Abstract: A vehicle controller includes a plurality of detectors, a control unit, a data collecting unit, a serial communication line, and a transmission order setting unit. Data that changes at a speed that is lower than a given speed value is transmitted in a period in which a communication volume is lower than a given communication volume value. The transmission order is an order in which the pieces of detection data are serially transmitted from the data collecting unit to the control unit.

Abstract: Included are: a current detection element which detects a current flowing through a wire harness which supplies power to in-vehicle equipment mounted on a vehicle; a standard temperature generation unit which obtains a standard temperature by using a predetermined value or a detection value of a predetermined temperature sensor among a plurality of temperature sensors mounted on the vehicle; a temperature estimation unit which estimates a temperature of the wire harness by using a current detection value and a standard temperature value; a shutoff determination unit which makes a shutoff determination on the basis of the estimated temperature; and a shutoff element which shuts off the current flowing through the wire harness on the basis of the determination made by the shutoff determination unit. This enables vehicle control without a dedicated temperature sensor.

Abstract: Provided is a vehicle control device capable of executing control processing by utilizing a power saving execution determination unit that determines a shift to or a release from a normal mode to a power saving mode on the basis of a preset power saving condition, and a power saving execution unit that executes power saving control of the CPU by determining a shift to the power saving mode and stops the power saving control of the CPU by determining a release of the power saving mode. Then, the power saving execution determination unit has a plurality of power saving conditions, determines to shift to the power saving mode in a case where all of the plurality of power saving conditions are satisfied, and determines to release the power saving mode in the case of being changed to a state in which some of the power saving conditions are not satisfied.

Abstract: A vehicle control system includes a first electric motor that causes a vehicle to travel, a second electric motor that generates power by using an output of a power source and starts the power source, a power storage device that stores the power generated by the second electric motor and supplies the power to the first electric motor, a monitoring device that monitors a failure state of the vehicle, and a switch that switches the vehicle to travel from the first electric motor to the second electric motor. In a case of a predetermined driving state in which the monitoring device detects a failure of the first electric motor and a driving force is obtained from the second electric motor, the monitoring device controls the switch to switch the driving force for causing the vehicle to travel from the first electric motor to the second electric motor.

Abstract: A controller includes: a semiconductor switch that controls an operation of a control target to which electric power is supplied from a battery; a temperature detection element that detects an internal temperature of the semiconductor switch as an actual temperature; a temperature estimation unit that estimates the internal temperature as an estimated temperature based on current supplied to the semiconductor switch; a determination unit that outputs a determination result determining heat radiation failure of the semiconductor switch based on a temperature difference between the actual temperature and the estimated temperature; and a drive management unit that manages the operation of the semiconductor switch such that the actual temperature is less than an overtemperature threshold and continues the operation of the semiconductor switch when the determination result that the semiconductor switch has the heat radiation failure is obtained.

Abstract: A power conversion device includes a power conversion circuit in which upper and lower arm circuits in which switching elements are connected in series are connected in parallel for at least three phases, a plurality of fuses that are connected in series with the switching elements of the respective phases of the power conversion circuit and blown at a predetermined rated current or more, a short-circuit failure location determination unit that determines a short-circuit failure location of the switching element, and a fuse blowout-time current control unit that controls driving of another switching element different from the switching element so that a current flowing through the switching element determined to be the short-circuit failure location by the short-circuit failure location determination unit becomes equal to or more than the rated current of the fuse.

Abstract: A vehicle control system to control a vehicle according to a travel environment of the vehicle is provided. The vehicle control system includes a sensor that detects a travel environment of the vehicle. The sensor is configured to transmit detected travel environment information. The vehicle control system further includes a first control unit configured to output a first control signal based on the travel environment information detected by the sensor and received directly from the sensor. The vehicle control system further includes a second control unit configured to receive the first control signal to output a second control signal, and a third control unit configured to receive the first control signal and the second control signal to drive a control device based on either the first control signal or the second control signal.

Abstract: An electronic control system includes first through third measurement units that measure current, temperature and current or temperature, respectively. An electronic control device controls an operation of a power semiconductor element by using measurement results of the first through third measurement units. At least a part of the power semiconductor element incorporates the first and second measurement units, and the electronic control device estimates temperature from a measured value of the current. Whether the first measurement unit, the second measurement unit, and the third measurement unit are normal or abnormal on a basis of a measured value of the first measurement unit is determined, and an abnormality is determined of at least one of the power semiconductor element and a wire harness through which an output current of the power semiconductor element flows according to a measurement result of the measurement unit determined to be normal.

Abstract: The problem of ensuring safety and work efficiency for the actions of a control target is addressed in an environment in which different types of control systems coexist. A safety control server controls the actions of respective control targets in differing systems and includes an action adjustment unit that, for each control target of differing control systems, outputs to a control target an action adjustment instruction for adjusting the action of that control target when a contention occurs in which the action of that control target deviates from an assumed control result. An action plan adjustment unit, when the adjustment of the action satisfies a prescribed condition, adjusts an action plan indicating an action rule for achieving a function and avoiding a contention in a control target; and a safety rule adjustment unit adjusts a safety rule indicating an action rule for avoiding a contention in the control target.

Abstract: A vehicle control system includes a transmission unit, first and second sources, as well as first, second, and third control units. The first control unit controls the transmission unit. The first source inputs energy to the transmission unit. The second source inputs energy to the transmission unit. The second control unit controls the first source. The third control unit controls the second source. The first control unit has a function of continuing an operation when a failure occurs. The second control unit and the third control unit have a common cause failure measure. The function mixes energy from different sources and transmits energy to the driving wheel.

Abstract: A vehicle control device using a semiconductor fuse, and enabling an increase in size of the semiconductor fuse to be suppressed and the occurrence of an abnormal current to be detected early to enable shut off of the abnormal current. The vehicle control device includes a shut-off unit that supplies and shuts off a supply of power to a plurality of load devices; a current detector that detects a current flowing to the plurality of load devices; and a temperature detector that detects the temperature of the shut-off unit. Furthermore, the vehicle control device includes a drive controller that, when the temperature of the shut-off unit detected by the temperature detector exceeds a predetermined value, controls and restricts operation of the load devices for which the priority is low, based on priorities set for each of the plurality of load devices.

Abstract: Provided is a device that prevents a vehicle behavior from being unstable when an operation is continued using a degeneration function at a time of failure of a drive unit command value generation function in an autonomous driving system. A future actuator command value outputted by a main function unit for generating a drive unit command value and a simple actuator command value outputted by the degeneration function of generating a drive unit command value are synthesized using a weighting factor that changes with time.

Abstract: Provided is a vehicle control device capable of executing control processing by utilizing a power saving execution determination unit that determines a shift to or a release from a normal mode to a power saving mode on the basis of a preset power saving condition, and a power saving execution unit that executes power saving control of the CPU by determining a shift to the power saving mode and stops the power saving control of the CPU by determining a release of the power saving mode. Then, the power saving execution determination unit has a plurality of power saving conditions, determines to shift to the power saving mode in a case where all of the plurality of power saving conditions are satisfied, and determines to release the power saving mode in the case of being changed to a state in which some of the power saving conditions are not satisfied.

Abstract: A vehicle controller that in serial communication executed at a limited transmission rate, can efficiently transmit a large volume of sensor data and stably execute data processing and control is provided. The vehicle controller includes a plurality of detectors (6, 10, 13, 19, 20, 21) that detect a plurality of operation conditions of a power generator 1, a control unit 18 that controls the power generator, based on pieces of detection data outputted from the plurality of detectors, a data collecting unit 18 that collects the pieces of detection data together, a serial communication line 17 for serially transmitting the pieces of detection data from the data collecting unit 16 to the control unit 18, and a transmission order setting unit 26 that sets a transmission order of the pieces of detection data in advance, the transmission order being an order in which the pieces of detection data are serially transmitted from the data collecting unit 16 to the control unit 18.

Abstract: The present invention is capable of realizing normal control of a control device and safe operation of a control target. In the present invention, an automatic control unit 10 generates a control output that is output to a control target in response to an input 1. A safety verification control unit 20 is configured to verify safety of the control output at a plurality of verification levels, and controls the control output on the basis of the verification result. A verification level selection unit manages the state related to the normality of the automatic control unit 10, and selects the verification level of the safety of the control output in the safety verification control unit 20 in accordance with the state.

Abstract: An object of the present invention is to realize a control device having operation continuity at the time of failure with less redundancy and reduce cost. Provided is a vehicle control system including a transmission unit that transmits energy to a driving wheel, a first control unit that controls the transmission unit, a first source that inputs energy to the transmission unit, a second source that inputs energy to the transmission unit, a second control unit that controls the first source, and a third control unit that controls the second source, wherein when the first control unit fails, the second control unit or the third control unit controls the transmission unit.

Abstract: A vehicle control system includes a first electric motor that causes a vehicle to travel, a second electric motor that generates power by using an output of a power source and starts the power source, a power storage device that stores the power generated by the second electric motor and supplies the power to the first electric motor, a monitoring device that monitors a failure state of the vehicle, and a switch that switches the vehicle to travel from the first electric motor to the second electric motor. In a case of a predetermined driving state in which the monitoring device detects a failure of the first electric motor and a driving force is obtained from the second electric motor, the monitoring device controls the switch to switch the driving force for causing the vehicle to travel from the first electric motor to the second electric motor.

Abstract: A control system includes a manipulation interface unit that generates manipulation quantity information and priority information, a plurality of automatic control units that generates automatic control outputs based on predetermined inputs, safety verification units that confirm safety of the automatic control outputs, and an output control unit that outputs a control output according to any one of a predetermined automatic control output and the manipulation quantity information. Based on the priority information, the output control unit selects an automatic control output having the highest selection priority from the automatic control outputs of which the safety is confirmed to generate the control output, generates the control output according to the manipulation quantity information when the safety verification units confirm the safety, or generates the control output according to the manipulation quantity information regardless of the safety confirmation results.

Abstract: An object is to realize a control device having operation continuity when a failure occurs with less redundancy and reduce cost. In order to achieve the above object, the present invention devises the following means. (1) Different motive power (energy) sources provided in a hybrid drive system are regarded as redundant motive power (energy) sources. (2) A control unit (first control unit) of a transmission unit that mixes motive power (energy) from different motive power (energy) sources and transmits energy to a driving wheel is provided with a failure-time operation continuation function. (3) Control units (a second control unit and a third control unit) that respectively control the different motive power (energy) sources are configured to take a common cause failure measure such that both control functions are not lost due to the same failure.

Abstract: An object is to simplify a configuration of a control device having continuity of control in a case where an abnormality occurs and to reduce a manufacturing cost.