The invention relates to a method for the dynamic, context-based distribution of program codes in a control system of a vehicle. The control system has a plurality of control apparatuses for executing the program codes. The program codes are assigned to the corresponding control apparatuses of the control system by a global placement graph. In doing so, the global placement graph is calculated in a computing unit that is located outside of the control system. The data of the global placement graph are transmitted to the control system. It is provided for the global placement graph to be calculated based on the current configuration as well as known reconfigurations, wherein the selection of the next node of the global placement graph to be calculated is calculated using the probability of occurrence of an error as well as the effect of the error.

In an on-vehicle control device, control units of multiple sections forming a redundant section include fail-safe calculation units that complement each other by respective calculation results. The control united in which the fail-safe calculation units are disposed are configured as a collective aggregate, the control units include calculation boards configured to perform calculation processing on the multiple sections, respectively, and output boards configured to output calculation results of the calculation processing by the calculation boards, and a common unit including a common interface connected to a plurality of the output boards respectively corresponding to the multiple sections is aggregated in a partial specific region of the aggregate.

The disclosure relates to a method for controlling a vehicle with an autonomous vehicle system which comprises an autonomous operating driving system which is configured to perform a dynamic driving task during fault-free operation of the autonomous operating driving system, and a redundancy driving system which is configured to carry out a reduced driving task. The autonomous operating driving system carries out trajectory planning and provides a planned trajectory for the reduced driving task to the redundancy driving system. If a fault of the operating driving system is detected, the redundancy driving system controls at least one vehicle actuator to perform the reduced driving task using the planned trajectory. Furthermore, the disclosure relates to an autonomous vehicle system and a vehicle with an autonomous vehicle system.

A number of illustrative variations may include a method or product for monitoring and responding to component, system, or module failure in an autonomous driving system.

A number of illustrative variations may include a method or product for monitoring and responding to component, system, or module failure in an autonomous driving system.

A method for controlling a first vehicle, travelling on a road, that has a second vehicle travelling ahead of it, includes the steps of: scanning the second vehicle from the first vehicle by use of multiple sensors; providing individual determinations, each on the basis of scans by only one of the sensors, concerning whether the first and the second vehicle are travelling in the same lane of the road, wherein each sensor has an associated determination certainty; and providing a collision warning if a product of the determination certainties is below a predetermined threshold value.

The invention relates to a method for operating a self-propelled motor vehicle having a plurality of control units and a plurality of program codes for controlling the function of autonomous driving and possibly other functions of the self-propelled vehicle, wherein a plurality of program codes used for an autonomous driving mode are redundantly applied to at least two different control units. In doing so, the self-propelled motor vehicle is operated in an at least partially autonomous driving mode. In this mode, the functions directly needed to satisfy the passenger's wishes are ascertained and weighted corresponding to their relevance for satisfying the passenger's wishes. In so doing, the functions, or the scope of functions, are released depending on the achievement of a target achievement level.

The invention relates to a method for operating a self-propelled motor vehicle having a plurality of control units and a plurality of program codes for controlling the function of autonomous driving and possibly other functions of the self-propelled vehicle, wherein a plurality of program codes used for an autonomous driving mode are redundantly applied to at least two different control units. In doing so, the self-propelled motor vehicle is operated in an at least partially autonomous driving mode. In this mode, the functions directly needed to satisfy the passenger's wishes are ascertained and weighted corresponding to their relevance for satisfying the passenger's wishes. In so doing, the functions, or the scope of functions, are released depending on the achievement of a target achievement level.

A method for safe at least semi-autonomous driving operation of an ego vehicle in case of sun glare is disclosed. The method involves checking, by a computing system, whether one or more vehicle sensors of the ego vehicle are dazzled by sun glare, and if yes, detecting environmental information by a detection system of the ego vehicle. The method further involves subsequently checking, by a computing system, the environmental information for a presence of at least one dynamic object for intercepting the sun glare during driving operation of the ego vehicle, and if yes, checking, by a computing system, whether the ego vehicle can execute a driving manoeuvre in such a way that the at least one dynamic object intercepts the sun glare during driving operation of the ego vehicle. If yes, then the driving manoeuvre is executed.

A method for safe at least semi-autonomous driving operation of an ego vehicle in case of sun glare is disclosed. The method involves checking, by a computing system, whether one or more vehicle sensors of the ego vehicle are dazzled by sun glare, and if yes, detecting environmental information by a detection system of the ego vehicle. The method further involves subsequently checking, by a computing system, the environmental information for a presence of at least one dynamic object for intercepting the sun glare during driving operation of the ego vehicle, and if yes, checking, by a computing system, whether the ego vehicle can execute a driving manoeuvre in such a way that the at least one dynamic object intercepts the sun glare during driving operation of the ego vehicle. If yes, then the driving manoeuvre is executed.