# US 12,222,813 B2 · Device and method for controlling a technical system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,222,813 B2 - Document ID: US12222813B2 - Status: Granted - Kind: B2 - Application number: 17/910,804 - Filed: 2021-04-12 - Published: 2023-04-20 - Granted: 2025-02-11 - Earliest claimed: 2020-04-23 - Assignees: Robert Bosch GmbH - Applicants: Robert Bosch GmbH - Inventors: Andreas Merker; Axel Aue; Franz Nottensteiner; Jerome Parlebas; Matthias Schreiber - Web page: https://patentgrep.com/patent/US12222813B2 ## CPC - G06F 11/1441: {Resetting or repowering} - G06F 1/24: Resetting means - G06F 9/4405: {Initialisation of multiprocessor systems} - G06F 11/0724: {in a multiprocessor or a multi-core unit (multiprocessors per se G06F15/80)} - G06F 11/0739: {in a data processing system embedded in automotive or aircraft systems} - G06F 11/076: {by exceeding a count or rate limit, e.g. word- or bit count limit} - G06F 11/0793: {Remedial or corrective actions (recovery from an exception in an instruction pipeline G06F9/3861; by retry G06F11/1402; for recovering from a failure of a protocol instance or entity H04L69/40)} - G06F 11/0796: {Safety measures, i.e. ensuring safe condition in the event of error, e.g. for controlling element} - G06F 11/1004: {to protect a block of data words, e.g. CRC or checksum (G06F11/1076 takes precedence; security arrangements for protecting computers or computer systems against unauthorized activity G06F21/00)} - G06F 21/575: {Secure boot} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A method for controlling a technical system, in particular of a motor vehicle. ## Claims ### Claim 1 A method for controlling a technical system, the method comprising: resetting at least one hardware component of a device, wherein a) the device includes a plurality of cores and the resetting includes a resetting of a single core of the plurality of cores, such that the resetting of the single core does not influence one or more further cores of the plurality of cores, and/or b) a resetting of modules of the device and/or of any existing external circuits is carried out such that several independent applications can be operated and the several independent applications do not influence one another; wherein the method includes at least one of the following features (i)-(ii): (i) the method is used for at least one of the following: (a) enabling a deterministic runtime behavior of at least some applications of the device; and (b) avoiding a new homologation for one application when changing at least one further application; and (ii) the method further comprises at least one of the following steps: (a) forwarding information characterizing an operating state with regard to a functional safety of an application to at least one further unit, the at least one further unit being a unit arranged externally to the device; (b) at least temporarily separating partitions or applications from one another using a quality of service and/or at least one parameter characterizing the quality of service, wherein at least one application sets the quality of service, the quality of service being characterizable by latency and/or bandwidth for at least one peripheral component; (c) securing a deterministic data exchange between a plurality of applications running on a computer or the device using a memory region assignment implemented using at least one memory protection unit; and (d) placing orders by a plurality of partitions or applications which cannot be overwritten or influenced respectively by other partitions or applications using a mechanism implemented in at least one hardware module or peripheral component. ### Claim 2 (depends on 1) The method according to claim 1, wherein the technical system is a technical system of a motor vehicle or for a motor vehicle. ### Claim 3 (depends on 1) The method according to claim 1, further comprising: the assigning at least one memory region of a non-volatile memory, the assigning including assigning a first memory region of the non-volatile memory a first application and assigning a second memory region of the non-volatile memory to a second application. ### Claim 4 (depends on 1) The method according to claim 1, comprising: collecting and managing faults using a fault collection and control unit (FCCU), the FCCU being configured to ensure an independent continued operation of applications of the device, the FCCU configured to collect hardware errors occurring in individual modules and to execute fault responses. ### Claim 5 (depends on 1) The method as recited in claim 1, further comprising: the forwarding of the information characterizing the operating state with regard to the functional safety of the application to the at least one further unit, the at least one further unit being a unit arranged externally to the device. ### Claim 6 (depends on 1) The method according to claim 1, further comprising: assigning at least one peripheral module to precisely one application. ### Claim 7 (depends on 1) The method according to claim 1, further comprising: the at least temporarily separating partitions or applications from one another using the quality of service and/or the at least one parameter characterizing the quality of service, wherein the at least one application sets the quality of service, the quality of service being characterizable by the latency and/or bandwidth for at least one peripheral component. ### Claim 8 (depends on 1) The method according to claim 1, further comprising: the securing of the deterministic data exchange between the plurality of applications running on the computer or the device using the memory region assignment implemented using the at least one memory protection unit. ### Claim 9 (depends on 1) The method according to claim 1, further comprising: accelerating a start-up of the device using at least one hardware accelerator unit. ### Claim 10 (depends on 1) The method according to claim 1, further comprising: the placing of the orders by plurality of partitions or applications which cannot be overwritten or influenced respectively by other partitions or applications using the mechanism implemented in the at least one hardware module or peripheral component. ### Claim 11 (depends on 1) The method as recited in claim 1, wherein the method is used for the at least one of: (a) the enabling of the deterministic runtime behavior of the at least some applications of the device, and (b) the avoiding of the new homologation for the first application when changing the at least one further application. ### Claim 12 A device for controlling a technical system of a motor vehicle, the device configured to perform a method, the method comprising: resetting at least one hardware component of the device, wherein a) the device includes a plurality of cores and the resetting includes a resetting of a single core of the plurality of cores, such that the resetting of the single core does not influence one or more further cores of the plurality of cores, and/or b) a resetting of modules of the device and/or of any existing external circuits is carried out such that several independent applications can be operated and the several independent applications do not influence one another; wherein the device includes at least one of the following features (i)-(ii): (i) the method is used for at least one of the following: (a) enabling a deterministic runtime behavior of at least some applications of the device; and (b) avoiding a new homologation for one application when changing at least one further application; and (ii) the method further comprises at least one of the following steps: (a) forwarding information characterizing an operating state with regard to a functional safety of an application to at least one further unit, the at least one further unit being a unit arranged externally to the device; (b) at least temporarily separating partitions or applications from one another using a quality of service and/or at least one parameter characterizing the quality of service, wherein at least one application sets the quality of service, the quality of service being characterizable by latency and/or bandwidth for at least one peripheral component; (c) securing a deterministic data exchange between a plurality of applications running on a computer or the device using a memory region assignment implemented using at least one memory protection unit; and (d) placing orders by a plurality of partitions or applications which cannot be overwritten or influenced respectively by other partitions or applications using a mechanism implemented in at least one hardware module or peripheral component. ### Claim 13 A non-transitory computer-readable storage medium on which are stored instructions for controlling a technical system of a motor vehicle, the instructions, when executed by a computer, causing the computer to perform a method, the method comprising the following steps: resetting at least one hardware component of a device, wherein a) the device includes a plurality of cores and the resetting includes a resetting of a single core of the plurality of cores, such that the resetting of the single core does not influence one or more further cores of the plurality of cores, and/or b) a resetting of modules of the device and/or of any existing external circuits is carried out such that several independent applications can be operated and the several independent applications do not influence one another; wherein the non-transitory computer-readable storage medium includes at least one of the following features (i)-(ii): (i) the method is used for at least one of the following: (a) enabling a deterministic runtime behavior of at least some applications of the device; and (b) avoiding a new homologation for one application when changing at least one further application; and (ii) the method further comprises at least one of the following steps: (a) forwarding information characterizing an operating state with regard to a functional safety of an application to at least one further unit, the at least one further unit being a unit arranged externally to the device; (b) at least temporarily separating partitions or applications from one another using a quality of service and/or at least one parameter characterizing the quality of service, wherein at least one application sets the quality of service, the quality of service being characterizable by latency and/or bandwidth for at least one peripheral component; (c) securing a deterministic data exchange between a plurality of applications running on a computer or the device using a memory region assignment implemented using at least one memory protection unit; and (d) placing orders by a plurality of partitions or applications which cannot be overwritten or influenced respectively by other partitions or applications using a mechanism implemented in at least one hardware module or peripheral component.