Abstract: The invention relates to a microprocessor circuit arrangement having a watchdog circuit, which monitors the proper program flow for the processor and which must be triggered in specific time intervals by the microprocessor, since otherwise it will reset (reset function) the microprocessor to the program start or the like. For reasons of simplification, it is proposed that when the microprocessor (2) recognizes that a malfunction has occurred, it spuriously triggers the watchdog circuit (5) in a selective manner to release a reset function coming from the watchdog circuit (5).

Abstract: A vehicle occupant safety system, in particular a restraining system such as an airbag, safety-belt tightener or the like, includes a sensor device having at least two sensors, a preprocessing device comprising at least two preprocessing circuits, for the sensor signals, a computing system and a trigger circuit including at least two stages, for a safety device. For providing a high degree of safety with relatively low costs, the computing system is constructed as a single-computer system in such a way that it processes the data of two preprocessing circuits in two programs with staggered timing with respect to one another.

Abstract: In an evaluation process for output signals of an acceleration-sensitive sensor in restraint systems for vehicle occupants, the output signals of the sensor are picked up and evaluated periodically. In a normal, uncritical operating state the evaluation occurs after relatively long intervals of time. If indications suggest a critical operating state, that is, an accident, however the evaluation of the output signals of the sensor occurs at shorter intervals of time.

Abstract: A safety device for vehicle occupants has an operational voltage source, typically the vehicle's battery, and a storage device for electrical energy, typically a capacitor. Several tripping devices, typically ignition tablets, are coupled to the storage device and/or the operational voltage source, for actuating inertial restraining devices, such as airbags, belt tighteners or the like. If the storage device fails, each tripping device is connected for a specified period of time to the operational voltage source by a respective switch. Each switch is triggered by an evaluating device. Therefore, if the storage device fails, as long as the operational voltage source is connected to the safety device, each tripping device and, therefore, inertial restraining device can be actuated.

Abstract: A method of actuating a safety device for vehicle occupants, wherein the safety device has several tripping devices coupled to a capacitor and to passenger restraint devices, such as air bags, seat belts, or the like. The energy supplied by the capacitor to a tripping device is measured upon actuation of that device. If the energy supplied exceeds a predetermined limit, the flow of electric current from the capacitor to the respective tripping device is interrupted. Thus, if an actuated tripping device shunts, the energy of the capacitor is not drained by the shunt, and the capacitor maintains an energy level sufficient to actuate the other tripping devices.

Abstract: A safety device for a vehicle occupant comprising a restraint for the vehicle occupant, a sensing circuit for evaluating a vehicle condition, a control circuit for actuating the restraint in response to a predetermined vehicle condition, and two separate reserve energy storages for supplying electrical energy to the sensing and control circuits, respectively.

Abstract: A voltage supply circuit has an energy reserve, which is charged by a voltage transformer, and a comparator circuit, which controls switching circuit components. When the supply voltage is at its nominal value, a first switching circuit component is closed, with the result, that the energy reserve is operated in open circuit and is charged by the voltage transformer. When the supply voltage drops below a threshold, the comparator circuit opens the first switching circuit component and closes a second switching circuit component with the result that, at this point, the charged energy reserve is available for the voltage supply to the circuit configuration normally supplied with voltage from the supply voltage and the voltage transformer is disconnected from the supply voltage.

Abstract: In a method for controlling the release of a passenger restraint system in a vehicle, an acceleration signal is measured and integrated with respect to time to obtain a velocity signal. A release threshold value for the velocity signal is determined. If the velocity signal then falls below the release threshold value, thus indicating a vehicle collision, the passenger restraint system is released. The release threshold value is controlled depending on the type of accident situation and upon the operating parameters of the vehicle to increase the release sensitivity of the passenger restraint system. For example, the release threshold value is adjusted based on the value of the velocity signal. If the velocity signal decreases in value, then the release threshold is lowered to a more sensitive value.

Abstract: To provide for continuous synchronized operation of a plurality of computer apparatus units (A, B, C) of a computer system, the respective units generate starting signals at predetermined stages in the programs. The starting signals are transmitted from any apparatus unit to any other apparatus unit, and in each apparatus unit, the time of reception of the starting signals is determined and the last-to-arrive starting signal is determined. Time marker signals are generated, and the time marker signals are transmitted from any apparatus to each other apparatus unit, to be compared in each other apparatus unit with locally generated time marker signals to thereby generate synchronizing signals.

Abstract: To prevent spurious operation of a controlled operating element (12), typically a safety element which can be irreversibly triggered, such as a trigger or firing cartridge of a passenger restraint airbag, while providing for reliable operation in case of a crash of a vehicle in which the airbag is installed, a control signal is derived from a computer (10) processing input signals. The transmission of the control signals from the computer (10) to the operating element (12) is through a time delay stage (30) which has a time delay of sufficient length to permit the computer to correct, if necessary, signals from its output (16) and to carry out tests on the output signals from the computer apparatus. An evaluation circuit (18) continuously compares the output signals with check values. The check values may be derived from, for example a second computer similar to the computer, or from stored representative values.

Abstract: To permit rapid checking of possible malfunctions or erroneous computations in data processing cycles, in which a plurality of computer units carry out processing of data, especially to supervise and control safety apparatus, each one of the units generate intermediate information data at predetermined time intervals, which intermediate information data are transmitted to each one of the other units. The so-received intermediate information data are buffer-stored and compared in all the units with locally generated check data. If the comparison indicates coincidence, computation is continued through subsequent processing cycles; if an error is detected, at least that computer unit which processes the data erroneously is reset to repeat at least the preceding computation cycle, and the unit which detected the error is placed into a "set-and-hold" mode.

Abstract: A control unit (7) for an internal combustion engine (ICE) (1) in a motor vehicle includes a control parameter computation unit 6 which provides output signals controlling the ignition instant of an ignition unit (5) and the fuel injection characteristics of the fuel injection unit 4, thereby controlling operation of the ICE. Depending on an operating parameter of the ICE (1), preferably load, the ignition angle is corrected by an ignition angle correction unit (11) by adding a correction factor, dynamically, as the load changes. The correction factor is determined, preferably, by sensing incremental changes in loading and, equally incrementally, changing the ignition angle, repetitively, as the loading changes. The method can be realized entirely by software within a known ignition angle correction unit (7).

Abstract: An electronic arrangement is disclosed for generating a fuel metering signal which is formed by applying the formula ti=f[x.sub.n, g (U.sub.Batt, y)]. Accordingly, the battery voltage is corrected by means of a characteristic field. In this arrangement, allowance can be made for particularly speed and/or load dependent values in addition to the battery voltage.

Abstract: A method of actuating a safety device for vehicle occupants, wherein the safety device has several tripping devices coupled to a capacitor and to passenger restraint devices, such as air bags, seat belts, or the like. The energy supplied by the capacitor to a tripping device is measured upon actuation of that device. If the energy supplied exceeds a predetermined limit, the flow of electric current from the capacitor to the respective tripping device is interrupted. Thus, if an actuated tripping device shunts, the energy of the capacitor is not drained by the shunt, and the capacitor maintains an energy level sufficient to actuate the other tripping devices.

Abstract: In a method for controlling the release of a passenger restraint system in a vehicle, an acceleration signal is measured and integrated with respect to time to obtain a velocity signal. A release threshold value for the velocity signal is determined. If the velocity signal then falls below the release threshold value, thus indicating a vehicle collision, the passenger restraint system is released. The release threshold value is controlled depending on the type of accident situation and upon the operating parameters of the vehicle to increase the release sensitivity of the passenger restraint system. For example, the release threshold value is adjusted based on the value of the velocity signal. If the velocity signal decreases in value, then the release threshold is lowered to a more sensitive value.