At least one embodiment of the present disclosure provides an apparatus for braking a vehicle, including a plurality of electro-mechanical braking (EMB) systems respectively installed for a plurality of vehicle wheels and configured to generate a braking force to the plurality of wheels, respectively, a driving information detecting unit for measuring driving information of the vehicle, an electronic power steering (EPS) system generating a steering torque in a direction opposite to a braking torque generated in the vehicle, and an electronic control unit (ECU) controlling the electro-mechanical braking systems and the electronic power steering system, wherein the electronic control unit is configured to control, upon determining that one or some of the plurality of electro-mechanical braking systems are malfunctioning, the vehicle by using the electronic power steering system, and the electronic power steering system is configured to generate the steering torque according to the driving information including wheel speeds.

A method for assisting in the driving of a vehicle comprises receiving and processing data originating from an actuation module via the first network and in response to the detection of a failure in the first network, further comprising steps of: triggering a phase of manual control recovery by a driver of the vehicle, and receiving and processing the data originating from the actuation module via a second network.

A method for monitoring a motor vehicle including an automated driving function, including differing modes of operation for bringing the motor vehicle to a standstill, at least one energy store, in particular a battery, supplying at least one consumer which is able to bring the vehicle to a standstill, a respective load profile being assigned to the respective mode of operation, which usually occurs in this mode of operation upon activation of the consumer, at least one characteristic variable of the energy store being predicted as a function of at least one of the load profiles, and the mode of operation associated with the load profile and/or the automated driving function being unblocked, blocked, left or influenced as a function of the predicted characteristic variable of the energy store.

A vehicle control system predicts danger to be avoided by a vehicle based on information related to a surrounding environment of the vehicle. When the danger is predicted, the vehicle control system determines whether an autonomous driving system rejects intervention in autonomous driving, and performs a diagnosis as to whether the autonomous driving system is normal or abnormal. Further, the vehicle control system performs the intervention in the autonomous driving to avoid the predicted danger when the autonomous driving system does not reject the intervention in the autonomous driving or when the autonomous driving system is abnormal even when the autonomous driving system rejects the intervention in the autonomous driving. However, the vehicle control system stops the intervention in the autonomous driving when the autonomous driving system rejects the intervention in the autonomous driving in a state where the autonomous driving system is normal.

An autonomous vehicle mode regulator system and method comprise transmitting authorization signals from autonomous driving infrastructure on a roadway to a controller module to authorize or inhibit operation of a vehicle in different levels of automation. The controller module controls the level of automation under which the autonomous driving system of the vehicle operates based on the signals received from the autonomous driving infrastructure. In this regard, the controller module can prevent the autonomous driving system of the vehicle from operating in certain levels of automation unless appropriate authorizations signals are received. Similarly, the controller module can permit or even require operation of the vehicle in certain levels of automation upon receipt of certain authorization signals. Still further, the controller module can inhibit or disengage operation of a vehicle in certain levels of automation upon receipt of signals from autonomous driving infrastructure associated with certain driving hazards on the roadway.

A vehicle, a vehicle fuel reactant leak detection system, a computer program product, and a computer implemented method of detecting leakage of a fuel reactant from a vehicle. The vehicle includes one or more fuel cell modules, a fuel supply source to supply a fuel reactant to the one or more fuel cell modules via a high-pressure fuel supply line, a fuel supply valve configured to open and close fuel reactant flow through the high-pressure fuel supply line, and a computing device, operatively connected to the fuel supply source. The computing device includes one or more processors caused to conduct, in response to a detection as sensor data of pressure in the high-pressure fuel supply line when the vehicle engine is in a non-operating state, fuel pressure analysis of the sensor data, and detect, based on the fuel pressure analysis, leakage of the fuel reactant at the fuel supply valve.

Devices, systems, and methods for a vehicular safety system in autonomous vehicles are described. An example method for safely controlling a vehicle includes selecting, based on a first control command from a first vehicle control unit, an operating mode of the vehicle, and transmitting, based on the selecting, the operating mode to an autonomous driving system, wherein the first control command is generated based on input from a first plurality of sensors, and wherein the operating mode corresponds to one of (a) a default operating mode, (b) a minimal risk condition mode of a first type that configures the vehicle to pull over to a nearest pre-designated safety location, (c) a minimal risk condition mode of a second type that configures the vehicle to immediately stop in a current lane, or (d) a minimal risk condition mode of a third type that configures the vehicle to come to a gentle stop.

A method of controlling availability of autonomy functions of a vehicle includes determining one or more uncertainty levels, each corresponding to a driving data stream including driving data, wherein the uncertainty levels correspond to a probability of a collision or driving off the roadway. The method further includes generating a total uncertainty level based on the one or more uncertainty levels and disabling a first autonomy function based on availability criteria of the first autonomy function. The availability criteria define a first threshold of the total uncertainty level. The method further includes providing a second autonomy function based on the second autonomy function's availability criteria that include a total uncertainty threshold higher than the first threshold.

A method and device are disclosed for improved object detection in an area surrounding a robot. In the method, first and second sensing data are obtained, which can be assigned to a first or second sensing means of the robot, respectively, and which contain at least one portion of the area surrounding the robot. An objection detection of an object in the area surrounding the robot is carried out using a fusion of at least the first and the second sensing data. An item of redundancy information is generated, which is assigned to the object detection and at least indicates whether the detected object has been detected using only the first or only the second sensing data or whether the detected object or at least one or more sections of same has been detected redundantly using both the first and the second sensing data.

Described herein are systems, methods, and non-transitory computer-readable media for isolating commercial components from a harsh vehicle operating environment to increase the longevity of such components and to decrease their failure rate. Also described herein are systems, methods, and non-transitory computer-readable media for monitoring the operational health status of vehicle components for failure, and upon detecting failure of a component, initiating a processing task reassignment and fault recovery process. In this manner, processing load handled by the component prior to failure can be offloaded to one or more other vehicle components while a fault recovery process is initiated for the component. When the failed component is operational again, the vehicle may revert back to the task assignment in place prior to the component failure, may continue with the current task assignment, or may transition to another different task reassignment.