Described herein are systems, methods, and non-transitory computer-readable media for implementing automated vehicle safety response measures to ensure continued safe automated vehicle operation for a limited period of time after a vehicle component or vehicle system that supports an automated vehicle driving function fails. When a critical vehicle component/system such as a vehicle computing platform fails, the vehicle is likely no longer capable of performing calculations required to safely operate and navigate the vehicle in an autonomous manner, or at a minimum, is no longer able to ensure the accuracy of such calculations. In such a scenario, the automated vehicle safety response measures disclosed herein can ensure—despite failure of the vehicle component/system—continued safe automated operation of the vehicle for a limited period of time in order to bring the vehicle to a safe stop.

Systems, methods, and apparatus related to cruise control for a vehicle. In one approach, speed for a first vehicle is controlled in a first mode using data from sensors. The speed is controlled while keeping at least a minimum distance from a second vehicle being followed by the first vehicle. In response to determining that data from the sensors is not usable to control the first vehicle (e.g., the data cannot be used to measure the minimum distance), the first vehicle changes from the first mode to a second mode. In the second mode, the first vehicle maintains a constant speed and/or obtains additional data from sensors and/or computing devices located externally to the first vehicle. In another approach, the additional data can additionally or alternatively be obtained from a mobile device of a passenger of the first vehicle. The additional data is used to maintain a safe minimum distance from the second vehicle.

A translucent cover (1012) defines a lamp chamber (1013) together with a housing (1011) while forming a portion of an outer face of a vehicle. A LiDAR sensor (1161) is disposed in the lamp chamber (1013) to detect external information of the vehicle. A half mirror (1162) is disposed in the lamp chamber (1013) so as to cover the LiDAR sensor (1161) from a side where the translucent cover (1162) is disposed. The translucent cover (1012) has a first transparency to visible light. The half mirror (1162) has a second transparency to the visible light that is lower than the first transparency.

A vehicle power system includes a battery bus between a traction battery and voltage converter, a high-voltage bus between the voltage converter and an inverter, and a controller. The controller, responsive to a contactor between the traction battery and voltage converter opening, controls an engine to maintain a speed of a generator electrically coupled with the inverter within a predefined range, controls the voltage converter to drive a measured voltage of the battery bus toward a first commanded value based on a first difference between the first commanded value and measured voltage of the battery bus, and controls the generator to drive a measured voltage of the high-voltage bus toward a second commanded value different than the first commanded value based on the first difference and a second difference between the second commanded value and the measured voltage of the high-voltage bus.

A method for producing an active short circuit condition in an electric motor of a hybrid electric vehicle including a traction battery, an inverter having switches in communication with the electric motor and the traction battery, and an inverter controller in communication with the inverter and configured to generate driver signals to operate the switches to produce three-phase alternating current for the electric motor to drive a vehicle propulsion system or to produce direct current for charging the traction battery. The method includes determining an electric motor speed threshold, wherein the electric motor speed threshold is continuously variable, comparing a monitored speed to the speed threshold, and generating, in response to the monitored speed exceeding the speed threshold, driver signals to operate the switches to produce an active short circuit condition in the electric motor to prevent overcharging of the traction battery.

A vehicle system includes a generator, a battery, a detector, and a controller. The generator is configured to generate electrical power based on power transmitted from an engine of the vehicle. The battery is chargeable with the electrical power generated by the generator. The detector detects the state of charge of the battery. The controller is configured to perform autonomous driving control of the vehicle. The controller restricts operation of equipment of the vehicle when an error is detected in the detector, in comparison with when the detector is normal.

An autonomous vehicle mode regulator system and method comprise transmitting authorization signals from autonomous driving infrastructure on a roadway to a controller module to authorize or inhibit operation of a vehicle in different levels of automation. The controller module controls the level of automation under which the autonomous driving system of the vehicle operates based on the signals received from the autonomous driving infrastructure. In this regard, the controller module can prevent the autonomous driving system of the vehicle from operating in certain levels of automation unless appropriate authorizations signals are received. Similarly, the controller module can permit or even require operation of the vehicle in certain levels of automation upon receipt of certain authorization signals. Still further, the controller module can inhibit or disengage operation of a vehicle in certain levels of automation upon receipt of signals from autonomous driving infrastructure associated with certain driving hazards on the roadway.

While a vehicle is in an off state, expiration of a timer and receipt of a first message from a user device are monitored. Upon determining that at least one of the timer has expired or that the first message is received from the user device, a communication network onboard the vehicle is then monitored for a specified set of fault conditions. Upon detecting, on the onboard vehicle communication network, a fault condition included in the set of fault conditions, the fault condition is then identified as one of transient or persistent. A user assist feature of the vehicle is disabled upon identifying that the fault condition is transient and that a second message was received from the user device after the fault condition was detected.

A method for operating an autonomously driving vehicle that is connected to a central computer unit via a communication connection for exchanging data. During the autonomous driving mode, a request to take over a driving task is emitted to a vehicle user when at least one takeover condition is fulfilled. The takeover condition is fulfilled when it is established that the communication connection to the central computer unit is disrupted on a route portion that exceeds a predetermined length and on which the vehicle is located or which the vehicle is approaching.

A method of controlling availability of autonomy functions of a vehicle includes determining one or more uncertainty levels, each corresponding to a driving data stream including driving data, wherein the uncertainty levels correspond to a probability of a collision or driving off the roadway. The method further includes generating a total uncertainty level based on the one or more uncertainty levels and disabling a first autonomy function based on availability criteria of the first autonomy function. The availability criteria define a first threshold of the total uncertainty level. The method further includes providing a second autonomy function based on the second autonomy function's availability criteria that include a total uncertainty threshold higher than the first threshold.