Abstract: A computer-implemented method for testing a system, the tested system being a computer program, a hardware system, or an embedded system. In the method, using a static analysis, a first part of an execution structure for the system is examined to see if the system runs corresponding execution paths without errors when the first part of the execution structure is executed. If in the static analysis error-free execution is determined for the first part of the execution structure, the system is examined using a dynamic analysis which leaves out execution paths which correspond to the first part of the execution structure.

Abstract: A bus system, a subscriber station, and a method for configuring a static bus system for a dynamic communication are provided. The bus system has at least two subscriber stations, a communications link for connecting the subscriber stations to each other, and at least one device for the dynamic communication between the subscriber stations of the bus system; the subscriber stations and the communications link are developed for the static communication, which is directed to messages to be transmitted on the bus system that are known when the bus system is made available and are configured according to specified transmitters and receivers, and the dynamic communication is directed to messages to be transmitted on the bus system that have become known only after the subscriber stations and the communications link have been made available and are configured according to specified transmitters and receivers.

Abstract: A method for agreeing to a collaboration between a first system and a second system. The method includes: assumptions of the first system with respect to the second system, and guarantees of the first system to the second system, are transmitted by the first system, assumptions of the second system with respect to the first system, and guarantees of the second system to the first system, are transmitted by the second system, if reciprocal assumptions and guarantees correspond to one another, a digital safety contract is concluded between the first system and the second system, and the safety contract is documented in a transaction database.

Abstract: A computer-implemented method for testing a system, the tested system being a computer program, a hardware system, or an embedded system. In the method, using a static analysis, a first part of an execution structure for the system is examined to see if the system runs corresponding execution paths without errors when the first part of the execution structure is executed. If in the static analysis error-free execution is determined for the first part of the execution structure, the system is examined using a dynamic analysis which leaves out execution paths which correspond to the first part of the execution structure.

Abstract: A bus system, a subscriber station, and a method for configuring a static bus system for a dynamic communication are provided. The bus system has at least two subscriber stations, a communications link for connecting the subscriber stations to each other, and at least one device for the dynamic communication between the subscriber stations of the bus system; the subscriber stations and the communications link are developed for the static communication, which is directed to messages to be transmitted on the bus system that are known when the bus system is made available and are configured according to specified transmitters and receivers, and the dynamic communication is directed to messages to be transmitted on the bus system that have become known only after the subscriber stations and the communications link have been made available and are configured according to specified transmitters and receivers.

Abstract: A memory protection unit including hardware registers for entering address tables, a configuration memory for storing the address tables, a preconfigured hardware logic for managing the configuration memory, a data connection between the configuration memory and the hardware logic for loading the hardware registers, a first interface for controlling the loading by a computing core, and a second interface for writing to the configuration memory by the computing core.

Abstract: A coupling device for coupling a software component, which transmits a setting command for setting an actuator on a control system of a motor vehicle, to the control system, the coupling device including a monitoring unit, which is designed to carry out an assessment for each setting command as to whether its implementation will transfer the motor vehicle into a dangerous state, the coupling device being further designed to transmit, as a function of this assessment, a monitored setting command corresponding to the setting command to an implementation unit, the implementation unit being designed to control the actuator.

Abstract: A communication module for controlling a motor vehicle, which is configured for receiving vehicle-independent commands and converting these received commands into a target trajectory of the motor vehicle, and transmitting this target trajectory to an implementation module which is configured for associating a sequence of control commands for components of the motor vehicle with this transmitted target trajectory.

Abstract: A memory protection unit including hardware registers for entering address tables, a configuration memory for storing the address tables, a preconfigured hardware logic for managing the configuration memory, a data connection between the configuration memory and the hardware logic for loading the hardware registers, a first interface for controlling the loading by a computing core, and a second interface for writing to the configuration memory by the computing core.

Abstract: A communication module for controlling a motor vehicle, which is configured for receiving vehicle-independent commands and converting these received commands into a target trajectory of the motor vehicle, and transmitting this target trajectory to an implementation module which is configured for associating a sequence of control commands for components of the motor vehicle with this transmitted target trajectory.

Abstract: A coupling device for coupling a software component, which transmits a setting command for setting an actuator on a control system of a motor vehicle, to the control system, the coupling device including a monitoring unit, which is designed to carry out an assessment for each setting command as to whether its implementation will transfer the motor vehicle into a dangerous state, the coupling device being further designed to transmit, as a function of this assessment, a monitored setting command corresponding to the setting command to an implementation unit, the implementation unit being designed to control the actuator.