Abstract: A device for controlling firing circuits for restraining devices, a processor and a safety IC for controlling the restraining devices being connectable to the firing circuit control, and the firing circuit control having blocking inputs and blocking registers for the blocking of groups of connectable firing circuits; the processor setting the blocking registers after switching-on (of the device) and logically linking the firing circuit control data of the blocking inputs and the blocking registers with one another, so as to block individual groups of firing circuits. Thus it is especially possible individually to block firing circuits for air bags in dependence upon the degree of occupancy and the classification of the occupants in a vehicle. Setting the blocking inputs and the blocking registers takes place shortly after switching-on (of the device), after function tests of the IC's have been conducted.

Abstract: An interface module is proposed, to which sensors are connected and which is positioned in a control device, it being indicated via an identification input how the sensor data are to be classified by the interface module. In particular, this can be used to distinguish between safety-relevant and safety-irrelevant data. Furthermore, the nature of the data can be identified therewith. This identification input is advantageously designed as a voltage input, the voltage levels being then converted into a bit sequence. The identification input is connected to ground via a resistor, so that, in the case of an unspecified input potential, the voltage level is connected to ground. The interface module has a logic circuit to which voltage comparators are connected, which compare the voltages to reference potentials, and then the logic circuit performs a coding using the bit sequences, as a function of the output signals of the voltage comparators.

Abstract: The invention relates to a microprocessor circuit arrangement having a watchdog circuit, which monitors the proper program flow for the processor and which must be triggered in specific time intervals by the microprocessor, since otherwise it will reset (reset function) the microprocessor to the program start or the like. For reasons of simplification, it is proposed that when the microprocessor (2) recognizes that a malfunction has occurred, it spuriously triggers the watchdog circuit (5) in a selective manner to release a reset function coming from the watchdog circuit (5).

Abstract: A vehicle occupant safety system, in particular a restraining system such as an airbag, safety-belt tightener or the like, includes a sensor device having at least two sensors, a preprocessing device comprising at least two preprocessing circuits, for the sensor signals, a computing system and a trigger circuit including at least two stages, for a safety device. For providing a high degree of safety with relatively low costs, the computing system is constructed as a single-computer system in such a way that it processes the data of two preprocessing circuits in two programs with staggered timing with respect to one another.

Abstract: An apparatus for controlling motor vehicle safety devices has a plurality of sensors, each coupled to a control unit. The control unit in turn activates inertial restraining devices based on the output signals generated by the sensors.

Abstract: In a method for evaluating the output signal (a) from a sensor (1), an average value (M) is formulated from a plurality of successively measured values (ai) of the output signal (a). Subsequently, the difference (D) between this measured value (M) and one succeeding measured value of the output signal (a) from the sensor (1) is determined, and finally the thus formulated differential value is compared to a specified threshold value to derive a criterion for activating a restraining device for protecting motor vehicle occupants.

Abstract: A passenger safety device includes at least one electrical component, especially a restraint system such as an airbag and/or seat belt tightener, for a vehicle equipped with an electrical system, with an energy reserve circuit to temporarily maintain the voltage supply for triggering of the safety device. In order to ensure reliable functioning, it is proposed that the safety device be disconnected from the electrical system voltage (U.sub.N) when the voltage exceeds a maximum value (U.sub.max) which can be predetermined, and then be connected with the energy reserve circuit (9).

Abstract: The invention relates to a safety system for motor-vehicle occupants, in particular a restraint system, such as an airbag, belt tighteners, etc., which has at least one tripping sensor that exhibits a response time, one processing unit, and one final firing stage for activating the safety system. To protect against spurious tripping, an inhibiting circuit (21) is proposed, which is triggered by the processing unit (2). It cancels an interlock of the final firing stage (5) only after an interlocking enable time (t.sub.v) has elapsed, whereby the interlocking enable time (t.sub.v) is shorter than the response time (t.sub.a) of the tripping sensor (1).

Abstract: In an evaluation process for output signals of an acceleration-sensitive sensor in restraint systems for vehicle occupants, the output signals of the sensor are picked up and evaluated periodically. In a normal, uncritical operating state the evaluation occurs after relatively long intervals of time. If indications suggest a critical operating state, that is, an accident, however the evaluation of the output signals of the sensor occurs at shorter intervals of time.

Abstract: A safety device for vehicle occupants has an operational voltage source, typically the vehicle's battery, and a storage device for electrical energy, typically a capacitor. Several tripping devices, typically ignition tablets, are coupled to the storage device and/or the operational voltage source, for actuating inertial restraining devices, such as airbags, belt tighteners or the like. If the storage device fails, each tripping device is connected for a specified period of time to the operational voltage source by a respective switch. Each switch is triggered by an evaluating device. Therefore, if the storage device fails, as long as the operational voltage source is connected to the safety device, each tripping device and, therefore, inertial restraining device can be actuated.

Abstract: A method of actuating a safety device for vehicle occupants, wherein the safety device has several tripping devices coupled to a capacitor and to passenger restraint devices, such as air bags, seat belts, or the like. The energy supplied by the capacitor to a tripping device is measured upon actuation of that device. If the energy supplied exceeds a predetermined limit, the flow of electric current from the capacitor to the respective tripping device is interrupted. Thus, if an actuated tripping device shunts, the energy of the capacitor is not drained by the shunt, and the capacitor maintains an energy level sufficient to actuate the other tripping devices.

Abstract: A safety device for a vehicle occupant comprising a restraint for the vehicle occupant, a sensing circuit for evaluating a vehicle condition, a control circuit for actuating the restraint in response to a predetermined vehicle condition, and two separate reserve energy storages for supplying electrical energy to the sensing and control circuits, respectively.

Abstract: In a method for controlling the release of a passenger restraint system in a vehicle, an acceleration signal is measured and integrated with respect to time to obtain a velocity signal. A release threshold value for the velocity signal is determined. If the velocity signal then falls below the release threshold value, thus indicating a vehicle collision, the passenger restraint system is released. The release threshold value is controlled depending on the type of accident situation and upon the operating parameters of the vehicle to increase the release sensitivity of the passenger restraint system. For example, the release threshold value is adjusted based on the value of the velocity signal. If the velocity signal decreases in value, then the release threshold is lowered to a more sensitive value.

Abstract: A voltage supply circuit has an energy reserve, which is charged by a voltage transformer, and a comparator circuit, which controls switching circuit components. When the supply voltage is at its nominal value, a first switching circuit component is closed, with the result, that the energy reserve is operated in open circuit and is charged by the voltage transformer. When the supply voltage drops below a threshold, the comparator circuit opens the first switching circuit component and closes a second switching circuit component with the result that, at this point, the charged energy reserve is available for the voltage supply to the circuit configuration normally supplied with voltage from the supply voltage and the voltage transformer is disconnected from the supply voltage.

Abstract: To prevent spurious operation of a controlled operating element (12), typically a safety element which can be irreversibly triggered, such as a trigger or firing cartridge of a passenger restraint airbag, while providing for reliable operation in case of a crash of a vehicle in which the airbag is installed, a control signal is derived from a computer (10) processing input signals. The transmission of the control signals from the computer (10) to the operating element (12) is through a time delay stage (30) which has a time delay of sufficient length to permit the computer to correct, if necessary, signals from its output (16) and to carry out tests on the output signals from the computer apparatus. An evaluation circuit (18) continuously compares the output signals with check values. The check values may be derived from, for example a second computer similar to the computer, or from stored representative values.

Abstract: To permit rapid checking of possible malfunctions or erroneous computations in data processing cycles, in which a plurality of computer units carry out processing of data, especially to supervise and control safety apparatus, each one of the units generate intermediate information data at predetermined time intervals, which intermediate information data are transmitted to each one of the other units. The so-received intermediate information data are buffer-stored and compared in all the units with locally generated check data. If the comparison indicates coincidence, computation is continued through subsequent processing cycles; if an error is detected, at least that computer unit which processes the data erroneously is reset to repeat at least the preceding computation cycle, and the unit which detected the error is placed into a "set-and-hold" mode.

Abstract: The invention is directed to a circuit arrangement for controlling the current through an electric load such as an electromagnetic load. A current-controlling element controls the current through the load in response to a control unit. The voltage at the load is compared with a voltage which depends on the control unit which drives the current-controlling element. The current through the electric load is then controlled in dependence upon the result of this comparison. An embodiment is described by means of which the entire circuit arrangement is protected against function failures or even destruction.

Abstract: A method of actuating a safety device for vehicle occupants, wherein the safety device has several tripping devices coupled to a capacitor and to passenger restraint devices, such as air bags, seat belts, or the like. The energy supplied by the capacitor to a tripping device is measured upon actuation of that device. If the energy supplied exceeds a predetermined limit, the flow of electric current from the capacitor to the respective tripping device is interrupted. Thus, if an actuated tripping device shunts, the energy of the capacitor is not drained by the shunt, and the capacitor maintains an energy level sufficient to actuate the other tripping devices.

Abstract: In a method for controlling the release of a passenger restraint system in a vehicle, an acceleration signal is measured and integrated with respect to time to obtain a velocity signal. A release threshold value for the velocity signal is determined. If the velocity signal then falls below the release threshold value, thus indicating a vehicle collision, the passenger restraint system is released. The release threshold value is controlled depending on the type of accident situation and upon the operating parameters of the vehicle to increase the release sensitivity of the passenger restraint system. For example, the release threshold value is adjusted based on the value of the velocity signal. If the velocity signal decreases in value, then the release threshold is lowered to a more sensitive value.