Abstract: A state of a system and a network is reproduced upon occurrence of an error. A state of the system is continuously recorded for a time window. Furthermore, a network log for the network is generated. When a network condition indicative of an error or an internal condition indicative of an error is detected, at least a part of the recorded state of the system is stored together with a fitting portion of the network log for the network.

Abstract: A method for a data processing circuit and for executing applications, which include at least one safety-relevant application and at least one non-safety relevant application using the same OS and memory, includes obtaining first memory information on a predefined memory space allocated to the safety-relevant application and obtaining second memory information on a memory space for the non-safety-relevant application. A monitoring operation is applied for checking, based on the first and second memory information, if the non-safety-relevant application uses memory space allocated to the safety-relevant application to verify spatial Freedom-From-Interference. The monitoring may be executed in a Trusted Execution Environment.

Abstract: A regression model is trained, and sensor data of a vehicle is processed. Sensor data of an environment is obtained, and a segmentation model is applied to the sensor data to obtain segmented sensor data of an object in the environment. Further, a regression model is applied to the segmented sensor data to determine a steering angle for the vehicle.

Abstract: First fused sensor data is generated by fusing sensor data of the first sensor and of the second sensor. The sensor data for the first fused sensor data is in a first processing state. Second fused sensor data is generated by fusing the sensor data of the first sensor and of the second sensor. The sensor data for the second fused sensor data is in a second processing state. An accuracy of the first and the second fused sensor data is determined. Based on the determined accuracy, the first processing state or the second processing state is selected for fusing sensor data of the first and second sensors.

Abstract: A microkernel-based operating system in a vehicle is initially operated in a first criticality mode of multiple supported criticality modes. In case a condition is determined that requires a transition to a second criticality mode of the multiple supported criticality modes, settings of the microkernel-based operating system are adapted in accordance with the second criticality mode. The microkernel-based operating system is then operated in the second criticality mode.

Abstract: An autonomous/assisted driving system (ADS) obtains a top view representation of labels of a traffic environment in Cartesian coordinates from sample data. The system obtains a transformation matrix for transforming Cartesian coordinates in an observation coordinate system of a perspective of an environmental sensor of the ADS. The transformation matrix is applied to the top-view representation of the labels to obtain a perspective representation of the traffic environment in the observation coordinate system.

Abstract: The present invention is related to a computing device (CD), in particular for automotive applications, with a safe and secure coupling between virtual machines (VMi) and a peripheral component interconnect express device (PCIe-D). The invention is further related to a vehicle comprising such a computing device (CD). The computing device (CD) comprises one or more virtual machines (VMi) and a virtual switch (VS). The virtual switch (VS) is configured to provide a safe and secure coupling between the one or more virtual machines (VMi) and at least one peripheral component interconnect express device (PCIe-D) configured to support single-root input/output virtualization, to which the computing device (CD) is connected.

Abstract: The present invention relates to a method, to a computer program containing instructions and to an apparatus for performing a boot process for a system that supports redundant copies of boot images. In a first step, an active copy of the boot images is determined (S1). Then the active copy of the boot images is processed (S2). In response to a successful boot process, another copy of the boot images is then set (S3) as the active copy for a subsequent boot process.

Abstract: A calibration matrix is determined for a camera for an automotive vehicle. In a first step, at least one object is detected, which moves in a sequence of camera images between image areas having different levels of distortion. In particular, feature tracking can be carried out for the at least one object. To determine the calibration matrix, first an expected perspective-related distortion of the at least one object is calculated. Moreover, an observed distortion of the at least one object is determined. A camera-related distortion of the at least one object is calculated from the observed distortion and the expected perspective-related distortion. A calibration matrix can then be calculated from the camera-related distortion. This matrix can be applied to the camera images. The method steps can then be iteratively repeated until a minimal camera-related distortion is achieved.

Abstract: A flash memory device is re-partitioned over-the-air. A software component responsible for re-partitioning is received. The software component then generates a re-partitioning control structure in the flash memory device and executes re-partitioning steps. The executed re-partitioning steps and currently valid locations of data that needs to be moved in the flash memory device during re-partitioning are recorded in the re-partitioning control structure.

Abstract: A threat is detected for a processing system of a motor vehicle. In a first step, driving context data associated with a driving context of the motor vehicle are received. In addition, driving pattern data may be received. Simulated network messages of the motor vehicle are then generated from the driving context data and, if available, the driving pattern data. Finally, by comparing the simulated network messages with actual network messages of the motor vehicle, a threat is detected. In addition, a threat may be predicted from the simulated network messages. In case a threat is detected or predicted, appropriate counter measures may be initiated.

Abstract: A generative adversarial network performs face anonymization. In a first step, an input image showing a face to be anonymized is received. Furthermore, an input vector with control data for face anonymization is received. The generative adversarial network then generates an output image in which the face is anonymized in accordance with the control data of the input vector.

Abstract: To generate code for a system, in a first step, configuration information for the system is retrieved, which describes a system management scheme. Based on this configuration information, code is generated for managers of the system, the code comprising a system management library for each manager, which contains interfaces required by the manager for sending and receiving messages. In addition, code for software platforms of the system is generated, the code comprising a system management router for each software platform, which enables an exchange of messages between managers. Optionally, system management tests may be generated for the system management libraries or the system management routers.

Abstract: A processing unit is customized to prevent remote code execution of the processing unit. In a first step, a permutation of an instruction set of the processing unit is determined. Adaptations of the processing unit for implementing the permutation of the instruction set are then determined. Finally, the processing unit is customized in accordance with the determined adaptations.

Abstract: Playback of audio data is controlled by: receiving a speech signal to be conveyed to a user simultaneously with playback of the audio data. Volume and/or spectral appearance of selected elements of the audio data are then modified to obtain adjusted audio data, and the adjusted audio data is played back. The received speech signal may then be played back simultaneously with the adjusted audio data.

Abstract: A method and computing device, for generating training image data for a machine learning-based object recognition system is described. The method comprises receiving generic image data of an object type, receiving recorded image data related to the object type, and modifying the generic image data with respect to at least one imaging-related parameter. The method further comprises determining a degree of similarity between the modified generic image data and the recorded image data, and, when the determined degree of similarity fulfills a similarity condition, storing the modified generic image data as generated training image data of the object type. Further described are a computing device, a computer program product, a system and a motor vehicle.

Abstract: A method for recognizing traffic signs includes: receiving images of traffic signs from different locations at different times; and calculating a first probability value that indicates the probability with which an image received at a specific time maps a specific traffic sign from a set of traffic signs. The calculating is based on: at least one image of a traffic sign received before the specific time and characterizing an earlier state, and a previously known transition probability value that indicates the probability with which the specific traffic sign occurs following the earlier state.

Abstract: The present disclosure relates to a method and a device for the automatic stopping of a vehicle in a target area. A method aspect of the disclosure comprises providing map data in which potential target areas for stopping of vehicles are defined by at least one attribute of map elements detecting an event that necessitates an automatic stopping of the vehicle determining a target area on the basis of the current position of the vehicle and the potential target areas defined in the map data, and triggering, on detection of the event, an automatic stopping process.

Abstract: A method for operating a navigation device. The navigation device carries out a position determination on the basis of received signals. In parallel, another position determination is carried out on the basis of signals from inertial sensors. These two determined positions are compared. If these two determined positions differ by more than a predetermined amount, which has been defined by a predetermined limit value, an error value is recognized. If an impermissible deviation is recognized, then especially the direction of movement, the speed differences and the position changes are taken into account. When the error value is recognized, shaded areas in the surroundings of the vehicle are determined and associated with the determined momentary position, as a result of which an association with a lane level is carried out.

Abstract: The present disclosure relates to a technique for controlling the signalling of incoming telephone calls during a route guidance by means of a navigation device. A method aspect includes the steps of detecting an incoming telephone call, determining a distance to a forthcoming maneuver instruction or route reference point on a predetermined route in response to the detected telephone call, and delaying the incoming telephone call until a maneuver instruction has been output if the determined distance to the forthcoming maneuver instruction or route reference point falls short of a predetermined threshold value.