A controller for a vehicle drive device includes an engagement control part controlling an engagement state of a first engagement device based on an engagement control instruction; a hydraulic pressure information obtaining part obtaining hydraulic pressure information indicating first hydraulic pressure supplied to the first engagement device; an acceleration information obtaining part obtaining acceleration information indicating vehicle acceleration; and a determining part determining a state of the first engagement device, and when an input rotational speed is greater than zero, a state of a transmission is a drive transmission state in which drive power is transmitted, the engagement control instruction is a disengagement instruction brining the first engagement device into a disengaged state, the first hydraulic pressure is greater than a first threshold value, and the acceleration has a negative value smaller than a second threshold value, the determining part determines the first engagement device state is an engagement abnormality.

A vehicle control device includes a controller configured to control an actuator and generate state information representing a state of the actuator, a request arbitration unit configured to arbitrate requests from a plurality of application execution units, and a request generation unit configured to generate a drive request signal to the controller. The controller includes a detection unit configured to detect whether or not the request arbitration unit is abnormal, a first transmission unit configured to transmit the state information to the request arbitration unit, and a second transmission unit configured to, when the detection unit detects that the request arbitration unit is abnormal, transmit the state information to the application execution units such that the state information does not pass through the request arbitration unit.

A method for enabling a driving assistance function after an accident of a vehicle. The method initially including a reading-in step, in which at least one crash signal, as well as sensor data of at least one vehicle sensor and/or actuator data of at least one vehicle actuator, are read in. The reading-in step is executed while the vehicle is driven with the driving assistance function switched off. The method further includes processing the read-in sensor data and/or actuator data to determine a deviation from expected sensor data and/or expected actuator data; the processing then being carried out, if the crash signal signals an accident that has occurred. The method includes enabling the driving assistance function and/or the vehicle actuator, if the sensor data and/or the actuator data fulfill an enabling criterion within a predetermined time window and/or within a predetermined travel route of the vehicle.

Devices, systems and methods for using system-level malfunction indicators to monitor the operation and resiliency of the autonomous driving system components are described. One example of a method for diagnosing a fault in a component of an autonomous vehicle includes receiving, from an electrical sub-component of the component, an electrical signal, receiving, from an electronic sub-component of the component, a message, and determining, based on the electrical signal and the message, an operational status of the component.

A mean rate decision method for a clutch motor is disclosed. The method includes determining whether the clutch motor and a gear sensor are in an electrical failure state; when it is determined the clutch motor and the gear sensor are not in the electrical failure state, determining whether there is a driver's starting intention on the basis of state information on the clutch pedal; setting a target position of the clutch motor according to a pedal setting value set by the clutch pedal; and when it is determined that there is no driver's starting intention and that an actual position of the clutch motor exceeds the target position of the clutch motor, determining a failure of the clutch motor on the basis of an excess movement amount and an excess duration in the excess state.

A vehicle actuator system includes an actuator, a first actuator controller that is operable to control operation of the actuator and is operable to determine a first value for a parameter that relates to operation of the actuator, a second actuator controller that is operable to control operation of the actuator and is operable to determine a second value for the parameter, and at least one additional component that is operable to determine a third value for the parameter. A fault is identified in response to determining that the first value does not agree with at least one of the second value or the third value. In response to identification of the fault, the first actuator controller changes from an activated state to a deactivated state and the second actuator controller changes from a deactivated state an activated state.

An autonomous vehicle is operable to follow a primary trajectory that forms a portion of a route. While controlling the autonomous vehicle, the autonomous vehicle calculates a failsafe trajectory to follow as a response to a predetermined type of event.

A vehicle control system includes a first actuator that is configured to perform at least any of driving, braking, or steering of a host vehicle, a first controller that is configured to perform traveling control of the host vehicle by controlling the first actuator, a second actuator that is configured to perform at least any of driving, braking, or steering of the host vehicle, a second controller that is configured to perform traveling control of the host vehicle by controlling the second actuator, and a communication line that is interposed between the first controller and the second controller. The first controller is configured to determine whether an operating state of the first actuator satisfies a predetermined condition, and limit, in a case where it is determined that the operating state of the first actuator satisfies the predetermined condition, control of the first actuator as compared to a case where it is determined that the predetermined condition is not satisfied, and transmits a predetermined signal to the second controller through the communication line, and in a case where the predetermined signal is received from the first controller through the communication line, the second controller performs traveling control of the host vehicle in place of at least a portion of a function of the first controller by controlling the second actuator.

A vehicle control system for controlling a vehicle, including a set of task nodes, wherein each of the set of task nodes compares a failure criterion to input to the task node to generate a failure flag and provides output to at least one other task node of the set of task nodes; an aggregator node directly communicatively coupled to each of the set of task nodes, and wherein the aggregator node: receives a set of failure flags from the set of task nodes, determines a failure tier based on the set of failure flags, and generates a failure tier message defining the failure tier; and, a behavior planning node communicatively coupled to the aggregator node, wherein the behavior planning node: receives the failure tier message, and in response to the failure tier defined by the failure tier message, generates vehicle control instructions.

An actuator system includes an actuator, a first actuator controller that is operable to control operation of the actuator and is operable to determine a first value for a parameter that relates to operation of the actuator, a second actuator controller that is operable to control operation of the actuator and is operable to determine a second value for the parameter, and at least one additional component that is operable to determine a third value for the parameter. A fault is identified in response to determining that the first value does not agree with at least one of the second value or the third value. In response to identification of the fault, the first actuator controller changes from an activated state to a deactivated state and the second actuator controller changes from a deactivated state an activated state.