Patent ID: 8223007
Filing Date: 2012-07-17
Classification: B60W

Abstract:
1. A method for safeguarding or maintaining an operation of a complex safety-critical overall vehicle regulatory and/or control system in the event of the occurrence of an error, malfunction or other event which influence the availability of subfunctions, in which the overall vehicle system is divided into system components on the basis of the findings of an error source analysis, in which modes of operation are also defined for the individual system components, and also, in the event of the occurrence of errors or events in the overall system, the error sources are analyzed and those methods of operation which are affected by the errors or events which have occurred are ascertained, and wherein, on the basis of the error source analysis and according to the stipulations of a selection system, those modes of operation of the individual system components which are not affected by the errors or events, are taken and those which, in view of the errors or events which have occurred, ensure an optimum or prescribed response from the overall system or at least the maintenance of the operation of the overall system are selected, wherein the definition of the errors or events of system components involves at least classification into: (i) only intermittently occurring errors or events which cause intermittent disconnection or restriction of the overall vehicle system and/or of a subfunction, and (ii) errors or events which cause ultimate disconnection or restriction of the overall vehicle system and/or of a subfunction, wherein a first error analysis step involves final errors being taken into account in the system component selection, and a further error analysis step involves intermittently occurring errors being additionally taken into account.