Abstract: A system and method for controlling access to, and especially protecting against unauthorized attempts to provide input to, e.g., program, or elicit output from, a vehicular or other mobile device (14), such as an electronic control unit (ECU), wherein a determined location of the device (14) or an inputted user acknowledgment provides a basis or an additional basis for allowing or denying the attempt at access.

Abstract: A system and method for controlling access to, and especially protecting against unauthorized attempts to provide input to, e.g., program, or elicit output from, a vehicular or other mobile device, such as an electronic control unit (ECU), wherein a determined location of the device or an inputted user acknowledgment provides a basis or an additional basis for allowing or denying the attempt at access.

Abstract: A control system and method for use in vehicles, such as automotive vehicles. The control system and method is particularly adapted for use in vehicles having by-wire control systems. The control system uses three system controllers. Each of the controllers is adapted to receive redundant control inputs from at least one input device, such as a steering actuator, an accelerator actuator and a brake actuator. Each controller is adapted to receive a different unprocessed actuator sensor signal and a processed actuator sensor signal which are associated with the input device. Each controller may also be adapted to receive a sensor status signal which is also associated with the input device. In accordance with the method of the invention, these signals may be used to determine a sensor signal which may be used as the basis for control of control systems or components in response to the input device.

Abstract: A brake control system for brake by wire applications having a dual fail-silent pair controller architecture. The system utilizes two supervisory controllers and a shared monitoring controller to achieve the dual fail-silent pair configuration. The brake control system also features a mechanism whereby the monitoring controller ensures the fail-silent operation of the brake control units in the event of certain undesired events occurring within the system by assuming control of the affected brake control units. The control system further assures that no single event, including an event related to the monitoring controller, causes loss of more than half the braking functionality. The control system also features additional redundancy with regard to the brake command signals by sharing a separate unprocessed brake command signal with each of the supervisory controllers and the monitoring controller.