Gm Global Technolgoy Operations, Inc.

Nvidia Corporation

Other

Mark Henry Costin

Paul Alan Bauerle

Joseph M Stempnik

Timothy John Hartrey

Kerfegar Khurshed Katrak

Richard B Jess

Bryan D Lehman

Robert J Schaller

Jinchun Peng

Bruce A Rogers

Jonathan Sweedler

Zoran Nikolic

James T Purcell

Ansaf Ibrahem Alrabady

Robert Charles Simon, Jr

James L Worthing

John Norman Stockbridge

Kevin M Baltes

William Robert Mayhew

Vivek Mehta

Bahram Younessi

James T Kurnik

Michael L Kociba

Ronald W Van Diepen

Ram Ganapathi

Mario Vincent Maiorana, Jr

Mingguang Yu

Christopher E Whitney

Jeffrey M Kaiser

Thomas M Forest

Donovan L Dibble

Layne K Wiggins

Peter E Wu

Daniel P Grenn

Leonard G Wozniak

Andrew W Baur

Barbara A Shuler

Patrick J O'Leary

Michael J Pitsch

Michael A Turley

Rod Niner

Trenton W Haines

Aubrey Walter Downs, Jr

Ming Zhao

John A Jacobs

Weixin Yan

Jonathan Packard

Roberto De Paula

Ananth Krishnan

James Mason Faucett

Kevin T Sharples

Thyagarajan Sadasiwan

David Dean Tarby

Mark T Hutchinson

Tracey A Bagley-Reed

Sandra J Nelson

Mahesh Balike

Tyrus J Valascho

Xuehan Kong

Steven P Sullivan

This disclosure presents an assisted driving vehicle system, including autonomous, semi-autonomous, and technology assisted vehicles, that can share sensor data among two or more controllers. A sensor can have one communication channel to a controller, thereby saving cabling and circuitry costs. The data from the sensor can be sent from one controller to another controller to enable redundancy and backup in case of a system failure. Sensor data from more than one sensor can be aggregated at one controller prior to the aggregated sensor data being communicated to another controller thereby saving bandwidth and reducing transmission times. The sharing of sensor data can be enabled through the use of a sensor data distributor, such as a converter, repeater, or a serializer/deserializer set located as part of the controller and communicatively coupled to another such device in another controller using a data interface communication channel.

Sharing sensor data between multiple controllers to support vehicle operations

In various examples, activation criteria and/or braking profiles corresponding to automatic emergency braking (AEB) systems and/or collision mitigation warning (CMW) systems may be determined using sensor data representative of an environment to a front, side, and/or rear of a vehicle. For example, activation criteria for triggering an AEB system and/or CMW system may be adjusted by leveraging the availability of additional information with regards to the surrounding environment of a vehicle—such as the presence of a trailing vehicle. In addition, the braking profile for the AEB activation may be adjusted based on information about the presence of and/or location of vehicles to the front, rear, and/or side of the vehicle. By adjusting the activation criteria and/or braking profiles of an AEB system, the potential for collisions with dynamic objects in the environment is reduced and the overall safety of the vehicle and its passengers is increased.

Leveraging rear-view sensors for automatic emergency braking in autonomous machine applications

In various examples, activation criteria and/or braking profiles corresponding to automatic emergency braking (AEB) systems and/or collision mitigation warning (CMW) systems may be determined using sensor data representative of an environment to a front, side, and/or rear of a vehicle. For example, activation criteria for triggering an AEB system and/or CMW system may be adjusted by leveraging the availability of additional information with regards to the surrounding environment of a vehicle&#x2014;such as the presence of a trailing vehicle. In addition, the braking profile for the AEB activation may be adjusted based on information about the presence of and/or location of vehicles to the front, rear, and/or side of the vehicle. By adjusting the activation criteria and/or braking profiles of an AEB system, the potential for collisions with dynamic objects in the environment is reduced and the overall safety of the vehicle and its passengers is increased.

This disclosure presents an assisted driving vehicle system, including autonomous, semi-autonomous, and technology assisted vehicles, that can share sensor data among two or more controllers. A sensor can have one communication channel to a controller, thereby saving cabling and circuitry costs. The data from the sensor can be sent from one controller to another controller to enable redundancy and backup in case of a system failure. In another embodiment, sensor data from more than one sensor can be aggregated at one controller prior to the aggregated sensor data being communicated to another controller thereby saving bandwidth and reducing transmission times. The sharing of sensor data can be enabled through the use of a sensor data distributor, such as a converter, repeater, or a serializer/deserializer set located as part of the controller and communicatively coupled to another such device in another controller using a data interface communication channel.

A control system for a control module of a vehicle includes a first integrated circuit (IC) core of a primary processor that generates a first control signal using a central processing unit (CPU). A second IC core of the primary processor generates a second control signal using a second CPU and generates a remedial control signal based on the first control signal and the second control signal.

Dual core architecture of a control module of an engine

First, second, and third processor modules selectively execute a test having N test states while an ignition system of the vehicle is off. N is an integer greater than one. The N test states each include: the first processor module setting a first output to a first predetermined value for one of the N test states; the second processor module setting a second output to a second predetermined value for the one of the N test states; the third processor module setting a third output to a third predetermined value for the one of the N test states; a predetermined expectation for the one of the N test states; and at least one of the first, second, and third processor modules indicating a fault when a fourth output is different than the predetermined expectation. A control module sets the fourth output based on the first, second, and third outputs.

Processor safety test control systems and methods

A control system according to the principles of the present disclosure includes an operation control module, a fault detection module, a remedial action module, and a reset module. The operation control module controls operation of a vehicle system. The fault detection module detects a fault in the operation control module when the operation control module fails an integrity test. The remedial action module takes a remedial action when the fault is detected. The reset module resets the operation control module when the fault is detected and the remedial action is not taken.

System and method for verifying the integrity of a safety-critical vehicle control system

A system and method for writing a new or replacement public key to a bootloader stored in a memory segment in the memory of a vehicle ECU without having to rewrite the entire bootloader. The method includes defining a key table in the bootloader memory segment includes a number of vacant memory slots that are available to store replacement public keys if they are needed. The key table is a separate section of the bootloader memory segment so that the key table memory slots are not used by the bootloader code.

Method to replace bootloader public key

Preventing spoofing in an automotive network includes monitoring, by electronic control unit, data packets on a bus in the automotive network. Upon determining, in response to the monitoring, that a data packet is from a source other than the electronic control unit, the preventing spoofing in the automotive network includes generating and transmitting a diagnostic message to at least one module in the automotive network over the bus, the diagnostic message instructing the at least one module to take no action on the data packet.

Cyber security in an automotive network

A system and method for securely flashing a controller, where the controller includes at least one main processor and at least one secondary processor, and where the processing duties are distributed between the processors. A programming tool provides a content file to be flashed and a digital signature to the controller. The controller calculates a hash value of the content file, decrypts the digital signature using a public key to generate a decrypted hash value, compares the decrypted hash value to the calculated hash value, and determines that the content file is valid if the decrypted hash code matches the calculated hash value, where one or more of the steps of calculating the hash value, decrypting the digital signature, comparing the decrypted hash value to the calculated hash value and determining that the content file is valid, is performed by the main processor for the secondary processor.

Secured flash programming of secondary processor

A control module includes a predicted torque control module that determines a desired throttle area based on a transmission torque request and a desired predicted torque. A throttle security module determines a throttle limit based on the desired throttle area and the desired predicted torque and determines an adjusted desired throttle area based on the throttle limit. A throttle actuator module adjusts a throttle based on the adjusted desired throttle area.

ECM security strategy for rationalizing and controlling increasing transmission torque requests above driver command

An engine system includes a throttle actuator module and a torque control module. The throttle actuator module controls a throttle actuator based on a desired throttle area. The torque control module determines an actuator torque. The torque control module determines a rate limited torque, a maximum torque, and a minimum torque based on the actuator torque and a predetermined rate of change. The torque control module determines the desired throttle area based on the actuator torque when the rate limited torque is greater than the maximum torque. The torque control module determines the desired throttle area based on the actuator torque when the rate limited torque is less than the minimum torque.

Securing throttle area in a coordinated torque control system

An engine control system of a vehicle comprises a torque module and a chassis request evaluation module. The torque module controls a torque output of an engine based on a driver torque request and selectively increases the torque output based on a chassis torque request. The chassis request evaluation module selectively prevents the increase of the torque output based on at least one of a vehicle speed, a transmission state, and an accelerator pedal position.

Chassis system engine torque requests

Growing community of inventors

Bloomfield Township, MI, United States of America

Mark Henry Costin