Circuit arrangement and method for monitoring a DSP in the context of a safety-critical application

摘要

A circuit arrangement of a sensor-triggered control system in a safety critical application with a digital signal processor (DSP) is provided. The DSP calculates a first position or attitude from position or attitude signals generated by a sensor. The first position or attitude meets a predetermined requirement to be accurate and unambiguous. A signal conditioning circuit reduces information content of the position or attitude signals to generate reduced position or attitude signals. A position and attitude calculation circuit determiners a second position or attitude based on the reduced position or attitude signals, which does not meet the predetermined requirement. A control unit compares the first position or attitude with the respective second position or attitude to generate a difference and determines whether the difference is within a predetermined scope of accuracy. If the determination of the control unit is negative, a sensor fault signal is outputted.

主权项

1. A circuit arrangement of a sensor-triggered control or display system in the context of a safety-critical application with a digital signal processor (DSP), comprising:
at least one sensor, wherein the at least one sensor passes position or attitude signals in the form of alternating difference voltages to the DSP, wherein each alternating difference voltage has an amplitude and a phase, wherein the DSP calculates a first position or attitude from the position or attitude signals, wherein the first position or attitude meets a predetermined requirement to be accurate and unambiguous, a signal conditioning circuit, which reduces information content of the position or attitude signals to generate reduced position or attitude signals, a first sub-component comprising a position and attitude calculation circuit, wherein the position and attitude calculation circuit determiners a second position or attitude based on the reduced position or attitude signals, wherein the second position or attitude does not meet the predetermined requirement, a second sub-component comprising a control unit, wherein the control unit compares the first position or attitude with the respective second position or attitude to generate a difference and determines whether the difference is within a predetermined scope of accuracy, and a third sub-component, which outputs a sensor fault signal when the determination of the control unit is negative.