Abstract: A method includes determining vehicle driving parameters associated with a driving behavior of a vehicle while in an autonomous driving mode. A plurality of electronic control units (ECUs) is interconnected to a vehicle bus for communicating instructions from electromechanical contacts to actuators to control the driving behavior. The computing unit may receive a control signal from one of the ECUs. The computing unit lacks knowledge of whether the control signal a valid. The method further includes analyzing vehicle driving parameters associated with the driving behavior to determine whether the vehicle driving parameters satisfy a driving behavior criteria. Subsequent to determining that the vehicle driving parameters fails to satisfy the driving behavior criteria, the method includes generating a signal that causes the electromechanical contacts to disconnect from the vehicle bus and disable communication of instructions between the ECUs and the vehicle bus.

Abstract: A method includes determining vehicle driving parameters associated with a driving behavior of a vehicle while in an autonomous driving mode. A plurality of electronic control units (ECUs) is interconnected to a vehicle bus for communicating instructions from electromechanical contacts to actuators to control the driving behavior. The computing unit may receive a control signal from one of the ECUs. The computing unit lacks knowledge of whether the control signal a valid. The method further includes analyzing vehicle driving parameters associated with the driving behavior to determine whether the vehicle driving parameters satisfy a driving behavior criteria. Subsequent to determining that the vehicle driving parameters fails to satisfy the driving behavior criteria, the method includes generating a signal that causes the electromechanical contacts to disconnect from the vehicle bus and disable communication of instructions between the ECUs and the vehicle bus.

Abstract: In one embodiment, a method includes receiving data from one or more sensors associated with a vehicle; and receiving a message from a first processor. The message from the first processor includes a first control command for an actuator of the vehicle and a first certificate function. The method also includes receiving a message from the second processor. The message from the second processor includes a second control command for the actuator of the vehicle and a second certificate function. The method also includes computing a first certificate based on the first certificate function and the data; computing a second certificate based on the second certificate function and the data; determining a valid control signal based on an accuracy of the first second control command and second control command relative the first certificate and second certificate; and transmitting the valid control signal to the actuator of the vehicle.

Abstract: In one embodiment, a method includes receiving data from one or more sensors associated with a vehicle; and receiving a message from a first processor. The message from the first processor includes a first control command for an actuator of the vehicle and a first certificate function. The method also includes receiving a message from the second processor. The message from the second processor includes a second control command for the actuator of the vehicle and a second certificate function. The method also includes computing a first certificate based on the first certificate function and the data; computing a second certificate based on the second certificate function and the data; determining a valid control signal based on an accuracy of the first second control command and second control command relative the first certificate and second certificate; and transmitting the valid control signal to the actuator of the vehicle.

Abstract: In one embodiment, a method includes receiving data from one or more sensors associated with a vehicle; and receiving a message from a first processor. The message from the first processor includes a first control command for an actuator of the vehicle and a first certificate function. The method also includes receiving a message from the second processor. The message from the second processor includes a second control command for the actuator of the vehicle and a second certificate function. The method also includes computing a first certificate based on the first certificate function and the data; computing a second certificate based on the second certificate function and the data; determining a valid control signal based on an accuracy of the first second control command and second control command relative the first certificate and second certificate; and transmitting the valid control signal to the actuator of the vehicle.

Abstract: In one embodiment, a method includes receiving data from one or more sensors associated with a vehicle; and receiving a message from a first processor. The message from the first processor includes a first control command for an actuator of the vehicle and a first certificate function. The method also includes receiving a message from the second processor. The message from the second processor includes a second control command for the actuator of the vehicle and a second certificate function. The method also includes computing a first certificate based on the first certificate function and the data; computing a second certificate based on the second certificate function and the data; determining a valid control signal based on an accuracy of the first second control command and second control command relative the first certificate and second certificate; and transmitting the valid control signal to the actuator of the vehicle.