Abstract: A device for cooling a plurality of electrical components, each having a component cooling surface to be cooled, includes a first heat sink, a second heat sink, and a plurality of fasteners. The first heat sink has a first heat-sink cooling surface, and the second heat sink has a second heat-sink cooling surface. The first and second heat-sink cooling surfaces are positioned in a planar arrangement such that the first and second heat-sink cooling surfaces face each other. The first heat-sink cooling surface is configured to receive a first sub-set of the component cooling surfaces of the plurality of electrical components, and the second heat-sink cooling surface is configured to receive a second sub-set of the component cooling surfaces. The fasteners are configured to fasten the first and second heat-sink cooling surfaces to the corresponding component cooling surfaces of the plurality of electrical components to be applied.

Abstract: A device for cooling a plurality of electrical components, each having a component cooling surface to be cooled, includes a first heat sink, a second heat sink, and a plurality of fasteners. The first heat sink has a first heat-sink cooling surface, and the second heat sink has a second heat-sink cooling surface. The first and second heat-sink cooling surfaces are positioned in a planar arrangement such that the first and second heat-sink cooling surfaces face each other. The first heat-sink cooling surface is configured to receive a first sub-set of the component cooling surfaces of the plurality of electrical components, and the second heat-sink cooling surface is configured to receive a second sub-set of the component cooling surfaces. The fasteners are configured to fasten the first and second heat-sink cooling surfaces to the corresponding component cooling surfaces of the plurality of electrical components to be applied.

Abstract: The invention relates to a method (200) and a control device (I) for controlling at least two power semiconductor switches (LHS1 . . . LHSn) connected in parallel for switching a total current (I_ges). The at least two power semiconductor switches (LHS1 . . . LHSn) connected in parallel each have a gate terminal for controlling the respective power semiconductor switch (LHS1 . . . LHS2). An input terminal (EA) for feeding the total current (I_ges), an output terminal (AA) for discharging the total current (I_ges), and a joint control terminal (S) for receiving a joint control signal (SI) that has the state ‘disconnect’ or ‘connect’ are provided. The at least two power semiconductor switches (LHS1 . . . LHSn) connected in parallel are connected to the input terminal (EA) at an input end and to the output terminal (AA) at the output end.

Abstract: The disclosure relates to a method and a control device for controlling at power semiconductor switches connected in parallel for switching a total current. The semiconductor switches each have a gate terminal. An input terminal for feeding the total current, an output terminal for discharging the total current, and a joint control terminal for receiving a joint control signal that has the state ‘disconnect’ or ‘connect’ are provided. The power semiconductor switches are each connected between to the input terminal and the output terminal. At least one ascertainment unit is designed to receive the joint control signal, ascertain individual control signals in accordance with the joint control signal to control the individual power semiconductor switches, and output the individual control signals to the gate terminals of the power semiconductor switches. The individual control signals each have the state ‘disconnect’ or ‘connect’ and differ at least temporarily.

Abstract: The disclosure relates to a method and a control device for controlling at power semiconductor switches connected in parallel for switching a total current. The semiconductor switches each have a gate terminal. An input terminal for feeding the total current, an output terminal for discharging the total current, and a joint control terminal for receiving a joint control signal that has the state ‘disconnect’ or ‘connect’ are provided. The power semiconductor switches are each connected between to the input terminal and the output terminal. At least one ascertainment unit is designed to receive the joint control signal, ascertain individual control signals in accordance with the joint control signal to control the individual power semiconductor switches, and output the individual control signals to the gate terminals of the power semiconductor switches. The individual control signals each have the state ‘disconnect’ or ‘connect’ and differ at least temporarily.

Abstract: The invention relates to a method (200) and a control device (1) for controlling at least two power semiconductor switches (LHS1 . . . LHSn) connected in parallel for switching a total current (I_ges). The at least two power semiconductor switches (LHS1 . . . LHSn) connected in parallel each have a gate terminal for controlling the respective power semiconductor switch (LHS1 . . . LHS2). An input terminal (EA) for feeding the total current (I_ges), an output terminal (AA) for discharging the total current (I_ges) and a joint control terminal (S) for receiving a joint control signal (SI) that has the state ‘disconnect’ or ‘connect’ are provided. The at least two power semiconductor switches (LHS1 . . . LHSn) connected in parallel are connected to the input terminal (EA) at the input end and to the output terminal (AA) at the output end. At least one ascertainment unit (EE) is designed to receive the joint control signal (SI) at the input end, ascertain at least two individual control signals (SI1 . . .

Abstract: A method for checking an interface module, the interface module returning to the processor, using a second data message, stored values representing sensor values, after a request for a test by a processor using a data message. Using these firm sensor values, the processor can check the functioning of the interface module and its own algorithm. A safety module, which also picks up the sensor values, also checks its functioning with them, since the safety module is a redundant hardware path to the processor and is used as a plausibility check for the release decision of means of restraint. The interface module is changed into a test mode as soon as it receives the first data message from the processor, and it then suppresses the transmission of the real sensor values which were received from connected sensors.

Abstract: A device for monitoring a processor is described. A watchdog simultaneously monitors the system clock, the software base functions and performs a check of the tests of the system components of the processor. If an error is detected, the watchdog communicates this to the processor, an error counter is incremented and at least one device that is connected to the processor is blocked. If the error counter attains a predetermined value, the block is continued until the device of the present invention is deactivated. If an additional error is detected during a blocking time, the blocking time is extended.

Abstract: An interface module is proposed, to which sensors are connected and which is positioned in a control device, it being indicated via an identification input how the sensor data are to be classified by the interface module. In particular, this can be used to distinguish between safety-relevant and safety-irrelevant data. Furthermore, the nature of the data can be identified therewith. This identification input is advantageously designed as a voltage input, the voltage levels being then converted into a bit sequence. The identification input is connected to ground via a resistor, so that, in the case of an unspecified input potential, the voltage level is connected to ground. The interface module has a logic circuit to which voltage comparators are connected, which compare the voltages to reference potentials, and then the logic circuit performs a coding using the bit sequences, as a function of the output signals of the voltage comparators.

Abstract: A control device for a restraining system in a motor vehicle is proposed, a safety switch, which also includes a watchdog, performing the function of a safety switch in the control device. The safety switch monitors sensor signals which are transmitted to the processor of the control device for plausibility and triggers appropriate restraining systems via a time unit for a predefined time period only when the safety switch itself detects a trigger event. On the basis of supplementary data from the sensor signals, the safety switch infers how the sensor signals are to be processed. The safety switch is designed such that it triggers the restraining systems correspondingly assigned to the sensors. When the control device is switched on, the processor performs a test of the safety switch by generating a test signal using the sensors.

Abstract: In a method of monitoring a voltage supply of a control unit in a motor vehicle, a supply module which provides the voltages is connected to the components of the control unit via a RESET line and the RESET line is tested every time the control unit is started or all monitoring limits of the supply module show no fault again after the faults of the monitored voltages have been filtered. This test occurs by forced periodic pulses which are generated on the basis of a shift in the limits of the monitoring bands of the supply voltages. The reference voltages VREGUL and VREF are kept independent of each other here in order to prevent system perturbations.

Abstract: A device for controlling firing circuits for restraining devices, a processor and a safety IC for controlling the restraining devices being connectable to the firing circuit control, and the firing circuit control having blocking inputs and blocking registers for the blocking of groups of connectable firing circuits; the processor setting the blocking registers after switching-on (of the device) and logically linking the firing circuit control data of the blocking inputs and the blocking registers with one another, so as to block individual groups of firing circuits. Thus it is especially possible individually to block firing circuits for air bags in dependence upon the degree of occupancy and the classification of the occupants in a vehicle. Setting the blocking inputs and the blocking registers takes place shortly after switching-on (of the device), after function tests of the IC's have been conducted.

Abstract: A device for monitoring a processor is described. A watchdog simultaneously monitors the system clock, the software base functions and performs a check of the tests of the system components of the processor. If an error is detected, the watchdog communicates this to the processor, an error counter is incremented and at least one device that is connected to the processor is blocked. If the error counter attains a predetermined value, the block is continued until the device of the present invention is deactivated. If an additional error is detected during a blocking time, the blocking time is extended.

Abstract: A control device for a restraining system in a motor vehicle is proposed, a safety switch, which also includes a watchdog, performing the function of a safety switch in the control device. The safety switch monitors sensor signals which are transmitted to the processor of the control device for plausibility and triggers appropriate restraining means via a time unit for a predefined time period only when the safety switch itself detects a trigger event. On the basis of supplementary data from the sensor signals, the safety switch infers how the sensor signals are to be processed. The safety switch is designed such that it triggers restraining means correspondingly assigned to the sensors. When the control device is switched on, the processor performs a test of the safety switch by generating a test signal using the sensors.

Abstract: In a method of monitoring a voltage supply of a control unit in a motor vehicle, a supply module which provides the voltages is connected to the components of the control unit via a RESET line and the RESET line is tested every time the control unit is started or all monitoring limits of the supply module show no fault again after the faults of the monitored voltages have been filtered. This test occurs by forced periodic pulses which are generated on the basis of a shift in the limits of the monitoring bands of the supply voltages. The reference voltages VREGUL and VREF are kept independent of each other here in order to prevent system perturbations.

Abstract: A device for data transmission between vehicle sensors and a control unit, which is used to decode data telegrams having sensor data from the vehicle sensors and to reformat them into SPI (serial peripheral interface) data telegrams. Furthermore, an interface module of the control unit transmits the SPI data telegrams to the processor of the control unit. By using an alter bit, the processor determines whether to retrieve the newest sensor data or the preceding sensor data. The interface module converts the sensor data in each case into a 10-bit data field of an SPI data telegram, into which the interface module may supplement missing data. By counting out the edges, it is possible for the interface module to recognize the data telegrams from the sensors.

Abstract: A device is proposed for data transmission between vehicle sensors and a control unit, which is used to decode data telegrams having sensor data from the vehicle sensors and to reformat them into SPI (serial peripheral interface) data telegrams. Furthermore, an interface module of the control unit will then transmit the SPI data telegrams to the processor of the control unit. By using an alter bit, it is possible for the processor of the control unit to retrieve either the newest sensor data or the preceding sensor data. The interface module converts the sensor data in each case into a 10-bit data field of an SPI data telegram, the interface module supplementing missing data if necessary. By counting out the edges, it is possible for the interface module to recognize the data telegrams from the sensors.

Abstract: A device and a method are proposed for controlling firing circuits for an element of restraint, individual transistors of the output stages being controlled by bit combinations, and impermissible bit combinations lead to an error message to a processor. In addition, a firing current is measured, in order to estimate a firing energy from it, so that efficient energy management can be carried out. Furthermore, determination of the firing current makes it possible to update a crash protocol as to whether the firing circuit was activated or not. When a voltage of the energy reserve is exceeded, it is further proposed to switch over to pulse operation for operating the output stages. Thereby a greater resistance to short-circuits and a higher efficiency are achieved.

Abstract: A method for checking an interface module, the interface module returning to the processor, using a second data message, stored values representing sensor values, after a request for a test by a processor using a data message. Using these firm sensor values, the processor can check the functioning of the interface module and its own algorithm. A safety module, which also picks up the sensor values, also checks its functioning with them, since the safety module is a redundant hardware path to the processor and is used as a plausibility check for the release decision of means of restraint. The interface module is changed into a test mode as soon as it receives the first data message from the processor, and it then suppresses the transmission of the real sensor values which were received from connected sensors.

Abstract: A device and a method are proposed for controlling firing circuits for an element of restraint, individual transistors of the output stages being controlled by bit combinations, and impermissible bit combinations lead to an error message to a processor. In addition, a firing current is measured, in order to estimate a firing energy from it, so that efficient energy management can be carried out. Furthermore, determination of the firing current makes it possible to update a crash protocol as to whether the firing circuit was activated or not. When a voltage of the energy reserve is exceeded, it is further proposed to switch over to pulse operation for operating the output stages. Thereby a greater resistance to short-circuits and a higher efficiency are achieved.