摘要 |
<p>A computer system for safety critical sensor variables includes first and second sensors which respectively output first and second sensor variables, a computer, and an independent comparator. The computer calculates an output variable from the first sensor variable by a first function. The computer calculates a comparison variable from the output variable by a second function. The comparison variable and the second sensor variable are applied to the input of the comparator. The second sensor variable is not an input variable of the computer and differs from the first sensor variable in terms of its qualitative value. By calculations of the computer and, if appropriate, of the comparator, an expected comparison variable for the second sensor variable is determined from the calculated output variable, and the correspondence of the two variables is checked by the comparator. Specific internal errors of the computer can thereby be discovered.</p> |