Abstract: The present invention provides a software management device capable of converting a term used in a model and an abstraction level thereof. A software management device 1 includes: an input unit 2 that inputs a target model; a storage unit 3 that hierarchically stores functions and/or names constituting the model; and an in-model name replacement unit 6 that selects a corresponding function and/or name from the storage unit 3 according to the input model input from the input unit 2, and replaces a function and/or a name in the input model with the selected function and/or name.

Abstract: The purpose of the present invention is to provide a system in which the reliability of an automatic driving system can be excellently complemented by a different control system while the automatic driving system is effectively used. The vehicle control device outputs to a drive device one of a first control signal generated on the basis of automatic driving control information, and a second control signal generated on the basis of the relative information between a vehicle and a surrounding object. If an abnormality is detected in the automatic driving control information, the second control signal is output to the drive device in place of the first control signal.

Abstract: The present invention provides a technology for comprehensive verification of the safety of the design of functions, on the basis of a safety analysis result. The disclosed vehicle control system verification device is equipped with a storage device that stores programs for verifying the safety of the logical architecture of a vehicle control system, and a processor that reads the programs from the storage device and verifies the safety of the logical architecture. On the basis of safety analysis result information that is supplied, the processor executes a process for verifying whether the logical architecture has logical functions corresponding to the safety analysis result.

Abstract: A network device connected via a bus with a plurality of network devices includes: an authentication unit that executes authentication based upon message authentication information included in data transmitted, via the bus, by one of the plurality of network devices acting as a sender device; and a processing unit that invalidates the data upon determining that unauthorized data have been transmitted by the sender device impersonating another network device among the plurality of network devices if the authentication fails.

Abstract: In a digital contents receiver for receiving transmitted digital contents, the digital contents include at least component information indicating an element which constitutes a program of the contents. When the component information indicates that the received digital contents are a 3D component, it is determined whether a display part corresponds to display of the 3D component. If the display part corresponds to display of the 3D component, the received digital contents are displayed in 3D.

Abstract: In the present invention, control feasibility in a vehicle control system architecture is efficiently determined by performing determination based on control feasibility in a physical element based on a converted parameter when a logical architecture is arranged in a physical architecture. The present invention includes: an arrangement unit 101 that arranges a logical architecture 601, which includes a linkage of each of logical functions and an execution time constraint of the linkage, in a physical architecture 300; a delay time calculation unit 104 that calculates a processing delay time based on a converted parameter when the logical architecture 601 is arranged in the physical architecture 300; and a verification unit 102 that verifies whether a total of the processing delay time satisfies the execution time constraint.

Abstract: The present invention provides technology for achieving both high responsiveness to an interrupt process and non-interference between control software. This vehicle control device comprises a storage device that stores various programs for controlling a vehicle, and a plurality of computation devices that include a first computation device and a second computation device, and that read a program from the storage device and execute the same. In addition, the storage device includes a first type of computation processing program executed not by time division and a second type of computation processing program executed by time division. The first computation device is configured to execute the first type of computation processing program, and the second computation device is configured to execute the second type of computation processing program.

Abstract: Previously, users could not be notified when the 3D mode type of a program being received by a digital broadcast receiver was not compatible with the digital broadcast receiver. A reception device is provided with: a reception unit which receives program content including video information and identification information including information for distinguishing whether the program content is 2D program content or 3D program content; and a display control unit which controls the display so as to display whether the aforementioned program content is 2D program content or 3D program content in response to the received aforementioned identification information.

Abstract: In a digital contents receiver for receiving transmitted digital contents, the digital contents include at least component information indicating an element which constitutes a program of the contents. When the component information indicates that the received digital contents are a 3D component, it is determined whether a display part corresponds to display of the 3D component. If the display part corresponds to display of the 3D component, the received digital contents are displayed in 3D.

Abstract: The purpose of the present invention is to provide a system such that functions of a vehicle control system can be quickly reconfigured. The present invention is a processing device connected to at least one processing device, wherein during a period in which the one processing device executes a control operation on the basis of a control program installed in the one processing device, the processing device acquires a substitute program for the control program. In another aspect, the present invention is an on-board control system equipped with multiple processing devices, wherein during a period in which one processing device among the multiple processing devices executes a control operation on the basis of a control program installed in the one processing device, another processing device acquires a substitute program for the program in the one processing device.

Abstract: Previously, users could not be notified when the 3D mode type of a program being received by a digital broadcast receiver was not compatible with the digital broadcast receiver. A reception device is provided with: a reception unit which receives program content including video information and identification information including information for distinguishing whether the program content is 2D program content or 3D program content; and a display control unit which controls the display so as to display whether the aforementioned program content is 2D program content or 3D program content in response to the received aforementioned identification information.

Abstract: In order to address the problem of providing a high-safety vehicle control system and action plan system, the present invention provides a vehicle control system comprising a trajectory generation determination unit (603) having an emergency trajectory generating unit (6032) for calculating an emergency trajectory while driving is being switched from a system to a driver at the time of a fault, and a motion control unit (604) having a trajectory retaining unit (6042) for retaining the emergency trajectory and a trajectory switching unit (6041) for switching whether to travel in the emergency trajectory retained by the trajectory retaining unit on the basis of a fault state detected by a malfunction detection unit.

Abstract: The purpose of the present invention is to provide a vehicle control technique that enables the safety of function substitution to be increased. This vehicle control device determines whether a substitution was successful by monitoring the operations which follow initiation of the substitution.

Abstract: Vehicle systems that implement action planning for a vehicle have had difficulty in maintaining safety in the event of a failure in a recognition device since these systems generate trajectories and control the vehicle on the basis of outside-world information recognized by recognition devices. The present invention was conceived in light of the aforementioned situation and addresses the problem of maintaining safety even in the event of a failure in a recognition device of a vehicle system. This problem can be solved by an action planning device having a failure detection unit for detecting a failure in an outside-world recognition unit and a trajectory generation/determination unit for executing an action on the occurrence of a failure on the basis of outside-world information outputted by the outside-world recognition unit, wherein the trajectory generation/determination unit takes an action for coping with the failure on the basis of failure information from the failure detection unit.

Abstract: Vehicle systems that implement action planning for a vehicle have had difficulty in maintaining safety in the event of a failure in a recognition device since these systems generate trajectories and control the vehicle on the basis of outside-world information recognized by recognition devices. The present invention was conceived in light of the aforementioned situation and addresses the problem of maintaining safety even in the event of a failure in a recognition device of a vehicle system. This problem can be solved by an action planning device having a failure detection unit for detecting a failure in an outside-world recognition unit and a trajectory generation/determination unit for executing an action on the occurrence of a failure on the basis of outside-world information outputted by the outside-world recognition unit, wherein the trajectory generation/determination unit takes an action for coping with the failure on the basis of failure information from the failure detection unit.

Abstract: A network device connected via a bus with a plurality of network devices includes: an authentication unit that executes authentication based upon message authentication information included in data transmitted, via the bus, by one of the plurality of network devices acting as a sender device; and a processing unit that invalidates the data upon determining that unauthorized data have been transmitted by the sender device impersonating another network device among the plurality of network devices if the authentication fails.

Abstract: In a digital contents receiver for receiving transmitted digital contents, the digital contents include at least component information indicating an element which constitutes a program of the contents. When the component information indicates that the received digital contents are a 3D component, it is determined whether a display part corresponds to display of the 3D component. If the display part corresponds to display of the 3D component, the received digital contents are displayed in 3D.

Abstract: A network device connected via a bus with a plurality of network devices includes: an authentication unit that executes authentication based upon message authentication information included in data transmitted, via the bus, by one of the plurality of network devices acting as a sender device; and a processing unit that invalidates the data upon determining that unauthorized data have been transmitted by the sender device impersonating another network device among the plurality of network devices if the authentication fails.

Abstract: In a digital contents receiver for receiving transmitted digital contents, the digital contents include at least component information indicating an element which constitutes a program of the contents. When the component information indicates that the received digital contents are a 3D component, it is determined whether a display part corresponds to display of the 3D component. If the display part corresponds to display of the 3D component, the received digital contents are displayed in 3D.

Abstract: Vehicle systems that implement action planning for a vehicle have had difficulty in maintaining safety in the event of a failure in a recognition device since these systems generate trajectories and control the vehicle on the basis of outside-world information recognized by recognition devices. The present invention was conceived in light of the aforementioned situation and addresses the problem of maintaining safety even in the event of a failure in a recognition device of a vehicle system. This problem can be solved by an action planning device having a failure detection unit for detecting a failure in an outside-world recognition unit and a trajectory generation/determination unit for executing an action on the occurrence of a failure on the basis of outside-world information outputted by the outside-world recognition unit, wherein the trajectory generation/determination unit takes an action for coping with the failure on the basis of failure information from the failure detection unit.