Abstract: A method of creating a simplified computer implementable engine model includes obtaining a complete computer implementable engine model and selecting, from the complete engine model, elements defining the simplified engine model. The method further includes obtaining from a library of rules at least one computer implementable model creation rule corresponding to the selected elements and using that at least one rule to create the simplified computer implementable engine model.

Abstract: A non-transitory computer readable medium includes a computer program, which when executed by a processor performs a method, the method including processing a data message to extract segments of data and computing a checksum by applying gray code conversions to one or more of the data segments, wherein only one bit changes on each count when consecutive integers are represented as bits. The method further includes extracting remaining data segments and adding bitwise to the previously calculated gray code checksum to provide the next checksum, converting the next checksum to gray code, and adding a final gray code conversion to a final data message including all remaining data segments and transmitting the final data message.

Abstract: A method of identifying a valid version of a data value and voting on separate instances of the data value is described. A processor receives an instance of the data value generated by one processor and a transmitted version of that generated instance transmitted by another processor and compares the received values to validate them. The processor further determines an agreed version of the data value from a comparison of the validated instances. As a result a simple and robust voting system is provided.

Abstract: An electronic system comprising a system to be monitored (2) and a plurality of fault-monitoring systems (4, 6) each of which is adapted to output a fault signal when an input indicates that the electronic system is in a fault condition associated with the fault-monitoring system. The fault-monitoring systems are arranged in a cascade fashion such that a fault signal output from one fault-monitoring system (4) is provided as an input to a subsequent fault-monitoring system (6) in the cascade of fault-monitoring systems to simulate a fault condition associated with the subsequent fault-monitoring system. The output of the final fault-monitoring system in the cascade gives an indication of whether there is a fault with any of the fault-monitoring systems.

Abstract: A method of creating a simplified computer implement for engine model comprises obtaining a complete computer implement for engine model (110) and selecting, from the complete engine model (110), elements defining the simplified engine model (110). The method further comprises obtaining from a library of rules at least one computer implementable model creation rule corresponding to the selected elements and using that at one rule to create the simplified computer implementable engine model (110).

Abstract: A method of modelling the effect of a fault on the behaviour of a system. The method comprises modifying a functional model of a system to specify a fault in the system; running the model in accordance with a test, the test having an input and an expected output, the input defining the value of a least one input variable over a period of time and the expected output defining the expected value of at least one output variable over the period of time; the functional model calculating, in dependence on the value of the input variable defined by the input, a modelled output comprising the modelled value of the output variable over the period of time; and comparing the modelled output with the expected output to determine a severity score for the fault based on the difference between the modelled output and the expected output.

Abstract: An electronic system comprising a system to be monitored (2) and a plurality of fault-monitoring systems (4, 6) each of which is adapted to output a fault signal when an input indicates that the electronic system is in a fault condition associated with the fault-monitoring system. The fault-monitoring systems are arranged in a cascade fashion such that a fault signal output from one fault-monitoring system (4) is provided as an input to a subsequent fault-monitoring system (6) in the cascade of fault-monitoring systems to simulate a fault condition associated with the subsequent fault-monitoring system. The output of the final fault-monitoring system in the cascade gives an indication of whether there is a fault with any of the fault-monitoring systems.

Abstract: A control system for a load (10), the system comprising a first microprocessor (16) having an output to drive one side of a load (10), a second microprocessor (18) having an output to drive the other side of the load (10), the system being arranged so that when either microprocessor detects a fault in the control of the load (10) the load (10) is switched off.

Abstract: An energy management system for a motor vehicle has a first voltage supply terminal having a first nominal voltage and a second voltage supply terminal having a second nominal voltage. At least one of the first and second voltage supply terminals has a battery. A universal bi-directional DC-DC converter is coupled to exchange energy between the first and second voltage supply terminals. A third voltage supply terminal is provided for exchanging energy between the DC-DC converter and an external vehicle electrical system or battery charger. The energy exchanged between the first or second voltage supply terminals and the third voltage supply terminal is independent of the voltage and polarity of the external vehicle electrical system or battery charger.