Measurement data evaluation for vehicle-dynamics systems having protection of the intended function

A method for evaluating measurement data that are obtained by a plurality of sensors through physical observation of a surrounding environment and/or of one or more operating states of a vehicle, for a driving dynamics system that is configured to carry out at least one specified driving task by controlling at least one actuator of the vehicle in an at least partly automated manner, the method comprising the following steps:

• processing, by a function evaluation module, the measurement data originating from sensors of a first group of the plurality of sensors, to form a function signal that, when the function signal is supplied to the driving dynamics system, causes the driving dynamics system to carry out the driving task;
• processing, by a first safety evaluation module, the measurement data originating from a second group of the plurality of sensors, to form a first safety signal that, when the first safety signal is supplied to the driving dynamics system, causes the driving dynamics system to prevent a specified undesired event of the vehicle, the second group containing a proper subset of the first group;
• and
• aggregating the function signal with the first safety signal to form a control signal that is capable of being output to the driving dynamics system.

A machine-readable data carrier on which is stored a computer program for evaluating measurement data that are obtained by a plurality of sensors through physical observation of a surrounding environment and/or of one or more operating states of a vehicle, for a driving dynamics system that is configured to carry out at least one specified driving task by controlling at least one actuator of the vehicle in an at least partly automated manner, the computer program, when executed by one or more computers and/or one or more control device and/or one or more embedded system, cause the one or more computers and/or one or more control device and/or one or more embedded system to perform the following steps:

• processing, by a function evaluation module, the measurement data originating from sensors of a first group of the plurality of sensors, to form a function signal that, when the function signal is supplied to the driving dynamics system, causes the driving dynamics system to carry out the driving task;
• processing, by a first safety evaluation module, the measurement data originating from a second group of the plurality of sensors, to form a first safety signal that, when the first safety signal is supplied to the driving dynamics system, causes the driving dynamics system to prevent a specified undesired event of the vehicle, the second group containing a proper subset of the first group;
• and
• aggregating the function signal with the first safety signal to form a control signal that is capable of being output to the driving dynamics system.

A computer and/or control device and/or embedded system configured to evaluate measurement data that are obtained by a plurality of sensors through physical observation of a surrounding environment and/or of one or more operating states of a vehicle, for a driving dynamics system that is configured to carry out at least one specified driving task by controlling at least one actuator of the vehicle in an at least partly automated manner, the computer and/or control device and/or embedded system configured to:

• process, by a function evaluation module, the measurement data originating from sensors of a first group of the plurality of sensors, to form a function signal that, when the function signal is supplied to the driving dynamics system, causes the driving dynamics system to carry out the driving task;
• process, by a first safety evaluation module, the measurement data originating from a second group of the plurality of sensors, to form a first safety signal that, when the first safety signal is supplied to the driving dynamics system, causes the driving dynamics system to prevent a specified undesired event of the vehicle, the second group containing a proper subset of the first group;
• and
• aggregate the function signal with the first safety signal to form a control signal that is capable of being output to the driving dynamics system.