Abstract: The problem of ensuring safety and work efficiency for the actions of a control target is addressed in an environment in which different types of control systems coexist. A safety control server controls the actions of respective control targets in differing systems and includes an action adjustment unit that, for each control target of differing control systems, outputs to a control target an action adjustment instruction for adjusting the action of that control target when a contention occurs in which the action of that control target deviates from an assumed control result. An action plan adjustment unit, when the adjustment of the action satisfies a prescribed condition, adjusts an action plan indicating an action rule for achieving a function and avoiding a contention in a control target; and a safety rule adjustment unit adjusts a safety rule indicating an action rule for avoiding a contention in the control target.

Abstract: A vehicle control system includes a transmission unit, first and second sources, as well as first, second, and third control units. The first control unit controls the transmission unit. The first source inputs energy to the transmission unit. The second source inputs energy to the transmission unit. The second control unit controls the first source. The third control unit controls the second source. The first control unit has a function of continuing an operation when a failure occurs. The second control unit and the third control unit have a common cause failure measure. The function mixes energy from different sources and transmits energy to the driving wheel.

Abstract: A vehicle control device using a semiconductor fuse, and enabling an increase in size of the semiconductor fuse to be suppressed and the occurrence of an abnormal current to be detected early to enable shut off of the abnormal current. The vehicle control device includes a shut-off unit that supplies and shuts off a supply of power to a plurality of load devices; a current detector that detects a current flowing to the plurality of load devices; and a temperature detector that detects the temperature of the shut-off unit. Furthermore, the vehicle control device includes a drive controller that, when the temperature of the shut-off unit detected by the temperature detector exceeds a predetermined value, controls and restricts operation of the load devices for which the priority is low, based on priorities set for each of the plurality of load devices.

Abstract: Provided is a device that prevents a vehicle behavior from being unstable when an operation is continued using a degeneration function at a time of failure of a drive unit command value generation function in an autonomous driving system. A future actuator command value outputted by a main function unit for generating a drive unit command value and a simple actuator command value outputted by the degeneration function of generating a drive unit command value are synthesized using a weighting factor that changes with time.

Abstract: Provided is a vehicle control device capable of executing control processing by utilizing a power saving execution determination unit that determines a shift to or a release from a normal mode to a power saving mode on the basis of a preset power saving condition, and a power saving execution unit that executes power saving control of the CPU by determining a shift to the power saving mode and stops the power saving control of the CPU by determining a release of the power saving mode. Then, the power saving execution determination unit has a plurality of power saving conditions, determines to shift to the power saving mode in a case where all of the plurality of power saving conditions are satisfied, and determines to release the power saving mode in the case of being changed to a state in which some of the power saving conditions are not satisfied.

Abstract: A vehicle controller that in serial communication executed at a limited transmission rate, can efficiently transmit a large volume of sensor data and stably execute data processing and control is provided. The vehicle controller includes a plurality of detectors (6, 10, 13, 19, 20, 21) that detect a plurality of operation conditions of a power generator 1, a control unit 18 that controls the power generator, based on pieces of detection data outputted from the plurality of detectors, a data collecting unit 18 that collects the pieces of detection data together, a serial communication line 17 for serially transmitting the pieces of detection data from the data collecting unit 16 to the control unit 18, and a transmission order setting unit 26 that sets a transmission order of the pieces of detection data in advance, the transmission order being an order in which the pieces of detection data are serially transmitted from the data collecting unit 16 to the control unit 18.

Abstract: The present invention is capable of realizing normal control of a control device and safe operation of a control target. In the present invention, an automatic control unit 10 generates a control output that is output to a control target in response to an input 1. A safety verification control unit 20 is configured to verify safety of the control output at a plurality of verification levels, and controls the control output on the basis of the verification result. A verification level selection unit manages the state related to the normality of the automatic control unit 10, and selects the verification level of the safety of the control output in the safety verification control unit 20 in accordance with the state.

Abstract: An object of the present invention is to realize a control device having operation continuity at the time of failure with less redundancy and reduce cost. Provided is a vehicle control system including a transmission unit that transmits energy to a driving wheel, a first control unit that controls the transmission unit, a first source that inputs energy to the transmission unit, a second source that inputs energy to the transmission unit, a second control unit that controls the first source, and a third control unit that controls the second source, wherein when the first control unit fails, the second control unit or the third control unit controls the transmission unit.

Abstract: A vehicle control system includes a first electric motor that causes a vehicle to travel, a second electric motor that generates power by using an output of a power source and starts the power source, a power storage device that stores the power generated by the second electric motor and supplies the power to the first electric motor, a monitoring device that monitors a failure state of the vehicle, and a switch that switches the vehicle to travel from the first electric motor to the second electric motor. In a case of a predetermined driving state in which the monitoring device detects a failure of the first electric motor and a driving force is obtained from the second electric motor, the monitoring device controls the switch to switch the driving force for causing the vehicle to travel from the first electric motor to the second electric motor.

Abstract: A control system includes a manipulation interface unit that generates manipulation quantity information and priority information, a plurality of automatic control units that generates automatic control outputs based on predetermined inputs, safety verification units that confirm safety of the automatic control outputs, and an output control unit that outputs a control output according to any one of a predetermined automatic control output and the manipulation quantity information. Based on the priority information, the output control unit selects an automatic control output having the highest selection priority from the automatic control outputs of which the safety is confirmed to generate the control output, generates the control output according to the manipulation quantity information when the safety verification units confirm the safety, or generates the control output according to the manipulation quantity information regardless of the safety confirmation results.

Abstract: An object is to simplify a configuration of a control device having continuity of control in a case where an abnormality occurs and to reduce a manufacturing cost.

Abstract: An object is to realize a control device having operation continuity when a failure occurs with less redundancy and reduce cost. In order to achieve the above object, the present invention devises the following means. (1) Different motive power (energy) sources provided in a hybrid drive system are regarded as redundant motive power (energy) sources. (2) A control unit (first control unit) of a transmission unit that mixes motive power (energy) from different motive power (energy) sources and transmits energy to a driving wheel is provided with a failure-time operation continuation function. (3) Control units (a second control unit and a third control unit) that respectively control the different motive power (energy) sources are configured to take a common cause failure measure such that both control functions are not lost due to the same failure.

Abstract: Provided is a device that prevents a vehicle behavior from being unstable when an operation is continued using a degeneration function at a time of failure of a drive unit command value generation function in an autonomous driving system. A future actuator command value outputted by a main function unit for generating a drive unit command value and a simple actuator command value outputted by the degeneration function of generating a drive unit command value are synthesized using a weighting factor that changes with time.

Abstract: There is no consideration on performing charging control on a battery necessary for limp-home travel according to a travel environment of a vehicle. It is assumed that the vehicle changes a travel lane to a second travel lane by overtaking or the like between time t1 and t0. The second power generation threshold generation unit 33 refers to the lookup table 50 illustrated in FIG. 5 and reads 70 as the second charging threshold SOCth2. Then, the second charging threshold SOCth2 is larger than the first charging threshold SOCth1 as illustrated in FIG. 6(C), and thus, the threshold selection unit 34 outputs the second charging threshold SOCth2 as the selected charging threshold SOCth. At this time, the SOC of the battery is lower than the charging threshold SOCth, and thus, the power generation command value GEN is turned on at time t1, and the power generation engine is started to charge the battery.

Abstract: The present invention is capable of realizing normal control of a control device and safe operation of a control target. In the present invention, an automatic control unit 10 generates a control output that is output to a control target in response to an input 1. A safety verification control unit 20 is configured to verify safety of the control output at a plurality of verification levels, and controls the control output on the basis of the verification result. A verification level selection unit manages the state related to the normality of the automatic control unit 10, and selects the verification level of the safety of the control output in the safety verification control unit 20 in accordance with the state.

Abstract: A control system includes: an operation interface generates operation amount information and priority information on the basis of an operation amount; an automatic control unit generates an automatic control output based on a predetermined input; a safety verification unit verifies the safety of the automatic control output; and an output control unit produces a control output in accordance with the automatic control output or the operation amount information on the basis of the automatic control output, the operation amount information, the priority information, and the safety verification result from the safety verification unit. The control output is generated in accordance with the automatic control output, in accordance with the operation amount information only when the control output is verified as safe by the safety verification unit, or in accordance with the operation amount information regardless of whether the control output is verified as safe by the safety verification unit.

Abstract: A control system includes a manipulation interface unit that generates manipulation quantity information and priority information, a plurality of automatic control units that generates automatic control outputs based on predetermined inputs, safety verification units that confirm safety of the automatic control outputs, and an output control unit that outputs a control output according to any one of a predetermined automatic control output and the manipulation quantity information. Based on the priority information, the output control unit selects an automatic control output having the highest selection priority from the automatic control outputs of which the safety is confirmed to generate the control output, generates the control output according to the manipulation quantity information when the safety verification units confirm the safety, or generates the control output according to the manipulation quantity information regardless of the safety confirmation results.

Abstract: A control system includes: an operation interface generates operation amount information and priority information on the basis of an operation amount; an automatic control unit generates an automatic control output based on a predetermined input; a safety verification unit verifies the safety of the automatic control output; and an output control unit produces a control output in accordance with the automatic control output or the operation amount information on the basis of the automatic control output, the operation amount information, the priority information, and the safety verification result from the safety verification unit. The control output is generated in accordance with the automatic control output, in accordance with the operation amount information only when the control output is verified as safe by the safety verification unit, or in accordance with the operation amount information regardless of whether the control output is verified as safe by the safety verification unit.

Abstract: An image processing apparatus includes an image processing unit that calculates two types of image data from one image data and outputs the calculated image data, a data combination unit that combines the two type of data supplied from the image processing unit and outputs the combined data to one terminal, an output buffer that adjusts an output timing of the combined data according to an instruction supplied from bus arbitration means for arbitrating a bus, and a data distribution unit that outputs the combined data output from the output buffer to the bus in a form of the combined data, or distributes the combined data and outputs the distributed data to the bus according to an external combination distribution instruction.

Abstract: The purpose of the present invention is not only to reduce ripple current but also to improve operation efficiency by reducing heat generation. When n is defined as an integer of 2 or more, a motor control device of the present invention drives n sets of windings by n sets of inverters. The motor control device is characterized in that when said n sets of inverters output high power, at least one or more of said n sets of inverters are set to have an output duty cycle of 100%.