ELECTRONICALLY CONTROLLED BRAKE SYSTEM > FAIL-SAFE CHART |

| FAIL-SAFE FUNCTION |
If a malfunction occurs in the skid control ECU, sensor signal, or actuator, rest normally operating parts will maintain brake control.
If the brake control is stopped under such conditions as when trouble occurs with a hydraulic pressure source, the pressure generated in the master cylinder by the driver is applied to the wheel cylinder to ensure braking force.
A power back-up unit is built in as an additional power source to supply stable power to the system.
If the regenerative brake alone does not operate under such conditions as a communication error with the HV control ECU, control is switched so that all braking force is generated with the hydraulic pressure brake.
| Trouble area | Generated braking force |
| Skid control ECU | Normally operating parts will control brake and generate braking force |
| Hydraulic pressure controlling parts | Normally operating parts will control brake and generate braking force |
| Hydraulic pressure source | Braking force generated by the driver |