Abstract: A method for evaluating suitability route sections of a digital map storing landmarks for automated driving operation of a vehicle is provided. For each route section of the digital map a spatial density of landmarks is determined, an expected recognizability of the landmarks is determined by a vehicle sensor system under predetermined ambient conditions, a classification is performed based on the determined density and recognizability of the landmarks as to whether a vehicle can be located on the route section with a minimum accuracy required for a predetermined operating mode and/or for a predetermined driving maneuver, and a classification result is stored as a data record in a route attribute associated with the route section, the route attribute indicating for which of the predetermined operating modes and/or driving maneuvers requirements for the minimum accuracy of the landmark-based vehicle localization are met under which of the predetermined environmental conditions.

Abstract: A method for providing a function by a group of computing units in which computation instances are executed, each computation instance implementing the function using at least one algorithm and being set up to determine at least one result in response to a call of the function. The method includes: determining an integrity level for each of the computation instances; receiving a function request from a subscriber, the function request including a quality requirement that includes an integrity requirement; selecting a plurality of the computation instances corresponding to the quality requirement, so that the integrity level of the selected computation instances corresponds to the integrity requirement; calling the function in the selected computation instances corresponding to the function request in order to determine a plurality of results; determining a response based on the results, taking into account the quality requirement; and sending the response to the subscriber.

Abstract: A method for providing a function via a network of processing units using multiple computing instances. Each computing instance implements the function and is configured, when it is executed, to determine at least one result in response to a call-up of the function. The method includes validating the computing instances, each being checked as to whether the computing instance corresponds to a respective predetermined state; determining a respective level of reliability for each of the processing units; starting execution of successfully validated computing instances in the processing units, which have a level of reliability that is equal/greater than a predetermined minimum level of reliability; receiving a function request from a user; calling up the function in at least a portion of the executed computing instances corresponding to the function request, in order to determine multiple results; determining a response based on the results; and sending the response to the user.

Abstract: A system for controlling an autonomous vehicle when the autonomous vehicle is outside of its operational design domain. The system includes an environment detection system, a vehicle control system, and a first electronic processor. The first electronic processor is configured to detect that an autonomous vehicle is outside of its operational design domain and send a first electronic message. The first electronic message requests that a surrounding vehicle lead the autonomous vehicle until the autonomous vehicle returns to its operational design domain or reaches a predetermined location. The electronic processor is also configured to determine a leading vehicle and control the autonomous vehicle to follow the leading vehicle until the autonomous vehicle returns to its operational design domain or reaches the predetermined location.

Abstract: Redundant environment perception tracking for automated driving systems. One example embodiment provides a surveillance system, the system including a plurality of sensors, a memory, and an electronic processor. The electronic processor is configured to receive, from the plurality of sensors, environmental information of a common field of view, generate, based on the environmental information, a plurality of hypotheses regarding an object within the common field of view, the plurality of hypotheses including at least one set of hypotheses excluding the environmental information from at least one sensor of a first sensor type, determine, based on a subset of the plurality of hypotheses, an object state of the object, wherein the subset includes the at least one set of hypotheses excluding the environmental information from the at least one sensor of the first sensor type, and track the object based on the object state that is determined.

Abstract: A system and method for assessment of risk involved in transfer of passengers into or out of a vehicle at a particular transfer location. The assessment may utilize environmental data and dynamic data to estimate a risk level for the passengers. If the estimated risk level is not lower than a threshold, a revised transfer location may be found and assessed.

Abstract: Methods and systems for controlling an autonomous vehicle. The method includes receiving sensor data from a plurality of sensors, determining, a plurality of probability hypotheses based upon the sensor data, and receiving metadata from at least one sensor of the plurality of sensors. An integrity level of at least one of the plurality of probability hypotheses is determined based upon the received metadata and at least one action is determined based upon the determined integrity level and at least one probability hypothesis of the plurality of probability hypotheses. The at least one action is then initiated by an electronic controller for the vehicle.

Abstract: A computer-implemented method for detecting an obstacle on a route ahead of a first vehicle. In the method, information on a second vehicle driving ahead on the route is recorded in the first vehicle by at least one sensor of the first vehicle. In the first vehicle, depending on the recorded information, a computer detects an avoidance maneuver of the second vehicle due to an obstacle or detects that the second vehicle has driven over an obstacle. An obstacle is detected on the route depending on the detected avoidance maneuver or the detection that the vehicle has driven over an obstacle. A measure for protecting the vehicle and/or the obstacle is initiated depending on the detected obstacle.

Abstract: A system and method for determining if a field calibration of a subject sensor associated with a vehicle is warranted, and calibrating the subject sensor using a sensor associated with another vehicle when calibration is warranted. Reference vehicles may perform predetermined maneuvers in order to provide additional measurements for use during calibration.

Abstract: A computer-implemented method for processing data for applications in the field of cloud computing and/or edge computing, for vehicles. The method includes: providing multiple computing services using at least two different hardware resources, and using the multiple computing services.

Abstract: Methods and systems for controlling a vehicle. The system includes a localization system, a memory storing a digital map, and an electronic processor. The electronic processor is configured to receive, from the localization system, a current location of the vehicle and determine a future driving segment of the vehicle based on the current location of the vehicle. The electronic processor is further configured to determine at least one performance limitation based on the future driving segment of the vehicle and modify a driving behavior of the vehicle based upon the determined at least one performance limitation.

Abstract: A method for determining an evaluated detection condition for an evaluation of sensor data. The method includes: providing a first integrity value of the detection condition, based on a first basis for determining the detection condition; providing a second integrity value of the detection condition, based on a second basis for determining the detection condition; determining an overall integrity value for the detection condition, based on the first integrity value and the second integrity value; assigning the overall integrity value to the detection condition for determining the evaluated detection condition.

Abstract: A method for modeling the surroundings of an automated vehicle in which environment information is continuously received from currently available information sources. Each information source provides pieces of environment information. A formal assumption and a formal guarantee is associated with each piece of environment information in such a way that it is guaranteed, if the formal assumption associated with the respective piece of environment information is fulfilled, that the piece of environment information fulfills the formal guarantee associated with it. Each information source provides the associated formal assumptions and formal guarantees for the pieces of environment information it supplies. A piece of environment information is used for calculating the world model at a given point in time only if the formal assumption associated with this piece of environment information is fulfilled at this point in time.

Abstract: A method for controlling a vehicle. In the method, data of a digital road map are read in, zones are determined for the digital road map, and possible sequences of trips along a road of the digital road map are ascertained as a function of the determined zones. Furthermore, it is ascertained, as a function of sensor data and/or current driving data of the vehicle, whether a current or predicted traffic situation is outside the possible sequences or corresponds to a possible sequence that is determined as being outside an intended operating range. If the current or predicted traffic situation is outside the possible sequences or corresponds to the possible sequence outside the intended operating range, a measure is determined and the vehicle is controlled as a function of the measure that is taken.

Abstract: Methods and systems for controlling a vehicle. The system includes a localization system, a memory storing a digital map, at least one sensor, and an electronic processor. The electronic processor is configured to receive, from the localization system, a current location of the vehicle and determine a future driving segment of the vehicle based on the current location of the vehicle. The electronic processor is further configured to determine at least one performance limitation based on the future driving segment of the vehicle and artificially falsify data of the at least one sensor to initiate a safety action for the vehicle.

Abstract: A system and method of sensor validation utilizing a sensor-fusion network. The sensor-fusion network may comprise a number of sensors associated with one or more vehicles having autonomous or partially autonomous driving functions.

Abstract: Methods and systems for controlling a vehicle. The system includes a localization system, a memory storing a digital map, at least one sensor, and an electronic processor. The electronic processor is configured to receive, from the localization system, a current location of the vehicle and determine a future driving segment of the vehicle based on the current location of the vehicle. The electronic processor is further configured to determine at least one performance limitation based on the future driving segment of the vehicle and artificially falsify data of the at least one sensor to initiate a safety action for the vehicle.

Abstract: Methods and systems for controlling a vehicle. The system includes a localization system, a memory storing a digital map, and an electronic processor. The electronic processor is configured to receive, from the localization system, a current location of the vehicle and determine a future driving segment of the vehicle based on the current location of the vehicle. The electronic processor is further configured to determine at least one performance limitation based on the future driving segment of the vehicle and modify a driving behavior of the vehicle based upon the determined at least one performance limitation.

Abstract: A method for monitoring a vehicle system configured to detect an environment of a vehicle, wherein the vehicle system has a sensor system with at least two sensor units configured to capture the environment of the vehicle, and an evaluation unit configured to detect objects in the environment of the vehicle by merging sensor data of the at least two sensor units. The method includes, for each of the detected objects, using sensor data to determine separately for each of the at least two sensor units a probability of existence indicating a probability of the detected object representing a real object, and a probability of detection indicating a probability with which the detected object can be captured by the sensors. The method includes determining whether the vehicle system is in a robust state based on the probability of existence and the probability of detection.

Abstract: A method for detecting data of a vehicle operated at least partially in an automated manner, including at least one sensor, in particular, a surroundings sensor, in particular, a video sensor, a radar sensor, a LIDAR sensor, an ultrasonic sensor, an infrared sensor, and/or a GNSS sensor, in particular, for receiving a GPS signal, a GLONASS signal or a Galileo signal, and/or a vehicle sensor, in particular, for engine control, for activating occupant protection means, for activating assistance functions and/or convenience functions, in particular, an acceleration sensor, a rotation rate sensor, a pressure sensor, and at least one memory, in particular, a ring memory, including detecting data of the at least one sensor; saving the data in the memory, in particular, in the ring memory; detecting an event; initially storing the content of the memory, in particular, of the ring memory, at the point in time of the detected event.