A method for determining if a vehicle control command for controlling a vehicle (1) associated with a current vehicle state precludes a future situation avoidance maneuver (SAM) by the vehicle. The method comprises obtaining one or more safe sets, wherein each safe set represents a range of vehicle states from which a future SAM can be initialized with prospect for success. The method also comprises obtaining the current vehicle state and the control command and predicting a future vehicle state based on the current vehicle state and on the control command. The method comprises comparing the predicted future vehicle state to the one or more safe sets and determining that the control command precludes the future SAM if the predicted future vehicle state is not comprised in any of the one or more safe sets.

A vehicle control system includes a central ECU configured to calculate target outputs of actuators, and relay devices each disposed in a communication path between the central ECU and a corresponding actuator among the actuators. The plurality of relay devices includes a specific relay device configured transfer a control signal from the central ECU only to a fixed actuator that is an actuator not related to driving control, braking control, and steering control of a vehicle. The specific relay device is configured to output, to the fixed actuator coupled to the specific relay device, one of a signal for setting the fixed actuator in an operating state or a signal for setting the fixed actuator in a non-operating state, in response to detection of an abnormality in the central ECU. The specific relay device does not have a function of diagnosing an abnormality in the specific relay device.

A vehicle control device controls a vehicle including a drive motor connected to a rotation shaft of wheels, a battery that supplies electricity to the drive motor, and an internal combustion engine connected to the drive motor. The vehicle is equipped with, as traveling modes, a normal mode, and an eco-mode having a larger regenerative braking force than the normal mode obtained such that rotational energy of the wheels is converted into electrical energy. A controller stops the internal combustion engine and switches from the normal mode to the eco-mode when detecting at least an abnormality in the internal combustion engine during traveling of the vehicle.

A control system for a motor vehicle, including a first control unit for controlling a first function of the motor vehicle, a second control unit for controlling a second function of the motor vehicle and a backup control unit. To ensure the proper execution of functions controlled of a motor vehicle controlled with the aid of control units even in the case of a defective control unit with preferably little additional effort, the backup control unit is configurable depending on the input of an error signal of the first or second control unit such that an actuator corresponding to the defective control unit is controllable with the aid of the backup control unit. A first backup power electronic module is assigned to the first actuator, and a second backup power electronic module is assigned to the second actuator.

The power supply device includes a low voltage battery, a high voltage battery, a starter generator, a DC-DC converter, a changeover switch, and a controller. When an abnormality or a failure has occurred in the DC-DC converter, the controller controls the changeover switch to connect the starter generator to the other battery without via the DC-DC converter and controls the output of the starter generator corresponding to the connected other battery.

This application relates to a vehicle control method and system, a vehicle, and a storage medium. The vehicle control method includes: when a braking system fails, activating a backup braking system, the backup braking system decelerating a vehicle by controlling a regenerative motor; when a steering system fails, implementing transverse control over the vehicle by controlling the braking system; and when a parking system fails, implementing parking by controlling a motor and the braking system to work alternately. According to this method, safety control over the vehicle can be implemented when the original braking system, steering system, or parking system fails.

A control system for a vehicle comprising a plurality of vehicle corner modules (VCMs) comprises a network of VCM-controllers. Each VCM comprises at least two subsystems selected from a drive subsystem, a steering subsystem, and a braking subsystem. Each VCM-controller is onboard and installed within a different respective VCM, and is operatively linked to each one of the at least two subsystems of its respective VCM to receive sensor data and to regulate operation in response to incoming signals received from outside its VCM. The control system provides a no-fault operating mode defined by the absence of a control-system fault. A VCM-controller of a first VCM is programmed to control, when operating in the no-fault operating mode, at least one subsystem in a second VCM.

A control device installed in a vehicle, the control device including one or more processors configured to: accept a plurality of first requests from a driver assistance system; perform arbitration of the first requests; calculate a second request that is a physical quantity that is different from the first requests, based on an arbitration result from the arbitration; calculate a third request that is the same physical quantity as the second request, based on a value realized by the vehicle and the first request; and distribute the second request and the third request to at least one of a plurality of actuator systems, wherein the one or more processors are configured to restrict calculation of the third request based on a predetermined condition.

An automated driving system (ADS) includes an automation control module for controlling one or more driving functions of a vehicle, and a safety control module for determining one or more operating conditions relevant to the safety performance of the vehicle, such as driver awareness and processor temperature. The automation control module is configured to automatically adjust the speed of the vehicle based on the one or more operating conditions determined by the safety control module.

A map data generation apparatus is provided as follows. Probe data are collected from a plurality of vehicles. An integration process is performed to generate an integrated map data by integrating the collected probe data for each of data management units corresponding to (i) road sections, (ii) road links, or (iii) meshes into which a map is divided. A comparison process is performed to obtain a difference by comparing the generated integrated map data with a basic map data. The basic map data is updated based on the obtained difference. The integrated map data for a first data management unit is generated in response to a required number of the probe data being collected for the first data management unit. The required number of the probe data is set depending on a road type in the first data management unit.