Method and device for handling an anomaly at a control unit

A device for handling an anomaly in a control unit for a machine or a vehicle, wherein the device is integrated into the control unit and includes a processor, an interface, and a memory to store instructions, wherein the processor is configured to carry of the instructions, the instructions causing the device to perform the following:

• detecting at least one variable that defines an operation of the control unit;
• determining a piece of information that characterizes surroundings in which the control unit is operated as a function of the detected variable;
• checking, as a function of a comparison of the piece of information about the surroundings to a piece of information about a setpoint surroundings for the operation of the control unit, whether or not an anomaly that is caused by an electronic communication is present in the operation of the control unit;
• operating the control unit in a first operating mode having a first functional range, when no anomaly is detected;
• and
• operating the control unit in a second operating mode having a second functional range, which is reduced or changed with regard to the first functional range, when the anomaly is detected, wherein the variable characterizes a switching-on or switching-off process of the unit, the surroundings in which the unit is operated being characterized by a course of the switching-on or switching-off process of the unit, the anomaly being detected when it is established that the switching-on or switching-off process of the unit is:
• (i) carried out more infrequently than a predefined minimum number within a time interval, or (ii) carried out only incompletely, or (iii) aborted with regard to reaching the first operating mode.

A non-transitory computer-readable memory medium on which is stored a computer program for handling attacks on a unit for controlling a machine, wherein the machine is a vehicle or a component of the vehicle, the computer program, when executed by a computer, causing the computer to perform the following steps:

• detecting at least one variable that defines an operation of the unit in the vehicle;
• determining a piece of information that characterizes surroundings in which the unit is operated as a function of the detected variable;
• checking, as a function of a comparison of the piece of information about the surroundings to a piece of information about a setpoint surroundings for the operation of the unit in the vehicle, whether or not an anomaly that is caused by an electronic communication is present in the operation of the unit;
• operating the unit in a first operating mode having a first functional range for the vehicle, when no anomaly is detected;
• and
• operating the unit in a second operating mode having a second functional range for the vehicle, which is reduced or changed with regard to the first functional range, when the anomaly is detected, wherein the variable characterizes a switching-on or switching-off process of the unit, the surroundings in which the unit is operated being characterized by a course of the switching-on or switching-off process of the unit, the anomaly being detected when it is established that the switching-on or switching-off process of the unit is:
• (i) carried out more infrequently than a predefined minimum number within a time interval, or (ii) carried out only incompletely, or (iii) aborted with regard to reaching the first operating mode.