Abstract: An apparatus for ensuring a fail-safe function of an autonomous traveling system may include: a dead reckoning (DR) information input unit configured to receive plural pieces of sensing information outputted from a plurality of sensors mounted in a vehicle as DR information; an identification value calculation unit configured to calculate an identification value for determining whether the respective pieces of sensing information inputted through the DR information input unit are fails; a fail determination unit configured to determine whether the plural pieces of sensing information inputted through the DR information input unit are fails, using the identification value calculated through the identification value calculation unit; and a determination result output unit configured to combine fail determination results for the plural pieces of sensing information, obtained through the fail determination unit, and output the combined result as a final determination result.

Abstract: Embodiments relate to systems and methods for vehicle monitoring with processing interruption tolerance. One or more vehicle sensors can transmit one or more data streams to a primary data processing system via a data channel. A secondary data buffer can be coupled to the data channel to continuously capture the set of data streams and/or subsets thereof. During normal operation, the set of data streams are processed by the primary data processing system. After a limited-duration fault occurs in the primary data processing system, it can recover by accessing the backup data in the secondary data buffer. The lost data can be retrieved from the secondary data buffer using timestamp information to process the data in its original time context and to ensure that no already-processed data is included. The set of data streams can be downsampled or decimated in the secondary data buffer to extend storage capacity.

Abstract: In one aspect, a digital engine control system for an aircraft engine is provided. The control system includes a selection unit, the selection unit including a monitoring module configured to determine a measurement of the speed of rotation of the engine from the output signal from one or more protection sensors and to compare the or each speed measurement determined by the selection unit with speed measurements supplied by electronic control units to determine an operating state of each electronic control unit.

Abstract: A hybrid vehicle electronic control unit (HV-ECU) includes a communication unit and a retransmission control unit. The communication unit performs a retransmitting process of data when a transmission error of the data is detected. The retransmission control unit inhibits the retransmitting process in a corresponding communication period and releases the retransmitting process when the corresponding communication period ends and the next communication period starts if the number of times that a transmission error is detected in a predetermined communication period is larger than a transmission stop determination threshold value.

Abstract: A system and method for detecting and isolating faults in pressure ports (2) and pressure transducers (3) of a pressure sensing system are disclosed. The system comprises a set of pressure ports (2) flushed to a nose cap (1) of a space vehicle in crucifix form. Three pressure transducers (3) are connected to each pressure port (2) through pneumatic tubes (4) for measuring surface pressure from the pressure ports (2). Separate power supplying units (7, 8, 9) are connected to the three pressure transducers (3) for powering the pressure transducers (3) at each pressure port (2). A processing unit (10) is configured to acquire voltage inputs corresponding to the measured surface pressure from the pressure transducers (3). The processing unit (10) executes one or more levels of fault checking to detect and isolate pressure transducer failures and blockage of the pressure ports (2) based on the voltage inputs.

Abstract: A brake system for a mobile machine is disclosed. The brake system may have an anti-lock braking subsystem configured to calculate a maximum allowable brake command. The brake system may have a stability control subsystem configured to generate a desired differential brake command. The brake system may have a brake command adjustment subsystem. The brake command adjustment subsystem may be configured to calculate an ideal solution of a left brake command and a right brake command to satisfy a combination of the desired differential brake command and a desired total brake command. When the ideal solution is valid, the brake command adjustment subsystem may output the ideal solution as an actual brake command. When the ideal solution is invalid, the brake command adjustment subsystem may calculate a non-ideal solution of the left brake command and the right brake command.

Abstract: A device for monitoring the lining thickness of a brake lining of a friction brake of a vehicle is disclosed, wherein the brake lining interacts with a friction partner, such as a brake disk. The brake lining is equipped with at least one passive transponder of an RFID system, wherein the passive transponder is changed and/or destroyed once the brake lining has reached a defined wear threshold as a result of contact with the friction partner or with an element that is guided by the friction partner, such that the transponder transmits a signal that differs from an expected signal, or no signal, to a reading unit of the RFID system after being illuminated by the reading unit.

Abstract: A method and tools for virtually aligning object detection sensors on a vehicle without having to physically adjust the sensors. A sensor misalignment condition is detected during normal driving of a host vehicle by comparing different sensor readings to each other. At a vehicle service facility, the host vehicle is placed in an alignment target fixture, and alignment of all object detection sensors is compared to ground truth to determine alignment calibration parameters. Alignment calibration can be further refined by driving the host vehicle in a controlled environment following a leading vehicle. Final alignment calibration parameters are authorized and stored in system memory, and applications which use object detection data henceforth adjust the sensor readings according to the calibration parameters.

Abstract: A method to control a powertrain having an electric motor includes monitoring a torque command to the motor, predicting a motor torque for the motor based upon the torque command, monitoring an actual motor torque of the motor, comparing the actual motor torque to the predicted torque, and indicating a motor fault when the actual motor torque and the predicted torque differ by more than a calibratable threshold.

Abstract: Embodiments relate to systems and methods for vehicle monitoring with processing interruption tolerance. One or more vehicle sensors can transmit one or more data streams to a primary data processing system via a data channel. A secondary data buffer can be coupled to the data channel to continuously capture the set of data streams and/or subsets thereof. During normal operation, the set of data streams are processed by the primary data processing system. After a limited-duration fault occurs in the primary data processing system, it can recover by accessing the backup data in the secondary data buffer. The lost data can be retrieved from the secondary data buffer using timestamp information to process the data in its original time context and to ensure that no already-processed data is included. The set of data streams can be downsampled or decimated in the secondary data buffer to extend storage capacity.

Abstract: A method and a device are described for scanning the surrounding environment of a vehicle. When the vehicle falls below a first boundary speed a timer is triggered whose state is incremented until the vehicle exceeds a boundary speed, a check of the unobstructed view of the scanning device being carried out upon expiration of the time period recorded by the state of the timer and in which the state of the counter is incremented.

Abstract: A method monitors at least one system parameter which influences an operating property of vehicles or trains of vehicles, using an adaptable theoretical model which generates a theoretical behavior of a vehicle or train of vehicles from operating data of the vehicle or train of vehicles. The method includes determination of a real behavior of a vehicle or train of vehicles from operating data such as acceleration and/or deceleration of the vehicle or of the train of vehicles, comparison of the real behavior of the vehicle or train of vehicles with the theoretical behavior of the vehicle or train of vehicles, and monitoring of the system parameter by the theoretical model if the theoretical behavior of the vehicle or train of vehicles corresponds to the real behavior of the vehicle or train of vehicles.

Abstract: A grille control mechanism for a vehicle includes a movable member being switchable between opened and closed positions, an electric motor actuating the movable member, and a control device controlling a supply of electric current until detecting a lock current value to execute an opening operation or a closing operation, wherein the control device executes a checking operation for returning the movable member to an initial position and executing once again the opening or closing operation in a case where a detecting time of the lock current value since the opening or closing operation is started exceeds a predetermined time, and the control device determines that the movable member is in an abnormal state in a case where a detecting time of the lock current value after the operation is started from the initial position in the checking operation exceeds the predetermined time for a predetermined number of times.

Abstract: A controller for determining whether a previously-detected vehicle malfunction still exists. If the malfunction is no longer detected in the sensor signals, a vehicle control system operates in a first operational state or normal operational state with respect to the previously-malfunctioning sensor (e.g., signals from the sensor are used to control the vehicle). If the malfunction continues to be detected, the vehicle control system operates in a second operational state or malfunction state with respect to the malfunctioning sensor in which the signals from the sensor are not used to control the vehicle.

Abstract: A controller for determining whether a previously-detected vehicle wheel speed sensor malfunction still exists. The controller includes an electronic, non-volatile memory, and an electronic processing unit connected to the electronic, non-volatile memory. The electronic processing module includes a malfunction monitoring module, a failure handling module, and a signal checking module. The malfunction monitoring module monitors the operation of at least one wheel speed sensor and generates a fault signal when the at least one sensor malfunctions. The failure handling module causes drive cycle information and the fault information to be stored in the electronic, non-volatile memory. The signal checking module performs a signal check on information from the at least one wheel speed sensor. A tell-tale indicator is deactivated and/or a vehicle control system resumes normal operation if the wheel speed sensor passes the signal check.

Abstract: According to one embodiment, a method for providing location information to a mobile receiver from a plurality of aerial vehicles is provided. The method includes receiving a source location from at least three location sources at each aerial vehicle of the plurality of aerial vehicles. The at least three location sources includes a remote aerial vehicle. A predicted location of the aerial vehicle at a future time is calculated at each aerial vehicle based at least in part on a current time at the aerial vehicle, the received source locations, and ephemeris data that represents motion of each remote aerial vehicle. The predicted location is transmitted at the future time at each aerial vehicle. The transmitted locations from the aerial vehicles are used by a mobile receiver to determine a current location of the mobile receiver.

Abstract: A passenger protection system includes: a sensor outputting a detection digital data corresponding to collision; a passenger protection device; and an ECU. The sensor outputs a bit sequence providing an important bit group. A memory stores the data and the sequence doubly for storing first and second detection digital data and first and second bit sequences. The ECU determines based on the first or second data whether it is necessary to protect the passenger when the first data is equal to the second data. When the first data is different from the second data, and the first sequence is equal to the second sequence, the ECU replaces the important bit group in the first or second data with the first or second sequence, and determines based on the first or second data after replacement.

Abstract: A controller for indicating whether a previously-detected, acceleration-sensor malfunction no longer exists. The controller includes an electronic memory and an electronic processing unit connected to the electronic memory. The electronic processing module includes a malfunction monitoring module, a failure handling module, and a signal checking module. The signal checking module performs a signal check after the malfunction monitoring module generates the fault signal. The signal check includes executing a signal check function with a lateral acceleration signal. Also disclosed is a vehicle including the controller, and a method executed by the controller.

Abstract: Methods for operating a management system that manages a large number of first function modules and second function modules. An inhibitor module I sets first control statuses to designating blocking when associated events are detected by an event detecting device, and then the management system no longer makes associated first function modules available for execution. The inhibitor module I sets second control statuses to designating executable when associated events are detected by an event detecting device, and then the management system makes associated second function modules available for execution.

Abstract: Disclosed herein is a method of preventing collisions between readers in an RFID system. The method includes a first step of RFID readers selecting transmitting channels by examining channels, a second step of transmitting signals via the selected transmitting channels, a third step of receiving signals via channels having the same frequencies as the selected transmitting channels; a fourth step of determining whether a collision has occurred by examining the status of the signals that are received via the transmitting channels; a fifth step of, if, as a result of the determination at the fourth step, it is determined that a collision between the readers has occurred, repeating the first to fourth steps after delays of random time periods based on a predetermined equation, and a sixth step of, if, as a result of the fourth step, no collision between readers is detected, communicating with the corresponding RFID tags.

Abstract: An inhibit path diagnostic system includes a first control module. The first control module includes a message output and transmits a first message from the message output to a controller area network (CAN) via a message transmission path. An inhibit path circuit includes the message transmission path. A second control module transmits a disable control signal to the inhibit path circuit to disable the message transmission path. The first control module transmits a second message from the message output subsequent to and based on the transmitting of the disable control signal. At least one of the first control module and the second control module detects a fault of the inhibit path circuit subsequent to the transmitting of the second message and based on a feedback signal from the CAN.

Abstract: An electronic control unit installed in a vehicle performs diagnosis of plural diagnosis objects based on sensor signals, and stores diagnosis results that indicate abnormality of the diagnosis objects in a DTC storage area only when the DTC storage area does not store data having an initial value. The data in the DTC storage area is, in other words, rewritten to different values from the initial value for allowing storage of DTCs when the electronic control unit determines that all of the diagnosis objects are in a normal condition with no indication of abnormality after performing diagnosis, thereby making it possible to exclusively prevent useless abnormality information detected during a vehicle manufacturing process from being stored in an rewritable non-volatile memory.

Abstract: A system and method for detecting and isolating faults in pressure ports (2) and pressure transducers (3) of a pressure sensing system are disclosed. The system comprises a set of pressure ports (2) flushed to a nose cap (1) of a space vehicle in crucifix form. Three pressure transducers (3) are connected to each pressure port (2) through pneumatic tubes (4) for measuring surface pressure from the pressure ports (2). Separate power supplying units (7, 8, 9) are connected to the three pressure transducers (3) for powering the pressure transducers (3) at each pressure port (2). A processing unit (10) is configured to acquire voltage inputs corresponding to the measured surface pressure from the pressure transducers (3). The processing unit (10) executes one or more levels of fault checking to detect and isolate pressure transducer failures and blockage of the pressure ports (2) based on the voltage inputs. Hence, it is possible to enhance the accuracy and reliability of the pressure estimation of the FADS.