On August 4th, 2023, Toyota, GAC Toyota Motor and Pony.ai announced a JV partnership and will invest into the JV for mass production and large-scale deployment of driverless L4 Robotaxi
Jointly develop T5-based L4 redundancy platform, including communication interfaces, vehicle platform redundancy (DbW, steering, brakes, power etc.), and incabin experience
Integration of autonomous driving systems into Aion’s global models to promote autonomous driving technology globally
Achieved semi-front end assembly of the Aion Robotaxi model and leveraged GAC’s supply chain to optimize ADK costs
Developed entirely in-house, the world-first L4 automotive-grade domain controller utilizes three NVIDIA OrinX chips in the main unit with a fourth OrinX chip dedicated to system redundancy, delivering 1,016 TOPS of computing power. Through a co-designed hardware-software architecture, Pony.ai custom-developed the domain controller to meet the comprehensive system and functional requirements of fully driverless Robotaxis, as well as the performance and safety demands of L4 autonomous driving algorithms. As a result, the controller achieves a 50% to 80% reduction in size, weight, power consumption, and cost—significantly optimizing hardware expenses. With continuous algorithm iteration and highly efficient inference optimization, Pony.ai has successfully delivered L4 autonomous driving capabilities and safety assurance using mass-produced, cost-effective, and mature automotive-grade chips.
Functioning as the central computing hub, this controller integrates a wide array of sensors, essential functions and supporting controllers required for Robotaxi operation. These include system power management, interactive display, hazard warning lights, gateways, and Global Navigation Satellite System (GNSS). By integrating these features into a single unit, Pony.ai has reduced wiring complexity and the number of individual components, streamlining vehicle layout, lowering manufacturing costs, and minimizing potential failure points. Furthermore, it simplifies assembly line processes, making mass production faster and more efficient. The domain controller supports both liquid cooling and passive cooling. When the liquid cooling system encounters malfunction, the redundant system ensures safe pull-over with passive cooling.
The system incorporates a multi-layered safety architecture and degradation strategies, delivering “Fail Operational” capability. In the event of a primary system failure, the controller can seamlessly switch to the redundant system or the Minimum Risk Condition Controller (MRCC) to ensure safe vehicle control. Even if the main system’s power or chassis communication fails, the redundant system can still maintain critical perception (including blind spot coverage) and safe driving capabilities. This allows the vehicle to navigate intersections or ramps and safely pull over, minimizing the risk of traffic disruption or collisions.
