论文标题
朝着对自动驾驶功能的复杂系统要求的运行时间监视
Towards Runtime Monitoring of Complex System Requirements for Autonomous Driving Functions
论文作者
论文摘要
公共流量中的自动驾驶功能(ADF)必须遵守基于来自不同学科的专家的知识,例如律师,安全专家,心理学家。在本文中,我们介绍了有关ADF验证此类要求的研究预览。我们研究了交通序列图表(TSC)对此类要求形式化的适用性,并提出了在验证运行期间监视系统合规性的概念。我们发现TSC及其直观的视觉语法在交通域的符号上,是对此类要求的协作形式化的有希望的选择。对于TSC示例,我们根据我们的新颖概念来描述运行时监视器的构建,该概念利用了TSC中的空间和时间方面的分离,并成功地将监视器应用于示例性运行。监视器在运行时不断提供判决,这在ADF验证中特别有益,而验证运行昂贵。下一个开放研究问题涉及我们的监视器构建的概括,TSC可监视性限制的识别以及对实际应用中监视器性能的调查。从角度来看,TSC运行时监视可以在其他新兴应用领域(例如AI培训),在操作过程中保护ADF并在现场收集有意义的流量数据。
Autonomous driving functions (ADFs) in public traffic have to comply with complex system requirements that are based on knowledge of experts from different disciplines, e.g., lawyers, safety experts, psychologists. In this paper, we present a research preview regarding the validation of ADFs with respect to such requirements. We investigate the suitability of Traffic Sequence Charts (TSCs) for the formalization of such requirements and present a concept for monitoring system compliance during validation runs. We find TSCs, with their intuitive visual syntax over symbols from the traffic domain, to be a promising choice for the collaborative formalization of such requirements. For an example TSC, we describe the construction of a runtime monitor according to our novel concept that exploits the separation of spatial and temporal aspects in TSCs, and successfully apply the monitor on exemplary runs. The monitor continuously provides verdicts at runtime, which is particularly beneficial in ADF validation, where validation runs are expensive. The next open research questions concern the generalization of our monitor construction, the identification of the limits of TSC monitorability, and the investigation of the monitor's performance in practical applications. Perspectively, TSC runtime monitoring could provide a useful technique in other emerging application areas such as AI training, safeguarding ADFs during operation, and gathering meaningful traffic data in the field.