Abstract: A fault-tolerant computer system (FTCS) for generating safe trajectories for a vehicle. The FTCS includes: a sensor part (SENSE), a primary part (PRIM), a secondary part (SEC), a tertiary part (TER), and a decide part (DECIDE). The PRIM and TER are configured to produce trajectories by interpreting information of the real world as perceived by the SENSE. The SEC is configured to produce a safe space estimate (FSE) by interpreting information of the real world as perceived by SENSE. The DECIDE and/or SEC are configured to execute correctness checks that take trajectories and FSE as inputs, and qualify a trajectory (TRJ) as safe when said TRJ is inside the FSE, and qualify a trajectory (UTRJ) as unsafe when said UTRJ is not inside the FSE.

Abstract: A method for transmitting control commands in a computer system, which includes components at least in the form of nodes, actuators and communication systems, wherein the control commands are communicated over the communication systems from the nodes to the actuators, and wherein one or more of the components may fail to operate according their specification. For consistently accepting control commands at the actuators, the nodes and their control commands are assigned priorities, wherein a node and its control commands have the same priority, wherein at least two priorities are used, wherein a high priority node produces high priority control commands and a low priority node produces low priority control commands, and wherein a high priority node is configured to communicate its control commands over at least two communication systems to the actuators and a low priority node is configured to communicate its low priority control commands over at least one communication system to the actuators.

Abstract: A fault-tolerant computer system (FTCS) for generating safe trajectories for a vehicle. The FTCS includes: a sensor part (SENSE), a primary part (PRIM), a secondary part (SEC), a tertiary part (TER), and a decide part (DECIDE). The PRIM and TER are configured to produce trajectories by interpreting information of the real world as perceived by the SENSE. The SEC is configured to produce a safe space estimate (FSE) by interpreting information of the real world as perceived by SENSE. The DECIDE and/or SEC are configured to execute correctness checks that take trajectories and FSE as inputs, and qualify a trajectory (TRJ) as safe when said TRJ is inside the FSE, and qualify a trajectory (UTRJ) as unsafe when said UTRJ is not inside the FSE.

Abstract: A method for transmitting control commands in a computer system, which includes components at least in the form of nodes, actuators and communication systems, wherein the control commands are communicated over the communication systems from the nodes to the actuators, and wherein one or more of the components may fail to operate according their specification. For consistently accepting control commands at the actuators, the nodes and their control commands are assigned priorities, wherein a node and its control commands have the same priority, wherein at least two priorities are used, wherein a high priority node produces high priority control commands and a low priority node produces low priority control commands, and wherein a high priority node is configured to communicate its control commands over at least two communication systems to the actuators and a low priority node is configured to communicate its low priority control commands over at least one communication system to the actuators.

Abstract: A method for error detection for at least one system (1), characterised by a) at least partially optically measuring at least one system variable S1 at least at one moment in time t1 or at least in a time interval ?t1, b) creating at least one prediction value Px for at least one system variable Sx for at least one moment in time t2 following the moment in time t1 or for at least one time interval ?t2 following the time interval ?t1 with the aid of the at least one computing model (4), c) comparing the at least one prediction value Px with at least one value of the at least one system variable Sx associated with the moment in time t2 or the time interval ?t2, and d) using the result of the comparison of step c) to determine the presence of at least one error.

Abstract: A method for error detection for at least one image processing system for capturing the surroundings of a motor vehicle, comprising the following steps: a) capturing at least one first primary image (PB1), b) producing at least one first reference image (RB1) by introducing at least one reference feature (RM) into the at least one first primary image (PB1), c) processing the at least one first reference image (RB1) with the aid of at least one algorithm to be checked, d) extracting at least one test feature (TM) associated with the at least one reference feature (RM) from the processed at least one first reference image (RB1), e) comparing the at least one test feature (TM) with the at least one reference feature (RM) and using the result of the comparison in order to determine the presence of at least one error.

Abstract: A method for error detection for at least one image processing system for capturing the surroundings of a motor vehicle, wherein the following steps can be performed in any order unless specified otherwise: a) capturing at least one first primary image (PB1) on the basis of a primary image source (PBU), b) processing the at least one first primary image (PB1) with the aid of at least one algorithm to be checked, after step a), c) extracting at least one primary image feature (PBM) on the basis of the processed at least one first primary image (PB1), after step b), d) producing or capturing at least one reference image (RB1) by displacing and/or rotating the at least one first primary image (PB1) or the primary image source (PBU), after step a), e) processing the at least one reference image (RB1) with the aid of the at least one algorithm to be checked, after step d), f) extracting at least one reference image feature (RBM) from the at least one processed reference image (RB1), after step e), g) comparing the