A system for producing an active short circuit in an electric motor of a hybrid electric vehicle having a traction battery includes an inverter to be provided in communication with the motor and battery, and an inverter controller to generate driver signals to operate inverter switches to produce three-phase AC for the motor or to produce DC for battery charging. In response to motor speed exceeding a threshold, the controller is configured to generate driver signals to operate the inverter switches to produce an active short circuit in the motor to prevent battery overcharging. A processor and electric circuit are each configured to independently generate an active short circuit control signal operative to effectuate generation of the driver signals, the active short circuit produced based on an active short circuit control signal from the electric circuit in an absence of an active short circuit control signal from the processor.

The present invention provides a vehicle control apparatus that controls automated driving of a vehicle, comprising: a first controller configured to perform travel control of the vehicle by controlling a first actuator; and a second controller configured to perform travel control of the vehicle by controlling a second actuator which is different from the first actuator, as alternative control to be performed in a case in which degradation of a control function is detected in the first controller, wherein in a case of starting the alternative control, the travel control of the vehicle by the first controller is gradually shifted to the travel control of the vehicle by the second controller.

In an embodiment, a processor is configured to perform, while a vehicle is driving in an uncontrolled environment, a self-calibration routine for each sensor from the plurality of sensors to determine at least one calibration parameter value associated with that sensor. The processor is further configured to determine, while the vehicle is driving in the uncontrolled environment, and automatically in response to performing the self-calibration routine, that at least one sensor from the plurality of sensors has moved and/or is inoperative based on the at least one calibration parameter value associated with the at least one sensor being outside a predetermined acceptable range. The processor is further configured to perform, in response to determining that at least one sensor from the plurality of sensors has moved and/or is inoperative, at least one remedial action at the vehicle while the vehicle is driving in the uncontrolled environment.

A controller for a vehicle drive device includes an engagement control part controlling an engagement state of a first engagement device based on an engagement control instruction; a hydraulic pressure information obtaining part obtaining hydraulic pressure information indicating first hydraulic pressure supplied to the first engagement device; an acceleration information obtaining part obtaining acceleration information indicating vehicle acceleration; and a determining part determining a state of the first engagement device, and when an input rotational speed is greater than zero, a state of a transmission is a drive transmission state in which drive power is transmitted, the engagement control instruction is a disengagement instruction brining the first engagement device into a disengaged state, the first hydraulic pressure is greater than a first threshold value, and the acceleration has a negative value smaller than a second threshold value, the determining part determines the first engagement device state is an engagement abnormality.

In an autonomous driving control apparatus, a drive control unit determines, based on first and second images respectively captured by first and second cameras and an autonomous driving condition, a value of at least one controlled variable for autonomous driving of a vehicle, and outputs, to a vehicle control unit, the value of the at least one controlled variable to thereby cause the vehicle control unit to carry out a task of autonomously driving the vehicle. A camera monitor unit determines whether at least one of the first and second cameras has malfunctioned. The camera monitor unit limits, based on the at least one of the first and second directional regions corresponding to the at least of the first and second cameras, the autonomous driving condition when determining that the at least one of the first and second cameras has malfunctioned.

A method for enabling a driving assistance function after an accident of a vehicle. The method initially including a reading-in step, in which at least one crash signal, as well as sensor data of at least one vehicle sensor and/or actuator data of at least one vehicle actuator, are read in. The reading-in step is executed while the vehicle is driven with the driving assistance function switched off. The method further includes processing the read-in sensor data and/or actuator data to determine a deviation from expected sensor data and/or expected actuator data; the processing then being carried out, if the crash signal signals an accident that has occurred. The method includes enabling the driving assistance function and/or the vehicle actuator, if the sensor data and/or the actuator data fulfill an enabling criterion within a predetermined time window and/or within a predetermined travel route of the vehicle.

An autonomous vehicle that can perform limp home control for causing a vehicle to autonomously take refuge includes an ECU configured to perform the limp home control, limp-home usable sensors configured to detect an external environment of the autonomous vehicle, the limp-home usable sensors being used for the limp home control and being connected to the ECU, limp-home unusable sensors configured to detect the external environment of the autonomous vehicle, the limp-home unusable sensors being sensors not used for the limp home control, and a limp home battery connected to the ECU and the limp-home usable sensors but not connected to the limp-home unusable sensors.

Embodiments disclose systems and methods to operate an autonomous vehicle. In one embodiment, a system (an electronic controlled unit (ECU) of an autonomous driving vehicle (ADV)) receives a command, the command sent by an autonomous driving system (ADS) of the ADV. The system determines a communication state between the ECU and the ADS based on a state machine corresponding to a timing of the received command. If the communication state is of a first state, the system operates the ADV based on the received command. If the communication state is of a second state, the system releases a throttle of the ADV. If the communication state is of a third state, the system releases a throttle of the ADV and brakes using a first threshold of acceleration.

The disclosure describes various embodiments for monitoring safety of an autonomous driving vehicle (ADV. In one embodiment, a method includes the operations of receiving, by a vehicle controller, one or more error message from a patrol module, the one or more error messages generated by an autonomous driving system of the ADV operating in an autonomous mode, the patrol module monitoring the autonomous driving system; evaluating a status of the autonomous driving system based on the one or more error messages; and keeping the ADV in the autonomous mode or switching it to a manual mode based on the status of the autonomous driving system.

A controller for a hybrid vehicle performs charging control when a shift range of the hybrid vehicle is a first range, and does not perform the charging control when the shift range of the hybrid vehicle is a second range, the charging control being control of charging a power storage device with electric power generated by a generator driven by an engine. The controller records diagnosis information when an SOC of the power storage device is equal to or lower than a first threshold value and the shift range of the hybrid vehicle is the first range, and does not record the diagnosis information when the SOC of the power storage device is equal to or lower than the first threshold value and the shift range of the hybrid vehicle is the second range.