The disclosure describes various embodiments for monitoring safety of an autonomous driving vehicle (ADV). In one embodiment, a method includes the operations of receiving, by a vehicle controller, one or more error message from a patrol module, the one or more error messages generated by an autonomous driving system of the ADV operating in an autonomous mode, the patrol module monitoring the autonomous driving system; evaluating a status of the autonomous driving system based on the one or more error messages; and keeping the ADV in the autonomous mode or switching it to a manual mode based on the status of the autonomous driving system.

A vehicle control system executing a voice control system for facilitating voice-based dialog with a driver to enable the driver or autonomous vehicle to control certain operational aspects of an autonomous vehicle is provided. Using environmental and sensor input, the vehicle control system can select optimal routes for operating the vehicle in an autonomous mode or choose a preferred operational mode. Occupants of the autonomous vehicle can change a destination, route or driving mode by engaging with the vehicle control system in a dialog enabled by the voice control system.

A method for controlling an operating mode of a vehicle is presented. The method includes determining a current range of the vehicle while the vehicle is operating in a first operating mode. The method also includes determining a distance to a destination. The method further includes controlling the vehicle to operate in a second operating mode instead of the first operating mode when the range is less than the distance to the destination.

Vehicles may have the capability to navigate according to various levels of autonomous capabilities, the vehicle having a different set of autonomous competencies at each level. In certain situations, the vehicle may shift from one level of autonomous capability to another. The shift may require more or less driving responsibility from a human operator. Sensors inside the vehicle collect human operator parameters to determine an alertness level of the human operator. An alertness level is determined based on the human operator parameters and other data including historical data or human operator-specific data. Notifications are presented to the user based on the determined alertness level that are more or less intrusive based on the alertness level of the human operator and on the urgency of an impending change to autonomous capabilities. Notifications may be tailored to specific human operators based on human operator preference and historical performance.

A system for control of an automated device includes a control system configured to operate a device during an operating mode corresponding to a first state in which the control system automatically controls operation, the operating mode prescribing that a user monitor the device operation during automated control, and a scheduling module configured to, during the operating mode, receive a request for the user to temporarily stop monitoring in order to perform a task unrelated to the device operation, allocate a time period during which automated control is maintained and the user stops monitoring, the time period including a non-monitoring period having a duration based on a minimum amount of time for the task, and put the device into a temporary state at initiation of the allocated time period during which the user stops monitoring and automated control is maintained.

A vehicle control apparatus includes one or more processors. The one or more processors execute determination as to whether a driving state of the vehicle involves difficulty in continuing the automatic driving. In a case where the driving state is determined as involving difficulty in continuing the automatic driving, the one or more processors execute determination on a difficulty level of operation authority transfer from the automatic driving to the manual driving on the basis of information regarding a surrounding environment of the vehicle, information regarding a driving skill of a driver, and information regarding an experience level of the driver of the operation authority transfer. The one or more processors execute setting of a driving-state condition for executing the operation authority transfer in accordance with the difficulty level. The one or more processors execute the operation authority transfer in a case where the driving-state condition is satisfied.

An automated driving enabled vehicle includes a travel controller, an automated driving indicator lamp, and a lamp controller. The automated driving indicator lamp is switched on perceptibly from outside the vehicle on the occasion of automated driving. The lamp controller acquires, during the execution of the automated driving, attribute information regarding a place being traveled by the vehicle. The lamp controller makes a lighting control of the automated driving indicator lamp during the execution of the automated driving, in accordance with the place being traveled by the vehicle executing the automated driving.

A vehicle control system includes: a travel control unit configured to switch a driving mode of a vehicle; a traveling state detecting unit configured to detect a traveling state of the vehicle; a generating unit configured to generate at least one turning line; an external environment recognizing device configured to detect a state of an external environment of the vehicle; a setting unit configured to set a traveling area in front of the vehicle in a traveling direction thereof; and a determining unit configured to determine whether the turning line is located in the traveling area. In a case where the determining unit determines that the turning line is not located in the traveling area while a manual driving mode is selected, the travel control unit switches the driving mode of the vehicle from the manual driving mode to an autonomous driving mode.

A vehicle includes a system method of operating the vehicle. The system includes a processor. The processor is configured to determine a machine-selected action for the vehicle in a current state and an actual next state for the vehicle resulting from the machine-selected action, determine, using a user model, a user-expected action for the vehicle in the first current state and a user-expected next state for the vehicle resulting from applying the machine-selected action, determine a gap value based on at least one of the user-expected action, the machine-selected action, the actual next state and the user-expected next state, and output a signal when the gap value meets a threshold.

A vehicle (4) comprising a vehicle accessory arrangement (2), the vehicle accessory arrangement, including a working equipment (6), is mounted on the vehicle (4), The vehicle accessory arrangement (2) is configured to receive current position data, e.g. GPS data, and working assignment data including route data for a working assignment for said vehicle (4) provided with said working equipment (6). The accessory control unit (8) is provided with a vehicle data set comprising control characteristics of the vehicle (4) on which the accessory arrangement (2) is mounted, and is configured to determine: navigation and drive control commands adapted to control said vehicle (4) provided with said vehicle accessory arrangement (2) to work in an autonomous mode and to travel along a route of a working assignment, working control commands adapted to control said vehicle (4) such that working procedures performed by said working equipment (6) are supported. The navigation and drive control commands and said working control commands are determined based upon said control characteristics. The vehicle control unit (17) is configured to determine a mode of operation of said vehicle (4) among a set of mode of operations including an autonomous mode of operation, and if it is determined that said vehicle (4) is in an autonomous mode of operation said vehicle control unit (17) is configured to enable said accessory control unit (8) to control said vehicle (4), by said navigation and drive commands and said working control commands, to fulfil said working assignment.