electronblue
Active Member
Thanks. That's helpful. It sounds like Audi did come up with a good solution for its L3 in cases when the driver is unresponsive.
SAE says:
"Thus, a level 3 ADS, which is capable of performing the entire DDT within its ODD, may not be capable of performing the DDT fallback in all situations that require it and thus will issue a request to intervene to the DDT fallback-ready user when necessary
At levels 4 and 5, the ADS must be capable of performing the DDT fallback and achieving a minimal risk condition. Level 4 and 5 ADS-equipped vehicles that are designed to also accommodate operation by a driver (whether conventional or remote) may allow a user to perform the DDT fallback if s/he chooses to do so. However, a level 4 or 5 ADS need not be designed to allow a user to perform DDT fallback and, indeed, may be designed to disallow it in order to reduce crash risk (see 8.9)."
So it seems like the big difference between L3 and L4 is that L3 will prompt the driver to take over but will pull over if the driver is unable to take over whereas a L4 car needs to be able to do the entire fallback itself and leave the driver out of the process entirely.
Basically Level 3 can provide DDT fallback to a minimal risk condition (if needed), Level 4-5 must provide it.
DDT fallback is separate from failure mitigation, which is what happens on Level 3 when the driver is unresponsive to taking over, and the car takes simple action to stop. This can actually apply to Level 4/5 as well in some catastrophic situations when the entire ADS system and DDT fallback are failing. I guess in theory a manufacturer could make a Level 3 without failure mitigation that actually stops the car, but it would have to be preceded by appropriate warnings and time all the same. The way in which failure mitigation is done on Level 3 has more leeway than Levels 4-5.
The thing to understand about the Levels is that it is the design intent that counts. A car doesn’t stop being Level 5 just because someone encounters one road it can’t handle, and a poorly working Level 4 prototype is not the same as Level 2 even if it requires a safety driver. On the same note a Level 2 system does not become Level 3-5 just because ”it looks like it”, it must have designation by manufacturer.
Last edited: