An autonomous driving system for an autonomous vehicle includes a plurality of on-board autonomous sensors that sense data related to operation of the autonomous vehicle and a surrounding environment and an automated driving controller in electronic communication with the plurality of on-board autonomous sensors. The automated driving controller is instructed to receive an indication one or more of the plurality of on-board autonomous sensors are non-functional and a secondary autonomous sensor system including one or more replacement sensors are installed. The automated driving controller is instructed to verify the secondary autonomous sensor system based on a security check and perform a redundancy check between the one or more replacement sensors and the plurality of on-board autonomous sensors. In response to determining the one or more replacement sensors are valid based on the redundancy check, the automated driving controller operates the autonomous vehicle in a limp home mode.

An autonomous driving system for an autonomous vehicle includes a plurality of on-board autonomous sensors that sense data related to operation of the autonomous vehicle and a surrounding environment and an automated driving controller in electronic communication with the plurality of on-board autonomous sensors. The automated driving controller is instructed to receive an indication one or more of the plurality of on-board autonomous sensors are non-functional and a secondary autonomous sensor system including one or more replacement sensors are installed. The automated driving controller is instructed to verify the secondary autonomous sensor system based on a security check and perform a redundancy check between the one or more replacement sensors and the plurality of on-board autonomous sensors. In response to determining the one or more replacement sensors are valid based on the redundancy check, the automated driving controller operates the autonomous vehicle in a limp home mode.

In a self-driving autonomous vehicle, a controller architecture includes multiple processors within the same box. Each processor monitors the others and takes appropriate safe action when needed. Some processors may run dormant or low priority redundant functions that become active when another processor is detected to have failed. The processors are independently powered and independently execute redundant algorithms from sensor data processing to actuation commands using different hardware capabilities (GPUs, processing cores, different input signals, etc.). Intentional hardware and software diversity improves fault tolerance. The resulting fault-tolerant/fail-operational system meets ISO26262 ASIL-D specifications based on a single electronic controller unit platform that can be used for self-driving vehicles.

A self-driving motor vehicle including numerous control units and numerous program codes for controlling the functions of the autonomous driving and other functions of the self-driving vehicle. Numerous program codes used for an autonomous driving mode are applied redundantly to at least two different control units. The self-driving motor vehicle may then be operated in an at least a partially autonomous driving mode. In this mode, the functions directly needed for satisfying a passenger's desire are determined, and weighted with regard to their importance in fulfilling the passenger's desires. At least one function of a lower order is then shut off, if the available resources in functioning control units and/or the power level in the self-driving motor vehicle are insufficient to execute program code for executing this function of the lower order.

Technologies and techniques for dynamic, context-based distribution of program codes in a control system in a vehicle. The control system includes numerous control units. The allocation of the program codes to the corresponding control units in the control system takes place using a global placement chart. The global placement chart is calculated on a computer, which may be located outside the control system. The data from the global placement chart are sent to the control system. Other aspects include an at least partially autonomous motor vehicle that has a control system for executing dynamic, context-based distribution of program codes.

Technologies and techniques for dynamic, context-based distribution of program codes in a control system in a vehicle. The control system includes numerous control units. The allocation of the program codes to the corresponding control units in the control system takes place using a global placement chart. The global placement chart is calculated on a computer, which may be located outside the control system. The data from the global placement chart are sent to the control system. Other aspects include an at least partially autonomous motor vehicle that has a control system for executing dynamic, context-based distribution of program codes.

The present disclosure describes a computer-implemented method for controlling a vehicle. In aspects, the computer-implemented method includes acquiring sensor data from a sensor, determining first processed data related to a first area around the vehicle based on the sensor data using a machine-learning method, and determining second processed data related to a second area around the vehicle based on the sensor data using a conventional method. The second area may include a subarea of the first area. In addition, the computer-implemented method includes controlling the vehicle based on the first processed data and the second processed data.

A substitution apparatus for installation in a vehicle in which a plurality of in-vehicle control apparatuses are implemented, the substitution apparatus including a control unit and a substitute unit. The control unit is configured to control the substitute unit based on transmission data transmitted from the in-vehicle control apparatuses, specify an abnormal in-vehicle control apparatus based on the transmission data, disable the specified abnormal in-vehicle control apparatus, and apply, to the substitute unit, a program for exhibiting functions otherwise normally executed by the specified abnormal in-vehicle control apparatus. The substitute unit is configured to substitute for the disabled in-vehicle control apparatus by executing the applied program.

A substitution apparatus for installation in a vehicle in which a plurality of in-vehicle control apparatuses are implemented, the substitution apparatus including a control unit and a substitute unit. The control unit is configured to control the substitute unit based on transmission data transmitted from the in-vehicle control apparatuses, specify an abnormal in-vehicle control apparatus based on the transmission data, disable the specified abnormal in-vehicle control apparatus, and apply, to the substitute unit, a program for exhibiting functions otherwise normally executed by the specified abnormal in-vehicle control apparatus. The substitute unit is configured to substitute for the disabled in-vehicle control apparatus by executing the applied program.

A method may include obtaining sensor data relating to an autonomous vehicle (AV) and a total measurable world around the AV. The method may include identifying an operating environment of the AV and determining a projected computational load for computing subsystems that facilitate a driving operation performable by the AV corresponding to the identified environment. The method may include off-loading first computing subsystems of the computing subsystems in which computations of the first computing subsystems may be processed by an off-board cloud computing system and processing computations associated with second computing subsystems of the computing subsystems by an on-board computing system. The method may include obtaining first computational results corresponding to the computations processed relating to the first computing subsystems and determining the driving operation of the AV based on the first computational results and second computational results corresponding to computations processed relating to the second computing subsystems.