초록 ▼

A control device of the internal combustion engine has a first arithmetic unit and a second arithmetic unit. The arithmetic units process a control program with a first, second and third program level. In the second program level an actuation signal is monitored, and a first emergency operating func

A control device of the internal combustion engine has a first arithmetic unit and a second arithmetic unit. The arithmetic units process a control program with a first, second and third program level. In the second program level an actuation signal is monitored, and a first emergency operating function is activated in the first program level if the second program level has detected an implausibility of the actuation signal. The third program level is caused to carry out a second emergency operating function if, while the first emergency operating function is being carried out in the first program level, the implausibility of the actuation signal continues to be detected.

대표청구항 ▼

[ We claim:] [1.] A method of controlling an internal combustion engine, which comprises:providing a sensor and sensing therewith an operating parameter of an internal combustion engine and generating a measurement signal;providing a control device with a first arithmetic unit and a second arithmeti

[ We claim:] [1.] A method of controlling an internal combustion engine, which comprises:providing a sensor and sensing therewith an operating parameter of an internal combustion engine and generating a measurement signal;providing a control device with a first arithmetic unit and a second arithmetic unit for processing therein a control program having a first program level, a second program level, and a third program level;processing the first and second program levels in the first arithmetic unit, and dividing the third program level between the first and second arithmetic units;determining an actuation signal for an actuator of the internal combustion engine in the first program level in dependence on the operating parameter of the internal combustion engine;monitoring the actuation signal in the second program level, and activating a first emergency operating function in the first program level if the second program level detects an implausibility in the actuation signal;monitoring the first arithmetic unit in the third program level, and subjecting the second program level to a program sequence check, and carrying out a second emergency operating function if the third program level detects an error; andwith the second program level, causing the third program level to carry out the second emergency operating function if, assuming that the first emergency operating function is being carried out in the first program level, the implausibility of the actuation signal continues to be detected.