Abstract: Systems and method are provided for monitoring an operator of a vehicle. In one embodiment, a method includes: receiving, by a processor, data generated by the vehicle; determining, by the processor, causal time series event data based on the received data; computing, by the processor, a score for at least one of safety and quality based on a first machine learning model and the causal time series event data; computing, by the processor, at least one explanation for the score based on a second machine learning model; and generating, by the processor, display data to display at least one of the causal time series event data, the score, and the explanation to an end user.

Abstract: Systems and methods are provided for effecting control through multi-stage voting. A control system may be in communication with an actuator device responsive to a voted command. A multi-stage voting system may be configured to determine the voted command. A set of controllers and a monitor controller may provide commands to the multi-stage voting system. The multi-stage voting system includes logic with a first stage that compares the commands of the set of controllers to each other, and a second stage that compares at least one of those commands to the monitor command. The multi-stage voting system delivers the voted command to the actuator device based on the comparisons made in the first and second stages. The actuator device effects an operation in response to the voted command.

Abstract: Systems and methods are provided for effecting control through multi-stage voting. A control system may be in communication with an actuator device responsive to a voted command. A multi-stage voting system may be configured to determine the voted command. A set of controllers and a monitor controller may provide commands to the multi-stage voting system. The multi-stage voting system includes logic with a first stage that compares the commands of the set of controllers to each other, and a second stage that compares at least one of those commands to the monitor command. The multi-stage voting system delivers the voted command to the actuator device based on the comparisons made in the first and second stages. The actuator device effects an operation in response to the voted command.

Abstract: An automotive vehicle includes a vehicle steering system, an actuator configured to control the steering system, a first controller, and a second controller. The first controller is in communication with the actuator. The first controller is programmed with a primary automated driving system control algorithm and is configured to communicate an actuator control signal based on the primary automated driving system control algorithm. The second controller is in communication with the actuator and with the first controller. The second controller is configured to, in response to a first predicted vehicle path based on the actuator control signal deviating from a current lane, control the actuator to maintain a current actuator setting. The second controller is also configured to, in response to the first predicted vehicle path being within the current lane, control the actuator according to the actuator control signal.

Abstract: An automotive vehicle includes a vehicle steering system, an actuator configured to control the steering system, a first controller, and a second controller. The first controller is in communication with the actuator. The first controller is programmed with a primary automated driving system control algorithm and is configured to communicate an actuator control signal based on the primary automated driving system control algorithm. The second controller is in communication with the actuator and with the first controller. The second controller is configured to, in response to a first predicted vehicle path based on the actuator control signal deviating from a current lane, control the actuator to maintain a current actuator setting. The second controller is also configured to, in response to the first predicted vehicle path being within the current lane, control the actuator according to the actuator control signal.

Abstract: An automotive vehicle a vehicle steering system, an actuator configured to control the steering system, a first controller, and a second controller. The first controller is in communication with the actuator, and the second controller is in communication with the actuator and with the first controller. The first controller is configured to communicate an actuator control signal based on a primary automated driving system control algorithm. The actuator control signal includes a commanded actuator setting. The second controller is configured to, in response to a first condition being satisfied, control the actuator according to the actuator control signal. The second controller is also configured to, in response to a second condition being satisfied, control the actuator according to a modified actuator control signal. The modified actuator control signal corresponds to an intermediate actuator setting between the commanded actuator setting and a current actuator setting.

Abstract: A fault tolerant controller system includes a first controller and a second controller. One of the first and second controllers designated as a primary controller for generating control signals intended to control actuation devices on a vehicle under non-fault operating conditions, and the other of the first and second controllers designated as a secondary controller generating control signals intended to control actuation devices on the vehicle. The actuation devices are responsive only to the designated primary controller. An error is detected in the primary controller and a message is transmitted from the faulty controller to the non-faulty controller identifying the error. The non-faulty controller is subsequently designated as the primary controller. The control signals including an identifier that identifies the non-faulty controller as the designated primary controller. In response to detecting the error, the faulty controller is reset to operate in a safe operating mode as the secondary controller.

Abstract: The present disclosure relates to an automated system for use in connection with longitudinal deceleration, longitudinal acceleration, and lateral acceleration functions. The system includes an interface receiving signals from and transmitting signals to a controller. The system also includes a safety kernel system comprising safety kernel software and a set of safety rules. Also disclosed are methods for use in a motion control system in connection with vehicle deceleration, acceleration, and lateral acceleration. The methods in some cases include receiving an initial request into a safety kernel software and determining whether the safety kernel software has received an override. The methods can also include detecting a violation of any primary safeguards defined by the safety kernel software, detecting a violation within a set of secondary safeguards defined by the safety kernel software, and adjusting the initial request to a modified level; and transmitting the modified level to an actuator.

Abstract: The present disclosure relates to an automated system for use in connection with longitudinal deceleration, longitudinal acceleration, and lateral acceleration functions. The system includes an interface receiving signals from and transmitting signals to a controller. The system also includes a safety kernel system comprising safety kernel software and a set of safety rules. Also disclosed are methods for use in a motion control system in connection with vehicle deceleration, acceleration, and lateral acceleration. The methods in some cases include receiving an initial request into a safety kernel software and determining whether the safety kernel software has received an override. The methods can also include detecting a violation of any primary safeguards defined by the safety kernel software, detecting a violation within a set of secondary safeguards defined by the safety kernel software, and adjusting the initial request to a modified level; and transmitting the modified level to an actuator.

Abstract: A method and system are disclosed herein for confirming a potentially unintended command given to a vehicle. The method includes, but is not limited to, receiving a command from an operator configured to cause actuation of a vehicle system. The method further includes, but is not limited to, detecting a condition of the vehicle. The method further includes, but is not limited to, determining, with a processor, that the command is inconsistent with the condition. The method still further includes, but is not limited to alerting the operator that the command is inconsistent with the condition.

Abstract: A method of controlling an actuator includes developing a sequence of actuation commands S(tx)=C(tx, tx), C(tx, tx+1), . . . , C(tx, tx+n) obtained from data sensed before time tx for controlling the actuator at different time intervals (tx, tx+1), (tx+1, tx+2), . . . , (tx+n?1, tx+n). The sequence of actuation commands is transmitted to and stored in memory of an actuation ECU, which then applies the actuation command for time interval (tx, tx+1). If a fault affects a sensor, a control ECU or data communication therebetween, the actuation ECU will not receive an updated sequence of actuation commands S(tx+1) at time tx+1. If the updated actuation command sequence, the actuation ECU applies the actuation command for the time intervals (tx+1, tx+2), . . . , (tx+n?1, tx+n) from the sequence of actuation commands S(tx) that is stored in the memory of the actuation ECU.

Abstract: A fault tolerant controller system includes a first controller and a second controller. One of the first and second controllers designated as a primary controller for generating control signals intended to control actuation devices on a vehicle under non-fault operating conditions, and the other of the first and second controllers designated as a secondary controller generating control signals intended to control actuation devices on the vehicle. The actuation devices are responsive only to the designated primary controller. An error is detected in the primary controller and a message is transmitted from the faulty controller to the non-faulty controller identifying the error. The non-faulty controller is subsequently designated as the primary controller. The control signals including an identifier that identifies the non-faulty controller as the designated primary controller. In response to detecting the error, the faulty controller is reset to operate in a safe operating mode as the secondary controller.

Abstract: A method for ensuring operation of a limited-ability autonomous driving enabled vehicle includes monitoring a plurality of specific conditions necessary for preferred and reliable use of limited-ability autonomous driving, and initiating a fault handling and degradation strategy configured to maneuver the vehicle to a preferred state if the driver is unable to manually control the vehicle when at least one of the specific conditions is either violated or will become violated.

Abstract: A method and system are disclosed herein for confirming a potentially unintended command given to a vehicle. The method includes, but is not limited to, receiving a command from an operator configured to cause actuation of a vehicle system. The method further includes, but is not limited to, detecting a condition of the vehicle. The method further includes, but is not limited to, determining, with a processor, that the command is inconsistent with the condition. The method still further includes, but is not limited to alerting the operator that the command is inconsistent with the condition.

Abstract: A method of controlling an actuator includes developing a sequence of actuation commands S(tx)=C(tx, tx), C(tx, tx+1), . . . , C(tx, tx+n) obtained from data sensed before time tx for controlling the actuator at different time intervals (tx, tx+1), (tx+1, tx+2), . . . , (tx+n?1, tx+n). The sequence of actuation commands is transmitted to and stored in memory of an actuation ECU, which then applies the actuation command for time interval (tx, tx+1). If a fault affects a sensor, a control ECU or data communication therebetween, the actuation ECU will not receive an updated sequence of actuation commands S(tx+1) at time tx+1. If the updated actuation command sequence, the actuation ECU applies the actuation command for the time intervals (tx+1, tx+2), . . . , (tx+n?1, tx+n) from the sequence of actuation commands S(tx) that is stored in the memory of the actuation ECU.

Abstract: A system and method for providing autonomous and remote vehicle maintenance and repair. The system employs an on-board diagnosis and prognosis module that monitors one or more vehicle buses to identify trouble codes and other information indicating a vehicle problem. The on-board module causes a telematic device on the vehicle to broadcast a message including a problem code that identifies the problem the vehicle is having. A remote repair center may receive the message and may identify a software upgrade patch associated with the problem that can be transmitted to the vehicle to upgrade its software to correct the problem. Also, the message may be received by another vehicle that is part of a broadcast network that has previously received the software upgrade patch to fix a problem on that vehicle, where the receiving vehicle may transmit the software upgrade patch to the vehicle having the problem.

Abstract: A system and method for enhancing vehicle diagnostic and prognostic algorithms and improving vehicle maintenance practices. The method includes collecting data from vehicle components, sub-systems and systems, and storing the collected data in a database. The collected and stored data can be from multiple sources for similar vehicles or similar components and can include various types of trouble codes and labor codes as well as other information, such as operational data and physics of failure data, which are fused together. The method generates classes for different vehicle components, sub-systems and systems, and builds feature extractors for each class using data mining techniques of the data stored in the database. The method also generates classifiers that classify the features for each class. The feature extractors and feature classifiers are used to determine when a fault condition has occurred for a vehicle component, sub-system or system.

Abstract: A method for ensuring operation of a limited-ability autonomous driving enabled vehicle includes monitoring a plurality of specific conditions necessary for preferred and reliable use of limited-ability autonomous driving, and initiating a fault handling and degradation strategy configured to maneuver the vehicle to a preferred state if the driver is unable to manually control the vehicle when at least one of the specific conditions is either violated or will become violated.

Abstract: A system and method for providing real-time traffic information using a wireless vehicle-to-vehicle communications network. A vehicle includes a plurality of sensors that detect other vehicles around the vehicle. The wireless communications system on the vehicle uses the sensor signals to calculate a traffic condition index that identifies traffic information around the vehicle. The vehicle broadcasts the traffic condition index to other vehicles and/or road side infrastructure units that can present the information to the vehicle driver, such as in a navigation system, and/or rebroadcast the traffic information to other vehicles. The traffic condition index can be calculated using the speed of the surrounding vehicles, posted speed limits, the distance between the surrounding vehicles and the traffic density of the surrounding vehicles.

Abstract: A system and method for enhancing vehicle diagnostic and prognostic algorithms and improving vehicle maintenance practices. The method includes collecting data from vehicle components, sub-systems and systems, and storing the collected data in a database. The collected and stored data can be from multiple sources for similar vehicles or similar components and can include various types of trouble codes and labor codes as well as other information, such as operational data and physics of failure data, which are fused together. The method generates classes for different vehicle components, sub-systems and systems, and builds feature extractors for each class using data mining techniques of the data stored in the database. The method also generates classifiers that classify the features for each class. The feature extractors and feature classifiers are used to determine when a fault condition has occurred for a vehicle component, sub-system or system.