Abstract: A method for improving safety precautions for vehicles. The method includes: obtaining, from one or from each of a plurality of vehicles moving in an at least partially automated manner, if a safety metric is fulfilled at a time point in the vehicle, scenario information and safety metric information; determining a relevance distribution of at least one safety metric of the scenario present at that time point, which indicates how often a respective safety metric is or has been fulfilled in that scenario; comparing the determined relevance distribution to relevance distributions of at least one already existing scenarios; determining the scenario to be a potential trigger event if the relevance distribution of the scenario present at that time point matches a relevance distribution of at least one already existing scenario for which a trigger event is defined; and providing information about the potential trigger event.

Abstract: A method for validating safety precautions for vehicles moving in an at least partially automated manner, based on triggering events and safety metrics. The method includes: receiving, from one or from each of a plurality of vehicles moving in an at least partially automated manner, operating data of the vehicle present and/or recorded at the time, regarding the triggering event and/or safety metric, if at the time in the vehicle, one or at least one of a plurality of triggering events associated therewith is met and/or one or at least one of a plurality of safety metrics associated therewith exceeds or falls below a threshold value; analyzing the received operating data, correlations of triggering events, occurring at more than a predetermined frequency, and/or safety metrics being determined with respect to static and/or dynamic vehicle data of the one or of the plurality of vehicles; and providing the determined correlations.

Abstract: A method for controlling a robotic device. In the method, for a version of a control software which is not the initial version of the control software for which the test values delivered by the tests at least partially do not fall within predefined ranges, it is checked whether that version of the control software fulfills safety criteria that have been created for a previous version (and are fulfilled by that version) for which the test values delivered by the tests at least partially do not fall within the predefined ranges, but was safe. If this is the case, the robotic device is controlled with that version of the control software.

Abstract: A method for testing a, in particular safety-relevant, technical system, in particular encompassing software. The system is represented by a model encompassing at least two or more components. An assumption of a respective component regarding the safety-relevant system, and a guarantee of a respective component to the safety-relevant technical system, are specified by a safety contract. Executable program code is generated based on at least one assumption and based on at least one guarantee. The safety-relevant technical system is tested by executing the program code.

Abstract: A computer-implemented method for processing data for applications in the field of cloud computing and/or edge computing, for vehicles. The method includes: providing multiple computing services using at least two different hardware resources, and using the multiple computing services.

Abstract: A method for modeling the surroundings of an automated vehicle in which environment information is continuously received from currently available information sources. Each information source provides pieces of environment information. A formal assumption and a formal guarantee is associated with each piece of environment information in such a way that it is guaranteed, if the formal assumption associated with the respective piece of environment information is fulfilled, that the piece of environment information fulfills the formal guarantee associated with it. Each information source provides the associated formal assumptions and formal guarantees for the pieces of environment information it supplies. A piece of environment information is used for calculating the world model at a given point in time only if the formal assumption associated with this piece of environment information is fulfilled at this point in time.

Abstract: A processing system encompasses several processing devices and a comparison device. A method for controlling the processing system encompasses: processing of identical information items by the processing devices using associated processing processes; furnishing a characteristic value of each processing process, respectively as a function of the processing that has occurred; and comparing the characteristic values by way of the comparison device and determining a defectively operating processing process on the basis of the comparison. The defectively operating processing process is replaced by a processing process restarted on the same processing device.

Abstract: A computer-implemented method for testing an, in particular, safety-relevant, technical system, in particular including software and/or hardware components. The method includes the following steps: providing a model of the technical system; providing a set of requirements to the technical system; converting a particular requirement into at least one formal expression of at least one formal logic, the formal logic being selected from a logic set, which includes at least two formal logics, based on properties of the requirements; checking whether a particular requirement has been met by the model, the checking taking place by carrying out at least one program solver for a particular formal expression.

Abstract: A method for testing a, in particular safety-relevant, technical system, in particular encompassing software. The system is represented by a model encompassing at least two or more components. An assumption of a respective component regarding the safety-relevant system, and a guarantee of a respective component to the safety-relevant technical system, are specified by a safety contract. Executable program code is generated based on at least one assumption and based on at least one guarantee. The safety-relevant technical system is tested by executing the program code.

Abstract: A method for agreeing to a collaboration between a first system and a second system. The method includes: assumptions of the first system with respect to the second system, and guarantees of the first system to the second system, are transmitted by the first system, assumptions of the second system with respect to the first system, and guarantees of the second system to the first system, are transmitted by the second system, if reciprocal assumptions and guarantees correspond to one another, a digital safety contract is concluded between the first system and the second system, and the safety contract is documented in a transaction database.

Abstract: A computer-implemented method for model-based analysis, in particular safety analysis, of a technical system, in particular of a control device for a semiautonomous or autonomous vehicle. The method includes: furnishing a model that characterizes the system; furnishing first information items that characterize dependences between different components and/or subsystems of the system; ascertaining at least one state that at least one component and/or subsystem of the system, and/or the system, can assume; ascertaining, in particular based on the first information items and/or on the at least one state, a method for describing a behavior of the system.

Abstract: A method/device for recognizing a microprocessor hardware error, including comparing a first application's first result, running on a first microprocessor, with a second application's second result, running on the first/second microprocessor, with a microcontroller, providing comparison strategies, the hardware error being recognized as a function of the comparison, the microcontroller receiving a first message from the first microprocessor, and receiving a second message from the first microprocessor if the second application runs on the first microprocessor, or receives a first message from the second microprocessor if the second application runs thereon, the first message containing first comparison strategy information and first result information of a first function calculation, the second message containing second comparison strategy information and second result information of a second function calculation, the first and second strategy information being compared, the first and second result informatio

Abstract: A processing system encompasses several processing devices and a comparison device. A method for controlling the processing system encompasses: processing of identical information items by the processing devices using associated processing processes; furnishing a characteristic value of each processing process, respectively as a function of the processing that has occurred; and comparing the characteristic values by way of the comparison device and determining a defectively operating processing process on the basis of the comparison. The defectively operating processing process is replaced by a processing process restarted on the same processing device.

Abstract: A method/device for configuring at least one execution unit for detecting a state of operation of the one execution unit, the method/device comprising at least assigning a first replica of an item of application software for the purpose of execution on at least one computing core of the execution unit depending on information relating to at least one item of hardware or relating to at least one operating system of the execution unit assigning a second replica of the application software for the purpose of execution on the computing core of the execution unit depending on the information relating to the at least one item of hardware or relating to the operating system of the execution unit.

Abstract: A method/device for recognizing a microprocessor hardware error, including comparing a first application's first result, running on a first microprocessor, with a second application's second result, running on the first/second microprocessor, with a microcontroller, providing comparison strategies, the hardware error being recognized as a function of the comparison, the microcontroller receiving a first message from the first microprocessor, and receiving a second message from the first microprocessor if the second application runs on the first microprocessor, or receives a first message from the second microprocessor if the second application runs thereon, the first message containing first comparison strategy information and first result information of a first function calculation, the second message containing second comparison strategy information and second result information of a second function calculation, the first and second strategy information being compared, the first and second result informatio

Abstract: An antenna includes first and second arrays spaced apart by a dielectric slab having a predetermined thickness, each of the first and second arrays provided from antenna elements having a linear polarization with the antenna elements in said first array disposed orthogonally to the antenna elements in said second array. The antenna further includes a feed circuit coupled to said first and second antenna arrays to provide said first and second antenna arrays having a phase relationship such that the antenna receives and transmits signals having circular polarization and dielectric material having differing characteristics for providing an impedance transformation that varies with scan angle in accordance with the a scan impedance of said antenna thereby providing the antenna having a scan impedance which is substantially the same over a scan sector while at the same time preserving the response characteristic of the antenna to signals having circular polarization.

Abstract: An oral brush with a handle having a longitudinal axis and a head mounted on the handle, the head including an elongated hub extending generally axially from the handle and bristles mounted in the hub, including bristles along most of the length of the hub which extend radially in all directions from the hub and which taper down in length from the base end of the hub to the front tip of the hub, and including bristles extending from the front tip of the hub in all directions as generally semispherical radii, the free ends of the bristles of the head defining a conical or bullet-shaped envelope.