公开(公告)号：US6067035A

公开(公告)日：2000-05-23

申请号：US905263

申请日：1997-08-01

申请人： Wolfgang Kosak ,  Guenter Braun ,  Margit Mueller ,  Dietmar Blessing

发明人： Wolfgang Kosak ,  Guenter Braun ,  Margit Mueller ,  Dietmar Blessing

IPC分类号： H03M1/10 ,  G06F3/05 ,  G06F11/00

CPC分类号： H03M1/109 ,  H03M1/12

摘要： A method is distinguished in that outside of the analog/digital converter, on the basis of an analog signal (UA) to be digitized by the analog/digital converter, a sequence of digital pulses (P2) is generated, of which at least the width or the repetition frequency is analog signal-dependent, and that a digital result determined based on the pulse sequence and the digital value generated on the basis of the same analog signal by the analog to digital converter are checked for conformance with one another. As such, in a simple manner, a continuous monitoring of the A/D converter to be monitored is rendered possible during its "normal" operation.

摘要翻译： 一种方法的区别在于，在模拟/数字转换器的外部，基于要由模拟/数字转换器数字化的模拟信号（UA），产生数字脉冲序列（P2），其中至少 宽度或重复频率是模拟信号相关的，并且检查基于脉冲序列确定的数字结果和由模数转换器基于相同模拟信号产生的数字值彼此一致。 因此，以简单的方式，可以在其“正常”操作期间连续监视要监视的A / D转换器。

公开(公告)号：US07418316B2

公开(公告)日：2008-08-26

申请号：US10523327

申请日：2003-07-10

申请人： Reinhard Pfeufer ,  Margit Mueller ,  Wolfgang Haag ,  Stefan Keller

发明人： Reinhard Pfeufer ,  Margit Mueller ,  Wolfgang Haag ,  Stefan Keller

IPC分类号： G05B19/418 ,  G06F19/00

CPC分类号： H04L12/40032 ,  G05B9/02 ,  H04L12/40 ,  H04L12/4135 ,  H04L2012/40215 ,  H04L2012/40273

摘要： The present invention provides a method and a device for controlling operational sequences, in particular in a vehicle. In this context, a functional unit for forwarding and receiving data via at least one connecting unit is in contact with at least one bus system. Functional unit is monitored by a monitoring unit. The monitoring unit prevents the forwarding of data by the functional unit via the at least one bus system if the monitoring unit detects an error of the functional unit. In an error case, in order to prevent the forwarding of data by functional unit in a manner as simple as possible, yet one that is safe and reliable, an error signal is emitted by the monitoring unit, which error signal assumes different values as a function of whether an error of the functional unit has been recognized or not, and the error signal is applied to the at least one connecting unit such that the at least one connecting unit is deactivated by the error signal if an error of the functional unit has been detected.

摘要翻译： 本发明提供一种用于控制操作顺序的方法和装置，特别是在车辆中。 在这种情况下，用于经由至少一个连接单元转发和接收数据的功能单元与至少一个总线系统接触。 功能单元由监控单元监控。 如果监视单元检测到功能单元的错误，则监视单元防止功能单元经由至少一个总线系统转发数据。 在错误情况下，为了防止功能单元以尽可能简单的方式转发数据，但是也是安全可靠的，监视单元发出错误信号，哪个错误信号取为不同的值作为 是否已经识别出功能单元的错误的功能，并且将错误信号应用于至少一个连接单元，使得如果功能单元的错误具有错误信号，则至少一个连接单元被停用 被检测到。

公开(公告)号：US20060112315A1

公开(公告)日：2006-05-25

申请号：US10523327

申请日：2003-07-10

申请人： Reinhard Pfeufer ,  Margit Mueller ,  Wolfgang Haag ,  Stefan Keller

发明人： Reinhard Pfeufer ,  Margit Mueller ,  Wolfgang Haag ,  Stefan Keller

IPC分类号： G06F11/00

CPC分类号： H04L12/40032 ,  G05B9/02 ,  H04L12/40 ,  H04L12/4135 ,  H04L2012/40215 ,  H04L2012/40273

摘要： The present invention relates to a method and a device for controlling operational sequences, in particular in a vehicle. In this context, a functional unit (3) for forwarding and receiving data via at least one connecting unit (4) is in contact with at least one bus system (2). Functional unit (3) is monitored by a monitoring unit (8). The monitoring unit (8) prevents the forwarding of data by the functional unit (3) via the at least one bus system (2) if it detects an error of the functional unit (3). In an error case, in order to prevent the forwarding of data by functional unit (8) in as simple as possible a manner, yet one that is safe and reliable, it is proposed that an error signal (WDA) be emitted by the monitoring unit (8), which assumes different values as a function of whether an error of functional unit (3) has been recognized or not, and the error signal (WDA) be applied to the at least one connecting unit (4) and the at least one connecting unit (4) be deactivated by the error signal (WDA) that is present, if an error of the functional unit (3) has been detected.

摘要翻译： 本发明涉及一种用于控制操作顺序的方法和装置，特别是在车辆中。 在这种情况下，用于经由至少一个连接单元（4）转发和接收数据的功能单元（3）与至少一个总线系统（2）接触。 功能单元（3）由监视单元（8）监视。 监视单元（8）如果检测到功能单元（3）的错误，则防止功能单元（3）经由至少一个总线系统（2）转发数据。 在错误的情况下，为了防止由功能单元（8）以尽可能简单的方式转发数据，但是仍然是安全可靠的，因此建议通过监视发出错误信号（WDA） 单元（8），其根据是否已经识别出功能单元（3）的错误而假定不同的值，并且将误差信号（WDA）应用于至少一个连接单元（4）和在 如果检测到功能单元（3）的错误，则至少一个连接单元（4）被存在的误差信号（WDA）停用。

公开(公告)号：US06918064B2

公开(公告)日：2005-07-12

申请号：US10101820

申请日：2002-03-20

申请人： Margit Mueller ,  Lilian Kaiser ,  Stefan Keller

发明人： Margit Mueller ,  Lilian Kaiser ,  Stefan Keller

IPC分类号： G05B23/02 ,  F02D41/24 ,  F02D41/26 ,  G05B19/042 ,  G06F11/00

CPC分类号： F02D41/2493 ,  F02D41/266 ,  G05B19/0421 ,  G05B2219/24195

摘要： A method and a device for monitoring data and the transmission of data between at least one first control unit and one second control unit are provided. The at least two control units have a first program level, to which are allocated programs which calculate the control function, as well as a second program level including programs that monitor the functional reliability of the programs of the first program level. The first control unit is connected to at least one component which may be used to acquire data, for example, controlled variables. The data acquired by the component or further data determined with this data may be transmitted from the first control unit to the second control unit over a single connection in a secure manner, and the data and the data transmission are secured separately in the first and second program levels such that errors in the data and the data transmission may be detected.

摘要翻译： 提供了一种用于在至少一个第一控制单元和一个第二控制单元之间监视数据和传输数据的方法和装置。 所述至少两个控制单元具有第一程序级，对其分配计算控制功能的程序，以及包括监视第一程序级的程序的功能可靠性的程序的第二程序级。 第一控制单元连接到可用于获取数据的至少一个组件，例如受控变量。 由该数据获取的数据或由该数据确定的其他数据可以通过单个连接以安全的方式从第一控制单元发送到第二控制单元，并且数据和数据传输在第一和第二 可以检测到数据和数据传输中的错误的程序级。