When there is an abnormality in communications between a motor ECU and an HVECU in an automobile, the motor ECU controls a motor such that creep torque or a given torque larger than the creep torque is delivered from the motor. Thus, when there is an abnormality in communications between the HVECU and the motor ECU, the automobile is able to run in a limp home mode.

A system for controlling an intelligent network vehicle is provided, and the system comprises a sensor group configured to obtain sensor information; a sensing and positioning module configured to obtain sensing information and positioning information based on the sensor information; a planning and control module configured to determine vehicle planning control information based on the sensing information and the positioning information; a safety control module configured to determine safety control information based on the sensing information and the positioning information; a function assessment module configured to determine a vehicle state assessment result; a risk assessment module configured to determine a risk assessment result; a logical arbitration module configured to determine vehicle execution information by arbitrating the vehicle planning control information and the safety control information; and an execution module configured to control the vehicle driving based on the vehicle execution information.

Systems for collision avoidance by an autonomous vehicle include a navigational controller adapted to (i) control a driving path of the autonomous vehicle, (ii) process sensor signals from a first sensor system, and (iii) determine whether an object is present in the driving path of the autonomous vehicle based on the sensor signals from the first sensor system. The systems can also include a processor, operationally independent from the navigational controller, adapted to (a) process sensor signals from a second sensor system and (b) determine whether an object is present in the driving path of the autonomous vehicle based on the sensor signals from the second sensor system.

A vehicle control interface includes a control unit configured to: connect between a vehicle platform including a first computer that performs travel control of a vehicle and an automated-driving platform including a second computer that performs automated-driving control of the vehicle and acquire a first control command containing an instruction for the vehicle platform from the second computer; convert the first control command to a second control command for the first computer; and send the second control command to the first computer. The control unit is configured to send, to the second computer, a specifiable range of a physical quantity that is specified by the second computer via the first control command.

The travel assistance apparatus includes: a first Operating System (OS) that controls execution of at least one of a first application and/or a second application, the first application being for specifying a first travel control amount of a vehicle based on first movement information on a position and a speed of an object around the vehicle, the second application being for specifying a second travel control amount of the vehicle based on second movement information on a position and a speed of the object; a second OS that controls execution of a third application for performing travel control of the vehicle based on at least one of the first travel control amount and/or the second travel control amount; and a hypervisor that is executed on a processor and controls execution of the first OS and the second OS.

Systems and methods are directed to an autonomy computing system of an autonomous vehicle. The autonomy computing system can include first functional circuitry configured to generate a first output associated with a first autonomous compute function of the autonomous vehicle based on sensor data using first neural networks. The autonomy computing system can include second functional circuitry configured to generate a second output associated with the first autonomous compute function of the autonomous vehicle based on the sensor data and neural networks. The autonomy computing system can include monitoring circuitry configured to determine a difference between the first output of the first functional circuitry and the second output of the second functional circuitry. The autonomy computing system can include a vehicle control system configured to generate vehicle control signals for the autonomous vehicle based on the outputs.

A method and device parameterize a driving dynamics controller of a vehicle, which intervenes in a controlling manner in a driving dynamics of the vehicle. The driving dynamics controller ascertains an action depending on a vehicle state. The method includes providing a model for predicting a vehicle state. The model configured to predict a subsequent vehicle state depending on the vehicle state and the action. At least one data tuple is ascertained including a sequence of vehicle states and respectively associated actions. The vehicle states are ascertained by the driving dynamics controller using the model depending on an ascertained action. The parameters of the driving dynamics controller are changed/adjusted such that a cost function which ascertains costs of the trajectory depending on the vehicle states and on the ascertained actions of the respectively associated vehicle states and is dependent on the parameters of the driving dynamics controller is minimized.

A driving system for a vehicle includes one or more sensors, a controller, an actuator, and a safety shut down switch. The controller includes a main processing circuit, a main processing module, an actuator drive, a safety processing circuit, a safety processing module, and a safety shutdown switch. The safety processing module is independent of the main processing module, and the safety processing module is configured to perform one or more safety functions.

A vehicle system includes a first vehicle platform including a first computer configured to operate by means of electric power from a first electric power source and perform traveling control of a vehicle, a second vehicle platform including a second computer configured to operate by means of electric power from a second electric power source different from the first electric power source and perform traveling control of the vehicle, and an autonomous driving platform including a third computer configured to perform autonomous driving control of the vehicle by transmitting a control instruction including data for autonomously driving the vehicle to the first computer when the first vehicle platform is in a normal state and perform autonomous stoppage control of the vehicle by transmitting a control instruction including data for causing the vehicle to autonomously stop to the second computer when the first vehicle platform is in an abnormal state.

A device for controlling an automated driving operation of a vehicle may have at least two brake systems, at least two steering systems, an engine controller, a first automated drive controller, a second automated drive controller, a surroundings sensor assembly, and inertial sensors. A third automated drive controller at least controls the vehicle into a standstill. The device is configured such that the automated driving operation is initiated and/or maintained only when the brake systems, steering systems, and at least two of the automated drive controllers are functional and such that the automated driving operation is interrupted if only one of the automated drive controllers is functional and/or if one of the brake systems and/or steering systems is not functional and/or if the engine controller is not functional, in which case the still functional automated drive controller assumes control of the vehicle and guides the vehicle into a standstill.