DETERMINATION OF RELIABILITY OF VEHICLE CONTROL COMMANDS VIA REDUNDANCY

A vehicle having a control element for the speed, acceleration or direction of the vehicle, two identical or redundant computing devices (e.g., each implemented as a system on chip (SoC)) to separately generate driving commands in parallel during autonomous driving of the vehicle, and a command controller coupled between the control element and the computing devices. In response to the commands from the identical or redundant computing devices, the command controller determines whether the commands are identical (or agree with each other); and if so, the command controller forwards one of the commands to the control element for execution. When there is a mismatch in the commands from the computing devices, the command controller tests the memories of the computing devices to identify a faulty one of the computing devices.