Abstract: A method for carrying out a control device monitoring, a program flow control being implemented for at least one event-synchronous process in the control device monitoring. The monitoring module is developed for carrying out a control device monitoring, A program flow control is implemented for at least one event-synchronous process in the control device monitoring.

Abstract: A method for operating a shutoff device for a device, in particular an internal combustion engine and/or an electric machine, in which an operating element for initiating a shutoff operation is provided, and in which a transmission path is provided via which a shutoff signal is transmitted from the operating element to the device in order to deactivate the device. The shutoff device is checked for proper functioning at least in part automatically, by automatically transmitting a shutoff signal, in particular from the operating element via the transmission path to the device.

Abstract: A method for operating an internal combustion engine, in which fuel is injected using an injection device into a combustion chamber of a cylinder of the internal combustion engine, a fuel quantity to be injected being ascertained as a function of individual properties of the injection device, and in which functional monitoring is performed, in which an actual torque is ascertained on the basis of performance quantities of the internal combustion engine and monitored for a deviation from a permissible torque. The individual properties of the injection device are taken into consideration when ascertaining the actual torque, where the functional monitoring is improved.

Abstract: A method for carrying out a control device monitoring, a program flow control being implemented for at least one event-synchronous process in the control device monitoring. The monitoring module is developed for carrying out a control device monitoring, A program flow control is implemented for at least one event-synchronous process in the control device monitoring.

Abstract: A method for distributing software modules to control units, the software modules being assigned to the control units while taking safety-relevant classification features into consideration.

Abstract: A method for monitoring torque in a hybrid drive made up of an internal combustion engine having an associated engine control unit and an intrinsically safe electric drive having an associated control unit, a protected communication taking place in which the engine control unit emits a setpoint torque to the control unit of the intrinsically safe electric drive and receives a status signal from it; and the engine control unit emitting an error signal in response to the exceeding of a permissible torque or in response to a negative status signal. If the intrinsic safety of the electric drive is used for the constant torque monitoring according to the specifications of the setpoint torque within the control unit, the data flow between the engine control unit of the internal combustion engine and the intrinsically safe electric drive may be reduced. As a result, the monitoring effort for the communication that is carried out in protected form between the engine control and the control unit is also reduced.

Abstract: A method for operating an internal combustion engine, in which fuel is injected into a combustion chamber of a cylinder of the internal combustion engine in at least two partial injections, and in which an actual torque supplied by the internal combustion engine is ascertained from operating variables of the internal combustion engine, this actual torque being compared to an admissible torque, and an error response being initiated if the actual torque is at a predefined ratio to the admissible torque. In the ascertainment of the actual torque, taking into consideration a torque efficiency of the respective partial injection is provided, whereby a more accurate monitoring of the actual torque is made possible.

Abstract: A method for operating an internal combustion engine, in which fuel is injected using an injection device into a combustion chamber of a cylinder of the internal combustion engine, a fuel quantity to be injected being ascertained as a function of individual properties of the injection device, and in which functional monitoring is performed, in which an actual torque is ascertained on the basis of performance quantities of the internal combustion engine and monitored for a deviation from a permissible torque. The individual properties of the injection device are taken into consideration when ascertaining the actual torque, where the functional monitoring is improved.

Abstract: A method for operating a shutoff device for a device, in particular an internal combustion engine and/or an electric machine, in which an operating element for initiating a shutoff operation is provided, and in which a transmission path is provided via which a shutoff signal is transmitted from the operating element to the device in order to deactivate the device. The shutoff device is checked for proper functioning at least in part automatically, by automatically transmitting a shutoff signal, in particular from the operating element via the transmission path to the device.

Abstract: A method for operating an internal combustion engine, in which fuel is injected into a combustion chamber of a cylinder of the internal combustion engine in at least two partial injections, and in which an actual torque supplied by the internal combustion engine is ascertained from operating variables of the internal combustion engine, this actual torque being compared to an admissible torque, and an error response being initiated if the actual torque is at a predefined ratio to the admissible torque. In the ascertainment of the actual torque, taking into consideration a torque efficiency of the respective partial injection is provided, whereby a more accurate monitoring of the actual torque is made possible.

Abstract: A method for operating an internal combustion engine, including the following steps: forming a value for a maximum admissible torque, forming a dimension figure for the actual torque and comparing the dimension figure to the value and triggering an error response if the actual torque exceeds the maximum admissible torque. The value for the maximum admissible torque is developed from a first approximation value and an estimated value for the torque contribution of an intervention of a fault regulator. Also, a control unit as well as its use.

Abstract: A method is provided for operating an internal combustion engine 10 in overrun condition, which method includes the steps of: release of a monitoring of a control signal for a power actuator of the internal combustion engine when predetermined release conditions have been satisfied, which include the exceeding of a release rotary speed of the internal combustion engine; after the release, comparing a control signal for the power actuator of the internal combustion engine to a threshold value, and triggering an error response if the control signal exceeds the threshold value. The method provides that the release speed is varied as a function of the intervention of an idling speed control in the formation of the control signal. Also provided is a control unit which controls such a method.

Abstract: A method for operating an internal combustion engine, including the following steps: forming a value for a maximum admissible torque, forming a dimension figure for the actual torque and comparing the dimension figure to the value and triggering an error response if the actual torque exceeds the maximum admissible torque. The value for the maximum admissible torque is developed from a first approximation value and an estimated value for the torque contribution of an intervention of a fault regulator. Also, a control unit as well as its use.

Abstract: A method is for making a diagnosis as to signal plausibility in a speed sensor of a motor vehicle. In the method, the speed sensor outputs a pulse sequence to an evaluation circuit in dependence upon the speed of the vehicle and, in a steady-state operating condition of the motor vehicle, a ratio is formed between the determined speed and an engine rpm and the ratio is averaged over a pregiven time. A plausibility is determined only when the formed mean value lies in a value range permissible for the steady-state operating condition.

Abstract: A method is provided for operating an internal combustion engine 10 in overrun condition, which method includes the steps of: release of a monitoring of a control signal for a power actuator of the internal combustion engine when predetermined release conditions have been satisfied, which include the exceeding of a release rotary speed of the internal combustion engine; after the release, comparing a control signal for the power actuator of the internal combustion engine to a threshold value, and triggering an error response if the control signal exceeds the threshold value. The method provides that the release speed is varied as a function of the intervention of an idling speed control in the formation of the control signal. Also provided is a control unit which controls such a method.

Abstract: A method and an arrangement for monitoring a deceleration function of a control unit of a motor vehicle affect as little as possible the operability of the control unit in the case of a fault. The deceleration function of a control unit (1) of a motor vehicle inputs a vehicle deceleration independently of the actuation of a vehicle brake operator-controlled element. The input is transmitted via a deceleration interface (5) to a brake system (10) of the vehicle to realize the input. A check is made as to whether a brake intervention of the brake system (10), which is initiated by the deceleration function, is permissible and, at first, only the deceleration function is deactivated when the brake intervention is impermissible.

Abstract: A method and an arrangement for monitoring a deceleration function of a control unit of a motor vehicle affect as little as possible the operability of the control unit in the case of a fault. The deceleration function of a control unit (1) of a motor vehicle inputs a vehicle deceleration independently of the actuation of a vehicle brake operator-controlled element. The input is transmitted via a deceleration interface (5) to a brake system (10) of the vehicle to realize the input. A check is made as to whether a brake intervention of the brake system (10), which is initiated by the deceleration function, is permissible and, at first, only the deceleration function is deactivated when the brake intervention is impermissible.

Abstract: A method is for making a diagnosis as to signal plausibility in a speed sensor of a motor vehicle. In the method, the speed sensor outputs a pulse sequence to an evaluation circuit in dependence upon the speed of the vehicle and, in a steady-state operating condition of the motor vehicle, a ratio is formed between the determined speed and an engine rpm and the ratio is averaged over a pregiven time. A plausibility is determined only when the formed mean value lies in a value range permissible for the steady-state operating condition.