A device to be controlled used for an operation of a vehicle, a determination device used for controlling the device, and a control information management device different from the determination device are included. The determination device generates control information defining a control content of the device to be controlled, the control information management device includes a control information comparison unit which determines an operating state of the determination device based on the control information, and a control switching unit which changes the control of the determination device based on a determination result of the control information comparison unit, and the control information comparison unit determines, based on the control information and a plurality of pieces of control condition information which define control conditions of the device to be controlled by the determination device, which control condition information among the plurality of pieces of control condition information is to be applied.

A substitution apparatus for installation in a vehicle in which a plurality of in-vehicle control apparatuses are implemented, the substitution apparatus including a control unit and a substitute unit. The control unit is configured to control the substitute unit based on transmission data transmitted from the in-vehicle control apparatuses, specify an abnormal in-vehicle control apparatus based on the transmission data, disable the specified abnormal in-vehicle control apparatus, and apply, to the substitute unit, a program for exhibiting functions otherwise normally executed by the specified abnormal in-vehicle control apparatus. The substitute unit is configured to substitute for the disabled in-vehicle control apparatus by executing the applied program.

A substitution apparatus for installation in a vehicle in which a plurality of in-vehicle control apparatuses are implemented, the substitution apparatus including a control unit and a substitute unit. The control unit is configured to control the substitute unit based on transmission data transmitted from the in-vehicle control apparatuses, specify an abnormal in-vehicle control apparatus based on the transmission data, disable the specified abnormal in-vehicle control apparatus, and apply, to the substitute unit, a program for exhibiting functions otherwise normally executed by the specified abnormal in-vehicle control apparatus. The substitute unit is configured to substitute for the disabled in-vehicle control apparatus by executing the applied program.

Disclosed is a vehicle control method, including: obtaining a first velocity planned for an intelligent vehicle to travel in a first area; and obtaining a second velocity planned for the vehicle to travel in the first area, where the second velocity is obtained based on a collision potential energy, the first velocity and the second velocity each include a direction and a magnitude, and the first velocity, the second velocity, and a risk of a collision between the vehicle and a surrounding obstacle are used to determine an optimal velocity of the vehicle, so that the vehicle can effectively avoid the obstacle, thereby improving traveling safety of the vehicle. Also disclosed are a vehicle control apparatus, a vehicle controller, and a vehicle.

A vehicle electronic control device includes a detection device configured to detect a state of an occupant, a first control device, and a second control device. The second control device is configured to refer to a database defining a relationship between the state of the occupant and a first time and to autonomously drive the vehicle at speeds equal to or lower than the maximum allowable speed from a switching time that is the time at which the first control device becomes unable to control the vehicle. The database is set in such a manner that the maximum allowable speed corresponding to a second state of the occupant is lower than the maximum allowable speed corresponding to a first state of the occupant when the first time corresponding to the second state is longer than the first time corresponding to the first state.

A plurality of signal lines connects a first controller and a second controller to each other. The first controller supplies a plurality of first control signals for controlling an actuator for controlling the second controller through a plurality of signal lines and performs an abnormality diagnosis of each of the plurality of first control signals. The second controller outputs a second control signal for controlling the actuator based on a plurality of first control signals supplied from the first controller through the signal lines and diagnosis results of the plurality of first control signals obtained by the first controller.

A plurality of signal lines connects a first controller and a second controller to each other. The first controller supplies a plurality of first control signals for controlling an actuator for controlling the second controller through a plurality of signal lines and performs an abnormality diagnosis of each of the plurality of first control signals. The second controller outputs a second control signal for controlling the actuator based on a plurality of first control signals supplied from the first controller through the signal lines and diagnosis results of the plurality of first control signals obtained by the first controller.

A vehicle control system for automated driver-assistance includes a model-based controller that generates a first control signal to alter an operation of a plurality of actuators of a vehicle based on a reference trajectory for the vehicle, and a present state of the vehicle and actuators. The vehicle control system further includes a neural network controller that generates a second control signal to alter the operation of the actuators of the vehicle based on a reference trajectory for the vehicle, and the present state of the vehicle and actuators. The vehicle control system further includes a combination module that combines the first control signal and the second control signal to operate the actuators based on a combined signal.

An electronic device, applied on a smart car with a plurality of sensors, includes at least one network switching circuit, at least one motherboard circuit, and a power supply circuit. The network switching circuit is coupled to the sensors of the smart car to receive sensing data from the sensors and to output the sensing data. The motherboard circuit includes a network interface controller and at least one CPU. The network interface controller is coupled to network switching circuit to receive the sensing data from the network switching circuit. The CPU is coupled to the network interface controller to perform autonomous driving for the smart car according to the sensing data. The number of network switching circuits and motherboard circuits depends on the autonomous driving level of the smart car.

A method for assisting in the driving of a vehicle comprises receiving and processing data originating from an actuation module via the first network and in response to the detection of a failure in the first network, further comprising steps of: triggering a phase of manual control recovery by a driver of the vehicle, and receiving and processing the data originating from the actuation module via a second network.