Abstract: A cross-domain solution architecture includes a higher-security domain and a lower-security domain. The higher-security domain (i) processes data on a higher-security level, and (ii) includes a hardware-based trusted executed environment (TEE) running a formally verified microkernel. The lower-security domain (i) processes data on a lower-security level having lower security than the higher-security level, and (ii) includes a trusted computer base (TCB). The TCB operates in the higher-security domain and the lower-security domain to pass data from the lower-security domain to the higher-security domain through a first data diode, and to pass data from the higher-security domain to the lower-security domain through a second data diode.

Abstract: Systems and methods for siren detection in a vehicle are provided. A method includes recording an audio segment, using a first audio recording device coupled to an autonomous vehicle, separating, using a computing device coupled to the autonomous vehicle, the audio segment into one or more audio clips, generating a spectrogram of the one or more audio clips, and inputting each spectrogram into a Convolutional Neural Network (CNN) run on the computing device. The CNN may be pretrained to detect one or more sirens present in spectrographic data. The method further includes determining, using the CNN, whether a siren is present in the audio segment, and if the siren is determined to be present in the audio segment, determining a course of action of the autonomous vehicle.

Abstract: A redundant-controls system suitable for use an automated vehicle includes a primary-control-device, a secondary-control-device, an occupant-detection-device, and a controller. The primary-control-device is installed in a vehicle. The primary-control-device is selectively enabled to allow operation from an operator-seat of the vehicle by an operator of the vehicle to control movement of the vehicle. The secondary-control-device is installed in the vehicle. The secondary-control-device is selectively enabled to allow operation from a passenger-seat of the vehicle by a passenger of the vehicle to control movement of the vehicle. The occupant-detection-device is used to determine an operator-state-of-awareness of the operator and a passenger-state-of-awareness of the passenger. The controller is in communication with the primary-control-device, the secondary-control-device, and the operator-detection-device.

Abstract: A redundant-controls system suitable for use an automated vehicle includes a primary-control-device, a secondary-control-device, an occupant-detection-device, and a controller. The primary-control-device is installed in a vehicle. The primary-control-device is selectively enabled to allow operation from an operator-seat of the vehicle by an operator of the vehicle to control movement of the vehicle. The secondary-control-device is installed in the vehicle. The secondary-control-device is selectively enabled to allow operation from a passenger-seat of the vehicle by a passenger of the vehicle to control movement of the vehicle. The occupant-detection-device is used to determine an operator-state-of-awareness of the operator and a passenger-state-of-awareness of the passenger. The controller is in communication with the primary-control-device, the secondary-control-device, and the operator-detection-device.

Abstract: A skill-scoring system suitable for use on an automated vehicle includes an accelerometer and a controller. The accelerometer is used to determine an acceleration-value experienced by an operator of a host-vehicle while the operator operates the host-vehicle in a manual-mode along a travel-path. The controller is in communication with the accelerometer. The controller is configured to determine a skill-score based on a comparison of the acceleration-value to an expected-acceleration that the operator would experience when the host-vehicle is operated in an automated-mode along the travel-path.

Abstract: A skill-scoring system suitable for use on an automated vehicle includes an accelerometer and a controller. The accelerometer is used to determine an acceleration-value experienced by an operator of a host-vehicle while the operator operates the host-vehicle in a manual-mode along a travel-path. The controller is in communication with the accelerometer. The controller is configured to determine a skill-score based on a comparison of the acceleration-value to an expected-acceleration that the operator would experience when the host-vehicle is operated in an automated-mode along the travel-path.

Abstract: A system to determine a vehicle-location of an automated vehicle includes a light-source, a sensor, and a controller. The light-source is located at a light-location that is observable from a roadway. The light emitted by the light-source is modulated to broadcast the light-location of the light-source. The sensor is mounted on a vehicle. The sensor is operable to detect the light in order to receive the light-location and determine a direction of the light relative to the vehicle and/or the roadway. The controller is configured to determine a vehicle-location of the vehicle based on the direction and the light-location.