Introspective autonomous vehicle operational management includes operating an introspective autonomous vehicle operational management controller including a policy for a model of an introspective autonomous vehicle operational management domain. Operating the controller includes, in response to a determination that a current belief state of the policy indicates an exceptional condition, identifying an exception handler for controlling the autonomous vehicle. Operating the controller includes, in response to a determination that the current belief state indicates an unexceptional condition, identifying a primary handler as the active handler. Operating the controller includes controlling the autonomous vehicle to traverse a current portion of the vehicle transportation network in accordance with the active handler, receiving an indicator output by the active handler, generating an updated belief state based on the indicator, and controlling the autonomous vehicle to traverse a subsequent portion of the vehicle transportation network based on the updated belief state.

According to an embodiment of the disclosure, an electronic device may include a sensor that is connected to a plurality of displays, and a processor that is connected to the sensor and the plurality of displays, where, when information indicating that an error occurs in a first display among the plurality of displays is obtained from the sensor, the processor may output first information to be output through the first display through a display having higher priority among remaining displays. Various other embodiments are also possible which are known from the specification.

According to the present invention, even when information needed to calculate an acceleration command cannot be detected due to a sensor malfunction or the like, acceleration control can be continued by adding, in accordance with outside-world information, a correction to the result of calculating the acceleration command, which uses the result of an estimation made using alternative sensor information. The vehicle control device of the present invention comprises a vehicle behavior information acquisition unit 31 that acquires vehicle behavior information including lateral movement information of a vehicle 0, an acceleration control unit 39 that controls acceleration in accordance with the lateral movement information acquired by the vehicle behavior information acquisition unit 31, a diagnostic unit 37 that diagnoses whether or not there is abnormality in the vehicle behavior information and outputs diagnostic information, and an alternative possibility assessment unit 38 that assesses whether or not alternative control is possible on the basis of the lateral movement information and the diagnostic information.

A control system for a hybrid vehicle that can prevent an overcharging of a battery even if a wheel speed drops abruptly. The hybrid vehicle comprises: an engine; a generator that is driven by the engine; a drive motor that generate a drive torque; and a battery. The electric power generated by the generator is supplied directly to the battery or the drive motor. A controller is configured to determine whether the drive wheel will be locked, and to reduce the electric power generated by the generator less than an acceptable input power to the battery if the drive wheel is expected to be locked.

The invention relates to a method (100) and to a device (450) for reserve driving of a vehicle (400), wherein the vehicle (400) comprises a drive unit (410), an auxiliary unit (420) having a drive (430) associated with the auxiliary unit (420), and at least one wheel (440). The wheel (440) is designed to roll on the ground at least during reserve driving of the vehicle (400) or during the travel of the vehicle (400). The device (450) is designed to detect a failure of the drive unit (410); to couple the drive (430) of the auxiliary unit (420) to the wheel (440); and to operate the drive (430) of the auxiliary unit (420) for the reserve driving of the vehicle (400).

A method for monitoring a motor vehicle including an automated driving function, including differing modes of operation for bringing the motor vehicle to a standstill, at least one energy store, in particular a battery, supplying at least one consumer which is able to bring the vehicle to a standstill, a respective load profile being assigned to the respective mode of operation, which usually occurs in this mode of operation upon activation of the consumer, at least one characteristic variable of the energy store being predicted as a function of at least one of the load profiles, and the mode of operation associated with the load profile and/or the automated driving function being unblocked, blocked, left or influenced as a function of the predicted characteristic variable of the energy store.

A system that may include multiple driving related systems that are configured to perform driving related operations; a selection module; multiple fault collection and management units that are configured to monitor statuses of the multiple driving related systems and to report, to the selection module, at least one out of (a) an occurrence of at least one critical fault, (b) an absence of at least one critical fault, (c) an occurrence of at least one non-critical fault, and (d) an absence of at least one non-critical fault; and wherein the selection module is configured to respond to the report by performing at least one out of: (i) reset at least one entity out of the multiple fault collection and management units and the multiple driving related systems; and (ii) select data outputted from a driving related systems.

A driving control apparatus for a vehicle includes: one or more external sensors, one or more vehicle sensors, a steering device, an acceleration/deceleration device, an output device, a communication circuit, and a control circuit. The control circuit detects a failure associated with autonomous driving while the vehicle performs the autonomous driving, outputs the warning signal for a transfer of control of the vehicle by using the output device for a first time interval, when the failure is detected, controls the acceleration/deceleration device for a second time interval after the first time interval to reduce a travel speed of the vehicle to a target speed, and controls the steering device and the acceleration/deceleration device after the second time interval to maintain a travel lane of the vehicle with the travel speed lower than the target speed.

A method for operating a brake system of a motor vehicle includes actuating a first actuating device of the brake system, exerting an electromechanical braking force to decelerate the motor vehicle in an event of a fault in the hydraulic braking device and when the first actuating device is actuated, and generating the electromechanical braking force after a start of the actuation of the first actuating device for a minimum generation period and/or generating the electromechanical braking force after an end of the actuation of the first actuating device for an additional continued generation period. The brake system includes a hydraulic braking device, an electromechanical braking device, and a first actuating device, in particular a brake pedal.

A number of illustrative variations may include a system including brake-to-steer algorithms may achieve lateral control of a vehicle without longitudinal compensation but may also force a vehicle to slow down too rapidly before appropriate lateral movement can be achieved and may deliver an unnatural driving experience for vehicle occupants. A more natural feeling deceleration may be achieved by optimally selecting appropriate transmission shifts to allow for optimal engine speed or electric motor speed and torque based on current vehicle speed thereby reducing undesirably longitudinal disturbance.