US Patent 9174649 Redundancy for automated vehicle operations

A vehicle sub-system controller is configured to receive a first message and a second message, wherein the first message includes at least a command for the controller, and the second message includes at least a target value for the controller to achieve. A fault may be detected with respect to the first message; and an adjustment to the sub-system may be locally determined in the sub-system controller to achieve the target value.