System for providing an output signal based on a generated surroundings model of surroundings of a mobile platform

A control unit for use in a vehicle, comprising:

• a system for providing an output signal based on a generated surroundings model of surroundings of the vehicle, including:
• a first subsystem configured to generate the output signal, the first subsystem being configured to be coupled for signaling to a first sensor system;
• a second subsystem configured to generate the output signal, the second subsystem configured to be coupled for signaling to the first sensor system, wherein the second subsystem is configured to redundantly provide a functionality of the first subsystem;
• a third subsystem configured to generate the output signal, wherein the third subsystem is configured to be coupled for signaling to a second sensor system, and wherein the third subsystem is configured to redundantly provide a functionality of the first subsystem and/or of the second subsystem;
• a first comparison system coupled for signaling to an output of the first subsystem and to an output of the second subsystem and to an output of the third subsystem;
• a second comparison system coupled for signaling to the output of the first subsystem and to the output of the second subsystem and to the output of the third subsystem;
• wherein the first comparison system and the second comparison system are coupled for signaling;
• and
• where the first comparison system and/or the second comparison system are configured to:
• (i) recognize at least one fault in the first subsystem and/or a fault in the second subsystem and/or a fault in the third subsystem, and/or (ii) identify a faulty subsystem;
• a first input for providing a signal of the first sensor system;
• a second input for providing a signal of the second sensor system;
• a first computing unit, wherein the first computing unit is set up to generate the surroundings model of the surroundings of the vehicle using the first subsystem and/or the second subsystem;
• a second computing unit, wherein the second computing unit is set up to generate the surroundings model of the surroundings of the vehicle using the third subsystem;
• a first output configured to provide control signals of the first computing unit to the actuator system;
• a second output configured to provide control signals of the second computing unit to the actuator system;
• wherein the first computing unit includes the first comparison system in order to selectively provide the output signal of the first subsystem or of the second subsystem at the first output;
• and
• wherein the second computing unit includes the second comparison system in order to selectively provide an output signal of the third subsystem at the second output.

An at least partially automated vehicle, comprising:

• a control unit including:
• a system for providing an output signal based on a generated surroundings model of surroundings of the vehicle, including:
• a first subsystem configured to generate the output signal, the first subsystem being configured to be coupled for signaling to a first sensor system;
• a second subsystem configured to generate the output signal, the second subsystem configured to be coupled for signaling to the first sensor system, wherein the second subsystem is configured to redundantly provide a functionality of the first subsystem;
• a third subsystem configured to generate the output signal, wherein the third subsystem is configured to be coupled for signaling to a second sensor system, and wherein the third subsystem is configured to redundantly provide a functionality of the first subsystem and/or of the second subsystem;
• a first comparison system coupled for signaling to an output of the first subsystem and to an output of the second subsystem and to an output of the third subsystem;
• a second comparison system coupled for signaling to the output of the first subsystem and to the output of the second subsystem and to the output of the third subsystem;
• wherein the first comparison system and the second comparison system are coupled for signaling;
• and
• where the first comparison system and/or the second comparison system are configured to:
• (i) recognize at least one fault in the first subsystem and/or a fault in the second subsystem and/or a fault in the third subsystem, and/or (ii) identify a faulty subsystem;
• a first input for providing a signal of the first sensor system;
• a second input for providing a signal of the second sensor system;
• a first computing unit, wherein the first computing unit is set up to generate the surroundings model of the surroundings of the vehicle using the first subsystem and/or the second subsystem;
• a second computing unit, wherein the second computing unit is set up to generate the surroundings model of the surroundings of the vehicle using the third subsystem;
• a first output configured to provide control signals of the first computing unit to the actuator system;
• a second output configured to provide control signals of the second computing unit to the actuator system;
• wherein the first computing unit includes the first comparison system in order to selectively provide the output signal of the first subsystem or of the second subsystem at the first output;
• and
• wherein the second computing unit includes the second comparison system in order to selectively provide an output signal of the third subsystem at the second output.

A method, comprising:

• providing a system for providing an output signal based on a generated surroundings model of surroundings of a mobile platform, the system including:
• a first subsystem configured to generate the output signal, the first subsystem being configured to be coupled for signaling to a first sensor system;
• a second subsystem configured to generate the output signal, the second subsystem configured to be coupled for signaling to the first sensor system, wherein the second subsystem is configured to redundantly provide a functionality of the first subsystem;
• a third subsystem configured to generate the output signal, wherein the third subsystem is configured to be coupled for signaling to a second sensor system, and wherein the third subsystem is configured to redundantly provide a functionality of the first subsystem and/or of the second subsystem;
• a first comparison system coupled for signaling to an output of the first subsystem and to an output of the second subsystem and to an output of the third subsystem;
• a second comparison system coupled for signaling to the output of the first subsystem and to the output of the second subsystem and to the output of the third subsystem;
• wherein the first comparison system and the second comparison system are coupled for signaling;
• and
• where the first comparison system and/or the second comparison system are configured to:
• (i) recognize at least one fault in the first subsystem and/or a fault in the second subsystem and/or a fault in the third subsystem, and/or (ii) identify a faulty subsystem;
• and
• generating the surroundings model of surrounding of a module platform using the provided system.