초록 ▼

A circuit arrangement for a safety-critical control system, such as ABS, TCS, ASMS, brake-by-wire, etc., has a dual-circuit or multiple-circuit design, and each circuit includes a complete microprocessor system that processes the input data redundantly and delivers an error identification signal (FA

A circuit arrangement for a safety-critical control system, such as ABS, TCS, ASMS, brake-by-wire, etc., has a dual-circuit or multiple-circuit design, and each circuit includes a complete microprocessor system that processes the input data redundantly and delivers an error identification signal (FAIL) when an error or a discrepancy between the redundantly produced data processing results occurs. Upon error detection, there is a transition to an emergency operation mode where either a circuit is disconnected or the actuator activation of both circuits is assumed by the intact microprocessor system. Each of the two systems is equipped with peripherals of its own, comprised of signal detection, actuator activation, and energy supply.

대표청구항 ▼

1. A circuit arrangement for use with an automotive vehicle control system for controlling safety-critical control operations, said circuit arrangement processing input data from the control system and generating an error identification signal when a discrepancy occurs, said circuit arrangement comp

1. A circuit arrangement for use with an automotive vehicle control system for controlling safety-critical control operations, said circuit arrangement processing input data from the control system and generating an error identification signal when a discrepancy occurs, said circuit arrangement comprising:first and second microprocessor systems for redundantly processing input signals and for generating an error identification signal in the event of a discrepancy between the redundantly processed input signals; and means for transitioning the control system to an emergency operation mode when a discrepancy occurs in one of said first and second microprocessor systems, wherein said transitioning means comprises a first commutator for transitioning the control system from said first microprocessor system to said second microprocessor system when the discrepancy occurs in said first microprocessor system, and a second commutator for transitioning the control system from said second microprocessor system to said first microprocessor system when the discrepancy occurs in said second microprocessor system.