Abstract: The present invention relates to a method for synchronizing the clocks of the node computers of a distributed real-time system with an external time reference, such as GPS time, requiring minimal energy expenditure, and for structuring a sparse time-base. By considering the influence of changing physical environmental parameters on the period of oscillation of local oscillators, the holdover interval, according to which an external synchronization must occur, can be dynamically determined and the frequency of the energy-intensive external synchronization processes can be significantly reduced.

Abstract: Method for monitoring a computer vision system (CVS), said computer vision system (CVS) being part of a vehicle control system (VCS) of a vehicle (1000) that is used to maneuver said vehicle (1000) in 3D-space (3000), said computer vision system (CVS) being configured to monitor a surrounding area of the vehicle in real time and said computer vision monitor (CVM) monitoring the behavior of the computer vision system (CVS), comprising the steps of a.) providing the computer vision monitor (CVM) with information concerning a position (LM_POS) of at least one landmark (2000) in the 3D-space (3000), wherein said information is provided by a source, said source being independent of the computer vision system (CVS), b.) providing the computer vision monitor (CVM) with information concerning a current position (CUR_POS) of the vehicle (1000), c.) selecting based on steps a.) and b.) at least one landmark which falls within the range of vision of the computer vision system (CVS), d.

Abstract: A fault-tolerant high-performance computer system is provided for executing control processes for autonomous maneuvering of a vehicle.

Abstract: The invention relates to a time-controlled distribution unit (30, 31) for the distribution of messages in a distributed computer system for safety-critical applications. Said distribution unit is designed as a self-testing functional unit and comprises input channels (201 . . . 222) for receiving time-controlled periodic input messages from node computers (20, 21, 22) upstream in the data flow, and output channels (301 . . . 333) for transmitting time-controlled periodic output messages to the node computers (50, 51, 52) downstream in the data flow, a computer (40) being provided in the distribution unit and being designed to analyze, by means of a “simple” software, useful information contained in the input messages, and to decide whether output messages are output and, if so, which useful information is contained in the output messages.

Abstract: The invention relates to a method for executing a real-time computer application, in particular a comprehensive real-time computer application, wherein a description of functions or of the functions of the real-time computer application is contained in an application software, or for executing an application software, which application software contains a description of functions or of the functions of the real-time computer application, in particular of the comprehensive real-time computer application, on a distributed real-time computer system, which real-time computer system comprises a multiplicity of sensors, actuators, computing nodes and distributor units, and wherein the sensors, actuators, computing nodes and distributor units have access to a global time.

Abstract: The invention relates to a method for periodic transmission of real time data in a computer system, particularly a distributed computer system, which computer system is comprised of node computers (201-208), particularly an appreciable number of node computers (201-208), and distributor units (211-215), particularly an appreciable number of distributor units (211-215), wherein the node computers (201-208) and the distributor units (211-215) have access to a global time, and wherein real time data are transmitted by means of time-triggered real time messages, wherein selected distributor units (212, 213, 214, 215) form a central structure of distributor units; and wherein during a periodic communication round (PCR), in the error-free case, at least two copies of each real time message to be sent are transmitted via at least two independent routes through the central structure, by executing a satisfying or an optimal time plan, from a start distributor unit in the central structure to a target distributor un

Abstract: The invention relates to a method for the periodic transport of real-time data in a distributed computer system, which computer system comprises node machines (100, 101, 102, 103), in particular a plurality of node machines (100, 101, 102, 103), and distributor units (121, 122), in particular a plurality of distributor units (121, 122), wherein the node machines (100, 101, 102, 103) and the distributor units (121, 122) have access to a global time, and wherein real-time data is transported by means of time-triggered real-time messages.

Abstract: The invention relates to a method for monitoring, at the correct time, TTEthernet (TT) messages communicated by a TTEthernet switch (TTE switch) in a distributed real-time computer system. According to the invention, the TTE switch has a global time having precision P and accuracy A, and the TTE switch has a plurality of communication channels and one or more monitoring channels, and the TTE switch contains a selection data structure that specifies which TT message classes are to be monitored, and a copy of a TT message which belongs to a TT message class selected for monitoring is formed in the TTE switch and is transmitted by the TTE switch via a monitoring channel to a monitoring node, and the TTE switch subsequently autonomously transmits an ET message containing an identifier and the exact transmission time of the monitored TT message via a monitoring channel to a monitoring node.

Abstract: A method for fault recognition in a distributed real-time computer system comprising fault containment units (FCUs), which has a global timebase, wherein the fault containment units communicate by means of messages via at least one message distribution unit, wherein a commitment time is associated with a message formed by a fault containment unit, and wherein a message distribution unit that receives a message relays the message to one or more fault containment units operating in parallel, and wherein a processing fault containment unit (VFCU) does not transmit or use any of its results that are influenced by one or more of the received messages to the environment of the processing fault containment unit or before the commitment times associated with the received messages.

Abstract: The invention relates to a method for forcing fail-silent behavior of a periodically functioning, distributed real-time computer system, which real-time computer system comprises at least two redundant NSCFCUs. At the beginning of a frame, the at least two redundant NSCFCUs (110, 111) are supplied with the same input data, wherein each of the redundant NSCFCUs calculates a result, preferably by means of a deterministic algorithm, particularly from the input data, and wherein this result is packed into a CSDP with an end-to-end signature, and wherein the CSDPs of the NSCFCUs (110, 111) are transmitted to an SCFCU (130), and wherein the SCFCU (130) checks whether the bit patterns of the received CSDPs are identical, and, if disparity of the bit patterns is found, prevents further transmission of the CSDPs, particularly those CSDPs in which disparity was found. Furthermore, the invention relates to a periodically functioning, distributed real-time computer system.

Abstract: The invention relates to a method for the reliable switching of synchronization messages in a distributed computer system consisting of a number of node computers, wherein the management of a transparent clock conforming to IEEE Standard 1588 is supported, wherein a switching unit consists of four separate FCUs, specifically an input system EIN, two independent switching systems VER1 and VER2, and an output system AUS, and wherein a message arriving at EIN from a transmitting node computer is forwarded immediately in unmodified form from EIN directly to the two independent switching systems VER1 and VER2, and wherein VER1 provides the event of the arrival of the message with a timestamp, analyses the message and switches said message to (an) output port(s) associated with an address field of the message, and wherein VER1 opens the message and modifies a TIC field within the message in order to determine the delay period of the message in VER1, and wherein VER1 closes the message again by re-calculating a CRC

Abstract: The invention relates to monitoring the area in front of a vehicle by means of an apparatus that comprises at least two imaging devices (110, 120). Provided are a first imaging device (110), which covers a first imaging angle, and a second imaging device (120), which covers a second, greater imaging angle. The first imaging device (110) covers a first zone (111) of the area in front of the vehicle, while at the same time, the second imaging device (120) covers a second zone (121) of the area in front of the vehicle. The two imaging devices (110, 120) are positioned spaced, in particular spaced laterally, from one another such that a central area (140) is covered by both the first and the second imaging devices (110, 120). By fusing the data acquired by the imaging devices (110, 120), a stereo image of the central area is generated, while monoscopic images are generated of those zones that are each covered by only a first or a second imaging device.

Abstract: The invention relates to a method for processing real-time data in a distribution unit of a distributed computer system, the computer system comprising a plurality of node computers and distribution units, the distribution unit containing, in addition to a switching engine (SE) and a switching memory (SM), one or more application computers each with one or more application central processing units and each with one or more application memories (AM), wherein the switching engine of the distribution unit, when it receives, at one of its ports, a message intended for an application computer, forwards this message to the addressed application computer through a direct memory access (DMA) unit that is arranged between the switching memory and the application memory of the addressed application computer and that is under the control of the switching engine. The invention also relates to an expanded distribution unit and a computer system with such expanded distribution units.

Abstract: A system and method for combining results of a multiplicity of periodically operating components of a distributed computer system at the correct time, wherein the components communicate solely by means of messages via at least one communication system, and wherein each component has a global time with the precision P. Each component is unambiguously associated with one of n hierarchical levels wherein the durations of the periods of the components are an integer multiple of one another, and wherein the phase of transmitting each message is synchronized with the corresponding phase of receiving each transmitted message within each longest period of the entire distributed computer system even if the transmitting components and the receiving components are arranged on different hierarchical levels and are spatially distributed.

Abstract: The invention relates to a method for the time-correct data transfer between cyclic tasks in a distributed real-time system, which real-time system comprises a real-time communication system and a multiplicity of computer nodes, wherein a local real-time clock in each computer node is synchronised with the global time, wherein all periodic trigger signals zib for the start of a new cycle i are derived in each computer node simultaneously from the advance of the global time, wherein these periodic trigger signals start the tasks, and wherein a task reads the output data of the other tasks from local input memory areas, to which the real-time communication system writes, and wherein a task writes the result data of the current cycle to a local output memory area, which is associated with the communications system, at an a priori determined individual production instant zif before the end of a cycle, and wherein the schedules for the time-controlled communication system are configured such that the result data o

Abstract: The invention relates to a method for the integration of calculations having a variable running time into a distributed, time-controlled, real-time computer architecture, which real-time computer architecture consists of a plurality of computer nodes, wherein a global time having known precision is available to the computer nodes, wherein at least a portion of the computer nodes is equipped with sensor systems, in particular different sensor systems for observing the environment, and wherein the computer nodes exchange messages via a communication system, wherein at the start of each cyclical frame Fi having the duration d, the computer nodes acquire raw input data by means of a sensor system, wherein the start times of frame Fi are deduced from the progress of the global time, and wherein the pre-processing of the raw input data is carried out by means of algorithms, the running times of which depend upon the input data, and wherein the value of the ageing index AI=0 is assigned to a pre-processing result wh

Abstract: The invention relates to a method for handling faults in a central control device, wherein the control device comprises a distributed computer system (100), to which distributed computer system (100) sensors (112, 113, 122, 123) are connected or can be connected, wherein the distributed computer system (100), particularly all the components of the computer system, is distributed to a first fault containment unit FCU1 (101) and a second fault containment unit FCU2 (102), wherein FCU1 (101) and FCU2 (102) are each supplied with power via a separate, independent power supply, and wherein FCU1 (101) and FCU2 (102) interchange data solely via galvanically separated lines, and wherein some of the sensors are connected at least to FCU1 (101) and the remainder of the sensors are connected at least to FCU2 (102), and wherein FCU1 (101) and FCU2 (102) are connected to a redundantly designed communication system (131, 132) having one or more actuators, so that, if FCU1 fails, FCU2 will maintain a limited functionality u

Abstract: The invention relates to a method for fault identification in a System-on-Chip (SoC) consisting of a number of IP cores, wherein each IP core is a fault containment unit, and where the IP cores communicate with one another by means of messages via a Network-on-Chip, and wherein an excellent IP core provides a TRM (Trusted Resource Monitor), wherein a faulty control message which is sent from one non-privileged IP core to another non-privileged IP core is identified and projected by an (independent) fault container unit, as a result of which this faulty control message cannot cause any failure of the message receiver.

Abstract: Embodiments of the disclosed invention relate to a method for generating fail-silent synchronization messages in a distributed real-time system including a satellite receiver, a precision reference clock, a central computer, a monitor and a data block for storing configuration parameters. The satellite receiver periodically generates a time signal (S-signal) based upon time signals received from a satellite, and the reference clock periodically produces an actual time signal (R-signal) having a nominal frequency and phase identical to the frequency and phase of the S-signal. A periodic synchronization message is generated by the central computer based upon the S-signal the R-signal and parameters stored by the central computer.

Abstract: The aim of the present invention is that of establishing a fault-tolerant global time in a fault-tolerant communication system of a distributed real-time system. For this purpose, a fault-tolerant message switching unit is provided, which is composed of four independent switching units. These four independent switching units jointly establish a fault-tolerant time. The terminal systems are connected to a fault-tolerant message switching unit via two independent fail-silent communication channels, so that the clock synchronization and network connections are preserved, even if a part of the fault-tolerant switching unit or of a communication channel fails.