Abstract: A container (100) is formed by being folded and sealed on one of a multiplicity of male dies (12) of an apparatus (10). The male die (12) with the container (100) placed thereon is inserted into a female die (120). The female die (120) retains the container (100) while the male die (12) is removed therefrom. Lips (110-112) of the container (100) are sandwiched against the female die (120) while product is pushed thereon to prevent collapse of the container (100). The multiplicity of male dies (12) are relatively moveable by rotating about an axis (20) relative to the female die (120).

Abstract: A computer-implemented method for generating test data for computer-implemented automated driving functions. The method includes: provision of a computer-implemented automated driving function in the form of a software component; specification of an environment model with boundary conditions that limit the state space of the software component; provision of a model checker representation of the software component that is limited by the environment model; specification of a formal requirement as an input for a model checking method; and application of the model checking method to the model checker representation to analyze the software component with respect to compliance with the specified formal requirement. If the specified formal requirement is not complied with, the model checking method provides the states and state transitions of the software component that contribute to non-compliance as edge case parameters. Based on the edge case parameters, test data are then generated.

Abstract: A computer-implemented method for verifying a software-based behavior planner of an automated driving function. The method includes: providing a verification environment model to limit the state space of the behavior planner according to a specifiable traffic scene; providing a formal requirement as a criterion for the correctness of decisions of the behavior planner; generating a model checker representation of the behavior planner taking into account the provided verification environment model; analyzing the model checker representation using a model checking procedure with respect to the formal requirement. The verification environment model is used to determine a physically meaningful parameter interval for at least one location parameter and/or movement parameter of the participants of the given traffic scene.

Abstract: A computer-implemented method for verifying a software component of an automated driving function, The method includes: translating the native program code into a model checker representation of the software component to be verified and analyzing the model checker representation of the software component to be verified using a model checking method. The native program code of the software component to be verified is analyzed to identify independent sequences of commands, wherein an independent sequence of commands is a cohesive succession of program commands by which at least two variables are set, and the at least one result of an independent sequence of commands is independent of the order in which its program commands are processed. The variables of the at least one independent sequence of commands of the native program code are then simultaneously set in the model checker representation of the software component to be verified.

Abstract: A method for controlling a plurality of driving functions in an automated or autonomous vehicle, a control unit designed to carry out the method, a computer program, and a machine-readable memory medium on which the computer program is stored are provided. In the method, the plurality of driving functions is described in each case by finite state machines. At least one finite state machine is of the Moore type, and includes a structure with a finite set of states. The states are linked to one another via edges. An edge defines from the finite set of states a transition from a starting state to a target state, in that an associated edge condition is true or false. The finite state machine is accessible during runtime based on the structure, so that an access to the states and the edges is made possible to change the states and/or the edges.