Abstract: In order to detect a faulty error correcting unit (2) in an embedded system, wherein the error correcting unit (2) receives output data from a data source (20) and determines, whether the received data are incorrect, and wherein if the received data are incorrect, the error correcting unit (2) is expected to correct at least one error within the received data, output the corrected data and manipulate an error vector (4), a method and a system (Ia) are suggested that enable to compare the output data of the error correcting unit (2) with at least one reference data, wherein the at least one reference data originate at least indirectly from the data source (20). Both, the error vector (4) and the result of the comparison are input to a plausibility test in order to decide, whether the error correcting unit (2) is faulty. According to the result of the plausibility test, a failure vector (7) is manipulated in order to indicate whether a failure in the error correcting unit (2) is detected.

Abstract: A method for checking an interface module, the interface module returning to the processor, using a second data message, stored values representing sensor values, after a request for a test by a processor using a data message. Using these firm sensor values, the processor can check the functioning of the interface module and its own algorithm. A safety module, which also picks up the sensor values, also checks its functioning with them, since the safety module is a redundant hardware path to the processor and is used as a plausibility check for the release decision of means of restraint. The interface module is changed into a test mode as soon as it receives the first data message from the processor, and it then suppresses the transmission of the real sensor values which were received from connected sensors.

Abstract: A method for testing a memory and a control device having means for a memory test. A destination address of the memory is selected in the process, dependent addresses of the memory are determined from the destination address, and user data at the destination address and the dependent addresses are backed up. Furthermore, the destination address and the dependent addresses are described by test patterns, via which a signature is formed. The backed-up user data of the destination address and the dependent addresses are then restored. Finally, the determined signature is compared with the known setpoint value. In the event of a deviation between the signature and the setpoint value, suitable protective mechanisms are initiated.

Abstract: In order to detect a faulty error correcting unit (2) in an embedded system, wherein the error correcting unit (2) receives output data from a data source (20) and determines, whether the received data are incorrect, and wherein if the received data are incorrect, the error correcting unit (2) is expected to correct at least one error within the received data, output the corrected data and manipulate an error vector (4), a method and a system (Ia) are suggested that enable to compare the output data of the error correcting unit (2) with at least one reference data, wherein the at least one reference data originate at least indirectly from the data source (20). Both, the error vector (4) and the result of the comparison are input to a plausibility test in order to decide, whether the error correcting unit (2) is faulty. According to the result of the plausibility test, a failure vector (7) is manipulated in order to indicate whether a failure in the error correcting unit (2) is detected.

Abstract: A method for testing a memory and a control device having means for a memory test. A destination address of the memory is selected in the process, dependent addresses of the memory are determined from the destination address, and user data at the destination address and the dependent addresses are backed up. Furthermore, the destination address and the dependent addresses are described by test patterns, via which a signature is formed. The backed-up user data of the destination address and the dependent addresses are then restored. Finally, the determined signature is compared with the known setpoint value. In the event of a deviation between the signature and the setpoint value, suitable protective mechanisms are initiated.

Abstract: A circuit arrangement, having a circuit and a computer unit is provided, in which the circuit and the computer unit are connected to one another via multiple lines for transmitting a number of signals which are embodied as information signals. The circuit has a multiplexer for combining signals, the multiplexer being connected to the computer unit via an additional line.

Abstract: A device for wireless transmission of a deployment signal. The device includes two processors on both the primary side and the secondary side, which exchange data with one another. A high degree of redundancy is thereby achieved. The wireless transmission is preferably carried out as inductive transmission.

Abstract: A device for monitoring a processor is described. A watchdog simultaneously monitors the system clock, the software base functions and performs a check of the tests of the system components of the processor. If an error is detected, the watchdog communicates this to the processor, an error counter is incremented and at least one device that is connected to the processor is blocked. If the error counter attains a predetermined value, the block is continued until the device of the present invention is deactivated. If an additional error is detected during a blocking time, the blocking time is extended.

Abstract: An interface module is proposed, to which sensors are connected and which is positioned in a control device, it being indicated via an identification input how the sensor data are to be classified by the interface module. In particular, this can be used to distinguish between safety-relevant and safety-irrelevant data. Furthermore, the nature of the data can be identified therewith. This identification input is advantageously designed as a voltage input, the voltage levels being then converted into a bit sequence. The identification input is connected to ground via a resistor, so that, in the case of an unspecified input potential, the voltage level is connected to ground. The interface module has a logic circuit to which voltage comparators are connected, which compare the voltages to reference potentials, and then the logic circuit performs a coding using the bit sequences, as a function of the output signals of the voltage comparators.

Abstract: A control device for a restraining system in a motor vehicle is proposed, a safety switch, which also includes a watchdog, performing the function of a safety switch in the control device. The safety switch monitors sensor signals which are transmitted to the processor of the control device for plausibility and triggers appropriate restraining systems via a time unit for a predefined time period only when the safety switch itself detects a trigger event. On the basis of supplementary data from the sensor signals, the safety switch infers how the sensor signals are to be processed. The safety switch is designed such that it triggers the restraining systems correspondingly assigned to the sensors. When the control device is switched on, the processor performs a test of the safety switch by generating a test signal using the sensors.

Abstract: A device for wireless transmission of a deployment signal. The device includes two processors on both the primary side and the secondary side, which exchange data with one another. A high degree of redundancy is thereby achieved. The wireless transmission is preferably carried out as inductive transmission.

Abstract: In a method of monitoring a voltage supply of a control unit in a motor vehicle, a supply module which provides the voltages is connected to the components of the control unit via a RESET line and the RESET line is tested every time the control unit is started or all monitoring limits of the supply module show no fault again after the faults of the monitored voltages have been filtered. This test occurs by forced periodic pulses which are generated on the basis of a shift in the limits of the monitoring bands of the supply voltages. The reference voltages VREGUL and VREF are kept independent of each other here in order to prevent system perturbations.

Abstract: The invention relates to a drive train for a motor vehicle, having an internal combustion engine (1), having an electric machine (2), which upon starting of the engine (1) generates a torque, and having a clutch (3), which is disposed between the engine (1) and a gear train (4) by way of which a torque generated by the engine (1) can be transmitted to at least one vehicle drive wheel. A mechanism (5, 6) is provided, which upon starting of the engine can actuate the clutch (3) in such a way that a first part of the torque generated upon starting of the engine by the electric machine (2) is transmitted to the at least one vehicle drive wheel, and a second part of the torque generated by the electric machine and sufficient for starting the engine is transmitted to the engine.

Abstract: A device for controlling firing circuits for restraining devices, a processor and a safety IC for controlling the restraining devices being connectable to the firing circuit control, and the firing circuit control having blocking inputs and blocking registers for the blocking of groups of connectable firing circuits; the processor setting the blocking registers after switching-on (of the device) and logically linking the firing circuit control data of the blocking inputs and the blocking registers with one another, so as to block individual groups of firing circuits. Thus it is especially possible individually to block firing circuits for air bags in dependence upon the degree of occupancy and the classification of the occupants in a vehicle. Setting the blocking inputs and the blocking registers takes place shortly after switching-on (of the device), after function tests of the IC's have been conducted.

Abstract: A device for monitoring a processor is described. A watchdog simultaneously monitors the system clock, the software base functions and performs a check of the tests of the system components of the processor. If an error is detected, the watchdog communicates this to the processor, an error counter is incremented and at least one device that is connected to the processor is blocked. If the error counter attains a predetermined value, the block is continued until the device of the present invention is deactivated. If an additional error is detected during a blocking time, the blocking time is extended.

Abstract: A control device for a restraining system in a motor vehicle is proposed, a safety switch, which also includes a watchdog, performing the function of a safety switch in the control device. The safety switch monitors sensor signals which are transmitted to the processor of the control device for plausibility and triggers appropriate restraining means via a time unit for a predefined time period only when the safety switch itself detects a trigger event. On the basis of supplementary data from the sensor signals, the safety switch infers how the sensor signals are to be processed. The safety switch is designed such that it triggers restraining means correspondingly assigned to the sensors. When the control device is switched on, the processor performs a test of the safety switch by generating a test signal using the sensors.

Abstract: A method for generating manipulated variables for the direct-axis and cross voltage, respectively, to represent the flux-forming current ID and torque-forming current IQ in field-oriented control of asynchronous machines, taking into account the stator voltage drop and steady-state internal voltage. The steady-state internal voltage is calculated on the basis of reference variables of the currents.

Abstract: In a method of monitoring a voltage supply of a control unit in a motor vehicle, a supply module which provides the voltages is connected to the components of the control unit via a RESET line and the RESET line is tested every time the control unit is started or all monitoring limits of the supply module show no fault again after the faults of the monitored voltages have been filtered. This test occurs by forced periodic pulses which are generated on the basis of a shift in the limits of the monitoring bands of the supply voltages. The reference voltages VREGUL and VREF are kept independent of each other here in order to prevent system perturbations.

Abstract: A device for data transmission between vehicle sensors and a control unit, which is used to decode data telegrams having sensor data from the vehicle sensors and to reformat them into SPI (serial peripheral interface) data telegrams. Furthermore, an interface module of the control unit transmits the SPI data telegrams to the processor of the control unit. By using an alter bit, the processor determines whether to retrieve the newest sensor data or the preceding sensor data. The interface module converts the sensor data in each case into a 10-bit data field of an SPI data telegram, into which the interface module may supplement missing data. By counting out the edges, it is possible for the interface module to recognize the data telegrams from the sensors.

Abstract: A device is proposed for data transmission between vehicle sensors and a control unit, which is used to decode data telegrams having sensor data from the vehicle sensors and to reformat them into SPI (serial peripheral interface) data telegrams. Furthermore, an interface module of the control unit will then transmit the SPI data telegrams to the processor of the control unit. By using an alter bit, it is possible for the processor of the control unit to retrieve either the newest sensor data or the preceding sensor data. The interface module converts the sensor data in each case into a 10-bit data field of an SPI data telegram, the interface module supplementing missing data if necessary. By counting out the edges, it is possible for the interface module to recognize the data telegrams from the sensors.