A vehicle system includes a first vehicle platform including a first computer configured to operate by means of electric power from a first electric power source and perform traveling control of a vehicle, a second vehicle platform including a second computer configured to operate by means of electric power from a second electric power source different from the first electric power source and perform traveling control of the vehicle, and an autonomous driving platform including a third computer configured to perform autonomous driving control of the vehicle by transmitting a control instruction including data for autonomously driving the vehicle to the first computer when the first vehicle platform is in a normal state and perform autonomous stoppage control of the vehicle by transmitting a control instruction including data for causing the vehicle to autonomously stop to the second computer when the first vehicle platform is in an abnormal state.

The present disclosure relates to a control system for selectively controlling a vehicle, ensuring high integrity of decisions taken by the control system when controlling the vehicle. The present disclosure also relates to a corresponding computer implemented method and to a computer program product.

A method for controlling a vehicle controllable in a highly/fully automated manner. The method includes: ascertaining a malfunction of a vehicle control unit of the vehicle, the vehicle control unit being designed for a highly automated and/or fully automated control of the vehicle; switching from the vehicle control unit to an emergency control unit, the emergency control unit being based on a driver assistance system and designed for maximally a conditionally automatic control of the vehicle, and the emergency control unit being configured to effectuate a control of the vehicle in the event of a malfunction of the vehicle control unit; executing the emergency control of the vehicle; and controlling the vehicle with the aid of the emergency control unit based on surroundings sensor data of the vehicle.

A vehicle travel control device executes trajectory following control to make the vehicle follow a target trajectory. A delay time represents control delay of the trajectory following control. A delay compensation time is at least a part of the delay time. The trajectory following control includes: displacement estimation processing that estimates a displacement of the vehicle in the delay compensation time; and delay compensation processing that corrects a deviation between the vehicle and the target trajectory based on the estimated displacement to compensate the control delay. The displacement estimation processing is effective in an effective period and ineffective in an ineffective period. When the ineffective period is included in the delay time of the trajectory following control, the displacement estimation processing is executed in a temporary mode by using sensor-detected information in the effective period without using the sensor-detected information in the ineffective period.

A device for controlling an automated driving operation of a vehicle may have at least two brake systems, at least two steering systems, an engine controller, a first automated drive controller, a second automated drive controller, a surroundings sensor assembly, and inertial sensors. A third automated drive controller at least controls the vehicle into a standstill. The device is configured such that the automated driving operation is initiated and/or maintained only when the brake systems, steering systems, and at least two of the automated drive controllers are functional and such that the automated driving operation is interrupted if only one of the automated drive controllers is functional and/or if one of the brake systems and/or steering systems is not functional and/or if the engine controller is not functional, in which case the still functional automated drive controller assumes control of the vehicle and guides the vehicle into a standstill.

An example operation includes one or more of determining a sensor on a transport is not functioning properly, determining a severity of the malfunction, responsive to the severity exceeding a threshold, lowering an autonomous level of the transport, and responsive to the severity continuing to exceed the threshold, limiting an operation of the transport based on an intended output of the malfunctioning sensor.

The invention relates to a method for operating a motor vehicle (2) with a remotely controlled parking assistant (6), with the steps: (S100) Reading in status data (SD) indicative of a status (S1, S2, S3, S4), (S200) Determination of at least one state (Z1, Z2) by evaluating the status data (SD), (S300) Assigning the specific state (Z1, Z2) to a state class (K1, K2) of a plurality of state classes (K1, K2), and (S400) Outputting a control data record (AS1, AS2) that is assigned to the assigned state class (K1, K2) and/or (S600) outputting an information data record (IS1, IS2) that is assigned to the assigned state class (K1, K2).

A method, computer program product, and computing system for operating an autonomous vehicle; monitoring the operation of a plurality of computing devices within the autonomous vehicle; and in response to detecting the failure of one or more of the plurality of computing devices, switching the autonomous vehicle from a nominal autonomous operational mode to a degraded autonomous operational mode.

An embodiment vehicle includes a battery, a switch configured to identify whether a state of a power of the vehicle is in a normal state or an abnormal state by monitoring the power of the vehicle and to control a supply of a battery power of the battery based on the state of the power being in the abnormal state, and a controller configured to control the vehicle based on the supply of the battery power.

A manager mounted on a vehicle includes one or more processors configured to receive a plurality of kinematic plans from a plurality of advanced driver assistance system applications, arbitrate the kinematic plans, calculate motion request based on an arbitration result of the kinematic plans regardless of presence or absence of failure of a plurality of actuator systems including steering systems, and distribute the motion request to at least one of the actuator systems according to content of the failure of the actuator systems.