Abstract: A vehicle control apparatus according to the present disclosure includes two or more computing processing units, storage apparatuses in each of which a program is stored, an in-vehicle communication channel, an outside-communication unit that receives updating-program information and data related to an updating program, a program sorting unit that sorts updating program into an existing program and into a new program, a new-program writing unit that receives a new program from the outside and then writes the new program in a storage area for the computing processing unit that executes an updating program, and an existing-program writing unit that reads an existing program from the storage area where the existing program exists, by way of the in-vehicle communication channel, and then writes the existing program in a storage area for the computing processing unit that executes an updating program.

Abstract: A vehicle control apparatus according to the present disclosure includes two or more computing processing units, storage apparatuses in each of which a program is stored, an in-vehicle communication channel, an outside-communication unit that receives updating-program information and data related to an updating program, a program sorting unit that sorts updating program into an existing program and into a new program, a new-program writing unit that receives a new program from the outside and then writes the new program in a storage area for the computing processing unit that executes an updating program, and an existing-program writing unit that reads an existing program from the storage area where the existing program exists, by way of the in-vehicle communication channel, and then writes the existing program in a storage area for the computing processing unit that executes an updating program.

Abstract: In the case of an automated driving vehicle capable of autonomous traveling, it has to deal also with failures at two spots. In order to drive actuators at the time of failures of two controllers, it is necessary to additionally provide controllers capable of making real-time calculations and thus, there is a problem that the cost will increase. A vehicle control system according to this application is a vehicle control system which comprises a control device that has two calculation devices for real-time control and two calculation devices for non-real-time control, and that drives a drive unit on the basis of control target values; wherein these calculation devices are configured so that, when one or two of them have failed, another one of these calculation devices takes over functions of the failed calculation device or devices.

Abstract: An in-vehicle network system includes: sensors for acquiring information about a vehicle; actuators for controlling travel of the vehicle and interior environment thereof; an integrated controller unit for outputting control signals for controlling the actuators on the basis of data of the information acquired by the sensors; storage devices and a storage devices for storing the data of the information data acquired by the sensors and data of the control signals output from the integrated controller unit; and a storage controller for allocating and storing the data of the information acquired by the sensors and the data of the control signal output from the integrated controller unit to and in the storage devices and the storage devices. The storage controller generates parities corresponding to the allocated data and stores data of the parities in at least one of the storage devices, thus increasing survivability of the data.

Abstract: The on-vehicle electronic control device includes a main power supply circuit fed with power from an on-vehicle battery through an output contact of a power supply relay and a main power supply terminal of a connector to supply a stabilized control voltage to a microprocessor. When contact failure occurs in the main power supply terminal, the main power supply circuit is fed with bypass power from the output contact through a first electrical load and a commutation diode to perform the one of the report of the abnormality and the storage of the abnormality occurrence history information. A bypass power fed state is detected when an input voltage to the main power supply circuit is lower than a power supply voltage of the on-vehicle battery.

Abstract: The on-vehicle electronic control device includes a main power supply circuit fed with power from an on-vehicle battery through an output contact of a power supply relay and a main power supply terminal of a connector to supply a stabilized control voltage to a microprocessor. When contact failure occurs in the main power supply terminal, the main power supply circuit is fed with bypass power from the output contact through a first electrical load and a commutation diode to perform the one of the report of the abnormality and the storage of the abnormality occurrence history information. A bypass power fed state is detected when an input voltage to the main power supply circuit is lower than a power supply voltage of the on-vehicle battery.