Abstract: Device for detecting a detached tire of a vehicle. This device includes an arrangement for detecting the rotational movements of the wheels and generating first quantities that are dependent on the rotational movements detected. A comparison arrangement is also provided in which at least one comparison involving at least one of the first quantities is carried out, as well as an evaluation arrangement in which a signal is output as a function of the output of the at least one comparison. The at least one comparison carried out in the comparison arrangement is preceded by a sorting operation in which at least two of the first quantities are sorted by value; and a detached tire is detected as a function of the signal output by the evaluation arrangement.

Abstract: In an electric brake system with at least an electric wheel brake mechanism having a pair of brake friction pads to produce a braking force based on a brake manipulated variable, and a brake friction pad thrust sensor detecting a pressure of either one of the brake friction pad pair against a disk rotor, an electric brake control unit causing a temporary movement of the brake friction pad pair into contact with the disk rotor when a predetermined time period has expired from a time when a brake pedal has been recovered to an inoperative state. In the system, a position of the brake friction pad pair, at which the pressure becomes greater than a predetermined threshold value during the temporary movement of the brake friction pad pair into contact with the disk rotor, is detected or determined as a braking initiation position.

Abstract: An independent steering and/or braking control to improve motor vehicle stability and stopping utilizes a steer-by-wire system that includes a steering input system, a controller in electronic communication with the steering input system, and a plurality of roadwheel systems. Each of the roadwheel systems is in electronic communication with the controller, and each roadwheel system includes a steering actuator and a steerable wheel rotatably and operably connected to the steering actuator. The steerable wheel is configured to be angled independent of other steerable wheels and relative to a direction of travel of the motor vehicle. A method of stopping the motor vehicle as it travels includes angling a pair of the steerable wheels thereof in opposing directions.

Abstract: A rolling control apparatus and method for controlling rolling of a vehicle controls braking force applied to at least one wheel of the vehicle. The apparatus and method set a target roll angle of the vehicle based on a rolling state of the vehicle, calculate a total control quantity for achieving the target roll angle, based on a running condition of the vehicle, and control the braking force applied to each wheel of the vehicle, based on the total control quantity.

Abstract: A method of triggering a component (Akt—1) in a distributed safety-related system, in particular a component (Akt—1) of an X-by-wire system in a motor vehicle, is described. The component (Akt—1) is triggered by a process computer (Pro—1) assigned to the component (Akt—1) and connected to a communication system (K—1) via a communications controller (S—1). A monitoring unit which is independent of the process computer (Pro—1) is provided for monitoring the process computer (Pro—1). To simplify the design of such a safety-related system while at the same time at least retaining the safety that is achievable on enabling the components, the functions of the monitoring unit are executed by the communications controller (S—1). The communications controller (S—1) preferably executes a question-and-answer communication with the process computer (Pro—1).

Abstract: By a method for detecting an output-stuck fault of a car body acceleration sensor, an absolute value of a relative difference between the logical car body acceleration operated on the basis of a wheel speed and the physical car body acceleration output from a car body acceleration sensor is obtained, and the obtained absolute value of the relative difference is compared with a first rated value. When the absolute value of the relative difference exceeds the first rated value, a fail counter is made to start to count up at that point of time. When a counted value of the fail counter exceeds one second during the absolute value of the relative difference is exceeding the first rated value, the difference of the maximum value and the minimum value of the physical car body acceleration during the period is compared with a second rated value.

Abstract: A device for monitoring a pressure sensor, which is positioned in a braking system of a vehicle. For this purpose, the device contains arrangement with which, during a braking action, a first vehicle motion variable is ascertained, which characterizes a vehicle motion in the longitudinal direction. The device further includes arrangement with which a mass variable is ascertained, which characterizes the mass of the vehicle. Using further arrangement, it is ascertained, for the monitoring of the pressure sensor, whether the first vehicle motion variable lies within a value range for the first vehicle motion variable, whose limits are ascertained as a function of the mass variable.

Abstract: An enhanced emergency brake assist system includes an accelerator pedal operated by the driver coupled to a braking system and used to control the overall vehicle speed. When a forward detection apparatus detects an imminent contact, the braking system automatically applies braking force to the vehicle after the driver fully releases the accelerator pedal. The braking force may be reduced when the driver or passenger are unbuckled.

Abstract: A sensor system with monitoring device wherein the sensor system includes at least two redundant sensors for gathering a process reference variable or process measured variable of a process, and in that the monitoring device includes a first subtractor for producing a first difference between the sensor output signals, a first and a second differentiator for the time derivative of the sensor output signals, a second subtractor for producing a second difference between the differentiated sensor output signals, and a fault analysis device by which the first and the second difference is respectively compared with a predeterminable first or second threshold value, and a fault message is produced when at least one of the differences exceeds the threshold value concerned.

Abstract: An improved anti-lock rear brake yaw control method utilizes a measure of braking intensity to regulate both the initiation of yaw control and the anti-lock braking control parameters once yaw control is initiated. The brake torque and the rate of brake pedal depression provide measures of braking intensity, and are used to develop variable slip and deceleration thresholds to which the rear wheel differential slip and deceleration are compared. The variable thresholds permit initiation of yaw control at relatively low levels of differential wheel slip or deceleration during panic braking, while requiring higher levels of differential wheel slip or deceleration to initiate yaw control during moderate braking.

Abstract: A brake control apparatus for a motor vehicle includes first and second pressure regulators that regulate a pressure of a hydraulic fluid supplied from a high-pressure fluid supply source to first and second wheel cylinders, and a communication control device that controls fluid communication between the first and second wheel cylinders. A controller of the apparatus includes first and second control units that control the first and second pressure regulators, respectively. The controller determines whether one of the first and second control units may be failing to operate normally, and places the communication control device in an operating position for communicating the first and second wheel cylinders with each other when it is determined that the first or second control unit may be failing to operate normally.

Abstract: Wheel slip is determined for individual wheels of a vehicle. Minor wheel slippage of wheels is evaluated to determine information concerning wheel performance. This information may provide an early indication of wheel problems. Wheel problems or faults may be displayed or otherwise indicated in response to minor wheel slippage conditions.

Abstract: The invention relates to a method of storing information in the form of signals from a control system in a vehicle, said method comprising the step of reading a signal on recurrent sampling occasions and increasing the value of a counter which represents a signal value interval. The method further comprises the steps of measuring on each sampling occasion a change of the signal in relation to a previous signal value, comparing change with the threshold value, and, if the change is greater than the threshold value, increasing the value of a counter associated with this threshold value.

Abstract: Device for detecting a detached tire of a vehicle. This device includes an arrangement for detecting the rotational movements of the wheels and generating first quantities that are dependent on the rotational movements detected. A comparison arrangement is also provided in which at least one comparison involving at least one of the first quantities is carried out, as well as an evaluation arrangement in which a signal is output as a function of the output of the at least one comparison. The at least one comparison carried out in the comparison arrangement is preceded by a sorting operation in which at least two of the first quantities are sorted by value; and a detached tire is detected as a function of the signal output by the evaluation arrangement.

Abstract: The device according to the present invention relates to a device for monitoring a pressure sensor, which is positioned in a braking system of a vehicle. For this purpose, the device contains means with which, during a braking action, a first vehicle motion variable is ascertained, which characterizes a vehicle motion in the longitudinal direction. The device further includes means with which a mass variable is ascertained, which characterizes the mass of the vehicle. Using further means, it is ascertained, for the monitoring of the pressure sensor, whether the first vehicle motion variable lies within a value range for the first vehicle motion variable, whose limits are ascertained as a function of the mass variable.

Abstract: A four-wheel drive anti-lock brake control in which the existence of torque transfer between the front and rear wheels of the vehicle is detected based on differences in the duration of ABS control used at each of the independently controlled wheels. Such differences are used to determine a ratio of rear-to-front (or front-to-rear) ABS control. If the ratio indicates the presence of torque transfer, the wheel causing the transfer is identified and its brake pressure released as required to alleviate the detected torque transfer, so long as the release will not cause a change in vehicle deceleration.

Abstract: A method and apparatus for detecting and compensating for wheel brake irregularities includes a unit for detecting a control signal that controls a brake actuator, a unit for detecting changes of the control signal generated by the actuator, and a unit for evaluating control signal changes. The frequency and amplitude of such changes are analyzed to detect the existence of a brake irregularity.

Abstract: An apparatus for determining a failure of wheel speed sensors, which is capable of properly determining whether or not a wheel speed detection system including the wheel speed sensors has failed, if at least a wheel speed detected by the wheel speed sensors indicates a stopped state of a corresponding wheel. An engine rotational speed is detected, and an input-output rotational speed ratio of a torque converter of an automatic transmission mounted in the vehicle is calculated. A shift range of the automatic transmission is detected. Whether or not the vehicle is traveling is determined based on the engine rotational speed and the input-output rotational speed ratio when the automatic transmission is in a traveling range. It is determined that the wheel speed detection system including the wheel speed sensors has failed, if it is determined that the vehicle is traveling, and at the same time, at least one of wheel speed sensors indicates a stopped state of a corresponding one of the wheels.

Abstract: An apparatus for detecting abnormality of a vehicle sensor and a method are provided. The apparatus is capable of preventing erroneous detection of abnormalities of sensors. The apparatus has a grip degree detecting device for detecting grip degree of a wheel of the vehicle with respect to a road surface. In a case in which the grip degree is lower than a predetermined degree, detection for presence of an abnormality of a yaw rate sensor, a cross acceleration sensor and a steering angle sensor are prohibited.

Abstract: An electromechanical braking system utilizes redundancy features to provide safe and reliable braking. The braking system is configured to operate on power provided by multiple power sources. Different modes of braking are available based on whether a failure has occurred in one or more power sources. Additionally, system redundancy allows for failure in one or more primary components without total loss of braking capacity. Proportional braking is provided even in an emergency braking mode.

Abstract: An electrically controlled, decentralized control system in a vehicle having control modules, each of which is assigned a vehicle control element for actuation. The actuation is carried out as a function of a driver's input which is formed in each control module on the basis of sensor signals that represent the actuation of an actuating element by the driver. In this context, at least three sensors are provided for detecting the actuating signals, one actuating signal being supplied directly to each control module.

Abstract: This invention relates to an electromechanical brake system, in particular for automotive vehicles, which includes a pedal module and at least two brake modules. Further, a central module may be provided. Connection between the aforementioned modules can be made by a data bus. The data bus is provided redundantly. In one embodiment, the central module can evaluate signals of a sensor system and examine them for their errors. Further, the central module can emit a corresponding nominal braking value which then is emitted to the brake modules. Thereupon, the brake modules determine appropriate actuating signals for the actuators which interact with the wheels in order to realize the driver's braking intention.

Abstract: To set the brake or traction slip of a wheel at the maximum of the frictional value/slip curve, it is necessary that the wheel sensor associated with each wheel to sense its rotational speed is in a state of operation. Otherwise it is not possible to ascertain the slip of the respective wheel. In order to ensure an emergency function for influencing driving dynamics parameters even in the event of malfunction of a wheel sensor, the present invention discloses performing a two-point control when a wheel sensor is defective. A first operating point (A) lies at a longitudinal slip equal to zero, and a second operating point (B) lies at a longitudinal slip of 100%. Without a longitudinal slip, lateral forces can be transmitted to their maximum, whereas at 100% longitudinal slip longitudinal forces can still be transmitted almost to their maximum.

Abstract: An apparatus for detecting abnormality of a vehicle sensor and a method are provided. The apparatus is capable of preventing erroneous detection of abnormalities of sensors. The apparatus has a grip degree detecting device for detecting grip degree of a wheel of the vehicle with respect to a road surface. In a case in which the grip degree is lower than a predetermined degree, detection for presence of an abnormality of a yaw rate sensor, a cross acceleration sensor and a steering angle sensor are prohibited.

Abstract: An electromechanical brake system, particularly for motor vehicles, with a pedal simulator and brake modules is disclosed. A central module is also provided. The connection between the aforesaid modules can be provided by a data bus. The central module evaluates the braking request signals from a sensor device and checks them for errors. Also, a central module supplies and appropriate desired braking value based on the braking request and possibly higher functions such as ABS or ASR. The desired braking value is then conveyed on to the brake module, which then determines the corresponding control signals for the actuators, which interact with the wheels in order to brake the vehicle as the driver requires.

Abstract: The present invention provides a sensor-fault detection circuit for use with either an inductive or capacitive-type sensor. The sensor-fault detection circuit conducts a test signal into the sensor circuit for testing such sensor circuit. A time difference measuring device is provided to analyze for correct duration of the transit time of a test signal or test pulse, respectively, passing through the sensor. In the event that the transit time does not fall within a predetermined range tolerance, a fault indication can be activated. The circuit can be used, for example, to test an inductive bar-type sensor to determine the speed of a wheel on a vehicle.

Abstract: The invention proceeds from a system for detecting a condition of the wheels of a motor vehicle. For this purpose, means are provided for generating rpm signals, which represent the rotational movements of the wheels, and evaluation means, by means of which a signal is outputted in dependence upon the generated signals, which signal represents the display-relevant condition. The essence of the invention is that the evaluation means are so configured that, first, and dependent upon the generated rpm signals, first difference values are formed for the rpm differences of at least two vehicle wheels on the two sides of the vehicle. Depending upon a first comparison of the formed difference values to each other and/or to pregivable first threshold values, the signal, which represents a display-relevant condition, is outputted.

Abstract: There is provided an apparatus for determining a failure of wheel speed sensors, which is capable of properly determining whether or not a wheel speed detection system including the wheel speed sensors has failed, if at least a wheel speed detected by the wheel speed sensors indicates a stopped state of a corresponding wheel. An engine rotational speed is detected, and an input-output rotational speed ratio of a torque converter of an automatic transmission mounted in the vehicle is calculated. A shift range of the automatic transmission is detected. Whether or not the vehicle is traveling is determined based on the engine rotational speed and the input-output rotational speed ratio when the automatic transmission is in a traveling range.

Abstract: A method and an arrangement for operating an actuator in a motor vehicle are proposed. A first and/or a second operating variable signal is determined and a fault check thereof is carried out. When a fault occurs, a first reaction is immediately initiated, which can represent, for example, a limiting of the adjusting speed and/or of the acceleration of the actuator. When the fault condition has been present for a longer time, a second reaction is initiated, which applies a substitute signal instead of the faulty one for control or which consists of a switching off of the actuator operation.

Abstract: An apparatus for diagnosing a wheel speed input system used in a vehicle motion control apparatus includes wheel speed sensors that output analog signals indicative of the speed of various wheels. The analog waveforms from the sensors are converted into pulse signals which are fed to an electronic control unit. The control unit controls an actuator that affects vehicle motion. In addition, the control unit judges whether or not the pulse signals from the wheel speed sensors are less than a minimum wheel speed that can be effectively detected by the sensors. The electronic control unit converts the analog signals into digital signals at a preset sampling cycle. When a variation of digital values exceeds a threshold value, the electronic control unit judges whether an error arose in the conversion of the waveforms or between the electronic control unit and the transmitted pulse signals.

Abstract: A vehicular brake controlling apparatus comprises: a brake unit to enable a suppression of boosting a braking liquid pressure independently of each wheel cylinder, each wheel cylinder operatively braking a corresponding one of vehicular front and rear road wheels according to the braking liquid pressure; a plurality of road wheel velocity sensors, each road wheel velocity sensor detecting a revolution velocity of the corresponding one of the road wheels and outputting a signal indicating the detected road wheel revolution velocity thereof; and a controller configured to be enabled to execute such a braking force distribution control function as to controllably operate the brake unit to suppress the boosting in the braking liquid pressure for the rear road wheels on the basis of a revolution velocity difference between the front and rear road wheels derived from the signals outputted from the respective road wheel velocity sensors when the revolution velocity difference is in excess of a predetermined start th

Abstract: A device for monitoring a transverse acceleration sensor located in a vehicle and detecting a first transverse acceleration quantity. The device includes a processing device that has at least one filtering device used to filter the first transverse acceleration quantity, yielding a filtered transverse acceleration quantity. A second transverse acceleration quantity is determined by determining device as a function of wheel speed quantities detected by a corresponding detecting device. A comparison between the filtered transverse acceleration quantity and the second transverse acceleration quantity is carried out in a monitoring device to monitor the transverse acceleration sensor.

Abstract: A microprocessor system for safety-critical control operations includes three central units which are located jointly on one chip and execute the same program. Further, there is provision of read-only memories and random-access memories, input and output units, and comparators which check the output signals of the central units for correlation. The central units are interconnected by way of bus systems and bypasses which enable the central units to jointly read and execute the existing data and commands according to the same program. The memory capacity of the read-only and the random-access memories in total amounts to at least 200% compared to the memory required for a non-redundant system. The memory locations are distributed among the three systems, for example, in a ratio of 100:50:50.

Abstract: A motor vehicle having an electronically controlled automatic transmission, which comprises a parking position, and a power parking brake. The parking position and the power parking brake are operable independently of one another. A redundant system is provided in that a device checks the parking position as well as the power parking brake with respect to its optional functioning and, in the event of an operating failure of one system, operates the respective other system to take over the function of the failed system.

Abstract: An electronic control unit for an automotive vehicle which can be manufactured at a low cost and which is compact in size, includes a first microprocessor which has a first memory storing one of a plurality of arithmetic programs for controlling respective predetermined control systems, and which is connected to at least one external sensor and an actuator of a corresponding one of the predetermined control systems. The first microprocessor arithmetically processes information from the at least one external sensor based on the one of the plurality of predetermined arithmetic programs stored in the first memory, and delivers a control signal as a result of the arithmetic processing to the actuator. A second microprocessor is connected to the first microprocessor to deliver and receive data to and from the first microprocessor, thereby monitoring operation of the same.

Abstract: A method of and a system for minimizing undesirable brake release in the brake system of a train having a pneumatic brake on each car connected to a brake pipe which is controlled by a brake pipe controller. The method includes determining the status of the brake system throughout the train and determining a minimal brake pipe reduction for the brake pipe controller, using the status of the brake system. The determined minimal brake pipe reduction is displayed by itself or in combination with the brake pipe reduction produced by the brake pipe controller.

Abstract: A method and a device for generating an error signal in a motor vehicle. In this context, the vehicle has a drive engine as well as an actuating arrangement which can be actuated by the driver of the vehicle, and with the assistance of which a braking system is activated. Further, a detecting arrangement detects an actuation of the actuation arrangement. A wheel drag torque quantity is determined which represents the drag torque caused by the engine at the vehicle wheels. Moreover, a deceleration quantity is determined which represents the longitudinal deceleration of the vehicle. Furthermore, a braking quantity is determined which represents the operating state of the actuating arrangement. The error signal is then generated as a function of the determined drag torque quantity, the determined deceleration quantity, and the determined braking quantity. Thus, it is possible to perform diagnostics on the safety-relevant brake lights switch without requiring additional outlay for hardware.

Abstract: In a vehicle with an active brake control system a control method comprising to the steps of: determining individual wheel speeds of the vehicle wheels responsive to sensor output signals (1016, 1018); determining a vehicle reference velocity responsive to the individual wheel speeds (1002-1012); measuring vehicle yaw rate (1128); determining a delta velocity for each wheel responsive to the individual wheel speed for the wheel and the vehicle reference velocity (326); and when the active brake control system is in the active state for at least one of the wheels, (a) setting a base delta velocity for the one wheel equal to the delta velocity for the one wheel immediately prior to the active brake control obtaining the active state for the one wheel (200); (b) determining a control term responsive to the measured vehicle yaw rate (806), wherein the control term represents a desired delta velocity for the one wheel; (c) setting a first target change in delta velocity responsive to the base delta velocity and th

Abstract: A method and an apparatus for controlling a braking system, the control unit of which controls the wheel brakes receiving reference variables for control purposes. If these reference variables are not available, the control unit produces, on the basis of a predefined braking force distribution between the front and rear axles and in the context of an emergency mode, reference variables which it sets at the wheel brakes.

Abstract: A process for testing and the testing assembly for performing the process for testing an anti-lock brake system (ABS) for a vehicle after installation or work on the ABS without the need to test the vehicle for an ABS design braking event. The process involves engaging a testing unit computer to the electrical communication network of the vehicle and communicating with the Electronic Control Module (ECM) of the ABS. The vehicle is driven onto motorized rollers that can roll the wheels at low speeds without requiring vehicle movement. The testing unit computer makes a series of queries to the ECM to determine status of various parameters. Additionally, the portable computer is used to make directives to the ECM as far as cycling the ABS modulating valves such as the ABS hold solenoids and the ABS decay solenoids and the driver as far as braking or releasing the brake.

Abstract: An algorithm for an anti-lock brake system controller monitors the voltage appearing at a status port to determine whether the controller has been installed the correct vehicle. The algorithm is responsive to detection that the controller has been installed in an incorrect vehicle to disable the anti-lock brake system.

Abstract: A vehicle velocity detecting device is provided for a vehicle. In the device, velocity range in which a difference among respective wheel speeds is caused due to brake noise is defined as a range of speed smaller than a designated velocity V.sub.0. When an average of driving wheels' speeds Vw.sub.Dave is smaller than the designated velocity V.sub.0 and the vehicle is under a great turning condition containing the straight traveling condition, then the smallest wheel speed Vw.sub.MIN is set to a vehicle velocity V.sub.sp in order to exclude the wheel speed being influenced by noise. While, when the vehicle is under a small turning condition where the wheel speed of turning inside wheel is smaller in spite of the same velocity range, the third wheel speed from the largest one is set to the vehicle velocity V.sub.sp to exclude the turning wheel speed. In the velocity range besides both turning conditions, the average of driving wheels' speeds Vw.sub.Dave is set to the vehicle velocity V.sub.

Abstract: A brake diagnosis apparatus for a self-propelled vehicle can secure the safety of the brake and the productivity of mining and quarrying and can detect widely applicable data including the history.

Abstract: A remote fault indicating unit (12) for an electronic system, such as a vehicle adaptive braking system, includes a series of visual indicators, such as light emitting diodes (50-59), on one surface of the housing and a computer serial port connector (13) for use when troubleshooting is done with a PC (18) equipped with the appropriate software. Each of the indicators (50-59) is activated in response to a predetermined malfunction sensed in the system, such as a defective speed sensor, defective modulator, or a defect in the electronic circuitry. The indicators (50-59) are reset with a switch (15) when the system is repaired. When the reset switch (15) is activated, all of the indicators (50-59) flash on and are then turned off. The reset switch (15) can also be activated for a longer period of time changing the ECU (14) configuration.

Abstract: A damping force characteristic variable type shock absorber which takes a mode of operation into a first mode, a second mode, a third mode, and a fourth mode is connected to a damping force characteristic basic mode switching block and a damping force characteristic special mode switching block. This first mode is such that when the vehicular vertical direction determined by the vehicular vertical behavior determinator is upward, an extension phase provides a relatively high damping force characteristic and a compression phase provides a relatively low damping force characteristic. The second mode is such that when the vehicular vertical direction determined by the vehicular vertical behavior determinator is downward, the extension phase provides a relatively low damping force characteristic and the compression phase provides a relatively highly damping force characteristic.

Abstract: The invention relates to a safety system having electrical consumers (18a, 18b) which are supplied with electrical energy in normal operation from an electrical energy source (2, 4, 6). The safety system includes an electrical energy store (14a, 14b) which supplies the electrical consumers (18a, 18b) with electrical energy when the instantaneous operating voltage at the energy source (2, 4, 6) drops below a limit value. The rated voltage of the energy store (14a, 14b) is less than the rated voltage of the electrical energy source (2, 4, 6) and the electrical energy store (14a, 14b) is connected to the electrical energy source (2, 4, 6) via a switchover element (16a, 16b) which assumes the function of a diode. The switchover element (16a, 16b) ensures that a switchover from normal operation to an emergency operation takes place automatically and that, during normal operation, the electrical energy store (14a, 14b) is not charged unintentionally by the electrical energy source (6).

Abstract: An anti-skid control apparatus includes a fluid pressure control valve positioned between a master cylinder and a wheel cylinder of each wheel. The fluid pressure control valve controls the wheel pressure cylinder. A reservoir is provided for temporarily storing brake fluid expelled from the wheel cylinder during an anti-skid control. A pumpless fluid pressure control device is also provided for circulating brake fluid stored in the reservoir back to a master cylinder without using a pump. A flow control valve for maintaining a constant flow of brake fluid is positioned between the master cylinder and the wheel cylinder.

Abstract: A brake valve control method to control the operation of the brake valves is provided in which an error check can be made with one arithmetic logic unit. Signals from a wheel speed sensor are processed to compute the respective wheel speed, and signals from the wheel speed sensor are counted for a prescribed period to derive an approximate wheel speed. If the difference between the wheel speed and the approximate wheel speed is less than or equal to a threshold value, then processing to control the valves is continued; if the difference is greater than a threshold value, then processing to control the valves is suspended.

Abstract: A vehicle brake device has wheel brake actuators or wheel brake units which are provided with electronic circuits. The actuator or units can be actuated by at least one redundant communications system. Transmission of data takes place on the at least one communications system according to a predefinable communications matrix in a time-controlled and fault-tolerant manner.

Abstract: A control architecture having improved fault detection and correction capabilities is disclosed. The system comprises primary and monitor control systems, each having an associated control signal. A fault detector generates an alarm signal based upon differences observed between the primary and monitor control signal. The detector comprises an integrator and a memory means, and alarm signals are generated based upon the total amount of difference observed over a predetermined period of time. In one embodiment of the invention, primary and monitor control signals are averaged to provide a signal that is more fault tolerant than the individual control signals.