An in-vehicle communication system includes a first relay apparatus installed in a first area of a vehicle, and a second relay apparatus installed in a second area and are connected via a communication main line. A main control apparatus and an auxiliary control apparatus are connected to the first relay apparatus and a controlled apparatus is connected to the second relay apparatus, each connected via a communication branch line. The first input apparatus is installed in the first area and inputs information to the main control apparatus and the auxiliary control apparatus. The second input apparatus is installed in the second area and inputs information to the main control apparatus and the auxiliary control apparatus via the first relay apparatus and the second relay apparatus. The first relay apparatus and the controlled apparatus communicate via an auxiliary communication line provided into both the first area and the second area.

An in-vehicle communication system includes a first relay apparatus installed in a first area of a vehicle, and a second relay apparatus installed in a second area and are connected via a communication main line. A main control apparatus and an auxiliary control apparatus are connected to the first relay apparatus and a controlled apparatus is connected to the second relay apparatus, each connected via a communication branch line. The first input apparatus is installed in the first area and inputs information to the main control apparatus and the auxiliary control apparatus. The second input apparatus is installed in the second area and inputs information to the main control apparatus and the auxiliary control apparatus via the first relay apparatus and the second relay apparatus. The first relay apparatus and the controlled apparatus communicate via an auxiliary communication line provided into both the first area and the second area.

Devices, systems, and methods for a vehicular safety system in autonomous vehicles are described. An example method for safely controlling a vehicle includes selecting, based on a first control command from a first vehicle control unit, an operating mode of the vehicle, and transmitting, based on the selecting, the operating mode to an autonomous driving system, wherein the first control command is generated based on input from a first plurality of sensors, and wherein the operating mode corresponds to one of (a) a default operating mode, (b) a minimal risk condition mode of a first type that configures the vehicle to pull over to a nearest pre-designated safety location, (c) a minimal risk condition mode of a second type that configures the vehicle to immediately stop in a current lane, or (d) a minimal risk condition mode of a third type that configures the vehicle to come to a gentle stop.

Devices, systems, and methods for redundant braking systems and architectures are described. An example method for controlling a vehicle includes receiving, by a braking system, a first set of commands generated by a primary brake controller and a primary vehicle control unit (VCU) comprising multiple processors, receiving a second set of commands generated by the primary VCU and a secondary brake controller, receiving a third set of commands generated by a secondary VCU and the primary brake controller, receiving a fourth set of commands generated by the secondary VCU and the secondary brake controller, and selecting, based on an arbitration logic, exactly one of the first, second, third, and fourth sets of commands to operate the braking system, wherein the primary VCU and the secondary VCU are configured in a master/slave architecture.

Devices, systems, and methods for redundant braking systems and architectures are described. An example method for controlling a vehicle includes receiving, by a braking system, a first set of commands generated by a primary brake controller and a primary vehicle control unit (VCU) comprising multiple processors, receiving a second set of commands generated by the primary VCU and a secondary brake controller, receiving a third set of commands generated by a secondary VCU and the primary brake controller, receiving a fourth set of commands generated by the secondary VCU and the secondary brake controller, and selecting, based on an arbitration logic, exactly one of the first, second, third, and fourth sets of commands to operate the braking system, wherein the primary VCU and the secondary VCU are configured in a master/slave architecture.

The invention relates to a motor vehicle control unit. The control unit comprises a first processor system, which is designed to control an actuator of an electric parking brake and at least one additional motor vehicle function unit. A second processor system of the control unit is designed to control the at least one actuator in an at least partially redundant manner to the first processor system. Furthermore, there is a changeover device, which is designed to enable an activation of the at least one actuator either via the first processor system or the second processor system.

The invention relates to a motor vehicle control unit. The control unit comprises a first processor system, which is designed to control an actuator of an electric parking brake and at least one additional motor vehicle function unit. A second processor system of the control unit is designed to control the at least one actuator in an at least partially redundant manner to the first processor system. Furthermore, there is a changeover device, which is designed to enable an activation of the at least one actuator either via the first processor system or the second processor system.

Provided is a vehicle control device which makes it possible, in a redundant configuration, to make use of a normally operating part in a failed system. A vehicle control device having a redundant configuration includes a task switching function unit configured to switch tasks to be executed when an abnormality is detected. The task switching function unit being configured to, when a diagnostic function unit determines that an abnormality has occurred in a unit of a host system, cause the unit of the failed system to stop calculation of control variable, and stop drive control for a control object, and then execute calculation other than the calculation of the control variable of the host system, and the drive control for an electric motor, so that the calculation unit of the failed system can take over at least a part of calculation of a normal system or another on-vehicle device.

Provided is a vehicle control device which makes it possible, in a redundant configuration, to make use of a normally operating part in a failed system. A vehicle control device having a redundant configuration includes a task switching function unit configured to switch tasks to be executed when an abnormality is detected. The task switching function unit being configured to, when a diagnostic function unit determines that an abnormality has occurred in a unit of a host system, cause the unit of the failed system to stop calculation of control variable, and stop drive control for a control object, and then execute calculation other than the calculation of the control variable of the host system, and the drive control for an electric motor, so that the calculation unit of the failed system can take over at least a part of calculation of a normal system or another on-vehicle device.

The disclosure relates to a method for operating a braking system of a vehicle during autonomous parking processes, including a first electronic control unit, a service brake system, and a partial braking system. The first control unit is designed for activating the service brake system and the partial braking system, in which an autonomous parking process is initiated, followed by an activation of the service brake system by the first control unit to generate a braking force. In the event of a failure of the service brake system, the partial braking system is activated by the first control unit to generate a braking force while the autonomous parking process is continued by utilising the partial braking system. The disclosure also relates to a vehicle control system for controlling autonomous parking processes.