A method for operating a control unit of a motor vehicle. A status inquiry is transmitted by a watchdog unit to a first monitoring unit, which is implemented on a first processor core of a multicore processor. A status response is ascertained by the first monitoring unit as a function of the status inquiry. A fault is ascertained by the watchdog unit as a function of the status response.

A semiconductor device includes, for example, internal circuitry (for example, a CPU), external terminals (for example, debug control terminals of the CPU) configured to be used by the internal circuitry in a non-test mode (for example, a debug mode of the CPU), and a test circuit configured to, upon detecting that a particular dedicated test mode control pattern has been inputted to the external terminals, cause a transition from the non-test mode to a test mode.

A system for real-time control selection and calibration in a vehicle using a deep-Q network (DQN) includes sensors and actuators disposed on the vehicle. A control module has a processor, memory, and input/output (I/O) ports in communication with the one or more sensors and the one or more actuators. The processor executes program code portions that cause the sensors actuators to obtain vehicle dynamics and road surface estimation information and utilize the vehicle dynamics information and road surface estimation information to generate a vehicle dynamical context. The system decides which one of a plurality of predefined calibrations is appropriate for the vehicle dynamical context, generates a command to the actuators based on a selected calibration. The system continuously and recursively causes the program code portions to execute while the vehicle is being operated.

A method for the self-diagnosis of a vehicle system that is supplied with energy by an on-board vehicle electrical system and includes a control unit with at least one integrated system circuit, which includes at least one internal energy supply, a sequence and logic controller and a safety controller, and with at least one microcontroller, and a vehicle system for carrying out the method.

A vehicle braking system including a brake pedal in communication with a wheel brake, a brake actuation system, a braking system controller, an on-board driver communication system, and a controller is described. Parameters associated with a braking request, a brake actuation command and vehicle operation are monitored during each braking event, and segmented the into parameters associated with a static portion of the braking event and parameters associated with a dynamic portion of each braking event, evaluate the parameters associated with the static portion of the braking event and evaluate the parameters associated with the dynamic portion of the braking event, and assess a state of health of the braking system based upon the evaluation of the parameters. The assessment of the state of health of the braking system is communicated to a vehicle driver via the on-board driver communication system.

Methods and systems are provided for scheduling an alarm wake up to self-wake a control module of a vehicle while the vehicle is off to perform requesting features, including diagnostic and non-diagnostic afterrun tasks. In one example, a method may include, during a shutdown event of the control module, querying a plurality of requesting features for alarm wake up times, receiving a plurality of alarm wake up times from the plurality of requesting features, selecting one alarm wake up time from the plurality of alarm wake up times received, and setting a timer for the selected alarm wake up time. When the timer elapses at the selected alarm wake up time, the control module is woken and a request to run is sent to each of the plurality of requesting features.

The present disclosure relates to a diagnostics system (2) for a vehicle (1). The diagnostics system (2) comprises a plurality of application functions (10) for controlling functions of the vehicle, a plurality of I/O interface modules (30) hosting drivers for I/O devices associated with the application functions (10), and a vehicle diagnostics manager or VDM (20). The I/O interface modules (30) are configured to transmit output signals pertaining to operation of their associated I/O devices to the application functions (10) together with a signal tag identifying the I/O interface module that generated the output signal. Each I/O interface module (30) is also configured to run physical fault monitors in order to detect physical faults for its associated I/O devices, and to maintain a fault record of detected physical faults. Each application function (10) is configured to run strategic fault monitors in order to detect strategic faults for its associated vehicle function. The application functions (10) are configured, upon detection of a strategic fault, to identify the signal tag associated with the output signal that caused the detection of the strategic fault, and to report the detected strategic fault to the VDM (20) together with the associated signal tag. The VDM (20) is configured, upon receiving a notification of a detected strategic fault from an application function (10), to identify a source I/O interface module (30) in dependence on the received signal tag, to read physical faults from the identified source I/O interface module (30), and to triage the physical faults from the identified source I/O interface module (30) with the reported strategic fault in order to identify a cause fault for the reported strategic fault.

The present invention relates to a diagnostics system for a vehicle. The diagnostics system comprises a plurality of application functions for controlling functions of the vehicle, a plurality of I/O interface modules hosting drivers for I/O devices associated with the application functions, and an off-board remote diagnostics manager. Each I/O interface module is configured to run physical fault monitors in order to detect physical faults for its associated I/O devices, and to maintain an on-board record of detected physical faults. Each application function is configured to run strategic fault monitors in order to detect strategic faults for its associated vehicle function, and to maintain an on-board record of detected strategic faults. The remote diagnostics manager is configured to receive notifications of detected physical and strategic faults together with snapshot data for the detected physical and strategic faults from the vehicle, and to triage the reported physical and strategic faults in order to identify related cause and consequence faults for the vehicle.

Aspects of the present disclosure provide techniques and apparatus for testing a mixed safety system, such as system included in a vehicle. An example method of operating a vehicle includes operating an electronic control unit (ECU) in a first state; detecting one or more criteria being satisfied to perform a test associated with the ECU; and performing the test associated with the ECU in response to detecting the one or more criteria being satisfied, while the ECU is in a second state different from the first state.

A center device is configured to acquire software information of an ECU from a vehicle side, determine whether availability of update data for a vehicle based on the acquired software information, and transmit the campaign information to a master device when a vehicle condition is determined to be a contion suitable for an update. The master device is configured to download a distribution package from the center device when the vehicle condition is determined to be a condition in which the distribution package is downloadable.