A target trajectory generation device generates and outputs target trajectories each including a target position and a target speed of a vehicle. A first target trajectory is intended to perform at least one of steering, acceleration, and deceleration of the vehicle. A second target trajectory is intended to decelerate and stop the vehicle. When a malfunctioning device does not exist, a vehicle traveling control device executes vehicle traveling control based on the first target trajectory. When the malfunctioning device exists, the vehicle traveling control device stops the vehicle by executing the vehicle traveling control based on the second target trajectory output before the malfunction occurs, or based on the second target trajectory output from the target trajectory generation device other than the malfunctioning device.

A method includes identifying mass distribution data of an autonomous vehicle (AV). The mass distribution data is associated with a first load proximate a first distal end of a first axle of the AV and a second load proximate a second distal end of the first axle of the AV. The method further includes determining, based on the mass distribution data, one or more handling maneuver limits for the AV. The method further includes causing the AV to travel a route based on the one or more handling maneuver limits.

A CPU of a control device provided in a traveling unit causes a display to display information indicating that it is necessary to mount an energy absorbing unit capable of absorbing collision energy in a case where it is determined that a vehicle cabin forming unit is for the purpose of carrying a person, and causes the display to display information indicating that it is not necessary to mount the energy absorbing unit in a case where it is determined that the vehicle cabin forming unit is not for the purpose of carrying a person.

An autonomous vehicle, a control system for remotely controlling the same, and a method thereof may include an autonomous driving control apparatus including a processor for determining whether remote control of the autonomous vehicle is required according to at least one of occurrence of failure of the vehicle during autonomous driving thereof, occurrence of an accident, a region where the autonomous driving is not possible, reliability of positioning data of the vehicle, a stopping time of the vehicle, or a response point of a hand signal, and for requesting the remote control to a control system when the remote control of the vehicle is required.

A vehicle system includes a first vehicle platform including a first computer configured to operate by means of electric power from a first electric power source and perform traveling control of a vehicle, a second vehicle platform including a second computer configured to operate by means of electric power from a second electric power source different from the first electric power source and perform traveling control of the vehicle, and an autonomous driving platform including a third computer configured to perform autonomous driving control of the vehicle by transmitting a control instruction including data for autonomously driving the vehicle to the first computer when the first vehicle platform is in a normal state and perform autonomous stoppage control of the vehicle by transmitting a control instruction including data for causing the vehicle to autonomously stop to the second computer when the first vehicle platform is in an abnormal state.

The described techniques relate to coordinating and managing faults of systems of a vehicle, such as an autonomous vehicle, to enable the vehicle to respond safely and appropriately to the faults. In examples, a centralized fault monitor system receives faults from different vehicle systems, maps the received faults to associated fault constraints, prioritizes different and shared parameters between the fault constraints, and communicates the constraint parameters to appropriate vehicle systems accordingly.

A method for controlling a vehicle controllable in a highly/fully automated manner. The method includes: ascertaining a malfunction of a vehicle control unit of the vehicle, the vehicle control unit being designed for a highly automated and/or fully automated control of the vehicle; switching from the vehicle control unit to an emergency control unit, the emergency control unit being based on a driver assistance system and designed for maximally a conditionally automatic control of the vehicle, and the emergency control unit being configured to effectuate a control of the vehicle in the event of a malfunction of the vehicle control unit; executing the emergency control of the vehicle; and controlling the vehicle with the aid of the emergency control unit based on surroundings sensor data of the vehicle.

A driving data extracting apparatus for an autonomous driving vehicle includes: a storage module for storing driving data of the autonomous driving vehicle; a driving record module configured to manage recording of the driving data, to divide the driving data into a plurality of pieces depending on a frame size based on a diagnostic protocol of unified diagnostic services (USD), and to output the divided driving data by using a routine control (RID) service; a diagnostic module configured to receive a request for extraction of the driving data from an external data extracting equipment, to sequentially receive the divided driving data from the driving record module, and to sequentially transmit the driving data to the data extracting equipment; and a diagnostic communication module configured to perform diagnostic communication based on the diagnostic protocol of the USD between the data extracting equipment and the diagnostic module.

Provided is an autonomous driving assistance system for vehicles that has redundancy without posing any problem in diversity. The autonomous driving assistance system includes: a sensor configured to acquire surroundings information; a downstream device including an actuator configured to control a vehicle; and a driving assistance device configured to calculate a control amount for the downstream device on the basis of the surroundings information. The downstream device further includes a diagnosis unit configured to: perform comparison between at least two control amounts that include the control amount calculated in the driving assistance device and a control amount calculated in the downstream device on the basis of the surroundings information; and determine, if the control amounts are equal to each other, that the control amounts are normal, and determine, if the control amounts are different from each other, that the control amounts are abnormal.

A device for controlling an automated driving operation of a vehicle may have at least two brake systems, at least two steering systems, an engine controller, a first automated drive controller, a second automated drive controller, a surroundings sensor assembly, and inertial sensors. A third automated drive controller at least controls the vehicle into a standstill. The device is configured such that the automated driving operation is initiated and/or maintained only when the brake systems, steering systems, and at least two of the automated drive controllers are functional and such that the automated driving operation is interrupted if only one of the automated drive controllers is functional and/or if one of the brake systems and/or steering systems is not functional and/or if the engine controller is not functional, in which case the still functional automated drive controller assumes control of the vehicle and guides the vehicle into a standstill.