Abstract: An automotive vehicle includes at least one sensor configured to detect features in a region proximate the exterior of the vehicle, at least one actuator configured to control vehicle steering, propulsion, shifting, or braking, and an automated driving system selectively operable in a nominal mode and in a degraded mode. The automated driving system is configured to generate an actuator control signal for the at least one actuator in response to sensor signals from the at least one sensor. The automated driving system includes a computational accelerator processor. The vehicle further includes a monitor processor in communication with the automated driving system. The monitor processor is configured to provide a test input for processing by the computational accelerator processor, receive a test output from the computational accelerator processor, and in response to the test output not satisfying a validation criterion, control the automated driving system in the degraded mode.

Abstract: Systems, methods and apparatuses are provided for detecting faults. The system includes a fault diagnostic computer in an autonomous vehicle configured to, via at least a first platform and a second platform, receive parameter data for processing simultaneously the parameter data in each platform wherein the first and second platforms are redundant configurations of each other wherein the parameter data includes a characteristic of a data; a check platform, coupled to the first and second platforms, for performing a method for checking the parameter data processed by both platforms using a collision test, the method includes: detecting, by applications of the collision test to one or more corresponding data found on each platform, collisions of the data within a tolerance prescribed by the collision test; and determining faults, in either the first platform, the second platform or both, based on results of comparisons of parameter data of the detected collisions.

Abstract: Systems and methods are provided for testing a first computer device of a vehicle. A method includes selecting an operational component of the first computer device and selecting a test operation that is configured to utilize an entire capacity of the operational component. The method further includes instructing the first computer device to perform the test operation and to generate a first result. The method further yet includes retrieving a second result of the test operation and comparing the first result of the test operation from the first computer device with the second result. The method further yet includes indicating that the first computer device is faulty based at least in part on a difference between the first result and the second result.

Abstract: An automotive vehicle includes at least one sensor configured to detect features in a region proximate the exterior of the vehicle, at least one actuator configured to control vehicle steering, propulsion, shifting, or braking, and an automated driving system selectively operable in a nominal mode and in a degraded mode. The automated driving system is configured to generate an actuator control signal for the at least one actuator in response to sensor signals from the at least one sensor. The automated driving system includes a computational accelerator processor. The vehicle further includes a monitor processor in communication with the automated driving system. The monitor processor is configured to provide a test input for processing by the computational accelerator processor, receive a test output from the computational accelerator processor, and in response to the test output not satisfying a validation criterion, control the automated driving system in the degraded mode.

Abstract: Systems and methods are provided for effecting control through multi-stage voting. A control system may be in communication with an actuator device responsive to a voted command. A multi-stage voting system may be configured to determine the voted command. A set of controllers and a monitor controller may provide commands to the multi-stage voting system. The multi-stage voting system includes logic with a first stage that compares the commands of the set of controllers to each other, and a second stage that compares at least one of those commands to the monitor command. The multi-stage voting system delivers the voted command to the actuator device based on the comparisons made in the first and second stages. The actuator device effects an operation in response to the voted command.

Abstract: Systems, methods and apparatuses are provided for detecting faults. The system includes a fault diagnostic computer in an autonomous vehicle configured to, via at least a first platform and a second platform, receive parameter data for processing simultaneously the parameter data in each platform wherein the first and second platforms are redundant configurations of each other wherein the parameter data includes a characteristic of a data; a check platform, coupled to the first and second platforms, for performing a method for checking the parameter data processed by both platforms using a collision test, the method includes: detecting, by applications of the collision test to one or more corresponding data found on each platform, collisions of the data within a tolerance prescribed by the collision test; and determining faults, in either the first platform, the second platform or both, based on results of comparisons of parameter data of the detected collisions.

Abstract: Systems and methods are provided for testing a first computer device of a vehicle. A method includes selecting an operational component of the first computer device and selecting a test operation that is configured to utilize an entire capacity of the operational component. The method further includes instructing the first computer device to perform the test operation and to generate a first result. The method further yet includes retrieving a second result of the test operation and comparing the first result of the test operation from the first computer device with the second result. The method further yet includes indicating that the first computer device is faulty based at least in part on a difference between the first result and the second result.

Abstract: Systems and methods are provided for effecting control through multi-stage voting. A control system may be in communication with an actuator device responsive to a voted command. A multi-stage voting system may be configured to determine the voted command. A set of controllers and a monitor controller may provide commands to the multi-stage voting system. The multi-stage voting system includes logic with a first stage that compares the commands of the set of controllers to each other, and a second stage that compares at least one of those commands to the monitor command. The multi-stage voting system delivers the voted command to the actuator device based on the comparisons made in the first and second stages. The actuator device effects an operation in response to the voted command.