This paper was converted on www.awesomepapers.org from LaTeX by an anonymous user.
Want to know more? Visit the Converter page.

label1label1footnotetext: 790 Atlantic Dr NW, Atlanta, GA, 30313

Impact of Acceleration/deceleration limits on the String Stability of Adaptive Cruise Control

Hao Zhou Anye Zhou Tienan Li Danjue Chen Srinivas Peeta Jorge Laval [email protected] School of Civil and Environmental Engineering, Georgia Institute of Technology, Atlanta, United States School of Civil and Environmental Engineering, University of Massachusetts Lowell , Lowell, United States
Abstract

This paper demonstrates that the acceleration/deceleration limits in ACC systems can make a string stable ACC amplify the speed perturbation in natural driving. It is shown that the constrained acceleration/deceleration of the following ACCs are likely to cause speed overshoot to compensate for an extra large/small spacing. Additionally, we find that the constrained deceleration limits can also jeopardize safety, as the limited braking power produces extra small spacing or even crashes. The findings are validated through experiments on real cars. The paper suggests that the ACC parameter space should be extended to include the acceleration/deceleration limits considering their significant role exposed here. Through numerical simulations of ACC platoons, we show: i) a marginal string stable ACC is preferable due to the smaller total queue length and the shorter duration in congestion; ii) congestion waves in a mixed ACC platoon largely depend on the sequence of vehicles provided different acceleration/deceleration limits, and iii) the safety hazard caused by the constrained deceleration limits is more significant in mixed ACC platoons when string unstable ACCs exist.

keywords:
factory ACC, acceleration limits, safe braking, string stability
journal: Transportation Research Part C

1 Introduction

Adaptive cruise control (ACC) systems have been widely equipped on commercial vehicles to alleviate driving fatigue and enhance safety. The ACC system consists of an upper-level planner and a low-level controller. When ACC is activated, the upper-planner receives the updated information from onboard sensors and plans for the optimal trajectory (e.g., speed, acceleration), and then the low-level controller executes the trajectory by sending low-level commands (e.g., gas/brake) to the car control interface. Recent studies (gunter2019model, li2021ACC) point out that ACC systems equipped on commercial vehicles are not string stable, which implies vehicles driven by ACC can amplify the speed fluctuations and exacerbate the propagation of stop-and-go waves. This discovery inspires many studies to explore the car-following behavior of commercial vehicles driven by ACC systems. For instance, gunter2019model, li2020trade, shi2021empirical calibrate parsimonious models (e.g., car-following models, linear feedback controllers) to capture the behavior of ACC systems. The data-driven approach based on a parsimonious model can present a holistic description of an ACC system, however, this approach fails to explain some critical characteristics of an ACC system, such as the effects of upper-level planner and low-level controller, the interactions between them, the build-in desired spacing policy, and the acceleration/deceleration limits. Zhou2021SignificanceOL explores the impact of the low-level controller on string stability (SS), however, the acceleration/deceleration limits embedded in the low-level controller are not explicitly analyzed.

Based on the best of our knowledge, few studies have explored the impact of acceleration/deceleration limits, which can significantly jeopardize the SS and safety performance of the ACC system. Moreover, there is also a lack of clarity between SS and speed dampening.

In this study, we first articulate the relationship between SS and speed dampening in situations with or without acceleration/deceleration limits. For traffic engineers, the dampening of speed fluctuations along a string of vehicles is favorable as it alleviates the propagation of stop-and-go waves. Then, a natural question arises as follows. While SS condition borrowed from control theory is defined only given a ”small” perturbation, does it necessarily guarantee to dampen speed fluctuations in natural drives? The short answer is ’no’. This can be problematic for designing new ACC or CACC algorithms, as most of them rely on the SS condition borrowed from control theory. However, the property of SS may not be sufficient for dampening speed fluctuations. While the SS is only for a small perturbation and seems able to explain ”phantom traffic congestion” caused by an unexpected small speed change, the true speed changes in traffic flow are much more complex. It is easy to observe more frequent and large fluctuations or waves in natural driving. For example, a platoon lead might experience up-and-down speed changes in a local road with many curves or grades. Of course, we expect the same ”dampening” effect to hold in these scenarios as well. But compared to the ”phantom traffic congestion”, those more natural but complex speed changes have not drawn enough attention. Unfortunately, so far we don’t have any proof or evidence to show the SS is still sufficient for those complex speed-changing cases.

In the previous study (Zhou2021SignificanceOL), we introduce the algorithms of an open-source factory ACC system and found that the upper-level planners are already string stable, whereas the low-level controllers play a significant role in the string stability. In that work, we only investigated a homogeneous platoon of ACC-equipped vehicles, and all the perturbations are caused by the ACC systems as well, i.e. the pattern and size of the lead vehicle speed changes are generated by the cruise control system of the lead ACC vehicle. However, in the real-world scenario where vehicles have different acceleration/deceleration limits, the differences in vehicle acceleration/deceleration ability significantly influence the SS of a platoon.

More importantly, even if the ACC system satisfies SS and speed dampening conditions, the existence of acceleration/deceleration limits can undermine the SS or speed dampening performance. When the perturbation induces the lead vehicle to accelerate/decelerate at a rate beyond the acceleration/deceleration limits of the ego vehicle driven by ACC, the acceleration/deceleration limits will significantly influence the car-following behavior of the ego vehicle. In addition, the perturbation type also matters when acceleration/deceleration limits exist. Specifically, for non-cyclic perturbation (i.e., step-function type speed variations of the lead vehicle), the acceleration/deceleration limits would hinder the vehicle from catching up with the lead vehicle, inducing large spacing. The large spacing then triggers the vehicle to accelerate/decelerate at the limit to follow with the lead vehicle, which inevitably leads to speed overshoot/undershoot and undermines SS. For cyclic perturbation (e.g., sinusoidal speed variations), if the lead vehicle accelerates then decelerates before the ego vehicle (driven by ACC) overshoot (i.e., larger speed fluctuation than the lead vehicle), then SS can be maintained even with the impact of acceleration/deceleration limits. Besides the impact of SS, the acceleration/deceleration limits restrict the vehicle to brake hard when it is entailed for collision avoidance, which jeopardizes the safety performance of the ACC system. This is a critical issue that ACC suppliers should carefully address.

The remainder of the paper is organized as follows. Section 2 articulates the relationship between SS and speed dampening. Section 3 presents the acceleration/deceleration limits in the factory ACC system. Section 4 discusses the impact of acceleration/deceleration limits on string stability and provides relevant empirical evidence. Section 5 articulates the impact of the deceleration limit on safety and provides relevant empirical evidence. Section 6 concludes the paper and points out future directions.

2 SS of the factory linear ACC and its relationship with dampening

2.1 SS of the factory linear ACC

As shown in our previous work (zhou2021impact), the factory linear ACC module is using the lead vehicle speed vleadv_{lead} from the sensor to plan the desired distance and the target speed/acceleration, which is in contrast with the common design in the literature that adopts the ego speed instead.

Although the small change from vegov_{ego} to vleadv_{lead} may sound trivial, it could cause huge differences on the SS a linear CF model. Here we investigate the SS of the factory linear model using the transfer function adopted in similar studies.

The dynamics of the factory linear ACC that incorporates vleadv_{lead} is:

vego(t+Δt)=kv(xlead(t)xego(t)vlead(t)τδ)+vlead(t)v_{ego}(t+\Delta t)=k_{v}(x_{lead}(t)-x_{ego}(t)-v_{lead}(t)\cdot\tau-\delta)+v_{lead}(t) (1)

where δ\delta is the minimum safe gap between vehicles.

Let yegoy_{ego} and uegou_{ego} denote the headway and speed variation of the follower vehicle that deviates from the equilibrium state.

y˙ego\displaystyle\dot{y}_{ego} =xlead˙xego˙=(vleadveq)(vegoveq)=uleaduego\displaystyle=\dot{x_{lead}}-\dot{x_{ego}}=(v_{lead}-v_{eq})-(v_{ego}-v_{eq})=u_{lead}-u_{ego} (2)
uego˙\displaystyle\dot{u_{ego}} =vego˙=kvy˙ego+(1kvτ)ulead˙\displaystyle=\dot{v_{ego}}=k_{v}\dot{y}_{ego}+(1-k_{v}\tau)\dot{u_{lead}} (3)
=kv(vleadvego)+(1kvτ)alead\displaystyle=k_{v}(v_{lead}-v_{ego})+(1-k_{v}\tau)a_{lead} (4)

Note that (3) is directly from (1), which does not rely on the deviation from the equilibrium state. It is the (2) that requires the leader and follower to have an initial equilibrium state or just an identical speed.

Take the Laplace transform and let U(s)={u(t)}U(s)=\mathcal{L}\{u(t)\}, and Y(s)={y(t)}Y(s)=\mathcal{L}\{y(t)\}.

Y(s)\displaystyle Y(s) ={(uleaduego)𝑑t}=1s[{ulead(t)}{uego(t)}]=1s[Ulead(s)Uego(s)]\displaystyle=\mathcal{L}\{\int(u_{lead}-u_{ego})dt\}=\frac{1}{s}[\mathcal{L}\{u_{lead}(t)\}-\mathcal{L}\{u_{ego}(t)\}]=\frac{1}{s}[U_{lead}(s)-U_{ego}(s)] (5)
sUego(s)\displaystyle sU_{ego}(s) =kvY(s)+(1kvτ)sUlead(s)\displaystyle=k_{v}Y(s)+(1-k_{v}\tau)\cdot sU_{lead}(s) (6)

Substitute (5) into (6), we have the transfer function:

sUego(s)\displaystyle sU_{ego}(s) =kvs[Ulead(s)Uego(s)]+(1kvτ)sUlead(s)\displaystyle=\frac{k_{v}}{s}[U_{lead}(s)-U_{ego}(s)]+(1-k_{v}\tau)sU_{lead}(s)
Γ(s)\displaystyle\Gamma(s) =Uego(s)Ulead(s)=(1kvτ)s2+kvs2+kv\displaystyle=\frac{U_{ego}(s)}{U_{lead}(s)}=\frac{(1-k_{v}\tau)s^{2}+k_{v}}{s^{2}+k_{v}} (7)

where we need |1kvτ|<1|1-k_{v}\tau|<1 to guarantee the SS. Notice that kv>0k_{v}>0 and vary at different speed levels. Time headway is usually a constant with short, medium, and far options. Thus the SS condition reduces to:

kv(v)<2/τk_{v}(v)<2/\tau (8)

The above condition (8) indicates smaller kvk_{v} helps SS. Recall that kvk_{v} can be understood as the sensitivity of the CF model to the deviation from the desired gap, it determines how fast the ACC tries to move towards the desired gap.

Besides the traditional transfer function method from the control theory, the author also shows an ODE-based solution can find the same SS condition in (8); see Appendix.

2.2 Relationship between the SS and speed dampening without acceleration limit

First, we release the constraint of acceleration limit and investigate whether a ’string stable’ model given a ’small’ perturbation can actually guarantee the ’speed dampening’ in natural driving featuring complex ’up-and-down speed trajectories.

The transfer function has been widely studied in the literature, however, to the best of our knowledge, all of these studies assume an initial equilibrium state with a ”small” perturbation like a single sine wave. The relation between the SS and dampening in real driving is left unknown.

Now we prove the SS is a sufficient condition for speed dampening with infinite acceleration/deceleration bounds.

Proof.

A natural driving leader speed profile can be decomposed as a sum of sinusoidal waves according to Fourier theory:

vlead(t)=M1sin(ω1t)+M2sin(ω2t)++Mnsin(ωnt)v_{lead}(t)=M_{1}sin(\omega_{1}t)+M_{2}sin(\omega_{2}t)+...+M_{n}sin(\omega_{n}t) (9)

where MiM_{i} and ωi\omega_{i} denote the magnitude and frequency of the ii component in the speed perturbation.

Apply Laplace transform which has the additive property:

{vlead(t)}={M1sin(ω1t)}+{M2sin(ω2t)}++{Mnsin(ωnt)}\mathcal{L}\{v_{lead}(t)\}=\mathcal{L}\{M_{1}sin(\omega_{1}t)\}+\mathcal{L}\{M_{2}sin(\omega_{2}t)\}+...+\mathcal{L}\{M_{n}sin(\omega_{n}t)\} (10)

Thus the input signal UsU_{s} can be decomposed in the s-domain:

U(s)=U1(s)+U2(s)+Un(s)U(s)=U_{1}(s)+U_{2}(s)+...U_{n}(s) (11)

where Ui(s)={Misin(ωit)}U_{i}(s)=\mathcal{L}\{M_{i}sin(\omega_{i}t)\} and U(s)={vlead(t)}U(s)=\mathcal{L}\{v_{lead}(t)\}.

Denote the output signal Y(s)={vego(t)}Y(s)=\mathcal{L}\{v_{ego}(t)\}.

For a parallel system, the transfer function has the additive property, which gives:

Y(s)U(s)\displaystyle\frac{Y(s)}{U(s)} =Γ1(s)U1(s)+Γ2(s)U2(s)+Γn(s)Un(s)U1(s)+U2(s)+Un(s)\displaystyle=\frac{\Gamma_{1}(s)U_{1}(s)+\Gamma_{2}(s)U_{2}(s)+...\Gamma_{n}(s)U_{n}(s)}{U_{1}(s)+U_{2}(s)+...U_{n}(s)} (12)
=Γ(s)1ifΓi(s)1i\displaystyle=\Gamma(s)\leq 1\quad\textit{if}\quad\Gamma_{i}(s)\leq 1\quad\forall{i} (13)

If the follower is an LTI system, we have Γi=Γ\Gamma_{i}=\Gamma, i\forall{i}.

To illustrate such a relationship between SS and speed dampening, Fig.1 shows the speed and acceleration of a three-vehicle platoon that dampens the speed changes which consists of several sinusoidal waves. The lead (car1) trajectory in (a) is to simulate the natural driving with small, occasional, and cyclic perturbations. From (b) it is clear that the follower acceleration has a smaller amplitude in all cycles, which leads to the dampening speeds in (a). One can easily show the acceleration dampens because the acceleration to acceleration transfer function is the same as the speed to speed transfer function according to the property of Laplace transformation.

Refer to caption
(a) speed profile
Refer to caption
(b) acceleration profile
Figure 1: Speed and acceleration of a platoon that dampens using the factory linear ACC

3 Acceleration/deceleration limits in ACCs

In the last section, we have shown the SS condition of the linear factory ACC and prove that SS can guarantee speed dampening given infinite acceleration/deceleration bounds. However, infinite limits are obviously not realistic in market ACC systems. To study the realistic acceleration/deceleration limit values and their impact, we first investigate the design of acceleration/deceleration bounds in the open-source ACC platform, Openpilot. Empirical data from recent market ACC vehicles are also shown for more evidence.

3.1 Design of the acceleration/deceleration limits in Openpilot

Now we show the acceleration/deceleration limits for both the linear and MPC planner in Openpilot; see Fig.2. The acceleration limits in both the linear planner and the MPC are piece-wise linear, similar to the linear acceleration model. Similarly, we see a linear deceleration model, which still needs more justification. Also, note that the MPC planner shows two different modes for the acceleration limits, where a more conservative acceleration bound is used when there is no CF state.

Refer to caption
(a) Linear ACC
Refer to caption
(b) MPC planner
Figure 2: Acceleration/deceleration limits in Openpilot

Recall the linear acceleration model of human drivers Laval2014APM:

dvdt\displaystyle\frac{dv}{dt} =(vcv)β\displaystyle=(v_{c}-v)\beta (14)

Correspondingly, we assume the acceleration limit also has a linear shape:

a(v)\displaystyle a^{*}(v) =a0+(vcv)β\displaystyle=a_{0}+(v_{c}-v)\beta (15)

where the empirical data suggest that a00.4a_{0}\approx 0.4, vc40m/sv_{c}\approx 40m/s and β0.015\beta\approx 0.015.

For a vehicle that accelerates using the maximum acceleration in (15) with a initial speed v0v_{0}, its speed can be obtained as:

vego(t)\displaystyle v_{ego}(t) =(v0vca0/β)eβt+a0/β+vc\displaystyle=(v_{0}-v_{c}-a_{0}/\beta)e^{-\beta t}+a_{0}/\beta+v_{c} (16)

3.2 Acceleration/deceleration data from market ACCs

We conjecture that market ACC systems adopt a similar pattern but different values of the acceleration/deceleration limits in Openpilot. To provide more evidence, now we show the empirical data of the acceleration/deceleration values in real drives that collected three recent ACC car models, including a Tesla Model X, a Honda Civic, and an electric car Toyota Prius. The drives are designed as oscillations created by a human-driven leader, who decelerated, remained its speed for a few seconds, and then accelerated to revert its origin speed level. More experiment details can be seen in (li2021ACC),

In each drive, the acceleration process is extracted and shown as a single curve Fig.3. Notice that the human driver lead vehicle adopts larger acceleration/deceleration values in those experiments, which create extra small or large gaps for the ACC vehicle to compensate for. Hence, we believe the tipping points at the curves in Fig.3 can approximately show the acceleration limits in the ACC design since they correspond to much larger or smaller gaps compared to equilibrium. We also connect the tipping points at different speed levels, which leads to approximately linear acceleration limits as similar to Openpilot Fig.2, which also provides more evidence to our theory in (15).

Refer to caption
(a) Tesla Model X
Refer to caption
(b) Honda Civic
Refer to caption
(c) Toyota Prius
Figure 3: Acceleration limits in market ACC vehicles

Similarly, we see the deceleration bounds in market ACCs in Fig.4. The tipping point of each drive indicates the ACC deceleration limit at that speed level, and connecting them also produces a linear deceleration bound. However, the authors argue that such a linear deceleration design is not as physically straightforward as the acceleration case constrained by engine power. We conjecture a smaller deceleration rate at higher speeds is designed for driving comfort, which may pose a safety issue and needs more justification.

Refer to caption
(a) Tesla Model X
Refer to caption
(b) Honda Civic
Refer to caption
(c) Toyota Prius
Figure 4: Deceleration limits in commercial ACC vehicles:

4 Impact of acceleration/deceleration limits on traffic operation

Now we study the impact of those acceleration/deceleration limits found in factory ACCs. To study the impact of SS or speed dampening, we assume the lead vehicle is a high-performance car that produces an abrupt speed change, either cyclic or non-cyclic depending on whether it reverts to its origin speed.

4.1 Non-cyclic lead speed perturbation

For the non-cyclic speed perturbation, assume the lead vehicle increases/decreases its speed from vlead(T0)v_{lead}(T_{0}) at time T0T_{0} to its final speed vlead(T5)v_{lead}(T_{5}) at time T5T_{5}. The speed trajectory of the leader can be seen as the blue curve in Fig.5 (a). To show the impact of ACC acceleration limit, we assume the lead vehicle (car1) is a performance car or driven by an aggressive driver who presses the gas pedal hard, which can produce a larger acceleration compared to a normal vehicle; see the acceleration (red curve) in Fig.5 (b).

Refer to caption
(a) speed and spacing of the two vehicles
Refer to caption
(b) low-level details of the follower
Figure 5: The impact of acceleration limit with a non-cyclic perturbation: car1 is the human-driven leader and car2 is the following ACC vehicle equipped with a linear ACC planner and PI low-level controller. The shaded area indicates the acceleration limit is reached.

Now we investigate the responses of the following ACC vehicle and study the impact of acceleration limit on speed overshoot.

In Fig.5 (a), from T0T_{0} to T1T_{1}, one can see the lead vehicle accelerates faster and has a speed advantage over the follower ACC car, which makes the spacing keep growing to its maximum at time T1T_{1}; see the blue curve in the lower graph of Fig.5 (a). Let s(t)s(t) denote the spacing at time tt, we find that the spacing between T0T_{0} and T1T_{1} has increased to an exceedingly large value compared to the desired spacing s(T5)=τvlead(T5)+δs(T_{5})=\tau\cdot v_{lead}(T_{5})+\delta. We argue that, the extra spacing is the main cause that leads the follower ACC to overshoot, i.e. vego(t)>vlead(T1)v_{ego}(t)>v_{lead}(T_{1}) after T1T_{1}.

To illustrate this finding, we start to examine the planning and low-level control process of the following ACC vehicle. According to the planner design, the vtarget=vlead+k(sτvleadδ)v_{target}=v_{lead}+k(s-\tau v_{lead}-\delta). Obviously, starting from T1T_{1}, the true spacing is larger than the desired spacing, which leads to vtarget(t)>vlead(t)v_{target}(t)>v_{lead}(t) for T1tT5T_{1}\leq t\leq T_{5}. Also note that the planning speed vtargetv_{target} directly results from the spacing, which does not account for the acceleration limits. Instead, it is the low-level controller that actually factors the acceleration limit and move the true speed smoothly. Specifically, vpid+amaxdtv_{\text{pid}}+a_{max}\cdot dt if vtarget>vpid+amaxdtv_{\text{target}}>v_{\text{pid}}+a_{max}\cdot dt.

Now we further investigate how vpidv_{pid} incorporates the acceleration limit and changes the true speed of the follower. From T0T_{0} to T1T_{1}, the low-level setpoint vpidv_{pid} updates itself using vpid=vpid+amaxdtv_{pid}=v_{pid}+a_{max}dt, which means it is moving at the designed acceleration limit of the ACC. This condition holds until vtargetv_{target} drops to the same value of vpidv_{pid}.

From T2T_{2}, the low-level setpoint starts to drop, but the true speed vegov_{ego} has experienced more overshooting due to the integral accumulation; see the orange line in the lower part of Fig.5 (b). The overshoot value caused by the integral term also depends on the accumulative tracking error of the specific low-level controller. The detailed impact of a fast/slow low-level controller can be seen in Zhou2021SignificanceOL.

From T4T_{4} to T5T_{5}, the low-level controller is no longer subject to acceleration or deceleration constraint, and vpidv_{pid} is perfectly led by the vtargetv_{target} to close the extra gap.

To summarize, we see the acceleration limit in ACC design has prevented the low-level setpoint from tracking the planning target vtargetv_{target}. This causes the true spacing to keep increasing to an exceeding value compared to the desired spacing of ACC. During the process of catching up with the leader, the ACC follower is accelerating using the designed acceleration limit, or (15) equivalently. The extra gap stops increasing when the ACC vehicle reaches and overshoots vleadv_{lead}. Then the follower starts to close the gap.

We show that the maximum overshoot speed of the follower ACC is solvable, provided the lead vehicle trajectory. The detailed process can be seen in Appendix.

From the above analysis, one can see the acceleration limit can ruin the dampening condition if the follower cannot close the extra spacing before its speed equals the leader speed. Similarly, for the deceleration case, the deceleration limit would undermine the dampening condition if the follower cannot brake enough to the equilibrium spacing τvlead1+δ\tau v_{lead}^{1}+\delta; see Fig.6.

Refer to caption
(a) speed and spacing of the two vehicles
Refer to caption
(b) low-level details of the follower
Figure 6: The impact of deceleration limit with a non-cyclic perturbation: the shaded area indicates the deceleration limits are being used.

4.2 Cyclic lead speed perturbation

The cyclic lead speed change is more likely to alleviate the negative impact on speed dampening caused by acceleration/deceleration limits because the lead vehicle helps to close the extra gap by reverting to its origin speed when the follower also tries to catches up using its constrained acceleration/deceleration.

Refer to caption
(a) accelerate then decelerate
Refer to caption
(b) decelerate then accelerate
Figure 7: The impact of acceleration/deceleration limits on platoon speeds with the cyclic perturbations.

We first show the results of a single perturbation in Fig.7, which suggests the SS of the ACC model can be deteriorated by the acceleration/deceleration limits.

In Fig.8, we repeat similar experiments as the non-cyclic case, which shows that the ACC follower does not overshoot too much at the peak/valley if the lead vehicle adopts a cyclic speed pattern. We argue that the overshooting at those points are not significant because the lead vehicle happens to change its speed and help reduces the extra small or large gap. However, the overshoot at the end of a wave is still significant, similar to what we have seen from the non-cyclic perturbations.

Refer to caption
(a) speed and spacing of the two vehicles
Refer to caption
(b) low-level details of the follower
Figure 8: The impact of acceleration/deceleration limit with a cyclic perturbation.

4.3 Empirical evidence

We have shown that acceleration/deceleration limits in following ACC vehicles can cause super large or small spacings and thus lead to speed overshooting. For validation, we found more evidence in the empirical data from the ACC experiments (li2021ACC).

Refer to caption
(a) speed
Refer to caption
(b) acceleration
Refer to caption
(c) gap
Figure 9: Impact of ACC acceleration limit in Civic experiments

Similar speed overshooting caused by ACC acceleration limits is found on the other two car models (see Fig.10.

Refer to caption
(a) Tesla
Refer to caption
(b) Prius
Figure 10: Impact of ACC acceleration limit in Model X and Prius

5 Impact of the deceleration limit on safety

From Openpilot and the empirical data from other commercial ACCs, we found that the deceleration rate of ACC vehicles is also constrained, especially at high speeds, although the true deceleration capability should not be limited as the acceleration case. While the acceleration limit leads to an extra large spacing, the deceleration constraint leads to the opposite, which can be a super small headway, causing a significant threat to a rear-end collision.

Now we study the abrupt deceleration process mathematically. Assume the lead vehicle decreases it speed due to the congestion ahead, the following ACC vehicle needs to decelerate with a required acceleration rate arequireda_{required} to prevent a collision. For the linear planner, we require the vtargetv_{target} to generate a safe deceleration rate to avoid the collision:

k(vego)(vlead(t)vego(t)τalead(t))\displaystyle k(v_{ego})(v_{lead}(t)-v_{ego}(t)-\tau\cdot a_{lead}(t)) arequired\displaystyle\leq a_{required}
k(vego)\displaystyle k(v_{ego}) arequiredvlead(t)vego(t)τalead(t)\displaystyle\geq\frac{a_{required}}{v_{lead}(t)-v_{ego}(t)-\tau\cdot a_{lead}(t)} (17)

The (17) requires a lower bound of k(v)k(v) to produce enough deceleration to avoid a collision. The (17) also indicates a smaller time headway τ\tau requires larger sensitivity.

Recall the SS condition in (8) gives an upper bound of k(v)k(v). Combining the two, we obtain:

arequiredvlead(t)vego(t)τalead(t)k(v)2τ\displaystyle\frac{a_{required}}{v_{lead}(t)-v_{ego}(t)-\tau\cdot a_{lead}(t)}\leq k(v)\leq\frac{2}{\tau} (18)

While the SS requires the kk to be smaller than 2/τ2/\tau, the safety constraint requires a lower bound.

To simulate the safety hazard, we apply an abrupt deceleration profile for the lead vehicle and investigate the behaviors of the Openpilot ACC follower. The results are shown in Fig.11, where the lead vehicle decelerates from 25 m/s to half of its original speed, and the follower almost crashes into it with a minimum spacing close to zero.

Refer to caption
Figure 11: Safety hazard caused by the deceleration limit in a fast congestion wave

To validate the impact of deceleration bounds on safe braking, we also conduct the experiments using a real car with the same ACC algorithm but a modified deceleration bound from Openpilot. We adopted a small and large deceleration bound and tested the braking process before an intersection where the ACC vehicle needs to safely decelerate to the lead stopped a vehicle at the red lights. The comparison results are shown in Fig.12. The amin(t)a_{min}(t) curve shows our design of the deceleration bound, and the gradient of vpidv_{pid} is the derivative of time. The derivatives are jerky, indicating some fluctuations in the planning speed vtargetv_{target}. However, we clearly see the low-level set-point vpidv_{pid} cannot move slower than the deceleration limit amin(t)a_{m}in(t) in the spirit of the ACC design. In Fig.12 (b), a large deceleration value is used where the car can successfully brake to speed zero. In contrast, in Fig.12 (a), the more constrained deceleration limit failed to brake in time, where the human driver was forced to take over at speed 10m/s10m/s when the lead spacing was already unsafe.

Refer to caption
(a) A small deceleration limit leads to the unsafe brake
Refer to caption
(b) Large deceleration limit guarantees the safe brake
Figure 12: Comparing small and large deceleration limits on the safe braking after a stopped car.

It is not uncommon to encounter a congestion wave in highway traffic that travels fast towards upstream and forces drivers to brake hard to avoid a collision. While human drivers can avoid crashes through hard brakes, ACC’s reaction becomes very limited in comparison. The situation is even more dangerous when the lead vehicle quickly drops to a low speed or even a full stop because the radar is more likely to drop the frame when detecting low-speed or still objects. Many ACC user instruction has mentioned this notorious radar issue and only very recent car models can cruise below 25 mph. A more recent talk from Tesla revealed that radar may fail to detect slow-moving or still objects, which means losing a leader in the ACC, which explains the failure to brake or even accelerate instead. Occasionally the authors encountered and recorded one of those dangerous situations described above; see Fig.13. Notice that both the lead and the follower vehicles dropped speeds from around 55 mph to zero in 10 seconds, where the maximum deceleration is around 5m/s2-5m/s^{2}, which is almost double the limit we saw in the ACC data. The incident did not lead to a crash thanks to the quick and sufficient reaction from the human driver. It is questionable whether a bounded ACC deceleration model can safely brake in this situation.

Refer to caption
(a) Front view at step 0
Refer to caption
(b) Front view at step 500 (5s)
Refer to caption
(c) Front view at step 1000 (10s)
Refer to caption
(d) Speed and spacing profile
Refer to caption
(e) True acceleration of the vehicle
Figure 13: An example of the abrupt large brake on highway: the incident happened when a congestion wave hit back very fast unexpectedly, forcing the driver in the ego vehicle to apply a very large brake to avoid a crash.

The response delay, restricted deceleration capability, and insufficient low-level control can lead to very short spacing when the leader reduces its speed abruptly, causing great safety concerns. From the author’s experiences, some market ACCs are likely to disengage in those emergencies when the gap is quickly reducing, i.e. the time to collision is dropping very fast. We conjecture such design is to force the human driver to take over in situations that require large deceleration values out of the bounds in ACC design. However, one can imagine this deficiency in ACC is really concerning which needs more investigation.

6 Discussions and conclusions

Considering the impact of acceleration and deceleration limits, we argue that a linear ACC model in the literature should extend the parameter space to 𝒮={k,τ,a0,β,d0,θ}\mathcal{S}=\{k,\tau,a_{0},\beta,d_{0},\theta\}, which correspond to the controller sensitivity, the desired headway, and the set of parameters for acceleration/deceleration constraints. Now we use acc(k,τ,a0,β,d0,θ)\mathcal{L}_{acc}(k,\tau,a_{0},\beta,d_{0},\theta) to denote a linear ACC planner with a set of the parameters.

The paper derived the condition for SS and also the marginal SS. While being stable indicates a smaller sensitivity factor kk for the linear factory ACC, the safety concern suggests a large kk is necessary. To balance, we suggest the marginal SS over SS for ACC platoons. The comparison results are shown in Fig.14. In (b), the marginal SS does not amplify the speed perturbation and more importantly, it leads to shorter queue length compared to the string stable models in (a), which has a wide tail of congestion area.

Refer to caption
(a) A string stable ACC platoon
Refer to caption
(b) A marginal string stable ACC platoon
Figure 14: Comparing the ACC platoon consisting of string stable and marginal string stable models

In real-world traffic, the marginal SS cannot be guaranteed, and most likely we will have different ACC parameters which can be randomly sampled from some distribution. The impact of the string stability and the acceleration/deceleration bounds in a mixed platoon are certainly worth more investigation. For example, the authors show a randomized heterogeneous ACC platoon where the lead vehicle creates a speed perturbation. The reactions of the mixed platoon are reported in Fig.15, where we see multiple waves upstream of the platoon, which can be traced back to the overshoots caused by acceleration/deceleration bounds as shown in Section 3.

Refer to caption
Figure 15: Mixed ACC platoon with different parameters

The paper also shared our concern about the deceleration limits in ACC design. We argue that combined with string unstable CF models, the impact of acceleration/deceleration limits can be more concerning, which may lead to unsafe spacings or even crashes. Using the mixed platoon experiments, we show the safety hazard in Fig.16. More investigation is certainly needed to reduce those safety hazards in mixed ACC traffic.

Refer to caption
Figure 16: Impact of acceleration/deceleration limits in string unstable platoons

The paper pointed out the acceleration/deceleration limits affect the SS by first creating extra large/small gaps then the follower needs to overshoot for compensation. Such finding also sheds some new insights to better understanding human behaviors. We conjecture that the string instability of human driving may largely result from the reaction delay. Suppose the lead vehicle unexpectedly changes its speed, the reaction delay of the following driver may cause the spacing between the two vehicles to increase/decrease to a surprisingly large/small value when the leader accelerates/decelerates. As a result, the following driver has to hard press the gas/brake in compensation for the extra/insufficient spacing. Similar to the impact of acceleration limit, the follower usually needs to overshoot the lead speed to maintain the gap.

Acknowledgment

This research was funded by NSF Awards #1932451 and #1826162.

Appendix A ODE solution of the factory linear ACC

The transfer function obtained above indicates the ratio between the output (follower trajectory) and the input (leader) in the s plane. To provide better intuition, we examine the input-output relationship using a time-domain ODE approach by assuming a general perturbation of a sine wave, where the lead speed is as follows:

vlead(t)=veq+Msin(ωt)for t[0,w]v_{lead}(t)=v_{eq}+M\sin(\omega t)\quad\text{for \quad}t\in[0,w] (19)

where MM and ω\omega are the amplitude and frequency of the signal respectively.

For the factory linear ACC model:

vego(t+Δt)\displaystyle v_{ego}(t+\Delta t) =vlead(t)+kv[xlead(t)xego(t)τvlead(t)δ]\displaystyle=v_{lead}(t)+k_{v}[x_{lead}(t)-x_{ego}(t)-\tau v_{lead}(t)-\delta] (20)
aego\displaystyle a_{ego} =alead(1kvτ)+kv(vleadvego)\displaystyle=a_{lead}(1-k_{v}\tau)+k_{v}(v_{lead}-v_{ego}) (21)

Substitute (19) into (21), we have:

aego(t)\displaystyle a_{ego}(t) =kv(veq+Msin(wt)vego(t))+(1kvτ)Mwcos(wt)\displaystyle=k_{v}(v_{eq}+M\sin(wt)-v_{ego}(t))+(1-k_{v}\tau)Mw\cos(wt) (22)
v˙ego(t)\displaystyle\dot{v}_{ego}(t) =kvveq+kvMsin(wt)+(1kvτ)Mwcos(wt)kvvego(t)\displaystyle=k_{v}v_{eq}+k_{v}M\sin(wt)+(1-k_{v}\tau)Mw\cos(wt)-k_{v}v_{ego}(t) (23)

Solving the differential equation in (23), we can obtain:

vego(t)=kv2veq+ekvtkv2Mτω+veqω2kv2Mτωcos(tω)+M(kv2kvτω2+ω2)sin(tω)kv2+ω2v_{ego}(t)=\frac{k_{v}^{2}v_{eq}+e^{-k_{v}t}k_{v}^{2}M\tau\omega+v_{eq}\omega^{2}-k_{v}^{2}M\tau\omega\cos(t\omega)+M(k_{v}^{2}-k_{v}\tau\omega^{2}+\omega^{2})\sin(t\omega)}{k_{v}^{2}+\omega^{2}} (24)
Refer to caption
Figure 17: ODE solution to the linear factory ACC model: when τ=2/kv\tau=2/k_{v} holds, the marginal SS of the model does not depend on all the other variables including M,ω,veqM,\omega,v_{eq}

For validation, we plot the leader trajectory (19) and the ODE solution of the follower trajectory (24) in Fig.17. Through animation one can see the SS does not depend on the signal magnitude MM, the frequency ω\omega and the origin speed level veqv_{eq} if no acceleration limit is considered. For example, the marginal SS holds as long as kv=2/τk_{v}=2/\tau.

Note that the ODE solution indicates the response time is equal to τ\tau.

Appendix B Solve the overshoot speed analytically

The maximum spacing at T1T_{1} is:

s(T1)\displaystyle s(T_{1}) =T0T1(vlead(t)vego(t))𝑑t\displaystyle=\int_{T_{0}}^{T_{1}}(v_{lead}(t)-v_{ego}(t))dt (25)
=T0T1vlead(t)𝑑tT0T1[(v0vca0/β)eβt+a0/β+vc]𝑑t\displaystyle=\int_{T_{0}}^{T_{1}}v_{lead}(t)dt-\int_{T_{0}}^{T^{1}}[(v_{0}-v_{c}-a_{0}/\beta)e^{-\beta t}+a_{0}/\beta+v_{c}]dt (26)
=T0T1vlead(t)𝑑t+βvlead(T1)βvca0β2(βv0βvca0)β2eβT0(a0/β+vc)(T1T0)\displaystyle=\int_{T_{0}}^{T_{1}}v_{lead}(t)dt+\frac{\beta v_{lead}(T_{1})-\beta v_{c}-a_{0}}{\beta^{2}}-\frac{(\beta v_{0}-\beta v_{c}-a_{0})}{\beta^{2}}e^{-\beta T_{0}}-(a_{0}/\beta+v_{c})(T_{1}-T_{0}) (27)

From (16), T1T_{1} can be solved:

T1=1/βln(vlead(T1)a0/βvcv0vca0/β)\displaystyle T_{1}=-1/\beta\cdot\ln(\frac{v_{lead}(T_{1})-a_{0}/\beta-v_{c}}{v_{0}-v_{c}-a_{0}/\beta}) (28)

Substituting T1T_{1} into (27), we can get:

s(T1)=T0T1vlead(t)𝑑t+βvlead(T1)βvca0β2(βv0βvca0)β2eβT0\displaystyle s(T_{1})=\int_{T_{0}}^{T_{1}}v_{lead}(t)dt+\frac{\beta v_{lead}(T_{1})-\beta v_{c}-a_{0}}{\beta^{2}}-\frac{(\beta v_{0}-\beta v_{c}-a_{0})}{\beta^{2}}e^{-\beta T_{0}} (29)
+a0+βvcβ2ln(vlead(T1)a0/βvcv0vca0/β)+(a0/β+vc)T0\displaystyle+\frac{a_{0}+\beta v_{c}}{\beta^{2}}\ln(\frac{v_{lead}(T_{1})-a_{0}/\beta-v_{c}}{v_{0}-v_{c}-a_{0}/\beta})+(a_{0}/\beta+v_{c})T_{0} (30)

From T1T_{1}, the vpidv_{pid} increases at the rate of the maximum acceleration in (15), and the vtargetv_{target} decreases with the rate of ks˙=kvegok\dot{s}=kv_{ego}. The maximum speed of vegov_{ego} approximately happens at the time vpidv_{pid} and vtargetv_{target} crosses, if we ignore the small impact of integral overshoot.

At T1T_{1}, vtarget(T1)=vlead(T1)+k(s(T1)τvlead(T1)δ)v_{target}(T_{1})=v_{lead}(T_{1})+k(s(T_{1})-\tau v_{lead}(T_{1})-\delta), and vpid(T1)=vlead(T1)v_{pid}(T_{1})=v_{lead}(T_{1}). Assuming the acceleration limit follows the model in (15), then we obtain the time when the vpidv_{pid} and vtargetv_{target} crosses:

T1T4[aego(t)+kvego(t)]𝑑t\displaystyle\int_{T_{1}}^{T_{4}}[a_{ego}(t)+kv_{ego}(t)]dt =vtarget(T1)vpid(T1)\displaystyle=v_{target}(T_{1})-v_{pid}(T_{1}) (31)
T1T4[a(t)+kv(t)]𝑑t\displaystyle\int_{T_{1}}^{T_{4}}[a^{*}(t)+kv^{*}(t)]dt =k[s(T1)τvlead(T1)δ]\displaystyle=k[s(T_{1})-\tau v_{lead}(T_{1})-\delta] (32)

For simplicity, assume a constant aa^{*} from T1T_{1} to T4T_{4}, which leads to:

T1T4[a+kv(t)]𝑑t\displaystyle\int_{T_{1}}^{T_{4}}[a^{*}+kv^{*}(t)]dt k[s(T1)τvlead(T1)δ]\displaystyle\approx k[s(T_{1})-\tau v_{lead}(T_{1})-\delta] (33)
T1T4adt+T1T4kv(t)]dt\displaystyle\int_{T_{1}}^{T_{4}}a^{*}dt+\int_{T_{1}}^{T_{4}}kv^{*}(t)]dt k[s(T1)τvlead(T1)δ]\displaystyle\approx k[s(T_{1})-\tau v_{lead}(T_{1})-\delta] (34)
a(T4T1)+k(T4T1)[vlead(T1)+a(T4T1)/2]\displaystyle a^{*}(T_{4}-T_{1})+k(T_{4}-T_{1})[v_{lead}(T_{1})+a^{*}(T_{4}-T_{1})/2] k[s(T1)τvlead(T1)δ]\displaystyle\approx k[s(T_{1})-\tau v_{lead}(T_{1})-\delta] (35)
12akΔT2+[kvlead(T1)]ΔT\displaystyle\frac{1}{2}a^{*}k\Delta T^{2}+[k\cdot v{lead}(T_{1})]\Delta T k[s(T1)τvlead(T1)δ]\displaystyle\approx k[s(T_{1})-\tau v_{lead}(T_{1})-\delta] (36)

where ΔT=T4T1\Delta T=T_{4}-T_{1}, which can be derived by solving the quadratic equation in (36).

Accordingly, the maximum overshoot speed vosv_{os} is:

vos=vlead(T1)+ΔTavlead(T1)+ΔT(a0+[vcvlead(T1)]β)\displaystyle v_{os}=v_{lead}(T_{1})+\Delta Ta*\approx v_{lead}(T_{1})+\Delta T(a_{0}+[v_{c}-v_{lead}(T_{1})]\beta) (37)

The impact of the acceleration limit on speed overshooting is thus directly measured by solving vosv_{os}.