DE102016117570A1 - Watchdog with pattern recognition for recurrent load situations - Google Patents

Abstract

The invention relates to a watchdog for monitoring a processor (PC). The watchdog (WDG) sends messages (MSG) to the processor (PC) which then returns status information about itself and possibly system components (SC) and their test results at predetermined times as responses (ANS) to the watchdog (WDG). The watchdog has at least one event memory (ES) or at least one shift register (SR) in which the watchdog (WDG) records the history of the responses (ANS) and examines patterns for occurring erroneous responses. The recording is caused by a trigger event, which may be the receipt of individual responses and / or the end of scheduled reception periods. Depending on the patterns, signaling is made to the processor and / or other system components that may initiate actions and adjust their structure and / or the programs being executed and / or the priority of those executions, etc.

Description

preamble

The invention is directed to a watchdog for monitoring a processor. This watchdog evaluates responses of a processor and takes into account the historical development of these answers, in particular by pattern recognition.

General introduction

When using processors for controlling safety-related devices in vehicles, the monitoring of the intended program sequence is of crucial importance for the safety of the relevant applications. For this purpose numerous publications can be found under the keyword watchdog. Their task is to evaluate the temporal behavior of the supervised processor on the basis of features and signaling and, if necessary, by appropriate Rücksignalisierungen the processor to take countermeasures, if the behavior deviates from the expectations.

State of the art

From the DE 10 056 408 C1 is such a watchdog known. This device is used to monitor a processor, wherein the watchdog transmits an error message to the processor for at least one detected error and increments an error counter.

This pure incrementing has the disadvantage that it is only suitable on its own for systems that must never show a fault. But more complex systems require load control. Therefore, an up / down counter is often used. However, this has the disadvantage that the counter has an integrating effect and thus acts like a low-pass with oscillating but nevertheless poor results. Such oscillating results are, for example, when the check results are good and bad times in succession.

Object of the invention

The invention is therefore based on the object to provide a solution which does not have the above disadvantages of the prior art and has further advantages.

This object is achieved by a device according to feature 1.

Solution of the problem of the invention

The invention relates to a device for monitoring a processor (PC). It typically includes a watchdog (WDG) with a clock (CTR) as part of this watchdog (WDG). The processor (PC) should be connectable to the watchdog (WDG) for monitoring. The clock determines a scheduled receive period (b), in which the watchdog (WDG) predetermines replies (ASW) of the processor (PC) to the watchdog (WDG). In contrast to the prior art, the inventive device in the watchdog (WDG) as part of the same now has a result memory (ES), which is preferably designed as a shift register (SR). This result memory now preferably comprises n result memory cells or, in the case of the shift register (SR), n shift register cells. In this case, n is a whole positive number greater than 1. These shift register cells can be memory cells which can store, for example, only one bit per result memory cell or shift register cell. Preferably, however, more information is stored in a result memory cell or shift register cell. A result memory cell or shift register cell thus stores a data structure which, in the simplest case, can be a single bit per result memory cell or shift register cell and can comprise more complex data structures in more complicated cases. In this case, not all information components of the information stored in these data structures must always and always be used. It is important, however, that in the data structure of the respective result memory cell or shift register cell always a memory space for a first information component is provided, whose function will be explained later. The n result memory cells or n shift register cells of the result memory (ES) or of the shift register (SR) now contain n cached information (Inf ₁ , ... Inf _n ). These n cached information (Inf ₁ , ... Inf _n ) each have the previously mentioned data structure and each comprise at least the said first information portion. In the result memory (ES) or the shift register (SR) these n cached information (Inf ₁ , ... Inf _n ) are stored. In the n result memory cells or n shift register cells of the result memory (ES) or of the shift register (SR) and thus also the information n stored therein (Inf ₁ ,... Inf _n ) can now be numbered from 1 to n. Thereby, each of the n cached information (Inf ₁ , ... Inf _n ) obtains a unique result storage position of n result storage positions numbered 1 through n, and a unique shift register position of n shift register positions numbered 1 through n, respectively. As already described, each of the n cached information (Inf ₁ ,... Inf _n ) has at least a first portion of information and, in the case of more complex data structures, may possibly have further information portions. The watchdog has first stimuli (QSTM) that can be used to send messages (MSG) from the watchdog (WDG) to the processor (PC). This can be, for example, simple lines that can be placed on different potentials or more complicated serial bus system. The watchdog (WDG) uses the first evaluation means (AVAL), which are preferably part of the watchdog (WDG), to evaluate responses (ANS) of the processor (PC) to the watchdog (WDG). The watchdog (WDG) sends messages (MSG) to the processor (PC) that can affect both the processor (PC) itself, parts of it and other system components (SC). The processor (PC), the affected parts of the processor (PC) and / or the other system components then carry out predeterminable tests with predeterminable results. In simple cases, this can be, for example, the determination of program counter readings or the like. The processor (PC) then sends its result to the watchdog (WDG). This result depends on at least one previously received message (MSG). It is also conceivable that several messages (MSG) determine the content of the response (ANS) of the processor (PC) to the watchdog (WDG) or multiple responses (ANS) based on one or more received messages (MSG) to the watchdog / WDG ). However, when sending the responses (ANS) by the processor (PC), the messages (MSG) determine not only the content but also the timing. The answers (ANS) are expected by the watchdog (WDG) in a designated reception period (b). In contrast, there is also a period (a) for which no response reception (ANS) is intended. Preferably, this period (a) alternates cyclically with the intended receiving period (b). In addition, periods (c) are still conceivable for which no evaluation of responses takes place. Cyclic here does not mean that the temporal length of these periods must always be the same in their entirety or individually. Rather, it can vary. Also, the order of the periods (a, b, c) may vary. A cycle comprises at least one of the periods (a, b, c). If the watchdog (WDG) now receives a response (ANS) from the processor (PC), then the watchdog (WDG) evaluates the response (ANS) of the processor (PC) as "correct" or "incorrect" by means of the first evaluation means (AVAL). , An answer (ANS) is then "correct" if its content is correct, ie corresponds to an element of an allowed amount of content that can be precalculated or pre-calculated. At the same time, for the evaluation as "correct" by the first judging means (AVAL), the answer (ANS) within the receiving period (b) predetermined for this answer (ANS) must be received by the watchdog (WDG). Conversely, the first weighting means (AVAL) of the watchdog (WDG) assess the response (ANS) as "incorrect" if the content of the response (ANS) is "incorrect", that is, if its content does not match an element of the allowed, pre-calculated amount of Content at the time of receipt corresponds. So it can be so given expectation periods (b), which depend on the expected response (ANS) and may possibly overlap. Conversely, the first weighting means (AVAL) of the watchdog (WDG) assess the answer (ANS) as "incorrect" if the answer (ANS) is not detected by the watchdog (WDG) within the reception period (b) for that answer (ANS). but in a period (a) to which no reception of replies (ANS) is intended.

If the receive memory (ES) is, for example, a shift register (SR), the shift register (SR) clears in a first fundamental form each time a response (ANS) of the processor (PC) or in your second basic form is received the n-th buffered information (Inf _n ) from the shift register (SR) and shifts each of the (n-1) buffered in response to receipt of a response (ASW) by the watchdog (WDG) or temporally after the end of the scheduled receive period (b) Information from the respective j th shift register position (p _j , where 1≤j≤ (n-1)) to the (j + 1) th shift register position (p _j , where 2≤j≤n). The then released first shift register position (p ₁ ) fills the shift register (SR) at least with the result of the evaluation of the received response (ANS) by the processor (PC) as the new first information portion of the new 1-th buffered information (Inf ₁ ) , This first information portion of the 1-th cached information (Inf ₁ ) then corresponds to the logical value "correct" or "incorrect" depending on the result of the previous evaluation.

It can also be a more general form of a result store (ES). The result memory (ES) deletes at least one buffered information (eg Inf _n ) after each receipt of a response (ANS) by the processor (PC) by the watchdog (WDG) or after the end of the intended reception period (b) a result memory cell of the result memory (ES). Concurrently or in conjunction with it, the Results Store (ES) shifts the remaining (n-1) undeleted cached information from the original associated logical result storage locations to other logical result storage locations. This can be done by real displacement of the information data in other physical result storage cells of the result memory or much easier by reallocation of the logical result storage positions to the physical result storage positions and thus to the result storage cells. In the simplest case, only one write pointer is used, which determines which of the result memory cells is to be deleted next. One of the result storage cells then contains only the deletion value. The new information (eg Inf ₁ ) is then written to this result memory cell. This writing process can simultaneously represent the deletion process of the previous information of this result memory cell. At least the first information portion of the information in the respective result memory cell is determined. As at least new first portion of the new cached information (eg Inf ₁ ) on the relevant result storage position into which none of the remaining (n-1) cached information has been moved, then preferably at least the result of the evaluation of the received response (ANS ) is used by the processor (PC) corresponding to a logical value "correct" or "incorrect".

The watchdog according to the invention thus carries out a method for monitoring a processor (PC). A clock (CTR) specifies a designated receive period (b) for a response (ANS) of the processor (PC) to the watchdog (WDG). The watchdog (WDG) sends one or more messages (MSG) to the processor (PC) with contents which may concern the processor (PC) itself, parts of it and / or other system components (SC). The latter answers the message (MSG) or messages (MSG) as a function of at least the content of one of these messages (MSG) in the form of at least the said reply (ASW) to the watchdog (WDG). This evaluates at least one response (ANS) of the processor (PC) to the watchdog (WDG) by the watchdog (WDG) as "correct" or "incorrect" to generate an evaluation result.

In the method, the content of the result memory (ES) is now modified in terms of time after receipt of a response (ASW) by the watchdog (WDG) or after the end of the intended reception period (b). As previously explained, the result store (ES) has n result memory cells with n cached information (Inf ₁ , ... Inf _n ). Where n is again an integer greater than 1. Each result memory cell has a unique logical result storage location and an associated unique physical result storage location, which need not be identical.

The modification of the content of the result memory (ES) is carried out by deleting at least one cached information (Inf _k ) of the n cached information (Inf ₁ , ... Inf _n ) in an associated result memory cell (here the k th result memory cell example). Furthermore, there is a change in at least one logical result storage position of at least one buffered information item (Inf _j ) of the n buffered information items (Inf ₁ ,... Inf _n ) in the result store (ES). This can be done by real displacement of the at least one cached information (Inf _j ) within the result memory (ES) or by a change of addressing. In this last case, contents are not shifted but the logical result memory positions assigned to the respective result memory cells and thus to the respective cached information (Inf ₁ ,... Inf _n ) are changed. The result of the evaluation of the at least one received response (ANS) is then stored and used by the watchdog (WDG) as a new first information portion of a new buffered information (Inf _l ) in the result memory. In a particularly simple case, one can thus imagine a write pointer, which always points to a result storage position. After the reception of a response (ASW) by the watchdog (WDG) or after the end of the intended reception period (b) or after receipt of a single response (ASW), the watchdog (WDG) overwrites the first information portion of the cached information (WDG). Inf _k ) at the corresponding result storage position with the result of the evaluation of the at least one received response (ANS) and jumps with the write pointer to the predetermined next result memory cell. The receipt of a response (ASW) by the watchdog (WDG) or the receipt of each response (ASW) by the watchdog (WDG) or the end of the intended reception period (b) thus represent a trigger event for the result memory (ES). The algorithm for calculating the next write pointer position of the next result memory cell of the result memory (ES) is preferably designed such that the write pointer has, before repeating the write pointer positioning, once pointed to the result memory positions of preferably all result memory cells of the result memory.

Advantage of the invention

In contrast to the prior art, therefore, the evaluation results within the watchdog are not used immediately, but stored. Such a watchdog makes it possible, at least in some implementations, for these stored answers (ANS) ratings to be considered as Basis for further decisions. Oscillating results can thus be recognized and used for appropriate warnings. The advantages are not limited to this.

Description of the developments / embodiments of the invention

In a first embodiment of the invention, the device according to the invention is provided with an additional second evaluation means (VAL) as part of the watchdog (WDG), which is used to evaluate the cached information (Inf ₁ to Inf _n ) of the shift register (SR). Depending on the content of the result memory (ES) or of the shift register (SR), these second evaluation means (VAL) can generate at least one control signal (RES) which can change the state of the processor (PC). For example, it is conceivable that different reset signals or interrupt signals, depending on the recognized pattern or number of "incorrect" information in the result memory (ES) or in the shift register (SR), are activated by the second evaluation means (VAL), which have different effects to the processor (PC) whose program sequence, parts of it or other system components (SC) have. Of course, it is sufficient if at least one such control signal (RES) can be generated from output signals of the second evaluation means (VAL).

This has the advantage that even with oscillating evaluation results more complex situations can be detected and depending on the situation by specific signaling (RES) of the processor (PC), parts of it or other system components (SC) can be made to another program or other measures. Such a situation detection is not known in the prior art.

In a further embodiment of the invention, the watchdog (WDG) evaluates the response (ANS) of the processor (PC) as "correct" or "incorrect" by means of the first evaluation means (AVAL). Typically, this will be a single bit taking the values 0 or 1, or a line assuming a first potential or a second potential. Other realizations are conceivable. This further embodiment of the invention is characterized in that a response (ANS) is rated as "correct" by the watchdog (WDG) if the number of responses (ANS) received by the watchdog (WDG) is within the predetermined reception period (b). by the response now received (ANS) does not exceed a predetermined maximum number of responses to be received (ANS) or at the end of the predetermined reception period (b) the number of responses received (ANS) does not exceed a predetermined minimum number of responses to be received (ANS) below. An answer (ANS) is additionally "not correct" if the number of responses (ANS) received by the watchdog (WDG) within the predetermined reception period (b) by the received response (ANS) is a predetermined maximum number of responses to be received (ANS). ANS) or at the end of the predetermined reception period (b) falls below a minimum number of responses (ANS) predetermined for at least this predetermined reception period (b).

This evaluation of the number of answers in the predetermined receiving period (b) allows further evaluations and correspondingly more flexible reactions of the system.

In a further embodiment of the invention, the evaluation of the response (ANS) of the processor (PC) by the first evaluation means (AVAL) of the watchdog (WDG) preferably additionally takes place as a function of at least one, several or all cached information (Inf _j ) of the n cached Information (Inf _j to Inf _n ) of the shift register (SR). This means that not only the content of the responses (ANS) of the processor (PC) and their timing with respect to the predetermined reception period (b) is evaluated, but these data are also set in relation to the responses already received (ANS). This has the advantage that, for example, the type of action taken in the results memory (ES) or the shift register as content of other information portions of the respective information (Inf ₁ to Inf _n ) can be stored. It happens, for example, that the measures themselves, by additional expenditure, worsen the situation in the short term before the desired improvement in the load situation is recognized. Therefore, it may happen that those responses that are actually considered "incorrect" can be assessed as "correct", as expected, as a result of the actions taken previously.

Preferably, in a further embodiment of the invention, the wide evaluation means (VAL) generated as a function of at least one buffered information (Inf _j ) of the n cached information (Inf ₁ , ... Inf _n ) of the shift register (SR) of the result memory (ES) or the shift register (SR) additionally at least one further evaluation. In this further embodiment of the invention, this further evaluation is also stored as a further information component of information in a memory cell of the result memory (ES) or the shift register (SR). Thus, at least one cached information (Inf _j ) of the cached information (Inf _j to Inf _n ) of the result memory (ES) or the shift register (SR) then comprises a buffered further evaluation of the second evaluation means (VAL) in addition to the respective evaluations of the responses ( ANS) of the processor (PC) by the first evaluation means (AVAL), which is stored in the first information portion of the respective cached information (Inf _j ) of the cached information (Inf _j to Inf _n ) of the result memory (ES).

Preferably, in a further embodiment of the invention, the second evaluation means (VAL) generated as a function of the occurrence of predetermined patterns under at least a respective portion of at least two different cached information (Inf _j , Inf _k , with 1 ≤ j ≤ n and 1 ≤ k ≤ n and j ≠ k) of the cached information (Inf ₁ , ... Inf _n ) of the result memory (ES) or the shift register (SR) additionally at least one second further evaluation. Of course, all information (Inf ₁ ,... Inf _n ) of the result memory (ES) or of the shift register (SR) is of course included in such an evaluation.

In a particularly preferred embodiment of the invention, the result memory is deleted at the end of the predetermined reception period (b). In this case, "deleted" may mean, for example, that the first information portions of the cached information (Inf ₁ to Inf _n ) of the shift register (SR) at the end of the predetermined receiving period (b) are set to a value corresponding to "not correct". However, it may also mean that instead the first information portions of the cached information (Inf ₁ to Inf _n ) of the shift register (SR) at the end of the predetermined receiving period (b) are set to a value corresponding to "correct". This is particularly advantageous when the device is carried out in two stages, as explained below.

Preferably, in a further embodiment of the invention, the inventive principle is applied in several stages. Additional second evaluation means (VAL), which are part of the watchdog (WDG), evaluate the buffered information (Inf ₁ to Inf _n ) in the result store (ES) or in the shift register (SR) as described above. However, the evaluation results obtained in this way are now stored in at least one further result memory (ES _B ) or at least one further shift register (SR _B ). These are now also part of the watchdog (WDG). The further result memory (ER _B ) consists of m further result memory cells or the further shift register (SR _B ) consists of m further shift register cells. In this case, m is a whole positive number greater than 1. In these further result _{memory cells} or further shift register cells, there are m further cached information (Inf _1B ,... _InfMB ). The further logical and physical result memory positions or further logical and physical shift register positions which are assigned to these further m result memory cells or further shift register cells can be numbered from 1 to m. Thus, the m further cached information contained therein (Inf _1B , ... Inf _mB ) can be numbered from 1 to m accordingly. Thus, each of the m further cached information (Inf _1B , ... Inf _mB ) is then assigned a unique logical and unique physical result storage _location of m result storage positions and a unique logical and unique physical shift register position of m shift register positions ranging from 1 to m are uniquely numbered. As before, also here preferably each of the m further cached information (Inf _1B , ... Inf _mB ) again has at least a first _{piece of} information. As before in the one-stage solution, each of the m further cached information (Inf _1B ,... _InfMB ) may have further information _portions beyond this first information portion. This is also typically but not necessarily more complex data structures. In the simplest case, it is a bit.

Further second evaluation means (VAL _B ), which are also preferably part of the watchdog (WDG), now evaluate this further cached information (Inf _1B , ... Inf _mB ) of the further result _memory (ES _B ) or the further shift register (SR _B ).

If the further receive memory (ES _B ) is, for example, another shift register (SR _B ), the further shift register (SR _B ) in a first basic embodiment of this variant of the invention clears each time a response (ANS) of the processor is received ( PC) or in your second basic form of this variant of the invention in time after the receipt of a response (ASW) by the watchdog (WDG) or temporally after the end of the scheduled receiving period (b) the mth further _cached information (Inf _mB ) the further shift register (SR _B ) and shifts each of the (m-1) further _latched information from the respective jth further shift register position (p _jB , with 1 ≤ j ≤ (m-1)) to the (j + 1) - te further shift register position (p _jB , with 2 ≤ j ≤ n). The then released further first shift register position fills the further shift register (SR _B ) then at least with the said evaluation result of the further evaluation of the n information (Inf ₁ to Inf _n ) of the first result memory (ES) or the first shift register (SR) by the second evaluation means (VAL) as a new first information portion of the new 1-th further cached Information (Inf _1B ). This first information portion of the 1 st further cached information (Inf _1B ) then corresponds again to the logical value "correct" or "incorrect" depending on the result of the previous evaluation of the n information (Inf ₁ to Inf _n ) of the first result store (ES). or the first shift register (SR) by second evaluation means (VAL).

However, it can also be a more general form of a further result memory (ES _B ). The further result memory (ES _B ) clears at least one further buffered information (eg Inf.) After each receipt of a response (ANS) by the processor (PC) by the watchdog (WDG) or after the end of the intended reception period (b) _mB ) from the further result _memory (ES _B ). Simultaneously or in conjunction therewith, the further result store (ES _B ) shifts the remaining (m-1) non-deleted further cached information from the original associated logical further result storage location within the further result store (ES _B ) to other logical further result store locations. On the one hand, this can be done by real displacement of the information data into other physical result memory cells or much easier by reassignment of the logical further result memory positions to the further physical result memory positions and thus to the further result memory cells. In the simplest case, only one further write pointer is used, which determines which of the further result memory cells is to be deleted and overwritten next. One of the further result storage cells then contains only the deletion value. The new further information (Inf _1B ) is then written to this further result memory _cell . This writing process can simultaneously represent the deletion process of the previous information of this further result memory cell. At least the first information portion of the further information in the respective further result memory cell is determined. As at least new first portion of the new cached further information (eg Inf _1B ) on the respective further result storage position into which none of the remaining (m-1) cached further information has been moved, then at least the result of the evaluation of the n Information (Inf ₁ to Inf _n ) of the first result memory (ES) or the first shift register (SR) corresponding to a logical value "correct" or "incorrect" used.

Further evaluation means (VAL _B ) now generate the control signal () depending on these further _cached information (Inf _jB ) of the m further _cached information (Inf _1B to Inf _mB ) of the further result _memory (ES _B ) or the further shift register (SR _B ). RES), which can also change the state of the processor (PC), instead of the second evaluation means (VAL), which can also generate a control signal (RES) in a further variant, or in parallel with these.

List of figures

1 shows a rough simplified diagram of the interaction of the individual components of the device according to the invention.

2 equals to 1 with a shift register (SR) as result memory (ES).

3 shows a two-stage device according to the invention.

4 equals to 3 , wherein the first result memory (ES) is a shift register (SR) and the further result memory (ES _B ) is another shift register (SR _B )

5 to 7 schematically show an exemplary, sequential temporal behavior of an exemplary single-stage solution with a shift register (SR) accordingly 2 ,

8th shows an exemplary two-stage method according to 4 ,

9 corresponds in its basic structure again the 2 wherein the pattern of information stored in the shift register (SR) is evaluated.

Description of the figures

Fig. 1

1 shows a rough simplified diagram of the interaction of the individual components of the device according to the invention. The watchdog (WDG) comprises first stimulus means (QSTM), first weighting means (AVAL), an internal clock (CTR), a first result memory (ES) and second weighting means (VAL). The processor (PC) here includes the other system components (SC) with. The first stimuli (QSTM) send messages (MSG) from the watchdog (WDG) to the processor (PC), which it then with answers (ANS) to answer at the right times and with the expected content and in the correct number, which then by the watchdog (WDG) can be tested. This test is carried out by the first evaluation tools (AVAL). The first evaluation means (AVAL) evaluate the responses (ANS) of the processor (PC) to the watchdog (WDG) as prompted by said messages (MSG) containing the first stimulus (QSTM) has sent from the watchdog (WDG) to the processor (PC) and this then with these same answers (ANS) should answer at the right times and with the expected content and in the correct number, which then by the first evaluation means (AVAL) the watchdog (WDG) can be tested again. These evaluation results of the first evaluation means (AVAL) are buffered in the result memory (ES) which carries the history of these evaluations. The result store (ES) consists of result storage cells. Each result memory cell of the result memory (ES) is numbered consecutively with a number from 1 to n. This means that each result memory cell has, on the one hand, a real physical result memory cell position and, on the other hand, has a logical result memory cell position which need not be identical to the real one. The result memory can be executed as a shift register (SR). The result memory (ES) deletes temporally after each receipt of a response (ANS) of the processor (PC) by the watchdog (WDG) or after the receipt of individual responses (ANS) or temporally after the end of the intended reception period (b), preferably at least one buffered one Information (eg Inf _n ) from the results memory (ES). Simultaneously or in conjunction with it, the Results Store (ES) shifts the remaining (n-1) undeleted cached information from the original associated logical result storage locations to other logical result storage locations. This can be done by real displacement of the information data into other physical result memory cells or much easier by reallocating the logical result storage positions to the physical result storage positions and thus to the result storage cells. In the simplest case, only one write pointer is used, which determines which of the result memory cells is to be erased next and then repositioned according to a predeterminable scheme. One of the result storage cells then contains only the deletion value. The new information to be cached (Inf ₁ ) is then written to this result memory cell. This writing process can simultaneously represent the deletion process of the previous information of this result memory cell. At least the first information portion of the information in the respective result memory cell is determined. As at least new first portion of the new cached information (eg Inf ₁ ) at the respective logical result storage position into which none of the remaining (n-1) cached information has been moved, then at least the result of the evaluation of the received response (ANS ) by the first evaluation means (AVAL). Depending on whether this result has been evaluated according to a logical value "correct" or "incorrect" by the first evaluation means (AVAL), then the associated result memory cell contains the associated logical value. These cached information (Inf ₁ to Inf _n ) are in the example of 1 valued by second weighting means (VAL). It evaluates the n information buffered in the result memory (ES) or in the shift register (SR) (Inf ₁ to Inf _n ). In this case, the second evaluation means (VAL) may also generate more than one rating. The second evaluation means (VAL) can for example determine the number of "correct" information in the result memory cells of the result memory (ES) and compare it with a threshold value. If the determined number lies below the threshold value, the control signal (RES) or another corresponding signal for influencing the processor (PC) or parts thereof or other system components (SC) can be set by second evaluation means (VAL), for example. Also, further signals can be generated in the form of further evaluations by the second evaluation means (VAL), which can correspond, for example, to specific patterns in the result memory cells of the result memory (ES). The clock (CTR) generates the timing signals for all relevant blocks (QSTM, AVAL, SR, VAL) of the watchdog (WDG). In particular, the clock (CTR) preferably determines the time of transmission of the messages (MSG) to the processor (PC) by the watchdog (WDG) and the timing and duration of the intended receive periods (b) for the responses (ANS) of the processor (PC) to these messages (MSG). Thus, the clock (CTR) preferably, in cooperation with the first evaluation means (AVAL) receiving the messages (MSG) of the processor (PC), causes the result memory (ES) to allocate the result storage positions of the cached information (Inf ₁ to Inf _n ) changes at the right times as specified and deletes the correct result memory cell and writes the new evaluation result of the first evaluation means (AVAL) to the correct result storage location at the right time.

Fig. 2

2 equals to 1 with a shift register (SR) as result memory (ES).

Fig. 3

3 shows a two-stage device according to the invention. It again shows a rough simplified diagram of the interaction of the individual components of the device according to the invention. The watchdog (WDG) again comprises first stimulation means (QSTM), first evaluation means (AVAL), an internal clock (CTR), a first result memory (ES), second evaluation means (VAL) a further result memory (ES _B ) and further second evaluation means (VAL _B ). The processor (PC) includes here again by way of example the other system components (SC). The first stimuli (QSTM) send messages (MSG) from the watchdog (WDG) to the processor (PC), which it then with answers (ANS) to answer at the right times and with the expected content and in the correct number, which then by the watchdog (WDG) can be tested. This test is again carried out by the first evaluation tools (AVAL). The first evaluation means (AVAL) evaluate the responses (ANS) of the processor (PC) to the watchdog (WDG) as prompted by said messages (MSG), which send the first stimulus (QSTM) from the watchdog (WDG) to the processor (PC ) and the latter then with these same answers (ANS) should answer at the right times and with the expected content and in the correct number of answers (ANS), which in turn be checked by the first evaluation means (AVAL) of the Watchdog (WDG) can. These evaluation results of the first evaluation means (AVAL) are buffered in the first result memory (ES), which carries the history of these evaluations. The result memory (ES) again consists of result memory cells. Each result memory cell of the result memory (ES) is numbered consecutively with a number from 1 to n. This means that each result memory cell has, on the one hand, a real physical result memory cell position and, on the other hand, has a logical result memory cell position which need not be identical to the real one. The first result memory (ES) can be executed as a shift register (SR). The first result memory (ES) deletes at least one buffered time after each receipt of a response (ANS) by the processor (PC) by the watchdog (WDG) or after receipt of a response (ANS) or after the end of the intended reception period (b) Information (eg Inf _n ) from the first result store (ES). Simultaneously or in conjunction with this, the first result store (ES) shifts the remaining (n-1) undeleted cached information from the original associated logical result storage locations to other logical result storage locations of the first result store (ES). This can be done by real displacement of the information data into other physical result memory cells of the first result memory (ES) or much easier by reallocating the logical result memory positions to the result memory cells of the first result memory (ES). In the simplest case, only a first write memory for the first result memory (ES) is used which determines which of the result memory cells of the first result memory (ES) is to be deleted next. One of the result memory cells of the first result memory (ES) then contains only the deletion value. The new information to be buffered (Inf ₁ ) is then written into this result memory cell of the first result memory (ES). This writing process can simultaneously represent the deletion process of the previous information of this result memory cell of the first result memory (ES). At a minimum, the first information portion of the information is set in the respective result memory cell of the first result memory (ES). As at least new first portion of the new cached information (eg Inf ₁ ) on the respective result storage position of the first result memory (ES), in which none of the remaining (n-1) cached information has been moved, then at least the result of the evaluation of the received response (ANS) by the first evaluation means (AVAL). Depending on whether this result has been evaluated according to a logical value "correct" or "incorrect", the corresponding result memory cell of the first result memory (ES) then contains the assigned logical value. The cached information (Inf ₁ to Inf _n ) are in the example of the 3 now valued by second valuation means (VAL). They evaluate the information (Inf ₁ to Inf _n ) buffered in the first result memory (ES) or in the first shift register (SR), which reflects the latest evaluation results. If necessary, the second evaluation means (VAL) can also generate more than just one further evaluation. By way of example, these second evaluation means (VAL) can determine the number of "correct" information in the result memory cells of the result memory (ES) in the context of the evaluation of the contents of the first result memory (ES) or the first shift register (SR), for example Compare Threshold. If this number determined in this way is below the first threshold value, the result is evaluated, for example, with a logical value corresponding to "correct" and, in the other case, with a logical value corresponding to "not correct".

These evaluation results of the second evaluation means (VAL) are now in a further results memory (ES _B ) in contrast to 1 also cached. This is the history of these reviews. The further result memory (ES _B ) is analogous to the first result memory (ES) from further result memory cells. Each additional result memory cell of the further result memory (ES _B ) is numbered consecutively with a number from 1 to m. This means that each additional result memory cell, on the one hand, has a real physical further result memory cell position and, on the other hand, has a logical further result memory cell position which need not be identical to the real one. The further result memory (ES _B ) can be further Shift registers (SR _B ) are executed. The further result memory (ES _B ) deletes at least one time after each receipt of a response (ANS) of the processor (PC) by the watchdog (WDG) or after receipt of individual responses (ANS) or after the end of the intended reception period (b) further cached information (eg Inf _mB ) from the further result _memory (ES _B ). Simultaneously or in conjunction therewith, the further result memory (ES _B ) shifts the remaining (m-1) non-deleted cached further information from the original associated logical further result memory positions to other logical further result memory positions of the further result memory (ES _B ). On the one hand, this can be done by real displacement of the further information data into other physical further result memory cells of the further result memory (ES _B ) or much easier by reallocation of the logical further result memory positions to the further result memory cells of the further result memory (ES _B ). In the simplest case, only one further write pointer is used for the further result memory (ES _B ), which determines which of the further result memory cells of the further result memory (ES _B ) is to be deleted or overwritten next. One of the further result memory cells of the further result memory (ES _B ) then contains only the deletion value. The new additional information (Inf _1B ) to be buffered is then written to this further result memory cell of the further result memory (ES _B ). This write operation can simultaneously represent the deletion process of the previous further information of this further result memory cell of the further result memory (ES _B ). At least the first information portion of the further information is determined in the respective further result memory cell of the further result memory (ES _B ). As at least new first portion of the new cached further information (eg Inf _1B ) on the respective further result storage position of the further result memory (ES _B ) into which none of the remaining (m-1) cached additional information has been moved, then at least the further result of the further evaluation of the content of the first result memory (ES) by the second evaluation means (VAL). Depending on whether this further result has been correspondingly rated as "correct" or "incorrect", the associated further result memory cell of the further result memory (ES _B ) then contains the assigned logical value. The m further information (Inf _1B to Inf _mB ) thus _cached are used in the example of _FIG 3 now again evaluated by further second evaluation means (VAL _B ). They evaluate the information stored in the further result memory (ES _B ) or in the further shift register (SR _B ) m information (Inf _1B to Inf _mB ), which reflect the last evaluation results of the second evaluation means (VAL). In this case, the further second evaluation means (VAL _B ) may also generate more than just one further evaluation. In the example of 3 these are the first warning signal (WRN) and the second warning signal (WRN2). These further second evaluation means (VAL _B ), for example, in the context of the evaluation of the content of the further result memory (ES _B ) and the further shift register (SR _B ), for example, analogous to 1 determine the number of "correct" information in the further result memory cells of the further result memory (ES _B ) and compare it with a first further threshold value. If this number determined in this way is below the first further threshold value, it is possible, for example, to set the control signal (RES) or another corresponding signal for influencing the processor (PC) or parts thereof or other system components (SC). If this number determined in this way is below a second further threshold value, then the first warning signal (WRN) can be set, for example, whereupon the processor (PC) or parts thereof or other system components (SC) can initiate measures to reduce the processor or system load. If this number determined in this way is below a third further threshold value, then, for example, the second warning signal (WRN2) can be set, whereupon the processor (PC) or parts thereof or other system components (SC) initiate further measures to further reduce the processor or system load can. If all these measures were not sufficient, it would finally be possible, for example, to set the first control signal (RES) which, for example, could result in a complete system or processor restart.

As before, however, further signals can now also be generated by the further second evaluation means (VAL _B ) in the form of further evaluations which, for example, can correspond to specific patterns in the further result memory cells of the further result memory (ES _B ). In the example of 3 The clock (CTR) generates the time signals for all relevant blocks (QSTM, AVAL, ES, VAL, ES _B , VAL _B ) of the watchdog. In particular, the clock (CTR) again preferably specifies the time of transmission of the messages (MSG) to the processor (PC) and the timing and duration of the scheduled receive periods (b) for the responses (ANS) of the processor (PC) to them Messages (MSG). Thus, the clock (CTR) preferably, in cooperation with the first evaluation means (AVAL) receiving the messages (MSG) of the processor (PC), causes the result memory (ES) to store the result storage positions of the n cached information (Inf ₁ to Inf _n ). at the right times as given changes and the right one Deletes the result memory cell and writes the new evaluation result of the first evaluation means (AVAL) to the correct result storage location of the first result memory (ES) at the correct time. In addition, the clock (CTR) in the example causes the 3 preferably in cooperation with the second weighting means (VAL) that the further result _memory (ES _B ) also changes the further result _{memory positions of} the m further _cached information (Inf _1B to Inf _nB ) at the right times as specified and deletes the correct further result _{memory cell} and the new evaluation result of the second evaluation means (VAL) at the right time in the correct further result storage location of the further result memory (ES _B ) writes.

Fig. 4

4 equals to 3 , wherein the first result memory (ES) is a shift register (SR) and the further result memory (ES _B ) is another shift register (SR _B ).

Fig. 5 to Fig. 7

5 to 7 schematically show an exemplary, sequential temporal behavior of an exemplary single-stage solution with a shift register (SR) accordingly 2 , The clock (CTR) generates an exemplary window signal (WD). In the example of 5 to 7 For example, a 1 level means that no responses are expected and that responses in these 1 level periods are judged to be "incorrect" regardless of their content. In a period having a 0 level of the window signal (WD), answers are preferably expected in a predetermined number. If their contents are correct, ie correspond to a predictable content, they will be rated as "correct". Possibly. A different number of responses can also lead to a "not correct" rating. In the examples of 5 to 7 For example, 27 time periods (P1 to P27) are shown. Each of these exemplary 27 periods (P1 to P27) is subdivided by way of example into a first period (a) and a second period (b). In the first period (a) is in the example of 5 to 7 the exemplary window signal (WD) at a logical 1 level and in the second period (b) at a logic 0 level. Under the window signal (WD) are in the 5 to 7 Times of answers (ANS) on a timeline shown from left to right. The time of each response (ANS) is symbolized by an arrow up or down at a corresponding location on the timeline in temporal relation to the window signal (WD). An arrow downwards should correspond to a content (ANS) of the processor (PC) evaluated to the watchdog (WDG) as "incorrect" by the first evaluation means (AVAL). An arrow upwards is intended to correspond to a content (ANS) of the processor (PC) evaluated to the watchdog (WDG) as "correct" by the first evaluation means (AVAL). Links are in the 5 to 7 Accordingly, the values "OK" for content "correct" and "NOK" for content "not correct" marked. In the example of 5 to 7 a shift register (SR) is used as the first result store (ES). The shift register (SR) in this example comprises exemplary 8 bits. It contains the value "00111111" in the first period (P1). The "b" is intended to indicate that they are bit values that may correspond to a logical "0" (= "not correct") or a logical "1" (= "correct").

In the first period (P1), the watchdog (WDG) receives a response (ANS) evaluated as "correct" by the first evaluation means (AVAL) in the reception period (b) provided for that purpose. The internal clock (CTR) of the watchdog (WDG) generated in this example due to the receipt of the response (ANS) with a typical predetermined by the implementation constant delay at the time of receipt of the response (ANS) of the processor (PC) assuming the evaluation result of the first Judgment means (AVAL) in the first shift register (SR) in conjunction with a shift operation to the left. The contents of the shift register (SR) are then "01111111" in this example, since a correct answer (ANS) was received at the right time.

In the second period (P2), the watchdog (WDG) receives a response (ANS) evaluated as "correct" by the first evaluation means (AVAL) in the reception period (b) provided for this purpose. The contents of the shift register (SR), after taking the evaluation and performing a shift operation in this example, are then "11111111" since a correct response (ANS) was received at the correct time.

In the third period (P3), the watchdog (WDG) receives a response (ANS) evaluated as "correct" by the first evaluation means (AVAL) in the reception period (b) provided for this purpose. The contents of the shift register (SR) is after taking over the evaluation and then performed shift operation in this example then "11111111", since a correct answer (ANS) was received at the right time.

In the fourth period (P4), the watchdog (WDG) receives a response (ANS) evaluated as "not correct" by the first evaluation means (AVAL) in the unscheduled reception period (a). The contents of the shift register (SR) after taking the evaluation and performing a shift operation in this example are then subsequently "11111110" because an incorrect answer (ANS) was received at the wrong time.

In the fifth period (P5), the watchdog (WDG) receives a response (ANS) evaluated as "correct" by the first evaluation means (AVAL) in the unscheduled receiving period (a). The contents of the shift register (SR), after taking the evaluation and performing a shift operation in this example, are then "11111100" since a correct response (ANS) was received at the wrong time.

In the sixth period (P6), the watchdog (WDG) receives a response (ANS) evaluated as "correct" by the first evaluation means (AVAL) in the reception period (b) provided for this purpose. The contents of the shift register (SR), after taking the evaluation and performing a shift operation in this example, are then "11111001" because a correct response (ANS) was received at the correct time.

In the seventh period (P7), the watchdog (WDG) receives a response (ANS) evaluated as "not correct" by the first judging means (AVAL) in the designated receiving period (b). The contents of the shift register (SR) are then "11110010" after taking the evaluation and performing a shift operation in this example, since an incorrect response (ANS) was received at the correct time.

In the eighth period (P8), the watchdog (WDG) receives a response (ANS) evaluated as "correct" by the first evaluation means (AVAL) in the unscheduled receiving period (a). The contents of the shift register (SR) are then "11100100" after taking the evaluation and performing a shift operation in this example, since a correct response (ANS) was received at the wrong time.

In the ninth period (P9), the watchdog (WDG) receives a response (ANS) evaluated as "incorrect" by the first weighting means (AVAL) in the designated reception period (b). The contents of the shift register (SR) are then "11001000" after taking the evaluation and performing a shift operation in this example because an incorrect response (ANS) was received at the correct time.

In the tenth period (P10), the watchdog (WDG) receives a response (ANS) evaluated as "correct" by the first judging means (AVAL) in the designated receiving period (b). The contents of the shift register (SR) are then "10010001" after taking the evaluation and performing shift operation in this example, since a correct response (ANS) was received at the right time.

In the eleventh period (P11), the watchdog (WDG) receives a response (ANS) evaluated as "correct" by the first judging means (AVAL) in the designated receiving period (b). The content of the shift register (SR) is then "00100011" after taking the evaluation and performing shift operation in this example, since a correct response (ANS) was received at the correct time.

In the twelfth period (P12), the watchdog (WDG) receives a response (ANS) evaluated as "correct" by the first evaluation means (AVAL) in the reception period (b) provided for this purpose. The contents of the shift register (SR) are then "01000111" after taking the evaluation and performing a shift operation in this example, since a correct response (ANS) was received at the right time.

In the thirteenth period (P13), the watchdog (WDG) receives two response (ANS) evaluated as "correct" by the first judging means (AVAL) in the designated receiving period (b). However, only one response (ANS) of the processor was expected. Therefore, in this example, the evaluation of the actual correct answers (ANS) of the processor (PC) is done as "not correct". The contents of the shift register (SR) are then "10001110" after taking the evaluation and performing a shift operation in this example, since an incorrect response (ANS) was received at the correct time.

In the fourteenth period (P14), the watchdog (WDG) receives a response (ANS) evaluated as "incorrect" by the first judging means (AVAL) in the designated receiving period (b). The contents of the shift register (SR) are then "00011100" after taking the evaluation and performing a shift operation in this example, since an incorrect answer (ANS) was received at the correct time.

In the fifteenth period (P15), the watchdog (WDG) receives a response (ANS) evaluated as "correct" by the first evaluation means (AVAL) in the designated reception period (b). The contents of the shift register (SR) are then "00111001" after assuming the evaluation and performing a shift operation in this example, since a correct response (ANS) was received at the correct time.

In the sixteenth period (P16), the watchdog (WDG) receives a response (ANS) evaluated as "incorrect" by the first judging means (AVAL) in the designated receiving period (b). The contents of the shift register (SR) are then "01110010" after taking the evaluation and performing a shift operation in this example, since an incorrect answer (ANS) was received at the correct time.

In the seventeenth period (P17), the watchdog (WDG) receives a response (ANS) evaluated as "not correct" by the first judging means (AVAL) in the designated receiving period (b). The contents of the shift register (SR) are then "11100100" after taking the evaluation and performing a shift operation in this example, since an incorrect response (ANS) was received at the correct time.

In the eighteenth period (P18), the watchdog (WDG) receives a response (ANS) evaluated as "incorrect" by the first evaluation means (AVAL) in the designated reception period (b). The contents of the shift register (SR) are then "11001000" after taking the evaluation and performing a shift operation in this example because an incorrect response (ANS) was received at the correct time.

In the nineteenth period (P19), the watchdog (WDG) receives a response (ANS) evaluated as "incorrect" by the first judging means (AVAL) in the designated receiving period (b). The contents of the shift register (SR) are then "10010000" after taking the evaluation and performing a shift operation in this example, since an incorrect answer (ANS) was received at the correct time.

In the twentieth period (P20), the watchdog (WDG) receives a response (ANS) evaluated as "incorrect" by the first judging means (AVAL) in the designated receiving period (b). The contents of the shift register (SR) are then "00100000" after taking the evaluation and performing a shift operation in this example because an incorrect response (ANS) was received at the correct time.

In the twenty-first period (P21), the watchdog (WDG) receives a response (ANS) evaluated as "incorrect" by the first judging means (AVAL) in the designated receiving period (b). The contents of the shift register (SR) after taking the evaluation and performing a shift operation in this example are then "01000000" since an incorrect response (ANS) was received at the correct time.

In the twenty-second period (P22), the watchdog (WDG) receives a response (ANS) evaluated as "incorrect" by the first judging means (AVAL) in the unscheduled receiving period (a). The contents of the shift register (SR) are then "10000000" after taking the evaluation and performing a shift operation in this example because an incorrect answer (ANS) was received at the wrong time.

In the twenty-third period (P23), the watchdog (WDG) does not receive a response (ANS) in the designated reception period (b), although a response (ANS) of the processor (PC) was expected in the designated reception period (b). This is evaluated here by way of example as a "not correct" to be evaluated response (ANS) by the first evaluation means (AVAL). The contents of the shift register (SR) are then "00000000" after taking the evaluation and performing a shift operation in this example, since an incorrect answer (ANS) was received at the correct time.

In the twenty-fourth period (P24), the watchdog (WDG) receives a response (ANS) evaluated as "incorrect" by the first judging means (AVAL) in the designated receiving period (b). The contents of the shift register (SR) are then "00000000" after taking the evaluation and performing a shift operation in this example, since an incorrect answer (ANS) was received at the correct time.

In the twenty-fifth period (P25), the watchdog (WDG) receives a response (ANS) evaluated as "correct" by the first judging means (AVAL) in the designated receiving period (b). The contents of the shift register (SR) are then "00000001" after taking the evaluation and performing a shift operation in this example, since an incorrect response (ANS) was received at the correct time.

In the twenty-sixth period (P26), the watchdog (WDG) receives a response (ANS) evaluated as "incorrect" by the first judging means (AVAL) in the designated receiving period (b). The contents of the shift register (SR) are then "00000010" after taking the evaluation and performing a shift operation in this example, since an incorrect response (ANS) was received at the correct time.

In the twenty-seventh period (P27), the watchdog (WDG) receives a response (ANS) evaluated as "incorrect" by the first judging means (AVAL) in the designated receiving period (b). The contents of the shift register (SR) are then "00000100" after taking the evaluation and performing a shift operation in this example, since an incorrect answer (ANS) was received at the correct time.

The second evaluation means (VAL) evaluate in parallel the respective information (Inf ₁ to Inf ₈ ) in the exemplary shift register (SR) of 5 to 7 out. In this example, after each shift operation of the shift register (SR), its content is evaluated by the second judging means. This is done here by way of example by counting the 1 levels within the shift register (SR), which indicate the responses (ANS) of the last eight periods evaluated as "correct", in an exemplary count (NO). Other counting methods and evaluations are of course expressly conceivable. In this example, the control signal (RES) is set if, for example, the shift register (SR) has not evaluated information in the eight information (Inf ₁ to Inf ₈ ) of the eight shift register cells which has been "correct" information in the last eight periods as correct information , contains. Depending on the implementation, it may be useful if the control signal (RES) not as in the 5 to 7 is a non-return-to-zero signal (NRZ signal), but a return-to-zero signal (RTZ signal) is that when the condition occurs only for a short period of time is active and then only becomes active again when the condition reappears. In this example, the first warning signal (WRN) is set if the shift register (SR) contains, by way of example, less than three pieces of information (Inf ₁ to Inf ₈ ) for three correct pieces of information in the last eight periods. In this example, the second warning signal (WRN2) is set if the shift register contains, by way of example, less than five pieces of information (Inf ₁ to Inf ₈ ) for five correct pieces of information in the last eight periods.

Fig. 8

8th shows an exemplary two-stage method according to 4 , The first result memory (ES) is realized here by a first shift register (SR) with an exemplary width of 4 bits. In this example, the first shift register (SR) performs a shift operation to the left each time an answer (ANS) is received, and takes the evaluation result of the first evaluation means (AVAL) into the rightmost shift register cell (result memory cell). For better clarity, the exemplary temporally different values of the 4 cached information (Inf ₁ to Inf ₄ ) of the shift register (SR) with each other and offset are written.

At the beginning of the first period (P1), the content of the shift register (SR) is reset to a reset value, here for example "0000". During this period, the watchdog (WDG) receives four expected and no unexpected responses (ANS) from the processor (PC). All responses (ASN) are rated as "correct" by the first rating means (AVAL). None of the answers (ASN) is rated as "incorrect" by the first rating means (AVAL). All expected responses are received in the designated reception period (b). No answers will be received in the unannounced reception period (a). The contents of the shift register (SR) are then "1111" after taking the evaluation and 4 shift operations performed in this example.

At the beginning of the second period (P2), the content of the shift register (SR) is reset to a reset value, here for example "0000". During this period, the watchdog (WDG) receives four expected and no unexpected responses (ANS) from the processor (PC). Three responses (ASN) are rated as "correct" by the first rating means (AVAL). One of the responses (ASN) is rated as "incorrect" by the first rating means (AVAL). Three of the expected responses are received in the designated reception period (b). A reply is received in the unscheduled receiving period (a). The contents of the shift register (SR) are then "0111" after taking the evaluation and 4 shift operations performed in this example.

At the beginning of the third period (P3), the content of the shift register (SR) is reset to a reset value, here for example "0000". During this period, the watchdog (WDG) receives four expected and no unexpected responses (ANS) from the processor (PC). Two answers (ASN) are called "Correctly" evaluated by the first evaluation means (AVAL). Two of the responses (ASN) are rated as "incorrect" by the first rating means (AVAL). Three of the expected responses are received in the designated reception period (b). A reply is received in the unscheduled receiving period (a). The contents of the shift register (SR) are then "0101" after taking the evaluation and 4 shift operations performed in this example.

At the beginning of the fourth period (P4), the content of the shift register (SR) is reset to a reset value, here for example "0000". During this period, the watchdog (WDG) receives four expected and no unexpected responses (ANS) from the processor (PC). An answer (ASN) is rated as "correct" by the first rating means (AVAL). Three of the responses (ASN) are rated as "incorrect" by the first rating means (AVAL). Three of the expected responses are received in the designated reception period (b). A reply is received in the unscheduled receiving period (a). The contents of the shift register (SR) are then "0001" after taking the evaluation and 4 shift operations performed in this example.

At the beginning of the fifth period (P5), the content of the shift register (SR) is reset to a reset value, here for example "0000". During this period, the watchdog (WDG) receives four expected and no unexpected responses (ANS) from the processor (PC). An answer (ASN) is rated as "correct" by the first rating means (AVAL). Three of the responses (ASN) are rated as "incorrect" by the first rating means (AVAL). Three of the expected responses are received in the designated reception period (b). A correct answer is received in the unscheduled reception period (a). The contents of the shift register (SR) are then "0000" after taking the evaluation and 4 shift operations performed in this example.

At the beginning of the sixth period (P6), the content of the shift register (SR) is reset to a reset value, here for example "0000". During this period, the Watchdog (WDG) receives only three instead of the expected 4 Responses (ANS) of the processor (PC). Two responses (ASN) are rated as "correct" by the first rating means (AVAL). One of the responses (ASN) is rated as "incorrect" by the first rating means (AVAL). The three expected answers are received in the designated reception period (b). No answer will be received in the unannounced reception period (a). The missing response is exemplified here as an "incorrect" answer. The contents of the shift register (SR) are then "0110" after taking the evaluation and 3 shift operations performed in this example.

At the beginning of the seventh period (P7), the content of the shift register (SR) is reset to a reset value, here for example "0000". During this period, the Watchdog (WDG) receives only three instead of the expected 4 Responses (ANS) of the processor (PC). An answer (ASN) is rated as "correct" by the first rating means (AVAL). Two of the responses (ASN) are rated as "incorrect" by the first rating means (AVAL). The three expected answers are received in the designated reception period (b). No answer will be received in the unannounced reception period (a). The missing response is exemplified here as an "incorrect" answer. The contents of the shift register (SR) are then "0001" after taking the evaluation and 3 shift operations performed in this example.

At the beginning of the eighth period (P8), the content of the shift register (SR) is reset to a reset value, in this example "0000". During this period, the watchdog (WDG) receives 5 instead of the expected 4 responses (ANS) of the processor (PC). Two responses (ASN) are rated as "correct" by the first rating means (AVAL). Three of the responses (ASN) are rated as "incorrect" by the first rating means (AVAL). Four replies are received in the designated reception period (b). A reply is received in the unscheduled receiving period (a). The additional correct answer is rated here as an "incorrect" answer. The contents of the shift register (SR) is then "1000" after taking the evaluation and 5 shift operations performed in this example.

At the beginning of the ninth period (P9), the content of the shift register (SR) is reset to a reset value, here for example "0000". During this period, the watchdog (WDG) 4 receives the expected 4 responses (ANS) of the processor (PC). An answer (ASN) is rated as "correct" by the first rating means (AVAL). Three of the responses (ASN) are rated as "incorrect" by the first rating means (AVAL). Three replies are received in the designated reception period (b). A reply is received in the unscheduled receiving period (a). The contents of the shift register (SR) are then "0010" after taking the evaluation and 4 shift operations performed in this example.

In this example the 8th the second weighting means (VAL) in the form of a count value (NO) count the last 4 responses of the processor (PC) evaluated with "correct" to the watchdog (WDG). The second evaluation means (VAL) in this example compare this count value (NO) thus determined with a fourth threshold value. If the count (NO) is below the fourth threshold of 3 in this example, an evaluation signal (BW) is set. If the count value is above this exemplary evaluation signal (BW) is reset.

By way of example, the value of this evaluation signal (BW) is taken over at the end of each period, ie at the end of the respective receiving period (b) for the responses (ANS), into another shift register (SR _B ), which here represents the further result memory (ES _B ) ,

Therefore, the check result in the form of the logic level of the evaluation signal (BW) in the first period (P1) and in the second period (B2) is rated with a 1-level, which should mean "correct" here and in the other periods with a 0 Level rated, what should mean here "not correct".

These check results thus stored in the further shift register (SR _B ) are evaluated by further second evaluation means (VAL _B ). This is done here by way of example by counting the 1-level within the further shift register (SR _B ). As a result, a second count value (CCNT _B ) is determined by the further second evaluation means (VAL _B ).

The further second evaluation means (VAL _B ) compare this second count value (CCNT _B ), for example, with a first threshold value, which is illustrative here by way of example. If the second count (CCNT _B ) is below the first threshold, then in the example of FIG 8th the control signal (RES) is set and not set otherwise.

The further second evaluation means (VAL _B ) compare the second count value (CCNT _B ) in the example of FIG 8th with a second threshold, which is exemplified here 5. If the second count (CCNT _B ) is below the second threshold, then in the example of FIG 8th the first warning signal (WRN) is set and otherwise not set.

The further second evaluation means (VAL _B ) compare the second count value (CCNT _B ) in the example of FIG 8th with a third threshold, which is exemplified here 3. If the second count (CCNT _B ) is below the third threshold, then in the example of FIG 8th the second warning signal (WRN2) is set and otherwise not set.

Fig. 9

The example of 9 corresponds in its basic structure again the 2 , However, the evaluation of the shift register (SR) by the second evaluation means (VAL) now takes place in a different way than the evaluation according to the 5 to 7 , It is now not the number of correct answers that are stored in the shift register (SR) as 1 information evaluated, but the pattern. Here, the second judging means try to detect the pattern "0101". If this is in an area in four successive shift register cells of the shift register (SR), an internal evaluation signal (here C0101) is set to 1 in this example. An up / down counter (CCNT) of the second judging means (VAL) counts up at the end of each period (P1 to P9) when the judgment signal (C0101) is 1, and down when it is 0. If the value of the up / down counter (CCNT) is above a first threshold (here 2), then the first warning signal (WRN) is set. If the value of the up / down counter (CCNT) is above a second threshold value (not specified here), then the second warning signal (WRN2) is set. If the value of the up / down counter (CCNT) is above a third threshold (not stated here), the control signal (RES) is set.

characteristics

These features do not constitute claims.

• 1. Device for monitoring a processor (PC), - with a watchdog (WDG) and - with a clock (CTR) as part of the watchdog (WDG) and - with a shift register (SR) as part of the watchdog (WDG) and - with n cached information (Inf ₁ , ... Inf _n ) stored in n shift register cells making up the shift register (SR), where n is a whole positive number greater than 1, and • numbering from 1 to n and wherein each of the n cached information (Inf ₁ , ... Inf _n ) has a unique logical shift register position of n shift register positions numbered 1 to n, and wherein each of the n cached information (Inf ₁ ,. .. Inf _n ) has at least a first portion of information and may optionally have further information shares and - with first stimulation means (QSTM) as part of the watchdog (WDG), for sending messages (MSG) from the watch dog (WDG) to the processor (PC) and - with first evaluation means (AVAL) as part of the watchdog (WDG), for evaluating responses (ANS) of the processor (PC) to the watchdog (WDG) and - whereby the watchdog ( WDG) sends messages (MSG) to the processor (PC), which may concern the processor (PC) itself and further system components (SC), and - the processor (PC) responding to these messages (MSG) responses (ANS ) to the watchdog (WDG) and - whereby the watchdog (WDG) evaluates the response (ANS) of the processor (PC) as correct or incorrect by means of the first evaluation means (AVAL) and - whereby a response (ANS) is "correct" is, if its content coincides with at least one possible expected content and If the response (ANS) is received within a predetermined reception period (b) by the watchdog (WDG) and - where a response (ANS) is "incorrect", - if the content of the response (ANS) is not at least one possible expected content or • if the response (ANS) is not received in the predetermined receiving period (b) by the watchdog (WDG) and - wherein the shift register (SR) each time a response (ANS) of the processor (PC) • the n-th cached information (Inf _n ) on the nth logical shift register position in a shift register cell of the shift register (SR) from this shift register (SR) clears and • each of (n-1) cached information from the respective j-th logical shift register position (p _j , with 1 ≤ j ≤ (n-1)) shifts to the (j + 1) th logical shift register position (p _j , where 2 ≤ j ≤ n) and • as at least new first portion of the new one 1-th cached information (Inf ₁ ) at least the result of the evaluation of the received response (ANS) by the processor (PC) corresponding to a logical value "correct" or "incorrect" used.
• 2. Device by feature error! Reference source not found. - With an additional second evaluation means (VAL) as part of the watchdog (WDG), for evaluating the cached information (Inf ₁ to Inf _n ) of the shift register (SR), - wherein the second evaluation means (VAL) in response to cached information of the n cached information (Inf ₁ to Inf _n ) in the memory cells of the shift register (SR) generate at least one control signal (RES), which can change the state of the processor (PC), or generate a signal from which such a control signal (RES) is derived.
• 3. Device by feature error! Reference source not found. - with other monitorable system components (SC) as part of the processor.
• 4. Device by feature error! Reference source not found. - wherein a first expected response (ANS1) by the first evaluation means (AVAL) a predetermined first receiving period (b1) as a predetermined receiving period (b) for the evaluation of the first expected response (ANS1) after receiving them by the watchdog (WDG) in response (ANS) is assigned and - wherein a second expected response (ANS2) by the first evaluation means (AVAL) a predetermined second receiving period (b2) as a predetermined receiving period (b) for the evaluation of the second expected response (ANS2) after their receipt by the watchdog (WDG) in response (ANS) is assigned and - wherein the predetermined first receiving period (b1) and the predetermined second receiving period (b2) are different and overlap and - wherein the predetermined first reception period (b1) has no effect on the evaluation of the second response (ANS2), and - wherein the predetermined second receiving period (b2) has no effect on the evaluation of the first response (ANS1).
• 5. Device by feature error! Reference source not found. - Wherein the watchdog (WDG) evaluates the response (ANS) of the processor (PC) as "correct" or "incorrect" by means of the first evaluation means (AVAL) and - where one answer (ANS) is additionally "correct", If the number of responses (ANS) received by the watchdog (WDG) within the predetermined reception period (b) by the received response (ANS) does not exceed a predetermined maximum number of responses to be received (ANS) or at the end of the predetermined reception period (ANS) b) does not fall below a predetermined minimum number of responses to be received (ANS) and - where an answer (ANS) is additionally "incorrect", If the number of responses (ANS) received by the watchdog (WDG) within the predetermined reception period (b) exceeds a predetermined maximum number of responses to be received (ANS) by the received response (ANS) or at the end of the predetermined reception period (b ) falls below a predetermined minimum number of responses to be received (ANS).
• 6. Device by feature error! Reference source not found. characterized in that - the evaluation of the response (ANS) of the processor by the first evaluation means (AVAL) of the watchdog (WDG) additionally of at least one buffered information (Inf _j ) of the buffered information (Inf _j to Inf _n ) of the shift register (SR) depends.
• 7. Device by feature error! Reference source not found. characterized in that - the evaluation of the response (ANS) of the processor by the first weighting means (AVAL) of the watchdog (WDG) additionally depends on the buffered information (Inf _j to Inf _n ) of the shift register (SR).
• 8. Device by feature error! Reference source not found. characterized in that - That second evaluation means (VAL) in response to at least one cached information (Inf _j ) of the cached information (Inf ₁ , ... Inf _n ) of the shift register (SR) additionally generate at least one further evaluation and - that at least one cached information ( Inf _j ) the cached information (Inf _j to Inf _n ) of the shift register (SR) additionally comprises a buffered further evaluation of the second evaluation means (VAL) as a further information component in addition to said first information component.
• 9. Device by feature error! Reference source not found. characterized in that - the second weighting means (VAL) depend on the occurrence of predetermined patterns among at least one information portion of at least two different buffered information items (Inf _j , Inf _k , with 1 ≤ j ≤ n and 1 ≤ k ≤ n and j ≠ k ) of the cached information (Inf ₁ , ... Inf _n ) of the shift register (SR) additionally generates at least a second further evaluation.
• 10. Device by feature error! Reference source not found. characterized in that - the first information portions of the cached information (Inf ₁ to Inf _n ) of the shift register (SR) are set to a value corresponding to "not correct" at the end of the predetermined reception period (b).
• 11. Device by feature error! Reference source not found. characterized in that - the first information portions of the cached information (Inf ₁ to Inf _n ) of the shift register (SR) are set to a value corresponding to "correct" at the end of the predetermined reception period (b).
• 12. Device according to one or more of the preceding features - with additional second evaluation means (VAL) as part of the watchdog (WDG), for evaluating the n cached information (Inf ₁ to Inf _n ) of the shift register (SR) and - with at least one other Shift register (SR _B ) as part of the watchdog (WDG) and - with m further cached information (Inf _1B , ... Inf _mB ), which are stored in m other shift register cells that make up the further shift register (SR _B ), where m is a whole positive number greater than 1, and • wherein the m further cached information (Inf _1B , ... Inf _mB ) can be numbered from 1 to m and • wherein each of the m further cached information (Inf _1B , .. Inf _mB ) has a unique logical further shift register position of m logical further shift register positions numbered 1 to m, and each of the m others n cached information (Inf _1B , ... Inf _mB ) at least one has first information portion and may optionally have further information shares and - with further evaluation means (VAL _B ) as part of the watchdog (WDG), for the evaluation of the further cached information (Inf _1B to Inf _mB ) of the further shift register (SR _B ) and - the further shift register (SR _B ) at each reception of a response of the processor (PC) • the mth further cached information (Inf _mB ) on the good logical further shift register position in a shift register cell of the further shift register (SR _B ) from this further shift register ( SR _B ) clears and • each of the (m-1) _cached information (Inf _jB ) from the respective j-th logical further shift register position (p _j , where 1 ≤ j ≤ (m-1)) to the (j + 1) -th logical further shift register position ( _pj , with 2 ≤ j ≤ m) shifts and • as at least a new first portion of the new 1-th further cached Inform Ation (Inf _1B ) or as new 1-th further cached information (Inf _1B ) at least the result of further evaluation of the second evaluation means (VAL) used and - wherein the further evaluation means (VAL _B ) in dependence on further _cached information (Inf _jB ) of the further cached information (Inf _1B to Inf _mB ) of the further shift register (SR _B ) a control signal (RES), which can change the state of the processor (PC) generate.
• 13. Device according to one or more of the preceding features - with an additional second evaluation means (VAL) as part of the watchdog (WDG), for evaluating the cached information (Inf ₁ to Inf _n ) of the shift register (SR), - with at least one other Shift register (SR _B ) as part of the watchdog (WDG) and - with m further cached information (Inf _1B , ... Inf _mB ), which are stored in m other shift register cells that make up the further shift register (SR _B ), where m is a whole positive number, and • wherein the m further cached information (Inf _1B , ... Inf _mB ) can be numbered from 1 to m and • wherein each of the m further cached information (Inf _1B , ... Inf _mB ) has a unique logical further shift register position of m logical further shift register positions numbered 1 to m, and each of the m further between stored information (Inf _1B , ... Inf _mB ) has at least a first portion of information and may optionally have more information shares and - with further evaluation means (VAL _B ) as part of the watchdog (WDG), for the evaluation of further cached information (Inf _1B to Inf _mB ) of the further shift register (SR _B ) and - wherein the further shift register (SR _B ) after one end of a reception period (b) or after each end of a reception period (b) • the mth further _cached information (Inf _mB ) on the other logical shift register position in a shift register cell of the further shift register (SR _B ) from this further shift register (SR _B ) clears and • each of the (m-1) _cached information (Inf _jB ) from the respective j-th logical further shift register position ( p _j , with 1 ≤ j ≤ (m-1)), to the (j + 1) th logical shift register position (p _j , where 2 ≤ j ≤ m) ver pushes and • uses at least the result of the further evaluation of the second evaluation means (VAL) as at least the new first portion of the new 1-th further cached information (Inf _1B ) or as new 1-th further cached information (Inf _1B ) the further evaluation means (VAL _B ) as a function of further _buffered information (Inf _jB ) of the m further _cached information (Inf _1B to Inf _mB ) of the further shift register (SR _B ) a control signal (RES), the state of the processor (PC) can change, generate.
• 14. Device according to one or more of the preceding features - with an additional second evaluation means (VAL) as part of the watchdog (WDG), for evaluating the n cached information (Inf ₁ to Inf _n ) of the shift register (SR) and - with at least one Further shift register (SR _B ) as part of the watchdog (WDG) and - with m further cached information (Inf _1B , ... Inf _mB ), which are stored in m other shift register cells, which make up the further shift register (SR _B ) , where m is a whole positive number, and • wherein the m further cached information (Inf _1B , ... Inf _mB ) can be numbered from 1 to m and • wherein each of the m further cached information (Inf _1B , ... Inf _mB ) has a unique logical next shift register position of m logical further shift register positions that can be numbered from 1 to m, and • where each of the m we These information (Inf _1B , ... Inf _mB ) cached at least a first information share and may optionally have more information shares and - with further evaluation means (VAL _B ) as part of the watchdog (WDG), to evaluate the further cached information (Inf _1B to Inf _mB ) of the further shift register (SR _B ) and - wherein the further shift register (SR _B ) after the end of a predetermined or set number q consecutive reception periods (b) • the mth further _cached information (Inf _mB ) on the logical next logical shift register position in a shift register cell of the further shift register (SR _B ) from this further shift register (SR _B ) and • each of the (m - 1) _cached information (Inf _jB ) from the respective j-th logical further shift register position (p _j , where 1 ≤ j ≤ (m-1)), to the (j + 1) -th logical next shift register position (p _j , with 2 ≤ j ≤ m) and • as at least as a new first portion of the new 1-th further cached information (Inf _1B ) or as new 1-th further cached information (Inf _1B ) at least the result of the other Evaluation of the second evaluation means (VAL) used and - wherein the further evaluation means (VAL _B ) in response to further cached information of m more cached information (Inf _1B to Inf _mB ) of the further shift register (SR _B ) a control signal (RES), the can change the state of the processor (PC) generate.
• 15. Device by feature error! Reference source not found. characterized in that the first information portions of the cached information (Inf ₁ to Inf _n ) of the shift register (SR) are set to a value corresponding to "not correct" after the end of a number of q consecutive reception periods (b).
• 16. Device by feature error! Reference source not found. characterized in that the first information portions of the cached information (Inf ₁ to Inf _n ) of the shift register (SR) are set to a value corresponding to "correct" after the end of a number of q consecutive reception periods (b).
• 17. Device for monitoring a processor (PC), - with a watchdog (WDG) and - with a clock (CTR) as part of the watchdog (WDG) and - with a result memory (ES) as part of the watchdog (WDG) and - with n cached information (Inf ₁ , ... Inf _n ) stored in n result memory cells that make up the result store (ES), where n is a whole positive number greater than 1, and • which can be numbered from 1 to n, and • where each of the n cached information (Inf ₁ , ... Inf _n ) has a unique logical result storage position of n has logical result memory positions that can be numbered from 1 to n, and • wherein each of the n cached information (Inf ₁ , ... Inf _n ) at least a first information component and may optionally have further information shares and - with first stimulation means (QSTM ) as part of the watchdog (WDG), for sending messages (MSG) from the watchdog (WDG) to the processor (PC) and - with first evaluation means (AVAL) as part of the watchdog (WDG), for the evaluation of responses (ANS) the processor (PC) to the watchdog (WDG) and - wherein the watchdog (WDG) to the processor (PC) sends messages (MSG), • the processor (PC) itself and other system components (SC) k relate and - wherein the processor (PC) sends responses (ANS) to the watchdog (WDG) in response to these messages (MSG) and - wherein the watchdog (WDG) by means of the first evaluation means (AVAL) the response (ANS) of the processor (PC) as correct or incorrectly evaluated and - where a response (ANS) is "correct", • if its content with at least one possible expected content and if the response (ANS) is received by the watchdog (WDG) within a predetermined reception period (b) and - where a response (ANS) is "incorrect", • if the content of the response (ANS) is does not coincide with at least one possible expected content, or • if the response (ANS) is not received by the watchdog (WDG) in the predetermined receive period (b), and - the result store (ES) each time a response (ANS) of the processor is received (PC) • deletes a cached information (eg Inf _j ) at the jth logical result storage position in a result storage cell of the result memory (ES) from this result memory (ES) t, where 1 ≤ j ≤ n, and • the remaining (n-1) cached information (Inf _k ), where 1 ≤ k ≤ n and k ≠ j, from the respective k-th original logical result storage position (p _k , with 1 ≤ k ≤ m and k ≠ j) shifts to a different logical result storage position (p _{k '} , with k' ≠ k and 1 ≤ k '≤ n) respectively and as at least new first portion of the j'th buffered Information (eg. B. Inf _{j ')} on the logical result storage position, in which none of the remaining (n - cached 1) information was moved, at least the result of the evaluation of the received answer (ANS) by the processor (PC) corresponding to a logical value "correct" or "not correct" used.
• 18. Device by feature error! Reference source not found. - With an additional second evaluation means (VAL) as part of the watchdog (WDG), for evaluating the cached information (Inf ₁ to Inf _n ) of the shift register (SR), - wherein the second evaluation means (VAL) in response to cached information of the n cached information (Inf ₁ to Inf _n ) in the result memory cells of the result memory (ES) at least generate a control signal (RES), which can change the state of the processor (PC), or generate a signal from which such a control signal (RES) is derived.
• 19. Device by feature error! Reference source not found. - with other monitorable system components (SC) as part of the processor.
• 20. Device by feature error! Reference source not found. - wherein a first expected response (ANS1) by the first evaluation means (AVAL) a predetermined first receiving period (b1) as a predetermined receiving period (b) for the evaluation of the first expected response (ANS1) after receiving them by the watchdog (WDG) in response (ANS) is assigned and - wherein a second expected response (ANS2) by the first evaluation means (AVAL) a predetermined second receiving period (b2) as a predetermined receiving period (b) for the evaluation of the second expected response (ANS2) after their receipt by the watchdog (WDG) in response (ANS) is assigned and - wherein the predetermined first receiving period (b1) and the predetermined second receiving period (b2) are different and overlap and - wherein the predetermined first reception period (b1) has no effect on the evaluation of the second response (ANS2), and - wherein the predetermined second receiving period (b2) has no effect on the evaluation of the first response (ANS1).
• 21. Device by feature error! Reference source not found. - with further monitorable system components (SC) as part of the processor and
• 22. Device by feature error! Reference source not found. - wherein the watchdog (WDG) means the first evaluation means (AVAL), the response (ANS) of the processor (PC) as correct or incorrectly evaluated and - where one answer (ANS) is additionally "correct", If the number of responses (ANS) received by the watchdog (WDG) within the predetermined reception period (b) by the received response (ANS) does not exceed a predetermined maximum number of responses to be received (ANS) or at the end of the predetermined reception period (ANS) b) does not fall below a predetermined minimum number of responses to be received (ANS) and - where an answer (ANS) is additionally "incorrect", If the number of responses (ANS) received by the watchdog (WDG) within the predetermined reception period (b) by the received response (ANS) exceeds a predetermined maximum number of responses to be received (ANS) or a predetermined minimum number of responses to be received Answers (ANS) falls below.
• 23. Device by feature error! Reference source not found. characterized in that - the evaluation of the response (ANS) of the processor by the first evaluation means (AVAL) of the watchdog (WDG) additionally of at least one cached information (Inf _j ) of the cached information (Inf _j to Inf _n ) of the result store (ES) depends.
• 24. Device by feature error! Reference source not found. characterized in that - the evaluation of the response (ANS) of the processor by the first evaluation means (AVAL) of the watchdog (WDG) additionally depends on the buffered information (Inf _j to Inf _n ) of the result memory (ES).
• 25. Device by feature error! Reference source not found. characterized in that - that a second evaluation means (VAL) in response to at least one cached information (Inf _j ) of the cached information (Inf ₁ , ... Inf _n ) of the result memory (ES) additionally generates at least one further evaluation and - that at least cached information (Inf _j ) of the buffered information (Inf _j to Inf _n ) of the result memory (ES) additionally comprises a buffered further evaluation of the second evaluation means (VAL) as a further information component in addition to the said first information component.
• 26. Device by feature error! Reference source not found. characterized in that - the second weighting means (VAL) depend on the occurrence of predetermined patterns among at least one information portion of at least two different buffered information (Inf _j , Inf _k , with 1 ≤ j ≤ n and 1 ≤ k ≤ n and j ≠ k ) of the cached information (Inf ₁ , ... Inf _n ) of the result memory (ES) additionally generates at least a second further evaluation.
• 27. Device by feature error! Reference source not found. characterized in that - the first information portions of the cached information (Inf ₁ to Inf _n ) of the result memory (ES) at the end of the predetermined reception period (b) are set to a value corresponding to "not correct".
• 28. Device by feature error! Reference source not found. characterized in that - that the first information portions of the cached information (Inf ₁ to Inf _n ) of the result memory (ES) at the end of the predetermined receiving period (b) are set to a value corresponding to "correct".
• 29. Device according to one or more of the preceding features - with an additional second evaluation means (VAL) as part of the watchdog (WDG), for the evaluation of the n cached information (Inf ₁ to Inf _n ) of the result memory (ES) and - with at least one further result memory (ES _B ) as part of the watchdog (WDG) and - with m further cached information (Inf _1B , ... Inf _mB ), which are stored in m more result memory cells, which make up the further result memory (ES _B ) , where m is a whole positive number greater than 1, and • wherein the m further cached information (Inf _1B , ... Inf _mB ) can be numbered from 1 to m and • wherein each of the m further cached information (Inf _1B,. .. inf _mB ) has a unique logical further result storage position of m logical further result storage positions numbered 1 to m, and wherein each d he m further cached information (Inf _1B , ... Inf _mB ) has at least a first portion of information and may optionally have more information shares and - with further evaluation means (VAL _B ) as part of the watchdog (WDG), to assess the other cached information (Inf _1B to Inf _mB ) of the further result _memory (ES _B ) and - wherein the further result _memory (ES _B ) at each reception of a response of the processor (PC) • the one jth further _cached information (Inf _jB ) on the j -then logical further result storage location in one Results memory cell of the further result memory (ES _B ) from the further result memory (ES _B ) deletes, where 1 ≤ j ≤ m, and • each of the (m-1) cached information (Inf _kB ), where 1 ≤ k ≤ m and k ≠ j is, from the respective k-th logical further result storage position (p _k , with 1 ≦ k ≦ m and k ≠ j) to another logical further result storage position (p _{k '} , with k' ≠ k and 1 ≦ k '≦ m) shifts and • as at least a new first portion of the j'th further cached information (Inf _j'B ) or as new j'-th further _cached information (Inf _j'B ), on the logical further result _{storage position} , in the none of the remaining (m-1) cached further information has been shifted, at least the result of the further evaluation of the second evaluation means (VAL) used and - wherein the further evaluation means (VAL _B ) depending on other cached Information of m further cached information (Inf _1B to Inf _mB ) of the further shift register (SR _B ) a control signal (RES), which can change the state of the processor (PC) generate.
• 30. Device according to one or more of the preceding features - with an additional second evaluation means (VAL) as part of the watchdog (WDG), for evaluating the cached information (Inf ₁ to Inf _n ) of the result memory (ES), - with at least one other Result memory (ES _B ) as part of the watchdog (WDG) and - with m further cached information (Inf _1B , ... Inf _mB ), which are stored in m further result memory cells that make up the further result memory (ES _B ), where m is a whole positive number, and • wherein the m further cached information (Inf _1B , ... Inf _mB ) can be numbered from 1 to m and • wherein each of the m further cached information (Inf _1B , ... Inf _mB ) has a unique logical further result storage position of m logical further result storage positions that can be numbered from 1 to m, and wherein each of the m w eiteren cached information (Inf _1B , ... Inf _mB ) has at least a first piece of information and may optionally have more information shares and - with further evaluation means (VAL _B ) as part of the watchdog (WDG), to evaluate the further cached information (Inf _1B to Inf _mB ) of the further result _memory (ES _B ) and - wherein the further result memory (ES _B ) after an end of a reception period (b) or after each end of a reception period (b) • the one jth further _cached information (Inf _jB ) on the j-th logical further result _{storage position} in a result _{storage cell} further result memory (ES _B) from the further result memory (ES _B) deletes, where 1 ≤ j ≤ m, and • each of the (m - 1) between stored information (Inf _kB), where 1 ≤ k ≤ m, and k ≠ j is, from the respective k-th logical further result storage position (p _k , with 1 ≦ k ≦ m and k ≠ j) to another logical further result storage position (p _{k '} , k' ≠ k and 1 ≦ k '≦ m ) and • as at least a new first portion of the j'th further cached information (Inf _j'B ) or as new j'-th further _cached information (Inf _j'B ), on the logical further result _{storage position} , in the no the faded at least the result of the further evaluation of the second evaluation means (VAL) is used and - the further evaluation means (VAL _B ) being dependent on further cached information of the further cached information (Inf _1B to Inf _mB ) of the further shift register (SR _B ) a control signal (RES), which can change the state of the processor (PC) generate.
• 31. Device according to one or more of the preceding features - with an additional second evaluation means (VAL) as part of the watchdog (WDG), for evaluating the cached information (Inf ₁ to Inf _n ) of the result memory (ES) and - with at least one other Result memory (ES _B ) as part of the watchdog (WDG) and - with m further cached information (Inf _1B , ... Inf _mB ), which are stored in m further result memory cells that make up the further result memory (ES _B ), where m is a whole positive number, and • wherein the m further cached information (Inf _1B , ... Inf _mB ) can be numbered from 1 to m and • wherein each of the m further cached information (Inf _1B , ... Inf _mB ) has a unique logical further result _{storage location} of m logical further result storage locations numbered from 1 to m, and wherein each of said m further cached information (Inf _1B , ... Inf _mB ) has at least a first _{piece of} information and may optionally have further information shares and - with further evaluation means (VAL _B ) as part of the watchdog (WDG), to assess the further cached information ( Inf _1B to Inf _mB ) of the further result _memory (ES _B ) and - wherein the further result memory (ES _B ) after the end of a predetermined or set number q consecutive reception periods (b) • the one jth further _cached information (Inf _jB ) on the jth logical further result storage position in a result memory cell of the further result memory (ES _B ) from the further result memory (ES _B ), where 1 ≤ j ≤ m, and • each of the (m-1) cached information (Inf _kB ), where 1 ≤ k ≤ m and k ≠ j, from the respective k th logical further result storage position (p _k , with 1 ≤ k ≤ m and k ≠ j) shifts to another logical further result storage position (p _{k '} , with k' ≠ k and 1 ≦ k '≦ m) and • as at least a new first portion of the j'th further cached information ( Inf _j'B ) or as new j'-th further cached information (Inf _j'B ), at the logical further result _{storage position} , in which none of the remaining (m-1) _cached further information has been moved, at least the result of further evaluation the second evaluation means (VAL) used and - wherein the further evaluation means (VAL _B ) in response to further cached information of m more cached information (Inf _1B to Inf _mB ) of the further shift register (SR _B ) a control signal (RES), the State of the processor (PC) can change, generate.
• 32. Device by feature error! Reference source not found. characterized in that the first information portions of the cached information (Inf ₁ to Inf _n ) of the result memory (ES) after the end of a number of q consecutive reception periods (b) are set to a value corresponding to "not correct".
• 33. Device by feature Error! Reference source not found. characterized in that the first information portions of the cached information (Inf ₁ to Inf _n ) of the result memory (ES) after the end of a number of q consecutive reception periods (b) are set to a value corresponding to "correct".
• 34. Device for monitoring a processor (PC), - with a watchdog (WDG) and - with a clock (CTR) as part of the watchdog (WDG) and - with a shift register (SR) as part of the watchdog (WDG) and - with n cached information (Inf ₁ , ... Inf _n ) stored in n shift register cells making up the shift register (SR), where n is a whole positive number greater than 1, and • numbering from 1 to n and wherein each of the n cached information (Inf ₁ , ... Inf _n ) has a unique logical shift register position of n shift register positions numbered 1 to n, and wherein each of the n cached information (Inf ₁ ,. .. Inf _n ) has at least a first portion of information and may optionally have further information shares and - with first stimulation means (QSTM) as part of the watchdog (WDG), for sending messages (MSG) from Watc hdog (WDG) to the processor (PC) and - with first evaluation means (AVAL) as part of the watchdog (WDG), for evaluating responses (ANS) of the processor (PC) to the watchdog (WDG) and - whereby the watchdog ( WDG) sends messages (MSG) to the processor (PC), which may concern the processor (PC) itself and further system components (SC), and - the processor (PC) responding to these messages (MSG) responses (ANS ) to the watchdog (WDG) and - whereby the watchdog (WDG) evaluates the response (ANS) of the processor (PC) as correct or incorrect by means of the first evaluation means (AVAL) and - whereby a response (ANS) is "correct" is, if its content coincides with at least one possible expected content, and if the response (ANS) is received by the watchdog (WDG) within a predetermined reception period (b), and where a response (ANS) is "incorrect", • if the content of the answer (ANS) is not min at least one of possible expected contents; or if the response (ANS) is not received by the watchdog (WDG) in the predetermined receiving period (b) and wherein the shift register (SR) is at least after one end of the predetermined receiving period (b) or after at each end of the predetermined receiving period (b), the n-th latched information (Inf _n ) at the nth logical shift register position in a shift register cell of the shift register (SR) is deleted from this shift register (SR); and each of (n-1) shift cached information from the respective jth logical shift register position (p _j , where 1 ≤ j ≤ (n-1)) to the (j + 1) th logical shift register position (p _j , where 2 ≤ j ≤ n); and as at least new first portion of the new 1-th cached information (Inf ₁ ) at least the result of the evaluation of the received response (ANS) by the processor (PC) corresponding to a logical value "correct" or "incorrect" used.
• 35. Device by feature error! Reference source not found. - With an additional second evaluation means (VAL) as part of the watchdog (WDG), for evaluating the cached information (Inf ₁ to Inf _n ) of the shift register (SR), - wherein the second evaluation means (VAL) in response to cached information of the n cached information (Inf ₁ to Inf _n ) in the memory cells of the shift register (SR) generate at least one control signal (RES), which can change the state of the processor (PC), or generate a signal from which such a control signal (RES) is derived.
• 36. Device by feature error! Reference source not found. - with other monitorable system components (SC) as part of the processor.
• 37. Device by feature error! Reference source not found. - wherein a first expected response (ANS1) by the first evaluation means (AVAL) a predetermined first receiving period (b1) as a predetermined receiving period (b) for the evaluation of the first expected response (ANS1) after receiving them by the watchdog (WDG) in response (ANS) is assigned and - wherein a second expected response (ANS2) by the first evaluation means (AVAL) a predetermined second receiving period (b2) as a predetermined receiving period (b) for the evaluation of the second expected response (ANS2) after their receipt by the watchdog (WDG) in response (ANS) is assigned and - wherein the predetermined first receiving period (b1) and the predetermined second receiving period (b2) are different and overlap and - wherein the predetermined first reception period (b1) has no effect on the evaluation of the second response (ANS2), and - wherein the predetermined second receiving period (b2) has no effect on the evaluation of the first response (ANS1).
• 38. Device by feature Error! Reference source not found. - wherein the watchdog (WDG) means the first evaluation means (AVAL), the response (ANS) of the processor (PC) as correct or incorrectly evaluated and - where one answer (ANS) is additionally "correct", If the number of responses (ANS) received by the watchdog (WDG) within the predetermined reception period (b) by the received response (ANS) does not exceed a predetermined maximum number of responses to be received (ANS) or at the end of the predetermined reception period (ANS) b) does not fall below a predetermined minimum number of responses to be received (ANS) and - where an answer (ANS) is additionally "incorrect", If the number of responses (ANS) received by the watchdog (WDG) within the predetermined reception period (b) exceeds a predetermined maximum number of responses to be received (ANS) by the received response (ANS) or at the end of the predetermined reception period (b ) falls below a predetermined minimum number of responses to be received (ANS).
• 39. Device by feature error! Reference source not found. characterized in that - the evaluation of the response (ANS) of the processor by the first evaluation means (AVAL) of the watchdog (WDG) additionally of at least one buffered information (Inf _j ) of the buffered information (Inf _j to Inf _n ) of the shift register (SR) depends.
• 40. Device by feature error! Reference source not found. characterized in that - the evaluation of the response (ANS) of the processor by the first weighting means (AVAL) of the watchdog (WDG) additionally depends on the buffered information (Inf _j to Inf _n ) of the shift register (SR).
• 41. Device by feature Error! Reference source not found. characterized in that - that a second evaluation means (VAL) in response to at least one cached information (Inf _j ) of the cached information (Inf ₁ , ... Inf _n ) of the shift register (SR) additionally generates at least one further evaluation and - that at least cached information (Inf _j ) of the buffered information (Inf _j to Inf _n ) of the shift register (SR) additionally comprises a buffered further evaluation of the second evaluation means (VAL) as a further information component in addition to the said first information component.
• 42. Device by feature Error! Reference source not found. characterized in that - the second weighting means (VAL) depend on the occurrence of predetermined patterns among at least one information portion of at least two different buffered information items (Inf _j , Inf _k , with 1 ≤ j ≤ n and 1 ≤ k ≤ n and j ≠ k ) of the cached information (Inf ₁ , ... Inf _n ) of the shift register (SR) generates at least a second further evaluation.
• 43. Device by feature Error! Reference source not found. characterized in that - the first information portions of the cached information (Inf ₁ to Inf _n ) of the shift register (SR) are set to a value corresponding to "not correct" at the end of the predetermined reception period (b).
• 44. Device by feature Error! Reference source not found. characterized in that - the first information portions of the cached information (Inf ₁ to Inf _n ) of the shift register (SR) are set to a value corresponding to "correct" at the end of the predetermined reception period (b).
• 45. The device according to one or more of the preceding features - with an additional second evaluation means (VAL) as part of the watchdog (WDG), for evaluating the cached information (Inf ₁ to Inf _n ) of the shift register (SR) and - with at least one other Shift register (SR _B ) as part of the watchdog (WDG) and - with m further cached information (Inf _1B , ... Inf _mB )), which are stored in m other shift register cells, which make up the further shift register (SR _B ) , where m is a whole positive number greater than 1, and • wherein the m further cached information (Inf _1B , ... Inf _mB ) can be numbered from 1 to m and • wherein each of the m further cached information (Inf _1B,. .. inf _mB ) has a unique logical further shift register position of m logical further shift register positions numbered 1 to m, and • where each of the m we These information (Inf _1B , ... Inf _mB ) cached at least a first information share and may optionally have more information shares and - with further evaluation means (VAL _B ) as part of the watchdog (WDG), to evaluate the further cached information (Inf _1B to Inf _mB ) of the further shift register (SR _B ) and - wherein the further shift register (SR _B ) on each receipt of a response of the processor (PC) • the m-th further _cached information (Inf _nB ) on the good logical further shift register position in a shift register cell of the further shift register (SR _B ) from this further shift register (SR _B ) clears and • each of the (m-1) _cached information (Inf _jB ) from the respective j-th logical further shift register position (p _j , with 1 ≤ j ≤ (m-1)) shifts to the (j + 1) -th logical next shift register position (p _j , where 2 ≤ j ≤ m) and • as at least as a new first portion of the new 1-th further cached information (Inf _1B ) or as a new 1-th further cached information (Inf _1B ) at least the Result of the further evaluation of the second evaluation means (VAL) used and - wherein the further evaluation means (VAL _B ) in response to further cached information m further cached information (Inf _1B to Inf _mB ) of the further shift register (SR _B ) a control signal (RES ), which can change the state of the processor (PC).
• 46. Device according to one or more of the preceding features - with an additional second evaluation means (VAL) as part of the watchdog (WDG), for evaluating the cached information (Inf ₁ to Inf _n ) of the shift register (SR), - with at least one other Shift register (SR _B ) as part of the watchdog (WDG) and - with m further cached information (Inf _1B , ... Inf _mB ), which are stored in m other shift register cells that make up the further shift register (SR _B ), where m is a whole positive number, and • wherein the m further cached information (Inf _1B , ... Inf _mB ) can be numbered from 1 to m and • wherein each of the m further cached information (Inf _1B , ... Inf _mB ) has a unique logical further shift register position of m logical further shift register positions numbered 1 to m, and each of the m further between stored information (Inf _1B , ... Inf _mB ) has at least a first portion of information and may optionally have more information shares and - with further evaluation means (VAL _B ) as part of the watchdog (WDG), for the evaluation of further cached information (Inf _1B , ... Inf _mB ) of the further shift register (SR _B ) and - wherein the further shift register (SR _B ) after one end of a reception period (b) or after each end of a reception period (b) • the mth further cached information ( Inf _mB ) on the other logical shift register position in a shift register cell of the further shift register (SR _B ) from this further shift register (SR _B ) deletes and • each of the (m-1) _cached information (Inf _jB ) of the respective j-th logical another shift register position (p _j , with 1 ≦ j ≦ (m-1)) to the (j + 1) -th logical further shift register position (p _j , with 2 ≦ j ≦ m) shifts and at least uses the result of the further evaluation of the second evaluation means (VAL) as at least the new first portion of the new 1-th further buffered information (Inf _1B ) or as new 1-th further buffered information (Inf _1B ), and the further evaluation means (VAL _B ) as a function of further cached information of the m further cached information (Inf _1B , ... Inf _mB ) of the further shift register (SR _B ) a control signal (RES), which change the state of the processor (PC) can, generate.
• 47. Device according to one or more of the preceding features - with an additional second evaluation means (VAL) as part of the watchdog (WDG), for evaluating the n cached information (Inf ₁ to Inf _n ) of the shift register (SR) and - with at least one Further shift register (SR _B ) as part of the watchdog (WDG) and - with m further cached information (Inf _1B , ... Inf _mB ), which are stored in m other shift register cells, which make up the further shift register (SR _B ) , where m is a whole positive number, and • wherein the m further cached information (Inf _1B , ... Inf _mB ) can be numbered from 1 to m and • wherein each of the m further cached information (Inf _1B , ... Inf _mB ) has a unique logical further shift register position of m logical further shift register positions that can be numbered from 1 to n, and • where each of the m we These information (Inf _1B , ... Inf _mB ) cached at least a first information share and may optionally have more information shares and - with further evaluation means (VAL _B ) as part of the watchdog (WDG), to evaluate the further cached information (Inf _1B to Inf _mB ) of the further shift register (SR _B ) and - wherein the further shift register (SR _B ) after the end of a predetermined or set number q consecutive reception periods (b) • the mth further _cached information (Inf _mB ) on the logical next logical shift register position in a shift register cell of the further shift register (SR _B ) from this further shift register (SR _B ) and • each of the (m - 1) _cached information (Inf _jB ) from the respective j-th logical further shift register position (p _j , where 1 ≤ j ≤ (m-1)), to the (j + 1) -th logical next shift register position (p _j , with 2 ≤ j ≤ m) and • as at least as a new first portion of the new 1-th further cached information (Inf _1B ) or as new 1-th further cached information (Inf _1B ) at least the result of the other Evaluation of the second evaluation means (VAL) used and - wherein the further evaluation means (VAL _B ) in response to further cached information of m more cached information (Inf _1B to Inf _mB ) of the further shift register (SR _B ) a control signal (RES), the can change the state of the processor (PC) generate.
• 48. Device by feature error! Reference source not found. characterized in that the first information portions of the cached information (Inf ₁ to Inf _n ) of the shift register (SR) are set to a value corresponding to "not correct" after the end of a number of q consecutive reception periods (b).
• 49. Device by feature Error! Reference source not found. characterized in that the first information portions of the cached information (Inf ₁ to Inf _n ) of the shift register (SR) are set to a value corresponding to "correct" after the end of a number of q consecutive reception periods (b).

Patent Features IV (Results Memory & Scrambling Device on Each Reception)

• 50. Device for monitoring a processor (PC), - with a watchdog (WDG) and - with a clock (CTR) as part of the watchdog (WDG) and - with a result memory (ES) as part of the watchdog (WDG) and - with n cached information (Inf ₁ , ... Inf _n ) that make up the Egress Facility (ES), where n is a whole positive number greater than 1, and • that can be numbered from 1 to n, and • where each of the n cached information (Inf ₁ , ... Inf _n ) has a unique result storage position of n result storage positions that can be numbered from 1 to n, and • wherein each of the n cached information (Inf ₁ , ... Inf _n ) at least one has first information portion and may optionally have further information shares and - with first stimulation means (QSTM) as part of the watchdog (WDG), for the transmission of messages (MSG) from the watchdog (WDG) to the processor (PC) and - mi t first evaluation means (AVAL) as part of the watchdog (WDG), for evaluating responses (ANS) of the processor (PC) to the watchdog (WDG) and - wherein the watchdog (WDG) to the processor (PC) sends messages (MSG, • which can affect the processor (PC) itself and other system components (SC), and - wherein the processor (PC) in response to these messages (MSG ) Sends responses (ANS) to the watchdog (WDG) and - whereby the watchdog (WDG) evaluates the response (ANS) of the processor (PC) as correct or incorrect by means of the first evaluation means (AVAL) and - wherein a response (ANS ) Is "correct", if its content is correct, and if the response (ANS) is received by the watchdog (WDG) within a predetermined reception period (b), and if a response (ANS) is "incorrect", if the content of the response (ANS) is incorrect or • if the response (ANS) is not received by the watchdog (WDG) in the predetermined receiving period (b), and - the result store (ES) after an end of the predetermined receiving period ( b) or after each end e of the predetermined receiving period (b) • a cached information (eg. B. Inf _n) deletes from the result memory (ES), and • the remaining (n - 1) between stored information from the original result storage position on a different result storage position respectively shifts and • as at least the new first portion of the new cached information (e.g., Inf. ₁ ) on the result storage position to which none of the remaining (n-1) cached information has been moved, at least the result of the evaluation of the received response (ANS) by the processor (PC) corresponding to a logical value "correct" or "incorrect" used.
• 51. Device by feature error! Reference source not found. - with an additional second evaluation means (VAL) as part of the watchdog (WDG), for the evaluation of the buffered information (Inf ₁ to Inf _n ) of the shift register (SR), - wherein the second evaluation means (VAL) depending on the contents of the shift register ( SR) generates at least one control signal (RES) which can change the state of the processor (PC) or generate a signal from which such a control signal (RES) is derived.
• 52. Device by feature Error! Reference source not found. - Wherein the processor (PC), which is connectable to the watchdog (WDG) for monitoring.
• 53. Device by feature Error! Reference source not found. - with other monitorable system components (SC) as part of the processor.
• 54. Device by feature Error! Reference source not found. - wherein a first expected response (ANS1) by the first judging means (AVAL) a predetermined first receiving period (b1) as a predetermined receiving period (b) for the evaluation of the first expected response (ANS1) after its receipt by the watchdog (WDG) in response (ANS) is assigned and - wherein a second expected response (ANS2) by the first evaluation means (AVAL) a predetermined first receiving period (b2) as a predetermined receiving period (b) for the evaluation of the second expected response (ANS2) after its receipt by the watchdog (WDG) in response (ANS) is assigned and - wherein the predetermined first receiving period (b1) and the predetermined second receiving period (b2) are different and overlap and - wherein the predetermined first reception period (b1) has no effect on the evaluation of the second response (ANS2), and - wherein the predetermined second receiving period (b2) has no effect on the evaluation of the first response (ANS1).
• 55. Device by feature Error! Reference source not found. - wherein the watchdog (WDG) means the first evaluation means (AVAL), the response (ANS) of the processor (PC) as correct or incorrectly evaluated and - where one answer (ANS) is additionally "correct", If the number of responses (ANS) received by the watchdog (WDG) within the predetermined reception period (b) by the received response (ANS) does not exceed a maximum number of responses to be received (ANS) or at the end of the predetermined reception period (b ) does not fall below a predetermined minimum number of responses to be received (ANS) and - where an answer (ANS) is additionally "incorrect", • if the number of responses (ANS) received by the watchdog (WDG) within the predetermined reception period (b) exceeds a predetermined maximum number of responses to be received (ANS) by the received response (ANS) or at the end of the predetermined reception period (ANS) b) falls below a predetermined minimum number of responses to be received (ANS).
• 56. Device by feature Error! Reference source not found. characterized in that - the evaluation of the response (ANS) of the processor by the first evaluation means (AVAL) of the watchdog (WDG) additionally depends on at least one buffered information (Inf _j ) of the buffered information (Inf _j to Inf _n ) of the shift register (SR).
• 57. Device by feature Error! Reference source not found. characterized in that - the evaluation of the response (ANS) of the processor by the first weighting means (AVAL) of the watchdog (WDG) additionally depends on the buffered information (Inf _j to Inf _n ) of the shift register (SR).
• 58. Device by feature Error! Reference source not found. characterized in that - that a second evaluation means (VAL) in response to at least one cached information (Inf _j ) of the cached information (Inf ₁ , ... Inf _n ) of the shift register (SR) additionally generates at least one further evaluation and - that at least a cached information (Inf _j ) of the cached information (Inf _j to Inf _n ) of the shift register (SR) additionally comprises a buffered further evaluation of the second evaluation means (VAL).
• 59. Device by feature Error! Reference source not found. characterized in that - the second weighting means (VAL) depend on the occurrence of predetermined patterns among at least a portion of at least two different buffered information (Inf _j , Inf _k , with 1 ≤ j ≤ n and 1 ≤ k ≤ n and j ≠ k ) of the cached information (Inf _j , ... Inf _n ) of the shift register (SR) additionally generates at least a second further evaluation.
• 60. Device by feature error! Reference source not found. characterized in that - the first information portions of the cached information (Inf ₁ to Inf _n ) of the shift register (SR) are set to a value corresponding to "not correct" at the end of the predetermined reception period (b).
• 61. Device by feature Error! Reference source not found. characterized in that - the first information portions of the cached information (Inf ₁ to Inf _n ) of the shift register (SR) are set to a value corresponding to "correct" at the end of the predetermined reception period (b).
• 62. Device according to one or more of the preceding features - with an additional second evaluation means (VAL) as part of the watchdog (WDG), for evaluating the cached information (Inf ₁ to Inf _n ) of the shift register (SR) and - with at least one other Shift register (SR _B ) as part of the watchdog (WDG) and - with m further cached information (Inf _1B , ... Inf _mB ), which is the further shift register (SR _B ), where m is a whole positive number greater than 1 is and Wherein the m further cached information (Inf _1B , ... Inf _mB ) can be numbered from 1 to m, and wherein each of the m further cached information (Inf _1B , ... Inf _mB ) has a unique shift register position of m shift register positions , which are numbered from 1 to n, and • wherein each of the m further cached information (Inf _1B , ... Inf _mB ) has at least a first information portion and may optionally have further information shares and - with further evaluation means (VAL _B ) as Part of the watchdog (WDG), for evaluating the further cached information (Inf _1B to Inf _mB ) of the further shift register (SR _B ) and - wherein the further shift register (SR _B ) each time a response of the processor (PC) • the m -th further _cached information (Inf _nB ) from the further shift register (SR _B ) deletes and • each of the (m-1) _cached In formations (Inf _jB) of the respective j-th shift register position (p _j, 1 ≤ j ≤ (m - 1)) th to the (j + 1) shift register position (p _j, 2 ≤ j ≤ m) shifts and At least the result of the further evaluation of the second evaluation means (VAL) is used as at least the new first portion of the new 1-th additional cached information (Inf _1B ) or as new 1-th further cached information (Inf _1B ); Valuation means (VAL _B ) as a function of further _cached information (Inf _jB ) m further _cached information (Inf _1B to Inf _mB ) of the further shift register (SR _B ) a control signal (RES), which can change the state of the processor (PC) , produce.
• 63. Device according to one or more of the preceding features - with an additional second evaluation means (VAL) as part of the watchdog (WDG), for evaluating the cached information (Inf ₁ to Inf _n ) of the shift register (SR), - with at least one other Shift registers (SR _B ) as part of the watchdog (WDG) and - with m further cached information (Inf _1B , ... Inf _mB ) that make up the further shift register (SR _B ), where m is an integer positive number, and • wherein the m further cached information (Inf _1B , ... Inf _mB ) can be numbered from 1 to m, and • wherein each of the m further cached information (Inf _1B , ... Inf _mB ) has a unique shift register position of m shift register positions has, which are numbered from 1 to n, and • wherein each of the m further cached information (Inf _1B , ... Inf _mB ) at least a first information _share a ufweist and, if appropriate, can have further information shares and - with further evaluation means (VAL _B ) as part of the watchdog (WDG), for evaluating the further buffered information (Inf _1B to Inf _mB ) of the further shift register (SR _B ) and - Shift register (SR _B ) after one end of a reception period (b) or after each end of a reception period (b) • _{deletes the mth} further _cached information (Inf _nB ) from the further shift register (SR _B ) and • each of the (m - 1) _latched information (Inf _jB ) from the respective j-th shift register position (p _j , _where 1 _≦ j _≦ (m-1)) to the (j + 1) th shift register position (p _j , where 2 ≦ j ≦ m ) and at least the result of the further evaluation of the second evaluation as at least the new first portion of the new 1-th further buffered information (Inf _1B ) or as new 1-th further buffered information (Inf _1B ) used ungsmittel (VAL), and - wherein the further evaluation means (VAL _B) in dependence on further cached information (Inf _1B) of m other cached information (Inf _1B to Inf _mB) of the further shift register (SR _B) a control signal (RES), which can change the state of the processor (PC) generate.
• 64. Device according to one or more of the preceding features - with an additional second evaluation means (VAL) as part of the watchdog (WDG), for evaluating the cached information (Inf ₁ to Inf _n ) of the shift register (SR) and - with at least one other Shift registers (SR _B ) as part of the watchdog (WDG) and - with m further cached information (Inf _1B , ... Inf _mB ) that make up the further shift register (SR _B ), where m is an integer positive number, and • wherein the m further cached information (Inf _1B , ... Inf _mB ) can be numbered from 1 to m, and • wherein each of the m further cached information (Inf _1B , ... Inf _mB ) has a unique shift register position of m shift register positions has, which are numbered from 1 to n, and • wherein each of the m further cached information (Inf _1B , ... Inf _mB ) at least a first Informationsantei l and optionally further information shares may have and - with further evaluation means (VAL _B ) as part of the watchdog (WDG), for the evaluation of further cached information (Inf _1B to Inf _mB ) of the further shift register (SR _B ) and - further shift registers (SR _B ) after the end of a predetermined or set number q of consecutive reception periods (b) • _{deletes the mth} further _buffered information (Inf _nB ) from the further shift register (SR _B ) and • each of the (m-1 ) _cached information (Inf _jB ) from the respective j-th shift register position (p _j , where 1 ≦ j ≦ (m-1)) to the (j + 1) -th shift register position (p _j , where 2 ≦ j ≦ m) shifts and • as at least a new first portion of the new 1-th further cached information (Inf _1B ) or as a new 1-th further cached information (Inf _1B ) at least the result of further evaluation d it uses the second evaluation means (VAL) and - wherein the further evaluation means (VAL _B ) in response to further _cached information (Inf _jB ) m further _cached information (Inf _1B to Inf _mB ) of the further shift register (SR _B ) a control signal (RES ), which can change the state of the processor (PC).
• 65. Device by feature error! Reference source not found. characterized in that the first information portions of the cached information (Inf ₁ to Inf _n ) of the shift register (SR) are set to a value corresponding to "not correct" after the end of a number of q consecutive reception periods (b).
• 66. Device by feature Error! Reference source not found. characterized in that the first information portions of the cached information (Inf ₁ to Inf _n ) of the shift register (SR) are set to a value corresponding to "correct" after the end of a number of q consecutive reception periods (b).

Patent Features V (Procedure)

• 67. Method for monitoring a processor (PC), - specifying a scheduled reception period for a response (ANS) of the processor (PC) to a watchdog (WDG) by a clock (CTR); - Sending one or more messages (MSG) with content that can affect the processor (PC) itself and / or other system components (SC), by the watchdog (WDG) to the processor (PC); - Answering the message (MSG) in response to at least the content of one of these messages by the processor (PC) in the form of a response (ASW) to the Watchdocg (WDG); - Evaluation of at least one response (ANS) of the processor (PC) to the watchdog (WDG) by the watchdog (WDG) as "correct" or "not correct" to generate an evaluation result, - wherein a response (ANS) is "correct" • if its content is correct and • if the response (ANS) is received by the watchdog (WDG) within a predetermined reception period (b) and - where a response (ANS) is "incorrect", • if the content of the response (ANS) is not correct or • if the response (ANS) is not received by the watchdog (WDG) in the predetermined reception period (b); - Change the content of a result store (ES) with n cached information (Inf ₁ , ... Inf _n ) with a first portion of information and possibly other information shares with n as a whole number greater than 1 and • each a unique result storage position • temporally after the Reception of a response (ASW) by the watchdog (WDG) or • temporally after the end of the intended reception period (b) by • deletion of at least one cached information item (Inf _k ) of the n information (Inf ₁ ,... Inf _n ) and Changing at least one result storage position of at least one cached information (Inf _j ) of n information (Inf ₁ , ... Inf _n ) in a result store (ES) and • using the result of the evaluation of the at least one received response (ANS) as a new first piece of information a new cached information (inf _l ) in the result store.
• 68. Procedure by characteristic Error! Reference source not found. With an additional second evaluation means (VAL) as part of the watchdog (WDG), for the evaluation of the cached information (Inf ₁ to Inf _n ) of the shift register (SR), comprising the additional step - evaluation of the cached information (Inf ₁ to Inf _n ) of the result memory (ES) by second evaluation means (VAL) - generating at least one control signal (RES) which can change the state of the processor (PC) or generating a signal from which such a control signal (RES) is derived.
• 69. Procedure according to characteristic error! Reference source not found. comprising the additional step - Determining a first predetermined receiving period (b1) in response to a first expected response (ANS1) for use as a predetermined receiving period (b) in the evaluation of this first response (ANS1) of the processor (PC) in its reception as an answer (ANS) through the watchdog (WDG); - determining a second predetermined receiving period (b2) in response to a second expected response (ANS2) for use as a predetermined receiving period (b) in the evaluation of this second response (ANS2) of the processor (PC) in its reception as an answer (ANS) through the watchdog (WDG); Wherein the first predetermined reception period (b1) and the second predetermined reception period (b2) overlap and the first predetermined reception period (b1) for the second response (ANS2) has no effect on the evaluation, and and the second predetermined reception period (b2) for the first answer (ANS1) has no effect on the rating.
• 70. Procedure by characteristic error! Reference source not found. comprising the modified step - the evaluation of the response (ANS) of the processor (PC) as "correct" or "not correct", - in which case an answer (ANS) is additionally "correct", WDG) within the predetermined reception period (b) by the received response (ANS) not one exceeds the predetermined maximum number of responses to be received (ANS) or at the end of the predetermined reception period (b) does not fall below a predetermined minimum number of responses to be received (ANS). In which case a response (ANS) is additionally "not correct", if the number of responses (ANS) received by the watchdog (WDG) within the predetermined reception period (b) by the received response (ANS) is a predetermined maximum number of times exceeds the received response (ANS) or falls short of a predetermined minimum number of responses to be received (ANS) at the end of the predetermined reception period (b).
• 71. Procedure by characteristic Error! Reference source not found. comprising the modified step - evaluating the response (ANS) of the processor (PC) in additional dependence on at least one cached information (Inf _j ) of the cached information (Inf _j to Inf _n ) of the result memory (ES).
• 72. Procedure by characteristic Error! Reference source not found. comprising the modified step - evaluation of the response (ANS) of the processor (PC) in additional dependence on the buffered information (Inf _j to Inf _n ) of the result memory (ES).
• 73. Procedure by characteristic Error! Reference source not found. comprising the additional step - additionally generating at least one further evaluation by second evaluation means (VAL) as a function of at least one cached information (Inf _j ) of the cached information (Inf ₁ , ... Inf _n ) of the result memory (ES); - Store this further evaluation as another piece of information cached information (Inf _j ) of the cached information (Inf _j to Inf _n ) of the result memory (ES).
• 74. Procedure by characteristic Error! Reference source not found. comprising the additional step of generating a second further evaluation as a function of the occurrence of predetermined patterns among at least one respective portion of at least two different buffered information items (Inf _j , Inf _k , with 1 ≦ j ≦ n and 1 ≦ k ≦ n and j ≠ k) the cached information (Inf ₁ , ... Inf _n ) of the result store (ES).
• 75. Procedure according to feature Error! Reference source not found. comprising the additional step of - setting the first information portions of the cached information (Inf ₁ to Inf _n ) of the result memory (ES) at the end of the predetermined reception period (b) all to a value corresponding to "not correct" or all to a value corresponding to "correct" ,
• 76. The method according to one or more of the preceding steps, comprising the additional steps - evaluating the cached information (Inf ₁ to Inf _n ) of the result memory (ES) to generate a further evaluation result; - Change the content of a second result memory (ES _B ) with m other cached information (Inf _1B , ... Inf _mB ) with a first information _share and possibly other information shares with m as a whole number greater than 1 and • each have a unique further result storage position • temporally after receipt of a response (ASW) by the watchdog (WDG) or • temporally after the end of the intended reception period (b) by • deletion of at least one further cached information item (Inf _k ) of the m information (Inf _1B , ... Inf _mB ) and • changing at least one result storage position of at least one further _cached information (Inf _jB ) of m further _cached information (Inf _1B , ... Inf _mB ) in the further result _memory (ES _B ) and • using the further evaluation result as a new first Information portion of a new further cached information (inf _l ) in the further result memory (ES _B ). - Evaluation of at least two of the m further cached information (Inf _1B , ... Inf _mB ) and - generating a control signal (RES), which can change the state of the processor (PC), depending on the result of this evaluation.
• 77. Device for monitoring a processor (PC), - with a watchdog (WDG) and - with a clock (CTR) as part of the watchdog (WDG) and - with a result memory (ES) as part of the watchdog (WDG) and - with n cached information (Inf ₁ , ... Inf _n ) stored in n result memory cells that make up the result memory (ES), where n is a whole positive number greater than 1, and • numbering from 1 to n can be and • each of said n cached information (Inf _1, ... Inf _n) has a unique logical result storage position of n logical result storage positions, which can be numbered from 1 to n, and • each of said n cached information (Inf ₁ , ... Inf _n ) has at least a first portion of information and may optionally have further information shares and - with first stimulation means (QSTM) as part of the watchdog (WDG), for the transmission of B Messages (MSG) from the Watchdog (WDG) to the processor (PC) and - with first evaluation means (AVAL) as part of the Watchdog (WDG), for the evaluation of Responses (ANS) of the processor (PC) to the watchdog (WDG) and - wherein the watchdog (WDG) to the processor (PC) sends messages (MSG), • which affect the processor (PC) itself and other system components (SC) and - whereby the processor (PC) sends responses (ANS) to the watchdog (WDG) as a function of these messages, and - the watchdog (WDG) uses the first evaluation means (AVAL) to send the response (ANS) of the Processor (PC) evaluated as correct or incorrect and - where a response (ANS) is "correct", • if its content matches at least one possible expected content and • if the response (ANS) within a predetermined receiving period (b) by the watchdog (WDG) is received, and - wherein a response (ANS) is "not correct", if the content of the response (ANS) does not match at least one possible expected content, or if the answer (ANS) is not in the predetermined one reception period (b) is received by the watchdog (WDG) and - the result memory (ES) after an end of the predetermined receiving period (b) or after each end of the predetermined receiving period (b) • a cached information (eg. B. _j ) at the j-th logical result storage position in a result storage cell of the result store (ES) from that result store (ES), where 1 ≦ j ≦ n, and • the remaining (n-1) cached information (Inf _k ), where 1 ≦ k ≦ n and k ≠ j, from the original logical result storage position (p _k , with 1 ≦ k ≦ m and k ≠ j) to another logical result storage position (p _{k '} , k' ≠ k and 1 ≤ k '≤ n) and, respectively, as the at least new first portion of the j'th buffered information (eg, Infj _' ) at the logical result storage position into which none of the remaining (n-1) cached information is moved was used, at least the result of the evaluation of the received response (ANS) by the processor (PC) corresponding to a logical value "correct" or "incorrect".
• 78. Device by feature Error! Reference source not found. - With an additional second evaluation means (VAL) as part of the watchdog (WDG), for evaluating the cached information (Inf ₁ to Inf _n ) of the shift register (SR), - wherein the second evaluation means (VAL) in response to cached information of the n cached information (Inf ₁ to Inf _n ) in the result memory cells of the result memory (ES) generates at least one control signal (RES), which can change the state of the processor (PC), or generate a signal from which such a control signal (RES) is derived.
• 79. Device by feature Error! Reference source not found. - with other monitorable system components (SC) as part of the processor.
• 80. Device by feature error! Reference source not found. - wherein a first expected response (ANS1) by the first evaluation means (AVAL) a predetermined first receiving period (b1) as a predetermined receiving period (b) for the evaluation of the first expected response (ANS1) after receiving them by the watchdog (WDG) in response (ANS) is assigned and - wherein a second expected response (ANS2) by the first evaluation means (AVAL) a predetermined second receiving period (b2) as a predetermined receiving period (b) for the evaluation of the second expected response (ANS2) after their receipt by the watchdog (WDG) in response (ANS) is assigned and - wherein the predetermined first receiving period (b1) and the predetermined second receiving period (b2) are different and overlap and - wherein the predetermined first reception period (b1) has no effect on the evaluation of the second response (ANS2), and - wherein the predetermined second receiving period (b2) has no effect on the evaluation of the first response (ANS1).
• 81. Device by feature Error! Reference source not found. - wherein the watchdog (WDG) by means of the first evaluation means (AVAL) the response (ANS) of the processor (PC) as correct or incorrectly evaluated and - wherein a response (ANS) is additionally "correct", if the number of within the predetermined reception period (b) by the received response (ANS) does not exceed a maximum number of responses to be received (ANS) or at the end of the predetermined reception period (b) the watchdog (WDG) received responses (ANS) predetermined minimum number of responses to be received (ANS) and - wherein a response (ANS) is additionally "not correct", if the number of responses (ANS) received by the watchdog (WDG) within the predetermined reception period (b) by the received response (ANS) exceeds a predetermined maximum number of responses to be received (ANS) or at the end of the predetermined reception period (b) falls below a predetermined minimum number of responses to be received (ANS).
• 82. Device by feature Error! Reference source not found. characterized in that - the evaluation of the response (ANS) of the processor by the first evaluation means (AVAL) of the watchdog (WDG) additionally of at least one cached information (Inf _j ) of the cached information (Inf _j to Inf _n ) of the result store (ES) depends.
• 83. Device by feature error! Reference source not found. characterized in that - the evaluation of the response (ANS) of the processor by the first evaluation means (AVAL) of the watchdog (WDG) additionally depends on the buffered information (Inf _j to Inf _n ) of the result memory (ES).
• 84. Device by feature error! Reference source not found. characterized in that - that a second evaluation means (VAL) in response to at least one cached information (Inf _j ) of the cached information (Inf ₁ , ... Inf _n ) of the result memory (ES) additionally generates at least one further evaluation and - that at least cached information (Inf _j ) of the buffered information (Inf _j to Inf _n ) of the result memory (ES) additionally comprises a buffered further evaluation of the second evaluation means (VAL) as a further information component in addition to the said first information component.
• 85. Device by feature Error! Reference source not found. characterized in that - the second weighting means (VAL) depend on the occurrence of predetermined patterns among at least one information portion of at least two different buffered information (Inf _j , Inf _k , with 1 ≤ j ≤ n and 1 ≤ k ≤ n and j ≠ k ) of the cached information (Inf ₁ , ... Inf _n ) of the result memory (ES) additionally generates at least a second further evaluation.
• 86. Device by feature Error! Reference source not found. characterized in that - the first information portions of the cached information (Inf ₁ , ... Inf _n ) of the result memory (ES) at the end of the predetermined reception period (b) are set to a value corresponding to "not correct".
• 87. Device by feature Error! Reference source not found. characterized in that - that the first information portions of the cached information (Inf ₁ to Inf _n ) of the result memory (ES) at the end of the predetermined receiving period (b) are set to a value corresponding to "correct".
• 88. Device according to one or more of the preceding features - with an additional second evaluation means (VAL) as part of the watchdog (WDG), for the evaluation of the n cached information (Inf ₁ to Inf _n ) of the result memory (ES) and - with at least one further result memory (ES _B ) as part of the watchdog (WDG) and - with m further cached information (Inf _1B , ... Inf _mB ), which are stored in m more result memory cells, which make up the further result memory (ES _B ) , where m is a whole positive number greater than 1, and • wherein the m further cached information (Inf _1B , ... Inf _mB ) can be numbered from 1 to m and • wherein each of the m further cached information (Inf _1B,. .. inf _mB ) has a unique logical further result storage position of m logical further result storage positions numbered 1 to m, and • where each the m further cached information (Inf _1B , ... Inf _mB ) has at least a first portion of information and may optionally have further information shares and - with further evaluation means (VAL _B ) as part of the watchdog (WDG), to assess the further cached information (Inf _1B to Inf _mB ) of the further result _memory (ES _B ) and - wherein the further result _memory (ES _B ) at each reception of a response of the processor (PC) • the one jth further _cached information (Inf _jB ) on the j -th logical further result storage position in a result memory cell of the further result memory (ES _B ) from the further result memory (ES _B ) deletes, where 1 ≤ j ≤ m, and • each of the (m-1) cached information (Inf _kB ), where 1 ≤ k ≤ m and k ≠ j is far from the respective k-th logical further result storage position (p _k , with 1 ≤ k ≤ m and k ≠ j) to another logical one results storage position (p _{k '} , with k' ≠ k and 1 ≦ k '≦ m) and • as at least a new first portion of the j'th further _cached information (Inf _j'B ) or as new j'-te further _cached information (Inf _j'B ), at the logical further result _{storage position} into which none of the remaining (m-1) _cached further information has been moved, at least the result of the further evaluation of the second evaluation means (VAL) used and - Valuation means (VAL _B ) as a function of further cached information of the m further cached information (Inf _1B to Inf _mB ) of Further shift register (SR _B ) a control signal (RES), which can change the state of the processor (PC) generate.
• 89. Device according to one or more of the preceding features - with an additional second evaluation means (VAL) as part of the watchdog (WDG), for evaluating the cached information (Inf ₁ to Inf _n ) of the result memory (ES), - with at least one other Result memory (ES _B ) as part of the watchdog (WDG) and - with m further cached information (Inf _1B , ... Inf _mB ), which are stored in m further result memory cells that make up the further result memory (ES _B ), where m is a whole positive number, and • wherein the m further cached information (Inf _1B , ... Inf _mB ) can be numbered from 1 to m and • wherein each of the m further cached information (Inf _1B , ... Inf _mB ) has a unique logical further result storage position of m logical further result storage positions that can be numbered from 1 to m, and wherein each of the m w eiteren cached information (Inf _1B , ... Inf _mB ) has at least a first piece of information and may optionally have more information shares and - with further evaluation means (VAL _B ) as part of the watchdog (WDG), to evaluate the further cached information (Inf _1B , ... Inf _mB ) of the further result _memory (ES _B ) and - wherein the further result memory (ES _B ) after one end of a reception period (b) or after each end of a reception period (b) • the one jth more cached _Deleting information (Inf _jB ) on the jth logical further result _{storage position} in a result _{storage cell of} the further result _memory (ES _B ) from the further result _memory (ES _B ), where 1≤j≤m, and • each of (m-1) cached information (Inf _kB ), where 1 ≦ k ≦ m and k ≠ j, from the respective k-th logical further result storage position (p _k , with 1 ≦ k ≦ m and k ≠ j) shifts to another logical further result storage position (p _{k '} , with k' ≠ k and 1 ≦ k '≦ m) and • as at least a new first portion of the j'th further _cached information (Inf _j'B ) or as new j'-th further cached information (Inf _j'B ), at the logical further result _{storage position} into which none of the remaining (m-1) _cached further information has been moved, at least the result of the further evaluation of the second evaluation means (VAL ) and used - Wherein the further evaluation means (VAL _B ) in response to further cached information m further cached information (Inf _1B , ... Inf _mB ) of the further shift register (SR _B ) a control signal (RES), the state of the processor (PC ) can change.
• 90. Device according to one or more of the preceding features - with an additional second evaluation means (VAL) as part of the watchdog (WDG), for evaluating the cached information (Inf ₁ to Inf _n ) of the result memory (ES) and - with at least one other Result memory (ES _B ) as part of the watchdog (WDG) and - with m further cached information (Inf _1B , ... Inf _mB ), which are stored in m further result memory cells that make up the further result memory (ES _B ), where m is a whole positive number, and • wherein the m further cached information (Inf _1B , ... Inf _mB ) can be numbered from 1 to m and • wherein each of the m further cached information (Inf _1B , ... Inf _mB ) has a unique logical further result storage position of m logical further result storage positions numbered 1 to m, and wherein each of the m others cached information (Inf _1B , ... Inf _mB ) has at least a first portion of information and may optionally have further information shares and - with further evaluation means (VAL _B ) as part of the watchdog (WDG), to evaluate the further cached information (Inf _1B , ... Inf _mB ) of the further result _memory (ES _B ) and - wherein the further result memory (ES _B ) after the end of a predetermined or set number q consecutive reception periods (b) • the one jth further cached information (Inf _jB ) at the jth logical further result _{storage position} in a result _{memory cell of the} further result _memory (ES _B ) from the further result _memory (ES _B ), where 1 ≤ j ≤ m, and • each of the (m-1) cached information ( Inf _kB ), where 1 ≦ k ≦ m and k ≠ j, from the respective k-th logical further result storage position (p _k , with 1 ≦ k ≦ m and k ≠ j) shifts to another logical further result storage position (p _{k '} , with k' ≠ k and 1 ≦ k '≦ m) and • as at least a new first portion of the j'th further cached information (Inf _{j' B} ) or as new j'-th further cached information (Inf _j'B ), on the logical further result _{storage position} , in which none of the remaining (m-1) _cached further information has been moved, at least the result of the further evaluation of the second evaluation means (VAL) and - wherein the further evaluation means (VAL _B ) in response to further cached information of m further cached information (Inf _1B , ... Inf _mB ) of the further shift register (SR _B ) a control signal (RES), the State of the processor (PC) can change, generate.
• 91. Device by feature Error! Reference source not found. characterized in that the first information portions of the cached information (Inf ₁ to Inf _n ) of the result memory (ES) after the end of a number of q consecutive reception periods (b) are set to a value corresponding to "not correct".
• 92. Device by feature Error! Reference source not found. characterized in that the first information portions of the cached information (Inf ₁ to Inf _n ) of the result memory (ES) after the end of a number of q consecutive reception periods (b) are set to a value corresponding to "correct".
• 93. Method for monitoring a processor (PC), - specifying an intended reception period (b) for a response (ANS) of the processor (PC) to a watchdog (WDG) by a clock (CTR); - Sending one or more messages (MSG) with content that can affect the processor (PC) itself and / or other system components (SC), by the watchdog (WDG) to the processor (PC); - Answering the message (MSG) in response to at least the content of one of these messages by the processor (PC) in the form of a response (ASW) to the watchdog (WDG); - Evaluation of at least one response (ANS) of the processor (PC) to the watchdog (WDG) by the watchdog (WDG) as "correct" or "not correct" to generate an evaluation result, - wherein a response (ANS) is "correct" • if its content matches at least one possible expected content, and • if the response (ANS) is received by the watchdog (WDG) within a predetermined reception period (b), and - where a response (ANS) is "incorrect", if the content of the response (ANS) does not match at least one possible expected content, or if the response (ANS) is not received by the watchdog (WDG) in the predetermined receiving period (b); Change of the content of a result store (ES) with n buffered information (Inf ₁ ,... Inf _n ), each with a first information portion per cached information (Inf ₁ ,... Inf _n ) and possibly further information portions per cached information ( Inf ₁ , ... Inf _n ) with n as a whole number greater than 1 and • each with a unique logical result storage position • after receipt of a response (ASW) by the watchdog (WDG) or • after the end of the scheduled receiving period ( b) by deleting at least one cached information (Inf _k ) of the n information (Inf ₁ ,... Inf _n ) and changing at least one logical result storage position of at least one cached information item (Inf _j ) of n information items (Inf ₁ ,. Inf _n ) in a result memory (ES) and using the result of the evaluation of the at least one received response (ANS) as a new one information portion of a new cached information (Inf _l ) in the result store (ES).
• 94. Procedure by characteristic Error! Reference source not found. With an additional second evaluation means (VAL) as part of the watchdog (WDG), for the evaluation of the cached information (Inf ₁ to Inf _n ) of the result store (ES), comprising the additional step - evaluation of the cached information (Inf ₁ to Inf _n ) of the result memory (ES) by second weighting means (VAL) by generating an evaluation result in dependence on cached information of the cached information (Inf ₁ to Inf _n ); - Generating at least one control signal (RES), which can change the state of the processor (PC), or generating a signal from which such a control signal (RES) is derived in dependence on said evaluation result.
• 95. Procedure by characteristic Error! Reference source not found. comprising the additional step of - determining a first predetermined receiving period (b1) in response to a first expected answer (ANS1) for use as a predetermined receiving period (b) in the evaluation of this first answer (ANS1) of Processor (PC) as received (ANS) by the watchdog (WDG); - determining a second predetermined receiving period (b2) in response to a second expected response (ANS2) for use as a predetermined receiving period (b) in the evaluation of this second response (ANS2) of the processor (PC) in its reception as an answer (ANS) through the watchdog (WDG); Where the first predetermined receiving period (b1) and the second predetermined receiving period (b2) overlap and the first predetermined receiving period (b1) has no effect in the second response (ANS2) evaluation and the second predetermined receiving period (b2) is the evaluation the first answer (ANS1) has no effect.
• 96. Procedure by characteristic Error! Reference source not found. comprising the modified step The evaluation of the response (ANS) of the processor (PC) as "correct" or "incorrect", - where now an answer (ANS) is additionally only "correct", If, in addition, the number of responses (ANS) received by the watchdog (WDG) within the predetermined reception period (b) by the received response (ANS) does not exceed a predetermined maximum number of responses to be received (ANS) or additionally at the end of the predetermined reception period (b) does not fall below a predetermined minimum number of responses to be received (ANS).
• - where now an answer (ANS) is additionally "not correct", If the number of responses (ANS) received by the watchdog (WDG) within the predetermined reception period (b) exceeds a predetermined maximum number of responses to be received (ANS) by the received response (ANS) or at the end of the predetermined reception period (b ) falls below a predetermined minimum number of responses to be received (ANS).
• 97. Procedure by characteristic Error! Reference source not found. comprising the modified step - evaluating the response (ANS) of the processor (PC) in additional dependence on at least one information portion of _buffered information (Inf _j ) of the cached information (Inf _j to Inf _n ) of the result memory (ES) in addition to the dependency of this evaluation from response (ANS) of the processor (PC) to the watchdog (WDG).
• 98. Procedure by characteristic Error! Reference source not found. comprising the modified step - evaluating the response (ANS) of the processor (PC) in addition to the cached information (Inf _j to Inf _n ) of the result memory (ES) in addition to the dependency of this evaluation on the response (ANS) of the processor (PC) to the watchdog (WDG).
• 99. Procedure by characteristic Error! Reference source not found. comprising the additional step - additionally generating at least one further evaluation by second evaluation means (VAL) as a function of at least one cached information (Inf _j ) of the cached information (Inf ₁ , ... Inf _n ) of the result memory (ES); - Store this further evaluation as another piece of information cached information (Inf _j ) of the cached information (Inf _j to Inf _n ) of the result memory (ES).
• 100. Procedure by characteristic error! Reference source not found. comprising the additional step of generating a second further evaluation as a function of the occurrence of predetermined patterns among at least one respective portion of at least two different buffered information items (Inf _j , Inf _k , with 1 ≦ j ≦ n and 1 ≦ k ≦ n and j ≠ k) the cached information (Inf ₁ , ... Inf _n ) of the result store (ES).
• 101. Procedure by characteristic Error! Reference source not found. comprising the additional step of - setting the first information portions of the cached information (Inf ₁ to Inf _n ) of the result memory (ES) at the end of the predetermined reception period (b) all to a value corresponding to "not correct" or all to a value corresponding to "correct" ,
• 102. The method according to one or more of the preceding steps, comprising the additional steps - evaluating the cached information (Inf ₁ to Inf _n ) of the result memory (ES) to generate a further evaluation result; - Change the content of a second result memory (ES _B ) with m Further cached information (Inf _1B , ... Inf _mB ) with a first information _share and possibly other information shares with m as a whole number greater than 1 and • each have a unique additional logical result storage position • temporally after receiving a response (ASW) by the Watchdog (WDG) or • temporally after the end of the intended receiving period (b) by • deleting at least one further cached information (Inf _k ) of the m information (Inf _1B , ... Inf _mB ) in the further result _memory (ES _B ) and Changing at least one logical result storage position of at least one further _cached information (Inf _jB ) of m further _cached information (Inf _1B , ... Inf _mB ) in the further result _memory (ES _B ) and using the further evaluation result as the new first information portion of a new one further cached information (inf _l ) in the further n result memory (ES _B ). - Evaluation of at least two of the m further cached information (Inf _1B , ... Inf _mB ) and - generating at least one control signal (RES) and / or at least one further control signal (WRN, WRN2), the state of the processor (PC) depending on the result of this evaluation.

glossary

_Cached Information (Inf ₁ , ... Inf _n ) and (Inf _1B , ... Inf _nB ) Among _cached information (Inf ₁ , ... Inf _n ) and among other _cached information (Inf _1B , ... Inf _nB ) are understood in the sense of this document records with at least one date. In the simplest case, it is therefore the information "correct" or "not correct", which is preferably then encoded in one bit. As mentioned in the description above, however, it is conceivable to make more complex evaluations and to use such evaluation vectors as individual cached information.

Results storage

A result memory in the sense of this document consists of several (n or m) result memory cells. Each result memory _cell can store information (Inf _j ) or (Inf _jB ). Each of the pieces of information may comprise several pieces of information - also called pieces of information here. So it can be a more complex data structure. In the simplest case, however, such information is only one bit. Each of the information _stored n or m in the result _memory (Inf ₁ ,... Inf _n ) or (Inf _1B ,... Inf _nB ) can be assigned a logical and a physical result _storage position. In the case of a trigger event, the result memory shifts or scrambles the n or m information (Inf ₁ ,... Inf _n ) or (Inf ₁ ,... Inf _m ) in the result memory in a predeterminable manner according to a predeterminable scheme. This can be purely logical by changing the logical result storage positions or by actual displacement of the n or m information (Inf ₁ , ... Inf _n ) or (Inf ₁ , ... Inf _m ) in the result memory to other result memory cells so by changing the physical result storage positions done. A predetermined information of the cached information (Inf ₁ , ... Inf _n ) or (Inf ₁ , ... Inf _m ) of the result memory is at least partially overwritten in the trigger event by an evaluation by evaluation (AVAL, VAL) evaluation value and thus deleted. Of course, writing and deleting can also be performed sequentially one after the other. In the simplest case, a read / write pointer within the event memory at each trigger event can be re-positioned to a new event memory cell in a predeterminable manner, which is then overwritten with the evaluation result to be buffered. Preferably all result memory cells are overwritten once before a result memory cell is overwritten again.

Trigger event

A trigger event for shifting a shift register or restructuring the information in the event memory (as described under Event Memory) may be receipt of a response (ANS) from the processor by the watchdog (WDG) or receipt of each response (ANS) by the processor the watchdog (WDG) or the end of the predetermined reception period (b) or the end of a predetermined or set number q of successive reception periods (b), which are typically but not necessarily separated by other periods (a, c). Not every response (ANS) of the processor (PC) must be a trigger signal. However, it is preferred that each response (ANS) of the processor (PC) is a trigger signal.

Shift register (SR)

In general, a shift register is understood to mean a register which in each memory location comprises a single bit, which is shifted to the left or right in the event of a clock edge. For the purposes of this document, however, the register cells contain not just one bit but the data records of the cached information (Inf ₁ ,... Inf _n ) and (Inf _1B ,... Inf _mB ). Although such a record of _cached information (Inf _j ) or (Inf _jB ) may consist of only one bit, it need not. To enable the shift operation, the data structure of the register cells must be the same regardless of whether the register cells are used or not.

LIST OF REFERENCE NUMBERS

• a first period for which there is no receipt of responses (ANS). The time period does not overlap in time with the second time period (c), at which no evaluation of replies (ANS) by the watchdog (WDG) occurs, and with the intended receiving period (b) for a response (ANS) of the processor (PC) , The length of time of a first period can 0 be. The length of the first period may vary from the first period to the first period.
• ANS Response of the processor (PC) to one or more messages (MSG) that sent the first stimulus (QSTM) as part of the watchdog (WDG) to the processor (PC).
• AVAL first evaluation means (AVAL). The first assessment tools are part of the watchdog (WDG). They serve to evaluate responses (ANS) of the processor (PC) to the watchdog (WDG) upon request by messages (MSG) which sent the first stimulus (QSTM) from the watchdog (WDG) to the processor (PC) and the latter then with just these answers (ANS) to answer at the right times and with the expected content and in the correct number, which can then be checked by the first evaluation means of the Watchdog (WDG) turn.
• b second period, also known as receiving period for reply (ANS). The length of time of a second period must be greater than 0. The length of time of the second period may vary from second period to second period.
• BW valuation signal.
• c third period (c), at which no response (ANS) is evaluated by the watchdog. The third period of time does not overlap in time with the first period (a) at which no reception of replies (ANS) is scheduled and with the intended reception period (b), the second period, for a response (ANS) of the processor (PC ). The length of time of a third period can be 0. The length of the third period may vary from the third period to the third period.
• CCNT _B second count.
• CTR Internal Clock (CTR), which is part of the Watchdog (WDG).
• ES Result store, which is part of the watchdog (WDG) and consists of result storage cells. Each result memory cell of the result memory is numbered consecutively with a number from 1 to n. This means that each result memory cell has, on the one hand, a real physical result memory cell position and, on the other hand, has a logical result memory cell position which need not be identical to the real one. The result memory can be executed as a shift register (SR).
• ES _B is further result memory, the part of the watchdog (WDG), and consists of another result storage cells. Each further result memory cell of the further result memory is numbered consecutively with a number from 1 to m. This means that each additional result memory cell, on the one hand, has a real physical additional result memory cell position and, on the other hand, has a logical further result memory cell position which need not be identical to the real one. The further result memory can be executed as another shift register (SR _B ).
• Inf ₁ first cached information in the result memory (ES) or in the shift register (SR).
• Inf _j j-th cached information in the result memory (ES) or in the shift register (SR).
• Inf _nn -th cached information in the result memory (ES) or in the shift register (SR).
• Inf _1B first further cached information in the further result memory (ES _B ) or in another shift register (SR _B ).
• Inf _jB j-th further _cached information in the further result _memory (ES _B ) or in another shift register (SR _B ).
• Inf _mB m-te further _cached information in the further result memory (ES _B ) or in the further shift register (SR _B ).
• MSG messages, this is the first stimulus (QSTM) as part of the Watchdog (WDG). sent to the processor (PC), which is then to respond with answers (ANS) in scheduled periods (b) and with the expected contents and in the correct number, which can then be checked by the watchdog (WDG).
• n Number of cached information (Inf ₁ ,... Inf _n ) containing the result memory (ES) or the shift register (SR).
• NO count. By way of example, he indicates the number of "correctly" evaluations evaluated as correct and stored in the result memory.
• m number of further cached information (Inf _1B , ... Inf _mB ) containing the further result memory (ES _B ) or the further shift register (SR _B ).
• PC processor.
• p ₁ first result storage position or first shift register position of the first result memory cell or the first shift register cell.
• p _j j-th result storage position and j-th shift register position of the j-th result memory cell and the j-th shift register cell, respectively.
• P _n n-th result storage position or n-th shift register position of the n-th result memory cell or the n-th shift register cell.
• p _1B first further result storage position or first additional shift register position of the first further result storage cell or the first further shift register cell.
• p _jB j-th further result _{storage position} or j-th further shift register position of the jth further result _{memory cell} or the jth further shift register cell.
• p _mB m-th further result storage position or m-th further shift register position of the other further result memory cell or the mth further shift register cell.
• q number of successive predetermined reception periods (b) after the end of which the evaluation content of the result memory (ES) or the shift register (SR) is at least in the form of the first portions of the information temporarily stored in this result memory (ES) or in this shift register (SR) ( Inf ₁ to Inf _n ) is set to a value corresponding to "correct" or "incorrect", which corresponds to a reset operation of the result memory (ES) or shift register (SR). Preferably, the entire result memory (ES) or the entire shift register (SR) is reset.
• P1 to P26 time periods.
• QSTM first stimulant (QSTM). The first stimulants are part of the watchdog (WDG). They send messages (MSG) from the watchdog (WDG) to the processor (PC), which then answers them with answers (ANS) at the right times and with the expected contents and in the correct number, which is then checked by the watchdog (WDG) can be.
• RES Control signal that can change the state of the processor (PC). Typically, this is a reset signal that forcibly puts the processor (PC) in a predefined state, or an interrupt signal that causes the processor (PC) to interrupt the current program execution and execute a predefined program section.
• SC system components
• SR shift register, which is part of the watchdog (WDG). is and consists of other shift register cells. Each shift register cell of the shift register is numbered 1 to n. This means that each shift register cell on the one hand has a real physical shift register cell position and on the other hand has a logical shift register cell position, which need not be identical to the real one. For the purposes of this document, a shift register falls under the term of a result store (ES).
• SR _B another shift register, which is part of the watchdog (WDG) and consists of other shift register cells. Each further shift register cell of the further shift register is numbered consecutively with a number from 1 to m. This means that each additional shift register cell on the one hand has a real physical additional shift register cell position and on the other hand has a logical further shift register cell position, which need not be identical to the real one. For the purposes of this document another shift register falls under the concept of a further result memory (ES _B ).
• VAL second assessment means, which are part of the Watch Dogs (WD). They evaluate the information stored in the result memory (ES) or in the shift register (SR) n information (Inf ₁ to Inf _n ). In this case, the second evaluation means may also generate more than one rating. For example, it can determine the number of "correct" information in the result memory cells of the result memory (ES) or in the shift register cells of the shift register (SR) and compare it with a threshold value. If the number is below the threshold value, then the control signal (RES) or another corresponding signal for influencing the processor (PC) or parts thereof or other system components (SC) can be set, for example. Also, further signals may be generated in the form of further evaluations, which may correspond, for example, to certain patterns in the result memory cells of the result memory (ES) or in the shift register cells of the shift register (SR).
• VAL _B further second evaluation means, which are part of the Watch-Dogs (WD). They rate the further information _buffered in the further shift register (SR _B ) (Inf _1B to Inf _nB ). In this case, the evaluation means can generate more than just a rating. For example, it can determine the further number of "correct" information in the further result memory cells of the further result memory (ES _B ) or in the further shift register cells of the further shift register (SR _B ) and compare it with a further threshold value. If this further number lies below this further threshold, then the control signal (RES) or another corresponding signal for influencing the processor (PC) or parts thereof or other system components (SC) can be set, for example. Also, further signals can be generated in the form of further evaluations, which may correspond, for example, to certain patterns in the further result memory cells of the further result memory (ES _B ) or further shift register cells of the further shift register (SR _B ).
• WD window signal. In the examples of the figures, a 1 level shall mean that no responses (ANS) are expected and that responses (ANS) of the processor (PC) during these 1-level periods are judged to be "incorrect" regardless of their content , In a period with a 0 level of the signal, responses (ANS) are preferably expected in a predetermined number. If their contents are correct, ie they correspond to a predictable content, they will be considered "correct rated". Possibly. A different number of responses (ANS) can also lead to a "not correct" rating.
• WDG watchdog
• WRN first warning signal of the watchdog (WDG) to the processor (PC).
• WRN2 second warning signal of the watchdog (WDG) to the processor (PC).

List of quoted writings

• DE 10 056 408 C1

QUOTES INCLUDE IN THE DESCRIPTION

This list of the documents listed by the applicant has been generated automatically and is included solely for the better information of the reader. The list is not part of the German patent or utility model application. The DPMA assumes no liability for any errors or omissions.

Cited patent literature

• DE 10056408 C1 [0003, 0091]

Claims (1)

Device for monitoring a processor (PC), with a watchdog (WDG) of the - at least one event memory (ES) or - at least one shift register (SR) having.

Images