Abstract: A target longitudinal force sum/yaw moment setting section is provided which is configured to determine and set a target longitudinal force sum to be exerted on drive wheels by drive sources and a target yaw moment of a vehicle. A failure detection section is provided which is configured to detect occurrence of a failure in the drive source of each of the drive wheels and a drive system including a control system of the drive source. A one-wheel-failure control section is provided which is configured to, when a failure of one of the wheels is detected by the failure detection section, drive the drive sources of all the remaining sound wheels so as to minimize a sum of squares of load factors of the sound wheels and to be matched with the target longitudinal force sum and the target yaw moment that are set.

Abstract: A driving assistance apparatus includes a position obtaining unit, an evaluation value obtaining unit, and a notifying unit. The position obtaining unit obtains a position of an own vehicle. The evaluation value obtaining unit obtains an evaluation value indicating a degree by which driving assistance can be suitably performed on the own vehicle in a travelling area through which the own vehicle is presumed to travel based on the position of the own vehicle obtained by the position obtaining unit. The notifying unit gives notification in advance to a notification apparatus, of the evaluation value obtained by the evaluation value obtaining unit before the own vehicle enters the travelling area.

Abstract: A locomotive air brake control system that responds to penalty braking requests from external systems by applying a varying amount of train brake level based on monitored and calculated parameters in order to enforce a defined train condition. The system may include a minimum acceptable train braking, a condition to be achieved to prevent further application of train brakes, and a maximum train brake level to be applied in response to the request. Alternatively, the system may apply braking in stepped levels according defined thresholds for a train behavior variable of interest such as speed or deceleration. The system may be configured to incrementally apply and release train brakes during the adaptive penalty, and may also adjust the level of braking according to calculated braking capacity of the train.

Abstract: A control system according to the principles of the present disclosure includes an operation control module, a fault detection module, a remedial action module, and a reset module. The operation control module controls operation of a vehicle system. The fault detection module detects a fault in the operation control module when the operation control module fails an integrity test. The remedial action module takes a remedial action when the fault is detected. The reset module resets the operation control module when the fault is detected and the remedial action is not taken.

Abstract: When a stereo image recognition device detects a vehicle ahead, a driving support apparatus extracts the vehicle ahead as a vehicle against which control should be performed, and performs driving support control based upon the information from the stereo image recognition device. When the stereo image recognition device does not detect the vehicle ahead, the driving support apparatus sets either one of the distance from the driving lane on which the vehicle travels and a start point of a curve ahead according to the configuration of the road ahead and a detection limit distance of the information of the vehicle ahead by the stereo image recognition device (front recognition device) as a threshold value IVC_L. When the vehicle ahead is present distant by more than the threshold value IVC_L, the driving support apparatus performs driving support control based upon the information by the inter-vehicle communication from a communication device.

Abstract: A method, an apparatus, and a computer program product for wireless communication are provided. The apparatus receives a first message from a first wireless communication device and a second message from a second wireless communication device, obtains information associated with a first processing delay with respect to the first message and a second processing delay with respect to the second message, and transmits a third message comprising an indication of the information associated with the first and second processing delays.

Abstract: A drive assist system includes: wireless communication devices on first and second vehicles. The wireless communication device on the first vehicle includes: a distance calculation device for calculating a satellite positioning distance between the first and second vehicles; and a difference calculation device for calculating a distance difference between the satellite positioning distance and a distance to the second vehicle obtained by a ranging sensor in the first vehicle.

Abstract: A vehicle control device for controlling the driving force and braking force that is applies to a vehicle to maintain a target wheel speed includes: a plurality of determination parts each of which determines the wheel speed of a corresponding one of a plurality of wheels of the vehicle; a calculation part that calculates the wheel speed validity threshold for each wheel based on the determined wheel speeds; a decision part that decides whether the wheel speed validity threshold calculated for each wheel is below a specific threshold speed; a setting part that resets the target wheel speed depending on the result of the decision by the decision part; and an estimation part that estimates the vehicle speed based on the determined wheel speeds.

Abstract: Example embodiments disclose a drive system including a machine including a plurality of phases and configured to generate power based on a plurality of phase currents, each respectively associated with the plurality of phases and a direct current (DC) bus, operatively connected to the machine. The DC bus includes a high-side line, a low-side line, and an inverter including a plurality of switching systems, operatively connected between the high-side line and the low-side line, the plurality of switching systems, each configured to output a respective one of the plurality of phase currents. The drive system also includes a controller, operatively connected to the DC bus and the machine, the controller configured to determine if a failure exists in the drive system based on the plurality of phase currents and a DC bus voltage, the DC bus voltage being a voltage across the high-side line and the low-side line.

Abstract: A method of operating a vehicle comprising an adaptive cruise control system and an engine control module is provided. The engine control module is coupled to the adaptive cruise control system. The method comprises issuing a speed reduction signal from the adaptive cruise control system, verifying a speed reduction with a first sensor using the adaptive cruise control system, verifying the speed reduction with a second sensor using the engine control module, thereafter, receiving a resume signal from an operator input device, and executing a speed increase of the vehicle with the engine control module in response to receiving the resume signal with the engine control module.

Abstract: A method for controlling a vehicle's speed includes adopting a desired speed vset for the vehicle; determining by means of map data and location data a horizon for the intended itinerary which is made up of route segments with at least one characteristic for each segment; effecting the following during each of a number of simulation cycles (s) each comprising a number N of simulation steps conducted at a predetermined frequency f: making a first prediction of the vehicle's speed vpred—cc along the horizon with conventional cruise control when vset is presented as reference speed, which prediction depends on the characteristics of said segment; comparing the predicted vehicle speed vpred—cc with vmin and vmax, which demarcate a range within which the vehicle's speed is intended to be; making a second prediction of the vehicle's speed vpred—Tnew along the horizon when the vehicle's engine torque T is a value which depends on the result of said comparison in the latest preceding simulation cycle (s?1); determini

Abstract: A controller system in which a plurality different main functions are integrated includes a plurality of microcontrollers. Each of the microcontrollers is associated with one of the main functions. At least one monitoring unit is implemented for the plurality of the main functions, for example a brake monitor and a comfort monitor. When the at least one monitoring unit detects a defect of a main function in the controller, only the defective main function is deactivated.

Abstract: A braking control system includes sensors for detecting pressure applied to a brake pedal. The system can also include a pressure sensor capable of detecting the hydraulic pressure of the braking system. The system can also include a position sensor for detecting a position of the brake pedal. The pressure applied to the brake pedal is compared to either the hydraulic pressure or the pedal position. If the resulting measurements are not correlated properly, braking countermeasures are applied. Braking countermeasures can include engine braking, regenerative braking, hydraulic assist, and brake pad assist.

Abstract: When employing an a cruise control system in a commercial or heavy-duty vehicle, an adaptive cruise control (ACC) system (14) is activated upon activation of a vehicle or set-speed cruise control (SSCC) system (16). The ACC (14) remains on, even after SSCC shutoff, to maintain a minimum following distance for a primary vehicle in which the ACC (14) is employed and a forward vehicle. The ACC (14) is deactivated after detection of an ACC shutoff trigger event, which may be driver application of the brakes of the primary vehicle, driver-initiated acceleration for a predefined time period, expiration of a predetermined time period, manual shutoff (e.g., via a switch or button), etc.

Abstract: A method and a device are described for scanning the surrounding environment of a vehicle. When the vehicle falls below a first boundary speed a timer is triggered whose state is incremented until the vehicle exceeds a boundary speed, a check of the unobstructed view of the scanning device being carried out upon expiration of the time period recorded by the state of the timer and in which the state of the counter is incremented.

Abstract: A radar sensor detects a traveling state of a host vehicle. An inter-vehicle control ECU gives the amount of operation for the predetermined amount of control of the host vehicle so that the traveling state of the host vehicle detected by the radar sensor becomes a predetermined state. The amount of operation given by the inter-vehicle control ECU is reduced as a kind of restriction when the amount of operation given by the inter-vehicle control ECU becomes equal to or larger than a predetermined value. As a result, it is possible to reduce the dependence of the driver on the device.

Abstract: A method for controlling a drive train with at least one drive unit, in particular for a vehicle is disclosed. A setpoint value for a torque of the at least one drive unit can be predefined. The actual value of this torque is detected and a first signal is generated which ensures reliable operation of the drive train if the deviation of the actual value from the setpoint value is greater than a predefinable absolute value of the deviation value and/or the deviation of the actual value from the setpoint value lasts for longer than a predefinable absolute value of the deviation time period.

Abstract: An open cockpit off-road vehicle has an engine, four wheels, side-by-side driver and passenger seats, and a driver safety belt which include a seat belt, first and second connecting portions selectively connected to each other, and one of a safety belt sensor and a safety belt switch sensing a state of this connection. A continuously variable transmission (CVT) operatively connects the engine to the wheels. A control unit is connected to the engine. A vehicle speed sensor senses a speed of rotation of a shaft driven by the CVT. The control unit controls the engine in a vehicle speed limit mode when the first and second connecting portions are disconnected. When in this mode, the control unit controls the engine to limit the speed of the vehicle to a predetermined speed and to permit the engine to reach a torque necessary to operate the vehicle at the predetermined speed.

Abstract: A control unit (200) executes fail-safe control that forcibly releases a lockup clutch (15) by activating a fail-safe valve (112), abnormality diagnosis control that determines whether a solenoid valve (DSU) is suffering from a solenoid ON abnormality when the vehicle has started with the fail-safe control executed, and reproduction control that simulatively reproduces, when the vehicle has started without the fail-safe control executed, a condition coinciding with the condition for allowing execution of the abnormality diagnosis control.

Abstract: Precise operation of an accelerator operating member (7) is more difficult to perform in a reversing operation of a vehicle (1) as compared with an advancing operation. Therefore, behavior of the vehicle (1) is not smooth and thus tends to be unnatural. In the reversing operation of the vehicle (1), driving force output from an internal combustion engine (2) is limited in accordance with vehicle acceleration (D). At this time, it is possible to regulate the driving force of the vehicle (1) in conformity to the actual operation of the accelerator operating member (7) by the driver. In addition, limitation of the driving force is not executed in the advancing operation of the vehicle (1). At this time, the vehicle (1) can be driven in a state in which the driving force is comparatively small. Therefore, it is possible to prevent the behavior of the vehicle (1) from being unnatural.

Abstract: A vehicle cruise control apparatus includes a vehicle speed adjusting device that adjusts a vehicle speed to a set target vehicle speed, a brake operation detecting device that detects brake operation performed by a driver, and a first controller that controls the vehicle speed adjusting device based on a target driving force that maintains a vehicle in a stopped condition, when the brake operation performed by the driver is detected.

Abstract: A speed control system for controlling vehicle speed of one or more vehicles in a personal rapid transit system when the one or more vehicles travel along a track, the personal rapid transit system including a vehicle propulsion system including one or more motors, each motor being adapted to generate a thrust for propelling one of the one or more vehicles. The speed control system includes: a speed regulation subsystem adapted to control the thrust generated by at least one of said motors based on one or more sensor signals received from vehicle position and/or speed sensors, so as to control the speed of the one or more vehicles; and a vehicle control system included in each of said one or more vehicles and adapted to activate, independently from the speed regulation subsystem, an emergency brake mounted on said vehicle.

Abstract: A mobile computer that can be borne in a vehicle and that can receive position information may adjust a maximum speed limit to account for unfavorable weather or road conditions and cause the vehicle to automatically reduce speed below the adjusted maximum limit.

Abstract: To provide a vehicle speed limiting system that is capable of executing a maximum speed limiting control without influencing a driving feeling of a vehicle. A vehicle speed limiting system includes: a three-dimensional map 46a and a throttle valve driving unit 47. A first maximum speed limiter opening degree is calculated by adding a first predetermined opening degree, a second predetermined opening degree, and a current throttle valve opening degree, the first predetermined opening degree being calculated by multiplying a speed difference of the vehicle by a preset P-term coefficient, the second predetermined opening degree being calculated by multiplying an acceleration of the vehicle by a preset D-term coefficient. Once the calculated first maximum speed limiter opening degree falls below the target throttle valve opening degree ?B, the throttle valve motor 30 is driven on a basis of the first maximum speed limiter opening degree.

Abstract: An adaptive cruise control system for a vehicle includes a deceleration module, a downshift trigger module, and a shift module. The deceleration module determines a deceleration rate based on a speed of at least one of the vehicle and an engine of the vehicle. The downshift trigger module generates a threshold signal based on the deceleration rate. The shift module generates a downshift signal when the speed is less than the threshold signal and while the vehicle is operating in a manual transmission mode.

Abstract: In a cruise control system installed in a vehicle and electrically connected to a plurality of switches installed therein, a detecting unit detects that one of the plurality of switches is operated. A cruise control unit executes cruise control of the vehicle based on an instruction corresponding to the one of the plurality of switches upon detection of the one of the plurality of switches being operated. When the detecting unit detects that, during the first switch being operated, the second switch is operated, and when a combination of first and second instructions sent from the detected first and second switches is matched with at least one predetermined combination of instructions to be sent from the plurality of switches, a cruise control disabling unit disables the cruise control unit to execute cruise control of the vehicle based on the second instruction.

Abstract: A driver assistance system includes a sensor for sensing the speed of a first vehicle equipped with the system, a sensor for detecting a vehicle traveling ahead, a sensor for determining the speed of the vehicle ahead, at least one driving-data sensor for sensing driving data characteristics, and an electronic controller programmed to trigger autonomous braking of the first vehicle when predetermined brake-trigger driving data exist, and to end the autonomous braking when predetermined driving data for terminating braking exist. In effecting termination of autonomous braking, the electronic controller is programmed to determine whether the sensor for detecting vehicles ahead is transmitting signals (i.e., is operational) but is not detecting any vehicle traveling ahead, and, if the sensor is operational and no vehicle traveling ahead is detected, to terminate autonomous braking when the speed of the first vehicle is less than the most recently determined speed of the vehicle ahead.

Abstract: Cruise control systems and methods suitable for use in vehicles, such as Class 8 trucks, are provided. For example, cruise control systems are disclosed that include verification and/or notification features for verifying the operational condition of the cruise control system, and if non-operational, notifies the vehicle operator of system inoperability and/or instructs the operator to activate a specified control input, e.g., press and release the clutch pedal, the service brake pedal, the parking brake, etc., so that cruise control functionality may be enabled.

Abstract: A vehicle travel control system includes a cruise control ECU, an engine control ECU and a brake control ECU. The cruise control ECU checks whether a driver's actual concentration degree is insufficient relative to a required concentration degree in terms of safety in surrounding environments of the subject vehicle. When such possibility arises, even during the cruise control, the speed of the subject vehicle is controlled to match a control vehicle speed lower than a set vehicle speed or a control distance to a preceding vehicle.

Abstract: Two data processing units having the same function, one of which is used for a master and the other for comparison, are provided, control of a circuit unit is performed by the master, the master data processing unit and the circuit unit are operated in synchronization with a first clock signal, the second data processing unit is operated in synchronization with a second clock signal having the same cycle and different phase from the first clock signal, and processing results of both the data processing units are compared in a comparison circuit. Flip flops are disposed on a signal path from the circuit unit to the comparison data processing unit and on a signal path from the master data processing unit to the comparator, and both the first and second clock signals are used for latch clocks of the flip flops in accordance with input signals thereof.

Abstract: Adaptive cruise control (ACC) system for motor vehicles is provided, the ACC system having a sensor system for acquiring data concerning a target object and the own (host) vehicle, an actuator system for controlling the longitudinal movement of the vehicle, and a controller that intervenes in the actuator system within certain intervention limits in order to maintain a defined, controlled target distance from the target object, and an output device for issuing a take-over request to the driver if the controlled target distance cannot be maintained. The ACC system further includes a prediction system for predicting a conflict situation in which the controlled target distance cannot be maintained, in which case the take-over request is initiated before the conflict situation actually occurs.

Abstract: A distance-related cruise control system and method for a motor vehicle performs a speed control to a predefined desired speed during free travel of the motor vehicle and performs a distance regulation to a predefined distance to the vehicle traveling ahead during following travel. After deactivation of the distance regulation during following travel, the system performs a speed control, not to the previously defined speed, but rather to the current speed of the motor vehicle at the instant of the deactivation of the distance regulation as the desired speed.

Abstract: Two data processing units having the same function, one of which is used for a master and the other for comparison, are provided, control of a circuit unit is performed by the master, the master data processing unit and the circuit unit are operated in synchronization with a first clock signal, the second data processing unit is operated in synchronization with a second clock signal having the same cycle and different phase from the first clock signal, and processing results of both the data processing units are compared in a comparison circuit. Flip flops are disposed on a signal path from the circuit unit to the comparison data processing unit and on a signal path from the master data processing unit to the comparator, and both the first and second clock signals are used for latch clocks of the flip flops in accordance with input signals thereof.

Abstract: A collision prediction ECU of a collision prediction apparatus estimates a state of presence of a detected front obstacle. At this time, the collision prediction ECU estimates the state of presence on the basis of road shape data supplied from a navigation ECU of a navigation apparatus. Further, the collision prediction ECU checks and corrects the calculated road gradient value. At this time, the collision prediction ECU corrects the gradient value on the basis of road gradient data supplied from the navigation ECU. Further, the collision prediction ECU changes a collision avoidance time on the basis of travel environment data supplied from the navigation ECU. Moreover, the collision prediction ECU obtains an ETC gate pass-through signal from the navigation ECU and determines whether the vehicle is passing through the gate. The collision prediction apparatus performs collation prediction on the basis of the corrected values.

Abstract: A controller with a processing unit and a floating-point processor is disposed in a vehicle to control an actuator according to detected parameters sent from sensors. The processor generates a floating-point control parameter indicating a first quantity of control from the detected parameters at floating-point calculations, and the unit generates a fixed-point control parameter indicating a second quantity of control from the detected parameters at fixed-point calculations. The unit converts the floating-point control parameter into a converted control parameter of fixed-point representation and judges from both the converted control parameter and the fixed-point control parameter whether a failure has occurred in the processor. When no failure has occurred in the processor, the unit generates a control signal from the floating-point control parameter. The actuator is operated according to the control signal so as to give the first quantity of control to a controlled object.

Abstract: The electronic control apparatus includes a microcomputer having a control function of controlling an actuator mounted on a vehicle in accordance with an input signal indicative of a running state of the vehicle, and a self-monitoring function of monitoring whether or not the control function is functioning properly on the basis of the input signal, and a monitor module communicably connected to the microcomputer and having a digital circuit for monitoring whether or not the self-monitoring function is functioning properly. The monitor module includes a reference counter counting up a clock serving as operation reference of the digital circuit. The microcomputer includes a module monitoring section configured to take in a count value of the reference counter and to monitor whether or not the monitor module is functioning properly on the basis of a changing state of the count value taken in.

Abstract: A cruise control system includes a curve state detecting section, a target deceleration rate calculating section, a deceleration control section, a map matching detecting section, a position evaluating section and a revising section. The deceleration control section is configured to execute deceleration control within a deceleration control region before a curve existing in front of the vehicle. The map matching detecting section is configured to detect whether a map matching operation caused a vehicle traveling position to move onto a traveling road. The revising section is configured to perform at least one of increasing a deceleration rate of the vehicle and extending an end position of a deceleration control region to a position inside the curve based on a positional relationship between the vehicle traveling position and the curve when the vehicle traveling position after the map matching operation is within the deceleration control region.

Abstract: A driving control system includes a controller which is configured to, in response to a command for starting an auto-cruise mode generated by the operation of an input device, control an engine speed or a vehicle speed so that a value detected by a speed detector falls within a cruising speed range, when the value detected by the speed detector is outside the cruising speed range; and to then cause the watercraft to cruise at a constant engine speed or at a constant vehicle speed.

Abstract: The compaction vehicle having a speed adjustment member, a displacement detector, and a drive source controller further includes a calculation device between the displacement detector and the drive source controller, receiving the displacement S, and outputting a signal I calculated to the controller; a running speed setting switch for the operator operating ON at a desired running speed; a control signal memory device provided inside the calculation device and memorizing a signal I1 to the controller, wherein in a normal operation the calculation device outputs the signal I to the controller so that a running speed increases or decreases according to the displacement S, and wherein when the switch is operated to ON, the calculation device maintains the ON state, and the displacement S is not less than a predetermined value, the calculation device outputs the signal I1 memorized in the memory device so as to run the vehicle at a constant speed.

Abstract: The invention relates to a driver assistance system provided with an auxiliary system. The driver assistance system comprises detecting means for detecting information about a vehicle and influencing means for influencing a direction of movement and/or the speed of the vehicle according to information about said environment. The auxiliary system is used for issuing assistance information to the driver of the vehicle. The auxiliary system comprises recognition means for recognizing whether the driver assistance system can be operated in a reliable manner in a momentary environment state and/or in a future environment state and/or an operational state of the vehicle. The auxiliary system is connected to the recognition means and is embodied in such a manner that information can be given to the driver during operation of the vehicle if the driver assistance system cannot be operated in a reliable manner.

Abstract: A braking system, including a brake control arrangement in operational communication with a braking arrangement for braking a vehicle, and a penalty power source to deliver current or power to the brake control arrangement through a brake interface circuit. The brake interface circuit includes a main positive current switch urged to a closed position and configured to open upon loss or interruption of a penalty hold-off signal, and a main negative current switch urged to a closed position and configured to open upon loss or interruption of a penalty hold-off signal. Upon opening of either of the main positive current switch or the main negative current switch, the braking arrangement will automatically brake the vehicle as controlled by the brake control arrangement.

Abstract: A method for controlling a vehicle using a nonlinear error-based control is provided. Various vehicle speed requests are arbitrated and a transfer function including an integrator is applied to the winner of the arbitration. The integrator is applied regardless of the winner of the arbitration, and it is the only integrator used in the control method. This provides an advantage over methods and systems that require resetting or switching among integrators.

Abstract: A technique for providing better detection of close range truck trailers for a motor vehicle with Stop and Go Adaptive Cruise Control determines if a range parameter to a target requires modification if such target is a truck trailer, for example. Truck trailer geometry is such that a standard adaptive cruise control system may have difficulty accurately determining the range to the rearmost position of the truck. The technique determines an initial range from the motor vehicle to a target. Then, the technique determines whether the range rate of the target is above a predetermined rate. When the range rate of the target is not above the predetermined rate, the technique determines whether the initial range to the target is less than a current range to the target. If so, the technique provides an adjusted range, which is then utilized in the control operation of the motor vehicle.

Abstract: An undercarriage for a hospital bed including at least three wheels (1) while at least two wheels (1) are equipped with a brake (2) with a common control (9) of all the brakes (2). The undercarriage further includes a bed movement sensor (31) that is connected to the central processor unit (32), which is interconnected with an actuating device (33) for control of all the brakes (2). The central processor unit (32) is further equipped with a block (35) for generation of a timeout between stopping of turning of the wheel (1) and automatic applying of the brakes (2).

Abstract: Even in the case that at least one braking force generating function fails, it is possible to secure a maximum braking force as well as suppressing a yaw moment generated on the basis of the failure as much as possible even at a time when whatever braking force is requested, A target braking force to a normal brake apparatus is calculated on the basis of a result of detection by a malfunction detecting portion, in such a manner that a total of braking forces generated in the brake apparatuses in respective wheels becomes as equal as possible to a requested braking force, at a time when a malfunction is generated in the brake apparatus or a braking force control portion.

Abstract: A method is provided for controlling a low speed operation of a vehicle. A speed activation switch is activated. A target vehicle speed is calculated in response to an accelerator pedal demand as determined by an accelerator pedal position where each respective accelerator pedal position is associated with a respective predetermined target vehicle speed. A vehicle turning geometry is determined in response to a steering wheel angle input. A target wheel speed of each of a plurality of vehicle wheels is calculated as a function of the target vehicle speed and turning geometry. An actual wheel speed of each wheel is measured. A net torque is determined in response to the target wheel speeds and actual wheel speeds. An engine output torque and a braking torque are determined in response to the net torque. The engine output torque and the total vehicle braking torque are controlled for cooperatively maintaining the target vehicle speed.

Abstract: System for the evaluation of the driving environment of a vehicle and for influencing the speed of the vehicle in its own lane, with an electronic control unit that is connected to a signal generator generating a signal characteristic of the desired speed of the vehicle, to a signal generator generating a signal characteristic of the turning rate of the vehicle about its vertical axis, to a signal generator that generates for objects located in the space in front of the vehicle and in the direction of travel of the vehicle a characteristic signal with respect to their distance and orientation relative to the vehicle, said signal being the speed relative to the speed of the driver's vehicle and/or the distance relative to the driver's vehicle and/or the angular displacement or the lateral deviation relative to the longitudinal axis of the driver's vehicle, and to a signal generator that generates a signal characteristic of the speed of at least one wheel of the vehicle, and that is connected to at least one co

Abstract: A drive control apparatus able to hold an autonomously stabilized posture by a small size configuration by independently detecting abnormalities in a drive system of a first motor and a drive system of a second motor at controllers, outputting the results to majority decision circuits, and having the majority decision circuits turn switches on/off by majority decision based on the results.

Abstract: A speed regulator for motor vehicles, including a standard mode in which the speed is regulated to a desired speed set by the driver, and at least one exception mode in which the speed is regulated to a setpoint speed that may deviate from the desired speed, and a display device for displaying the desired speed. An auxiliary display is also provided that indicates that an exception mode is active.

Abstract: The invention relates to a method for controlling a safety-critical system, in particular of a motor vehicle, which includes a microcontroller. The microcontroller controls and/or regulates the operating sequences of the safety-critical system, and the microcontroller is composed of a microprocessor and at least one peripheral microprocessor device. In a method for controlling a safety-critical system in which disruption to the operational reliability is to be prevented by changes in the molecular movement of the carrier of the microprocessor, the chip temperature of a chip which is provided with the microprocessor and peripheral device together is measured during an operating sequence and/or program sequence and compared with a maximum permitted chip temperature of the microcontroller. The operating sequence and/or the program sequence is controlled as a function of the temperature comparison.