Abstract: Redundant environment perception tracking for automated driving systems. One example embodiment provides a surveillance system, the system including a plurality of sensors, a memory, and an electronic processor. The electronic processor is configured to receive, from the plurality of sensors, environmental information of a common field of view, generate, based on the environmental information, a plurality of hypotheses regarding an object within the common field of view, the plurality of hypotheses including at least one set of hypotheses excluding the environmental information from at least one sensor of a first sensor type, determine, based on a subset of the plurality of hypotheses, an object state of the object, wherein the subset includes the at least one set of hypotheses excluding the environmental information from the at least one sensor of the first sensor type, and track the object based on the object state that is determined.

Abstract: Methods and systems for determining an action for a vehicle. The system includes an electronic controller configured to determine a planned route of the vehicle, determine local astronomical data based upon the planned route, compare the local astronomical data to the planned route of the vehicle to determine a probability of completion of the planned route, and if the probability of completion is below a threshold, generate a command indicating an action for the vehicle.

Abstract: Redundant environment perception tracking for automated driving systems. One example embodiment provides an automated driving system for a vehicle, the system including a plurality of sensors, a memory, and an electronic processor. The electronic processor is configured to receive, from the plurality of sensors, environmental information of a common field of view, generate, based on the environmental information, a plurality of hypotheses regarding an object within the common field of view, the plurality of hypotheses including at least one set of hypotheses excluding the environmental information from at least one sensor of a first sensor type, determine, based on a subset of the plurality of hypotheses, an object state of the object, wherein the subset includes the at least one set of hypotheses excluding the environmental information from the at least one sensor, and perform a vehicular maneuver based on the object state that is determined.

Abstract: A system for controlling an autonomous vehicle when the autonomous vehicle is outside of its operational design domain. The system includes an environment detection system, a vehicle control system, and a first electronic processor. The first electronic processor is configured to detect that an autonomous vehicle is outside of its operational design domain and send a first electronic message. The first electronic message requests that a surrounding vehicle lead the autonomous vehicle until the autonomous vehicle returns to its operational design domain or reaches a predetermined location. The electronic processor is also configured to determine a leading vehicle and control the autonomous vehicle to follow the leading vehicle until the autonomous vehicle returns to its operational design domain or reaches the predetermined location.

Abstract: A system and method for assessment of risk involved in transfer of passengers into or out of a vehicle at a particular transfer location. The assessment may utilize environmental data and dynamic data to estimate a risk level for the passengers. If the estimated risk level is not lower than a threshold, a revised transfer location may be found and assessed.

Abstract: Methods and systems for multi-hypothesis object tracking for automated driving systems. One system includes an electronic processor configured to receive environment information and generate pseudo-measurement data associated with an object within an environment of the vehicle. The electronic processor is also configured to determine, based on the environment information and the pseudo-measurement data, a set of association hypotheses regarding the object. The electronic processor is also configured to determine, based on the set of association hypotheses, an object state of the object. The electronic processor is also configured to control the vehicle based on the determined object state.

Abstract: Methods and systems for controlling an autonomous vehicle. The method includes receiving sensor data from a plurality of sensors, determining, a plurality of probability hypotheses based upon the sensor data, and receiving metadata from at least one sensor of the plurality of sensors. An integrity level of at least one of the plurality of probability hypotheses is determined based upon the received metadata and at least one action is determined based upon the determined integrity level and at least one probability hypothesis of the plurality of probability hypotheses. The at least one action is then initiated by an electronic controller for the vehicle.

Abstract: Redundant environment perception tracking for automated driving systems. One example embodiment provides an automated driving system for a vehicle, the system including a plurality of sensors, a memory, and an electronic processor. The electronic processor is configured to receive, from the plurality of sensors, environmental information of a common field of view, generate, based on the environmental information, a plurality of hypotheses regarding an object within the common field of view, the plurality of hypotheses including at least one set of hypotheses excluding the environmental information from at least one sensor of a first sensor type, determine, based on a subset of the plurality of hypotheses, an object state of the object, wherein the subset includes the at least one set of hypotheses excluding the environmental information from the at least one sensor, and perform a vehicular maneuver based on the object state that is determined.

Abstract: A system for a reliability of objects for a driver assistance or automated driving of a vehicle includes a plurality of sensors that include one or more sensor modalities for providing sensor data for the objects. An electronic tracking unit is configured to receive the sensor data to determine a detection probability (p_D) for each of the plurality of sensors for each of the objects, to determine an existence probability (p_ex) for each of the plurality of sensors for each of the objects, and to provide vectors for each of the objects based on the existence probability (p_ex) for each contributing one of the plurality of sensors for the specific object. The vectors are provided by the electronic tracking unit for display as an object interface on a display device. The vectors are independent from the sensor data from the plurality of sensors.

Abstract: A device and method for filtering safety-relevant interventions, having a control unit as well as a first communications unit, which is able to exchange data with at least one bus system of a vehicle, and having a second communications unit, which is able to exchange data with an external processing unit. A third communications unit is provided, which differs from the first communications unit and the second communications unit, and the control unit filters the data transfer between the first communications unit and the second communications unit as a function of a parameter received by the third communications unit.

Abstract: A system and method of sensor validation utilizing a sensor-fusion network. The sensor-fusion network may comprise a number of sensors associated with one or more vehicles having autonomous or partially autonomous driving functions.

Abstract: A system and method for determining if a field calibration of a subject sensor associated with a vehicle is warranted, and calibrating the subject sensor using a sensor associated with another vehicle when calibration is warranted. Reference vehicles may perform predetermined maneuvers in order to provide additional measurements for use during calibration.

Abstract: A method for the interaction of a driver assistance system in a motor vehicle with a local guidance system, including identifying an area having local traffic routing; downloading a guidance system application or parameters for an existing guidance system application in order to create a communication interface with the local guidance system that is associated with the identified area of local traffic routing; using the communication interface for the communication of the driver assistance system with the local guidance system if the motor vehicle is located within the area having the local traffic routing.

Abstract: An interface for providing a secure interface to a motor vehicle, in particular, for communication with control electronics of the motor vehicle, includes: a first interface having multiple terminals, which is configured for communication with control electronics of the motor vehicle; a second interface, which is for communication with an external diagnostic device; a first processing unit, which is to transmit data between the first and the second interface; a second processing unit, which is to monitor the data transmission between the first interface and the second interface, to recognize an unsafe state and to interrupt the data transmission if an unsafe state has been recognized; and a circuit, which enables terminals of the first interface to be selectively connected to inputs and/or outputs of the first processing unit and/or the second processing unit.

Abstract: A method for actuating a drive assembly in a vehicle includes evaluating a signal of a surroundings-detection apparatus. The vehicle includes the surroundings-detection apparatus, which is configured to observe the surroundings of the vehicle. The method further includes executing a first monitoring function or executing a second monitoring function as a function of the evaluation of the signal of the surroundings-detection apparatus. The first and second monitoring functions are configured to avoid undesired movements of the vehicle.

Abstract: A method for detecting data of a vehicle operated at least partially in an automated manner, including at least one sensor, in particular, a surroundings sensor, in particular, a video sensor, a radar sensor, a LIDAR sensor, an ultrasonic sensor, an infrared sensor, and/or a GNSS sensor, in particular, for receiving a GPS signal, a GLONASS signal or a Galileo signal, and/or a vehicle sensor, in particular, for engine control, for activating occupant protection means, for activating assistance functions and/or convenience functions, in particular, an acceleration sensor, a rotation rate sensor, a pressure sensor, and at least one memory, in particular, a ring memory, including detecting data of the at least one sensor; saving the data in the memory, in particular, in the ring memory; detecting an event; initially storing the content of the memory, in particular, of the ring memory, at the point in time of the detected event.

Abstract: In a method for actuating at least one actuator, two control units and a selection logic are provided, and each of the control units is designed to influence the actuator. Each of the control units performs a self-diagnosis, and each of the control units generates at least one activating signal as a function of the self-diagnosis. The activating signal indicates which of the control units is to be activated. The selection logic activates one of the two control units for influencing the actuator as a function of the activating signals.

Abstract: A method for operating an electrical machine, in particular for making available drive power for a drive train of a motor vehicle, the electrical machine being controlled by several phase currents, the method including sensing an electrical variable that represents the torque delivered by the electrical machine; and monitoring the torque. A degradation of the electrical machine is taken into consideration in the monitoring of the torque.

Abstract: The present disclosure relates to a method for monitoring the voltage on electrical storage units, to a battery and to a motor vehicle having such a battery that are configured to be used particularly for improved establishment of overvoltages and/or undervoltages on modules of the electrical storage unit. To this end, a method for monitoring the voltage on at least one electrical storage unit includes extracting an idle voltage U_OCV on the at least one electrical storage unit from a voltage U_measured that is measured on the at least one electrical storage unit.

Abstract: A security architecture, a battery, and a motor vehicle that has a corresponding battery are configured to be used to combine battery packs of a lower security integrity level into a battery system that has a higher security integrity level. The security architecture is for at least two batteries and each battery includes at least one electrochemical cell. The at least two batteries are each combined with at least one data processing unit to form a respective module. The security architecture is configured such that input signals of at least one second module are processed by the at least one data processing unit of at least one first module.