, the better, as far I'm concerned. Research already suggests that technologies for enabling autonomous driving can, in many cases, do a better job of avoiding accidents and improving traffic flow than human drivers. They also seem to do better at things like parallel parking — a task that has caused more than one student driver to fail a driving test.<br /><br />But does this all mean that, as a driver, I can stop paying attention? Not in the near future. But someday.<br /><br />

Autonomous, not driverless

Paul Leroux I don't know about you, but I'm looking forward to the era of self-driving cars. After all, why spend countless hours ne...

Read more »

The isolation imperative: protecting software components in an ISO 26262 system

<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjF70n8XEFXd-WCle6B_N5zb1HOWT6A2287uJL5IptS__jCjo-sMeLzRAv-qrES7Wnj9wEZiA4bLTxtEtJfmSDnchUPzbOIeuufEo685uCHndKAp_EbWo2F-A2ermk7zqXoap_GTGgnSh0/s1600/paul_leroux_photo_crop_v3.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="124" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjF70n8XEFXd-WCle6B_N5zb1HOWT6A2287uJL5IptS__jCjo-sMeLzRAv-qrES7Wnj9wEZiA4bLTxtEtJfmSDnchUPzbOIeuufEo685uCHndKAp_EbWo2F-A2ermk7zqXoap_GTGgnSh0/s400/paul_leroux_photo_crop_v3.jpg" width="87" /></a>Software components can be impolite, if not downright delinquent. For instance, a component might:<br /><br /><ul><li>rob other components of CPU time<br /></li><li>rob other components of file descriptors and other system resources<br /></li><li>access the private memory of other components<br /></li><li>corrupt data shared with other components<br /></li><li>create a deadlock or livelock situation with other components<br /></li></ul><br />Shameful, I know. But in all seriousness, this sort of behavior can wreak havoc in a safety-critical system. For instance, let's say that a component starts to perform a CPU-intensive calculation just as the system enters a failure condition. Will that component hog the CPU and prevent an alarm process from running? <br /><br />The answer, of course, is that it damn well better not.<br /><br />It becomes important, then, to prevent components from interfering with one another. In fact, this principle is baked into the <a href="http://qnxauto.blogspot.ca/2012/10/the-iso-26262-functional-safety.html">ISO 26262 functional safety standard</a> for road vehicles, which defines interference as: <br /><br /><ul>"...the presence of cascading failures from a sub-element with no ASIL [Automotive Safety Integrity Level] assigned, or a lower ASIL assigned, to a sub-element with a higher ASIL assigned leading to the violation of a safety requirement of the element” </ul><br />To put it crudely, less important stuff can't stop more important stuff from happening.<br /><br />So how do you prevent interference? One approach is through isolation. For instance, a system may implement spatial isolation between application processes. This would include mechanisms for interprocess communication and interprocess locking that prevent one process from inadvertently affecting another.<br /><br />Mind you, there are multiple types of interference, so you need to implement multiple forms, or <i>axes</i>, of isolation. Time for a picture:<br /><br /><br /><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhqXB2d5X4JJhti1Ph67QQmAb2Hd05LNAa3btIhcr6eHMPDLUjoDoWf3HrMEQxInso0iLhI1sM6G2zXrJpdIu80xyOij0PbeqfEo3Nsyd3K2NHL89TT25InUR9ltqO-w-ddW6vJHC1Yhlw/s1600/isolation_axes.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhqXB2d5X4JJhti1Ph67QQmAb2Hd05LNAa3btIhcr6eHMPDLUjoDoWf3HrMEQxInso0iLhI1sM6G2zXrJpdIu80xyOij0PbeqfEo3Nsyd3K2NHL89TT25InUR9ltqO-w-ddW6vJHC1Yhlw/s1600/isolation_axes.jpg" /></a><br /><br />In general, you need to determine what does, and what doesn't, need to be isolated. You also need to identify which components are apt to be delinquent and build a cage around them to protect more critical components. Which brings me to a recent paper by my inestimable colleagues Chris Hobbs and Yi Zheng. It's titled "<a href="http://www.qnx.com/download/feature.html?programid=24546"><b>Protecting Software Components from Interference in an ISO 26262 System</b></a>," and it explores techniques that can help you:<br /><br /><ul><li>implement the component isolation required by ISO 26262</li><li>demonstrate that such isolation has been implemented</li></ul><br />And while you're at it, check out the other titles in our <a href="http://www.qnx.com/download/group.html?programid=21552&tag=safety">"safe" whitepaper series</a>. These include "The Dangers of Over-Engineering a Safe System" and "Ten Truths about Building Safe Embedded Software Systems." <br /><br />And don't worry: there's nothing delinquent about downloading all of them.<br /><br />

The isolation imperative: protecting software components in an ISO 26262 system

Software components can be impolite, if not downright delinquent. For instance, a component might: rob other components of CPU time rob othe...

Read more »

An (info)graphic look at self-driving cars

<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjF70n8XEFXd-WCle6B_N5zb1HOWT6A2287uJL5IptS__jCjo-sMeLzRAv-qrES7Wnj9wEZiA4bLTxtEtJfmSDnchUPzbOIeuufEo685uCHndKAp_EbWo2F-A2ermk7zqXoap_GTGgnSh0/s1600/paul_leroux_photo_crop_v3.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="124" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjF70n8XEFXd-WCle6B_N5zb1HOWT6A2287uJL5IptS__jCjo-sMeLzRAv-qrES7Wnj9wEZiA4bLTxtEtJfmSDnchUPzbOIeuufEo685uCHndKAp_EbWo2F-A2ermk7zqXoap_GTGgnSh0/s400/paul_leroux_photo_crop_v3.jpg" width="87" /></a>If I were in the insurance industry, I'd be following the development of autonomous cars with keen interest. Think about it: all those cars will have to be insured, but they will probably get into fewer accidents (and incur fewer insurance settlements) than conventional vehicles. That could be good for business as well as for safety. <br /><br />So why am I bringing this up? Because <a href="http://www.insurancequotes.com/self-driving-cars/#.URleuqU8B8G">InsuranceQuotes.com</a> has come up with an infographic on autonomous cars, and it's a doozy. (Trivia dep't: Some believe that the expression "it's a doozy" was coined by the legendary automaker <a href="http://en.wikipedia.org/wiki/Duesenberg">Duesenberg</a>, as part of a campaign to promote its vehicles. Others disagree. I thought you'd want to know.)<br /><br />Kidding aside, the infographic does a nice job of summarizing the potential benefits of self-driving vehicles, including greater safety, faster traffic flow, reduced fuel wastage, and increased mobility for people with physical handicaps. <br /><br />Of course, if these benefits are borne out, we will all have to come to terms with the inevitable conclusion: computers do a better job of driving than humans. If you can get comfortable with that, you should survive the year 2040 with a minimum of <a href="http://en.wikipedia.org/wiki/Future_Shock">future shock</a>.<br /><br /><a href="http://www.insurancequotes.com/self-driving-cars"><img alt="Self-driving cars" src="http://www.insurancequotes.com/wp-content/uploads/2013/01/BankRate600.png" /><br /></a><br />Infographic from Bankrate Insurance’s <a href="http://www.insurancequotes.com/"> InsuranceQuotes.com</a>

An (info)graphic look at self-driving cars

If I were in the insurance industry, I'd be following the development of autonomous cars with keen interest. Think about it: all those c...

Read more »