A brake system for hydraulically actuating a pair of front wheel brakes and a pair of rear wheel brakes includes a reservoir and a master cylinder fluidly connected to the reservoir and operable to provide a brake signal. A first power transmission unit is in fluid communication with the reservoir, a selected one of the rear wheel brakes, and a first fluid separator corresponding to a selected one of the front wheel brakes. A first electronic control unit is configured to control the first power transmission unit. A second power transmission unit is in fluid communication with the reservoir, the other one of the front wheel brakes, and a second fluid separator corresponding to an other one of the front wheel brakes. A second electronic control unit is configured to control the second power transmission unit.

A brake system for hydraulically actuating a pair of front wheel brakes and a pair of rear wheel brakes includes a reservoir and a master cylinder fluidly connected to the reservoir and operable to provide a brake signal. A first power transmission unit is in fluid communication with the reservoir, a selected one of the rear wheel brakes, and a first fluid separator corresponding to a selected one of the front wheel brakes. A first electronic control unit is configured to control the first power transmission unit. A second power transmission unit is in fluid communication with the reservoir, the other one of the front wheel brakes, and a second fluid separator corresponding to an other one of the front wheel brakes. A second electronic control unit is configured to control the second power transmission unit.

A control system for controlling one or more torque generating devices on a heavy-duty vehicle comprising a primary sensor system with a primary sensor control unit configured to interpret an output signal of the primary sensor system, wherein the primary sensor control unit is configured to determine a first load value associated with the heavy-duty vehicle, and one or more tire sensor devices mounted on one or more tires of the heavy-duty vehicle, and a tire sensor control unit configured to interpret an output signal of the one or more tire sensor devices, wherein the tire sensor control unit is configured to determine a second load value associated with the heavy-duty vehicle, wherein the control system is arranged to base control of the heavy-duty vehicle on the second load value in case of malfunction in the primary sensor system and/or in the primary sensor control unit.

A method of controlling an electro-hydraulic brake system comprising a main brake unit and redundancy brake unit, the method comprising: determining a failure type of the main brake unit, the failure type being one of a plurality of failure types comprising: a sensor failure type comprising a failure occurred at a first sensor connected to the main brake unit; an independent wheel control failure type comprising a failure at the main brake unit to perform an independent wheel control; a hydraulic pressure generation failure type comprising a failure at the main brake unit to form a hydraulic pressure; and an inoperable failure type comprising the main brake being not controllable; and in response to determining that the failure type of the main brake unit is the sensor failure type or the independent wheel control failure type, causing the main brake unit to generate a braking force, in response to determining that the failure type of the main brake unit is the hydraulic pressure generation failure type or the inoperable type, causing the redundancy brake unit to generate a braking force.

A method of controlling an electro-hydraulic brake system comprising a main brake unit and redundancy brake unit, the method comprising: determining a failure type of the main brake unit, the failure type being one of a plurality of failure types comprising: a sensor failure type comprising a failure occurred at a first sensor connected to the main brake unit; an independent wheel control failure type comprising a failure at the main brake unit to perform an independent wheel control; a hydraulic pressure generation failure type comprising a failure at the main brake unit to form a hydraulic pressure; and an inoperable failure type comprising the main brake being not controllable; and in response to determining that the failure type of the main brake unit is the sensor failure type or the independent wheel control failure type, causing the main brake unit to generate a braking force, in response to determining that the failure type of the main brake unit is the hydraulic pressure generation failure type or the inoperable type, causing the redundancy brake unit to generate a braking force.

A method for operating a vehicle, the vehicle being guided in fully automated fashion, and if an error is detected during the fully automated guidance, a safe state being selected from a plurality of safe states as a function of one parameter, the vehicle being guided in fully automated fashion into the selected safe state. Also described is an apparatus for operating a vehicle, as well as to a computer program.

At least one embodiment of the present disclosure provides an apparatus for braking a vehicle, including a plurality of electro-mechanical braking (EMB) systems respectively installed for a plurality of vehicle wheels and configured to generate a braking force to the plurality of wheels, respectively, a driving information detecting unit for measuring driving information of the vehicle, an electronic power steering (EPS) system generating a steering torque in a direction opposite to a braking torque generated in the vehicle, and an electronic control unit (ECU) controlling the electro-mechanical braking systems and the electronic power steering system, wherein the electronic control unit is configured to control, upon determining that one or some of the plurality of electro-mechanical braking systems are malfunctioning, the vehicle by using the electronic power steering system, and the electronic power steering system is configured to generate the steering torque according to the driving information including wheel speeds.

At least one embodiment of the present disclosure provides an apparatus for braking a vehicle, including a plurality of electro-mechanical braking (EMB) systems respectively installed for a plurality of vehicle wheels and configured to generate a braking force to the plurality of wheels, respectively, a driving information detecting unit for measuring driving information of the vehicle, an electronic power steering (EPS) system generating a steering torque in a direction opposite to a braking torque generated in the vehicle, and an electronic control unit (ECU) controlling the electro-mechanical braking systems and the electronic power steering system, wherein the electronic control unit is configured to control, upon determining that one or some of the plurality of electro-mechanical braking systems are malfunctioning, the vehicle by using the electronic power steering system, and the electronic power steering system is configured to generate the steering torque according to the driving information including wheel speeds.

A method for operating a brake system of a vehicle, in particular, of a motor vehicle. The brake system includes at least one electric actuator, in particular, a brake booster, which may be driven to generate a braking force, the actuator being controllable by an autonomous driving system, and as a function of manipulation of a brake pedal of the vehicle; and an emergency braking action being initiated, when the actuator is driven both by the autonomous driving system and by manipulation of a brake pedal. The control by the autonomous driving system is superimposed with a varying validation signal, a differential travel between an actuator element of the actuator and the brake pedal is monitored, and the driving of the actuator via manipulation of the brake pedal during the control by the autonomous driving system is detected, if the differential travel varies.

A method for operating a brake system of a vehicle, in particular, of a motor vehicle. The brake system includes at least one electric actuator, in particular, a brake booster, which may be driven to generate a braking force, the actuator being controllable by an autonomous driving system, and as a function of manipulation of a brake pedal of the vehicle; and an emergency braking action being initiated, when the actuator is driven both by the autonomous driving system and by manipulation of a brake pedal. The control by the autonomous driving system is superimposed with a varying validation signal, a differential travel between an actuator element of the actuator and the brake pedal is monitored, and the driving of the actuator via manipulation of the brake pedal during the control by the autonomous driving system is detected, if the differential travel varies.