Abstract: The purpose of the present invention is to provide a vehicle control technique that enables the safety of function substitution to be increased. This vehicle control device determines whether a substitution was successful by monitoring the operations which follow initiation of the substitution.

Abstract: A software update device is connected to a control device and includes an update control unit executing an update process of causing software for the control device to transit from a non-updated state to a completely updated state, a recovery control information managing unit acquiring recovery control information, and a recovery control unit executing a recovery process of causing the software to transit to the completely updated state on a basis of the recovery control information in a case where an abnormality in the update process has prevented the software from transiting to the completely updated state.

Abstract: The present invention makes it possible to reduce the volume of communication data necessary for updating the configuration of a circuit unit of a reconfigurable circuit device. In an vehicle control system 10 including an FPGA 3, the FPGA 3 includes a circuit unit including a reconfigurable circuit and a circuit SRAM that stores configuration information of the circuit unit. A transfer check unit that acquires a difference command regarding a change part of a circuit element in the circuit unit, and a data conversion unit 4 that updates the configuration information based on the difference command are provided. Further, in the vehicle control system 10, a non-volatile memory 6 that stores the configuration information to be stored in the circuit SRAM is further provided. The data conversion unit 4 may update the configuration information stored in the non-volatile memory 6 based on the difference command acquired by the transfer check unit.

Abstract: An in-vehicle processing device includes: a signal input unit that generates input data based on an input signal from outside; a processing unit that executes arithmetic processing for calculating output data based on the input data; a signal output unit that generates an output signal based on the output data to output the output signal to the outside; and a storage unit that stores application software for causing the processing unit to execute the arithmetic processing. The application software includes: a data management layer for managing object data which is a collection of data corresponding to a given target element on the storage unit; a data adaptation layer for generating the object data based on the input data to output the generated object data to the data management layer; and a data operation layer for acquiring the object data from the data management layer to calculate the output data based on the acquired object data.

Abstract: A regulator circuit includes an output controlling transistor and a controller circuit. The output controlling transistor is connected between a voltage input terminal and an output terminal. The controller circuit includes an error amplifier circuit which controls the output controlling transistor according to an output feedback voltage. The error amplifier circuit includes a differential input stage, an output stage and a current increasing/decreasing circuit. The differential input stage includes input transistors and a current source. The output stage includes a current source and a transistor connected in series with the current source and amplifies a potential at one output node of the differential input stage. The current increasing/decreasing circuit includes an element having a temperature characteristic, and increases or decreases a current of the differential input stage or the current of the output stage according to the temperature characteristic.

Abstract: A negative power supply control circuit which controls a negative voltage regulator circuit based on a positive voltage control signal, the negative power supply control circuit including: a control signal input terminal a negative voltage input terminal; a negative voltage input control signal output terminal; a voltage current conversation circuit; a first current source; and a first clamp circuit, wherein the first clamp circuit clamps a voltage at a first intermediate point between the first clamp circuit and the first current source by limiting a current flowing in the first clamp circuit according to the voltage at the first intermediate point in a period when a current flows in the voltage current conversation circuit, and the negative voltage controls signal is generated based on a voltage or a current in a current path through the voltage current conversation circuit, the first clamp circuit and the first current source.

Abstract: The present invention provides a technology for comprehensive verification of the safety of the design of functions, on the basis of a safety analysis result. The disclosed vehicle control system verification device is equipped with a storage device that stores programs for verifying the safety of the logical architecture of a vehicle control system, and a processor that reads the programs from the storage device and verifies the safety of the logical architecture. On the basis of safety analysis result information that is supplied, the processor executes a process for verifying whether the logical architecture has logical functions corresponding to the safety analysis result.

Abstract: A negative power supply control circuit which controls a negative voltage regulator circuit based on a positive voltage control signal, the negative power supply control circuit including: a control signal input terminal; a negative voltage input terminal; a negative voltage control signal output terminal; a voltage current conversion circuit; a first current source; and a first clamp circuit, wherein the first clamp circuit clamps a voltage at a first intermediate point between the first clamp circuit and the first current source by limiting a current flowing in the first clamp circuit according to the voltage at the first intermediate point in a period when a current flows in the voltage current conversion circuit, and the negative voltage control signal is generated based on a voltage or a current in a current path through the voltage current conversion circuit, the first clamp circuit and the first current source.

Abstract: The autonomous driving ECU includes a first communication unit that transmits and receives autonomous driving data to and from the plurality of data ECUs, and a vehicle control unit that controls a vehicle on the basis of the autonomous driving data transmitted from the plurality of data ECUs. Each data ECU includes a data construction unit that performs a construction of the autonomous driving data transmitted to the autonomous driving ECU, and a second communication unit that transmits and receives the autonomous driving data to and from the autonomous driving ECU. If a predetermined event occurs, among the data ECUs, the data construction unit of the data ECU in which the predetermined event occurs constructs the autonomous driving data so that a total amount of the autonomous driving data transmitted from the data ECU in which the predetermined event occurs is not greater than a predetermined amount of data.

Abstract: The purpose of the present invention is to provide a system such that functions of a vehicle control system can be quickly reconfigured. The present invention is a processing device connected to at least one processing device, wherein during a period in which the one processing device executes a control operation on the basis of a control program installed in the one processing device, the processing device acquires a substitute program for the control program. In another aspect, the present invention is an on-board control system equipped with multiple processing devices, wherein during a period in which one processing device among the multiple processing devices executes a control operation on the basis of a control program installed in the one processing device, another processing device acquires a substitute program for the program in the one processing device.

Abstract: The purpose of the present invention is to provide a vehicle control technique that enables the safety of function substitution to be increased. This vehicle control device determines whether a substitution was successful by monitoring the operations which follow initiation of the substitution.

Abstract: The purpose of the present invention is to provide a system in which the reliability of an automatic driving system can be excellently complemented by a different control system while the automatic driving system is effectively used. The vehicle control device outputs to a drive device one of a first control signal generated on the basis of automatic driving control information, and a second control signal generated on the basis of the relative information between a vehicle and a surrounding object. If an abnormality is detected in the automatic driving control information, the second control signal is output to the drive device in place of the first control signal.

Abstract: In order to address the problem of providing a high-safety vehicle control system and action plan system, the present invention provides a vehicle control system comprising a trajectory generation determination unit (603) having an emergency trajectory generating unit (6032) for calculating an emergency trajectory while driving is being switched from a system to a driver at the time of a fault, and a motion control unit (604) having a trajectory retaining unit (6042) for retaining the emergency trajectory and a trajectory switching unit (6041) for switching whether to travel in the emergency trajectory retained by the trajectory retaining unit on the basis of a fault state detected by a malfunction detection unit.

Abstract: A power circuit includes an input terminal to which an input voltage is applied; a control element which generates an output voltage obtained by regulating the input voltage; an output terminal from which the output voltage is output; a discharge circuit which discharges by extracting an electric charge from the control element on a side of the output terminal; a drive circuit which generates a drive current for causing the discharge circuit to operate using power of the control element on the side of the input terminal; a detection circuit which detects the output voltage; and a discharge control circuit which decreases a current value of the drive current to a current value enabling the discharge circuit to continuously operate in a case where the detection circuit detects that the output voltage reaches a setup voltage by an operation of the discharge circuit.

Abstract: A vehicle control system which can ensure high reliability, real-time processing, and expandability with a simplified ECU configuration and a low cost by backing up an error through coordination in the entire system without increasing a degree of redundancy of individual controllers beyond the least necessary level. The vehicle control system comprises a sensor controller for taking in sensor signals indicating a status variable of a vehicle and an operation amount applied from a driver, a command controller for generating a control target value based on the sensor signals taken in by the sensor controller, and an actuator controller for receiving the control target value from the command controller and operating an actuator to control the vehicle, those three controller being interconnected via a network.

Abstract: A construction machine includes: a swing structure; an electric motor that drives the swing structure; an operating device that outputs an operating signal according to an operating amount and an operating direction; an inverter device that controls the electric motor based on a control signal generated based on the operating signal; a position sensor that detects an actual speed of the electric motor; and a second controller that determines whether at least one of a first condition and a second condition is satisfied. The first condition is satisfied when a sign of a value computed by subtracting the actual speed from a target speed of the electric motor that defined by the control signal; and the second condition is satisfied when a difference between the target speed and the actual speed is greater than a first reference value, and when the acceleration is greater than a second reference value.

Abstract: A method for testing control software of a controlled system is disclosed. The method may involve providing control software code data for each of the one or more electronic control units. The method may further involve providing simulation code data for the controlled system. The method may further involve providing verification requirement information data that indicates one or more verification requirement conditions corresponding to a respective control error situation. The method may further involve creating a system model based on the provided simulation code data and the provided control software code data provided for each of the one or more electronic control units. The method may further involve creating an executable program based on the created system model and performing a software verification process on the basis of the executable program.

Abstract: A power circuit includes an input terminal to which an input voltage is applied; a control element which generates an output voltage obtained by regulating the input voltage; an output terminal from which the output voltage is output; a discharge circuit which discharges by extracting an electric charge from the control element on a side of the output terminal; a drive circuit which generates a drive current for causing the discharge circuit to operate using power of the control element on the side of the input terminal; a detection circuit which detects the output voltage; and a discharge control circuit which decreases a current value of the drive current to a current value enabling the discharge circuit to continuously operate in a case where the detection circuit detects that the output voltage reaches a setup voltage by an operation of the discharge circuit.

Abstract: A construction machine includes: a swing structure; an electric motor that drives the swing structure; an operating device that outputs an operating signal according to an operating amount and an operating direction; an inverter device that controls the electric motor based on a control signal generated based on the operating signal; a position sensor that detects an actual speed of the electric motor; and a second controller that determines whether at least one of a first condition and a second condition is satisfied. The first condition is satisfied when a sign of a value computed by subtracting the actual speed from a target speed of the electric motor that defined by the control signal; and the second condition is satisfied when a difference between the target speed and the actual speed is greater than a first reference value, and when the acceleration is greater than a second reference value.

Abstract: The present invention relates to a method and a system for testing control software of a controlled system, the controlled system comprising one or more electronic control units, one or more actuators, and one or more sensors, each sensor being adapted to input a respective sensor signal to at least one of the one or more electronic control units and each actuator being adapted to act responsive to respective control signals input from at least one of the electronic control units, and each electronic control unit being configured to execute a respective executable control program based on control software code data to output one or more control signals to the one or more actuators on the basis of input sensor signals.