Modeling and Synthesis of the Lane Change Function of an Autonomous Vehicle
Paper i proceeding, 2018

Unexpected incorrect behavior of autonomous vehicles can have catastrophic outcomes. But, as with any large-scale software development, correctness of the system is not easily guaranteed. As the system is made up of multiple sub-modules that interact with each other, unexpected behavior can arise from incorrect interactions between the modules. In a previous paper, formal verification was applied to the lane change module of the decision and control software (under development) for an autonomous vehicle. This revealed incorrectness in the model, which could also be shown to exist in the actual software. Manual changes to the model did not result in absence of the incorrectness, and so in this paper we aim to patch the error by applying synthesis. The synthesized result is correct by construction, but it is not obvious what part of the functionality is disabled by the synthesis. Though different synthesis techniques were able to generate supervisors for the model, only when the supervisor was expressed as guard conditions on the events was it possible to interpret the effect of the synthesis. However, the supervisors put constraints on how the input data to the lane change module might change, so in the end the supervisors put behavioral requirements on the modules that generate the input to the lane change module.

Supervisory Control Theory


Discrete event systems

Extended finite-state machines


Jonas Krook

Chalmers, Elektroteknik, System- och reglerteknik

Anton Zita

Roozbeh Kianfar

Zenuity AB

Sahar Mohajerani

Chalmers, Elektroteknik, System- och reglerteknik

Martin Fabian

Chalmers, Elektroteknik, System- och reglerteknik


24058963 (eISSN)

Vol. 51 7 133-138

14th IFAC Workshop on Discrete Event Systems WODES 2018
Sorrento Coast, Italy,


Informations- och kommunikationsteknik



Inbäddad systemteknik

Datavetenskap (datalogi)




Mer information

Senast uppdaterat