A method for controlling a vehicle controllable in a highly/fully automated manner. The method includes: ascertaining a malfunction of a vehicle control unit of the vehicle, the vehicle control unit being designed for a highly automated and/or fully automated control of the vehicle; switching from the vehicle control unit to an emergency control unit, the emergency control unit being based on a driver assistance system and designed for maximally a conditionally automatic control of the vehicle, and the emergency control unit being configured to effectuate a control of the vehicle in the event of a malfunction of the vehicle control unit; executing the emergency control of the vehicle; and controlling the vehicle with the aid of the emergency control unit based on surroundings sensor data of the vehicle.

A method for operating an at least partially automated vehicle. The method includes: supplying surroundings data detected with the aid of sensors to at least three AI computing units which are independent of one another; generating data regarding at least one object from the surroundings data; carrying out a plausibility check of the pieces of data with respect to one another with the aid of majority voting; and using the data for which the plausibility check has been carried out for controlling, at least in a semi-automated manner, a lateral and/or longitudinal guidance of the at least partially automated vehicle.

A driving data extracting apparatus for an autonomous driving vehicle includes: a storage module for storing driving data of the autonomous driving vehicle; a driving record module configured to manage recording of the driving data, to divide the driving data into a plurality of pieces depending on a frame size based on a diagnostic protocol of unified diagnostic services (USD), and to output the divided driving data by using a routine control (RID) service; a diagnostic module configured to receive a request for extraction of the driving data from an external data extracting equipment, to sequentially receive the divided driving data from the driving record module, and to sequentially transmit the driving data to the data extracting equipment; and a diagnostic communication module configured to perform diagnostic communication based on the diagnostic protocol of the USD between the data extracting equipment and the diagnostic module.

A system for controlling a vehicle includes a terminal that collects at least one of a fault code of at least one controller of the vehicle, operation state data of the vehicle at a time the fault code is generated, and update data of the at least one controller, and a server that receives at least one of the fault code, the operation state data, or the update data of the at least one controller, in which the server labels fault code differently to classify the fault code depending on whether there is an update history of the at least one controller in which the fault code is generated.

Examples relating to vehicle velocity calculation using radar technology are described. An example method performed by a computing system may involve, while a vehicle is moving on a road, receiving, from two or more radar sensors mounted at different locations on the vehicle, radar data representative of an environment of the vehicle. The method may involve, based on the data, detecting at least one scatterer in the environment. The method may involve making a determination of a likelihood that the at least one scatterer is stationary with respect to the vehicle. The method may involve, based on the determination being that the likelihood is at least equal to a predefined confidence threshold, calculating a velocity of the vehicle based on the data from the sensors. The calculated velocity may include an angular and linear velocity. Further, the method may involve controlling the vehicle based on the calculated velocity.

A method, apparatus, and system for controlling an automated guided vehicle. An embodiment of the method comprises: receiving a fault message comprising travel state information for indicating the travel state of a faulty automated guided vehicle and position information of a fault point where a fault occurs (201); determining a fault region, and sending an instruction for indicating prohibition of passing in the fault region to a non-faulty automated guided vehicle (202); determining a target automated guided vehicle from the automated guided vehicles currently not executing a task, and sending a task execution instruction to the target automated guided vehicle (203); and in response to determining that the faulted automated guided vehicle is transferred to a maintenance region, sending an instruction for indicating cancel of the prohibition of passing in the fault region to the non-faulty automated guided vehicle that is executing a task (204).

Provided is an autonomous driving assistance system for vehicles that has redundancy without posing any problem in diversity. The autonomous driving assistance system includes: a sensor configured to acquire surroundings information; a downstream device including an actuator configured to control a vehicle; and a driving assistance device configured to calculate a control amount for the downstream device on the basis of the surroundings information. The downstream device further includes a diagnosis unit configured to: perform comparison between at least two control amounts that include the control amount calculated in the driving assistance device and a control amount calculated in the downstream device on the basis of the surroundings information; and determine, if the control amounts are equal to each other, that the control amounts are normal, and determine, if the control amounts are different from each other, that the control amounts are abnormal.

A vehicle travel control device executes trajectory following control to make the vehicle follow a target trajectory. A delay time represents control delay of the trajectory following control. A delay compensation time is at least a part of the delay time. The trajectory following control includes: displacement estimation processing that estimates a displacement of the vehicle in the delay compensation time; and delay compensation processing that corrects a deviation between the vehicle and the target trajectory based on the estimated displacement to compensate the control delay. The displacement estimation processing is effective in an effective period and ineffective in an ineffective period. When the ineffective period is included in the delay time of the trajectory following control, the displacement estimation processing is executed in a temporary mode by using sensor-detected information in the effective period without using the sensor-detected information in the ineffective period.

A method for carrying out a start-up process of an at least semi-automated vehicle. The method includes: recognizing at least one unsuccessful start-up process using a first set of drive parameters; reporting the unsuccessful start-up process to a control system; receiving changed driving-related boundary conditions from the control system; ascertaining at least one changed drive parameter from the changed driving-related boundary conditions; and repeating the start-up process at least once, using the at least one changed drive parameter.

A fault check circuit, including a first channel comparator to output a first channel comparator output signal indicating whether a first channel digital signal is outside of a first channel threshold range, wherein the first channel digital signal is A/D converted from a first channel analog signal; a second channel comparator to output a second channel comparator output signal indicating whether a second channel digital signal is outside of a second channel threshold range, wherein the second channel digital signal is A/D converted from a second channel analog signal; and an alarm generator circuit to combine the first and second channel comparator output signals, and output a fault check signal, wherein the first and second channel comparators and the alarm generator circuit are implemented in hardware, and the fault check circuit performs a fault check without software intervention.