An anomaly detection device is located between a network and a first ECU in the plurality of ECUs, and includes: a communication circuit; a processor; and a memory including a set of instructions that, when executed, causes the processor to perform operations including: receiving a message from the first ECU and transmitting the message to the network, and receiving a message from the network and transmitting the message to the first ECU, using the communication circuit; holding, in the memory, a received ID list; when an ID of the message received by the communication circuit from the network is not included in the received ID list, adding the ID to the received ID list; and when an ID of the message received by the communication circuit from the first ECU is included in the received ID list, causing the communication circuit not to transmit the message to the network.

Devices, systems, and methods for a vehicular safety system in autonomous vehicles are described. An example method for safely controlling a vehicle includes selecting, based on a first control command from a first vehicle control unit, an operating mode of the vehicle, and transmitting, based on the selecting, the operating mode to an autonomous driving system, wherein the first control command is generated based on input from a first plurality of sensors, and wherein the operating mode corresponds to one of (a) a default operating mode, (b) a minimal risk condition mode of a first type that configures the vehicle to pull over to a nearest pre-designated safety location, (c) a minimal risk condition mode of a second type that configures the vehicle to immediately stop in a current lane, or (d) a minimal risk condition mode of a third type that configures the vehicle to come to a gentle stop.

Apparatus, device, methods and system relating to a vehicular telemetry environment for monitoring vehicle components and providing indications towards the condition of the vehicle components and providing optimal indications towards replacement or maintenance of vehicle components before vehicle component failure.

Provided is an in-vehicle control system capable of reducing an increase in cost accompanying advancement of a fallback operation. Therefore, the in-vehicle control system includes: a plurality of control circuits 3 and 4 respectively including control units that perform data communication with each other; an external environment recognition sensor a5; and a plurality of wirings 11, 12, 13, and 14 connecting the external environment recognition sensor a5 and the plurality of control circuits 3 and 4. The plurality of control circuits 3 and 4 include: a first power supply unit that supplies power to the external environment recognition sensor a5 via a corresponding wiring among the plurality of wirings 11, 12, 13, and 14; and a first detection unit that detects an abnormality related to the power supplied to the external environment recognition sensor a5. A control unit in a control device including a first detection unit that has detected the abnormality is controlled to acquire data of the external environment recognition sensor a5 from a control unit included in the other control device.

Disclosed embodiments relate to performing updates to Electronic Control Unit (ECU) software while an ECU of a vehicle is operating. Operations may include receiving, at the vehicle while the ECU of the vehicle is operating, a software update file for the ECU software; writing, while the ECU is operating, the software update file into a first memory location in a memory of the ECU while simultaneously executing a code segment of existing code in a second memory location in the memory of the ECU; and updating a plurality of memory addresses associated with the memory of the ECU based on the software update file and without interrupting the execution of the code segment currently being executed in the second memory location in the memory of the ECU.

Embodiments of the present disclosure provide a control method of an unmanned vehicle and an unmanned vehicle, which have excellent safety. The control method of the unmanned vehicle includes: detecting vibration information and running attitude information of the unmanned vehicle; according to the vibration information, the running attitude information and a running status of the unmanned vehicle, determining a condition of the unmanned vehicle, wherein the running status of the unmanned vehicle includes a stop status and a driving status; and when the condition of the unmanned vehicle is abnormal, controlling the unmanned vehicle according to an abnormal condition coping strategy.

A system that may include multiple driving related systems that are configured to perform driving related operations; a selection module; multiple fault collection and management units that are configured to monitor statuses of the multiple driving related systems and to report, to the selection module, at least one out of (a) an occurrence of at least one critical fault, (b) an absence of at least one critical fault, (c) an occurrence of at least one non-critical fault, and (d) an absence of at least one non-critical fault; and wherein the selection module is configured to respond to the report by performing at least one out of: (i) reset at least one entity out of the multiple fault collection and management units and the multiple driving related systems; and (ii) select data outputted from a driving related systems.

Provided are methods related to autonomous vehicle with microphone safety. The method can include obtaining, using a microphone array and at least one processor, a plurality of microphone input signals including a first microphone input signal and a second microphone input signal; determining, using the at least one processor, an impact on the microphone array based on the first microphone input signal and the second microphone input signal; and providing, via an interface and using the at least one processor, an instruction associated with the impact. Systems and computer program products are also provided.

A method for operating a control unit of a motor vehicle. A status inquiry is transmitted by a watchdog unit to a first monitoring unit, which is implemented on a first processor core of a multicore processor. A status response is ascertained by the first monitoring unit as a function of the status inquiry. A fault is ascertained by the watchdog unit as a function of the status response.

The technology relates to autonomous vehicles suffering a breakdown along a roadway. Onboard systems may utilize various proactive operations to alert specific vehicles or other objects on or near the roadway about the breakdown. This can be done alternatively or in addition to turning on the hazard lights or calling for remote assistance. The disabled vehicle is able to detect nearby and approaching objects. The detection may be performed in combination with a determination of the type of object or predicted behavior for that object, enables the vehicle to generate a targeted alert that can be transmitted or otherwise presented to that particular object. This approach provides the other object, such as a vehicle, bicyclist or pedestrian, sufficient time and information about the breakdown to take appropriate corrective action. Different communication options are available and may be selected based on the particular object, environmental conditions and other factors.