Method for operating a safety-critical controller for a motor vehicle and corresponding motor vehicle
AssigneeContinental Automotive GmbH
InventorAndreas Mueller
Life of this patent
Estimating the term…
Abstract
A safety-critical controller of a vehicle monitors functioning of the controller, at least one sensor and/or at least one actuator to detect an error. When specific error conditions exist, a warning for the driver is generated. It is detected whether the error is remediated within a specified time span, and if not, then corresponding error data is transmitted to a vehicle manufacturer and/or a vehicle service provider. The time span may be extended if the driver confirms the warning by operating a corresponding operating device.
Claims5
A method of operating a safety-critical controller of a vehicle, comprising:
- with the controller, monitoring a functioning of at least one component selected from the group consisting of the controller, at least one sensor, and at least one actuator, to detect an error that occurs in the functioning of the at least one component,
- when the error comprises at least one of specific error conditions, then generating a warning for a driver of the vehicle, wherein for at least a subgroup of the error conditions, the warning comprises an appropriate warning message which is given to the driver,
- detecting whether the error has been remediated during a specified time span, and
- transmitting corresponding data indicative of the error to a vehicle manufacturer and/or a vehicle service provider of the vehicle, only when a remediation of the error has not been detected within the specified time span.
A motor vehicle comprising a vehicle body and an apparatus, wherein:
- the apparatus comprises a controller, a warning output device, and a data transmitter,
- the controller is configured to monitor a functioning of at least one component selected from the group consisting of the controller, at least one sensor, and at least one actuator, to detect an error that occurs in the functioning of the at least one component,
- the warning output device is configured to generate a warning for a driver of the vehicle when the error comprises at least one of specific error conditions, wherein for at least a subgroup of the error conditions the warning comprises an appropriate warning message which is given to the driver,
- the controller is further configured to detect whether the error has been remediated during a specified time span, and
- the data transmitter is configured to transmit corresponding data indicative of the error to a vehicle manufacturer and/or a vehicle service provider of the vehicle, only when a remediation of the error has not been detected within the specified time span.
Dependencies are inferred from the claim text.