Vendors collide over automotive safety models -

Vendors collide over automotive safety models


Intel/Mobileye and Nvidia are going to head to head again – this time colliding over safety models.

“Safety models” are, in a nutshell, policies based on mathematically verified models developed for autonomous driving.

Intel/Mobileye Monday posted a fiery blog against a mathematical safety model that Nvidia announced for autonomous driving. Nvidia calls the model its own and named it Safety Force Field (SFF).

Intel/Mobileye described SFF as “a close replica” of the Responsibility-Sensitive Safety (RSS)” Mobileye pioneered two years ago.

Amnon Shashua

The latest rift between Intel/Mobileye and Nvidia – two leading AV platform technology developers – surfaced last week when Nvidia CEO Jensen Huang launched SFF at Nvidia’s GPU Technology Conference, describing it as a “first-of-its-kind” safety model for AVs.

Amnon Shashua, senior vice president at Intel Corporation, president and chief executive officer of Mobileye, an Intel company, made it abundantly clear in his blog that SFF is very similar to RSS. He wrote, “Imagine our surprise, when we found out about Nvidia’s SFF announcement.”

Failed talks
Nvidia and Intel/Mobileye apparently had talks in 2018, during which they discussed collaboration on AV safety. But the summit ended without agreement. According to Intel/Mobileye, Nvidia expressed interest in cooperating on the RSS safety model, but sometime late in 2018 Nvidia walked away.

Shashua wrote in his blog, “We were puzzled when Nvidia backed out of the proposed partnership.”

Intel/Mobileye is now blaming Nvidia for “not collaborating with Intel/Mobileye” and “creating confusion where there could have been cohesion.”

Shashua stressed, “In our opinion, SFF is simply an inferior version of RSS dressed in green and black. To the extent there is any innovation there, it appears to be primarily of the linguistic variety.”

David Nister
David Nister

Nvidia disagreed with Shashua’s characterization. David Nister, vice president of Autonomous Driving Software at Nvidia, told EE Times over the phone, “Our SFF has been in development for the past several years. SFF follows from a basic simple core principle of collision avoidance, as opposed to a large set of rules and exceptions [described in RSS].” He claimed, “Our algorithms and math in SFF are of our own, and they are unique.”

Nvidia chose to not collaborate with Intel/Mobileye, largely because of Intel/Mobileye’s rigidity, insisting that Nvidia [and others] follow exact equations created for RSS, according to Danny Shapiro, Nvidia's senior director of automotive. As the AV industry continues to improve safety models, Nvidia found it “hard to make on-going development efforts” while working with Intel/Mobileye.

“Of course, it is nice to have a single safety model standard,” acknowledged Nister. “But in the real world, roads are shared by many different drivers, cyclists and various vehicles. It is inevitable that a safety model must learn to coexist with other safety models.”

Mobileye pioneered RSS. But from Nvidia’s view point, Mobileye can’t just tell others that “we are done here…everyone has to follow the exact equations we created in RSS.”

Shashua’s blog post is rich with examples including point-by-point comparisons that illustrate how similar RSS and SFF. He makes the case that they are virtually the same. It is possible there are also points on where the two safety models diverge, but if they exist, Shashua ignored them. Instead, he accused Nvidia of being less transparent.

An Intel/Mobileye spokesperson said Shashua’s blog “makes a long list of similarities – all the major concepts are in distinguishable.” Where Nvidia has failed, she added, is that the main ingredient of the model – what SFF calls ‘Safety Procedure’ and what RSS calls ‘Proper Response’ – is not defined and missing” from Nvidia’s SFF document.

Shashua stressed that at the heart of the construction lies the concept of a “Proper Response” in RSS terminology. “In our opinion, to really implement an AV safety model, one must explicitly specify this Proper Response – which Mobileye has done.”

Asked about differences between Nvidia’s SFF and Intel/Mobileye’s RSS, Ian Riches, executive director, Global Automotive Practice at Strategy Analytics, told us, “At the level of detail that we currently have available, we do not see significant differences.” He explained, “Nvidia has stated that its approach differs in terms of offering a frame-by-frame analysis as well as treating longitudinal and lateral events together in a better way – but we are still waiting for clarification on those points.”

Regarding RSS vs. SFF, Phil Magney , founder & principal advisor, VSI Labs, said, “RSS provides more detail including equations and assumptions which is necessary to build out algorithms.” He added, the Nvidia paper, in contrast, “lacked some detail compared to Nvidia’s SFF.”

But why is having two safety models – SFF and RSS – such a big deal for Intel/Mobileye?

The Intel/Mobileye company spokesperson explained to EE Times, “By creating a near copy of RSS, it will only lead to confusion and the potential for companies to step back from an open model of safety. Today, the are some actors in the space who use a proprietary and non-transparent safety model which we believe will not accelerate the market.”

She stressed, “Our model offers complete transparency and any company could take it and apply the model to their solution – as has been the case with the Project Apollo from Baidu.”

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.