A vehicular control apparatus is used in an onboard system provided with a plurality of information processors mutually connected via a communication bus, and includes a storage section for storing information, and an arithmetic section for executing a process based on the information stored in the storage section. The information contains first management information relating to a security abnormality as a communication data abnormality owing to security attack from outside the onboard system, and second management information relating to a safety abnormality as a communication data abnormality owing to an abnormality in the onboard system. The first management information contains first limit condition information indicating a first limit condition for executing a security coping with the security abnormality. The second management information contains second limit condition information indicating a second limit condition for executing a safety coping with the safety abnormality. Upon detection of the communication data abnormality in the onboard system, the arithmetic section determines a coping content to the detected communication data abnormality based on the first management information and the second management information.

A computer-implemented method for safeguarding a system against false negatives. The method includes: receiving a time series of a criticality, the system including a functionality that is triggered when the criticality meets a first predetermined criterion; computing a time series of a reference, the reference being a comparison criticality for triggering the functionality; computing a time series of an error measure based on the time series of the criticality and the time series of the reference, a non-triggering of the functionality being classified as a false negative when a portion of the time series of the error measure meets a second predetermined criterion; and identifying at least one near-false negative, a non-triggering of the functionality of the system being classified as a near-false negative when a portion of the time series of the error measure meets a third predetermined criterion, but not the second predetermined criterion.

Implementations described herein relate to various techniques that enable an improved automated assistant suggestion service for vehicle(s). For example, implementations can initialize and perform a recurring system health check service to ensure a connection is maintained between at least an OEM application of an in-vehicle computing device of a given vehicle and the suggestion service accessible by the in-vehicle computing device of the given vehicle. By ensuring this connection is maintained, the suggestion service is less prone to failure and suggestion(s) may still be provided in situations when the suggestion service does fail. Additionally, or alternatively, implementations can utilize a versioning API to ensure compatibility between at least the OEM application and the suggestion service. By ensuring this compatibility, the suggestion service for the vehicle(s) is more robust to version updates and the applications need not be fully compatible.

An electronic evaluation device and method thereof for optimizing an operation of computer-controlled metric appliances in a network. The method includes determining whether a fault associated with computer-controlled metric appliance is valid based on a feedback received in real time from a validation entity and updating pre-defined programmable instructions assigned to the computer-controlled metric appliance in response to determining that the fault is invalid. The predefined programmable instructions are used to determine whether the computer-executable metric is achieved or not. The method includes applying a machine learning model on the plurality of parameters and the computer-executable goal to determine a computer-executable task list to be assigned to the computer-controlled metric appliance in order to achieve the computer-executable goal.

A computer system installed on board a carrier, communicating in a network with a data concentrator and with a monitor, and implementing at least one service that is critical for the operating safety of the carrier, the critical service being redundant in at least two instances (δ.sub.1, . . . δ.sub.m) on different respective computers (C.sub.1, . . . , C.sub.m) connected to the network, each computer (C.sub.k) implementing at least one software task implementing an instance (δ.sub.k) of the critical service being configured to implement the critical service by way of time control.

In an embodiment, an electronic circuit includes: a plurality of signal channels; a signal collection circuit configured to determine an action of the electronic circuit based on channel signals from the plurality of signal channels; and a first signal management circuit coupled between the plurality of signal channels and the signal collection circuit, the first signal management circuit including: a set of internal registers, a set of user registers, and a decoder configured to program the set of internal registers based on a content of the set of user registers, where the first signal management circuit is configured to receive the channel signals via the plurality of signal channels, generate first aggregated signals based on the received channel signals and a content of the set of internal registers, and transmitting the first aggregated signals to the signal collection circuit.

In various examples, permanent faults in hardware component(s) and/or connections to the hardware component(s) of a computing platform may be predicted before they occur using in-system testing. As a result of this prediction, one or more remedial actions may be determined to enhance the safety of the computing platform (e.g., an autonomous vehicle). A degradation rate of a performance characteristic associated with the hardware component may be determined, detected, and/or computed by monitoring values of performance characteristics over time using fault testing.

Handling input data errors in an autonomous vehicle using predictive inputs, including: determining an error in input data for a model of a plurality of models of an automation system of the autonomous vehicle; generating predicted input data for the model; and generating, based on the predicted input data, output data for the model.

The present invention provides a vehicle bus-based communication method and apparatus, a computer device and a storage medium. The vehicle bus-based communication method includes: monitoring data flows transmitted through a vehicle bus by vehicle electronic control units; determining undetected data flows in to-be-obtained data flows when the monitoring reaches a first time length; broadcasting data flow obtaining requests through the vehicle bus, the data flow obtaining requests specifying queries for the undetected data flows; and obtaining data flows that are fed back through the vehicle bus in response to the data flow obtaining requests. When data flows of a vehicle are obtained through a vehicle bus, data flows on the vehicle bus are first obtained in a monitoring manner, thereby ensuring data flow obtaining efficiency. After the monitoring is performed for a period of time, data flows that are not obtained in a monitoring-and-obtaining manner are obtained by sending corresponding data flow obtaining requests to the vehicle bus, so that it is ensured that relatively more complete data flows of the vehicle can be obtained.

To locate an intermittent fault in a communication structure of an aircraft comprising pieces of equipment that are interconnected by cabling forming a plurality of communication media that are shared, an analyzer retrieves an error report relating to transmission errors observed on each of said communication media, performs a count of the transmission errors, per type of error and per communication chain, computes a median of the counts for communication chains comprising the same pair of wired pieces of equipment, and when, for a communication chain, the count exceeds a threshold equal to the median plus a predefined margin, generates an alarm indicating detection of an intermittent fault in association with the communication chain that led the threshold to be exceeded. Thus, intermittent faults are easily located and repaired.