EP2909721A1 - Interface for interchanging data between redundant programs for controlling a motor vehicle - Google Patents
Interface for interchanging data between redundant programs for controlling a motor vehicleInfo
- Publication number
- EP2909721A1 EP2909721A1 EP13779792.4A EP13779792A EP2909721A1 EP 2909721 A1 EP2909721 A1 EP 2909721A1 EP 13779792 A EP13779792 A EP 13779792A EP 2909721 A1 EP2909721 A1 EP 2909721A1
- Authority
- EP
- European Patent Office
- Prior art keywords
- microcontroller
- control unit
- electronic control
- motor vehicle
- unit according
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Ceased
Links
- 230000001276 controlling effect Effects 0.000 claims abstract description 7
- 230000001105 regulatory effect Effects 0.000 claims abstract description 5
- 230000015654 memory Effects 0.000 claims description 28
- 230000002093 peripheral effect Effects 0.000 claims description 24
- 230000006870 function Effects 0.000 claims description 11
- 238000004891 communication Methods 0.000 claims description 7
- 230000008859 change Effects 0.000 claims description 4
- 230000003068 static effect Effects 0.000 claims description 2
- 239000000758 substrate Substances 0.000 claims description 2
- 230000010354 integration Effects 0.000 description 6
- 238000000926 separation method Methods 0.000 description 4
- 238000011161 development Methods 0.000 description 3
- 238000005538 encapsulation Methods 0.000 description 3
- 238000000034 method Methods 0.000 description 3
- 238000005469 granulation Methods 0.000 description 2
- 230000003179 granulation Effects 0.000 description 2
- 238000000638 solvent extraction Methods 0.000 description 2
- 230000002411 adverse Effects 0.000 description 1
- 238000013459 approach Methods 0.000 description 1
- 230000000712 assembly Effects 0.000 description 1
- 238000000429 assembly Methods 0.000 description 1
- 230000009286 beneficial effect Effects 0.000 description 1
- 238000010586 diagram Methods 0.000 description 1
- 230000000694 effects Effects 0.000 description 1
- 210000003608 fece Anatomy 0.000 description 1
- 230000002068 genetic effect Effects 0.000 description 1
- 230000006872 improvement Effects 0.000 description 1
- 230000003993 interaction Effects 0.000 description 1
- 230000007257 malfunction Effects 0.000 description 1
- 238000004519 manufacturing process Methods 0.000 description 1
- 230000008569 process Effects 0.000 description 1
- 238000012360 testing method Methods 0.000 description 1
Classifications
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B60—VEHICLES IN GENERAL
- B60T—VEHICLE BRAKE CONTROL SYSTEMS OR PARTS THEREOF; BRAKE CONTROL SYSTEMS OR PARTS THEREOF, IN GENERAL; ARRANGEMENT OF BRAKING ELEMENTS ON VEHICLES IN GENERAL; PORTABLE DEVICES FOR PREVENTING UNWANTED MOVEMENT OF VEHICLES; VEHICLE MODIFICATIONS TO FACILITATE COOLING OF BRAKES
- B60T7/00—Brake-action initiating means
- B60T7/12—Brake-action initiating means for automatic initiation; for initiation not subject to will of driver or passenger
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/46—Multiprogramming arrangements
- G06F9/54—Interprogram communication
- G06F9/544—Buffers; Shared memory; Pipes
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B15/00—Systems controlled by a computer
- G05B15/02—Systems controlled by a computer electric
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05D—SYSTEMS FOR CONTROLLING OR REGULATING NON-ELECTRIC VARIABLES
- G05D1/00—Control of position, course, altitude or attitude of land, water, air or space vehicles, e.g. using automatic pilots
- G05D1/0055—Control of position, course, altitude or attitude of land, water, air or space vehicles, e.g. using automatic pilots with safety arrangements
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
- G06F11/16—Error detection or correction of the data by redundancy in hardware
- G06F11/1629—Error detection by comparing the output of redundant processing systems
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2201/00—Indexing scheme relating to error detection, to error correction, and to monitoring
- G06F2201/845—Systems in which the redundancy can be transformed in increased performance
Definitions
- the present invention relates to an electronic Kont ⁇ roll unit according to the preamble of claim 1 and its use.
- EP 1 456 720 B1 describes a multi-core redundant control computer system for safety-critical applications, which comprises a plurality of computer blocks, each computer block in turn having a multi-core redundant control computer system with at least two control computers.
- the control computers are each provided with a calculation kernel with partially or fully redundant peripheral elements and partially or fully redundant memory equipped elements and are connected to an arbitration unit, which monitors the control computer for malfunction and this can connect or disconnect via a dedicated communication ⁇ tion controller of a vehicle data bus.
- a multi-core integrated microprocessor circuit which has a main and a secondary processor structure, wherein at least the main processor structure is constructed kernredundant and processed by this essentially only safety-critical programs, while the secondary processor structure substantially not safety-critical programs.
- the main processor ⁇ structure checks the slave processor structure for proper functioning.
- the two structures processor access while on these exclusively assigned to each SpeI ⁇ cher Schemee, wherein a data exchange by means of a
- Shared memory area can be done. Furthermore, independent and inherently different operating systems are executed on the two processor structures.
- the object of the invention is to provide a motor vehicle control device in which an integration of software Modules especially with high resource requirements, which exists for future motor vehicle systems, can be realized effectively and efficiently. This object is achieved by an electronic control unit according to claim 1.
- the invention describes an electronic control unit for controlling and / or regulating at least one motor vehicle system, comprising at least one integrated Mikrocontrol- lersystem for executing software, which has at least two microcontroller units, each running at least one independent operating system, wherein at least one interface for exchange information is provided between the microcontroller units, which is further characterized in that a first microcontroller unit is designed such that it carries out a control and / or regulation of a first motor vehicle system, in particular a motor vehicle brake system, and a second microcontroller unit is configured in such a way, in that the latter can provide specifications for the control and / or regulation of the first motor vehicle system by means of the interface of the first microcontroller unit.
- a microcontroller in the sense of this description also means microprocessors and other generic integrated circuits which have at least one processor and can detect and output signals via peripheral functions or peripheral interfaces.
- a microcontroller according to the invention can also be electronic memories, such as e.g. Register, mixed signal
- Circuits and other functional assemblies include which can be used to operate a motor vehicle system in an advantageous manner.
- Basic functions for controlling the first motor vehicle system are thus advantageously carried out by the first microcontroller unit, whereby requirements for an increased availability in accordance with a predetermined
- Security level can be met. Furthermore, resources can advantageously be provided by means of the second microcontroller unit, which resources can be used to implement compute-intensive tasks. The resulting increase in performance allows, for example, the use of future, resource-intensive assistance systems, which should improve the safety of road users.
- the first and / or the second microcontroller unit can also be used as the basis of specialized hardware, such as individualized circuit parts or electronics for sensors, actuators and / or buses (LIN, FlexRay, CAN).
- specialized hardware such as individualized circuit parts or electronics for sensors, actuators and / or buses (LIN, FlexRay, CAN).
- microcontroller units software is encapsulated in such a way that a change of this can be done in at least one of the micro-controller units, without having to make a change of the software of the respective other micro Control ⁇ lerappel.
- the reliability . skri ⁇ genetic automotive systems by thus realized encapsulation in particular increased and there may be an integration of software modules or modifying existing software, the microcontroller units independently from the other microcontroller unit and software implemented thereon.
- the modular approach of hardware and software also reduces development time by making development processes more manageable by improving the separation and encapsulation of the systems, as well as portability to other hardware.
- the first operating system and the second operating system are different from each other.
- the first operating system preferably satisfies a standard operating system, specific to the ⁇ OSEK OS, and the second operating system is based be ⁇ vorzugt based on a unified software architecture, especially AUTOSAR.
- an implementation of software modules is facilitated to the second operating system, for example by a vehicle manufacturer, while safety-oriented software, in particular on the a high level Sure ⁇ ness fulfilling operating system standard can be provided.
- the second microcontroller unit is designed in such a way from ⁇ that this we ⁇ tendonss performs control and / or regulation of other motor vehicle system.
- the microcontroller system is designed as a multi-core processor, in particular a quad-core processor, wherein the microcontroller units are accommodated on a common substrate.
- each microcontroller unit has at least two redundant processors.
- the availability of the microprocessor system can advantageously be increased and the requirements for corresponding security levels can be met.
- the microcontroller system is designed in such a way that separate memory and / or peripheral resources of either the first
- Microcontroller unit or the second microcontroller unit or both microcontroller units are assigned.
- the allocation of the memory and / or peripheral resources is implemented by means of a hardware-based protection concept for accesses.
- the hardware-based protection concept is configured such that each microcontroller unit is assigned at least one, in particular static, identifier and the microcontroller system performs authentication of the microcontroller units to implement the access control.
- the microcontroller system at least one electronic memory and / or storage area on which respectively assigned Speicherbe ⁇ rich comprises the microcontroller units.
- the interface is preferably one of the microcontroller units and / or shared memory area and / or a point-to-point connection.
- this comprises at least one Domä ⁇ NEN controller and / or is configured such that a domain controller function of at least one motor vehicle ⁇ network is realized.
- the electronic control unit comprises at least one gateway controller and / or is configured such that a gateway function for Communication of different motor vehicle networks is realized.
- the invention comprises the use of at least one embodiment of the above-described electronic control unit in a motor vehicle brake system.
- FIG. 2 shows an example microcontroller system comprising a quad-core microcontroller
- FIG 3 shows an embodiment of the electronic control unit according to the invention, in which it is provided as Doze ⁇ NEN controller for a vehicle network.
- Fig. 1 shows the first description in particular, the functional relationships the microcontroller system 34 of an electronic control unit for controlling at least a motor vehicle system, for example a motor vehicle brake system ⁇ .
- Microcontroller unit 1 performs, for example, the control of a motor vehicle brake system and includes the necessary control software and interfaces 4 for the connection of peripheral (eg analog-to-digital converter, PWM, timer, FlexRay, CAN), wherein the microcontroller unit 1 comprised operating 5 can communicate with the corresponding peripherals via the interfaces 4.
- Operating system 5 meets a standard automotive embedded real-time operating system such as the OSEK-OS operating system standard.
- the function abstraction level 8, the system abstraction level 9, the hardware abstraction level 10 and the vehicle integration level 11 are differentiated.
- Multi-core microcontroller unit 1 ⁇ provided with a separate second operating system 5 ⁇ , which includes these associated interfaces for the connection of peripheral 4 ⁇ .
- the second microcontroller unit 1 ⁇ has ostensibly the task of safety-related software modules 6 which are provided ⁇ example by vehicle manufacturers to execute.
- Res ⁇ resources are provided which for the implementation of computationally intensive tasks, for example for driving and dynamic features can be used, while basic software and basic functions of the brake system are performed by the first microcontroller unit.
- ASIL level ASIL-D
- the operating system 5 ⁇ is preferably a unified ⁇ Soft ware architecture, particularly AUTOSAR, is provided, wherein the different software layers of abstraction of AUTOSAR in Fig. Are shown schematically.
- the application level includes the software modules 6 which by means of
- Interfaces 4 ⁇ can communicate with the corresponding periphery.
- the MCUs 1, 1 ⁇ communicate via interface 2, in particular by means of a point-to-point connection and using the corresponding driver or software 7, 7 ⁇ .
- the software modules 6 via defined hardware and software interfaces, default values or instructions to the first operating system 5 or microcontroller unit 1 are given, which then makes the actual control of the braking system in consultation with this.
- the communication of the MCUs with each other and with the periphery is preferably secured with test data.
- FIG. 2 shows an embodiment of the microcontroller lersystems 34, wherein this or the microcontroller units 1, 1 ⁇ according to the description of FIG. 1 in a common integrated housing in accordance with at least four processors 3.3 ⁇ are realized (quad-core processor) ,
- quad-core processor quad-core processor
- a multi-processor software is software concept implemented on a multi-core hardware architecture, wherein at least one redundant executed electronic memory 21 is provided which has a locked for the second operating system 5 ⁇ first memory area 22 and a the second operating area 5 ⁇ associated with the second operating system 23 comprises.
- Memory area 22 is assigned to the first operating system 5 and is enabled for this, while the second memory area 23 for the first operating system 5 is disabled.
- a shared memory area 24 is provided for the first and the second operating system, which implements the interface 2 described in FIG. 1 and via which the communication of the operating systems 5, 5 ⁇ or microcontroller units 1, 1 ⁇ takes place with one another.
- the memory areas 22, 23, 24 need not be part of a common physical memory, as shown in FIG. 2, but may also be implemented on separate physical memories.
- the four-core system includes microcontroller not shown configura ⁇ tion register to ensure a separation of the microcontroller units 1, 1 ⁇ .
- the microcontroller units 1, 1 ⁇ may also be provided in two separate microcontrollers or microprocessors with separate integrated circuit housings.
- the processors 3.3 ⁇ 1.1 ⁇ , the microcontroller unit are each designed redundant according to the embodiments described, and preferably operate in a lockstep with redundancy danzüberwachung. Depending on the requirements on the availability or settled security level of the respective Mikrocon ⁇ troller unit 1.1 ⁇ can also be dispensed with a redundancy, wherein the further processor may be provided as an additional computing resource or is absent.
- the hardware and / or software of the microprocessor system 34 or the re ⁇ dundanten processors 3.3 ⁇ may also be designed divärsitmaschine.
- the software of the microcontroller system 34 is ⁇ running under different ⁇ union microcontroller units 1, 1, and thus on different master instances.
- MMU memory management units
- the microcontroller unit 1,1 ⁇ for different embodiments of microprocessor system 34, preferably peripheral resources, for example, project specific, assigned.
- peripheral resources for the microcontroller system 34 do not have to be designed several times.
- the aforementioned methods are not sufficient for peripheral resources shared by both microcontroller units 1.1 ⁇ , since too great a number or too fine granulation of memory protection rules would have to be implemented, which would adversely affect the performance of the hardware. Therefore, a hardware-based protection concept for accessing peripheral resources is additionally provided, which allows a fine partitioning of these between the master instances or microcontroller units 1, 1 ⁇ present in the microprocessor system 34.
- the corresponding hardware component eg peripheral module 4,4 ⁇ or memory 22,23,24, is statically configured by software and by means of an identification number assigned to each individual master is an authentication of Microcontroller units 1.1 ⁇ . Accesses to peripheral resources are only carried out for the microcontroller unit 1, 1 ⁇ or master enabled for it, otherwise they are blocked. The separation can be made down to the level of entire registers and / or register sections, which are assigned to one of the microcontroller units 1.1 ⁇ .
- the possibility of sharing individual hardware resources with a plurality of microcontroller units 1.1 ⁇ avoids the multiple implementation of peripheral modules 4, 4 for the purpose of distinguishing between the software components of the various microcontroller units 1, 1.
- FIG. 3 shows an exemplary embodiment of the control unit 30 according to the invention for a brake control unit of a motor vehicle brake system.
- Control unit 30 in this case comprises microcontroller system 34 according to the invention.
- Control unit 30 and / or microcontroller system 34 execute, according to a particularly preferred embodiment, a domain controller function 35 in the networks or bus systems 31, 37 of the motor vehicle.
- the domain controller 35 supports gate ⁇ way functionalities 36, whereby a communication of the different bus systems 31 and 37 is made possible, if different types of protocols are based. For example, actuators, sensors and / or control devices for further systems 33 are associated with this.
- Sensors, actuators and / or controllers are represented by block 32.
- Other domain controllers as well as associated components are represented by blocks 30 ⁇ and 33 ⁇ .
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- Software Systems (AREA)
- Automation & Control Theory (AREA)
- Quality & Reliability (AREA)
- Aviation & Aerospace Engineering (AREA)
- Radar, Positioning & Navigation (AREA)
- Remote Sensing (AREA)
- Transportation (AREA)
- Mechanical Engineering (AREA)
- Regulating Braking Force (AREA)
- Hardware Redundancy (AREA)
- Safety Devices In Control Systems (AREA)
Abstract
Description
Claims
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
DE102012218852 | 2012-10-16 | ||
PCT/EP2013/071615 WO2014060470A1 (en) | 2012-10-16 | 2013-10-16 | Interface for interchanging data between redundant programs for controlling a motor vehicle |
Publications (1)
Publication Number | Publication Date |
---|---|
EP2909721A1 true EP2909721A1 (en) | 2015-08-26 |
Family
ID=49448133
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
EP13779792.4A Ceased EP2909721A1 (en) | 2012-10-16 | 2013-10-16 | Interface for interchanging data between redundant programs for controlling a motor vehicle |
Country Status (6)
Country | Link |
---|---|
US (1) | US10214189B2 (en) |
EP (1) | EP2909721A1 (en) |
KR (1) | KR20150067380A (en) |
CN (1) | CN104718532A (en) |
DE (1) | DE112013005824A5 (en) |
WO (1) | WO2014060470A1 (en) |
Families Citing this family (15)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
DE102014217321A1 (en) * | 2014-08-29 | 2016-03-03 | Continental Teves Ag & Co. Ohg | Microcontroller system and method for safety-critical motor vehicle systems and their use |
EP3269158A1 (en) * | 2015-03-09 | 2018-01-17 | AutoConnect Holdings LLC | Vehicle and occupant application integration |
EP3156904A1 (en) * | 2015-10-13 | 2017-04-19 | Autoliv Development AB | A vehicle safety electronic control system |
DE102016224747A1 (en) * | 2016-12-12 | 2018-06-14 | Robert Bosch Gmbh | control unit |
US11214273B2 (en) | 2017-06-23 | 2022-01-04 | Nvidia Corporation | Method of using a single controller (ECU) for a fault-tolerant/fail-operational self-driving system |
US10606764B1 (en) * | 2017-10-02 | 2020-03-31 | Northrop Grumman Systems Corporation | Fault-tolerant embedded root of trust using lockstep processor cores on an FPGA |
DE102017218898A1 (en) | 2017-10-23 | 2019-04-25 | Volkswagen Aktiengesellschaft | Control system for a battery system |
FR3077403B1 (en) * | 2018-01-29 | 2019-12-27 | Continental Automotive France | METHOD FOR DESIGNING AN APPLICATION TASK ARCHITECTURE OF AN ELECTRONIC CONTROL UNIT WITH VIRTUAL CORE (S) |
CN109541987B (en) * | 2018-10-17 | 2021-09-03 | 同济大学 | Plug-and-play intelligent automobile domain controller with redundancy structure and method |
CN110955232A (en) * | 2019-12-13 | 2020-04-03 | 深圳市英博超算科技有限公司 | Automatic driving system architecture |
CN112187744B (en) * | 2020-09-14 | 2022-01-11 | 北京航空航天大学 | OTA (over the air) upgrading method for vehicle-mounted domain architecture CAN (controller area network) bus DoS (DoS) attack |
CN112506701B (en) * | 2020-12-02 | 2022-01-21 | 广东电网有限责任公司佛山供电局 | Multiprocessor chip error recovery method based on three-mode lockstep |
EP4060487A1 (en) * | 2021-03-17 | 2022-09-21 | Aptiv Technologies Limited | Electronic control unit, vehicle comprising the electronic control unit and computer-implemented method |
CN113904882B (en) * | 2021-09-24 | 2023-08-18 | 广东汇天航空航天科技有限公司 | Communication control system and communication control method for multiple MCU units |
CN115412394B (en) * | 2022-08-22 | 2023-08-18 | 奥特酷智能科技(南京)有限公司 | Heterogeneous domain controller inter-core communication method based on AutoSar |
Family Cites Families (11)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20040026158A1 (en) * | 2000-03-27 | 2004-02-12 | Peter Rieth | Vehicle system and axle guide module for a vehicle steering system |
JP4319547B2 (en) * | 2001-12-11 | 2009-08-26 | コンティネンタル・テーベス・アクチエンゲゼルシヤフト・ウント・コンパニー・オッフェネ・ハンデルスゲゼルシヤフト | Multicore redundant control computer system, computer network for safety critical applications in automobiles and use thereof |
JP2006513471A (en) * | 2003-01-15 | 2006-04-20 | コンティネンタル・テーベス・アクチエンゲゼルシヤフト・ウント・コンパニー・オッフェネ・ハンデルスゲゼルシヤフト | Memory access error detection and / or correction method and electronic circuit configuration for performing the method |
CN101243402B (en) * | 2005-08-11 | 2011-08-31 | 大陆-特韦斯贸易合伙股份公司及两合公司 | Microprocessor system for controlling or regulating at least partly security-critical processes |
US8014793B2 (en) * | 2007-02-08 | 2011-09-06 | Hewlett-Packard Development Company, L.P. | Use of previously-calculated position fix for location based query |
JP4458119B2 (en) * | 2007-06-11 | 2010-04-28 | トヨタ自動車株式会社 | Multiprocessor system and control method thereof |
US9383213B2 (en) * | 2007-08-25 | 2016-07-05 | Continental Teves Ag & Co. Ohg | Update of digital maps and position-finding |
EP2242993B1 (en) * | 2008-02-15 | 2013-10-23 | Continental Teves AG & Co. oHG | Vehicle system for navigation and/or driver assistance |
JP5722426B2 (en) * | 2010-03-23 | 2015-05-20 | コンチネンタル・テベス・アーゲー・ウント・コンパニー・オーハーゲー | Computer system for control, method for controlling computer system for control, and use of computer system for control |
DE102011007467A1 (en) | 2010-04-28 | 2011-11-03 | Continental Teves Ag & Co. Ohg | Polynuclear integrated microprocessor circuitry for, e.g. vehicle domain computer, has tester to perform time-integral checking of specific components of auxiliary processor structure to and gradually expand checking of other components |
CN102622470A (en) | 2012-02-21 | 2012-08-01 | 重庆邮电大学 | General car code conversion method |
-
2013
- 2013-10-16 DE DE112013005824.3T patent/DE112013005824A5/en active Pending
- 2013-10-16 CN CN201380053613.5A patent/CN104718532A/en active Pending
- 2013-10-16 EP EP13779792.4A patent/EP2909721A1/en not_active Ceased
- 2013-10-16 WO PCT/EP2013/071615 patent/WO2014060470A1/en active Application Filing
- 2013-10-16 US US14/435,833 patent/US10214189B2/en active Active
- 2013-10-16 KR KR1020157012942A patent/KR20150067380A/en not_active Application Discontinuation
Non-Patent Citations (2)
Title |
---|
None * |
See also references of WO2014060470A1 * |
Also Published As
Publication number | Publication date |
---|---|
WO2014060470A1 (en) | 2014-04-24 |
KR20150067380A (en) | 2015-06-17 |
DE112013005824A5 (en) | 2015-09-24 |
CN104718532A (en) | 2015-06-17 |
US20160046265A1 (en) | 2016-02-18 |
US10214189B2 (en) | 2019-02-26 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
WO2014060470A1 (en) | Interface for interchanging data between redundant programs for controlling a motor vehicle | |
EP2235628B1 (en) | Motor vehicle control device | |
EP2641176B1 (en) | Microprocessorsystem with fault tolerant architecture | |
DE10000997B4 (en) | Electronic control system | |
EP2823430B1 (en) | Electronic control system | |
DE102015108689A1 (en) | Security node in interconnect data buses | |
DE102015003194A1 (en) | Method and device for handling safety-critical errors | |
EP1639454A2 (en) | Method for switching between at least two operating modes of a processor unit and corresponding processor unit | |
DE102008062692A1 (en) | Device and method with controlled switching mode | |
EP3398069B1 (en) | Embarked control apparatus for the execution of a redundant operating function and vehicle comprising the same | |
DE102012017339B4 (en) | computer system | |
EP1700211B1 (en) | Method of loading software modules | |
WO2016030324A1 (en) | Microcontroller system and method for safety-critical motor vehicle systems and the use thereof | |
DE102014011665B4 (en) | System and method for high integrity DMA operation | |
DE102019106551A1 (en) | MULTI-CONTROL DEVICE FOR A VEHICLE | |
DE112010005971T5 (en) | Multiprocessor computer system and method | |
DE102021209687A1 (en) | Cloud computer for executing at least one partially automated driving function of a motor vehicle and method for operating a cloud computer | |
WO2014067978A1 (en) | Method for administering a control device network in a vehicle and control device network | |
WO2016087175A1 (en) | Processing system for a motor vehicle system | |
WO2008128710A1 (en) | Control device for vehicles | |
DE102018210733A1 (en) | Method for monitoring at least one computing unit | |
DE102016205965A1 (en) | Microcontroller, control unit and motor vehicle | |
DE102022210020A1 (en) | Security data processing unit for a computing unit | |
WO2024100007A1 (en) | Method for monitoring interfaces between a software application and a control unit | |
WO2024056489A1 (en) | Detection of external interventions in a computer system with zone separation for a device, in particular for a vehicle |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PUAI | Public reference made under article 153(3) epc to a published international application that has entered the european phase |
Free format text: ORIGINAL CODE: 0009012 |
|
17P | Request for examination filed |
Effective date: 20150518 |
|
AK | Designated contracting states |
Kind code of ref document: A1 Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR |
|
AX | Request for extension of the european patent |
Extension state: BA ME |
|
RIN1 | Information on inventor provided before grant (corrected) |
Inventor name: ZYDEK, MICHAEL Inventor name: SAENGER, MARCO Inventor name: HERR, REINHARD Inventor name: AMJADI, HOUMAN Inventor name: HARTMANN, RALF Inventor name: HEISE, ANDREAS Inventor name: SCHADE, KAI |
|
DAX | Request for extension of the european patent (deleted) | ||
17Q | First examination report despatched |
Effective date: 20160317 |
|
RAP1 | Party data changed (applicant data changed or rights of an application transferred) |
Owner name: CONTINENTAL TEVES AG & CO. OHG |
|
REG | Reference to a national code |
Ref country code: DE Ref legal event code: R003 |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: THE APPLICATION HAS BEEN REFUSED |
|
18R | Application refused |
Effective date: 20190627 |