arXivDaily arXiv每日学术速递 周一至周五更新
北美退伍军人节(Veterans Day),12 日无更新
arXiv 2104.06178cs.ROcs.LOcs.SEcs.SYeess.SY
收藏

认证控制:自动驾驶汽车可验证安全的架构

Certified Control: An Architecture for Verifiable Safety of Autonomous Vehicles

MIT(麻省理工学院);Toyota Research Institute(丰田研究所);Universidade Federal de Minas Gerais(米纳斯吉拉斯联邦大学)

Daniel Jackson, Valerie Richmond, Mike Wang, Jeff Chow, Uriel Guajardo, Soonho Kong, Sergio Campos, Geoffrey Litt, Nikos Arechiga

摘要:

自动驾驶汽车的广泛采用将需要比目前更大的安全信心。认证控制是一种新的安全架构,其目标有两个方面:实现非常高的安全水平,并提供一个框架,以合理的信心,在安全。其核心思想是运行时监控器,与传感器硬件和低级控制和执行器一起作为一个小型的可信基础,确保整个系统的安全。不幸的是,在当前的系统中,复杂的感知使得即使是运行时监视器的验证也具有挑战性。因此,与传统的运行时监视不同,认证的控制监视器本身不执行感知和分析。相反,主控制器将建议的操作是安全的证据组装到证书中,然后由监视器独立检查。这利用了查找和检查成本之间的经典差距。控制器被分配了查找证书的任务,因此可以使用最复杂的算法(包括支持学习的软件);监视器只被分配了检查任务,因此可以快速运行,体积更小,形式上可验证。本文阐述了认证控制的关键思想,并以LiDAR数据的认证及其形式化验证为例进行了说明。它展示了该架构如何显著减少需要验证的代码量,提供了传统架构中可能无法实现的端到端安全分析。

英文摘要:

Widespread adoption of autonomous cars will require greater confidence in their safety than is currently possible. Certified control is a new safety architecture whose goal is two-fold: to achieve a very high level of safety, and to provide a framework for justifiable confidence in that safety. The key idea is a runtime monitor that acts, along with sensor hardware and low-level control and actuators, as a small trusted base, ensuring the safety of the system as a whole. Unfortunately, in current systems complex perception makes the verification even of a runtime monitor challenging. Unlike traditional runtime monitoring, therefore, a certified control monitor does not perform perception and analysis itself. Instead, the main controller assembles evidence that the proposed action is safe into a certificate that is then checked independently by the monitor. This exploits the classic gap between the costs of finding and checking. The controller is assigned the task of finding the certificate, and can thus use the most sophisticated algorithms available (including learning-enabled software); the monitor is assigned only the task of checking, and can thus run quickly and be smaller and formally verifiable. This paper explains the key ideas of certified control and illustrates them with a certificate for LiDAR data and its formal verification. It shows how the architecture dramatically reduces the amount of code to be verified, providing an end-to-end safety analysis that would likely not be achievable in a traditional architecture.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑