Apple Inc.

Robert M Cammarata

Diomidis Katzourakis

Huibert Mees

Bo Guo

An actuator system includes an actuator, a first actuator controller that is operable to control operation of the actuator and is operable to determine a first value for a parameter that relates to operation of the actuator, a second actuator controller that is operable to control operation of the actuator and is operable to determine a second value for the parameter, and at least one additional component that is operable to determine a third value for the parameter. A fault is identified in response to determining that the first value does not agree with at least one of the second value or the third value. In response to identification of the fault, the first actuator controller changes from an activated state to a deactivated state and the second actuator controller changes from a deactivated state an activated state.

Redundant actuator system

A vehicle actuator system includes an actuator, a first actuator controller that is operable to control operation of the actuator and is operable to determine a first value for a parameter that relates to operation of the actuator, a second actuator controller that is operable to control operation of the actuator and is operable to determine a second value for the parameter, and at least one additional component that is operable to determine a third value for the parameter. A fault is identified in response to determining that the first value does not agree with at least one of the second value or the third value. In response to identification of the fault, the first actuator controller changes from an activated state to a deactivated state and the second actuator controller changes from a deactivated state an activated state.

Redundant vehicle actuator system

A method for controlling a vehicle includes operating a braking system in robotic control state, determining that an emergency stop state is to be entered by the braking system, entering the emergency stop state upon determining that all conditions from a group of state entry conditions are satisfied, decelerating the vehicle using the braking system while in the emergency stop state, determining, while in the emergency stop state, that all conditions from a group of state exit conditions are satisfied, and exiting the emergency stop state in response to determining that all conditions from the group of state exit conditions are satisfied.

Growing community of inventors

Sunnyvale, CA, United States of America

Robert M Cammarata