Abstract: A control unit having a plurality of error shutdown interfaces by which, upon activation, in each case one or more components to be controlled by the control unit is/are able to be switched off. The control unit is set up to run one or more different applications, each of which is equipped to trigger an error shutdown if necessary, the control unit additionally being set up to provide internal interfaces for the one or more applications. The internal interfaces and the error shutdown interfaces are predefinably assignable to each other, so that in response to an invocation of one of the internal interfaces, the one or more error shutdown interfaces assigned to it is/are activated. A method for operation of the control unit is also described.

Abstract: A control unit having a plurality of error shutdown interfaces by which, upon activation, in each case one or more components to be controlled by the control unit is/are able to be switched off. The control unit is set up to run one or more different applications, each of which is equipped to trigger an error shutdown if necessary, the control unit additionally being set up to provide internal interfaces for the one or more applications. The internal interfaces and the error shutdown interfaces are predefinably assignable to each other, so that in response to an invocation of one of the internal interfaces, the one or more error shutdown interfaces assigned to it is/are activated. A method for operation of the control unit is also described.

Abstract: A method for operating a control unit of a motor vehicle. A status inquiry is transmitted by a watchdog unit to a first monitoring unit, which is implemented on a first processor core of a multicore processor. A status response is ascertained by the first monitoring unit as a function of the status inquiry. A fault is ascertained by the watchdog unit as a function of the status response.

Abstract: A method for operating a control unit of a motor vehicle. A status inquiry is transmitted by a watchdog unit to a first monitoring unit, which is implemented on a first processor core of a multicore processor. A status response is ascertained by the first monitoring unit as a function of the status inquiry. A fault is ascertained by the watchdog unit as a function of the status response.

Abstract: The present invention provides a method and a device for controlling operational sequences, in particular in a vehicle. In this context, a functional unit for forwarding and receiving data via at least one connecting unit is in contact with at least one bus system. Functional unit is monitored by a monitoring unit. The monitoring unit prevents the forwarding of data by the functional unit via the at least one bus system if the monitoring unit detects an error of the functional unit. In an error case, in order to prevent the forwarding of data by functional unit in a manner as simple as possible, yet one that is safe and reliable, an error signal is emitted by the monitoring unit, which error signal assumes different values as a function of whether an error of the functional unit has been recognized or not, and the error signal is applied to the at least one connecting unit such that the at least one connecting unit is deactivated by the error signal if an error of the functional unit has been detected.

Abstract: The present invention relates to a method and a device for controlling operational sequences, in particular in a vehicle. In this context, a functional unit (3) for forwarding and receiving data via at least one connecting unit (4) is in contact with at least one bus system (2). Functional unit (3) is monitored by a monitoring unit (8). The monitoring unit (8) prevents the forwarding of data by the functional unit (3) via the at least one bus system (2) if it detects an error of the functional unit (3).

Abstract: A method and a device for monitoring data and the transmission of data between at least one first control unit and one second control unit are provided. The at least two control units have a first program level, to which are allocated programs which calculate the control function, as well as a second program level including programs that monitor the functional reliability of the programs of the first program level. The first control unit is connected to at least one component which may be used to acquire data, for example, controlled variables. The data acquired by the component or further data determined with this data may be transmitted from the first control unit to the second control unit over a single connection in a secure manner, and the data and the data transmission are secured separately in the first and second program levels such that errors in the data and the data transmission may be detected.

Abstract: A method and a device for monitoring data and the transmission of data between at least one first control unit and one second control unit are provided. The at least two control units have a first program level, to which are allocated programs which calculate the control function, as well as a second program level including programs that monitor the functional reliability of the programs of the first program level. The first control unit is connected to at least one component which may be used to acquire data, for example, controlled variables. The data acquired by the component or further data determined with this data may be transmitted from the first control unit to the second control unit over a single connection in a secure manner, and the data and the data transmission are secured separately in the first and second program levels such that errors in the data and the data transmission may be detected.

Abstract: A method is distinguished in that outside of the analog/digital converter, on the basis of an analog signal (UA) to be digitized by the analog/digital converter, a sequence of digital pulses (P2) is generated, of which at least the width or the repetition frequency is analog signal-dependent, and that a digital result determined based on the pulse sequence and the digital value generated on the basis of the same analog signal by the analog to digital converter are checked for conformance with one another. As such, in a simple manner, a continuous monitoring of the A/D converter to be monitored is rendered possible during its "normal" operation.