Abstract: A cloud computer has an enclave including a monitoring module. The cloud computer receives data and transmits the data to the enclave for the execution of at least a partly automated driving function of a vehicle. The monitoring module checks whether transmitted data are received by the enclave at a basis clock rate, and releases data received by the enclave at the basic clock rate for use by the enclave. The cloud computer receives a cloud-computer-external time base, synchronizes a cloud-computer-internal time base with the cloud-computer-external time base, and transmits both the cloud-computer-external time base and the synchronized cloud-computer-internal time base to the enclave. The enclave compares the cloud-computer-external time base to the synchronized cloud-computer-internal time base at the basic clock rate, and, in the event of a time deviation below a specified threshold value, uses data received at the basic clock rate.

Abstract: A system for monitoring a component of an effect chain for an at least partially automated driving function of a motor vehicle. The system includes: a processor; one or more memory blocks, an input, set up to receive output data output by the component; computer-executable instructions, executable by the processor in order to implement one or more enclaves, using the one or more memory blocks, the one or more enclaves including a certificate enclave, which is set up to create a certificate for the component of the effect chain; an output, set up to output the certificate to the component, the certificate enclave being set up to check the output data received following output of the certificate, on the basis of the certificate, in order to output a check result, and a trigger device, set up to trigger a security action based on the check result.

Abstract: A system for monitoring an event chain including components for carrying out an automated driving function of a motor vehicle. A data switching unit is configured for switching a data exchange between at least one first and one second component. The monitoring module checks whether a monitoring signal to the second component is received by the second component at a basic clock rate. The data switching unit receives a receiving clock requirement, within which data are to be received by the second component, and transfers it, to the second component, at a basic clock rate corresponding to the receiving clock requirement or an integer multiple of the basic clock rate corresponding to the receiving clock requirement. A monitoring module is configured to check whether data transferred to the second component are received in the receiving clock requirement, and to release those for use by the second component.

Abstract: A method for monitoring a component of an event chain for an at least semi-automated driving function of a motor vehicle using a watchdog in which an enclave is implemented. The method includes: generating a first certificate for the component of the event chain with the aid of the first enclave, outputting the first certificate to the component with the aid of the watchdog, receiving output data output by the component with the aid of the watchdog, checking the output data on the basis of the first certificate with the aid of the first enclave in order to output a first check result, triggering a security action with the aid of the watchdog based on the first check result. A device, a computer program, and a machine-readable memory medium are also provided.