Mercedes-Benz says its Drive Pilot automated driver assistance system has become the world’s first internationally certified Level 3 automated car technology. The company adds that it backs redundancy for safe conditionally automated driving.
When it comes to conditionally automated driving (SAE Level 3), safety and reliability are the top priorities for Mercedes-Benz. Drive Pilot is therefore based on a system architecture that enables safe control of all situations that could potentially arise.
To this end, braking, steering, power supply and some parts of the sensor system are designed with physical and functional redundancy. By adopting this safety‑focused approach to system design, Mercedes-Benz is setting completely new benchmarks in automated driving.
Drive Pilot, the world’s first internationally certified system, has been available as an option for the S-Class and EQS in Germany since 17 May 2022.
The four core elements of the redundant architecture encompass the braking system, steering, power supply and some of the sensors. This includes environment recognition and handling. The battery, steering motor, wheel speed sensors and algorithms used by the system for data calculation are likewise duplicated.
Some aspects of the sensor system are also functionally redundant because their different physical concepts (including optical; ultrasound; radio waves) are mutually corroborative, ensuring safe operation at all times. This mainly encompasses radar, cameras and a lidar.
However, ultrasound and moisture sensors as well as microphones also deliver valuable data. Overall, more than 30 sensors ensure that Drive Pilot is reliably able to master the task of driving.
Markus Schäfer, chief technology officer responsible for development and procurement, Mercedes-Benz, says: “The name Mercedes-Benz has always stood for safety. And we are already setting standards in the development and implementation of automated driving systems like Drive Pilot.
“We are convinced that redundancy is the right approach for Level 3 automated driving and beyond. When it comes to sensors, we also see the use of lidar alongside radar and cameras as particularly indispensable.
“We can compensate for the situation-dependent deficits of one sensor with the characteristics of another. Relying on just one type of sensor would not meet Mercedes-Benz’s high safety standards.”
Following activation of Drive Pilot, the system controls speed and distance, and keeps the vehicle in its own lane. Under certain conditions and on suitable sections of German autobahn, customers can hand over the task of driving to the system when traveling in heavy traffic or traffic jams at speeds of up to 60 km/h.
In the unlikely event of a failure in one of the primary systems, the Drive Pilot system architecture is able to recognise the situation and facilitate a safe handover of control to the driver.
Even if the driver is unable to comply with a handover prompt, for example due to a medical emergency, Drive Pilot initiates a safe emergency stop manoeuvre that does not pose a risk to traffic following behind.
