Redundant System Architecture DRIVE PILOT: Braking, Steering, Electrical System, Positioning, Stereo-Multi-Purpose-Camera.

Redundancy for safe conditionally automated driving.

September 13, 2022 – When it comes to conditionally automated driving (SAE Level 3), safety and reliability are the top priorities for Mercedes-Benz. DRIVE PILOT is therefore based on a system architecture that enables safe control of all situations that could potentially arise.

To this end, braking, steering, power supply and some parts of the sensor system are designed with physical and functional redundancy. By adopting this safety focused approach to system design, Mercedes-Benz is setting completely new benchmarks in automated driving. DRIVE PILOT, the world’s first internationally certified system, has been available as an option for the S-Class and EQS in Germany since 17 May 2022.

The four core elements of the redundant architecture encompass the braking system, steering, power supply and some of the sensors. This includes environment recognition and handling. The battery, steering motor, wheel speed sensors and algorithms used by the system for data calculation are likewise duplicated. Some aspects of the sensor system are also functionally redundant because their different physical concepts (incl. optical; ultrasound; radio waves) are mutually corroborative, thus ensuring safe operation at all times. This mainly encompasses radar, cameras and a LiDAR. However, ultrasound and moisture sensors as well as microphones also deliver valuable data. Overall, more than 30 sensors ensure that DRIVE PILOT is reliably able to master the task of driving.

Redundant System Architecture DRIVE PILOT: Braking, Steering, Electrical System.
Redundant System Architecture DRIVE PILOT: Braking, Steering, Electrical System.
DRIVE PILOT Steering: Redundant electrical power steering.
DRIVE PILOT Steering: Redundant electrical power steering.
DRIVE PILOT Braking: Multiple sensors for vehicle speed detection.
DRIVE PILOT Braking: Multiple sensors for vehicle speed detection.
DRIVE PILOT Electrical System: Additional electrical system for DRIVE PILOT including separate battery.
DRIVE PILOT Electrical System: Additional electrical system for DRIVE PILOT including separate battery.
Redundant System Architecture DRIVE PILOT: Braking, Steering, Electrical System.
DRIVE PILOT Steering: Redundant electrical power steering.
DRIVE PILOT Braking: Multiple sensors for vehicle speed detection.
DRIVE PILOT Electrical System: Additional electrical system for DRIVE PILOT including separate battery.

Following activation of DRIVE PILOT, the system controls speed and distance, and keeps the vehicle in its own lane. Under certain conditions and on suitable sections of German autobahn, customers can hand over the task of driving to the system when traveling in heavy traffic or traffic jams at speeds of up to 60 km/h. In the unlikely event of a failure in one of the primary systems, the DRIVE PILOT system architecture is able to recognise the situation and facilitate a safe handover of control to the driver. Even if the driver is unable to comply with a handover prompt, e.g. due to a medical emergency, DRIVE PILOT initiates a safe emergency stop manoeuvre that does not pose a risk to traffic following behind.