Rozprawy doktorskie na temat „Highly automated driving”

Highly automated driving systems promise increased road traffic safety, as well as positive impacts on sustainable transportation by means of increased traffic efficiency and environmental friendliness. The design and development of such systems require scientific advances in a number of areas. One area is the vehicle's electrical/electronic (E/E) architecture. The E/E architecture can be presented using a number of views, of which an important one is the functional view. The functional view describes the decomposition of the system into its main logical components, along with the hierarchical structure, the component inter-connections, and requirements. When this view captures the principal ideas and patterns that constitute the foundation of a variety of specific architectures, it may be termed as a reference architecture. Two reference architectures for highly automated driving form the principal contribution of this thesis. The first reference architecture is for cooperative driving. In a cooperative driving situation, vehicles and road infrastructure in the vicinity of a vehicle continuously exchange wireless information and this information is then used to control the motion of the vehicle. The second reference architecture is for autonomous driving, wherein the vehicle is capable of driver-less operation even without direct communication with external entities. The description of both reference architectures includes their main components and the rationale for how these components should be distributed across the architecture and its layers. These architectures have been validated via multiple real-world instantiations, and the guidelines for instantiation also form part of the architecture description. A comparison with similar architectures is also provided, in order to highlight the similarities and differences. The comparisons show that in the context of automated driving, the explicit recognition of components for semantic understanding, world modeling, and vehicle platform abstraction are unique to the proposed architecture. These components are not unusual in architectures within the Artificial Intelligence/robotics domains; the proposed architecture shows how they can be applied within the automotive domain. A secondary contribution of this thesis is a description of a lightweight, four step approach for model based systems engineering of highly automated driving systems, along with supporting model classes. The model classes cover the concept of operations, logical architecture, application software components, and the implementation platforms. The thesis also provides an overview of current implementation technologies for cognitive driving intelligence and vehicle platform control, and recommends a specific setup for development and accelerated testing of highly automated driving systems, that includes model- and hardware-in-the-loop techniques in conjunction with a publish/subscribe bus. Beyond the more "traditional" engineering concepts, the thesis also investigates the domain of machine consciousness and computational self-awareness. The exploration indicates that current engineering methods are likely to hit a complexity ceiling, breaking through which may require advances in how safety-critical systems can self-organize, construct, and evaluate internal models to reflect their perception of the world. Finally, the thesis also presents a functional architecture for the brake system of an autonomous truck. This architecture proposes a reconfiguration of the existing brake systems of the truck in a way that provides dynamic, diversified redundancy, and an increase in the system reliability and availability, while meeting safety requirements.

QC 20151216

The focus of this thesis is to assess how drivers interact with automated driving systems, more specifically: how control transitions from automated driving to manual driving and vice versa are executed and can be improved upon. In doing so, it identifies the key elements in research into control transitions in automated driving and addresses them. Whilst automated driving shows great promise in reducing road accident rates and congestion it is no panacea in driving safety at its current level (SAE Level 2 and Level 3). Until full autonomy (SAE Level 4) can be realised drivers will still have to be prepared to resume control when the automated driving system can no longer handle a situation. Research has shown that when drivers are exposed to automation, their reaction time slows, and the sudden change of task creates a sudden spike in workload. Such events could lead to incidents. To investigate this problem, the thesis utilise a multi-method using driving simulators as well as on road trials. Ultimately, the thesis aims to provide insights into how drivers handle the transition of control and whether this transition can be assisted by different levels of information support. Recommendations regarding the design of control transitions in highly automated driving are valuable for policy makers and vehicle manufacturers alike when designing and deploying automated vehicles of the future.

The aim of this research was to investigate the nature of the out-of-the-loop (OoTL) phenomenon in highly automated driving (HAD), and its effect on driver behaviour before, during, and after the transition from automated to manual control. The work addressed questions relating to how automation affects drivers' (i) performance in transition situations requiring control- and tactical-level responses, (ii) their behaviour in automation compared to in manual driving, (iii-iv) their visual attention distribution before and during the transition, as well as (v) their perceptual-motor performance after resuming control. A series of experiments were developed to take drivers progressively further OoTL for short periods during HAD, by varying drivers' secondary task engagement and the amount of visual information from the system and environment available to them. Once the manipulations ended, drivers were invited to determine a need to resume control in critical and non-critical vehicle following situations. Results showed that, overall, drivers looked around more during HAD, compared to manual driving, and had poorer vehicle control in critical transition situations. Generally, the further OoTL drivers were during HAD, the more dispersed their visual attention. However, within three seconds of the manipulations ending, the differences between the conditions resolved, and in many cases, this was before drivers resumed control. Differences between the OoTL manipulations emerged once again in terms of the timing of drivers' initial response (take-over time) in critical events, where the further OoTL drivers were the longer it took them to resume control, but there was no difference in the quality of the subsequent vehicle control. Results suggest that any information presented to drivers during automation should be placed near the centre of the road and that kinematically early avoidance response may be more important for safety than short take-over times. This thesis concludes with a general conceptualisation of the relationship between a number of driver and vehicle/environment factors that influence driver performance in the transition.

A travers des systèmes d’assistance à la conduite, l’automatisation de la conduite est introduite graduellement, avec le but de créer un transport plus sûr, confortable et moins polluant. Cette thèse discute le développement d’un système d’assistance à la conduite qui permet une conduite automatisée sur autoroute. La thèse présente le concept « Legal Safety », qui base le développement d’un système d’assistance à la conduite sur le code de la route international. Ceci permet de partager la route avec des conducteurs humains, sans nécessairement changer l’équipement sur l’infrastructure ou sur les autres véhicules. Le « Legal Safety » permet aussi un partage intuitif avec le conducteur du véhicule égo. Chapitre 1 situe le concept « Legal Safety » dans les concepts des systèmes d’assistance à la conduite existants, et discute la méthodologie de recherche de la thèse. Chapitre 2 présente les spécifications sur les composants de perception, contrôle et IHM et compare ces spécifications avec l’état de l’art de ces composants. Chapitre 3 propose le développement d’un composant de calculation de trajectories pour une conduite sur autoroute et discute la contribution de la thèse par rapport l’état de l’art. Chapitre 4 présente le développement du système sur les véhicules et simulateurs du laboratoire LIVIC et des projets HAVEit et ABV. Les différentes implémentations sur PC et sur ECU sont discutées. Chapitre 5 discute les contributions de la thèse. Ce chapitre conclue que le « Legal Safety » pour les composants décision, contrôle et IHM serait possible avec la technologie état de l’art. Une perception selon le « Legal Safety » pourrait être développée en moyen terme
Vehicle automation is proposed as one of the solutions to make transport safer, more comfortable and more environmentally friendly. It is gradually being introduced through Advanced Driver Assistance Systems (ADAS). This work aims to contribute to this evolution, by discussing how driving systems can share the road with human drivers. It presents the legal safety concept for the design of a highly automated driving system for highways. The legal safety concept proposes to base driving system design on traffic rules. This allows fully automated driving in traffic with human drivers, without necessarily changing equipment on other vehicles or infrastructure. The driving system can interact with the human driver, via human rules. If needed, the driving system takes over control in order to avoid accidents. With the third set of rules of the legal safety concept, system rules, system components respect the limitations of other system components. The requirements on PERCEPTION, control and Human-Machine Interface (HMI) components of the legal safety system are discussed. The decision component, which is the central component of the legal safety system, is completely worked out from requirements to design. The legal safety system has been implemented on PC and automotive Electronic Control Units (ECUs). The integration and validation of legal safety components on LIVIC, HAVEit and ABV demonstrators are presented. The work concludes that, for highway environments, legal safety decision, control and HMI can be achieved with state-of-the-art technology, and legal safety perception could be available in medium term

Increasing levels of automation within the driving task has seen the driver’s role change from an active operator to one of a passive monitor. However, systems design has been plagued by criticism for failing to acknowledge the new role of the driver within the system network. To further our understanding of the driver’s role within an automated driving system, the theory of Distributed Cognition was adopted. Distributed Cognition provides a useful framework for the investigation of task partitioning between multiple system agents. A novel Systems Design Framework has been developed as part of this thesis that utilises both qualitative and quantitative research methodologies within the Distributed Cognition paradigm. The framework is divided into two phases, the first phase requires an understanding of how individual system agents function to create models that show how these components share information using Operator Sequence Diagrams whilst empirical methods were used to validate these models in the second phase (e.g. Verbal Protocol Analysis and Network Analysis). These extension methodologies were useful in highlighting a number of design weaknesses, beyond the modelled technological components, that required modification to improve overall system design. The Systems Design Framework has been successfully applied to assist Systems Engineers with a foundation to design and conduct research into the human factors implications of different levels of automation within driving.

A prominent issue in the field of automotive research is the apparent lack of consideration given to the potentially safety-critical differences between novice and experienced users of Advanced Driver Assistance System (ADAS). Conducting experiments with novices only often results in the generation of unrepresentative findings, as these new systems often come with a lengthy adaptation period following their introduction. Running experiments with experienced drivers, however, is difficult, as these are often few and far between, if they even exist. To alleviate this discrepancy, and to help researchers acquire participants more akin to experienced drivers, even before a system has been launched, the approach of AcceLerated Behavioural Adaptation through Targeted tRaining prOgramS (ALBATROS) is proposed. It aims at training drivers in the use of the system, ideally giving them a level of experience similar to experienced users of said systems. A framework for the ALBATROS approach is presented, as is the development of a proof-of-concept training program following this approach. Likewise, a mock-up ADAS, that provides drivers with both longitudinal and lateral support of the vehicle, dubbed the Driver Assist (DA), is presented, for which the training program (the DATP) is developed. The current study presents an experiment designed to validate the efficacy of the DATP, and ultimately, the ALBATROS approach itself. The current study concludes that DATP-trained drivers display significantly improved understanding of the DA system following training and are significantly more likely to retake control in critical situations, than are untrained drivers. Thus, the ALBATROS approach appears a viable approach in giving drivers a better understanding of an ADAS system. However, whether the DATP succeeded in creating drivers similar in experience and understanding to real experienced users of said sys- tem, and if so, exactly how similar, is still unknown. More research is needed, specifically, studies comparing experienced users with those having been trained with the ALBATROS approach.

Objectives: Research suggests the general public has a lack of faith in highly automated vehicles (HAV) stems from a lack of system transparency while in motion (e.g., the user not being informed on roadway perception or anticipated responses of the car in certain situations). This problem is particularly prevalent in public transit or ridesharing applications, where HAVs are expected to debut, and when the user has minimal training on, and control over, the vehicle. To improve user trust and their perception of comfort and safety, this study aimed to develop more detailed and tailored human-machine interfaces (HMI) aimed at relying automated vehicle intended actions (i.e., "intentions") and perceptions of the driving environment to the user. Methods: This project developed HMI systems, with a focus on visual and auditory displays, and implemented them into a HAV developed at the Virginia Tech Transportation Institute (VTTI). Volunteer participants were invited to the Smart Roads at VTTI to experience these systems in real-world driving scenarios, especially ones typically found in rideshare or public transit operations. Participant responses and opinions about the HMIs and their perceived levels of comfort, safety, trust, and situational awareness were captured via paper-based surveys administered during experimentation. Results: There was a considerable link found between HMI modality and users' reported levels of comfort, safety, trust, and situational awareness during experimentation. In addition, there were several key behavioral factors that made users more or less likely to feel comfortable in the HAV. Conclusions: Moving forward, it will be necessary for HAVs to provide ample feedback to users in an effort to increase system transparency and understanding. Feedback should consistently and accurately represent the driving landscape and clearly communicate vehicle states to users.
Master of Science
One of the greatest barriers to the entry of highly automated vehicles (HAV) into the market is the lack of user trust in the vehicle. Research has shown that this lack of faith in the system primarily stems from a lack of system transparency while in motion (e.g., the user not being told how the car will react in a certain situation) and not having an effective way to control the vehicle in the event of a system failure. This problem is particularly prevalent in public transit or ridesharing applications, where HAVs are expected to first appear and where the user has less training and control over the vehicle. To improve user trust and perceptions of comfort and safety, this study developed human-machine interface (HMI) systems, focusing on visual and auditory displays, to better relay automated vehicle "intentions" and the perceived driving environment to the user. These HMI systems were then implemented into a HAV developed at the Virginia Tech Transportation Institute (VTTI) and tested with volunteer participants on the Smart Roads.

Objective: Particular testing by functional decomposition of the automated driving function can potentially contribute to reducing the effort of validating highly automated driving functions. In this study, the required size of test suites for scenario-based testing and the potential to reduce it by functional decomposition are quantified for the first time. Methods: The required size of test suites for scenario-based approval of a so-called Autobahn-Chauffeur (SAE Level 3) is analyzed for an exemplary set of scenarios. Based on studies of data from failure analyses in other domains, the possible range for the required test coverage is narrowed down and suitable discretization steps, as well as ranges for the influence parameters, are assumed. Based on those assumptions, the size of the test suites for testing the complete system is quantified. The effects that lead to a reduction in the parameter space for particular testing of the decomposed driving function are analyzed and the potential to reduce the validation effort is estimated by comparing the resulting test suite sizes for both methods. Results: The combination of all effects leads to a reduction in the test suites’ size by a factor between 20 and 130, depending on the required test coverage. This means that the size of the required test suite can be reduced by 95–99% by particular testing compared to scenario-based testing of the complete system. Conclusions: The reduction potential is a valuable contribution to overcome the parameter space explosion during the validation of highly automated driving. However, this study is based on assumptions and only a small set of exemplary scenarios. Thus, the findings have to be validated in further studies.

Systeme zum automatisierten Fahren erlauben es, die Fahrzeugführung in einem gewissen Maß vom Fahrer an das Fahrzeug zu übertragen. Da der Fahrer auf diese Weise unterstützt, entlastet oder sogar ersetzt werden kann, werden Systeme zum automatisierten Fahren mit einem großen Potential für Verbesserungen hinsichtlich Straßenverkehrssicherheit, Fahrkomfort und Effizienz verbunden - vorausgesetzt, dass diese Systeme angemessen benutzt werden. Systeme zum hochautomatisierten Fahren stellen in diesem Zusammenhang eine besondere Herausforderung für die Mensch-Maschine-Interaktion dar: So wird es dem Fahrer bei diesem Automatisierungsgrad zwar zum ersten mal ermöglicht, das System nicht mehr permanent überwachen zu müssen und somit die Fahrtzeit potentiell für fahrfremde Tätigkeiten zu nutzen. Es wird jedoch immer noch erwartet, dass der Fahrer nach einer vorherigen angemessenen Übernahmeaufforderung die Fahrzeugführung im Bedarfsfall gewährleisten kann. Angemessenes Automatisierungsvertrauen stellt daher eine zentrale Komponente für die erfolgreiche Kooperation zwischen Fahrern und Systemen zum hochautomatisierten Fahren dar und sollte bei der Gestaltung derartiger Systeme berücksichtigt werden. Frühere Befunde weisen beispielsweise bereits darauf hin, dass unterschiedliche Informationen über automatisierte Systeme ein möglicher Ansatz sein könnten um das Automatisierungsvertrauen des Fahrers aktiv zu gestalten. Automatisierungsvertrauen als Variable in der Gestaltung von Fahrzeugtechnologie zu berücksichtigen erfordert jedoch zunächst auch in der Lage zu sein, Automatisierungsvertrauen adäquat messen zu können. In diesem Sinne war die Zielsetzung dieser Arbeit einerseits die Untersuchung verschiedener Methoden zur Messung des Automatisierungsvertrauens des Fahrers sowie andererseits die Identifikation, prototypische Umsetzung und Bewertung potentieller Ansätze zur Gestaltung von Automatisierungsvertrauen im Kontext von Systemen zum hochautomatisierten Fahren. Zu diesem Zweck wurden drei Fahrsimulatorstudien mit insgesamt N = 280 Probanden durchgeführt. Die vorliegenden Ergebnisse weisen darauf hin, dass (i) sowohl Selbstberichtsverfahren als auch Verhaltensmaße prinzipiell dazu verwendet werden können um das Automatisierungsvertrauen des Fahrers in Systeme zum hochautomatisierten Fahren zu operationalisieren, (ii) eine vorherige Auseinandersetzung mit funktionalen Grenzen von Systemen zum hochautomatisierten Fahren einen nachhaltigen Effekt auf das Automatisierungsvertrauen des Fahrers in das System haben kann und (iii) insbesondere Informationen über die Funktionsweise von Systemen zum hochautomatisierten Fahren das Automatisierungsvertrauen des Fahrers in derartige Systeme verbessern können. Damit liefert die vorliegende Arbeit sowohl wertvolle Ansatze zur Messbarmachung als auch Hinweise für die Gestaltung von Automatisierungsvertrauen im Kontext des hochautomatisierten Fahrens. Darüber hinaus können die Befunde dieser Arbeit in gewissem Maße auch auf andere Arten von Fahrzeugautomatisierung sowie unterschiedliche Domänen und Anwendungen von Automatisierung übertragen werden
Automated driving systems allow to transfer a certain degree of vehicle control from the driver to a vehicle. By assisting, augmenting or even supplementing the driver, automated driving systems have been associated with enormous potential for improving driving safety, comfort, and efficiency - provided that they are used appropriately. Among those systems, conditional automated driving systems are particularly challenging for human-automation interaction: While the driver is no longer required to permanently monitor conditional automated driving systems, he / she is still expected to provide fallback performance of the dynamic driving task after adequate prior notification. Therefore, facilitating appropriate automation trust is a key component for enabling successful cooperation between drivers and conditional automated driving systems. Earlier work indicates that providing drivers with proper information about conditional automated driving systems might be one promising approach to do this. Considering the role of automation trust as a variable in the design of vehicle technology, however, also requires that drivers` automation trust can be viably measured in the first place. Accordingly, the objectives of this thesis were to explore difffferent methods for measuring drivers` automation trust in the context of conditional automated driving as well as the identification, implementation and evaluation of possible approaches for designing drivers` automation trust in conditional automated driving systems. For these purposes, three driving simulator studies with N = 280 participants were conducted. The results indicate that (i) both self-report measures and behavioral measures can be used to assess drivers` automation trust in conditional automated driving systems, (ii) prior familiarization with system limitations can have a lasting effffect on drivers` automation trust in conditional automated driving systems and (iii) particularly information about the processes of conditional automated driving systems might promote drivers` automation trust in these systems. Thus, the present research contributes much needed approaches to both measuring and designing automation trust in the context of conditional automated driving. In addition, the current findings might also be transferred to higher levels of driving automation as well as other domains and applications of automation

Driverless cars are a hot topic in today’s industry where several vehicle manufacturers try to create a reliable system for automated driving. The advantages of highly automated vehicles are many, safer roads and a lower environmental impact are some of the arguments for this technology. However, the notion of highly automated cars give rise to a large number of human factor issues regarding the safety and reliability of the automated system as well as concern about the driver’s role in the system. The purpose of this study was to explore the effects of systematic variations in traffic complexity and external time pressure on decision-making time in a simulated situation using a web-based testing platform. A secondary focus was to examine whether measures of cognitive performance and driver attitudes have an effect on decision-making time.  The results show that systematic variations in both time pressure and traffic complexity have an effect on decision-making time. This indicates that drivers are able to adapt their decision-making to facilitate the requirements of a certain situation. The results also indicate that intelligence; speed of processing and driver attitudes has an effect on decision-making time.

In the course of the current demographic change, the proportion of the population aged 65 and older is projected to steadily increase in many countries of the world (UN DESA Population Division, 2015). The ageing society is reflected in an increasing number of older road users (Koppel & Berecki-Gisolf, 2015), especially considering the growing need for older adults to maintain individual mobility (Eby & Molnar, 2012). This development raises new issues of transportation research, since age-related changes in mobility patterns as well as sensory, cognitive, and motor functions reduce older adults’ traffic safety (Polders, Vlahogianni, Leopold, & Durso, 2015). Accordingly, new strategies to aid older drivers and their mobility needs are required, which could potentially be provided by emerging in-vehicle technologies (Karthaus & Falkenstein, 2016). The overall aim of present dissertation project was to evaluate whether in-vehicle technologies that appear promising to support older drivers can actually contribute to their individual mobility, which requires an improvement in aspects related to driving performance as well as the acceptance of such systems in this age group. Therefore, contact-analogue head-up displays (also labelled as Augmented Reality Displays, ARDs) and highly automated driving were selected as two exemplary technologies, representing completely different levels of driving automation and accordingly different approaches to support drivers. The ARD-technology represents a technical implementation approach for IVIS and therefore an example for Automation Level 0 (no automation; SAE International, 2014) by helping the driver to execute the driving task manually through useful information. In contrast, the HAD-technology aims at supporting the driver by taking over the driving task, which corresponds to Automation Level 4 (high automation; SAE International, 2014). Despite these different approaches, both technologies were previously assumed to have a strong potential to support especially older drivers (Meyer & Deix, 2014; Polders et al., 2015; Rusch et al., 2013; Schall et al., 2013). Three empirical studies were conducted to examine performance- and acceptance-related aspects of both technologies. All studies were carried out with a group of older drivers (maximum age range: 65 85 years) and a younger comparison group (maximum age range: 25-45 years) representing the ‘average’ (i.e. young, but experienced) driver in order to identify age-specific results. Focusing on performance-related aspects of the ARD-technology, Study I represents a reaction time experiment conducted in a driving simulator. One age-specific beneficial function of such an ARD is to provide prior information about approaching complex traffic situations, which addresses older drivers’ tendency to process multiple information successively (serially) rather than simultaneously (parallel) (Davidse, Hagenzieker, van Wolffelaar, & Brouwer, 2009; Küting & Krüger, 2002). Therefore, the aim of this study was to examine the effects of an ARD providing prior information about approaching intersections on drivers’ speed and accuracy of perceiving these intersections, which is considered a necessary precondition for a safe driving performance (Crundall & Underwood, 2011). Based on concerns about the counterproductive effects of presenting information via an ARD, especially in cases of inaccurate information, system failures were included in this examination. The ARD-information aided drivers from both age groups in identifying more relevant aspects of the intersections without increasing response time, indicating the potential of the system to support both older and younger drivers in complex traffic situations. Experiencing system failures (i.e. inaccurate information) did offset this positive effect for the study’s duration, particularly for older drivers. This might be because it was difficult to ignore inaccurate prior information due to their presentation via an ARD. Study II represents a driving simulator study on acceptance-related aspects of an ARD providing prior information about approaching intersections. This study focused on the effects of system experience on drivers’ acceptance as well as on the identification of age-specific acceptance barriers that could prevent older drivers from using the technology. In summary, older and younger drivers’ evaluation of the ARD was positive, with a tendency to more positive evaluations with than without system experience in the driving simulator. Compared to the younger group, older drivers reported a more positive attitude towards using the ARD, even though they evaluated their self-efficacy in handling the system and environmental conditions facilitating its usage as less strong. Both performance- and acceptance-related aspects of HAD were addressed in Study III, a two-stage driving simulator study. The focus of the performance perspective shifted in parallel with the shift of the human role from driver to passenger due to the increasing driving automation. Accordingly, the examination of HAD was focused on the human evaluation of the automated system’s driving performance. In this context, affective components of human-automation interaction, such as comfort and enjoyment, are considered important for the acceptance and thus usage of automated vehicles (Tischler & Renner, 2007). It is assumed that the implemented driving style has an impact on such affective components in the context of HAD (Bellem, Schönenberg, Krems, & Schrauf, 2016). One theoretical approach to increase the comfort of HAD recommends the implementation of familiar, natural driving styles to mimic human control (Elbanhawi, Simic, & Jazar, 2015). Therefore, the effects of driving automation and the familiarity of the HAD-style on driving comfort and enjoyment were examined. Automation increased both age groups’ comfort, but decreased younger drivers’ enjoyment. For all dependent variables, driving style familiarity significantly interacted with drivers’ age the same way: while younger drivers preferred a familiar HAD-style, older drivers preferred an unfamiliar driving style in a highly automated context. Accordingly, the familiarity approach can be supported at least for younger drivers, but not for older drivers, whose manual driving styles are characterised by strategies to compensate for age-related impairments of sensory, cognitive, or motor functions. HAD-style preferences of this age group seem to be more influenced by the desire to regain a driving style free from these compensation strategies than by a need for familiar driving manoeuvres. In parallel with the evaluation of the ARD, acceptance-related issues in the context of HAD included the effects of system experience on drivers’ acceptance and potential age-specific acceptance barriers. Considering a system-specific design issue, it was additionally examined whether drivers’ acceptance of HAD is modifiable by the familiarity of the implemented driving style. In this driving simulator study, members of both age groups showed slightly positive a priori acceptance ratings, which significantly increased after the initial experience and remained stable afterwards. Similar to drivers’ acceptance of the ARD, older drivers reported a more positive attitude towards using HAD despite their lower self-assessed self-efficacy and environmental conditions facilitating HAD-usage compared to younger drivers. Regarding HAD-style, acceptance was subject to the same interaction between drivers’ age and driving style familiarity as driving comfort and enjoyment. These findings demonstrate that effective approaches to support the independent mobility of older adults are provided by emerging in-vehicle technologies on different levels of driving automation. The majority of the performance-related improvements did apply to both older and younger drivers, confirming that automotive technologies suggested for older drivers have the potential to support drivers of other age groups as well. Regarding drivers’ acceptance, findings suggest that both systems would be accepted by different age groups, which correspondents to the results from the performance perspective. The comparable acceptance patterns identified for two systems at different stages of driving automation, such as ARDs and HAD, indicate underlying general aspects of older adults’ acceptance of in-vehicle technologies. This includes their strong need to preserve their individual mobility as well as their lower self-efficacy in handling relevant technologies and insufficient access to a support infrastructure. These insights can enrich both theories of older drivers’ acceptance of in-vehicle technologies and measures to ensure the successful development and introduction of systems aiding them in maintaining a safe individual mobility. Considering the importance of driving for older adults’ physiological and psychological well-being (e.g. Adler & Rottunda, 2006; Lutin, Kornhauser, & Lerner-Lam, 2013), these results emphasise the potential of emerging in-vehicle technologies to improve both older drivers’ traffic safety and quality of life
Im Zuge des aktuellen demografischen Wandels wird für zahlreiche Länder der Welt eine stetige Zunahme des Bevölkerungsanteils von Personen im Alter von 65 Jahren und älter prognostiziert (UN DESA Population Division, 2015). Die daraus resultierende alternde Gesellschaft spiegelt sich auch in der steigenden Anzahl älterer Verkehrsteilnehmer wieder (Koppel & Berecki-Gisolf, 2015). Dieser Effekt wird durch das ebenfalls ansteigende Bedürfnis älterer Personen, ihre Individualmobilität auch bis ins hohe Alter hinein aufrecht zu erhalten, noch verstärkt (Eby & Molnar, 2012). Berücksichtigt man die Auswirkungen altersbedingter Veränderungen von Mobilitätsmustern und fahrrelevanten Fähigkeiten auf die Sicherheit älterer Verkehrsteilnehmer (Polders et al., 2015), stellt diese demographische Entwicklung neue Herausforderungen an die Verkehrsforschung. So bedarf es neuartiger Strategien zur Unterstützung älterer Fahrzeugführer und ihrer Mobilitätsbedürfnisse. Aufgrund aktueller technologischer Entwicklungen eröffnen vor allem durch neuartige Fahrzeugtechnologien zur Fahrerunterstützung innovative Möglichkeiten, diesem Bedarf gerecht zu werden (Karthaus & Falkenstein, 2016). An diesem Punkt setzt die vorliegende Dissertation an. Ziel des Dissertationsprojektes war es zu evaluieren, inwieweit aktuell in Entwicklung befindliche Fahrzeugtechnologien, die aus theoretischer Sicht als geeignete Mittel zur Unterstützung älterer Fahrer erscheinen, tatsächlich zu deren Individualmobilität beitragen können. Um das Potential derartiger Technologien abzuschätzen, wurde einerseits untersucht, inwieweit sie zur Verbesserung von Variablen, die in Beziehung zur Fahrleistung stehen, beitragen können. Anderseits wurde ihre Akzeptanz bei potentiellen zukünftigen Nutzern evaluiert. Für diese Untersuchungen wurden zwei exemplarische Technologien als Repräsentanten grundlegend unterschiedlicher Stufen der Fahrzeugautomatisierung ausgewählt: ein kontaktanaloge Head-up Display (auch Augmented Reality Display, ARD) und hochautomatisiertes Fahren. ARDs stellen einen technologischen Ansatz zur Implementierung von Fahrerinformationssystemen und dementsprechend ein Beispiel für Automatisierungsstufe 0 (no automation; SAE International, 2014) dar, indem sie den Fahrer durch die Bereitstellung verkehrsrelevanter Informationen bei der manuellen Ausführung der Fahraufgabe unterstützen. Im Gegensatz dazu zielt die Technologie des hochautomatisierten Fahrens auf eine Unterstützung des Fahrers durch die vollständige Übernahme der Fahraufgabe ab, was Automatisierungsstufe 4 (high automation; SAE International, 2014) entspricht. Trotz dieser grundlegend unterschiedlichen Ansätze wird beiden Technologien ein hohes Potential zur Unterstützung insbesondere älterer Fahrer zugesprochen (Meyer & Deix, 2014; Polders et al., 2015; Rusch et al., 2013; Schall et al., 2013). Die Untersuchung Performanz- und Akzeptanz-bezogener Aspekte beider Technologien erfolgte im Rahmen von drei empirische Studien. Um altersspezifische Befunde identifizieren zu können, wurden allen Studien mit Vertretern der Zielgruppe von älteren Fahrern (65-85 Jahre alt) sowie einer jüngeren Vergleichsgruppe ‚durchschnittlicher‘ (d.h. junger, erfahrener) Fahrer (25-45 Jahre alt) durchgeführt. Bei Studie I handelte es sich um eine im Fahrsimulator durchgeführte Reaktionszeitstudie, in deren Rahmen Leistungs-bezogene Aspekte von ARDs untersucht wurden. Unter den vielfältigen Möglichkeiten zur Anwendung dieser Technologie wird vor allem die Präsentation von Vorinformationen über bevorstehende komplexe Fahrsituationen während der Fahrt als gewinnbringend für ältere Fahrer eingestuft. Diese Strategie adressiert die Tendenz älterer Fahrer zu einer eher seriellen als parallelen Verarbeitung gleichzeitig verfügbarer Informationen während der Fahrt (Davidse et al., 2009; Küting & Krüger, 2002). Vor diesem Hintergrund lag der Fokus von Studie I auf den Effekten einer kontaktanalogen Präsentation von Vorinformationen über bevorstehende Kreuzungen auf die Geschwindigkeit und Genauigkeit der Wahrnehmung dieser Kreuzungen durch den Fahrer, was eine Grundvoraussetzung für eine sichere Fahrleistung darstellt (Crundall & Underwood, 2011). Basierend auf bestehenden Befürchtungen über kontraproduktive Effekte einer kontaktanalogen Informationsdarstellung während der Fahrt, insbesondere im Falle inkorrekter Informationen, wurden zudem die Auswirkungen von Systemfehlern untersucht. Mit Hilfe der kontaktanalogen Vorinformationen gelang es sowohl älteren als auch jüngeren Fahrern, ohne erhöhten Zeitbedarf einen höheren Anteil relevanter Aspekte in Kreuzungssituationen wahrzunehmen. Allerdings wurde die positive Systemwirkung durch das Erleben von Systemfehlern (in diesem Fall inkorrekten Vorinformationen) zumindest für die Dauer der Untersuchung aufgehoben. Dieser Effekt war besonders ausgeprägt für ältere Fahrer und könnte auf die Schwierigkeit, inkorrekte Informationen auf Grund ihrer Darstellung im ARD zu ignorieren, zurückzuführen sein. Studie II stellte eine Fahrsimulatorstudie zu Akzeptanz-bezogenen Aspekten eines ARDs, welches dem Fahrer Vorinformationen über bevorstehende Kreuzungen zur Verfügung stellt, dar. Inhalt dieser Studie waren zum einen die Effekte von Systemerfahrung auf die Nutzerakzeptanz des Systems, zum anderen altersspezifische Akzeptanzbarrieren, welche ältere Fahrer potentiell von der Nutzung der Technologie abhalten könnten. Insgesamt bewerteten sowohl ältere als auch jüngere Fahrer das ARD positiv. Dabei fielen Bewertungen auf Basis von Systemerfahrung im Fahrsimulator tendenziell besser aus als Bewertungen ohne vorherige Systemerfahrung. Obwohl ältere Fahrer im Vergleich zu jüngeren Fahrern ihre Selbstwirksamkeit im Umgang mit dem ARD sowie Umgebungsfaktoren, welche dessen Nutzung unterstützen könnten, als geringer ausgeprägt wahrnahmen, war die positive Einstellung gegenüber der Nutzung des Systems bei ihnen im Durchschnitt stärker ausgeprägt. Leistungs- und Akzeptanz-bezogene Aspekte des hochautomatisierten Fahrens wurden in Studie III, einer zweistufigen Fahrsimulatorstudie, untersucht. Parallel zur Veränderung der Rolle des Menschen vom Fahrzeugführer zum Passagier im Zuge der zunehmenden Fahrzeugautomatisierung veränderte sich dabei auch der Fokus der Leistungsperspektive. Dem entsprechend stand die Bewertung der Fahrleistung des automatisierten Systems durch den mitfahrenden Menschen im Mittelpunkt dieser Untersuchung. Affektive Komponenten der Mensch-Automatisierungs-Interaktion wie Fahrkomfort und Fahrspaß werden in diesem Kontext als bedeutsam zur Gewährleistung der Nutzerakzeptanz und damit auch Nutzung automatisierter Fahrzeuge betrachtet (Tischler & Renner, 2007). Es wird angenommen, dass derartige affektive Komponenten im Kontext des hochautomatisierten Fahrens vor allem vom implementierten Fahrstil abhängen (Bellem et al., 2016). In einem theoretischen Ansatz zur Verbesserung des Fahrkomforts wird die Implementierung vertrauter (d.h. dem eigenen manuellen Fahrstil ähnlicher) Fahrstile empfohlen, um einen menschlichen Fahrzeugführer nachzuahmen und so Bedenken gegenüber einer automatisierten Fahrzeugführung abzubauen (Elbanhawi et al., 2015). Diesem Ansatz folgend wurden in Studie III die Effekte der Fahrzeugautomatisierung sowie der Ähnlichkeit des implementierten Fahrstils zum individuellen manuellen Fahrstil des jeweiligen Fahrers auf Fahrkomfort und Fahrspaß untersucht. Es konnte gezeigt werden, dass mit höherer Automatisierung der Fahrkomfort älterer und jüngerer Fahrer anstieg, der Fahrspaß jüngerer Fahrer sich jedoch verringerte. Alle abhängigen Variablen wurden von einer vergleichbaren Interaktion zwischen Fahreralter und Fahrstilähnlichkeit beeinflusst: Während jüngere Fahrer hochautomatisierte Fahrstile bevorzugten, die ihren jeweiligen manuellen Fahrstilen ähnelten, präferierten ältere Fahrer im hochautomatisierten Kontext eher unähnliche Fahrstile. Dem entsprechend kann der Vertrautheitsansatz basierend auf den Ergebnissen von Studie III zumindest für jüngere Fahrer unterstützt werden, nicht aber für die Zielgruppe älterer Fahrer, deren manuelle Fahrstile durch Kompensationsstrategien zum Ausgleich altersbedingter Einschränkungen ihrer sensorischen, kognitiven und motorischen Fähigkeiten geprägt sind. Fahrstilpräferenzen im hochautomatisierten Kontext scheinen in dieser Altersgruppe mehr von dem Wunsch, einen von diesen Kompensationsstrategien unbeeinträchtigten Fahrstil wiederzuerlangen, geprägt zu sein als von dem Bedürfnis nach vertraut gestalteten Fahrmanövern. Analog zur Evaluation des ARDs beinhaltete die Untersuchung Akzeptanz-bezogener Aspekte des hochautomatisierten Fahrens die Effekte von Systemerfahrung auf die Nutzerakzeptanz sowie potentielle altersspezifische Akzeptanzbarrieren. Einen systemspezifischen Designaspekt aufgreifend wurde zudem untersucht, ob die Nutzerakzeptanz des hochautomatisierten Fahrens ebenfalls durch den implementierten Fahrstil modifizierbar ist. Fahrer beider Altersgruppen berichteten tendenziell positive a priori Akzeptanzwerte, welche sich nach der Ersterfahrung mit dem System signifikant erhöhten und sich anschließend stabilisierten. Vergleichbar mit den Ergebnissen zum ARD war die positive Einstellung gegenüber der Nutzung eines hochautomatisierten Fahrzeuges bei älteren Fahrern im Durchschnitt stärker ausgeprägt als bei jüngeren, obwohl sie ihre Selbstwirksamkeit im Umgang mit dem System sowie unterstützende Umgebungsfaktoren als geringer ausgeprägt bewerteten. Bezüglich des hochautomatisierten Fahrstils unterlag die Systemakzeptanz derselben Interaktion zwischen Fahreralter und Fahrstilähnlichkeit wie Fahrkomfort und Fahrspaß. Diese Ergebnisse demonstrieren, dass Fahrzeugtechnologien auf verschiedenen Automatisierungsstufen effektive Ansätze zur Unterstützung der Individualmobilität älterer Personen liefern können. Die Mehrzahl der identifizierten Leistungs-bezogenen Verbesserungen zeigte sich sowohl für ältere als auch jüngere Fahrer. Diese Befunde weißen auf das Potential von Systemen, welche den Bedürfnissen älterer Fahrer entsprechen, zur Unterstützung verschiedener Altersgruppen hin. Die Ergebnisse der Akzeptanzperspektive deuten an, dass die evaluierten Systeme von Fahrern verschiedener Altersgruppen akzeptiert werden würden, was die Ergebnisse der Leistungsebene widerspiegelt. Die Vergleichbarkeit der Muster verschiedener Akzeptanzprädiktoren, welche für zwei Systeme auf grundlegend unterschiedlichen Automatisierungsstufen identifiziert werden konnten, legt die Existenz zugrundeliegender genereller Aspekte der Fahrzeugtechnologie-Akzeptanz älterer Fahrer nahe. Diese beinhalten deren stark ausgeprägtes Bedürfnis zur Erhaltung ihrer Individualmobilität sowie deren geringere Selbstwirksamkeit im Umgang mit relevanten Technologien und den unzureichenden Zugang zu unterstützenden Infrastrukturen. Diese Erkenntnisse liefern Implikationen für theoretische Modelle der Akzeptanz von Fahrzeugtechnologien durch ältere Fahrer sowie für Maßnahmen zur Absicherung einer erfolgreichen Entwicklung und Markteinführung von Systemen, die darauf abzielen, ältere Menschen beim Erhalt ihrer Individualmobilität zu unterstützen. Berücksichtigt man die Bedeutsamkeit des Fahrens eines eigenen Automobils für das physiologische und psychologische Wohlbefinden im Alter (Adler & Rottunda, 2006; Lutin et al., 2013; Whelan, Langford, Oxley, Koppel, & Charlton, 2006), unterstreichen diese Ergebnisse das Potential neu entstehender Fahrerunterstützungstechnologien für die Verbesserung der Verkehrssicherheit, aber auch Lebensqualität älterer Menschen

Automated acceptance testing is the testing of software done in higher level to test whether the system abides by the requirements desired by the business clients by the use of piece of script other than the software itself. This project is a study of the feasibility of acceptance tests written in Behavior Driven Development principle. The project includes an implementation part where automated accep- tance testing is written for Touch-point web application developed by Dewire (a software consultant company) for Telia (a telecom company) from the require- ments received from the customer (Telia). The automated acceptance testing is in Cucumber-Selenium framework which enforces Behavior Driven Development principles. The purpose of the implementation is to verify the practicability of this style of acceptance testing. From the completion of implementation, it was concluded that all the requirements from customer in real world can be converted into executable specifications and the process was not at all time-consuming or difficult for a low-experienced programmer like the author itself. The project also includes survey to measure the learnability and understandability of Gherkin- the language that Cucumber understands. The survey consist of some Gherkin exam- ples followed with questions that include making changes to the Gherkin exam- ples. Survey had 3 parts: first being easy, second medium and third most difficult. Survey also had a linear scale from 1 to 5 to rate the difficulty level for each part of the survey. 1 stood for very easy and 5 for very difficult. Time when the partic- ipants began the survey was also taken in order to calculate the total time taken by the participants to learn and answer the questions. Survey was taken by 18 of the employers of Dewire who had primary working role as one of the programmer, tester and project manager. In the result, tester and project manager were grouped as non-programmer. The survey concluded that it is very easy and quick to learn Gherkin. While the participants rated Gherkin as very easy.

In this work we reproduce driving techniques to mimic expert race drivers and obtain the open-loop control signals that may be used by auto-pilot agents driving autonomous ground wheeled vehicles. Race drivers operate their vehicles at the limits of the acceleration envelope. An accurate characterization of the acceleration capacity of the vehicle is required. Understanding and reproduction of such complex maneuvers also require a physics-based mathematical description of the vehicle dynamics. While most of the modeling issues of ground-vehicles/automobiles are already well established in the literature, lack of understanding of the physics associated with friction generation results in ad-hoc approaches to tire friction modeling. In this work we revisit this aspect of the overall vehicle modeling and develop a tire friction model that provides physical interpretation of the tire forces. The new model is free of those singularities at low vehicle speed and wheel angular rate that are inherent in the widely used empirical static models. In addition, the dynamic nature of the tire model proposed herein allows the study of dynamic effects such as transients and hysteresis. The trajectory-planning problem for an autonomous ground wheeled vehicle is formulated in an optimal control framework aiming to minimize the time of travel and maximize the use of the available acceleration capacity. The first approach to solve the optimal control problem is using numerical techniques. Numerical optimization allows incorporation of a vehicle model of high fidelity and generates realistic solutions. Such an optimization scheme provides an ideal platform to study the limit operation of the vehicle, which would not be possible via straightforward simulation. In this work we emphasize the importance of online applicability of the proposed methodologies. This underlines the need for optimal solutions that require little computational cost and are able to incorporate real, unpredictable environments. A semi-analytic methodology is developed to generate the optimal velocity profile for minimum time travel along a prescribed path. The semi-analytic nature ensures minimal computational cost while a receding horizon implementation allows application of the methodology in uncertain environments. Extensions to increase fidelity of the vehicle model are finally provided.

Les fonctions de commande et de contrôle sont parmi les plus importantes des systèmes embarqués critiques utilisés dans des activités telles les transports, la santé ou la gestion de l’énergie. Leur impact potentiel sur la sûreté de fonctionnement fait de la vérification de leur correction l’un des points les plus critiques de leur développement. Cette vérification est usuellement effectuée en accord avec les normes de certification décrivant un ensemble d’objectifs à atteindre afin d’assurer un haut niveau de qualité du système et donc de prévenir l’apparition de défauts. Cette vérification du logiciel est traditionnellement basée sur de nombreux tests et des activitiés de relectures de code, toutefois les versions les plus récentes des standards de certification permettent l’utilisation de nouvelles approches de développement telles que l’ingénierie dirigée par les modèles et les méthodes formelles ainsi que l’utilisation d’outil pour assister les processus de développement. Les outils de génération automatique de code sont exploités dans la plupart des processus de développement de systèmes embarqués critiques afin d’éviter des erreurs de programmation liées à l’humain et pour assurer le respect des règles de production de code. Ces outils ayant pour vocation de remplacer les humains pour la production de code, des erreurs dans leur conception peuvent causer l’apparition d’erreurs dans le code généré. Il est donc nécessaire de vérifier que le niveau de qualité de l’outil est le même que celui du code produit en s’assurant que les objectifs spécifiées dans les normes de qualification sont couverts. Nos travaux visent à exploiter l’ingénierie dirigée par les modèles et les méthodes formelles pour développer ces outils et ainsi atteindre un niveau de qualité plus élevé que les approches traditionnelles. Les fonctions critiques de commande et de contrôle sont en grande partie conçues à l’aide de langages graphiques à flot de données. Ces langages sont utilisés pour modéliser des systèmes complexes à l’aide de blocs élémentaires groupés dans des librairies de blocs. Un bloc peut être un objet logiciel sophistiqué exposant une haute variabilité tant structurelle que sémantique. Cette variabilité est à la fois liée aux valeurs des paramètres du bloc ainsi qu’à son contexte d’utilisation. Dans notre travail, nous concentrons notre attention en premier lieu sur la spécification formelle de ces blocs ainsi que sur la vérification de ces spécifications. Nous avons évalué plusieurs approches et techniques dans le but d’assurer une spécification formelle, structurellement cohérente, vérifiable et réutilisable des blocs. Nous avons finalement conçu un langage basé sur l’ingénierie dirigées par les modèles dédié à cette tâche. Ce langage s’inspire des approches des lignes de produit logiciel afin d’assurer une gestion de la variabilité des blocs à la fois correcte et assurant un passage à l’échelle. Nous avons appliqué cette approche et la vérification associée sur quelques exemples choisis de blocs issus d’applications industrielles et l’avons validé sur des prototypes logiciels que nous avons développé. Les blocs sont les principaux éléments des langages d’entrée utilisés pour la génération automatique de logiciels de commande et de contrôle. Nous montrons comment les spécifications formelles de blocs peuvent être transformées en des annotations de code afin de simplifier et d’automatiser la vérification du code généré. Les annotations de code sont vérifiées par la suite à l’aide d’outils spécialisés d’analyse statique de code. En utilisant des observateur synchrones pour exprimer des exigences de haut niveau sur les modèles en entrée du générateur, nous montrons comment la spécification formelle de blocs peut être utilisée pour la génération d’annotations de code et par la suite pour la vérification automatique des exigences
Control and command softwares play a key role in safety-critical embedded systems used for human related activities such as transportation, healthcare or energy. Their impact on safety makes the assessment of their correctness the central point in their development activities. Such systems verification activities are usually conducted according to normative certification guidelines providing objectives to be reached in order to ensure development process reliability and thus prevent flaws. Verification activities usually relies on tests and proof reading of the software but recent versions of certification guidelines are taking into account the deployment of new development paradigms such as model-based development, and formal methods; or the use of tools in assistance of the development processes. Automatic code generators are used in most safety-critical embedded systems development in order to avoid human related software production errors and to ensure the respect of development quality standards. As these tools are supposed to replace humans in the software code production activities, errors in these tools may result in embedded software flaws. It is thus in turn mandatory to ensure the same level of correctness for the tool itself than for the expected produced code. Tools verification shall be done according to qualification guidelines. We advocate in our work the use of model-based development and formal methods for the development of these tools in order to reach a higher quality level. Critical control and command software are mostly designed using graphical dataflow languages. These languages are used to express complex systems relying on atomic operations embedded in blocks that are gathered in block libraries. Blocks may be sophisticated pieces of software with highly variable structure and semantics. This variability is dependent on the values of the block parameters and of the block's context of use. In our work, we focus on the formal specification and verification of such block based languages. We experimented various techniques in order to ensure a formal, sound, verifiable and usable specification for blocks. We developed a domain specific formal model-based language specifically tailored for the specification of structure and semantics of blocks. This specification language is inspired from software product line concepts in order to ensure a correct and scalable management of the blocks variability. We have applied this specification and verification approach on chosen block examples from common industrial use cases and we have validated it on tool prototypes. Blocks are the core elements of the input language of automatic code generators used for control and command systems development. We show how our blocks formal specification can be translated as code annotations in order to ease and automate the generated code verification. Code annotations are verified using specialised static code analysis tools. Relying on synchronous observers to express high level requirements at the input model level, we show how formal block specification can also be used for the translation of high level requirements as verifiable code annotations discharged using the same specialised tooling. We finally target the assistance of code generation tools qualification activities by arguing on the ability to automatically generate qualification data such as requirements, tests or simulation results for the verification and development of automatic code generators from the formal block specification

Face à l’évolution rapide des technologies nécessaires à l’automatisation de la conduite au cours de ces dernières années, les grands constructeurs automobiles promettent la commercialisation de véhicules autonomes à l’horizon 2020. Cependant, la définition des interactions entre les systèmes de conduite automatisée et le conducteur au cours de la tâche de conduite reste une question ouverte. L'objectif de cette thèse est de concevoir, développer et évaluer des principes de coopération entre le conducteur et les systèmes de conduite automatisée. Compte tenu de la complexité d'un tel Système Homme-Machine, la thèse propose, en premier lieu une architecture de contrôle coopératif hiérarchique et deux principes de coopération généraux sur deux niveaux dans l’architecture qui serviront ensuite de base commune pour la conception des systèmes coopératifs développés pour les cas d’usages définis. Afin d’assurer une coopération efficace avec le conducteur dans un environnement de conduite dynamique, le véhicule autonome a besoin de comprendre la situation et de partager sa compréhension de la situation avec le conducteur. Pour cela, cette thèse propose un formalisme de représentation de la scène de conduite basé sur le repère de Frenet. Ensuite, une méthode de prédiction de trajectoire est également proposée. Sur la base de la détection de manœuvre et de l'estimation du jerk, cette méthode permet d’améliorer la précision de la trajectoire prédite comparée à celle déterminée par la méthode basée sur une hypothèse d'accélération constante. Dans la partie d’études de cas, deux principes de coopération sont mis en œuvre dans deux cas d’usage. Dans le premier cas de la gestion d’insertion sur autoroute, un système de contrôle longitudinal coopératif est conçu. Il comporte une fonction de planification de manœuvre et de génération de trajectoire basée sur la commande prédictive. En fonction du principe de coopération, ce système peut à la fois gérer automatiquement l’insertion d’un véhicule et donner la possibilité au conducteur de changer la décision du système. Dans le second cas d'usage qui concerne le contrôle de trajectoire et le changement de voie sur autoroute, le problème de partage du contrôle est formulé comme un problème d’optimisation sous contraintes qui est résolu en ligne en utilisant l’approche de la commande prédictive (MPC). Cette approche assure le transfert continu de l’autorité du contrôle entre le système et le conducteur en adaptant les pondérations dans la fonction de coût et en mettant en œuvre des contraintes dynamiques en ligne dans le modèle prédictif, tout en informant le conducteur des dangers potentiels grâce au retour haptique sur le volant. Les deux systèmes sont évalués à l’aide de tests utilisateur sur simulateur de conduite. En fonction des résultats des tests, cette thèse discute la question des facteurs humains et la perception de l'utilisateur sur les principes de coopération
Given rapid advancement of automated driving (AD) technologies in recent years, major car makers promise the commercialization of AD vehicles within one decade from now. However, how the automation should interact with human drivers remains an open question. The objective of this thesis is to design, develop and evaluate interaction principles for AD systems that can cooperate with a human driver. Considering the complexity of such a human-machine system, this thesis begins with proposing two general cooperation principles and a hierarchical cooperative control architecture to lay a common basis for interaction and system design in the defined use cases. Since the proposed principles address a dynamic driving environment involving manually driven vehicles, the AD vehicle needs to understand it and to share its situational awareness with the driver for efficient cooperation. This thesis first proposes a representation formalism of the driving scene in the Frenet frame to facilitate the creation of the spatial awareness of the AD system. An adaptive vehicle longitudinal trajectory prediction method is also presented. Based on maneuver detection and jerk estimation, this method yields better prediction accuracy than the method based on constant acceleration assumption. As case studies, this thesis implements two cooperation principles for two use cases respectively. In the first use case of highway merging management, this thesis proposes a cooperative longitudinal control framework featuring an ad-hoc maneuver planning function and a model predictive control (MPC) based trajectory generation for transient maneuvers. This framework can automatically handle a merging vehicle, and at the mean time it offers the driver a possibility to change the intention of the system. In another use case concerning highway lane positioning and lane changing, a shared steering control problem is formulated in MPC framework. By adapting the weight on the stage cost and implementing dynamic constraints online, the MPC ensures seamless control transfer between the system and the driver while conveying potential hazards through haptic feedback. Both of the designed systems are evaluated through user tests on driving simulator. Finally, human factors issue and user’s perception on these new interaction paradigms are discussed

The development of automated driving (AD) from partially automated driving (AD2-) to highly automated driving (AD3+) is not only in the focus of the passenger car industry, but also in the commercial vehicle (CV) industry, especially in the development of trucks. There is already a lot of research work on AD3+ for passenger cars. However, in this area there is still a great need for research for trucks, particularly in the area of steering systems suitable for AD3+, since the requirements of these, especially with regard to the maximum required steering forces and steering powers, are much higher for AD3+ trucks than for AD3+ passenger cars. Therefore, the subject of this thesis is to develop a concept of an active steering system for AD3+ trucks by means of a deductive methodology and a systematic analysis of the solu-tion space. The development is based on the frame requirements for truck steering systems with regard to assembly space, interfaces, energy supply and axle loads as well as on the operational and redundancy requirements determined in this thesis. On the basis of these requirements, a redundant electric power steering system is excluded from the solution space due to the insufficient electrical power available on board and a redundant hydraulic power steering system for efficiency reasons. With today's actuators, the solution space is limited to combinations of electric and hydraulic power steering, the so-called hybrid steer-ing systems, for which the possible different functional structures are derived. These are evaluated on the basis of requirements from a safety analysis, whereby the solution space is limited. The developed concept, which meets all requirements, is a redundant active steering system (RASS) with an electric subsystem and a hydraulic subsystem, which is equipped with an active steering valve that can be controlled by the driver as well as by an electrical signal. The RASS provides a so-called "fail-degraded" functionality whose degree of degradation was determined by the determined redundancy requirements. The double controllable steering valve is designed in such a way that the driver is able to override the automatic system at any time and that the required steering torque can be distributed arbitrarily be-tween the electric and the hydraulic subsystem within the torque and power limits of the electric subsystem. This functionality is usable to increase efficiency compared to conven-tional truck steering systems. An operating strategy is developed for the various system states of the RASS which, tak-ing into account the driver's state, the required steering torques and possible system faults, controls the power steering state in such a way as to increase the efficiency of the steering system, controls the transitions between manual and automated driving and provides fallback strategies in the event of a fault. The result is an innovative steering concept that meets all the requirements of today's trucks and is suitable for AD3+.

With an ever-increasing number of vehicles roaming the streets and a general intensification of ongoing daily traffic the current vehicular safety systems are not able to reduce the number of traffic accidents further. As the majority of severe or deadly traffic accidents nowadays is caused by human error, car manufacturers and researchers alike focus on the self-driving vehicle as a promising solution to this problem, as a machine is unaffected from human conditions such as tiredness or drunk driving. To enhance the overall achievable driving safety and comfort the self-driving vehicles rely on an additional map database, besides the hardware sensor system installed onboard. The so-called High Definition Map (HD Map), a highly precise virtual model of the actual real-world provides detailed information about the ongoing traffic situation ahead of the car's sensor ranges. Otherwise critical traffic situations can be resolved by this a priori knowledge and if necessary, a handover of the driving control back to a human driver can be triggered. The maintenance of the HD Map is a major challenge, as due to the importance of the map for the self-driving vehicle map updates have to be realized in much shorter time (minutes instead of months) compared to established concepts common for human-oriented digital navigation maps. This thesis provides contributions in the areas of Distribution, Generation and Provision of such map updates, as the key communication challenges of the maintenance procedure. Our first contribution is the development, implementation and evaluation of a protocol that realizes the context-specific distribution of partial and incremental map updates. The protocol has been designed with the prerequisites and requirements of a self-driving vehicle in mind. To achieve the efficient dissemination of updates to all cars the protocol relies on infrastructure-based (cellular) and ad hoc communication (WLAN) between the vehicles. The performance of the protocol is evaluated based on realistic traffic simulations and actual map content. As our second contribution, we develop and implement an algorithm that detects changes in the road infrastructure (e.g. induced by construction sides) based solely on low-cost sensor information. This detection algorithm facilitates the succeeding update generation of the map data in the identified area. We evaluate the capabilities of the detection algorithm under a real-world data set in the example of a highway construction site scenario. To enhance the provision of map updates and vehicular sensor data via wireless communication, we conduct our third and most comprehensive contribution. We focus on the design and enhancement of a variety of different techniques and concepts to obtain broad knowledge about the serving wireless network to be provided in a subsequent step as valuable information to related transmission scheduling algorithms. These techniques and concepts include the measurement and prediction of the various performance indicators of actual deployed cellular networks, via low-cost hardware and software, as well as their further usage in simulation and network connectivity maps, always with an emphasis on easy deployability and the reutilization of existing components. Overall, this thesis presents essential contributions, which in their collectivity support the realization of a robust, dynamic and reliable maintenance cycle of an HD Map for self-driving vehicles.

This dissertation is concerned with the application of functional decomposition - which is known from other fields, for example mathematics or computer science - for the validation of automated driving functions. The approach aims to reduce the number of required test cases compared to a scenario-based black box system test. The first part of this thesis analyzes the state of the art for the verification and validation of automated driving functions. A validation of highly automated driving functions with exist-ing methods is not feasible due to the “open world” with a multitude of influence parameters that leads to a high number of required tests. This challenge indicates the need to develop new approaches to reduce the validation effort. The development of a method for the application of functional decomposition for the defi-nition of so-called particulate test cases - i.e. test cases that serve to verify and ultimately validate one or more functional layers of an automated driving function - is therefore defined as the goal of this work. Subsequently, requirements for the development of a validation method are defined and research questions are derived. The main part of the thesis focuses on these research questions and the development of the following substeps of the methodology: - Definition of independent functional layers and their interfaces - Definition of criteria for evaluating the functional layers - Allocation of influence parameters - Generation of particulate test cases Furthermore, the potential to reduce the validation effort by functional decomposition is quantified. This shows that the absolute test effort as well as the possible reduction of the test effort by functional decomposition strongly depend on the required test coverage and the discretization of the influence parameters. Depending on the required test coverage, the amount of required test cases can be reduced by up to two orders of magnitude by the intro-duced approach. In the final part of this thesis, the goals set at the beginning are compared with the actual gain of knowledge and remaining as well as newly added questions for further research pro-jects are presented. These concern above all a further detailing and automation of the method for an application in practice, as well as further measures for the reduction of the validation effort beyond the application of the functional decomposition as for example the definition of the minimum necessary test space coverage and the discretization of influence parameters with a continuous value range.

The rise of automated driving will fundamentally change our mobility in the near future. This thesis specifically considers the stage of so called highly automated driving (Level 3, SAE International, 2014). At this level, a system carries out vehicle guidance in specific application areas, e.g. on highway roads. The driver can temporarily suspend from monitoring the driving task and might use the time by engaging in so called non-driving related tasks (NDR-tasks). However, the driver is still in charge to resume vehicle control when prompted by the system. This new role of the driver has to be critically examined from a human factors perspective. The main aim of this thesis was to systematically investigate the impact of different NDR-tasks on driver behavior and take-over performance. Wickens’ (2008) architecture of multiple resource theory was chosen as theoretical framework, with the building blocks of multiplicity (task interference due to resource overlap), mental workload (task demands), and aspects of executive control or self-regulation. Specific adaptations and extensions of the theory were discussed to account for the context of NDR-task interactions in highly automated driving. Overall four driving simulator studies were carried out to investigate the role of these theoretical components. Study 1 showed that drivers focused NDR-task engagement on sections of highly automated compared to manual driving. In addition, drivers avoided task engagement prior to predictable take-over situations. These results indicate that self-regulatory behavior, as reported for manual driving, also takes place in the context of highly automated driving. Study 2 specifically addressed the impact of NDR-tasks’ stimulus and response modalities on take-over performance. Results showed that particularly visual-manual tasks with high motoric load (including the need to get rid of a handheld object) had detrimental effects. However, drivers seemed to be aware of task specific distraction in take-over situations and strictly canceled visual-manual tasks compared to a low impairing auditory-vocal task. Study 3 revealed that also the mental demand of NDR-tasks should be considered for drivers’ take-over performance. Finally, different human-machine-interfaces were developed and evaluated in Simulator Study 4. Concepts including an explicit pre-alert (“notification”) clearly supported drivers’ self-regulation and achieved high usability and acceptance ratings. Overall, this thesis indicates that the architecture of multiple resource theory provides a useful framework for research in this field. Practical implications arise regarding the potential legal regulation of NDR-tasks as well as the design of elaborated human-machine-interfaces
In den nächsten Jahren wird die Fahrzeugautomatisierung stufenweise immer weiter zunehmen. Im Fokus dieser Arbeit steht das Hochautomatisierte Fahren (HAF), bei dem ein System in definierten Anwendungsbereichen, z.B. auf Autobahnen, die Fahraufgabe vollständig übernehmen kann (Level 3; SAE International, 2014). Der Fahrer muss das Verkehrsgeschehen nicht mehr überwachen, jedoch bereit sein, nach Aufforderung durch das System die Fahraufgabe wieder zu übernehmen. Bisherige Forschung legt nahe, dass Fahrer die freigewordene Zeit oftmals zur Beschäftigung mit sog. fahrfremden Tätigkeiten (FFTs) nutzen werden. Die vorliegende Arbeit beschäftigt sich mit den Herausforderungen, die diese neue Rolle des Fahrers mit sich bringt. Der Fokus liegt auf dem Einfluss unterschiedlicher FFTs auf die Übernahmeleistung und der Frage, inwieweit Fahrer den Umgang mit FFTs an die situativen Bedingungen anpassen. Die Theorie der multiplen Ressourcen (Wickens, 2008) wurde dabei als Rahmenmodell gewählt und für den spezifischen Anwendungsfall von HAF-Systemen ausgelegt. In vier Fahrsimulatorstudien wurden die unterschiedlichen Komponenten der Theorie untersucht. Studie 1 beschäftigte sich mit dem Aspekt der Ressourcenallokation (Selbstregulation). Die Ergebnisse zeigten, dass Fahrer die Beschäftigung mit einer prototypischen FFT an die Verfügbarkeit des HAF-Systems anpassten. Die Tätigkeit wurde bevorzugt im HAF und nicht im manuellen Fahrbetrieb durchgeführt und vor Übernahmesituationen wurden weniger Aufgaben neu begonnen. Studie 2 betrachtete den Aspekt der Interferenz zwischen FFT und Fahraufgabe. Die Modalitäten einer FFT wurden dazu systematisch variiert. Dabei zeigte sich, dass insbesondere visuell-manuelle Tätigkeiten mit hoher motorischer Beanspruchung (z.B. ein in der Hand gehaltenes Tablet) die Übernahme erschwerten. Fahrer schienen sich der Ablenkung bewusst zu sein und brachen diese Art von Aufgaben bei der Übernahme eher ab. Studie 3 ergab Hinweise, dass neben den Aufgabenmodalitäten auch kognitive Beanspruchung die Übernahmeleistung beeinträchtigen kann. Studie 4 beschäftigte sich mit der Mensch-Maschine-Schnittstelle (HMI) für HAF-Systeme. Die Ergebnisse ergaben, dass eine explizite Vorankündigung von Übernahmesituationen die Selbstregulation des Fahrers unterstützen kann. Die Arbeit zeigt die Eignung der multiplen Ressourcentheorie als Rahmenmodell für Forschung im Bereich HAF. Praktische Implikationen ergeben sich für mögliche gesetzliche Regelungen über erlaubte Tätigkeiten beim HAF, genauso wie konkrete HMI-Gestaltungsempfehlungen

碩士
淡江大學
電機工程學系碩士在職專班
102
This work proposes to develop an automatic compensation device for power diode output. This device uses an analog-to-digital converter to detect the forward voltage (VF) as the index address for the non-volatile memory, which stores the pre-calibrated digital current data of the power diode, to get the corresponding digital current. The read digital current is then converted to an analog current by the digital-to-analog converter to feed to the current control circuit of the power diode. This mechanism can control the output of the power diode to an almost constant level. The use of the output of the analog-to-digital converter as the index address of the non-volatile memory does not need an extra time for indexing, and it can increase the efficiency of the calibration significantly.

This thesis presents a novel approach to several problems in intelligent transportation systems using collaborative driving coordination. With inter-vehicle communication and intelligent vehicle cooperation, important tasks in transportation such as lane position determination, lane assignment and platoon formation can be solved. Several topics in regard to inter-vehicle communication, lane positioning, lane assignment and platoon formation are explored in this thesis: First, the design and experimental results of low-cost lane-level positioning system that can support a large number of transportation applications are discussed. Using a Markov-based approach based on sharing information among a group of vehicles that are traveling within the communication range of each other, the lane positions of vehicles can be determined. The robustness effectiveness of the system is shown in both simulations and real road tests. Second, a decentralized approach to lane scheduling for vehicles with an aim to increase traffic throughput while ensuring the vehicles exit successfully at their destinations is presented. Most of current traffic management systems do not consider lane organization of vehicles and only regulate traffic flows by controlling traffic signals or ramp meters. However, traffic throughput and efficient use of highways can be increased by coordinating driver behaviors intelligently. The lane optimization problem is formulated as a linear programming problem that can be solved using the Simplex method. Finally, a direction for cooperative vehicle platoon formation is proposed. To enhance traffic safety, increase lane capacities and reduce fuel consumption, vehicles can be organized into platoons with the objective of maximizing the travel distance that platoons stay intact. Toward this end, this work evaluates a proposed strategy which assigns vehicles to platoons by solving an optimization problem. A linear model for assigning vehicles to appropriate platoons when they enter the highway is formulated. Simulation results demonstrate that lane capacity can be increased effectively when platooning operation is used.