Abstract: The invention relates to a method for verifying generated software (1), in particular of a computer program, which software (1) is produced by means of a software generator (2), wherein the software (1) is produced by the software generator (2) on the basis of a system description (3). The invention also relates to a verifying device for carrying out such a method. In order to verify the software (1) a verifying device (4) is provided, wherein a) the system description (3) is read into the verifying device (4), b) the verifying device (4) creates one or more software code patterns (5) on the basis of the system description (3), c) the source text of the generated software (1) is read into the verifying device (4), and d) the verifying device (4) checks the source text (1) for the presence of all software code patterns (5).

Abstract: A method for executing safety-relevant and non-safety-relevant software components on a hardware platform comprising a computer, memory and a monitoring component that operates independently of the computer. The safety-relevant software component erects a memory protection against access of a non-safety-relevant function to at least one area of the memory of the safety-relevant function before execution of the non-safety-relevant software component, so that the non-safety-relevant software component does not have access to the areas of the memory being used for safety-relevant components. After the return from the non-safety-relevant component, the memory protection is deactivated and the monitoring function monitors the safety-relevant function for its proper operation.

Abstract: A method for executing safety-relevant and non-safety-relevant software components on a hardware platform comprising a computer, memory and a monitoring component that operates independently of the computer. The safety-relevant software component erects a memory protection against access of a non-safety-relevant function to at least one area of the memory of the safety-relevant function before execution of the non-safety-relevant software component, so that the non-safety-relevant software component does not have access to the areas of the memory being used for safety-relevant components. After the return from the non-safety-relevant component, the memory protection is deactivated and the monitoring function monitors the safety-relevant function for its proper operation.

Abstract: A method for establishing communication schedules for a distributed real-time computer system comprising nodal computers, wherein: a) a grid (RAS) is created, which contains all of the parameters necessary to enable basic communication between nodes (KR1 . . . KR5) of a cluster (CLU); b) nodal communication schedules (KPG; KP1, KP2) for all nodes planned to be used as invariant components (KR2; KR2, KR3) are derived from the grid (RAS) and all parameters of the grid are copied and node-specific parameters are added; and c) cluster communication schedules (CP1, CP2; CL1, CL2) are derived from the nodal communication schedules (KPG; KP1, KP2), which contain, in addition to all parameters of the grid and the node-specific parameters of the invariant components, those parameters which are relevant to the remaining nodes of the cluster.

Abstract: A method for establishing communication schedules for a distributed real-time computer system comprising nodal computers, wherein: a) a grid (RAS) is created, which contains all of the parameters necessary to enable basic communication between nodes (KR1 . . . KR5) of a cluster (CLU); b) nodal communication schedules (KPG; KP1, KP2) for all nodes planned to be used as invariant components (KR2; KR2, KR3) are derived from the grid (RAS) and all parameters of the grid are copied and node-specific parameters are added; and c) cluster communication schedules (CP1, CP2; CL1, CL2) are derived from the nodal communication schedules (KPG; KP1, KP2), which contain, in addition to all parameters of the grid and the node-specific parameters of the invariant components, those parameters which are relevant to the remaining nodes of the cluster.