In a control process of a control device of a vehicle, normal-case information and execution-case information are compared, and if at least either compared execution orders of a calculation process or compared output values in steps of the calculation process are different from each other, it is judged that abnormality has occurred, thus providing a control system that enables normal traveling by detecting abnormality in the vehicle even if an unknown cyberattack is performed during traveling.

In a control process of a control device of a vehicle, normal-case information and execution-case information are compared, and if at least either compared execution orders of a calculation process or compared output values in steps of the calculation process are different from each other, it is judged that abnormality has occurred, thus providing a control system that enables normal traveling by detecting abnormality in the vehicle even if an unknown cyberattack is performed during traveling.

Aspects of the present invention relate to a method (400) and to a control system (208) for controlling at least one electric machine (212, 216) of a vehicle (10) to support diagnostic testing of a vehicle system (30) comprising an internal combustion engine (202), wherein the method (400) comprises: controlling a torque output (420) of the at least one electric machine (212,216) to allow a vehicle drive torque demand (410) to be met while the internal combustion engine (202) is operated within at least one torque threshold (432) for the diagnostic testing or operated at a torque setpoint (438) for the diagnostic testing.

Aspects of the present invention relate to a method (400) and to a control system (208) for controlling at least one electric machine (212, 216) of a vehicle (10) to support diagnostic testing of a vehicle system (30) comprising an internal combustion engine (202), wherein the method (400) comprises: controlling a torque output (420) of the at least one electric machine (212,216) to allow a vehicle drive torque demand (410) to be met while the internal combustion engine (202) is operated within at least one torque threshold (432) for the diagnostic testing or operated at a torque setpoint (438) for the diagnostic testing.

A system 100 for autonomous vehicle operation can include: a low-level safety platform 130; and can optionally include and/or interface with any or all of: an autonomous agent 102, a sensor system, a computing system 120, a vehicle communication network 140, a vehicle control system 150, and/or any suitable components. The system functions to facilitate fallback planning and/or execution at the autonomous agent. Additionally or alternatively, the system can function to transition the autonomous agent between a primary (autonomous) operation mode and a fallback operation mode.

A control system of a vehicle includes a network, a first control module, and a second control module. The first control module measures a voltage of a battery of the vehicle and supplies power from the battery to an actuator of the vehicle based on commands received via the network. The second control module is external to the first control module, transmits the commands to the first control module via the network, and, in response to diagnosing a loss of communication with the first control module, controls an alternator of the vehicle to increase the voltage of the battery. In response to diagnosing a loss of communication with the second control module, the first control module supplies power to the actuator based on predetermined data stored in the first control module.

A control system of a vehicle includes a network, a first control module, and a second control module. The first control module measures a voltage of a battery of the vehicle and supplies power from the battery to an actuator of the vehicle based on commands received via the network. The second control module is external to the first control module, transmits the commands to the first control module via the network, and, in response to diagnosing a loss of communication with the first control module, controls an alternator of the vehicle to increase the voltage of the battery. In response to diagnosing a loss of communication with the second control module, the first control module supplies power to the actuator based on predetermined data stored in the first control module.

There is provided a vehicle engine control system that includes engine and transmission control functions and enables evacuation driving to be readily performed. A monitoring control circuit unit and an error processing circuit unit monitors controlling operation of a main control circuit unit; when the occurrence frequency of valve-opening control abnormality becomes larger than threshold value, a first storage circuit stores the occurrence frequency, and driving of an intake valve control motor is stopped to set to fixed opening degree; when transmission-control abnormality is occurs, power supply to automatic transmission is stopped to set to the third speed fixation ratio; when an abnormality occurs, evacuation driving is implemented using fixed opening degree and automatic transmission ratio, variable rotation speed and fixed transmission ratio, or fixed opening degree and fixed transmission ratio. When valve-opening control abnormality or transmission-control abnormality occurs, fuel injection control is prevented from being inappropriately stopped.

A system detects a parameter and generates a first trip plan to automatically control the vehicle according to a first trip plan. A controller is connected to a sensor and configured to receive the parameter. The controller is configured to generate a new trip plan or modify the first trip plan into a modified trip plan based on at least one of a cumulative damage or an end of life date. A new trip plan or the modified trip plan is configured, during operation of the vehicle according to the new trip plan or the modified trip plan, for at least one of an adjustment in velocity or avoiding one or more operating conditions of the vehicle, relative to the first trip plan.

A system detects a parameter and generates a first trip plan to automatically control the vehicle according to a first trip plan. A controller is connected to a sensor and configured to receive the parameter. The controller is configured to generate a new trip plan or modify the first trip plan into a modified trip plan based on at least one of a cumulative damage or an end of life date. A new trip plan or the modified trip plan is configured, during operation of the vehicle according to the new trip plan or the modified trip plan, for at least one of an adjustment in velocity or avoiding one or more operating conditions of the vehicle, relative to the first trip plan.