A redundant electronic control system includes a control unit, a first output component, and a second output component. The control unit may generate a first execution signal and a second execution signal. The control unit controls the first output component to output the first execution signal to a first actuator, and controls the second output component to output the second execution signal to a second actuator. When the first output component fails, the control unit may control the second output component to output the first execution signal to the first actuator. When the second output component fails, the control unit may control the first output component to output the second execution signal to the second actuator.

A method detects unintended acceleration of a motor vehicle during a closed-loop speed control mode by determining external forces on the vehicle via a controller, and then calculating a desired acceleration using a measured vehicle speed and the external forces. The method includes determining an actual acceleration of the vehicle, including filtering a speed signal as a first actual acceleration value and/or measuring a second actual acceleration value using an inertial measurement unit (IMU). During the speed control mode, the method includes calculating an acceleration delta value as a difference between the desired acceleration and the actual acceleration, and then using the acceleration delta value to detect the unintended acceleration during the speed control mode. A powertrain system for the motor vehicle, e.g., an electric vehicle, includes the controller and one or more torque generating devices coupled to road wheels of the vehicle.

A control system for a motor vehicle, including a first control unit for controlling a first function of the motor vehicle, a second control unit for controlling a second function of the motor vehicle and a backup control unit. To ensure the proper execution of functions controlled of a motor vehicle controlled with the aid of control units even in the case of a defective control unit with preferably little additional effort, the backup control unit is configurable depending on the input of an error signal of the first or second control unit such that an actuator corresponding to the defective control unit is controllable with the aid of the backup control unit. A first backup power electronic module is assigned to the first actuator, and a second backup power electronic module is assigned to the second actuator.

A first vehicle includes a communication device configured to send and receive V2V information, a memory configured to store the V2V information, and a processor configured to perform abnormal traveling determination processing. A second vehicle includes a communication device configured to send and receive the V2V information, a memory configured to store the V2V information and driving environment information on the second vehicle, and a processor configured to perform objective determination processing. In the objective determination processing, whether the first vehicle is traveling abnormally is objectively determined based on the driving environment information on the second vehicle. The determination result of the objective determination processing is sent to the first vehicle. In the abnormal traveling determination processing, whether the first vehicle is traveling abnormally is determined based on this determination result. When the first vehicle is determined to be traveling abnormally, emergency vehicle control is performed for the first vehicle.

Provided is a control device for a vehicle, the vehicle including an internal combustion engine, a generator capable of being rotated by the internal combustion engine, and a motor that outputs a driving force to a drive wheel by using power generated by the generator, in which the control device detects a failure of the internal combustion engine when the control device has instructed the internal combustion engine and the generator to generate power and the generator is performing power driving.

In a number of illustrative variations, a method may include providing a first motion control algorithm and a second motion control algorithm, the first motion control algorithm and a second motion control algorithm being constructed and arranged to provide motion control requests. The method may further include determining if the first motion control algorithms motion control requests are within a plausible range and performing a switchover from the first motion control algorithm to the second motion control algorithm if necessary.

A system for producing an active short circuit in an electric motor of a hybrid electric vehicle having a traction battery includes an inverter to be provided in communication with the motor and battery, and an inverter controller to generate driver signals to operate inverter switches to produce three-phase AC for the motor or to produce DC for battery charging. In response to motor speed exceeding a threshold, the controller is configured to generate driver signals to operate the inverter switches to produce an active short circuit in the motor to prevent battery overcharging. A processor and electric circuit are each configured to independently generate an active short circuit control signal operative to effectuate generation of the driver signals, the active short circuit produced based on an active short circuit control signal from the electric circuit in an absence of an active short circuit control signal from the processor.

A control device installed in a vehicle, the control device including one or more processors configured to: accept a plurality of first requests from a driver assistance system; perform arbitration of the first requests; calculate a second request that is a physical quantity that is different from the first requests, based on an arbitration result from the arbitration; calculate a third request that is the same physical quantity as the second request, based on a value realized by the vehicle and the first request; and distribute the second request and the third request to at least one of a plurality of actuator systems, wherein the one or more processors are configured to restrict calculation of the third request based on a predetermined condition.

A control system for the autonomous control of a motor vehicle comprises an environmental sensor system, which is arranged and configured to acquire environmental data for the autonomous control of a motor vehicle. The control system further comprises at least one actuator controller, which is configured to control at least one actuator of the motor vehicle. A first control unit is configured to determine control commands for the at least one actuator controller with the environmental data and to transmit these to the actuator controller. The control system further comprises a control monitoring unit, which is configured to check a functionality of the first control unit with the environmental data and with the control commands transmitted to the actuator controller, wherein the control monitoring unit is further configured to determine emergency control commands for the at least one actuator controller with the environmental data, depending on the checking of the first control unit, and to transmit these emergency control commands to the actuator controller. In this case the at least one actuator controller is further configured to execute the emergency control commands of the control monitoring unit prioritised over the control commands of the first control unit.

A system for controlling travel of a vehicle includes a server configured to create a target parking location, and the vehicle configured to acquire state information of an actuator from a sensor, determine whether a behavior of the actuator is in a normal state based on the state information of the actuator, determine whether the vehicle is able to travel to the target parking location when it is determined that the behavior of the actuator is in an abnormal state, and request the server for a new target parking location when it is determined that the vehicle is not able to travel to the target parking location.