In this paper, the architecture of an automated driving system (ADS) is proposed to ensure safe delegation of driving authority between the ADS and a driver. Limitations of the ADS functions may activate delegation of driving authority to a driver. However, it leads to severe consequences in emergency situations where a driver may be drowsy or distracted. To address these issues, first, the concept model for the ADS in the situation for delegation of driving authority is described taking the driver's behaviour and state into account. Second, the behaviour/state of a driver and functional flow/state of ADS and the interactions between them are modelled to understand the context where the ADS requests to delegate the driving authority to a driver. Finally, the proposed architecture of the ADS is verified under the simulations based on the emergency braking scenarios. In the verification process using simulation, we have derived the necessary condition for safe delegation of driving authority is that the ADS should assist s driver even after delegating driving authority to a driver who has not enough capability to regain control of the driving task.
展开▼
