An autonomous vehicle (AV) includes features that allows the AV to comply with applicable regulations and statues for performing safe driving operation. An example system for an AV includes a communications gateway device. The communications gateway device includes a plurality of modules each configured for different communication mediums or applications. In particular, the plurality of modules includes a first module for communicating with a remote computer. Via the first module, vehicle operational data is reported to the remote computer, and instructional data is received from the remote computer. The modules further include a second module for communicating with devices located within a vicinity external to the vehicle, and a third module configured to communicate with subsystems located within the vehicle. The example AV system includes a second communications gateway device that is configured to be redundant.

A piloting assistance system for an aircraft includes a measuring module for measuring a vertical manoeuvre of the aircraft, a computational module for computing a first load factor from the measured vertical manoeuvre and from a setpoint vertical manoeuvre, a measuring module for measuring an inclination angle, a pitch rate and a pitch acceleration, a protection module including a computational submodule configured to compute a second load factor and a comparison submodule in order to compare the first and the second load factor in order to determine an applicable load factor equal to the minimum between the first and the second load factor, a computational module configured to compute elevator control from the applicable load factor and a sending module configured to send the elevator control to the automatic pilot.

An autonomous driving control system, comprising a main control system and a backup control system. The main control system comprises a main control module and main execution modules, and the backup control system comprises a backup control module and backup execution modules; the main control module monitors an operating status of the main control system in real time; the main control module further sends, when detecting that a failure occurs in the main control system, a failure notification to the backup control module, and sends a response termination control instruction to each of the main execution modules, the response termination control instruction being a control instruction for instructing each of the main execution modules not to respond to any control over a vehicle; and the backup control module controls, after receiving the failure notification, the backup execution modules to start to execute a backup control instruction.

An autonomous driving controller includes a plurality of parallel processors operating on common input data. Each of the plurality of parallel processors includes a general processor, a security processor subsystem (SCS), and a safety subsystem (SMS). The general processors, the SCSs, and the SMSs of the plurality of parallel processors are configured to first, boot the plurality of SCSs from ROM second, boot the plurality of SMSs of the plurality of parallel processors from RAM or ROM, and, third, boot the plurality of general processors of the plurality of parallel processors from RAM. Between booting of the SCSs and the SMSs, at least one of the plurality of SCSs may load SMS boot code into the RAM that is dedicated to the plurality of SMSs.

A helicopter autopilot system includes an inner loop for attitude hold for the flight of the helicopter including a given level of redundancy applied to the inner loop. An outer loop is configured for providing a navigation function with respect to the flight of the helicopter including a different level of redundancy than the inner loop. An actuator provides a braking force on a linkage that serves to stabilize the flight of the helicopter during a power failure. The actuator is electromechanical and receives electrical drive signals to provide automatic flight control of the helicopter without requiring a hydraulic assistance system in the helicopter. The autopilot can operate the helicopter in a failed mode of the hydraulic assistance system. A number of flight modes are described with associated sensor inputs including rate based and true attitude modes.

Methods and systems for a full-scale vertical takeoff and landing manned or unmanned aircraft, having an all-electric, low-emission or zero-emission lift and propulsion system, an integrated ‘highway in the sky’ avionics system for navigation and guidance, a tablet-based motion command, or mission planning system to provide the operator with drive-by-wire style direction control, and automatic on-board-capability to provide traffic awareness, weather display and collision avoidance. Automatic computer monitoring by a programmed triple-redundant digital autopilot computer controls each motor-controller and motor to produce pitch, bank, yaw and elevation, while simultaneously restricting the flight regime that the pilot can command, to protect the pilot from inadvertent potentially harmful acts that might lead to loss of control or loss of vehicle stability. By using the results of the state measurements to inform motor control commands, the methods and systems contribute to the operational simplicity, reliability and safety of the vehicle.

An aircraft control device and a remote controller aircraft are disclosed. The aircraft control device includes a first channel configured to receive first control information outputted by a remote controller and transmit the first control information to an aircraft; a second channel configured to receive second control information outputted by the remote controller and transmit the second control information to a camera and/or a gimbal; and a switch unit configured to switch that the first control information is received by the second channel and transmitted to the aircraft when the first channel is disturbed or a distance between the remote controller and the aircraft is larger than a distance threshold. The present invention is able to switch the transmission route of the first control information between the first channel and the second channel in accordance with situations of the first channel and the second channel.

The disclosure provides an early notification system to alert a driver of an approaching unsafe autonomous or semi-autonomous driving zone so that a driver may switch vehicle to a non-autonomous driving mode and navigate safely through the identified location. In response, to a determination of an upcoming unsafe autonomous or semi-autonomous driving zone, the driver or system may take appropriate actions in response to the early notification.

A signal processing IC unit performs image processing with respect to an output from a camera. A recognition processing IC unit performs recognition processing based on the output from the signal processing IC unit. A control IC unit outputs a control signal based on the output from the recognition processing IC unit. A first terminal is electrically connected to the recognition processing IC unit. A second terminal is electrically connected to the control IC unit. The signal processing IC unit, the recognition processing IC unit, and the control IC unit are disposed on a board. The first terminal and the second terminal are provided on an edge portion of the board.

A control system for an autonomous vehicle or robot comprises a plurality of high level controllers. Each high level controller is able to provide high level movement commands independently of the other high level controllers. A low level controller is arranged to receive the high level movement commands of one of the high level controllers and to convert said received high level movement commands into electrical outputs to a plurality of electrical motors/actuators for driving the vehicle/robot. A decision system, independent of the high level controllers, is configured to decide which one of the high level controllers is to be active. The active high level controller only is used provide the high level movement commands to the low level controller.