Disclosed is a method of updating a control unit for a vehicle, the method including: generating raw difference data by comparing an old version of data with a new version of data; generating divided difference data by dividing the raw difference data for each memory sector; and updating the old version to the new version by using the divided difference data.

A method and system for predicting system states is provided. The method includes receiving a first reference model associated with a first operational attribute of a system from a first integrated circuit internally comprising a first processing circuit and a first sensor measuring a first parameter of the system. Additionally, a second reference model associated with a second operational attribute of the system is received from a second integrated circuit internally comprising a second processing circuit and a second sensor measuring a second parameter of the system. A combination reference model based on the first reference model and the second reference model is generated and a predicted future state and associated operational attributes for the system are determined based on the combination reference model.

A method for testing, in situ and in operation, a reset device for resetting a computer, including an execution sequence and a verification sequence, the execution sequence being executed during the running of the piece of software and including the following steps: incrementing a test counter, storing the test counter in a non-volatile memory, triggering a reset of the computer, the verification sequence being executed when starting the piece of software and including the following steps: reading the test counter from the non-volatile memory, comparing the test counter: if it is equal to its initial value increased by 1, resetting the test counter, and the test result is positive; and if it is greater than its initial value increased by 1, the test result is negative.

Apparatus and methods for controlling unmanned systems (UMSs), such as unmanned aircraft, are provided. A UMS can be provided that includes a physical computer, one or more auxiliary systems for the UMS, and a payload. The physical computer can execute software to cause the physical computer at least to instantiate a plurality of virtual computers that include a mission virtual computer and a payload virtual computer for: controlling the one or more auxiliary systems for the UMS using the mission virtual computer, communicating with the payload using the payload virtual computer, determining whether a software fault has occurred on one virtual computer of the plurality of virtual computers, and after determining that a software fault has occurred on one virtual computer of the plurality of virtual computers, preventing the software fault from causing a fault on a different virtual computer of the plurality of virtual computers.

A method for determining a reset cause of an embedded controller for a vehicle includes: executing an embedded controller for the vehicle by a central processing unit (CPU) of the embedded controller; generating a log based on information related to reset of the embedded controller collected from the running embedded controller, and a sequence number generated by the running embedded controller by the embedded controller; determining cause information of a reset trigger by analyzing the log including the reset trigger log, and determining reset cause information of the embedded controller based on the cause information of the reset trigger by a log analyzer of the embedded controller; storing a cause analysis result log including the reset cause information in a cause analysis result buffer in response to the reset cause information by the embedded controller; and storing the cause analysis result log in a non-volatile storage device.

A device includes a master device, a set of slave devices and a bus. The master device is configured to transmit first messages carrying a set of operation data message portions indicative of operations for implementation by slave devices of the set of slave devices, and second messages addressed to slave devices in the set of slave devices. The second messages convey identifiers identifying respective ones of the slave devices to which the second messages are addressed requesting respective reactions towards the master device within respective expected reaction intervals. The slave devices are configured to receive the first messages transmitted from the master device, read respective operation data message portions in the set of operation data message portions, implement respective operations as a function of the respective operation data message portions read, and receive the second messages transmitted from the master device.

An improved black box data recorder for use with autonomous driving vehicles (AVD). In one embodiment, two cyclic buffers are provided to record vehicle sensors data. A first cyclic buffer records raw vehicle sensor data on a volatile memory, while a second cyclic buffer records the same vehicle sensor data, as compressed data, on a non-volatile memory. In a case of a collision or near collision, in one embodiment the buffers are flushed into a non-volatile (NV) storage for retrieval. As long as there is no power interruption, the raw vehicle sensor data will be accessible from the NV storage. If a power interruption occurs, the raw vehicle sensor data held in the volatile memory of the first cyclic buffer will be lost and only the compressed form of the vehicle sensor data from the second cyclic buffer will survive and be accessible.

In accordance with an embodiment, a method includes determining whether a frame received from a communication bus is encoded according to a particular communication protocol and is addressed to a particular electronic device; increasing a frame count value when the frame is encoded according to the particular communication protocol and is addressed to the particular electronic device based on the determination, wherein increasing the frame count value comprises increasing a count of a modular arithmetic counter circuit having a first bit depth, and the frame count value is constrained to a modulus value of the modular arithmetic counter circuit; setting a frame count status bit based on comparing the frame count value to threshold values, and transmitting a frame comprising the frame counter status bit over the communication bus, and resetting the frame count value at an end of a monitoring time interval.

A vehicle control device includes a controller configured to control an actuator and generate state information representing a state of the actuator, a request arbitration unit configured to arbitrate requests from a plurality of application execution units, and a request generation unit configured to generate a drive request signal to the controller. The controller includes a detection unit configured to detect whether or not the request arbitration unit is abnormal, a first transmission unit configured to transmit the state information to the request arbitration unit, and a second transmission unit configured to, when the detection unit detects that the request arbitration unit is abnormal, transmit the state information to the application execution units such that the state information does not pass through the request arbitration unit.

Disclosed is a method for detecting a disappearance of a task in an environment including at least one recurring parent task that triggers, in nominal mode, on each occurrence, at least one child task, including the following steps: evaluating a parent duration elapsed between the last occurrence and the penultimate occurrence of the parent task, evaluating a child duration elapsed between the last occurrence and the penultimate occurrence of the child task, comparing the parent duration and the child duration, it being concluded that an occurrence of the child task has disappeared if the child duration, preferably with a margin, is longer than the parent duration.