Fail-Safe EE Architecture for Automated Driving

摘要

A system with a first computer unit and with a second computer unit, wherein the first computer unit comprises a first interface to enable connection to at least one sensor and to at least one actuator, wherein the second computer unit comprises a second interface to enable connection to at least one sensor and to at least one actuator, wherein the first and the second computer units can be connected to each other by means of a further interface, wherein the actuator comprises an interface, wherein depending on the first or on the second operating state the interface determines whether a control command for a driving function is adopted by the first or the second computer unit, so that in the first operating state only the first computer unit can activate the actuator and in a second operating state only the second computer unit can activate the actuator.

主权项

1. A system comprising:
a first computer unit having an first interface configured to connect to a sensor and to an actuator; a second computer unit having an second interface configured to connect to the sensor and to the actuator; and an third interface configured to connect the first computer unit and the second computer unit to each other, wherein at least one of the first computer unit, the second computer unit, and the actuator are configured to determine whether one of the first computer unit and the second computer unit can effectively activate the actuator.