Robert Boschgmbh

Guenter Braun

Rolf Kohler

Matthias Kottmann

Johannes Schmitt

Andreas Zoebele

Wolfgang Kosak

Klaus Mueller

Taskin Ege

Reinhard Pfeufer

Rainer Sommer

Margit Mueller

Dietmar Blessing

Frank Worbis

Alireza Djahangard-Mahboob

Andreas Zeobele

Methods of securing the erasing and/or programming or reprogramming of data and/or programs in a memory of a computer, in particular a control unit in a motor vehicle, are described. In programming, either an identifier that identifies correct erasing and/or programming of memory is entered into an area of memory that is to be erased and/or programmed or it is selected from the data and/or programs already entered, in particular from a program identifier in the form of a section from it. In addition, the identifier is altered in memory before erasing and/or programming the data and/or programs, in particular by erasing and/or programming, so that the respective memory contents are not used in the event of an interruption in the programming operation and thus in the event of defective programming.

Method and device for securing data when altering the storage contents of control units

A control device for an internal combustion engine includes a control circuit and at least one interface for communication of the control circuit with a sensor and/or an actuator for detecting and/or controlling of operating parameters of the internal combustion engine, as well as an additional interface for communication with a dynamo-electric generator, for detecting and/or controlling of operating parameters of the generator.

Control device for an internal combustion engine

A method for protecting a microcomputer of a control unit for a motor vehicle against the manipulation of a control program that is stored at least partially in a rewriteable memory, by executing a validation program stored in the microcomputer for detecting an unauthorized manipulation of the control program. In order to make possible a simple deactivation of the validation program without impairing the security of the validation program, an electronic hardware identifier of the control unit is provided for identifying the control unit as a serial module or as application module, the validation program being able to be switched from an activated state to a deactivated state in the application module using standard commands and in a serial module only using special measures. The standard commands are freely available, whereas the special measures are available on a limited basis.

Method for protecting a microcomputer of a control unit against the manipulation of a program and a device for carrying out the method

A device for influencing the propulsion of a vehicle includes a first arrangement for measuring a transverse acceleleration variable describing the transverse acceleration acting upon the vehicle, a second arrangement for determining a variable describing the time behavior of the transverse accelaretion variable, a third arrangement for determining an intervention variable at least as a function of the transverse acceleration variable and of the variable describing the time behavior of the transverse acceleration variable, and a fourth arrangement for carrying out at least engine interventions for influencing the propulsion as a function of the intervention variable.

Device and method for influencing the propulsion of a vehicle

A control system, for use in a vehicle, that influences at least one quantity representing tire slip, and which includes a control unit for controlling at least the drive unit of the vehicle. A traction controller for influencing the engine torque may be implemented in the control unit, and may be used to generate a value for a regulated quantity (or manipulated variable) for the torque of the drive unit based on at least a characteristic map that depends on the slippage and on the slip gradient.

Control system for a vehicle

A device for monitoring a transverse acceleration sensor located in a vehicle and detecting a first transverse acceleration quantity. The device includes a processing device that has at least one filtering device used to filter the first transverse acceleration quantity, yielding a filtered transverse acceleration quantity. A second transverse acceleration quantity is determined by determining device as a function of wheel speed quantities detected by a corresponding detecting device. A comparison between the filtered transverse acceleration quantity and the second transverse acceleration quantity is carried out in a monitoring device to monitor the transverse acceleration sensor.

Device and method for monitoring a transverse acceleration sensor located in a vehicle

A device for monitoring an acceleration sensor located in a vehicle and detecting an acceleration quantity that describes an acceleration acting upon the vehicle. The device includes an averaging device that is used to generate a mean value of the acceleration quantity for a definable period of time. The mean value is largely independent of driving maneuvers performed with the vehicle. The device also includes a monitoring device in which a comparison between the mean value of the acceleration quantity and a threshold value is carried out to monitor the acceleration sensor.

Device and method for monitoring an acceleration sensor located in a vehicle

A method is distinguished in that outside of the analog/digital converter, on the basis of an analog signal (UA) to be digitized by the analog/digital converter, a sequence of digital pulses (P2) is generated, of which at least the width or the repetition frequency is analog signal-dependent, and that a digital result determined based on the pulse sequence and the digital value generated on the basis of the same analog signal by the analog to digital converter are checked for conformance with one another. As such, in a simple manner, a continuous monitoring of the A/D converter to be monitored is rendered possible during its 'normal' operation.

Method for monitoring the operability of an analog to digital converter

A circuit arrangement for executing a reset, in which controlled resetting of a functional computer and a safety module takes place. A reset stage is able to coerce both the functional computer and the safety module into a reset state, while all output stages are switched off for all reset states. The functional computer and the safety module are connected by a serial interface to continually monitor each other and can mutually reset one another in the case of a fault.

Growing community of inventors

Bietigheim, Germany

Guenter Braun