A control system for a motor vehicle having a first control unit for controlling a first function of the motor vehicle, a second control unit for controlling a second function of the motor vehicle and a backup control unit. At least the first or the second control unit is connected in a signal-transmitting manner with the backup control unit. In order to ensure the proper execution of functions of a motor vehicle controlled by the control units with the least possible additional overhead, even with a faulty control unit, the backup control unit is configurable in response to the input of an error signal from the first or the second control unit such that the function of the motor vehicle corresponding to the faulty control unit is be controlled via the backup control unit.

Example methods and systems are disclosed to provide autonomous vehicle sensor security. An example method may include generating, by a first autonomous vehicle, a first map instance of a physical environment using first environmental information generated by a first sensor of a first autonomous vehicle. A second map instance from at least one of a second autonomous vehicle located in the physical environment is received. The first map instance may be correlated with the second map instance. In response to a discrepancy between the first map instance and the second map instance, a secure sensor may be activated to generate a third map instance. In response to the third map instance verifying that the discrepancy accurately describes the physical environment, the first environmental information including the discrepancy is used to navigate the first autonomous vehicle.

Disclosed herein is a method of controlling an aircraft, the aircraft including a plurality of actuators, a plurality of actuator control units, and a plurality of flight control systems for generating control signals. The method comprises, at each of the plurality of actuator control units: (a) from each of the plurality of flight control systems, obtaining a respective control signal for controlling an actuator associated with the actuator control unit, the actuator being one of the plurality of actuators; and (b) providing an actuator control signal to the associated actuator, wherein the actuator control signal is based on an analysis of the obtained control signals.

In one example embodiment, a computer-implemented method includes receiving data representing a motion plan of the autonomous vehicle via a plurality of control lanes configured to implement the motion plan to control a motion of the autonomous vehicle, the plurality of control lanes including at least a first control lane and a second control lane, and controlling the first control lane to implement the motion plan. The method includes detecting one or more faults associated with implementation of the motion plan by the first control lane or the second control lane, or in generation of the motion plan, and in response to one or more faults, controlling the first control lane or the second control lane to adjust the motion of the autonomous vehicle based at least in part on one or more fault reaction parameters associated with the one or more faults.

In one example embodiment, a computer-implemented method includes receiving data representing a motion plan of the autonomous vehicle via a plurality of control lanes configured to implement the motion plan to control a motion of the autonomous vehicle, the plurality of control lanes including at least a first control lane and a second control lane, and controlling the first control lane to implement the motion plan. The method includes detecting one or more faults associated with implementation of the motion plan by the first control lane or the second control lane, or in generation of the motion plan, and in response to one or more faults, controlling the first control lane or the second control lane to adjust the motion of the autonomous vehicle based at least in part on one or more fault reaction parameters associated with the one or more faults.

A one-pedal control method and system for an autonomous vehicle, are configured for accelerating or decelerating a vehicle by use of a foldable accelerator pedal system when a foldable brake pedal system is broken down when a driver manually drives the autonomous vehicle or the mode is switched from an autonomous driving mode to a manual driving mode, and configured for implementing a fail-safe function by use of an integrated safety function of software.

A distributed control system includes a remote control system configured to be communicatively coupled with plural separate vehicle systems. The remote control system is configured to remotely control operation of the vehicle systems and/or communicate with the local vehicle control system or operator. The remote control system also is configured to one or more of change how many of the vehicle systems are concurrently controlled by the remote control system or change how many remote operators of the remote control system concurrently control the same vehicle system of the vehicle systems.

Technologies and techniques for the at least the partially automated driving of a motor vehicle. A first application and at least one redundant second application provide output data depending on motor vehicle operating data and/or environmental data. Vehicle driving data for the at least partially automated driving of the motor vehicle are determined depending on the output data. Vehicle operating data from another vehicle are received, and, depending on the vehicle operating data, the at least one redundant second application switches from an active state to a standby state in which a computer instance of a computer unit used by the at least one redundant second application is at least executed at a lower frequency than in the active state.

Navigation system (300) for land, air, marine or submarine vehicle (302), comprising a remote control workstation (301) with Manual control mode (310), Mission Planning mode (330) and tactical control mode (360) initiating command-and-control options; a navigation module (100) retrofittably disposed on the vehicle (302); a plurality of perception sensors (318) disposed on the vehicle (302); the system (300) receives manual, electrical, radio and audio commands of human operator (305) in the manual control (310) and mission planning mode (330) and converts them to dataset for training a navigation model having a navigational algorithm. The perception sensors (318) generate dataset for self-learning in real time in manual control mode (310), mission control mode (330) and tactical control mode (360); the navigational system (300) autonomously navigates with presence of communication network (390) and in absence of communication network (390).

Navigation system (300) for land, air, marine or submarine vehicle (302), comprising a remote control workstation (301) with Manual control mode (310), Mission Planning mode (330) and tactical control mode (360) initiating command-and-control options; a navigation module (100) retrofittably disposed on the vehicle (302); a plurality of perception sensors (318) disposed on the vehicle (302); the system (300) receives manual, electrical, radio and audio commands of human operator (305) in the manual control (310) and mission planning mode (330) and converts them to dataset for training a navigation model having a navigational algorithm. The perception sensors (318) generate dataset for self-learning in real time in manual control mode (310), mission control mode (330) and tactical control mode (360); the navigational system (300) autonomously navigates with presence of communication network (390) and in absence of communication network (390).