Gm Global Technolgoy Operations, Inc.

Rami I Debouk

Mutasim Abdurrahman Salman

Ansaf Ibrahem Alrabady

Barbara J Czerny

Jeffrey Joyce

William C Lin

Yuen-Kwok Chin

Balarama Vempaty Murty

Mark N Howell

Steven W Holland

Xiaodong Zhang

Joseph Gerard D'Ambrosio

Padma Sundaram

Stephen Marc Baker

Bakhtiar Brian Litkouhi

Upali Priyantha Mudalige

Sanjeev Manubhai Naik

Yilu Zhang

Xidong Tang

Pulak Bandyopadhyay

Markus Jochim

Thomas E Fuhrman

Massimo Osella

Soumen De

Cem U Saraydar

Keun Jae Kim

Lawrence E Peruski

Gurmitsingh M Banvait

Dean C Degazio

Sabyasachi Bhattacharya

Debprakash Patnaik

Pradyumna K Mishra

George Paul Montgomery, Jr

Samuel E Graham

Kevin M O′Dea

Vijaya Vittal Ramachandra

Systems and methods are provided for effecting control through multi-stage voting. A control system may be in communication with an actuator device responsive to a voted command. A multi-stage voting system may be configured to determine the voted command. A set of controllers and a monitor controller may provide commands to the multi-stage voting system. The multi-stage voting system includes logic with a first stage that compares the commands of the set of controllers to each other, and a second stage that compares at least one of those commands to the monitor command. The multi-stage voting system delivers the voted command to the actuator device based on the comparisons made in the first and second stages. The actuator device effects an operation in response to the voted command.

Multi-stage voting control

An automotive vehicle includes a vehicle steering system, an actuator configured to control the steering system, a first controller, and a second controller. The first controller is in communication with the actuator. The first controller is programmed with a primary automated driving system control algorithm and is configured to communicate an actuator control signal based on the primary automated driving system control algorithm. The second controller is in communication with the actuator and with the first controller. The second controller is configured to, in response to a first predicted vehicle path based on the actuator control signal deviating from a current lane, control the actuator to maintain a current actuator setting. The second controller is also configured to, in response to the first predicted vehicle path being within the current lane, control the actuator according to the actuator control signal.

Automated lane keeping co-pilot for autonomous vehicles

A fault tolerant controller system includes a first controller and a second controller. One of the first and second controllers designated as a primary controller for generating control signals intended to control actuation devices on a vehicle under non-fault operating conditions, and the other of the first and second controllers designated as a secondary controller generating control signals intended to control actuation devices on the vehicle. The actuation devices are responsive only to the designated primary controller. An error is detected in the primary controller and a message is transmitted from the faulty controller to the non-faulty controller identifying the error. The non-faulty controller is subsequently designated as the primary controller. The control signals including an identifier that identifies the non-faulty controller as the designated primary controller. In response to detecting the error, the faulty controller is reset to operate in a safe operating mode as the secondary controller.

Primary controller designation in fault tolerant systems

The present disclosure relates to an automated system for use in connection with longitudinal deceleration, longitudinal acceleration, and lateral acceleration functions. The system includes an interface receiving signals from and transmitting signals to a controller. The system also includes a safety kernel system comprising safety kernel software and a set of safety rules. Also disclosed are methods for use in a motion control system in connection with vehicle deceleration, acceleration, and lateral acceleration. The methods in some cases include receiving an initial request into a safety kernel software and determining whether the safety kernel software has received an override. The methods can also include detecting a violation of any primary safeguards defined by the safety kernel software, detecting a violation within a set of secondary safeguards defined by the safety kernel software, and adjusting the initial request to a modified level; and transmitting the modified level to an actuator.

Methods and apparatus for isolating safety functions in a motion control system for a vehicle

A method and system are disclosed herein for confirming a potentially unintended command given to a vehicle. The method includes, but is not limited to, receiving a command from an operator configured to cause actuation of a vehicle system. The method further includes, but is not limited to, detecting a condition of the vehicle. The method further includes, but is not limited to, determining, with a processor, that the command is inconsistent with the condition. The method still further includes, but is not limited to alerting the operator that the command is inconsistent with the condition.

Systems and methods for confirming a potentially unintended command given to a vehicle

A method of controlling an actuator includes developing a sequence of actuation commands S(t)=C(t, t), C(t, t), . . . , C(t, t) obtained from data sensed before time tfor controlling the actuator at different time intervals (t, t), (t, t), . . . , (t, t). The sequence of actuation commands is transmitted to and stored in memory of an actuation ECU, which then applies the actuation command for time interval (t, t). If a fault affects a sensor, a control ECU or data communication therebetween, the actuation ECU will not receive an updated sequence of actuation commands S(t) at time t. If the updated actuation command sequence, the actuation ECU applies the actuation command for the time intervals (t, t), . . . , (t, t) from the sequence of actuation commands S(t) that is stored in the memory of the actuation ECU.

Method and system for limited time fault tolerant control of actuators based on pre-computed values

A method for ensuring operation of a limited-ability autonomous driving enabled vehicle includes monitoring a plurality of specific conditions necessary for preferred and reliable use of limited-ability autonomous driving, and initiating a fault handling and degradation strategy configured to maneuver the vehicle to a preferred state if the driver is unable to manually control the vehicle when at least one of the specific conditions is either violated or will become violated.

Method and system for ensuring operation of limited-ability autonomous driving vehicles

A system and method for providing autonomous and remote vehicle maintenance and repair. The system employs an on-board diagnosis and prognosis module that monitors one or more vehicle buses to identify trouble codes and other information indicating a vehicle problem. The on-board module causes a telematic device on the vehicle to broadcast a message including a problem code that identifies the problem the vehicle is having. A remote repair center may receive the message and may identify a software upgrade patch associated with the problem that can be transmitted to the vehicle to upgrade its software to correct the problem. Also, the message may be received by another vehicle that is part of a broadcast network that has previously received the software upgrade patch to fix a problem on that vehicle, where the receiving vehicle may transmit the software upgrade patch to the vehicle having the problem.

Autonomous vehicle maintenance and repair system

A system and method for enhancing vehicle diagnostic and prognostic algorithms and improving vehicle maintenance practices. The method includes collecting data from vehicle components, sub-systems and systems, and storing the collected data in a database. The collected and stored data can be from multiple sources for similar vehicles or similar components and can include various types of trouble codes and labor codes as well as other information, such as operational data and physics of failure data, which are fused together. The method generates classes for different vehicle components, sub-systems and systems, and builds feature extractors for each class using data mining techniques of the data stored in the database. The method also generates classifiers that classify the features for each class. The feature extractors and feature classifiers are used to determine when a fault condition has occurred for a vehicle component, sub-system or system.

Aggregated information fusion for enhanced diagnostics, prognostics and maintenance practices of vehicles

A system and method for providing real-time traffic information using a wireless vehicle-to-vehicle communications network. A vehicle includes a plurality of sensors that detect other vehicles around the vehicle. The wireless communications system on the vehicle uses the sensor signals to calculate a traffic condition index that identifies traffic information around the vehicle. The vehicle broadcasts the traffic condition index to other vehicles and/or road side infrastructure units that can present the information to the vehicle driver, such as in a navigation system, and/or rebroadcast the traffic information to other vehicles. The traffic condition index can be calculated using the speed of the surrounding vehicles, posted speed limits, the distance between the surrounding vehicles and the traffic density of the surrounding vehicles.

Real time traffic aide

A control system and method for use in vehicles, such as automotive vehicles. The control system and method is particularly adapted for use in vehicles having by-wire control systems. The control system uses three system controllers. Each of the controllers is adapted to receive redundant control inputs from at least one input device, such as a steering actuator, an accelerator actuator and a brake actuator. Each controller is adapted to receive a different unprocessed actuator sensor signal and a processed actuator sensor signal which are associated with the input device. Each controller may also be adapted to receive a sensor status signal which is also associated with the input device. In accordance with the method of the invention, these signals may be used to determine a sensor signal which may be used as the basis for control of control systems or components in response to the input device. Depending on the status of these signals, the sensor signal used for control may comprise the processed sensor signal or a resolved sensor signal. The sensor signal used for control may be determined by implementing a voting process in conjunction with the controllers which utilizes both the unprocessed sensor signals and the processed sensor signals.

Vehicle control system and method

A system and method for controlling access to, and especially protecting against unauthorized attempts to provide input to, e.g., program, or elicit output from, a vehicular or other mobile device (), such as an electronic control unit (ECU), wherein a determined location of the device () or an inputted user acknowledgment provides a basis or an additional basis for allowing or denying the attempt at access.

System and method for controlling access to mobile devices

Growing community of inventors

Dearborn, MI, United States of America

Rami I Debouk