A multiply-redundant system that prevents a driver from starting and/or moving a vehicle if a compressed natural gas fill system is not correctly and completely disconnected from the vehicle. One or more sensors in combination with one or more optional microswitches combine to lock-out the vehicle's ignition or otherwise prevent it from starting and/or moving. For different levels of safety, different combinations of sensors can be used with the lowest level having a single proximity sensor sensing the presence or absence of a high-pressure fill hose. The highest level of safety being achieved by having separate proximity sensors on the fuel fill hose fitting, the gas cap cover and a manual safety valve along with a redundant microswitch. An optional override that may be restricted as to the number of times it can be used can allow starting with a faulty sensor in order to allow maintenance.

A vehicle control system (500) controls a vehicle whereon a plurality of ECUs (30) and a vehicle integrated control device (10) to control the plurality of ECUs (30) are mounted. The vehicle integrated control device (10) includes a control target value operation unit to calculate a control target value to control the plurality of ECUs (30). Further, the vehicle integrated control device (10) includes a prediction control value operation unit to estimate a state of the vehicle in the future, and to calculate a prediction control value to control the plurality of ECUs (30). The vehicle integrated control device (10) includes an instruction signal generation unit to generate an instruction signal including an operation instruction and a prediction control instruction. Each of the plurality of ECUs (30) includes an actuator control unit to control an actuator (50) based on the prediction control instruction.

The control apparatus (200) is an apparatus that controls the travel of a target vehicle (10). The control apparatus (200) detects a partial object (20) using a sensor. The partial object (20) is a part of an object riding on the target vehicle (10) and is jutting outside the target vehicle (10). Furthermore, the control apparatus (200) outputs information (travel information) relating to travel of the target vehicle (10) based on the detected partial object (20). For example, the travel information is control information for travel control of the target vehicle (10) and notification information indicating information relating to the partial object (20).

A method of determining a target path according to a source electronic control unit (ECU) mounted on a vehicle is provided. The method includes obtaining state information of a plurality of paths connecting the source ECU with a destination ECU, selecting the target path for target data from among the plurality of paths based on the state information, and transmitting the target data to the destination ECU through an ECU located on the selected target path, the state information including information about at least one of power consumption of an ECU located on the paths, a temperature of the ECU located on the paths, a latency of the paths, and a transmission success rate of the paths.

A distributed safety lockout system for a vehicle, such as a recreational vehicle (RV), that includes a plurality of networked devices communicatively coupled via a communications network, and that is configured to implement a method for controlling an electromechanical operation of an electromechanical device based on a safety lockout condition determined through use of a consensus protocol in which a safety lockout status is agreed upon by the networked devices. The safety lockout status may be escalated by a safety lockout condition detection device that detects a safety lockout condition, such as movement of the RV. The safety lockout status may be de-escalated through a network contention mode of the consensus protocol in which each of the networked devices agree to de-escalate the safety lockout status.

A vehicle control device includes: a power-supply control unit that sets a power supply to an off state when either a first power-off condition in which a user performs a power-off operation or a second power-off condition in which a first predetermined time elapses from the time when the user U gets off the vehicle with the power supply in an on state is satisfied; and a power-on-condition setting unit that: sets a power-on condition to a first power-on condition, when the power supply is set to the off state because the first power off condition is satisfied; and sets the power-on condition to a second power-on condition that is different from the first power-on condition, when the power supply is set to the off state because the second power off condition is satisfied.

A vehicle power supply system, mounted on a vehicle including an internal combustion engine, includes: a main power supply system including a main low-voltage power supply; and a backup power supply system including a backup low-voltage power supply. A starter motor that starts the internal combustion engine is connected to the main power supply system. At least one of a vehicle control device, configured to control the main power supply system, the backup power supply system, the internal combustion engine and the starter motor, and a backup power supply control device of the backup power supply system is configured to execute an abnormality determination processing of determining whether an abnormality occurs in the main power supply system, and does not execute the abnormality determination processing when the starter motor is in operation, or determines that no abnormality occurs in the main power supply system in the abnormality determination processing.

A fault diagnostic device 80 includes an input unit 81 and a generation unit 82. The input unit 81 receives input of observation data of a vehicle operating at a predetermined speed. The generation unit 82 extracts time series features of the observation data as features indicating a normal condition, and generates a feature master indicating the normal condition of the vehicle based on the extracted features.

In one embodiment, a method includes, by a computing system of a vehicle, determining a first temperature of a control unit of the vehicle, wherein the control unit and one or more components of the vehicle are interconnected through a thermal network, determining a thermal objective for the control unit based on the first temperature of the control unit, selecting, based on the thermal objective for the control unit, at least a first component from the one or more components, and sending one or more signals to one or more actuators within the thermal network to enable a heat-transfer fluid to flow between (1) a first portion of the thermal network thermally coupled to the control unit and (2) a second portion of the thermal network thermally coupled to the selected first component.

In at least one embodiment, a system including a battery cable and at least one vehicle controller is provided. The battery cable includes a detection shield positioned over an inner conductor. The at least one vehicle controller is programmed to: receive a first signal indicative of current or voltage of the detection shield of the battery cable and to compare the current or voltage to a predetermined value. The at least one vehicle controller is further programmed to generate an alert indicative of warning that the battery cable is exhibiting a failure prior to a short circuit condition occurring at the battery cable in the event the current or voltage is not equal to the predetermined value.