Abstract: A control unit having a plurality of error shutdown interfaces by which, upon activation, in each case one or more components to be controlled by the control unit is/are able to be switched off. The control unit is set up to run one or more different applications, each of which is equipped to trigger an error shutdown if necessary, the control unit additionally being set up to provide internal interfaces for the one or more applications. The internal interfaces and the error shutdown interfaces are predefinably assignable to each other, so that in response to an invocation of one of the internal interfaces, the one or more error shutdown interfaces assigned to it is/are activated. A method for operation of the control unit is also described.

Abstract: A control unit having a plurality of error shutdown interfaces by which, upon activation, in each case one or more components to be controlled by the control unit is/are able to be switched off. The control unit is set up to run one or more different applications, each of which is equipped to trigger an error shutdown if necessary, the control unit additionally being set up to provide internal interfaces for the one or more applications. The internal interfaces and the error shutdown interfaces are predefinably assignable to each other, so that in response to an invocation of one of the internal interfaces, the one or more error shutdown interfaces assigned to it is/are activated. A method for operation of the control unit is also described.

Abstract: A method for monitoring a drive-by-wire system of a motor vehicle, including: temporally offset reading in of at least two input values of an input quantity of an operating element of the motor vehicle; ascertaining a change over time or rate of change over time of the input quantity from the at least two read-in input values; determination of a monitored quantity for the motor vehicle operation from the change over time or rate of change over time; selection of a monitoring function on the basis of the monitored quantity; monitoring of the monitored quantity for the ascertained motor vehicle operation by the monitoring function.

Abstract: A method for operating a control unit of a motor vehicle. A status inquiry is transmitted by a watchdog unit to a first monitoring unit, which is implemented on a first processor core of a multicore processor. A status response is ascertained by the first monitoring unit as a function of the status inquiry. A fault is ascertained by the watchdog unit as a function of the status response.

Abstract: A method and device for avoiding manipulation of a data transmission. A message containing a message authentication code is received at a processing unit, the message from the processing unit is transferred to a hardware module, a check value as a function of the received message is computed in the hardware module, the received message authentication code and the check value are compared in the hardware module, a result of the comparison is transferred from the hardware module to the processing unit as an output variable, the message authentication code received in the message from the processing unit is checked in the processing unit based on the output variable.

Abstract: A method for monitoring a drive-by-wire system of a motor vehicle, including: temporally offset reading in of at least two input values of an input quantity of an operating element of the motor vehicle; ascertaining a change over time or rate of change over time of the input quantity from the at least two read-in input values; determination of a monitored quantity for the motor vehicle operation from the change over time or rate of change over time; selection of a monitoring function on the basis of the monitored quantity; monitoring of the monitored quantity for the ascertained motor vehicle operation by the monitoring function.

Abstract: A method for operating a control unit of a motor vehicle. A status inquiry is transmitted by a watchdog unit to a first monitoring unit, which is implemented on a first processor core of a multicore processor. A status response is ascertained by the first monitoring unit as a function of the status inquiry. A fault is ascertained by the watchdog unit as a function of the status response.

Abstract: A method and device for avoiding manipulation of a data transmission. A message containing a message authentication code is received at a processing unit, the message from the processing unit is transferred to a hardware module, a check value as a function of the received message is computed in the hardware module, the received message authentication code and the check value are compared in the hardware module, a result of the comparison is transferred from the hardware module to the processing unit as an output variable, the message authentication code received in the message from the processing unit is checked in the processing unit based on the output variable.

Abstract: A method for ascertaining whether an error exists during the operation of an internal combustion engine of a motor vehicle, in which an engine control unit controls the internal combustion engine and a second control unit, in particular a higher-order vehicle control unit, of the motor vehicle is provided, in which a setpoint variable, which describes a curve of a setpoint value of an operating variable, is ascertained and, as a function of whether a comparison between a limiting value and a difference of an ascertained actual variable, which describes a curve of an actual value of the operating variable, and the ascertained setpoint variable, has the result that the difference is greater than the limiting value, it being decided whether the error exists, wherein the engine control unit receives the result of the comparison from the second control unit.

Abstract: A method for determining whether an error condition is present in a motor vehicle, a discrete state in which the motor vehicle is momentarily situated being ascertained with the aid of a state machine, monitoring functions for ascertaining whether an error condition is present being carried out or not as a function of the ascertained discrete state.