-
公开(公告)号:US20170212513A1
公开(公告)日:2017-07-27
申请号:US15328922
申请日:2015-07-01
CPC分类号: G05D1/0061 , B60Q9/00 , B60R21/00 , B60W30/09 , B60W30/095 , B60W30/10 , B60W50/02 , B60W2050/0072 , B62D6/00 , G05D1/0214 , G05D1/0255 , G05D1/0278 , G08G1/16
摘要: In order to address the problem of providing a high-safety vehicle control system and action plan system, the present invention provides a vehicle control system comprising a trajectory generation determination unit (603) having an emergency trajectory generating unit (6032) for calculating an emergency trajectory while driving is being switched from a system to a driver at the time of a fault, and a motion control unit (604) having a trajectory retaining unit (6042) for retaining the emergency trajectory and a trajectory switching unit (6041) for switching whether to travel in the emergency trajectory retained by the trajectory retaining unit on the basis of a fault state detected by a malfunction detection unit.
-
公开(公告)号:US20210165444A1
公开(公告)日:2021-06-03
申请号:US16604980
申请日:2018-04-12
发明人: Satoshi OTSUKA , Kohei SAKURAI , Fumio NARISAWA
摘要: In the present invention, control feasibility in a vehicle control system architecture is efficiently determined by performing determination based on control feasibility in a physical element based on a converted parameter when a logical architecture is arranged in a physical architecture. The present invention includes: an arrangement unit 101 that arranges a logical architecture 601, which includes a linkage of each of logical functions and an execution time constraint of the linkage, in a physical architecture 300; a delay time calculation unit 104 that calculates a processing delay time based on a converted parameter when the logical architecture 601 is arranged in the physical architecture 300; and a verification unit 102 that verifies whether a total of the processing delay time satisfies the execution time constraint.
-
公开(公告)号:US20180281816A1
公开(公告)日:2018-10-04
申请号:US15761962
申请日:2016-10-21
发明人: Satoshi OTSUKA , Kohei SAKURAI , Tasuku ISHIGOOKA
IPC分类号: B60W50/029 , G07C5/08 , B60W50/02 , G06F11/07
摘要: The purpose of the present invention is to provide a system such that functions of a vehicle control system can be quickly reconfigured. The present invention is a processing device connected to at least one processing device, wherein during a period in which the one processing device executes a control operation on the basis of a control program installed in the one processing device, the processing device acquires a substitute program for the control program. In another aspect, the present invention is an on-board control system equipped with multiple processing devices, wherein during a period in which one processing device among the multiple processing devices executes a control operation on the basis of a control program installed in the one processing device, another processing device acquires a substitute program for the program in the one processing device.
-
公开(公告)号:US20190369624A1
公开(公告)日:2019-12-05
申请号:US16445869
申请日:2019-06-19
摘要: Vehicle systems that implement action planning for a vehicle have had difficulty in maintaining safety in the event of a failure in a recognition device since these systems generate trajectories and control the vehicle on the basis of outside-world information recognized by recognition devices. The present invention was conceived in light of the aforementioned situation and addresses the problem of maintaining safety even in the event of a failure in a recognition device of a vehicle system. This problem can be solved by an action planning device having a failure detection unit for detecting a failure in an outside-world recognition unit and a trajectory generation/determination unit for executing an action on the occurrence of a failure on the basis of outside-world information outputted by the outside-world recognition unit, wherein the trajectory generation/determination unit takes an action for coping with the failure on the basis of failure information from the failure detection unit.
-
公开(公告)号:US20190118745A1
公开(公告)日:2019-04-25
申请号:US16090434
申请日:2017-04-20
IPC分类号: B60R16/023 , G07C5/08 , G06F9/48 , G06F16/27
摘要: The present invention provides technology for achieving both high responsiveness to an interrupt process and non-interference between control software. This vehicle control device comprises a storage device that stores various programs for controlling a vehicle, and a plurality of computation devices that include a first computation device and a second computation device, and that read a program from the storage device and execute the same. In addition, the storage device includes a first type of computation processing program executed not by time division and a second type of computation processing program executed by time division. The first computation device is configured to execute the first type of computation processing program, and the second computation device is configured to execute the second type of computation processing program.
-
公开(公告)号:US20180257662A1
公开(公告)日:2018-09-13
申请号:US15761179
申请日:2016-10-19
发明人: Tasuku ISHIGOOKA , Satoshi OTSUKA , Kohei SAKURAI
IPC分类号: B60W50/029 , B60W50/023 , B60W30/06 , B60W50/14 , B60R16/023
CPC分类号: B60W50/029 , B60R16/023 , B60R16/0231 , B60W30/06 , B60W50/023 , B60W50/14 , G06F11/0739 , G06F11/0793 , G06F11/2028 , G06F11/2035 , G08G1/00 , H04L12/28
摘要: The purpose of the present invention is to provide a vehicle control technique that enables the safety of function substitution to be increased. This vehicle control device determines whether a substitution was successful by monitoring the operations which follow initiation of the substitution.
-
7.
公开(公告)号:US20190108160A1
公开(公告)日:2019-04-11
申请号:US16086666
申请日:2017-04-13
发明人: Satoshi OTSUKA , Kohei SAKURAI
摘要: The present invention provides a technology for comprehensive verification of the safety of the design of functions, on the basis of a safety analysis result. The disclosed vehicle control system verification device is equipped with a storage device that stores programs for verifying the safety of the logical architecture of a vehicle control system, and a processor that reads the programs from the storage device and verifies the safety of the logical architecture. On the basis of safety analysis result information that is supplied, the processor executes a process for verifying whether the logical architecture has logical functions corresponding to the safety analysis result.
-
公开(公告)号:US20180170374A1
公开(公告)日:2018-06-21
申请号:US15739380
申请日:2016-07-22
发明人: Satoshi OTSUKA , Kohei SAKURAI
CPC分类号: B60W30/0956 , B60R21/00 , B60T7/12 , B60T8/88 , B60T17/18 , B60T17/22 , B60W30/09 , B60W30/146 , B60W30/18163 , B60W50/0097 , B60W50/02 , B60W50/04 , G06K9/00805 , G08G1/00 , G08G1/16
摘要: The purpose of the present invention is to provide a system in which the reliability of an automatic driving system can be excellently complemented by a different control system while the automatic driving system is effectively used. The vehicle control device outputs to a drive device one of a first control signal generated on the basis of automatic driving control information, and a second control signal generated on the basis of the relative information between a vehicle and a surrounding object. If an abnormality is detected in the automatic driving control information, the second control signal is output to the drive device in place of the first control signal.
-
公开(公告)号:US20170153644A1
公开(公告)日:2017-06-01
申请号:US15325805
申请日:2015-06-17
摘要: Vehicle systems that implement action planning for a vehicle have had difficulty in maintaining safety in the event of a failure in a recognition device since these systems generate trajectories and control the vehicle on the basis of outside-world information recognized by recognition devices. The present invention was conceived in light of the aforementioned situation and addresses the problem of maintaining safety even in the event of a failure in a recognition device of a vehicle system. This problem can be solved by an action planning device having a failure detection unit for detecting a failure in an outside-world recognition unit and a trajectory generation/determination unit for executing an action on the occurrence of a failure on the basis of outside-world information outputted by the outside-world recognition unit, wherein the trajectory generation/determination unit takes an action for coping with the failure on the basis of failure information from the failure detection unit.
-
公开(公告)号:US20150358351A1
公开(公告)日:2015-12-10
申请号:US14763597
申请日:2013-12-20
IPC分类号: H04L29/06
CPC分类号: H04L63/1466 , H04L12/4625 , H04L12/66 , H04L63/1416 , H04L2012/40215 , H04L2012/40273
摘要: In order to detect and prevent attacks in which the network is infested with unauthorized data to cause malfunction, the invention aims, on the basis of network cycle information, to detect errors and to prevent unauthorized data forwarding in a network system such as a vehicle-mounted network. This network device is provided with a communication unit which receives data, a time management unit which manages the reception time at which data is received, and a control unit which processes data. If, for received data used as a reference, first data is received having the same identifier and a reception interval shorter than a prescribed cycle, the control unit waits to receive data having the same identifier as the first data from the reception time of the received data used as a reference up until the prescribed cycle has elapsed, and if during this interval second data is received having the same identifier as the first data, the control unit determines that an error has occurred and performs cycle abnormality detection processing (see FIG. 1).
摘要翻译: 为了检测和防止网络受到未经授权的数据侵扰的攻击,导致故障,本发明的目的是基于网络周期信息来检测错误并防止在诸如车载网络的网络系统中的未经授权的数据转发, 安装网络。 该网络装置设置有接收数据的通信单元,管理接收数据的接收时间的时间管理单元和处理数据的控制单元。 如果接收到的数据用作参考,则接收到具有相同标识符和比规定周期短的接收间隔的第一数据,则控制单元从接收到的接收时间等待接收与第一数据相同的标识符的数据 用作参考的数据直到规定的循环已经过去,并且如果在该间隔期间接收到具有与第一数据相同的标识符的第二数据,则控制单元确定出现错误并执行循环异常检测处理(参见图1)。 1)。
-
-
-
-
-
-
-
-
-