Abstract: A control system comprises: moving body detecting units transmitting information about moving bodies; and a control system receives the moving body information and transmits it to a control processing unit. The control system comprises: a surplus time calculation unit that calculates a first surplus time on the basis of the response time and an estimated time required for communication control of the moving body; a processing management unit that determines an execution sequence for the control information; an application unit that calculates control information on the basis of the information about moving bodies and the execution sequence determined by the processing management unit; and a transmission control unit that calculates a second surplus time on the basis of the response time of the moving body and the actual time required for communication control, and transmits control information to the control processing unit according to the second surplus time.

Abstract: The computing efficiency of an electronic computing device is improved. HPCs 20 to 23 include arithmetic processing units HA0 to HA3, respectively. Each of the arithmetic processing units HA0 to HA3 executes arithmetic processing in parallel. LPCs 30 to 33 includes management processing units LB0 to LB3, respectively. Each of the management processing units LB0 to LB3 manages execution of specific processing by an accelerator 6 when each of the arithmetic processing units HA0 to HA3 causes the accelerator 6 to execute the specific processing, and performs a series of commands for causing the accelerator 6 to execute the specific processing on a DMA controller 5 and the accelerator 6.

Abstract: To achieve both guarantee of safety related to vehicle control and improvement of availability in an in-vehicle device that cannot independently perform automatic driving and needs assistance of vehicle control. To achieve the above object, a control system includes an in-vehicle device and a coordination device that are synchronized in time point. The control system includes a travelable time calculation unit that calculates a travelable time for guaranteeing that a vehicle does not collide with an obstacle on a travel trajectory in a target region through which the vehicle equipped with the in-vehicle device passes, a travelability determination unit that determines validity of the travelable time, and a trajectory following unit that permits the in-vehicle device to follow the travel trajectory when it is determined that the travelable time is valid.

Abstract: The present disclosure improves usability and stability of a control system while suppressing resource consumption. A control controller according to the present disclosure divides, using partitioning, function groups for which control is ongoing and function groups to be updated, and updates, in accordance with conditions, only the function groups to be updated, thereby updating the required control functions while continuing appropriate control processes.

Abstract: An object of the present invention is to provide a technology that enables second control software to continue processing using a peripheral circuit even in a situation where an abnormality related to first control software occurs. An electronic control device includes a memory (3) that stores the first control software and the second control software, a CPU (1) that executes the first control software and the second control software, and a peripheral circuit (200) used by the first control software and the second control software. The memory further includes a first buffer (313a) and a second buffer (323a). The CPU interrupts at least one of the processing of storing first peripheral transmission information in the first buffer and the processing of transmitting the first peripheral transmission information to the peripheral in a specific situation in which the abnormality related to the first control software occurs.

Abstract: Provided is a vehicle control device capable of improving safety and availability by determining, in response to a failure of a core, a core to which the software is to be moved, determining whether there is a contention in the timings of execution based on software operations after the software is moved to another core, and making an arbitration when there is a contention. The vehicle control device has a CPU 11 that executes a plurality of tasks in clock-synchronization, the vehicle control device including a failure detecting unit 121 that detects a failure of a core 10 on the CPU 11, and an execution timing arbitration unit 124 that allocates a task having been executed by a failed core 10 to a non-failed core 10.

Abstract: Provided is a vehicle control device capable of executing control processing by utilizing a power saving execution determination unit that determines a shift to or a release from a normal mode to a power saving mode on the basis of a preset power saving condition, and a power saving execution unit that executes power saving control of the CPU by determining a shift to the power saving mode and stops the power saving control of the CPU by determining a release of the power saving mode. Then, the power saving execution determination unit has a plurality of power saving conditions, determines to shift to the power saving mode in a case where all of the plurality of power saving conditions are satisfied, and determines to release the power saving mode in the case of being changed to a state in which some of the power saving conditions are not satisfied.

Abstract: An autonomous travel control system having a vehicle control system that is mounted in a vehicle and that controls automatic driving of the vehicle, and a safety monitoring system for monitoring a field F, are connected so as to enable communication. The safety monitoring system is provided with: a monitoring processing unit for recognizing an object and creating outside world recognition information; a reception unit for receiving automatic driving control information transmitted from the vehicle control system; a verification unit for verifying, on the basis of the outside world recognition information, the safety of the automatic driving control information received by the reception unit; and a transmission unit for transmitting the result of the verification by the verification unit to the vehicle control system. The vehicle control system controls automatic driving of the vehicle on the basis of the verification result transmitted by the safety monitoring system.

Abstract: Provided is a traffic control system capable of ensuring safety even when an autonomous mobile body, a manned mobile body, or a pedestrian has committed a safety rule violation. This traffic control system comprises a mobile body, an infrastructure sensor that monitors the mobile body and a pedestrian within a field, and a safety monitoring device that communicates wirelessly with the mobile body.

Abstract: A vehicle control device includes a verification management unit that executes old control software unit 112 representing an old version of control software and new control software unit 113 representing a new version of control software in sequence or in parallel, and an output verification unit that when an output value from old control software unit 112 and an output value from new control software unit 113 do not match, outputs information indicating the output values' not matching.

Abstract: To appropriately execute a task by an electronic control device including a processor having a plurality of cores. An ECU 100 includes a multi-core CPU having a plurality of cores that execute a first task that has an execution time that varies depending on a processing amount every predetermined cycle and a second task that is higher in priority than the first task and is prohibited from being interrupted. The second task is set to be inexecutable simultaneously between the plurality of cores. A task allocation unit 11 generates a first plan. A diagnosis task planning unit 12 generates a second plan. Task processing units 10a and 10b execute the first task based on the first plan. A diagnosis task correction unit 13 times a delay time of the first task executed by the task processing units 10a and 10b, and postpones the second task of the second plan to the subsequent executable timing in accordance with the timed delay time.

Abstract: In the present invention, when an abnormality occurs in a task, regardless of whether a critical section is being executed, timeout detection is realized by determining whether the critical section (CS) is necessary for the design in a preset task execution time and a certain period of time to distinguish between necessary interrupt disable and abnormal interrupt disable. A vehicle control device includes task execution means for causing a system to execute a task, and interrupt processing means for performing an interrupt process at the time of execution of the task. A maskable interrupt and a non-maskable interrupt that is commanded to execute after the maskable interrupt are included, the maskable interrupt is commanded to execute during an interrupt disable time, and then the non-maskable interrupt is executed.

Abstract: The computing efficiency of an electronic computing device is improved. HPCs 20 to 23 include arithmetic processing units HA0 to HA3, respectively. Each of the arithmetic processing units HA0 to HA3 executes arithmetic processing in parallel. LPCs 30 to 33 includes management processing units LB0 to LB3, respectively. Each of the management processing units LB0 to LB3 manages execution of specific processing by an accelerator 6 when each of the arithmetic processing units HA0 to HA3 causes the accelerator 6 to execute the specific processing, and performs a series of commands for causing the accelerator 6 to execute the specific processing on a DMA controller 5 and the accelerator 6.

Abstract: This invention detects deviations from design without hindering the real-time nature of interrupt processing, and assists in analyzing the impact of faults caused by unintentional interrupt processing, with the goal of curbing erroneous detection. In order to resolve this problem, this vehicle control device comprises; a deviation determination unit 129 which determines if execution timing of an execution body has deviated from design settings, and transitions to a monitoring state; and a run-time verification unit 130 which verifies the impact of deviation at timing which differs from that of the interrupt processing.

Abstract: Fail operational that can guarantee stability of control while suppressing cost increase is difficult. A control controller according to the present invention stores information necessary for recovery in a normal travel mode in time series in a backup, and thus control software can be recovered from the backup in real time if a failure occurs in the system.

Abstract: A data communication acquires a map image, determines high- and low-risk areas in the map, determines whether to transmit data related to the high- or low-risk areas, detects objects around the system, determines a position in the map image for each of the objects detected, determines whether the objects belongs to the high- or low-risk areas, determines a data compression ratio for each of the objects detected, compresses data related to each of the objects, compresses data related to each of the objects belonging to the high-risk area when data related to the high-risk area is determined to be transmitted, compresses data related to each of the objects belonging to the low-risk area when data related to the low-risk area is determined to be transmitted, receives reply data replied in association with the compression data transmitted, and makes a decision in accordance with the reply data.

Abstract: The present disclosure improves usability and stability of a control system while suppressing resource consumption. A control controller according to the present disclosure divides, using partitioning, function groups for which control is ongoing and function groups to be updated, and updates, in accordance with conditions, only the function groups to be updated, thereby updating the required control functions while continuing appropriate control processes.

Abstract: The present invention provides technology for achieving both high responsiveness to an interrupt process and non-interference between control software. This vehicle control device comprises a storage device that stores various programs for controlling a vehicle, and a plurality of computation devices that include a first computation device and a second computation device, and that read a program from the storage device and execute the same. In addition, the storage device includes a first type of computation processing program executed not by time division and a second type of computation processing program executed by time division. The first computation device is configured to execute the first type of computation processing program, and the second computation device is configured to execute the second type of computation processing program.

Abstract: The present invention provides a vehicle control device capable of realizing access authority definitions by the number equal to or greater than the number of access control registers provided in a memory protection device. In the vehicle control device according to the present invention, the whole or a part of a storage device that stores the access authority definitions used by the memory protection device to control the access authorities, is allocated fixedly to a memory area in advance and the rest is allocated dynamically.

Abstract: The purpose of the present invention is to provide a system such that functions of a vehicle control system can be quickly reconfigured. The present invention is a processing device connected to at least one processing device, wherein during a period in which the one processing device executes a control operation on the basis of a control program installed in the one processing device, the processing device acquires a substitute program for the control program. In another aspect, the present invention is an on-board control system equipped with multiple processing devices, wherein during a period in which one processing device among the multiple processing devices executes a control operation on the basis of a control program installed in the one processing device, another processing device acquires a substitute program for the program in the one processing device.