A system that may include multiple driving related systems that are configured to perform driving related operations; a selection module; multiple fault collection and management units that are configured to monitor statuses of the multiple driving related systems and to report, to the selection module, at least one out of (a) an occurrence of at least one critical fault, (b) an absence of at least one critical fault, (c) an occurrence of at least one non-critical fault, and (d) an absence of at least one non-critical fault; and wherein the selection module is configured to respond to the report by performing at least one out of: (i) reset at least one entity out of the multiple fault collection and management units and the multiple driving related systems; and (ii) select data outputted from a driving related systems.

The present disclosure relates to an apparatus and a method for controlling a vehicle, and more particularly to a vehicle control apparatus having a redundant architecture. A vehicle control apparatus according to one embodiment of the present disclosure includes: a receiver, configured to receive sensing information from a vehicle sensor; a first electronic controller, configured to generate a first vehicle control command based on the received sensing information; a monitor, configured to monitor whether the first electronic controller is out of order; and a second electronic controller, configured to generate a second vehicle control command based on the received sensing information if the first electronic controller is out of order.

A motion manager configured to request motion of a vehicle according to a kinematic plan on driver assistance of the vehicle to at least one of a plurality of actuators provided in the vehicle includes one or more processors. The one or more processors are configured to arbitrate a plurality of kinematic plans respectively set in a plurality of applications, calculate a motion request to the vehicle based on an arbitration result of the kinematic plans, distribute the motion request to at least one of the actuators, and receive, when an abnormality occurs in at least one of the actuators, information indicating a function in which the abnormality occurs and information for setting an operation of an application corresponding to the abnormality from among the applications.

A travel control apparatus includes a processor programmed to detect a state of each of a plurality of power sources constituting a power source system, the power source system supplying power to the autonomous driving system, and set a fail operation mode corresponding to whether the detected state of each of the plurality of power source is a state configured to supply an amount of power necessary for a safety of autonomous driving.

The present disclosure describes a method for monitoring operations of an automated driving system (ADS) of a vehicle. For each monitored operation the method includes: determining a geographical position of the vehicle; determining an intended path of the vehicle; and determining one or more intended parameters associated with performing a driving manoeuvre of said vehicle from the determined geographical position along the intended path. For each monitored operation the method further includes: obtaining one or more parameters associated with performing the driving manoeuvre of said vehicle from said determined geographical position; and retrieving, from a statistical model, data indicative of a statistical distribution related to one or more corresponding intended and/or obtained parameters for said intended path. Based on said retrieved data, determining whether there is an anomaly associated with said monitored operation; and taking at least one action of a set of predefined actions if an anomaly is determined.

The disclosure relates to a vehicle control system, a vehicle control method, a computer device, a computer-readable storage medium, and a vehicle. A vehicle control system according to an aspect of the disclosure includes: an autonomous driving control module configured to generate first planning information and second planning information in real time based on vehicle environment information, vehicle status information, and vehicle destination information, where the second planning information is used for safe parking; and a vehicle dynamic control module configured to receive the first planning information and the second planning information from the autonomous driving control module in real time, to generate a first control instruction based on the received first planning information or generate a second control instruction based on the received second planning information.

An autonomous driving system for an autonomous vehicle includes a plurality of on-board autonomous sensors that sense data related to operation of the autonomous vehicle and a surrounding environment and an automated driving controller in electronic communication with the plurality of on-board autonomous sensors. The automated driving controller is instructed to receive an indication one or more of the plurality of on-board autonomous sensors are non-functional and a secondary autonomous sensor system including one or more replacement sensors are installed. The automated driving controller is instructed to verify the secondary autonomous sensor system based on a security check and perform a redundancy check between the one or more replacement sensors and the plurality of on-board autonomous sensors. In response to determining the one or more replacement sensors are valid based on the redundancy check, the automated driving controller operates the autonomous vehicle in a limp home mode.

A steering control device includes a controller configured to control driving of a motor that generates a torque. The torque is a torque applied to a steering mechanism of a vehicle using electric power from at least any one of an in-vehicle main power source and an auxiliary power source that backs up the main power source. The controller is configured to wait for the auxiliary power source to be charged to an extent that the main power source is able to be backed up and to permit the vehicle to travel when the controller is activated with an activation operation for the vehicle as a trigger and transitions to a state where control of the motor is executable.

A control device includes control circuits of a plurality of systems. When a transition condition is established, the control circuits of the systems make transition of a driving mode from a first driving mode to a second driving mode, and when a return condition is established in a state in which the driving mode has transitioned to the second driving mode, the control circuits of the systems make transition of the driving mode from the second driving mode to the first driving mode while gradually changing the current command values of the control circuits’ own systems toward the current command values before the adjustment.

A computer system for verifying vehicle software configuration may be provided. The computer system may include a processor and a non-transitory, tangible, computer-readable storage medium having instructions stored thereon that, in response to execution by the processor, cause the processor to: (1) transmit, to a vehicle computing system, an authentication request including a hash algorithm specification; (2) receive, from the vehicle computing system, a current configuration hash value and a vehicle identifier; (3) retrieve a trusted data block from a memory based upon the vehicle identifier, the trusted data block including a stored configuration hash value and a smart contract code segment; (4) execute the smart contract code segment, the smart contract code segment including a failsafe code segment; and/or (5) transmit the authentication response to the vehicle computing system, and cause the vehicle computing system to execute the failsafe code segment.