A system and method for providing security to a network may include maintaining, by a processor, a model of an expected behavior of data communications over an in-vehicle communication network; receiving, by the processor, a plurality of messages communicated over the network; determining, by the processor, based on the model and based on content attributes of the plurality of messages, whether or not at least one of the messages complies with the model; and if at least one message does not comply with the model then performing, by the processor, at least one action related to the message.

An alighting support device performs warning to notify a vehicle occupant of presence of a moving body having a possibility to come into contact with a right door or a left door of the vehicle. The alighting support device performs the warning when a warning condition is satisfied. When the right door or the left door is opened or is about to be opened while the moving body is moving in a right warning area set on the right side of the vehicle or a left warning area set on the left side of the vehicle, the alighting support device determines that the warning condition is satisfied. When the moving body enters the right warning area or the left warning area with the right door or the left door being open to a predetermined degree or more, the alighting support device determines that the warning condition is not satisfied.

An alighting support device performs warning to notify a vehicle occupant of presence of a moving body having a possibility to come into contact with a right door or a left door of the vehicle. The alighting support device performs the warning when a warning condition is satisfied. When the right door or the left door is opened or is about to be opened while the moving body is moving in a right warning area set on the right side of the vehicle or a left warning area set on the left side of the vehicle, the alighting support device determines that the warning condition is satisfied. When the moving body enters the right warning area or the left warning area with the right door or the left door being open to a predetermined degree or more, the alighting support device determines that the warning condition is not satisfied.

A system and method for providing security to a network may include maintaining, by a processor, a model of an expected behavior of data communications over the in-vehicle communication network; receiving, by the processor, a message sent over the network; determining, by the processor, based on the model and based on content in the message, whether or not the message complies with the model; and if the message does not comply with the model then performing, by the processor, at least one action related to the message.

A safety-critical controller of a vehicle monitors functioning of the controller, at least one sensor and/or at least one actuator to detect an error. When specific error conditions exist, a warning for the driver is generated. It is detected whether the error is remediated within a specified time span, and if not, then corresponding error data is transmitted to a vehicle manufacturer and/or a vehicle service provider. The time span may be extended if the driver confirms the warning by operating a corresponding operating device.

A system and method for providing security to a network may include maintaining, by a processor, a model of an expected behavior of data communications over the in-vehicle communication network; receiving, by the processor, a message sent over the network; determining, by the controller, based on the model and based on a timing attribute of the message, whether or not the message complies with the model; and if the message does not comply with the model then performing, by the processor, at least one action related to the message.

A preferred embodiment of the invention is directed toward a live fire detection apparatus. The apparatus has a self-contained testing circuit, a MCSU interface, and a user-interface. This embodiment is contemplated to be used as a portable tester that a technician can use on multiple MCSUs to test for a live fire condition prior to connecting the inflator wire harness.

A motor output control apparatus includes: an output detector configured to comprise a first detector for detecting a first output signal generated from a first winding of a motor and a second detector for detecting a second output signal generated from a second winding of the motor; a failure determiner configured to determine whether the first winding or the second winding has a failure based on at least one of the first output signal and the second output signal and based on an input-steering torque; and an output controller configured to determine whether or not an output-calculation value corresponding to the input-steering torque is less than a threshold value if it is determined that the first winding or the second winding has a failure, and configured to control an output of the normal one of the first winding or the second winding according to the determination result.

A system and method for providing security to a network may include maintaining, by a processor, a model of an expected behavior of data communications over the in-vehicle communication network; receiving, by the processor, a message sent over the network; determining, by the processor, based on the model and based on a timing attribute of the message, whether or not the message complies with the model; and if the message does not comply with the model then performing, by the processor, at least one action related to the message.

A method is presented for operating a safety-critical controller, wherein the controller monitors correct functioning of the controller, of at least one sensor or at least one actuator, or a plurality of these, and where specific error conditions exist a warning for the driver is generated, wherein for at least a subgroup of error conditions as a warning an appropriate warning message is given to the driver.

If within a specified time span no clearance of the error has been detected, a corresponding data transmission to a vehicle manufacturer and/or service provider takes place, wherein the time span is preferably extended if the driver confirms the warning message by operating a corresponding operating means.