DE102006056021A1 - Discriminator system has analysis device for controlling interaction of components of apparatus, which are integrated in communication system on which information between components is exchanged - Google Patents

Abstract

The discriminator system (80) has an analysis device (87) for controlling an interaction of components (83) of an apparatus (89). The components are integrated in a communication system (84) on which the information between the components is exchanged. The exchange between the components is bounded by an apparatus logic. The analysis device (87) has a logic mapping device for mapping a part of the logic in an incidence matrix and a pattern recognition unit for recognition of patterns. A recognition signal is generated during recognition of a pattern. Independent claims are also included for the following: (1) a discrimination method with analysis abilities (2) development system for a device logic for a decision making system (3) a development method for a device logic for a decision making system.

Description

The The invention relates to a decision system with an analysis device and a decision-making process with an analysis capability for controlling an interaction of components of a device, in particular of a motor vehicle, wherein the components in a Communication system are involved, about the information between the components are interchangeable, the interaction between over the components limited device logic is.

In Devices, such as vehicles, are different components involved in a communication system through which the components information can exchange with each other. The interaction between the components mainly takes place exchanging information instead. Among the components can they are any devices or applications that a certain functionality in the vehicle or device. So can the Components such as control units, measuring sensors, a climate control unit, a CD player, a radio receiver etc. or application, such as a web browser, on a Computer unit executed will include.

at Complex devices, such as motor vehicles, it is necessary that an information exchange between the individual Components arranged takes place. For security reasons it is not desired that each component has information with every other component may exchange. For example, access to a component should be which is a motor control, be possible only for certain components. Therefore, the interaction or the exchange of information between the components limited by a logic. At the standstill The art known devices this logic is usually implemented in the individual components. Furthermore, for security reasons in complex devices frequently Several communication systems are provided that are not compatible with each other connected are.

A special difficulty for the development of a logic to control the interaction of the components among each other for a device, hereinafter referred to as device logic is due to the fact that that in devices that include, for example, consumer electronics components at the time of development of the device is not estimable which functionality the individual components will have. From the users of Devices, such as the drivers of motor vehicles, is desired that mobile devices or new applications and services even after completion and commissioning of the motor vehicle can be integrated later. The Incorporate the behavior of such mobile components, applications or services to the device logic is impossible in advance. ever more components, especially in the entertainment and information sector, which is also called infotainment area, in future integrated in vehicles become more and more conflicts in the use of resources, which are provided by components. This is how an audio playback system becomes a motor vehicle, for example, from a navigation system, a Radio receiver, a CD player, a mobile phone integrated into the vehicle etc. used for outputting acoustic information. The access on the audio playback system or the output of an audio system must over the device logic is controlled. In particular, the integration new components, at the time of design and manufacture the vehicle did not exist or were specified this is a big one Problem. To incorporate such new components in a vehicle to be able to it is common nowadays required that the software be individual, a set of or all components of the vehicle are exchanged. The exchange The control software of a component is called flashing. Already today, the flashing of components in vehicle maintenance decreases a big time required.

by virtue of the variety of components of all kinds in a vehicle it is very difficult or almost impossible to check if when incorporating a new component in the communication system the vehicle's integrity and completeness the device logic of the vehicle is maintained. Kicking in the Device logic after incorporating the new component error up, so leads this in the cheap Case only to a disturbed functionality the newly incorporated component, however, may be unfavorable Fall also to a failure of individual components or systems of the Vehicle including safety-relevant systems. An analysis of the resulting logic when incorporating new components is therefore desirable or even indispensable.

In the prior art, it is generally known to map logics on Petri net graphs, which are shortened often referred to as Petri nets. Such a Petri net can then be analyzed to look for errors in the underlying logic. However, with current techniques, this requires a dynamic analysis in which so-called brands are moved through the Petri net to detect faults. However, this analysis becomes very complex as soon as the logic and thus the associated Petri net increase in complexity and scope takes.

Of the The invention is therefore based on the technical problem of a decision system and a decision-making process as well as a development system and a development process for to create a device logic with which to incorporate new ones Components in a communication system of a device easy possible is and a system stability, a system performance and security guaranteed stays or increases.

The technical problem according to the invention by a decision maker with the characteristics of the independent Patent claim 1, a decision-making process with the features of claim 9, a development system having the features of claim 17 and a development process with the features of claim 27. Advantageous embodiments of the invention will become apparent from the Dependent claims.

Of the The invention is based on the idea that a device logic for a Decision-making system and a decision-making process each to the configuration the device or the communication system is adaptable, wherein the configuration by the components and the way of their integration is set in the communication system. By the device logic is designed to match the configuration of the Device or the communication system is customizable, it is ensured that by means of the device logic in each case an optimal control the interaction of the components is possible. To change the device logic to ensure that a system stability and a performance guaranteed is an analysis device in the decider system or the development system or an analysis procedure in the decision-making process or development process provided. The analysis device comprises therefor a logic mapping unit for mapping at least a part of Logic into an incidence matrix and a pattern recognition unit for Detecting patterns associated with logic properties wherein upon detection of one of the patterns generates a detection signal becomes. Certain logic properties, such as redundancies or contradictions, can be identified by specific patterns in an incidence matrix. Patterns are due to the relative arrangement of entries in the Incidence matrix characterized. In the analysis method becomes the logic mapped into an incidence matrix. Subsequently, in the incidence matrix Searched for patterns associated with logic properties. Will be one Found pattern, a detection signal is generated. To certain It often does not have to find logic properties the entire logic is mapped into an incidence matrix. Often enough it, a part of logic or certain constructs of logic in to map an incidence matrix. A particular advantage of the invention is thus that the analysis also in complex and extensive Logics, such as those found today in motor vehicles, for example are easy to do is. The analysis does not take place in the Petri net graph, but in the associated Incidence matrix instead. Furthermore, no dynamic analysis is provided. Rather, simple patterns are recognized that have certain characteristics are linked to the logic. In particular, need not recursively, as in the prior art methods Edges of the Petri nets graph are traced, which is a significant Reduction of the computational effort means. The logic mapping unit can be designed so that in an intermediate step, the entire Logic or part of the logic in a network graph, preferably is displayed in a Petri net graph, which then at least partially mapped into the incidence matrix. Such an intermediate step however, is not mandatory. The phrase "recognizing patterns" should also be that Detect a pattern include.

One Decision system is preferably designed so that the detection signal information about includes the pattern found in the incidence matrix.

The Detection signal can be used to control the Intervene the components comprehensive device. For example, can the logic is modified by the detection signal.

A Particularly advantageous embodiment of the invention provides that the device logic comprises a device rule which Includes rules that define the device logic. A device rule with rules can be adjusted very easily. A set of rules may also include additional objects, depending on the design to evaluate the rules and to implement measures defined by the rules. Especially advantageous itself an inventive decision maker thus designed, if the logic is formed rule-based. This means that the logic comprises a set of rules. A rule is from a premise dependent. In this state variables of the device or individual go the components of the device. In the premise become logical statements evaluated. For every rule there is a true-conclusion branch and a Felsch-conclusion branch, in each of which measures can be provided for example, running of methods. These cause a change in the overall state the device. The evaluation of the premise decides which Conclusion branch is followed.

easy Patterns that have certain logic properties, such as redundancies or contradictions, connected are, get one, if one maps the logic in an appropriate way into the incidence matrix. Therefore, a development of the invention provides that during imaging of the logic in the incidence matrix state variables the rules in an ordered order and methods called by the rules the true-conclusion branches of the rules in the ordered order and the wrong-conclusion branches of the rules in the ordered Order are compared in a matrix, the entries which are indexable by a state variable and a rule, a dependency specify the respective rule of the corresponding state variable and the entries that by a method and a true-conclusion branch or a wrong-conclusion branch indexable, a method invocation of the corresponding method in the corresponding true-conclusion branch or false-conclusion branch specify. Redundancies and contradictions exhibit in such a way formed Incidence matrix characteristic patterns on. Describe state variables the condition of the device. From them are the premises of Rules dependent.

For redundancies can these are advantageously found by recognizing Logic properties Rules with identical state variable dependencies be determined, and then for the Rules with identical state variable dependencies pairwise identical Search for method calls in the true-conclusion branches and / or the wrong-conclusion branches and the detection signal when finding at least one pairwise identical method call is generated, wherein the detection signal at least partial redundancy information or redundancy information includes. Here you have to only patterns of entries be found or checked for their presence. This is a Total number of reviews clear across from Reduces a search for redundancies that checks in pairs for all rules whether they include common method calls. The arrangement of the entries, the a dependency from the same state variable for a pair of rules, define the pattern elsewhere in the incidence matrix must be found to indicate redundancy or partial redundancy.

In similar Way is for a check up contradictions advantageously provided that when detecting logic properties Rules are determined with identical state variable dependencies, and subsequently for the so determined rules in pairs in the true-conclusion branch of the one rule of the pair and in the wrong-conclusion branch of the other Rule of the pair of identical method calls are searched for and / or in the wrong-conclusion branch one rule of the pair and in the true-conclusion branch of the other Rule of the pair identical method calls are sought and at Find at least one identical method call the detection signal is produced. Again, the better the patterns, the one Show partial conflict depending on from the entries set a dependency of the same state variable for a rule pair. In In this case, the patterns are not identical to the pattern of these entries but clearly from the entries derivable, as for the person skilled in the art with reference to an embodiment become clear becomes.

It is understood that the generation of the detection signal and the Modifying an already generated detection signal include can if a pattern has already been detected during the analysis of the logic.

One Adjusting the device logic can be done, for example, by: Individual rules of the device policy are enabled or disabled become. Thus, a device rule can contain rules that a logic for an interaction of the components present in the device with a common one additional Describe component. Applied to the field of motor vehicles means this is that a device logic includes a device rule can, in which already rules for the most common Mobile phones are included at the time of delivery of the vehicle. Depending on which of these common mobile phones the user later by means of a handsfree device with the communication system of Vehicle connects, can the ones associated with this mobile phone Rules activated and when disconnecting the mobile phone again be deactivated.

However, in order to also be able to use components with the device that are not yet known at the time of completion of the device, a particularly advantageous further development of the invention provides that when the device logic is adjusted, the rules can be adapted via an exchange of data with an external rule base. For example, if the device is again a motor vehicle and the component to be incorporated is a new type of mobile phone with functionality that was not known at the time of completion of the motor vehicle, the device logic may be adjusted by, for example, data having an external policy base be replaced. An external regulatory base may for example be maintained by the manufacturer of the motor vehicle. In the Re The basis of the system contains the necessary rules with which the device logic of the motor vehicle can be changed so that the device logic is optimally adapted to the novel mobile phone.

A another embodiment The invention provides that when incorporating a new component in the communication system data interchangeable with the new component are by means of which the adaptation of the device logic is executable. This will make it possible the for adjusting the device logic necessary information in the integrate new component. When integrating the new component into the communication system then data is exchanged with the new component, this one include necessary information. For example, new rules be added to the device rule and other rules that would conflict with them or deleted become.

Around in particular, becoming active of a newly integrated component to be able to prevent for the an analysis of the device logic resulting from the incorporation has revealed that this is undesirable Logic properties is in a preferred embodiment provided that the detection signal is configured, the device logic to change, in particular by enabling, disabling, modifying, and / or modifying rules added become. This change can be designed so that the newly incorporated component any communication with other components is prohibited.

A simple and effective implementation of the logic is obtained in a training of the invention, in which the device logic states are each in the form of a sentence filter entries a filter and optionally a set of control statements for one or more of the components are pronounced, wherein by means of Control statements affect the internal behavior of the components is. In a motor vehicle, for example, a CD player and an over includes a handsfree integrated mobile phone, the each acoustic information about an audio playback system with a speaker in the passenger compartment can give different conditions the device or the communication system occur. In one Device state or communication system state is over the Audio system and the speaker the acoustic information of a CD reproduced. Is now a call on the mobile phone, so should additionally the ringing of the phone acoustically via the audio playback system and audible to the speaker be made. The condition of the mobile phone has changed from one Waiting state changed to a call signaling state. hereby the overall condition of the device, i. of the vehicle, or the communication system changed. Adapted to this change also a different logic state is needed. As long as the mobile phone is on hold, the audio playback system is intended to provide the audible information the CD at full volume play. change the state of the mobile phone is signaling in a call Condition, so the audio playback system is also a ringing signal of Play mobile phones. If now the telephone conversation is accepted, If another state of the communication system, in which the mobile is in an active call state. In this state, which also leads to a new state of the communication system and the device leads, should for example exclusively the above the mobile phone received voice signal via the audio playback system be issued. This means that, for example, the transmission information from the CD player to the audio playback system should be prevented. For example, in the example mentioned in case of a change the communication system state when the phone call arrives a filter can be set so that the audio playback system in addition to The information it receives from the CD player also contains information from the CD player Mobile phones and acoustically reproduces. Kicks the state change on, which puts the phone in the active call state, that is, the telephone conversation assuming that a filter entry can be inserted into the filter, the one transferring information from the CD player to the audio playback system in derogation. Alternatively and / or additionally, in the state change A control statement will be generated which will put the CD player into one Paused state. Here, the logic information about the internal behavior of the CD player exploited.

One arrives at a particularly advantageous embodiment of the invention, when the information between the components are exchanged message-based. A message-based exchange means that the information is exchanged in the form of messages. A message is typically structured and includes a message header that includes information about a source, a destination, and often an identifier that characterizes the content of the remaining information in the message in a message body or body. For example, the identifier may be the specification of a method to be performed at the receiver. In a message-based information exchange, in which all information about the internal state of the components, which should be perceptible to the outside, are also communicated in the form of messages, a development of the invention can be particularly advantageous be set, in which the device state and / or the communication system state based on the exchanged and / or exchanged information can be determined. A system state analyzer monitors in this embodiment of the invention, for example, all exchanged information between the components. On the basis of the information contained in the messages, state variables can be assigned values, for example. Advantageously, the communication system state and / or the device state are completely described by a set of state variables. With the aid of the state analyzer, for example, in the example given above, based on a message from the mobile telephone to the audio playback system in which the ring signal is transmitted, it would be determined that the internal state of the mobile phone has changed to the state signaling a call. For example, a state variable could be set for this purpose. Following the setting of the state variable, the rules of the device rule are advantageously evaluated, for the evaluation of which the changed state variable must be read. As a result of evaluating or inferencing the rules, filter entries are then set and / or control statements are output or more complex logic operations initiated and / or executed.

clear and compact the decider systems are kept if at least one of the Components a decision-making system for another communication system with other components or for a subsystem of the communication system, wherein the subsystem of the communication system is a subset of the components of the communication system includes. The decision system of the component can be the functions for one Part of the components or for a take over another communication system. in this connection can Decision-making systems linked at the same level as both also be linked together hierarchically. Such is for example a tree-like structuring of the decision system possible, wherein Parent nodes from which branch child nodes, each decision-making systems are. A link Several decision-making systems are also possible in such a way that a parent or co-ordinated decision-making decisions about the Interaction of individual components falls, over which also the other decision system similar or different decisions regarding the interaction with other components.

Around a decision-making system based on device logic, to be able to use is it is necessary to create device logics. Since the creation device logic or device component logic is very complex if the communication system has many components it is necessary to apply the logic to given logic properties, for example, contradictions, redundancies and or other bugs, check. This is particularly necessary in devices, one of which is a danger in case of a malfunction. Is it the device for example, to a motor vehicle, so should also when integrating a new component, such as an MP3 player ensured be that safety-related components, for example electronic vehicle stabilization or engine management, still work properly. Especially with complex Applications, such as a volume control, to specific Engine parameter is adjusted, it is necessary, however, that both the MP3 player as well as the engine control in a common communication system or interconnected communication systems are involved. Therefore, you can Logic errors that disable one of the communication systems or to disturb, Overall, the vehicle safety may affect. Around To avoid such adverse consequences includes the development system the analyzer, with the components of the overall logic collection and / or configured device logics are verifiable.

Therefore, according to the present invention, there is proposed a device logic development system by which interaction between components of a multi-component communication system that can communicate with each other is controllable, the device logic being variable depending on a configuration of the communication system. Configuration by the integrated components and a type of integration is determined, comprising: a detection unit for detecting descriptions of logic units, both a description of a logic behavior of the individual components, which is externally perceptible, as well as a description of logic behavior for interactions between the Components, a memory for storing the captured descriptions in an overall logic collection, a configuration unit for configuring device logic from the overall logic collection adapted to a configuration of the communication system of the device, and an export device for exporting the configured device logic to the device. According to the invention, there is further provided an analysis device for checking logic with an interface for receiving logic in a logic format, comprising a logic mapping unit for mapping at least a part of the logic in an incidence matrix and a pattern recognition unit for generating includes patterns associated with logic properties, wherein upon detection of one of the patterns, a detection signal is generated. Here, the mapping unit may comprise an analysis converter for converting part or all of the logic first into a mesh graph which is then at least partially mapped into the incidence matrix. The detection unit may comprise different modules for detecting the logic units. A module can be designed as a computer in which logical expressions can be entered via a keyboard. Another module can be configured as a scanner with which electronic circuit diagrams can be detected. Yet another module may be configured to capture representations of state graphs or state machines. The detection unit may comprise any modules which are each adapted to detect logic units. A logic unit comprises at least one logical statement. The individual logic units are combined into an overall logic collection and stored in a memory. Subsequently, it is possible to select from the overall logic collection the logic units needed to configure device logic for a configuration of a device communication system. This device logic may then be exported to the device via an exporter. Developments of the development system have analysis devices which comprise the same features and / or feature combinations as the analysis devices described above in connection with a decision system.

A particularly advantageous development of the development system points a conversion unit, by means of which the descriptions of the logic units, which are described in different formats, in a common Logic format are convertible. As especially intuitive and easy understandable is a development system in which the logic units in the common Logic format in the form of rules in an XML data format are writable.

Around do not replace the entire device logic of a device to have to, if only a new component in the communication system the device is involved or a component of the communication system is removed sees a particularly advantageous development system before that the configuration unit is designed so that starting from the overall logic collection and at least one configured device logic a device component logic for another component configurable which is associable with the at least one device logic, a changed one To provide device logic to the communication system of the changed Device is adapted, which results when the other component integrated into the device or separated from the device is. This device component logic, for example, in the Component to be stored, so that when incorporating the component into the communication system of the device the device component logic by means of a data exchange be merged with the device logic in the device can be the best to give a new device logic the new configuration is adjusted. The device component logic However, it can also be exchanged directly with the device. In such a case, it can be ensured that, for example additional functionality which is possible with the newly incorporated component, only provided is when the new component over providing the device component logic from the manufacturer the device has been certified, provided the device component logic only from the manufacturer, for example, in a rule base for Provided becomes.

The Features of the dependent claims the decision making process according to the invention, of the development process each have the same advantages as the corresponding device features.

following The invention will be described with reference to preferred embodiments with reference to a drawing closer explained. Hereby show:

1 a schematic representation of a device with multiple decision systems;

2 a further schematic representation of an integrated in a device decision system;

3 another schematic representation of a decision system of a device;

4 a schematic representation of a development system for a device logic;

5 a schematic representation of an embodiment of a development system;

6 a schematic representation for explaining the conversion of a device logic in a network graphs;

7 a section of a graphical representation of a network graph;

8th a section of a representation ei a Petri net graph of a rule-based logic;

9 a section of one with the section of the Petri nets graph after 8th corresponding incidence matrix;

10 a section of a representation of an extended Petri net graph of an extended rule-based logic;

11 a section of one with the section of the extended Petri nets graph after 10 corresponding extended incidence matrix;

12 a representation of the incidence matrix according to 11 in which steps for finding patterns of redundancy between two rules are illustrated;

13 and 14 Representations of the incidence matrix according to 11 in which steps for finding patterns of redundancy between each further pair of rules are illustrated;

15 a representation of a generalized incidence matrix for analysis on logic properties;

16 Flowchart for a systematic search for patterns in an incidence matrix for finding redundancies;

17 Flowchart for a systematic search for patterns in an incidence matrix for the detection of contradictions; and

18 to 20 Incidence matrices after 11 in which the method steps for finding a pattern corresponding to a (partial) contradiction are shown schematically.

In 1 is a device 1 shown schematically, which is designed as a motor vehicle. The device 1 includes an infotainment system 2 , a man-machine interface (MMS) 3 (HMI - human-machine interface) and a gateway 4 that have a component middleware 5 connected and a communication system 48 form. The component middleware 5 includes a decision-making system 6 and a service administration 7 , The infotainment system 2 , the man-machine interface 3 and the gateway 4 are components that each comprise other components. The of the infotainment system 2 Included components include media clients 10 - 13 , a media server 14 as well as a service framework 15 that different services 16 - 19 includes. The media clients 10 - 13 each have several services 10a - 10b . 11a - 11b . 12a - 12b . 13a - 13b which include, for example, a telephone application or an audio system. The individual services 10a - 13b the media client 10 - 13 as well as the services 16 - 19 the service framework 15 be about the service administration 7 managed. This maps, for example, logical names to physical addresses. The media server 14 provides different services 14a . 14b one of which is designed, for example, as an audio reproduction system. Such a service 14a provides, for example, a resource. The gateway 4 includes several interfaces 25 . 26 . 27 , Which are designed as Bluetooth (BT), WLAN and GPRS interfaces respectively and in each case with a corresponding bus or network 25a . 26a . 27a are connected. About the buses or the networks 25a . 26a . 27a are other components 30 . 31 . 32 appropriately connected, each with its own decision-making system 34 . 35 . 36 include. Furthermore, the gateway includes 4 an application program interface (API) 40 to more bus systems 41 . 42 . 43 , which may be formed as a CAN bus, as a MOST bus, etc., via a vehicle bus interface 44 in the communication system. Furthermore, other components 45 . 46 , which are designed for example as a GPS satellite navigation receiver or other services 49 . 49a . 49b provide, with the application program interface 40 connected. The application program interface 40 includes a decision-making system 47 ,

The man-machine interface 3 includes several human machine interface units 50 - 53 , each one input 50 ' - 53 ' and an edition 50 '' - 53 '' include. The inputs 50 - 53 each have a touch-sensitive (haptic) input unit 55 and a speech-sensitive input unit 56 on. Expenditure 50 '' - 53 '' each have an indicator 57 on. The man-machine interface 3 includes a human machine interface decision system 60 and a so-called combination server 61 about which the human-machine interface units 50 - 53 to get managed. The decision-making systems 6 . 34 - 36 . 47 . 60 each include a logic, each embodied in the form of a set of rules. Based on the respective logic or rules, the decision-making systems decide how the individual components and / or services may interact with each other. In particular, an information exchange between the components and services is controlled, for example, via filters and control instructions, which together form a logic state of a logic of a decision system. The control instructions influence an internal behavior of the components and / or services.

Will the device 1 a new component 70 for example over the network 25 which as a Bluetooth network 25a is trained in the communication system 48 of the vehicle (ie, the device 1 ), it is necessary to use the device logic of the decision-making system 6 ie the device rule of the decider system 6 , to the new configuration of the device 1 adapt. For this purpose, a data exchange, for example via the network 27 which acts as a GPRS network 27a is formed, with a central device (not shown), on which a component device logic is stored, which includes the necessary information to, together with the existing device logic, a new, to the new configuration of the device 1 to provide customized device logic. An analyzer (not shown) analyzes the matched device logic for logic properties such as contradictions, redundancies, etc.

The decision-making systems 6 and 60 can be advantageously used, for example, to accomplish a context-dependent transfer of control over the audio system. Depending on a device state or a communication system state, for example, from a certain vehicle speed, the device logic may automatically initiate a device logic state that is in control of the infotainment center 2 the man-machine interface unit 50 of the driver and one of the other human-machine interface units 51 - 53 assigned, provided that an associated seat is encumbered. Likewise, a further component (not shown) can be integrated and thereby a new functionality can be made available by the device logic of the decision system 6 adapted to the new configuration.

In 2 is schematically another decision-making system 80 a device 89 shown. The decision-making system 80 is about a component middleware 81 with a gateway 82 connected. About the gateway 82 are components 83 in a communication system 84 involved. The communication system 84 also includes service management 85 , About the service administration 85 become the components 83 and, if necessary, their services. The decision-making system 80 includes a device logic called a device rule 86 is formed, and is to a configuration of the communication system 84 customized. The configuration of the communication system 84 is through the in the communication system 84 integrated components 83 as well as the way of integration into the communication system 84 characterized. The gateway 82 , the service administration 85 and the decision-making system 80 as well as the component middleware 81 are in this sense also components that the configuration of the communication system 84 with influence. A communication system state is determined by the states of the individual components 83 as well as the components in the broader sense 82 . 85 . 80 . 81 established. Only the states which are perceptible to the outside are considered here.

In a message-based information exchange, the state of the communication system 84 based on an analysis of the exchanged messages. By means of an inference machine 88 When the communication system state changes, the device rule becomes 86 evaluated and determined by the decider system, which interactions between the components 83 are allowed. Will one of the components 83 the communication system 84 added or removed, the device rule becomes 86 to the new configuration of the communication system 84 customized. By means of an analysis device 87 then the changed device rule 86 checked if it contains errors. This can be achieved that errors in the device logic, by means of the device rule 86 is pronounced to be detected early, to malfunction of the device 89 For example, a vehicle, or individual components 83 to prevent.

3 shows a further schematic representation of a device 90 integrated decision-making system 91 , The decision-making system 91 , a system health analyzer 92 , a situation analysis unit 93 , a service administration 94 , a component middleware 95 , a component 96 and another component 97 form a communication system 98 , The decision-making system 91 points as in the embodiment according to 2 an inference unit 99 and a device rule 100 , which sets the device logic, as well as an analysis device 103 on. The system health analyzer 92 analyzes the between the component 96 and the other component 97 information exchanged in the form of messages.

A message includes a message header that includes a source, a destination, and an identifier that includes an indication of the remainder of the message. For example, the identifier can be a method specification. Based on the source, the destination and the identifier state variables are set, which characterize the device state and / or the communication system state. If a change of the device state or the communication system state occurs, then by means of the inferential unit 99 Rules of the rules 100 inferred, ie evaluated. Advantageously, only those rules are evaluated which depend on the system state variable (s) associated with the last changed state change are linked. As a result of the evaluation, a filter is changed, which has filter entries. In particular, filter entries are added, deleted, modified, activated or deactivated when changing. The filter may be formed as a central filter or component filter 101 . 102 include. When exchanging information in the form of messages between the component 96 and the other component 97 is determined by the component filter 101 . 102 checks whether the exchange of information, ie the exchange of the message, is allowed or not. The filter entries thus characterize a device logic state. The device logic state is dynamically changed by exchanging information related to a change in system state variables in the system state analyzer 92 to lead. This allows a context-adapted logic control. In addition, control commands can be output during the rule evaluation or complex logic operations can be initiated, as indicated above.

In 4 Figure 3 is a schematic of a device logic or component device logic development system 120 and its interaction with a device 121 , which is designed as a vehicle, shown schematically. The vehicle includes a decision system 122 that the interaction between components 123 . 124 which may be configured as a vehicle application programming interface and man-machine interface. The development system 120 comprises a detection unit 130 to capture descriptions of logic units. The input unit can have different input modules 131 include in order to capture logic units of different formats. The different input modules 131 may thus comprise different hardware, such as a computer with a keyboard for inputting logic units in different text masks or a scanner to capture, for example, a circuit diagram, or otherwise configured to be able to capture state graphs or state machines, for example. The descriptions of the logic units thus acquired form a preliminary rule 132 , About a converter 143 becomes the pre-rule 132 in the format of a central set of rules 133 translated and stored in memory 134 stored as a total logic collection. By means of a configuration unit, rules can be combined into rule sets within the overall logic collection. By means of a vehicle configurator 136 becomes device logic based on the overall logic collection, adapted to the configuration of the device 212 , configured. By means of another converter 137 the customized device logic becomes a device rule 138 with a format converted by the decider system 122 the device 121 can be processed. To locate errors in the overall logic collection, rule sets, or configured device logic, etc., the development system includes an analysis device 140 , The analyzer 140 includes a logic mapping unit 141 , in the manner of an additional converter that converts at least part of the device logic that comprises a policy into an incidence matrix. A pattern recognition unit 142 examines the incidence matrix for the appearance of certain patterns. The specific patterns are assigned logic properties. In this way, errors in the device logic or component device logic can be reliably detected and subsequently eliminated. For example, contradictory rules or redundant rules, etc. can be found in particular.

Based on 5 a possible embodiment of a set of rules for a communication system is to be explained, which exchanges information message-based. An overall logic collection 200 includes event links 200a , Assignments 200b and rules 200c , An event link ensures that an adaptation of the logic state occurs dynamically when the communication system state (event) changes. By means of a system state analyzer, the source information, destination information and the identifier (method) are determined from a message header and compared with the individual event links. If an event link is found which corresponds to such a message, then one or more assignments are executed by the event link and / or one or more rules are fired, ie evaluated and their measure (s) executed if necessary. The event links are in an event link module 201 assignments in an assignment module 202 and the rules in a rule module 203 shown schematically. Below the modules is an example of an embodiment of an event link 204 , an assignment 205 and a rule 206 in an Extensible Markup Language (XML) format. By means of a configurator / converter 207 On the one hand, rule sets 208 are created, which include the objects of the overall logic collection, which are necessary, for example, for the logical characterization of an operation, such as an emergency window closure. On the other hand, by means of the configurator / converter 207 based on a configuration 209 a device logic or device rule. For this purpose, the individual components of the device rule are converted into a corresponding format. The event links 211 one of which is exemplified in XML format in a block 112 it is shown who converted into an XML format. The assignments and rules become as though using a block 213 is indicated, converted to a Python format. In the blocks 214 and 215 an example of an assignment and a rule in a python-like format is shown schematically.

Based on 6 explains how such a set of rules can be transformed into a Petri net graph for analysis. The variable sources originating from the message header 301 , Aim 302 and identifier (method) 303 each select an event link 304 out. This is each with one or more assignments 305 connected. The allocations 305 can also include empty allocations. With one assignment or multiple assignments 305 can not have one, one or more rules 307 be linked. Each of these structures is transformed into a graph structure. In the network graphs, the individual components are each via an interface 307 , each representing an edge, linked together. In order to be able to include the state of the communication system, additional state variable assignments are added 308 and added content from the message body as an analysis environment in the network graph. If a message is generated as a measure of a rule evaluation, for example, adding a filter entry to the filter, then the variables become source 310 , Aim 311 , Content 312 and value 313 assigned.

How an implementation of logical rules has to be made is generally known to the person skilled in the art. Exemplary is in 7 a Petri net shown with the in the blocks 212 . 214 . 215 illustrated event association, assignment and rule corresponds. source 401 , Aim 402 and identifier (method) 403 are each about edges 404 with events 405 . 406 connected. The edges 404 are each values 407 assigned. Correspond to the values of the variables 401 - 402 the values 407 that the edges 404 are assigned to one of the events 405 . 406 lead, the respective event occurs. The event 1 405 which is represented by the variable values A, C, 12 for the source 401 , the goal 402 and the identifier 403 is an assignment_abc 410 via an interface 411 assigned. The assignment itself is through the graph structure 412 shown. The variable a is assigned the value "x". For the event 2 406 becomes the assignment_hij 413 through a graph structure 414 shown. A variable b is assigned the logical value "False". To the assignments 410 . 412 and 413 . 414 Each joins a graph structure for a rule, which are not shown here.

• R1: "Wenn das Navigationsgerät eine akustische Ansage ausgibt (Navi_spricht), muss der MP3-Player stumm geschaltet werden (MP3_Mute), sonst muss die Stummschaltung deaktiviert werden (MP3_DeMute)."
• R2: "Wenn das Navigationsgerät eine akustische Ansage ausgibt (Navi_spricht), muss der MP3-Player stumm geschaltet werden (MP3_Mute), sonst muss die vorherige Lautstärke des MP3-Players wieder eingestellt werden (MP3_SetVolume(PreviousVolume))."

Based on 8th and 9 briefly explains how the graph structure of a Petri net connected to a rule can be transformed into an incidence matrix. In 8th is shown a section of a rule-based logic represented in the form of a Petri net. The following "part" rule is shown:

• R1: "If the navigation device sounds an acoustic message (Navi_sprechen), the MP3 player must be muted (MP3_Mute), otherwise the mute must be deactivated (MP3_DeMute)."
• R2: "If the navigation device sounds an acoustic message (Navi_sprechen), the MP3 player must be muted (MP3_Mute), otherwise the previous volume of the MP3 player must be set again (MP3_SetVolume (PreviousVolume))."

conditions 501 - 504 of a section of a device are called Petri nets 500 in 8th shown as ovals. The state 501 (Navi_sprach) is over a directed edge 505 with a rule 1 507 connected. Further, the condition 501 (Navi_sprach) over another directed edge 506 with rule 2 508 connected. This indicates that the rules in their premise are dependent on a state variable indicating the state of an acoustic announcement of the navigation device (Navi_sprach). In a true-conclusion branch 509 is the rule 1 507 over a directed edge 510 mute with the action MP3 player (MP3_Mute), which is the state 502 forms, connected. In a wrong-conclusion branch 511 is the rule 1 507 over a directed edge 512 with the action disable MP3 player mute (MP3_DeMute), which indicates the state 503 represents, linked. Analog is the rule 2 508 in their true-conclusion branch 513 over a directed edge 514 with the measure mute MP3 player (MP3_Mute) and in their wrong-conclusion branch 515 over a directed edge 516 with the condition 504 linked, which represents the measure previous volume of the MP3 player again (MP3_SetVolume (PreviousVolume)) represents.

As by the gray deposit 517 is implied lead over the true-conclusion branch 509 Rule 1 507 as well as the true-conclusion branch 513 Rule 2 508 two branches to the same action MP3 player mute (MP3_Mute). Thus, in this case, a partial redundancy of rule 1 507 and rule 2 508 in front. Would the wrong-conclusion branches 511 and 515 the rules 1 507 and 2 508 to a single measure, a complete redundancy of Rule 1 507 and rule 2 508 available. That in the 8th Petri net illustrated can be transformed into an incidence matrix as follows 520 convict that in 9 is shown.

row 521 - 524 the incidence matrix 520 re In each case, the states, state variables, measures, etc. belonging to a position are columns 525 - 530 each represent transitions and objects of the Petri net equivalent to this, for example rule macros and the corresponding branches of conclusion. Entries of the incidence matrix 520 , also referred to as weights, indicate how the locations specified in the row headers are linked to the transitions indicated in the column headers. If there is no linking of a respective position with a corresponding transition, a 0 is in the incidence matrix 520 entered. The state 501 (Navi_sprach) in 8th is, for example, the directed edge with rule 1 507 connected. Because the directional edge of the body, which in this case is the condition 501 (Navi_sprach) is, from this way to the transition, in this case the rule macro of the rule 1, points, is a -1 in the appropriate place 531 into the incidence matrix 520 inserted. The true-conclusion branch 509 that is over the directed edge 510 with the steep 502 (MP3_Mute) is linked to the corresponding digit, which is in the third line 523 the incidence matrix 520 is shown in one place 532 , which is a link to the branch of rule 1, ie the fifth column 529 the incidence matrix 520 , represented by a +1. In this case, the directed edge 510 to the steep 502 directed. In general, it can thus be established that a 0 is entered as a link to the transitions for the individual points, if there is no link over a directed edge, a -1 is entered, if the link is formed over a directed edge, which is formed by the Point to the corresponding transition, and a +1 is entered when the directed edge points from the transition to the location. It thus follows that an incidence matrix has mainly 0 entries and only a few +1 and -1 entries.

Of the Just described way of implementing or mapping a logic into an incidence matrix first via a Intermediate step of creating a mesh graph is here first Line for the purpose of explanation described. For The skilled person will find that, especially in a rule-based Logic, an illustration of the for needed another analysis Parts of the logic can be made directly into the incidence matrix.

Generally let yourself find a partial redundancy in an incidence matrix that two rules with the same premise in the same conclusion call the same measure. A complete redundancy of two rules exists if both rules have the same premise and additionally Call the same measures in both branches of the decision.

The Logic property Redundancy or partial redundancy of a rule-based Logic leads usually not to serious problems, such as errors in the Use of the device controlled by this logic. The efficiency However, a decision maker system decreases with the size of the policy, i. with the number of rules to be evaluated. Therefore, it is desirable to recognize such redundant rules or partially redundant rules, to eliminate them and so the performance to increase the logic or the decision making system, the logic used.

A Another property of a logic that is rule based, that can Occurrence of contradictions in Be rules. A contradiction between two rules then exists if the two rules have the same premise and in opposite branches of conclusion the same measure call.

• R3: "Wenn das Navigationsgerät eine akustische Ansage ausgibt (Navi_spricht), muss die vorherige Lautstärke des MP3-Players wieder eingestellt werden (MP3_SetVolume(PreviousVolume)), sonst muss der MP3-Player stumm geschaltet werden (MP3_Mute);"

so erhält man das um die Regel 3 erweiterte Petrinetz 500', das in 10 dargestellt ist. Regel 3 540 ist über eine Kante 541 mit der Stelle 501 (Navi_spricht) verbunden. Der Wahrzweig 542 ist über eine gerichtete Kante 543 mit der Stelle 504 (MP3_DeMute) verbunden. Ein Falschzweig 544 ist über eine gerichtete Kante 545 mit der Stelle 502 (MP3_Mute) verbunden.If you extend the above example with the following rule 3:

• R3: "If the navigation device sounds an acoustic message (Navi_sprechen), the previous volume of the MP3 player must be set again (MP3_SetVolume (PreviousVolume)), otherwise the MP3 player must be muted (MP3_Mute);"

This is how you get the Petri net extended by rule 3 500 ' , this in 10 is shown. Rule 3 540 is over an edge 541 with the body 501 (Navi_sprach) connected. The fortune branch 542 is over a directed edge 543 with the body 504 (MP3_DeMute) connected. A wrong branch 544 is over a directed edge 545 with the body 502 (MP3_Mute) connected.

In 11 is the associated extended incidence matrix 520 ' shown. Opposite the incidence matrix 520 out 9 are the columns 550 , which represents the method of rule 3, a column 551 representing the wrong-conclusion branch of rule 3, and a column 552 , which represents the true-conclusion branch of rule 3, added. To the dependence of the rule 540 from the place 501 (Navi_sprach) is an entry 553 a -1 in the extended incidence matrix 520 ' entered. Posts 554 . 555 give the corresponding links of the wrong-conclusion branch 544 with the body 502 (MP3_Mute) as well as the connection of the true-conclusion branch 542 Rule 3 540 with the body 503 (MP3_DeMute).

In the following it will be explained how patterns are found in the incidence matrix representing a redundancy or a contradiction of type 1. On the basis of the classification of the weights, which are registered in the incidence matrix, can on certain logic characteristics, for example redundancies or contradictions, of the Petri net and thus the Logic that is mapping. First, it is checked for the individual bodies on which rules depend, whether several rules are dependent on such a body. This means that in the line representing this point, in the present case, line 521 , the rules or the rule macros are searched, which depend on this point P_Navi_sprach depends. These are in the present case the three rule macros that are in the columns 525 . 526 and 550 are represented. The rules that depend on the same place P_Navi_sprach are examined in pairs, if they call the same method in the true-conclusion branch or in the wrong-conclusion branch.

In 12 is the extended incidence matrix 520 ' shown again. Shown are the investigation steps that are made for a study on a possible redundancy between rules 1 and 2. An arrow 570 indicates that both rule 1 and rule 2 depend on the location (system state variables) P_Navi_sprach. A partial redundancy in the true-conclusion branch of the two rules 1 and 2 is expressed in the incidence matrix in that a similar arrow 571 respectively. 572 in the fortune branch or in the false-conclusion branch, respectively, combines weights (incidence matrix entries) with the value 1 for called methods. In the true-conclusion branch, the similar arrow connects 571 Two weights with the value 1, which indicate a call to the method associated with the location P_MP3_Mute. This displays partial redundancy. In the wrong-conclusion branch, the similar arrow 572 However, arbitrarily over all methods, ie over all lines, be moved, but never connects two weights 1 in the wrong-conclusion branches of rule 1 and 2. Thus, in the wrong-conclusion branch no partial redundancy between the rules 1 and 2 before. The arrangement of the weights in the line 521 by the arrow 570 A pattern exists elsewhere in the incidence matrix 520 ' is searched again. Therefore, the search is called a pattern search.

In 13 the same process is shown for rule pair Rule 1, Rule 3. An arrow 574 specifies the pattern in which weight entries 1 would have to be found in the true and false conclusion branches of Rules 1 and 3, respectively, to indicate partial redundancy. As is clear from the 13 results, can the similar arrows 576 and 577 can be arbitrarily moved over all methods without connecting two weight entries 1 in the true-conclusion branch or in the wrong-conclusion branch of any of the methods. It follows that there is no redundancy or partial redundancy between rules 1 and 3.

In 14 this is shown analogously for the rule pair rule 2, rule 3. Also in this case there is no redundancy or partial redundancy.

In 15 is a generalized incidence matrix 580 how it can be used to study for the presence of particular patterns in an analysis for redundancies or contradictions. This incidence matrix comprises only as places the system state variables (here: p_Variable_A and p_Variable_B), on which the premises of the rules depend, as well as the method calls (here: p_out_Method_X and p_outMethod_Y), which are triggered by the rules. Transitions are, on the one hand, the rule macros (here: m_Regel_i; i = 1, 2, 3) and, on the other hand, the false and true branches of the rules (here: t-false_rule_i and t-true_rule_i; i = 1, 2, 3 ) applied. Altogether, the rules should generally include R rules (here: R = 2), V state variables (here: V = 2) and M method calls (here: M = 2).

In 16 is a schematic flow diagram for a method 700 a systematic search for redundancies in the incidence matrix 580 as they are in 15 is shown described. In a first step 701 the logic is translated into an incidence matrix. Either this is done so that only the just listed sites and transitions are transferred to the incidence matrix or otherwise, subsequently, a reduction of the incidence matrix 703 instead of. In a "first FOR loop" 705 In each case, a sum S _{v of} the weight entries will be determined for the individual state variables 707 that specify a dependency of the rule macros on the respective state variables. In a first query 709 it is determined whether the sum S _v for the corresponding state variable is -1. If so, the variable is only used by one rule in the premise, and further investigation is not necessary. This is by an arrow 711 indicated in the yes branch.

Otherwise, it is checked whether the sum S _{v is} 0 713 , If this is the case, a warning is issued 715 because the corresponding system variable does not occur in the premise of any rule.

If the sum S _{v is} not equal to 0, then it is checked whether the sum is greater than 0 716 , If this is the case, an error message is output 717 since this case must not occur with a correct setting up of the Petri net or the associated incidence matrix. Returns the review 715 in that the sum S _{v is} not greater than 0, this must logically be less than -1. This can be checked for safety's sake in one embodiment 719 , In general, the check is not performed because it is redundant. If the sum S _{v is} less than -1, it means that several rules depend on this variable in the premise. For these rules is now determined in pairs, whether they call the same method in the true-conclusion branch or in the wrong-conclusion branch. For this a "second FOR loop" is started 721 , Here, the variable is incrementally varied from 1 to R-1 (the final value is R-1, since only pair combinations of rules are considered).

First, a rule is searched that depends on the corresponding variable in the premise. This will be in the query 723 carried out. If the weight for the corresponding variable and a corresponding rule is -1, then a "third for loop" is started 725 , In this a variable k is varied from 1 to Rr. This means that in each case the rules that are on the right in the incidence matrix are examined to see whether they are also dependent on the corresponding variable in the premise. A query block 227 represents this query. If the query succeeds, ie if a rule on the right, which is in the column r + k, also has a face entry -1 for the corresponding variable, then it must now be examined, and for all method calls, whether these are in the true or in the The wrong-conclusion branch is called by both rules. This is a "fourth FOR loop" 729 is started, in which a variable m is varied between the values V + 1 and V + M. This means that the lines V + 1 through V + M of the incidence matrix are examined in which the method entries are listed. In a query 731 It is first examined whether the weight entry in the true-conclusion branch of the two rules, which depend in pairs on the same variable in the premise, has a weight entry of 1. If this is the case, partial redundancy exists. Thus, in one step 733 generates or modifies a detection signal to indicate a logic property of the underlying logic. Subsequently, in another query 735 checks whether the two rules in the wrong-conclusion branch also call the same method m. If this is the case, then in one process step 737 if a detection signal has not yet been generated, generates a detection signal or otherwise modifies the detection signal. In the process steps 733 and 737 Auxiliary variables can be set and evaluated to see if it is only a partial redundancy or a complete redundancy of two rules. If this is the case, the detection signal is preferably designed such that it instructs the decision-making system to no longer evaluate one of the two redundant rules in the future. This means that the rule is deactivated for processing. As a result, a performance of the decision system is increased because fewer rules are evaluated in total.

The method described 700 Thus, we are successively searching for weight patterns in the incidence matrix, as described in the 11 to 15 are shown.

In 17 is a flowchart of a method 800 represented, can be found with the contradictions of the type 1. For this, other patterns in the incidence matrix, as described in 15 is displayed, searched. A type 1 contradiction occurs when a method is called once in the true-conclusion branch of a first rule and once in the false-conclusion branch of a second rule, both having the same premise. If the method calls in the true and false-conclusion branches of the two rules are reversed, then there is a complete contradiction of the rules, otherwise there is only a partial contradiction. The procedure 800 to 17 resembles the post 16 , The process steps 701 to 729 are identical to the process steps 801 to 829 , Only the queries 831 and 835 differ from the queries 731 and 735 ,

In the query 831 it is checked whether a method m is called in the true-conclusion branch of the first rule and at the same time in the wrong-conclusion branch of the second rule. If this is the case, there is a contradiction of type 1 and as in the process step 833 indicated, a detection signal is generated or modified accordingly. In the process step 835 it is checked whether the same method m is called in the wrong-conclusion branch of the first rule and in the true-conclusion branch of the second rule. If this is the case, then again there is a type 1 contradiction. As in the process step 837 indicated, the detection signal is generated or modified accordingly. Do both the queries 831 as well as 835 For a method to show that the first and second rule have a type 1 contradiction, the rules are completely contradictory. Such an inconsistency between rules can lead to unpredictable conditions in the evaluation of the underlying logic. Therefore, the detection signal is preferably designed such that it instructs the decision-making system, if it checks a device logic for the first time after incorporation of a new component, that the incorporation of this component is not allowed to be effective or reversed. As a result, the decision system sets filter entries, for example, so that the newly integrated component can not exchange messages with any other component of the communication system or the device.

In the 18 to 20 the pattern search for the above example is shown graphically again. As it turned out 19 results, rules 1 and 3 completely contradict each other. By contrast, Rules 2 and 3 are contradictory between the true-conclusion branch of the rule and the false-conclusion branch of rule 3.

The embodiments merely describe exemplary embodiments of the invention.

Claims (36)

Decision-making system ( 6 . 34 - 36 . 47 . 60 ; 80 ; 91 ; 122 ) with an analysis device ( 87 ; 103 ; 140 ) for controlling an interaction of components ( 83 ; 96 . 97 ; 122 . 123 ) a device ( 1 ; 89 ; 90 ; 121 ), the components ( 83 ; 96 . 97 ; 122 . 123 ) in a communication system ( 48 ; 84 ; 98 ), through which information between the components ( 83 ; 96 . 97 ; 122 . 123 ) are interchangeable, the interaction between the components ( 83 ; 96 . 97 ; 122 . 123 ) is limited by means of a device logic, characterized in that the analysis device ( 87 ; 103 ; 140 ) a logic mapping unit ( 141 ) for mapping at least part of the logic in an incidence matrix ( 520 ; 520 '; 580 ) and a pattern recognition unit ( 142 ) for recognizing patterns associated with logic properties, wherein upon detection of one of the patterns, a detection signal is generated. Decision-making system ( 6 . 34 - 36 . 47 . 60 ; 80 ; 91 ; 122 ) according to claim 1, characterized in that the detection signal contains information about the recognized pattern in the incidence matrix ( 520 ; 520 '; 580 ). Decision-making system ( 6 . 34 - 36 . 47 . 60 ; 80 ; 91 ; 122 ) according to claim 1 or 2, characterized in that the device logic comprises a device rule ( 86 ; 100 ; 138 ), which rules ( 200c ; 206 ; 306 ) defining the device logic. Decision-making system ( 6 . 34 - 36 . 47 . 60 ; 80 ; 91 ; 122 ) according to one of the preceding claims, characterized in that when mapping the logic into the incidence matrix ( 520 ; 520 '; 580 State variables are compared to the rules in an ordered order and methods invoked by the rules, the true-conclusion branches of the rules in the ordered order and the false-conclusion branches of the rules in the ordered order in a matrix, the entries being represented by a state variable and a rule is indexable, indicating a dependency of the respective rule on the corresponding state variable, and the entries that are dexiblizable by a method and a true-conclusion branch or a wrong-conclusion branch, invoke a method call of the corresponding method in the corresponding true-conclusion branch or false Specify -concentration branch. Decision-making system ( 6 . 34 - 36 . 47 . 60 ; 80 ; 91 ; 122 ) according to one of the preceding claims, characterized in that when recognizing logic properties rules are determined with identical state variable dependencies, and then for the rules with identical state variable dependencies pairwise identical method calls in the true-conclusion branches and / or the wrong-conclusion branches are searched and the detection signal is generated when finding at least a pairwise identical method call, wherein the detection signal comprises at least partial redundancy information or redundancy information. Decision-making system ( 6 . 34 - 36 . 47 . 60 ; 80 ; 91 ; 122 ) according to one of the preceding claims, characterized in that when recognizing logic properties rules are determined with identical state variable dependencies, and then for the rules thus determined in pairs in the true-conclusion branch of a rule of the pair and in the wrong-conclusion branch of the other Rule of the pair identical method calls are searched and / or identical method calls are searched in the false-conclusion branch of the one rule of the pair and in the true-conclusion branch of the other rule of the pair and when finding at least one identical method call the recognition signal is generated. Decision-making system ( 6 . 34 - 36 . 47 . 60 ; 80 ; 91 ; 122 ) according to one of the preceding claims, characterized in that the detection signal is designed to change the device logic, in particular by activating, deactivating, modifying deleted and / or added rules. Decision-making system ( 6 . 34 - 36 . 47 . 60 ; 80 ; 91 ; 122 ) according to claim 1, characterized in that by means of the detection signal, the device logic is changeable, so that the interaction between the components is changed. Decision-making process with analysis capabilities for controlling the interaction of components ( 83 ; 96 . 97 ; 122 . 123 ) a device ( 1 ; 89 ; 90 ; 121 ) inserted in a communication system ( 48 ; 84 ; 98 ) and via the communication system ( 48 ; 84 ; 98 ), Wherein the interaction is limited via device logic, comprising the steps of: providing device logic responsive to a configuration of the communication system ( 48 ; 84 ; 98 ), the configuration being determined by the embedded components ( 83 ; 96 . 97 ; 122 . 123 ) and a type of integration is specified, characterized in that by means of a logic mapping unit ( 141 ) At least a part of the logic in an Inzi denzmatrix ( 520 ; 520 '; 580 ) and by means of a pattern recognition unit ( 142 ) Are sought, which are associated with logic properties, wherein upon detection of one of the patterns, a detection signal is generated. Decision-making method according to claim 9, characterized characterized in that the detection signal comprises information about the detected patterns added becomes. Decision-making method according to claim 9 or 10, characterized in that the device logic comprises a device rule ( 86 ; 100 ; 138 ), which rules ( 200c ; 206 ; 306 ) defining the device logic. Decision-making method according to one of Claims 9 to 11, characterized in that when mapping the logic into the incidence matrix ( 520 ; 520 '; 580 State variables are compared to the rules in an ordered order and methods invoked by the rules, the true-conclusion branches of the rules in the ordered order and the false-conclusion branches of the rules in the ordered order in a matrix, the entries being represented by a state variable and a rule is indexable, specify a dependency of the respective rule on the corresponding state variable, and the entries that are indexable by a method and a true-conclusion branch or a wrong-conclusion branch, call a method call of the corresponding method in the corresponding true-conclusion branch or false Specify the conclusion branch. Decision-making method according to one of Claims 9 to 12, characterized in that when recognizing logic properties Rules with identical state variable dependencies be determined, and then for the Rules with identical state variable dependencies pairwise identical Method calls in the true-conclusion branches and / or the wrong-conclusion branches and the detection signal at Find at least one pairwise identical method call is generated, wherein the detection signal at least a partial redundancy information or redundancy information. Decision-making method according to one of Claims 9 to 13, characterized in that when recognizing logic properties Rules with identical state variable dependencies be determined, and then for the so determined rules in pairs in the true-conclusion branch of the one rule of the pair and in the wrong-conclusion branch of the other rule of the pair identical method calls are searched for and / or in the wrong-conclusion branch one rule of the pair and in the true-conclusion branch of the other Rule of the pair identical method calls are sought and at finding at least one identical method call that Detection signal is generated. Decision-making method according to one of Claims 9 to 14, characterized in that the detection signal is generated, to change the device logic, in particular by enabling, disabling, modifying, and / or modifying rules be added. Decision-making method according to one of Claims 9 to 15, characterized in that by means of the detection signal, the Device logic changed so that the interaction between the components is changed. Development system for a device logic for a decision-making system, by means of which an interaction between components ( 83 ; 96 . 97 ; 122 . 123 ) of a communication system ( 48 ; 84 ; 98 ) with several components ( 83 ; 96 . 97 ; 122 . 123 ) a device ( 1 ; 89 ; 90 ; 121 ), which can exchange information with each other, is controllable, the device logic depending on a configuration of the communication system ( 48 ; 84 ; 98 ) is variable, the configuration by the incorporated components ( 83 ; 96 . 97 ; 122 . 123 ) and a type of integration is defined, comprising a detection unit for acquiring descriptions of logic units, both a description of a logic behavior of the individual components ( 83 ; 96 . 97 ; 122 . 123 ), which is perceptible from the outside, as well as a description of logic behavior for interactions between the components ( 83 ; 96 . 97 ; 122 . 123 ), a memory for storing the captured descriptions in an overall logic collection, a configuration unit for configuring device logic from the overall logic collection adapted to a configuration of the communication system ( 48 ; 84 ; 98 ) of the device ( 1 ; 89 ; 90 ; 121 ) and an export device for exporting the configured device logic to the device ( 1 ; 89 ; 90 ; 121 ), characterized by an analysis device ( 87 ; 103 ; 140 ) with a logic mapping unit ( 141 ) for mapping at least part of the logic in an incidence matrix ( 520 ; 520 '; 580 ) and a pattern recognition unit ( 142 ) for recognizing patterns associated with logic properties, wherein upon detection of one of the patterns, a detection signal is generated. Development system according to claim 17, characterized in that the detection signal Information about the found pattern in the incidence matrix ( 520 ; 520 '; 580 ). Development system according to claim 17 or 18, characterized in that the device logic comprises a device rule ( 86 ; 100 ; 138 ), which rules ( 200c ; 206 ; 306 ) defining the device logic. Development system according to one of Claims 17 to 19, characterized in that when mapping the logic into the incidence matrix ( 520 ;; 520 '; 580 State variables are compared to the rules in an ordered order and methods invoked by the rules, the true-conclusion branches of the rules in the ordered order and the false-conclusion branches of the rules in the ordered order in a matrix, the entries being represented by a state variable and a rule is indexable, specify a dependency of the respective rule on the corresponding state variable, and the entries that are indexable by a method and a true-conclusion branch or a wrong-conclusion branch, call a method call of the corresponding method in the corresponding true-conclusion branch or false Specify the conclusion branch. Development system according to one of claims 17 to 20, characterized in that when recognizing logic properties Rules with identical state variable dependencies be determined, and then for the Rules with identical state variable dependencies pairwise identical Method calls in the true-conclusion branches and / or the wrong-conclusion branches and the detection signal when finding at least a pairwise identical method call is generated, wherein the detection signal at least a partial redundancy information or redundancy information. Development system according to one of claims 17 to 21, characterized in that when recognizing logic properties Rules with identical state variable dependencies be determined, and then for the so determined rules in pairs in the true-conclusion branch of the one Rule of the pair and in the wrong-conclusion branch of the other rule of Pair of identical method calls are searched for and / or in the wrong-conclusion branch one rule of the pair and in the true-conclusion branch of the other Rule of the pair identical method calls are sought and at finding at least one identical method call that Detection signal is generated. Development system according to one of claims 17 to 22, characterized in that the detection signal is configured is to change the device logic, in particular by rules activated, deactivated, modified deleted and / or added. Development system according to one of claims 17 to 23, characterized by a converting unit, by means of the Descriptions of the logic units that come in different formats described are convertible into a common logic format. Development system according to claim 17 or 24, characterized in that the logic units in the common logic format in the form of rules ( 200c ; 206 ; 306 ) are writable in an XML data format. A development system according to any one of claims 17 to 25, characterized in that the configuration unit is configured to configure, based on the overall logic collection and at least one configured device logic, device component logic for another component that is mergeable with the at least one device logic to produce a modified one Device logic to the communication system ( 48 ; 84 ; 98 ) of the modified device ( 1 ; 89 ; 90 ; 121 ), which results when the further component in the device ( 1 ; 89 ; 90 ; 121 ) or by the device ( 1 ; 89 ; 90 ; 121 ) is disconnected. Development process for a device logic for a decision-making system, by means of which an interaction between components ( 83 ; 96 . 97 ; 122 . 123 ) of a communication system ( 48 ; 84 ; 98 ) with several components ( 83 ; 96 . 97 ; 122 . 123 ) a device ( 1 ; 89 ; 90 ; 121 ), which can exchange information with each other, is controllable, the device logic depending on a configuration of the communication system ( 48 ; 84 ; 98 ) is variable, the configuration by the incorporated components ( 83 ; 96 . 97 ; 122 . 123 ) and a type of integration, comprising capturing descriptions of logic units that both describe a logic behavior of the individual components ( 83 ; 96 . 97 ; 122 . 123 ), which is perceptible from the outside, as well as a description of logic behavior for interactions between the components ( 83 ; 96 . 97 ; 122 . 123 ), storing the captured descriptions in an overall logic collection, configuring device logic based on the overall logic collection, adapted to a configuration of the communication system ( 48 ; 84 ; 98 ) of the device and exporting the configured device logic to the device characterized in that by means of a logic mapping unit ( 141 ) at least part of the logic into an incidence matrix ( 520 ; 520 '; 580 ) and by means of a pattern recognition unit ( 142 ) Are sought, which are associated with logic properties, wherein upon detection of one of the patterns, a detection signal is generated. Development process according to claim 27, characterized characterized in that the detection signal comprises information about the detected patterns added becomes. Development method according to claim 27 or 28, characterized in that the device logic comprises a device rule ( 86 ; 100 ; 138 ), which rules ( 200c ; 206 ; 306 ) defining the device logic. Development method according to one of Claims 27 to 29, characterized in that when mapping the logic into the incidence matrix ( 520 ; 520 '; 580 State variables are compared to the rules in an ordered order and methods invoked by the rules, the true-conclusion branches of the rules in the ordered order and the false-conclusion branches of the rules in the ordered order in a matrix, the entries being represented by a state variable and a rule is indexable, specify a dependency of the respective rule on the corresponding state variable, and the entries that are indexable by a method and a true-conclusion branch or a wrong-conclusion branch, call a method call of the corresponding method in the corresponding true-conclusion branch or false Specify the conclusion branch. Development process according to one of claims 27 to 30, characterized in that when recognizing logic properties Rules with identical state variable dependencies be determined, and then for the Rules with identical state variable dependencies pairwise identical Method calls in the true-conclusion branches and / or the wrong-conclusion branches and the detection signal at Find at least one pairwise identical method call is generated, wherein the detection signal at least a partial redundancy information or redundancy information. Development process according to one of claims 27 to 31, characterized in that when recognizing logic properties Rules with identical state variable dependencies be determined, and then for the so determined rules in pairs in the true-conclusion branch of the one rule of the pair and in the wrong-conclusion branch of the other rule of the pair identical method calls are searched for and / or in the wrong-conclusion branch one rule of the pair and in the true-conclusion branch of the other Rule of the pair identical method calls are sought and at finding at least one identical method call that Detection signal is generated. Development process according to one of claims 27 to 32, characterized in that the detection signal is generated, to change the device logic, in particular by enabling, disabling, modifying, and / or modifying rules added become. Development process according to one of claims 27 to 33, characterized in that by means of a converting unit the descriptions of the logic units that are in different Formats are converted to a common logical format become. Development method according to one of claims 27 to 34, characterized in that the logic units in the common logic format in the form of rules ( 200c ; 206 ; 306 ) in an XML data format. A development method according to any one of claims 27 or 35, characterized in that, based on the overall logic collection and at least one configured device logic, device component logic is configured for a further component that is mergable with the at least one device logic to yield modified device logic responsive to the device logic Communication system ( 48 ; 84 ; 98 ) is adapted to the modified device that results when the further component is incorporated into the device.