System unit including a first actuator system and a second actuator system

A system unit for an at least semi-automated mobile platform, comprising:

• a first actuator system;
• and
• a second actuator system;
• wherein each of the first actuator system and the second actuator system including at least one auxiliary operating mode and one emergency operating mode, and wherein each respective actuator system of the first actuator system and the second actuator system being configured and coupled to:
• switch into an inactive operating mode when a critical error is identified in the respective actuator system;
• and
• switch into an auxiliary operating mode when one of the first and second actuator systems switches into the inactive operating mode, the auxiliary operating mode being configured to carry out at least portions of a functionality of the respective actuator system which is in the inactive operating mode;
• and
• switch into an emergency operating mode when a critical error is identified in the respective actuator system in the auxiliary operating mode.

A method for controlling a system unit for an at least semi-automated mobile platform including a first actuator system and a second actuator system, each respective actuator system of the first and second actuator system including an auxiliary operating mode and an emergency operating mode, the method comprising the following steps:

• switching the respective actuator system into an inactive operating mode when a critical error is identified in the respective actuator system;
• switching the respective actuator system into an auxiliary operating mode when one of the first and second actuator systems switches into the inactive operating mode, the auxiliary operating mode configured to carry out at least portions of the functionality of the respective actuator system which is in the inactive operating mode;
• and
• switching the respective actuator system which is in the auxiliary operating mode, into an emergency operating mode when a critical error is identified in the respective actuator system which is in the auxiliary operating mode.

A device configured to control a system unit for an at least semi-automated mobile platform including a first actuator system and a second actuator system, each respective actuator system of the first and second actuator system including an auxiliary operating mode and an emergency operating mode, the device configured to:

• switch the respective actuator system into an inactive operating mode when a critical error is identified in the respective actuator system;
• switch the respective actuator system into an auxiliary operating mode when one of the first and second actuator systems switches into the inactive operating mode, the auxiliary operating mode configured to carry out at least portions of the functionality of the respective actuator system which is in the inactive operating mode;
• and
• switch the respective actuator system which is in the auxiliary operating mode, into an emergency operating mode when a critical error is identified in the respective actuator system which is in the auxiliary operating mode.

A non-transitory machine-readable memory medium on which is stored a computer program method for controlling a system unit for an at least semi-automated mobile platform including a first actuator system and a second actuator system, each respective actuator system of the first and second actuator system including an auxiliary operating mode and an emergency operating mode, the computer program, when executed by a computer, causing the computer to perform the following steps:

• switching the respective actuator system into an inactive operating mode when a critical error is identified in the respective actuator system;
• switching the respective actuator system into an auxiliary operating mode when one of the first and second actuator systems switches into the inactive operating mode, the auxiliary operating mode configured to carry out at least portions of the functionality of the respective actuator system which is in the inactive operating mode;
• and
• switching the respective actuator system which is in the auxiliary operating mode, into an emergency operating mode when a critical error is identified in the respective actuator system which is in the auxiliary operating mode.