Provided is a vehicle and a method of controlling the same that are capable of detecting a faulty ECU that fails to be switched to a sleep mode, and allowing the faulty ECU to be normally switched to the sleep mode through a rest of the faulty ECU. The method includes performing communication monitoring on a plurality of electronic control units (ECUs) connected to each other through a network; detecting a faulty ECU that does not enter a sleep mode under a sleep mode entry condition from among the plurality of ECUs based on a result of the communication monitoring; and performing a reset on the faulty ECU to allow the faulty ECU to enter the sleep mode.

A drive force control apparatus includes a drive force control section that has a steady drive force, a filtered drive force obtained by performing a filtering process on the steady drive force, and an internal drive force, which is calculated from a traction requested drive force, input thereto, and sets a target drive force based on the steady drive force, the filtered drive force, and the internal drive force. The drive force control section implements post-operation processing after control for causing the internal drive force to be the target drive force ends. In the post-operation processing, a new internal drive force, which is calculated based on a large-small relationship among the steady drive force, the filtered drive force, and the previously calculated internal drive force, is set as the target drive force.

A drive force control apparatus includes a drive force control section that has a steady drive force, a filtered drive force obtained by performing a filtering process on the steady drive force, and an internal drive force, which is calculated from a traction requested drive force, input thereto, and sets a target drive force based on the steady drive force, the filtered drive force, and the internal drive force. The drive force control section implements post-operation processing after control for causing the internal drive force to be the target drive force ends. In the post-operation processing, a new internal drive force, which is calculated based on a large-small relationship among the steady drive force, the filtered drive force, and the previously calculated internal drive force, is set as the target drive force.

An update control system includes: a vehicle including an in-vehicle control device; an information processing terminal configured to communicate with the in-vehicle control device by wire communication; and a center configured to communicate with the in-vehicle control device over a wireless network. The in-vehicle control device is configured to: determine whether the vehicle is in a first state in which a wireless update process is possible or a second state in which a wired update process is possible; and when the state of the vehicle is switched between the first state and the second state after start and before completion of an update process using a distribution package, carry over a progress of the update process performed until the state is switched; and perform the update process in the switched state.

An update control system includes: a vehicle including an in-vehicle control device; an information processing terminal configured to communicate with the in-vehicle control device by wire communication; and a center configured to communicate with the in-vehicle control device over a wireless network. The in-vehicle control device is configured to: determine whether the vehicle is in a first state in which a wireless update process is possible or a second state in which a wired update process is possible; and when the state of the vehicle is switched between the first state and the second state after start and before completion of an update process using a distribution package, carry over a progress of the update process performed until the state is switched; and perform the update process in the switched state.

An abnormality of a component can be accurately detected.

An on-vehicle device is an on-vehicle device that is mounted on a vehicle to communicate with a server. The on-vehicle device includes a first information generation unit that generates first information which is information on a state of a first component mounted on the vehicle by using an output of a sensor mounted on the vehicle, and an out-vehicle communication unit that transmits, to the server, the first information and second information which is information on a state of a second component which is a component different from the first component, and receives, from the server, a state signal indicating an abnormal state of the first component calculated by the server based on the first information and the second information.

Embodiments for operational envelope detection (OED) with situational assessment are disclosed. Embodiments herein relate to an operational envelope detector that is configured to receive, as inputs, information related to sensors of the system and information related to operational design domain (ODD) requirements. The OED then compares the information related to sensors of the system to the information related to the ODD requirements, and identifies whether the system is operating within its ODD or whether a remedial action is appropriate to adjust the ODD requirements based on the current sensor information. Other embodiments are described and/or claimed.

Embodiments for operational envelope detection (OED) with situational assessment are disclosed. Embodiments herein relate to an operational envelope detector that is configured to receive, as inputs, information related to sensors of the system and information related to operational design domain (ODD) requirements. The OED then compares the information related to sensors of the system to the information related to the ODD requirements, and identifies whether the system is operating within its ODD or whether a remedial action is appropriate to adjust the ODD requirements based on the current sensor information. Other embodiments are described and/or claimed.

An autonomous driving system for an autonomous vehicle includes an automated driving controller wirelessly connected to a towing taxi. The automated driving controller determines the autonomous driving system is non-functional. In response to determining the autonomous driving system is non-functional, the automated driving controller generates a notification indicating the autonomous driving system is non-functional. The automated driving controller receives, from the towing taxi, a current data string including a data point corresponding to a current point in time in combination with a predicted data point for each of one or more predicted points of time in the future. The current data string is compared with a previous data string recorded at a previous point in time. In response to determining the current data string matches the previous data string, the automated driving controller determines one or more driving maneuvers for the autonomous vehicle based on the current data string.

An autonomous driving system for an autonomous vehicle includes an automated driving controller wirelessly connected to a towing taxi. The automated driving controller determines the autonomous driving system is non-functional. In response to determining the autonomous driving system is non-functional, the automated driving controller generates a notification indicating the autonomous driving system is non-functional. The automated driving controller receives, from the towing taxi, a current data string including a data point corresponding to a current point in time in combination with a predicted data point for each of one or more predicted points of time in the future. The current data string is compared with a previous data string recorded at a previous point in time. In response to determining the current data string matches the previous data string, the automated driving controller determines one or more driving maneuvers for the autonomous vehicle based on the current data string.