Abstract: A computer-implemented method for testing an, in particular, safety-relevant, technical system, in particular including software and/or hardware components. The method includes the following steps: providing a model of the technical system; providing a set of requirements to the technical system; converting a particular requirement into at least one formal expression of at least one formal logic, the formal logic being selected from a logic set, which includes at least two formal logics, based on properties of the requirements; checking whether a particular requirement has been met by the model, the checking taking place by carrying out at least one program solver for a particular formal expression.

Abstract: A method for operating a management program that is provided to manage at least one intervention from at least one application program in a motor vehicle into at least one component of the motor vehicle. When establishing the extent of the at least one intervention, information being made available from outside of the vehicle is taken into account.

Abstract: A method for providing a function by a group of computing units in which computation instances are executed, each computation instance implementing the function using at least one algorithm and being set up to determine at least one result in response to a call of the function. The method includes: determining an integrity level for each of the computation instances; receiving a function request from a subscriber, the function request including a quality requirement that includes an integrity requirement; selecting a plurality of the computation instances corresponding to the quality requirement, so that the integrity level of the selected computation instances corresponds to the integrity requirement; calling the function in the selected computation instances corresponding to the function request in order to determine a plurality of results; determining a response based on the results, taking into account the quality requirement; and sending the response to the subscriber.

Abstract: An apparatus and computer-implemented method for allocating computing resources in a method for protecting a computer-aided development environment in a distributed development process from damage and threats. In the method for protecting, multiple methods for identifying damage and/or a threat in the computer-aided development environment are carried out, wherein a metric which quantifies a quality and/or informative value of the method is determined for each method, wherein a respective offer for allocating computing resources for the execution of the respective method is determined for the methods depending on said metric, wherein the computing resources are allocated to the methods depending on the respective offer.

Abstract: A method for controlling a robotic device. In the method, for a version of a control software which is not the initial version of the control software for which the test values delivered by the tests at least partially do not fall within predefined ranges, it is checked whether that version of the control software fulfills safety criteria that have been created for a previous version (and are fulfilled by that version) for which the test values delivered by the tests at least partially do not fall within the predefined ranges, but was safe. If this is the case, the robotic device is controlled with that version of the control software.

Abstract: A method for providing a function via a network of processing units using multiple computing instances. Each computing instance implements the function and is configured, when it is executed, to determine at least one result in response to a call-up of the function. The method includes validating the computing instances, each being checked as to whether the computing instance corresponds to a respective predetermined state; determining a respective level of reliability for each of the processing units; starting execution of successfully validated computing instances in the processing units, which have a level of reliability that is equal/greater than a predetermined minimum level of reliability; receiving a function request from a user; calling up the function in at least a portion of the executed computing instances corresponding to the function request, in order to determine multiple results; determining a response based on the results; and sending the response to the user.

Abstract: A method for validating safety precautions for vehicles moving in an at least partially automated manner, based on triggering events and safety metrics. The method includes: receiving, from one or from each of a plurality of vehicles moving in an at least partially automated manner, operating data of the vehicle present and/or recorded at the time, regarding the triggering event and/or safety metric, if at the time in the vehicle, one or at least one of a plurality of triggering events associated therewith is met and/or one or at least one of a plurality of safety metrics associated therewith exceeds or falls below a threshold value; analyzing the received operating data, correlations of triggering events, occurring at more than a predetermined frequency, and/or safety metrics being determined with respect to static and/or dynamic vehicle data of the one or of the plurality of vehicles; and providing the determined correlations.

Abstract: A method for controlling a robotic device. In the method, for a version of a control software which is not the initial version of the control software for which the test values delivered by the tests at least partially do not fall within predefined ranges, it is checked whether that version of the control software fulfills safety criteria that have been created for a previous version (and are fulfilled by that version) for which the test values delivered by the tests at least partially do not fall within the predefined ranges, but was safe. If this is the case, the robotic device is controlled with that version of the control software.

Abstract: A method for testing a, in particular safety-relevant, technical system, in particular encompassing software. The system is represented by a model encompassing at least two or more components. An assumption of a respective component regarding the safety-relevant system, and a guarantee of a respective component to the safety-relevant technical system, are specified by a safety contract. Executable program code is generated based on at least one assumption and based on at least one guarantee. The safety-relevant technical system is tested by executing the program code.

Abstract: A method for operating a management program provided to manage at least one intervention from at least one application program to at least one component of the motor vehicle. In the method, when establishing the extent of the at least one intervention, information describing a driving mode of the vehicle is taken into account.

Abstract: A method for operating a management program that is provided to manage at least one intervention from at least one application program in a motor vehicle into at least one component of the motor vehicle. When establishing the extent of the at least one intervention, information being made available from outside of the vehicle is taken into account.

Abstract: A method for providing a function via a network of processing units using multiple computing instances. Each computing instance implements the function and is configured, when it is executed, to determine at least one result in response to a call-up of the function. The method includes validating the computing instances, each being checked as to whether the computing instance corresponds to a respective predetermined state; determining a respective level of reliability for each of the processing units; starting execution of successfully validated computing instances in the processing units, which have a level of reliability that is equal/greater than a predetermined minimum level of reliability; receiving a function request from a user; calling up the function in at least a portion of the executed computing instances corresponding to the function request, in order to determine multiple results; determining a response based on the results; and sending the response to the user.

Abstract: A method for providing a function by a group of computing units in which computation instances are executed, each computation instance implementing the function using at least one algorithm and being set up to determine at least one result in response to a call of the function. The method includes: determining an integrity level for each of the computation instances; receiving a function request from a subscriber, the function request including a quality requirement that includes an integrity requirement; selecting a plurality of the computation instances corresponding to the quality requirement, so that the integrity level of the selected computation instances corresponds to the integrity requirement; calling the function in the selected computation instances corresponding to the function request in order to determine a plurality of results; determining a response based on the results, taking into account the quality requirement; and sending the response to the subscriber.

Abstract: A computer-implemented method for processing data for applications in the field of cloud computing and/or edge computing, for vehicles. The method includes: providing multiple computing services using at least two different hardware resources, and using the multiple computing services.

Abstract: A computer-implemented method for testing an, in particular, safety-relevant, technical system, in particular including software and/or hardware components. The method includes the following steps: providing a model of the technical system; providing a set of requirements to the technical system; converting a particular requirement into at least one formal expression of at least one formal logic, the formal logic being selected from a logic set, which includes at least two formal logics, based on properties of the requirements; checking whether a particular requirement has been met by the model, the checking taking place by carrying out at least one program solver for a particular formal expression.

Abstract: A bus system, a subscriber station, and a method for configuring a static bus system for a dynamic communication are provided. The bus system has at least two subscriber stations, a communications link for connecting the subscriber stations to each other, and at least one device for the dynamic communication between the subscriber stations of the bus system; the subscriber stations and the communications link are developed for the static communication, which is directed to messages to be transmitted on the bus system that are known when the bus system is made available and are configured according to specified transmitters and receivers, and the dynamic communication is directed to messages to be transmitted on the bus system that have become known only after the subscriber stations and the communications link have been made available and are configured according to specified transmitters and receivers.

Abstract: A method for testing a, in particular safety-relevant, technical system, in particular encompassing software. The system is represented by a model encompassing at least two or more components. An assumption of a respective component regarding the safety-relevant system, and a guarantee of a respective component to the safety-relevant technical system, are specified by a safety contract. Executable program code is generated based on at least one assumption and based on at least one guarantee. The safety-relevant technical system is tested by executing the program code.

Abstract: A method for detecting data of a vehicle operated at least partially in an automated manner, including at least one sensor, in particular, a surroundings sensor, in particular, a video sensor, a radar sensor, a LIDAR sensor, an ultrasonic sensor, an infrared sensor, and/or a GNSS sensor, in particular, for receiving a GPS signal, a GLONASS signal or a Galileo signal, and/or a vehicle sensor, in particular, for engine control, for activating occupant protection means, for activating assistance functions and/or convenience functions, in particular, an acceleration sensor, a rotation rate sensor, a pressure sensor, and at least one memory, in particular, a ring memory, including detecting data of the at least one sensor; saving the data in the memory, in particular, in the ring memory; detecting an event; initially storing the content of the memory, in particular, of the ring memory, at the point in time of the detected event.

Abstract: A computer-implemented method for model-based analysis, in particular safety analysis, of a technical system, in particular of a control device for a semiautonomous or autonomous vehicle. The method includes: furnishing a model that characterizes the system; furnishing first information items that characterize dependences between different components and/or subsystems of the system; ascertaining at least one state that at least one component and/or subsystem of the system, and/or the system, can assume; ascertaining, in particular based on the first information items and/or on the at least one state, a method for describing a behavior of the system.

Abstract: An ammunition feed device of a belted ammunition in a weapon system for delivery before a closure or before a closure head, wherein the ammunition must be drawn from the ammunition belt by a cartridge hook and delivered to the closure. To prevent a misfire, etc., the cartridge hook is integrated in the weapon system separately from the closure. The cartridge hook is carried or placed by the closure, when the closure has covered a distance to the rear or must still cover a distance forward.