A driving system for a vehicle includes one or more sensors, a controller, an actuator, and a safety shut down switch. The controller includes a main processing circuit, a main processing module, an actuator drive, a safety processing circuit, a safety processing module, and a safety shutdown switch. The safety processing module is independent of the main processing module, and the safety processing module is configured to perform one or more safety functions.

The described techniques relate to coordinating and managing faults of systems of a vehicle, such as an autonomous vehicle, to enable the vehicle to respond safely and appropriately to the faults. In examples, a centralized fault monitor system receives faults from different vehicle systems, maps the received faults to associated fault constraints, prioritizes different and shared parameters between the fault constraints, and communicates the constraint parameters to appropriate vehicle systems accordingly.

A system for automatically stopping an autonomous vehicle, in which the autonomous vehicle includes a primary brake and a secondary brake controlled by least one control module or different control modules. The system includes: an error detection module configured to detect an error in the control of the primary brake or the secondary brake by the one control module or the different control modules; and a supplemental control module configured, upon a detected error by the error module, to cause a stop of the autonomous vehicle using the primary brake or the secondary brake.

A system for automatically stopping an autonomous vehicle, in which the autonomous vehicle includes a primary brake and a secondary brake controlled by least one control module or different control modules. The system includes: an error detection module configured to detect an error in the control of the primary brake or the secondary brake by the one control module or the different control modules; and a supplemental control module configured, upon a detected error by the error module, to cause a stop of the autonomous vehicle using the primary brake or the secondary brake.

A method for carrying out a start-up process of an at least semi-automated vehicle. The method includes: recognizing at least one unsuccessful start-up process using a first set of drive parameters; reporting the unsuccessful start-up process to a control system; receiving changed driving-related boundary conditions from the control system; ascertaining at least one changed drive parameter from the changed driving-related boundary conditions; and repeating the start-up process at least once, using the at least one changed drive parameter.

A method for carrying out a start-up process of an at least semi-automated vehicle. The method includes: recognizing at least one unsuccessful start-up process using a first set of drive parameters; reporting the unsuccessful start-up process to a control system; receiving changed driving-related boundary conditions from the control system; ascertaining at least one changed drive parameter from the changed driving-related boundary conditions; and repeating the start-up process at least once, using the at least one changed drive parameter.

A vehicle control system includes a first actuator that is configured to perform at least any of driving, braking, or steering of a host vehicle, a first controller that is configured to perform traveling control of the host vehicle by controlling the first actuator, a second actuator that is configured to perform at least any of driving, braking, or steering of the host vehicle, a second controller that is configured to perform traveling control of the host vehicle by controlling the second actuator, and a communication line that is interposed between the first controller and the second controller. The first controller is configured to determine whether an operating state of the first actuator satisfies a predetermined condition, and limit, in a case where it is determined that the operating state of the first actuator satisfies the predetermined condition, control of the first actuator as compared to a case where it is determined that the predetermined condition is not satisfied, and transmits a predetermined signal to the second controller through the communication line, and in a case where the predetermined signal is received from the first controller through the communication line, the second controller performs traveling control of the host vehicle in place of at least a portion of a function of the first controller by controlling the second actuator.

A vehicle control system includes a first actuator that is configured to perform at least any of driving, braking, or steering of a host vehicle, a first controller that is configured to perform traveling control of the host vehicle by controlling the first actuator, a second actuator that is configured to perform at least any of driving, braking, or steering of the host vehicle, a second controller that is configured to perform traveling control of the host vehicle by controlling the second actuator, and a communication line that is interposed between the first controller and the second controller. The first controller is configured to determine whether an operating state of the first actuator satisfies a predetermined condition, and limit, in a case where it is determined that the operating state of the first actuator satisfies the predetermined condition, control of the first actuator as compared to a case where it is determined that the predetermined condition is not satisfied, and transmits a predetermined signal to the second controller through the communication line, and in a case where the predetermined signal is received from the first controller through the communication line, the second controller performs traveling control of the host vehicle in place of at least a portion of a function of the first controller by controlling the second actuator.

A manager mounted on a vehicle includes one or more processors configured to receive a plurality of kinematic plans from a plurality of advanced driver assistance system applications, arbitrate the kinematic plans, calculate motion request based on an arbitration result of the kinematic plans regardless of presence or absence of failure of a plurality of actuator systems including steering systems, and distribute the motion request to at least one of the actuator systems according to content of the failure of the actuator systems.

A smart cruise control (SCC) system based on complex information and a method of controlling the same. The method includes setting an SCC user-setting speed as a vehicle speed when an SCC function is turned on, driving a vehicle at the set vehicle speed, deriving vehicle speed limit information of a road section in which the vehicle is travelling from navigation speed limit information, road sign speed limit information, and surrounding vehicle speed information of the road section, and controlling the vehicle speed on the basis of the derived vehicle speed limit information.