Abstract: A method for operating a security system. The method includes: providing payload data and monitoring data on a backend device; transmitting the payload data via a first channel and transmitting the monitoring data via a second channel of an air interface to an apparatus device; wherein the payload data are transmitted to the apparatus device only when the monitoring data are cyclically received on the apparatus device.

Abstract: A method for generating a digital model-based representation of a vehicle. The method includes: receiving sensor data of a plurality of acoustic sensors of a vehicle, wherein the sensor data describes sounds of the vehicle and/or sounds of an environment of the vehicle, and wherein the sensor data has been recorded for a plurality of trips of the vehicle; evaluating the sensor data and the creation of relations between the received sounds of the vehicle and/or the environment and the particular sound-causing statuses of the vehicle and/or the environment; and storing in a model-based representation of the vehicle and/or the environment, the determined relations between the sounds of the vehicle and/or the environment in a model-based representation of the vehicle.

Abstract: A method for communicating between multiple components of an event chain for an at least semi-automated driving function of a motor vehicle, the multiple components being communication users of a publish-subscriber network. The method includes: publishing a first message with the aid of a first component of the multiple components, sending the first message to a second component of the multiple components and receiving the first message with the aid of the second component. An event chain for an at least semi-automated driving function of a motor vehicle, a computer program, and a machine-readable memory medium, are also described.

Abstract: A method for monitoring a component of an event chain for an at least semi-automated driving function of a motor vehicle using a watchdog in which an enclave is implemented. The method includes: generating a first certificate for the component of the event chain with the aid of the first enclave, outputting the first certificate to the component with the aid of the watchdog, receiving output data output by the component with the aid of the watchdog, checking the output data on the basis of the first certificate with the aid of the first enclave in order to output a first check result, triggering a security action with the aid of the watchdog based on the first check result. A device, a computer program, and a machine-readable memory medium are also provided.

Abstract: A system for monitoring an event chain including components for carrying out an automated driving function of a motor vehicle. A data switching unit is configured for switching a data exchange between at least one first and one second component. The monitoring module checks whether a monitoring signal to the second component is received by the second component at a basic clock rate. The data switching unit receives a receiving clock requirement, within which data are to be received by the second component, and transfers it, to the second component, at a basic clock rate corresponding to the receiving clock requirement or an integer multiple of the basic clock rate corresponding to the receiving clock requirement. A monitoring module is configured to check whether data transferred to the second component are received in the receiving clock requirement, and to release those for use by the second component.

Abstract: A system for monitoring a component of an effect chain for an at least partially automated driving function of a motor vehicle. The system includes: a processor; one or more memory blocks, an input, set up to receive output data output by the component; computer-executable instructions, executable by the processor in order to implement one or more enclaves, using the one or more memory blocks, the one or more enclaves including a certificate enclave, which is set up to create a certificate for the component of the effect chain; an output, set up to output the certificate to the component, the certificate enclave being set up to check the output data received following output of the certificate, on the basis of the certificate, in order to output a check result, and a trigger device, set up to trigger a security action based on the check result.

Abstract: A cloud computer has an enclave including a monitoring module. The cloud computer receives data and transmits the data to the enclave for the execution of at least a partly automated driving function of a vehicle. The monitoring module checks whether transmitted data are received by the enclave at a basis clock rate, and releases data received by the enclave at the basic clock rate for use by the enclave. The cloud computer receives a cloud-computer-external time base, synchronizes a cloud-computer-internal time base with the cloud-computer-external time base, and transmits both the cloud-computer-external time base and the synchronized cloud-computer-internal time base to the enclave. The enclave compares the cloud-computer-external time base to the synchronized cloud-computer-internal time base at the basic clock rate, and, in the event of a time deviation below a specified threshold value, uses data received at the basic clock rate.

Abstract: A method for operating an at least partially automated vehicle. The method includes: supplying surroundings data detected with the aid of sensors to at least three AI computing units which are independent of one another; generating data regarding at least one object from the surroundings data; carrying out a plausibility check of the pieces of data with respect to one another with the aid of majority voting; and using the data for which the plausibility check has been carried out for controlling, at least in a semi-automated manner, a lateral and/or longitudinal guidance of the at least partially automated vehicle.

Abstract: A method for operating a vehicle having a sensor device including at least two technologically diversified sensor units. The method includes: detection of pieces of surroundings information with the aid of the sensor device; defined evaluation of the pieces of surroundings information detected by the technologically diversified sensor units with respect to plausibility; and defined usage of the pieces of surroundings information using a result of the defined evaluation of the detected pieces of surroundings information.

Abstract: A control unit for a vehicle. The control unit includes: interfaces for the connection to two independently redundant communication networks, messages to and from the control unit being transferrable via a second communication network, and vice versa, in the event of a failure of a first communication network; and interfaces for the electrical supply of the control unit via two independently redundant low-voltage networks. it being possible to electrically supply the control unit via a second low-voltage network, and vice versa, in the event of an error in a first low-voltage network.

Abstract: A method for controlling a driving function. In the method, input data relevant for the driving function are conveyed to a cluster, output data are respectively generated by redundant processing of the input data on at least a first processing unit and a second processing unit in the cluster, the respective output data are supplemented by control fields by each processing unit, the output data of the processing units are conveyed to a comparison and a result of the comparison is ascertained, and depending on the result, the output data are utilized on a case-by-case basis together with the respective control fields for the driving function if the output data and control fields bear the comparison, or are marked as erroneous if the output data or control fields deviate.

Abstract: A method for determining a maximum speed for a vehicle, including: receiving items of state information concerning a state of at least one vehicle component of the vehicle; and determining a maximum speed of the vehicle on the basis of the state information, such that a stopping path of the vehicle from a recognition of a dangerous state until the vehicle is at a standstill is less than or equal to a specified value.

Abstract: A method for operating a security system. The method includes: delivering data on at least two channels; generating information items from the data in the at least two channels; generating a verification key from the information items in the at least two channels; delivering the information items and the verification keys of the two channels to a verification device; and using the information items in defined fashion depending on the comparison of the verification keys.

Abstract: A method for operating a vehicle having a sensor device including at least two technologically diversified sensor units. The method includes: detection of pieces of surroundings information with the aid of the sensor device; defined evaluation of the pieces of surroundings information detected by the technologically diversified sensor units with respect to plausibility; and defined usage of the pieces of surroundings information using a result of the defined evaluation of the detected pieces of surroundings information.

Abstract: A method for monitoring vehicle surroundings, including: reading in first and second surrounding-area information-items respectively with first and second detectors. The first and second surrounding-area information-items represent information items receivable from the vehicle surroundings and is about at least one object in the surroundings; processing the first surrounding-area information-item with the first detector, to provide first sensor-data, and processing the second surrounding-area information-item with the second detector, to provide second sensor-data; merging the first sensor-data and the second sensor-data, using a time-difference information item, to provide a measuring-signal.

Abstract: A ring network for interchanging data between a plurality of devices arranged in a vehicle includes a ring connection and a plurality of distributors. The distributors each have a plurality of communication pairs each having a transmitting unit and a receiving unit for transmitting and receiving data. Each of the devices is connected to one of the distributors via a first communication pair, to the ring connection via a second communication pair and likewise to the ring connection via a third communication pair. A direction of data flow in the second communication pair and the third communication pair is opposite.

Abstract: A method for monitoring vehicle surroundings, including: reading in first and second surrounding-area information-items respectively with first and second detectors. The first and second surrounding-area information-items represent information items receivable from the vehicle surroundings and is about at least one object in the surroundings; processing the first surrounding-area information-item with the first detector, to provide first sensor-data, and processing the second surrounding-area information-item with the second detector, to provide second sensor-data; merging the first sensor-data and the second sensor-data, using a time-difference information item, to provide a measuring-signal.

Abstract: A method for determining a maximum speed for a vehicle, including: receiving items of state information concerning a state of at least one vehicle component of the vehicle; and determining a maximum speed of the vehicle on the basis of the state information, such that a stopping path of the vehicle from a recognition of a dangerous state until the vehicle is at a standstill is less than or equal to a specified value.

Abstract: A method for monitoring an environment of a vehicle is provided. The method includes generating an irradiated region in a defined environment of the vehicle using a radiation device of the vehicle. The method also includes detecting the irradiated region is detected using a detection device situated externally to the vehicle, and, in the event that at least partial shadowing of the irradiated region, is detected, controlling the vehicle by a control device situated externally to the vehicle.

Abstract: A method for monitoring an environment of a vehicle includes generating an irradiated region in a defined environment of the vehicle using a radiation device of the vehicle, detecting the irradiated region is detected using a detection device situated externally to the vehicle, and, in the event that at least partial shadowing of the irradiated region, is detected, controlling the vehicle by a control device situated externally to the vehicle.