| CPC B60W 50/029 (2013.01) [B60W 50/0205 (2013.01); B60W 50/0225 (2013.01); B60W 2050/0006 (2013.01)] | 11 Claims |

|
1. A vehicle control device comprising a master ECU and one or more client ECUS,
wherein the master ECU generates a safety process list on a basis of a predetermined failure operation pattern and transmits the safety process list to each of the client ECUs when detecting a failure of any one of the client ECUs,
the safety process list includes one or more safety processes and an execution start time limit corresponding to each of the safety processes,
each of the client ECUs switches an operation mode from a normal mode to a failure operation mode in response to reception of the safety process list, and starts execution of each of the safety processes by a corresponding execution start time limit,
the failure operation pattern is configured such that each of the safety processes is executed by a client ECU having a memory capacity capable of executing the safety process, and
the failure operation pattern is configured such that a same safety process is not executed by a plurality of client ECUs.
|