Abstract: A method for initiating a safety-critical function in an appliance. The method including receiving a first user input for the safety-critical function via a touchscreen and receiving a second user input confirming the safety-critical function via a first separate input element adjacent to the touchscreen. The operation of the touchscreen can be manipulated externally, directly or indirectly, via wireless communication while a safety-critical function is active. The first separate input element communicates via a wired connection to a control device that is not capable of being manipulated externally via wireless communication while a safety-critical function is active, wherein the control device controls initiation of the safety-critical function. In the method, both the first user input and the second user input are required to initiate the safety-critical function.

Abstract: A method for initiating a safety-critical function in an appliance. The method including receiving a first user input for the safety-critical function via a touchscreen and receiving a second user input confirming the safety-critical function via a first separate input element adjacent to the touchscreen. The operation of the touchscreen can be manipulated externally, directly or indirectly, via wireless communication while a safety-critical function is active. The first separate input element communicates via a wired connection to a control device that is not capable of being manipulated externally via wireless communication while a safety-critical function is active, wherein the control device controls initiation of the safety-critical function. In the method, both the first user input and the second user input are required to initiate the safety-critical function.