Robert Boschgmbh

Thomas Hartgen

Margit Mueller

Bernd Mueller

Axel Aue

Dieter Thoss

Andreas Soenkens

Juergen Schramm

Andreas Grimm

Ruediger Deibert

Jaroslaw Topp

Simon Hufnagel

Evgeniya Ballmann

Werner Stadler

Isidro Corral Patino

Andre Vogel

Dirk Wagner

Frank Ahnert

Markus Reichert

Thomas Mauer

A control unit having a plurality of error shutdown interfaces by which, upon activation, in each case one or more components to be controlled by the control unit is/are able to be switched off. The control unit is set up to run one or more different applications, each of which is equipped to trigger an error shutdown if necessary, the control unit additionally being set up to provide internal interfaces for the one or more applications. The internal interfaces and the error shutdown interfaces are predefinably assignable to each other, so that in response to an invocation of one of the internal interfaces, the one or more error shutdown interfaces assigned to it is/are activated. A method for operation of the control unit is also described.

Control unit and method for operating a control unit

A method for monitoring a drive-by-wire system of a motor vehicle, including: temporally offset reading in of at least two input values of an input quantity of an operating element of the motor vehicle; ascertaining a change over time or rate of change over time of the input quantity from the at least two read-in input values; determination of a monitored quantity for the motor vehicle operation from the change over time or rate of change over time; selection of a monitoring function on the basis of the monitored quantity; monitoring of the monitored quantity for the ascertained motor vehicle operation by the monitoring function.

Method for monitoring a drive-by-wire system of a motor vehicle

A method for operating a control unit of a motor vehicle. A status inquiry is transmitted by a watchdog unit to a first monitoring unit, which is implemented on a first processor core of a multicore processor. A status response is ascertained by the first monitoring unit as a function of the status inquiry. A fault is ascertained by the watchdog unit as a function of the status response.

Method for operating a control unit

A method and device for avoiding manipulation of a data transmission. A message containing a message authentication code is received at a processing unit, the message from the processing unit is transferred to a hardware module, a check value as a function of the received message is computed in the hardware module, the received message authentication code and the check value are compared in the hardware module, a result of the comparison is transferred from the hardware module to the processing unit as an output variable, the message authentication code received in the message from the processing unit is checked in the processing unit based on the output variable.

Method and device for avoiding manipulation of a data transmission

Growing community of inventors

Ludwigsburg, Germany

Thomas Hartgen