Abstract: Systems and methods are provided for effecting control through multi-stage voting. A control system may be in communication with an actuator device responsive to a voted command. A multi-stage voting system may be configured to determine the voted command. A set of controllers and a monitor controller may provide commands to the multi-stage voting system. The multi-stage voting system includes logic with a first stage that compares the commands of the set of controllers to each other, and a second stage that compares at least one of those commands to the monitor command. The multi-stage voting system delivers the voted command to the actuator device based on the comparisons made in the first and second stages. The actuator device effects an operation in response to the voted command.

Abstract: A method of transmitting data within a vehicle includes: storing two copies of a data message; constructing at an electronic control unit (ECU) a serial bus message that includes one copy of the data message and a message authentication code (MAC) created using a secret key stored at the ECU, a MAC algorithm, and a different copy of the data message; transmitting the serial bus message to a receiving ECU over a vehicle bus; authenticating the serial bus message at the receiving ECU using a copy of the key stored at the receiving ECU by creating a copy of the MAC from the data message included in the serial bus message and the copy of the key; comparing the MAC from the serial bus message with the copy of the MAC created at the receiving ECU; and rejecting or accepting the data message based on the comparison.

Abstract: Systems and methods are provided for effecting control through multi-stage voting. A control system may be in communication with an actuator device responsive to a voted command. A multi-stage voting system may be configured to determine the voted command. A set of controllers and a monitor controller may provide commands to the multi-stage voting system. The multi-stage voting system includes logic with a first stage that compares the commands of the set of controllers to each other, and a second stage that compares at least one of those commands to the monitor command. The multi-stage voting system delivers the voted command to the actuator device based on the comparisons made in the first and second stages. The actuator device effects an operation in response to the voted command.

Abstract: A control system for an autonomous vehicle includes at least one controller. The controller is programmed to receive first sensor readings from a first group of sensors, provide a first sensor fusion output based on the first sensor readings, the first sensor fusion output including a first detected state of a detected object, receive second sensor readings from a second group of sensors, and provide a second sensor fusion output based on the second sensor readings, the second sensor fusion output including a second detected state of the detected object. The controller is additionally programmed to, in response to the first detected state being outside a predetermined range of the second detected state, generate a diagnostic signal.

Abstract: An automotive vehicle includes a vehicle steering system, an actuator configured to control the steering system, a first controller, and a second controller. The first controller is in communication with the actuator. The first controller is configured to communicate an actuator control signal based on a primary automated driving system control algorithm. The second controller is in communication with the actuator and with the first controller. The second controller is configured to, in response to a first predicted vehicle path based on the actuator control signal deviating from a desired route by a threshold distance, control the actuator to maintain a current actuator setting. The second controller is also configured to, in response to the first predicted vehicle path not deviating from the desired route by the threshold distance, control the actuator according to the actuator control signal.

Abstract: A control system for a vehicle includes at least one controller. The controller is programmed to receive first sensor readings from a first group of sensors and provide a first vehicle pose based on the first sensor readings. The first vehicle pose includes a first location and a first orientation of the vehicle. The controller is also programmed to receive second sensor readings from a second group of sensors and provide a second vehicle pose based on the second sensor readings. The second vehicle pose includes a second location and a second orientation of the vehicle. The controller is further programmed to, in response to the first vehicle pose being outside a predetermined range of the second vehicle pose, generate a diagnostic signal.

Abstract: A control system for an autonomous vehicle includes at least one controller. The controller is programmed to receive first sensor readings from a first group of sensors, provide a first sensor fusion output based on the first sensor readings, the first sensor fusion output including a first detected state of a detected object, receive second sensor readings from a second group of sensors, and provide a second sensor fusion output based on the second sensor readings, the second sensor fusion output including a second detected state of the detected object. The controller is additionally programmed to, in response to the first detected state being outside a predetermined range of the second detected state, generate a diagnostic signal.

Abstract: A control system for a vehicle includes at least one controller. The controller is programmed to receive first sensor readings from a first group of sensors and provide a first vehicle pose based on the first sensor readings. The first vehicle pose includes a first location and a first orientation of the vehicle. The controller is also programmed to receive second sensor readings from a second group of sensors and provide a second vehicle pose based on the second sensor readings. The second vehicle pose includes a second location and a second orientation of the vehicle. The controller is further programmed to, in response to the first vehicle pose being outside a predetermined range of the second vehicle pose, generate a diagnostic signal.

Abstract: An automotive vehicle includes a vehicle steering system, an actuator configured to control the steering system, a first controller, and a second controller. The first controller is in communication with the actuator. The first controller is programmed with a primary automated driving system control algorithm and is configured to communicate an actuator control signal based on the primary automated driving system control algorithm. The second controller is in communication with the actuator and with the first controller. The second controller is configured to, in response to a first predicted vehicle path based on the actuator control signal deviating from a current lane, control the actuator to maintain a current actuator setting. The second controller is also configured to, in response to the first predicted vehicle path being within the current lane, control the actuator according to the actuator control signal.

Abstract: An automotive vehicle includes a vehicle steering system, an actuator configured to control the steering system, a first controller, and a second controller. The first controller is in communication with the actuator. The first controller is programmed with a primary automated driving system control algorithm and is configured to communicate an actuator control signal based on the primary automated driving system control algorithm. The second controller is in communication with the actuator and with the first controller. The second controller is configured to, in response to a first predicted vehicle path based on the actuator control signal deviating from a current lane, control the actuator to maintain a current actuator setting. The second controller is also configured to, in response to the first predicted vehicle path being within the current lane, control the actuator according to the actuator control signal.

Abstract: An automotive vehicle a vehicle steering system, an actuator configured to control the steering system, a first controller, and a second controller. The first controller is in communication with the actuator, and the second controller is in communication with the actuator and with the first controller. The first controller is configured to communicate an actuator control signal based on a primary automated driving system control algorithm. The actuator control signal includes a commanded actuator setting. The second controller is configured to, in response to a first condition being satisfied, control the actuator according to the actuator control signal. The second controller is also configured to, in response to a second condition being satisfied, control the actuator according to a modified actuator control signal. The modified actuator control signal corresponds to an intermediate actuator setting between the commanded actuator setting and a current actuator setting.

Abstract: An automotive vehicle includes a vehicle steering system, an actuator configured to control the steering system, a first controller, and a second controller. The first controller is in communication with the actuator. The first controller is configured to communicate an actuator control signal based on a primary automated driving system control algorithm. The second controller is in communication with the actuator and with the first controller. The second controller is configured to, in response to a first predicted vehicle path based on the actuator control signal deviating from a desired route by a threshold distance, control the actuator to maintain a current actuator setting. The second controller is also configured to, in response to the first predicted vehicle path not deviating from the desired route by the threshold distance, control the actuator according to the actuator control signal.

Abstract: An automotive vehicle includes a vehicle steering system, an actuator configured to control the steering system, and first and second controllers. The first controller is in communication with the actuator, and is configured to communicate an actuator control signal based on a primary automated driving system control algorithm. The second controller is in communication with the actuator and with the first controller. The second controller is configured to, in response to a first predicted vehicle path based on the actuator control signal passing within a first threshold distance of a detected obstacle, control the actuator to maintain a current actuator setting. The second controller is also configured to in response to the first predicted vehicle path not passing within the first threshold distance of a detected obstacle, control the actuator according to the actuator control signal.

Abstract: A method of transmitting data within a vehicle includes: storing two copies of a data message; constructing at an electronic control unit (ECU) a serial bus message that includes one copy of the data message and a message authentication code (MAC) created using a secret key stored at the ECU, a MAC algorithm, and a different copy of the data message; transmitting the serial bus message to a receiving ECU over a vehicle bus; authenticating the serial bus message at the receiving ECU using a copy of the key stored at the receiving ECU by creating a copy of the MAC from the data message included in the serial bus message and the copy of the key; comparing the MAC from the serial bus message with the copy of the MAC created at the receiving ECU; and rejecting or accepting the data message based on the comparison.

Abstract: An electronic park brake module for use with a vehicle is disclosed herein. In an embodiment, the electronic park brake module includes, but is not limited to, a processor and an electronic memory unit. The processor and the electronic memory unit are configured to cooperate to determine when a user has made a request for dynamic electronic park braking, to determine whether the user has a first intent or a second intent when requesting dynamic electronic park braking, to send a first command causing a first amount of braking force to be applied when the first intent has been determined, and to send a second command causing a second amount of braking force to be applied when the second intent has been determined.

Abstract: A system and method of transmitting data within a vehicle over a vehicle bus includes: constructing at an electronic control unit (ECU) a serial bus message that includes a data message and a message authentication code (MAC) that is created using a secret key stored at the ECU, a MAC algorithm, and the data message; transmitting the serial bus message to a receiving ECU over the vehicle bus; and authenticating the serial bus message at the receiving ECU using a copy of the secret key stored at the receiving ECU by creating a copy of the MAC from the data message included in the serial bus message, the copy of the secret key, and the MAC algorithm; comparing the MAC included in the serial bus message with the copy of the MAC created at the receiving ECU; and rejecting or accepting the data message based on the comparison.

Abstract: A method applying an electric park brake system of a vehicle includes detecting a park request with a first vehicle control module, and sending a park command, from the first vehicle control module, to both an electric brake control module and a second vehicle control module. Upon the electric brake control module receiving the park command, an actuation signal is sent from the electric brake control module to a motor winding of the electric park brake system. A status actuated signal is sent from the electric brake control module to the second vehicle control module. The status actuated signal indicates that the actuation signal has been sent from the electric brake control module. A position of the motor winding is sensed to determine if the motor winding is actuated. When the motor winding is actuated, a message is displayed to indicate that the electric park brake system is applied.

Abstract: A method applying an electric park brake system of a vehicle includes detecting a park request with a first vehicle control module, and sending a park command, from the first vehicle control module, to both an electric brake control module and a second vehicle control module. Upon the electric brake control module receiving the park command, an actuation signal is sent from the electric brake control module to a motor winding of the electric park brake system. A status actuated signal is sent from the electric brake control module to the second vehicle control module. The status actuated signal indicates that the actuation signal has been sent from the electric brake control module. A position of the motor winding is sensed to determine if the motor winding is actuated. When the motor winding is actuated, a message is displayed to indicate that the electric park brake system is applied.

Abstract: An electronic park brake module for use with a vehicle is disclosed herein. In an embodiment, the electronic park brake module includes, but is not limited to, a processor and an electronic memory unit. The processor and the electronic memory unit are configured to cooperate to determine when a user has made a request for dynamic electronic park braking, to determine whether the user has a first intent or a second intent when requesting dynamic electronic park braking, to send a first command causing a first amount of braking force to be applied when the first intent has been determined, and to send a second command causing a second amount of braking force to be applied when the second intent has been determined.

Abstract: A method includes: receiving classification data for a hazard associated with a system of a vehicle, the classification data indicating a classification of the hazard under standard 26262 of the International Organization for Standardization (ISO); receiving fault tree data for a fault tree of the hazard; analyzing the fault tree data using a fault tree analysis (FTA) application; identifying a minimal cut-set for the hazard; retrieving standards data for the hazard based on the classification of the hazard, the standards data indicating a minimum value for minimal cut-sets under the 26262 standard; comparing a number of elements in the minimal cut-set with the minimum value; and indicating whether the minimal cut-set complies with the 26262 standard based on the comparison.