Abstract: A computer-implemented method for operating an approval manager for approving control unit functions of different safety levels in a control unit of a technical system. The method includes: carrying out diagnostic functions in the control unit, wherein a safety level is assigned to each of the diagnostic functions; depending on the detection of a fault event or a functionality by the relevant diagnostic function, adjusting an associated status variable in a status variable memory area assigned to the safety level of the diagnostic function; carrying out a control unit function, which is assigned to a particular safety level, depending on one or more associated status variables, wherein only status variables which are stored in status variable memory areas assigned to the safety level of the control unit function or higher safety levels are taken into account.

Abstract: In a method for determining deadlock-critical relations between networked components of a vehicle system, a graph, which at least partially represents the inhibit relations defined in the vehicle system and which has nodes and edges, is used, in which a classification takes place of at least a portion of the edges on the basis of the properties of the edges and the nodes connected by the edges, a prioritization of the edges on the basis of the classification takes place, and a determination of shortest deadlock-critical cycles for all nodes and at least some of the edges on the basis of the prioritization is implemented.

Abstract: Methods for operating a management system that manages a large number of first function modules and second function modules. An inhibitor module I sets first control statuses to designating blocking when associated events are detected by an event detecting device, and then the management system no longer makes associated first function modules available for execution. The inhibitor module I sets second control statuses to designating executable when associated events are detected by an event detecting device, and then the management system makes associated second function modules available for execution.

Abstract: In a method for determining deadlock-critical relations between networked components of a vehicle system, a graph, which at least partially represents the inhibit relations defined in the vehicle system and which has nodes and edges, is used, in which a classification takes place of at least a portion of the edges on the basis of the properties of the edges and the nodes connected by the edges, a prioritization of the edges on the basis of the classification takes place, and a determination of shortest deadlock-critical cycles for all nodes and at least some of the edges on the basis of the prioritization is implemented.

Abstract: A method for controlling the sequence of a plurality of functions which are executable on at least two interacting devices is provided, first of the functions being implemented on a first device and the second of the functions being implemented on a second device. A system for implementing the method is provided, including an administrative unit which controls a sequence of the functions in such a manner that it prevents a first function and a second function which interfere with one another from simultaneously running.

Abstract: A control device and a method for operating a control device which contains function modules, a scheduler and a priority manager. The control device is connected via data lines to a system to be controlled. The priority manager assigns to the modules modifiable priorities which are then taken into account when the modules are activated by the scheduler.

Abstract: A method for controlling the sequence of a plurality of functions which are executable on at least two interacting devices is provided, first of the functions being implemented on a first device and the second of the functions being implemented on a second device. A system for implementing the method is provided, including an administrative unit which controls a sequence of the functions in such a manner that it prevents a first function and a second function which interfere with one another from simultaneously running.

Abstract: Methods for operating a management system that manages a large number of first function modules and second function modules. An inhibitor module I sets first control statuses to designating blocking when associated events are detected by an event detecting device, and then the management system no longer makes associated first function modules available for execution. The inhibitor module I sets second control statuses to designating executable when associated events are detected by an event detecting device, and then the management system makes associated second function modules available for execution.

Abstract: A control unit for a system and a method of operating a control unit have modules that are activated. Before activation of a certain module, inquiries are made to detect cross-dependencies with other modules that have already been activated. To do so, a first storage device and a second storage device containing this information are provided. A scheduler prevents modules which interfere with one another from being activated simultaneously.

Abstract: Method and arrangement for operating an internal combustion engine (10) which is operable in several operating modes, especially an internal combustion engine (10) having direct injection or intake manifold injection and having a control apparatus (11). The control apparatus (11), that is, its software has a plurality of functions (12) and a scheduler (13) for activating the functions (12). The executability of the functions (12) is determined in dependence upon the operating-mode dependent and operating-mode independent conditions and, with the aid of a bridging signal, the determination of the operating-mode dependent conditions can be disabled.

Abstract: Method and arrangement for operating an internal combustion engine (10) which can be operated in several modes of operation, especially an internal combustion engine (10) having direct injection (DE) or intake manifold injection (SRE) and with a control apparatus (11). The control apparatus (11) or its software has a plurality of functions (12) and a scheduler (13) for activating the functions (12). Operating modes are assigned to the functions (12) and the functions (12) are activated by the scheduler (13) in dependence upon the assigned modes of operation.

Abstract: A control device and a method for operating a control device which contains function modules, a scheduler and a priority manager. The control device is connected via data lines to a system to be controlled. The priority manager assigns to the modules modifiable priorities which are then taken into account when the modules are activated by the scheduler.

Abstract: A fault diagnostic device for monitoring and detecting faults in technical functions, in particular in technical functions of a motor vehicle, includes a plurality of monitoring devices for monitoring technical functions, whether they have a fault or not. The fault diagnostic device also includes a storage device for storing (data concerning) direct mutual dependencies of the functions to be monitored, in the form of a matrix representation in the logical YES/NO form. Furthermore, the fault diagnostic device includes a processing device for determining the capacity for validation of faults in corresponding technical functions to be detected in the monitoring, in view of the matrix representation; for controlling the monitoring devices for carrying out the monitoring activities; and, assuming the capacity for validation, for validating the faults to be detected in the monitoring.