Dispenser device and method

Abstract

The invention discloses a distributor device (100, 300) for a data network system in a vehicle, the distributor device comprising: a certain number of first communication interfaces (101, 102, 103) capable of coupling with communication partners (150, 151, 152) of a first priority; a certain number of second communication interfaces (153, 154, 155) capable of coupling with communication partners (153, 154, 155, 156) of a second priority, wherein the second priority is lower than the first priority; a coupling mechanism (107, 207, 307) constructed The invention also provides a method for coupling the first communication interface (101, 102, 103) and the second communication interface (104, 105, 106) to each other in a communicative manner; and a monitoring mechanism (108, 208) configured to monitor the communication implemented via the second communication interface (104, 105, 106) and to separate the first communication interface (101, 102, 103) from the corresponding second communication interface (104, 105, 106) in terms of communication when a communication fault occurs at one of the second communication interfaces (104, 105, 106). In addition, the invention discloses a corresponding method.

Description

Technical Field

[0001] The invention relates to a distributor device for a data network system. The invention also relates to a corresponding method. Background Art

[0002] The present invention will be described below mainly in conjunction with a bus system in a vehicle. It goes without saying that the present invention can also be used in bus systems outside of a vehicle.

[0003] In modern vehicles, electrical and electronic systems are used to an ever-increasing extent, which can, for example, assist the driver in driving the vehicle or can drive the vehicle autonomously. Therefore, a large number of control devices are used in such vehicles, which are usually networked via digital bus systems for data communication.

[0004] In particular, systems which drive the vehicle autonomously or which at least temporarily take over control tasks from the driver are subject to increased safety requirements. Therefore, the vehicle must be transferred to a safe state that does not lead to an accident, for example, in the event of a failure of the system which drives the vehicle autonomously. Such safety-critical systems are also referred to as FuSi systems or components (FuSi=functional safety). Systems which are not classified as safety-critical can also be referred to as QM systems or QM components (QM-quality management).

[0005] In the vehicle, it must be ensured that the functions of the QM system or the FuSi system cannot be affected. This greatly limits the design possibilities when designing the vehicle's onboard power system. For example, for the widely used CAN bus, a defective user in a CAN bus with a linear topology or a star-partial bus topology can disrupt the communication of all other users. Therefore, for such a CAN bus, it is not possible to operate the QM system and the FuSi system on a common bus. Due to the correlation in the event of a fault, it is not possible to save cables by using a common medium.

[0006] Furthermore, physical conditions must also be taken into account when designing the onboard electrical system. For example, fiber-optic connection points or star points lead to impedance jumps in the data line and thus to a deterioration in the signal quality. This is particularly critical for data transmission with high or even flexible data rates, such as in CAN-FD systems. Summary of the invention

[0007] It is therefore an object of the present invention to provide an improved onboard electrical system for a vehicle using measures that are as simple as possible in terms of design.

[0008] The object is achieved by the subject matter of the independent claims. Advantageous developments of the invention are described in the dependent claims, the description and the drawings. In particular, an independent claim of one claim category can also be developed similarly to a dependent claim of another claim category.

[0009] According to the present invention, a distributor device for a data network system in a vehicle comprises: a certain number, namely one or more, of first communication interfaces that can be coupled to communication partners of a first priority; a certain number, namely one or more, of second communication interfaces that can be coupled to communication partners of a second priority, wherein the second priority is lower than the first priority; a coupling mechanism, which is configured to communicatively couple the first communication interface and the second communication interface to each other in such a way that the communication users are unaware of the presence of the distributor device during normal operation; and a monitoring mechanism, which is configured to monitor the communication implemented via the second communication interfaces and, when a communication fault occurs at one of the second communication interfaces, at least communicatively separate the first communication interface from the corresponding second communication interface, i.e., for example, isolate or communicatively separate the communication interface with the fault from the communication interface without the fault, so that the communication of the first communication interface is not affected by the fault of the second communication interface.

[0010] The method according to the present invention for communicating via a distributor device in a data network system in a vehicle comprises the following steps: communicating with communication partners of a first priority via a certain number of first communication interfaces; communicating with communication partners of a second priority via a certain number of second communication interfaces, wherein the second priority is lower than the first priority; coupling the first communication interface with the second communication interface in a communication connection; monitoring the communication performed via the second communication interface; and, in the event of a communication fault at one of the second communication interfaces, separating at least the first communication interface from the corresponding second communication interface in terms of communication.

[0011] Further embodiments and developments emerge from the dependent claims and from the description with reference to the drawings.

[0012] In one embodiment, the coupling mechanism can have a switching unit, which is coupled to the first communication interface and the second communication interface. In addition, each first communication interface and each second communication interface can have a transceiver coupled to the switching unit. The switching unit can be configured to output data of a communication message received via the first communication interface on the first communication interface and the second communication interface as a communication message and to output data of a communication message received via the second communication interface on the first communication interface and the second communication interface as a communication message.

[0013] It goes without saying that the switching unit can be, for example, a passive or logic-based switching unit which provides an electrical connection between the first communication interface and the second communication interface, i.e., for example, on the basis of discrete gates or gates implemented in an FPGA, but always without processing based on a computing unit or software. Such a coupling mechanism works without delay. In such an embodiment of the coupling mechanism, the monitoring mechanism can be arranged, for example, between the switching unit and the first and second communication interface.

[0014] The individual transceivers can be coupled to one another via the switching unit in such a way that an output signal of one transceiver is transmitted as an input signal for another transceiver. For example, the individual transceivers can be coupled to one another via the switching unit in such a way that a dominant signal level of one transceiver overrides a disadvantageous signal level of another transceiver. For example, a voltage level of 0 V can be suitable as a dominant signal in contrast to a voltage level of, for example, 12 V or the like. Thus, a dominant voltage level can be generated, for example, by connecting the corresponding signal line to a ground line.

[0015] Typically, a transceiver, such as a CAN transceiver, has an RX output for outputting a signal loaded on a bus and a TX input for receiving a signal to be transmitted. The switching unit can have an electrical connector for each transceiver, which electrically couples the RX output of the transceiver and its TX input with the RX output and TX input of another transceiver. Therefore, the switching unit can, for example, have only one wire that establishes such an electrical connection. It goes without saying that, for example, the connection between the signal line and the RX output can be protected by a diode to prevent the feed-in of the signal. In addition, for example, a pull-up resistor can be provided to set the level in the switching unit to an inferior level when there is no loaded signal.

[0016] As an alternative, the switching unit can be implemented in a logic circuit assembly. Such a switching unit can, for example, have a signal converter that contacts two connectors of the corresponding transceiver. The signal converters can be coupled to each other in the switching unit as described above so that each signal converter either outputs a dominant signal or an inferior signal to another signal converter. As long as no signal converter outputs a dominant signal, each signal converter will then load the inferior signal onto the TX input of the corresponding transceiver. If one of the signal converters receives a dominant signal through the RX output of the corresponding transceiver, it transmits this dominant signal to other signal converters. These signal converters will then also load the dominant signal onto the TX input of the corresponding transceiver. The functions described here of the switching unit can, for example, be implemented as a logic circuit in an FPGA. The functions described here of the switching unit can, for example, be implemented as a logic circuit in an ASIC.

[0017] If the coupling mechanism is designed as a computer-supported or computer-based coupling mechanism, for example as a microcontroller with corresponding software or firmware, the switching unit can be designed as a function of the software or firmware. The active coupling mechanism can be coupled to the respective transceiver, for example, via an I / O port. It goes without saying that the monitoring mechanism can be switched between the transceiver and the active coupling mechanism accordingly. Then, for example, the presence of a dominant signal or a weak signal at the connection of the active coupling mechanism can be checked in the software or firmware and the corresponding dominant signal can be transmitted and output.

[0018] The transceiver corresponds to the respective data network system used and converts the digital data into voltages and currents on the data line according to the respective standard (PHY layer). The term "data line" includes within the scope of the invention any data line that can be used in a data network system. The term "data line" therefore includes lines with one, two or more individual conductors.

[0019] If the distributor device is used, for example, in a CAN bus, the transceiver is designed accordingly as a CAN transceiver. On the output side toward the coupling device, the transceiver can have, for example, a serial or parallel digital interface for received data Rx and data to be transmitted Tx. The distributor device can also be used, for example, for Ethernet, in particular in a multi-point structure mode, such as 10-BASE-T1s. In this case, a suitable MDI is used instead of a CAN transceiver, and Ethernet IDs are observed instead of CAN IDs, which are also transmitted at the beginning of a message on a common medium.

[0020] In the case of a computer-based coupling device, the monitoring device can be designed, for example, as a component or function of the active coupling device, for example software or firmware.

[0021] As an alternative, the monitoring device can be arranged accordingly, for example, between the transceiver and the switching unit. It goes without saying that the monitoring device can also be composed of a plurality of individual components for this purpose, for example. For example, a dedicated monitoring logic circuit can be provided for each transceiver. Furthermore, it goes without saying that the monitoring device or a dedicated monitoring logic circuit element can be implemented together with the coupling device, for example, in an FPGA or a microcontroller.

[0022] The switching unit can also be constructed as a hybrid structure consisting of active and passive units, for example. The passive function of the switching unit can be, for example, to transmit the signal level received by each transceiver or by a monitoring mechanism without analyzing the corresponding content. The switching unit can therefore be understood, for example, as an enhanced star coupler or star point, which has a transceiver for each branch. Through this function of the switching unit, for example, it can be ensured that data can be received and sent simultaneously by each transceiver for the CAN bus as a data network system. As a result, on the CAN bus, despite the inserted distributor device, for example, arbitration can be performed with all users. The distributor device is transparent or invisible to each communication partner.

[0023] The active part of the switching unit may be that individual connections can be interrupted in a targeted manner. For example, one of the first or second communication interfaces can be disconnected in a targeted manner from the rest of the data network system if a communication partner is found to send an erroneous message at this communication interface.

[0024] By means of the coupling mechanism and in particular the switching unit in combination with the monitoring mechanism, the communication of a high-priority system or communication partner can be protected. It is thus possible for a high-priority communication partner to share a data network system with a low-priority communication partner. The core concept in this regard is the monitoring of the communication, that is, the identification and isolation of faults.

[0025] In this embodiment with its own transceiver, the individual branches of the data network system are decoupled from each other. This causes fewer problems related to signal transmission, thereby providing more diverse feasible solutions in the architecture of the bus system. This in turn can achieve a significant saving of wires. In particular, for example, a star topology or a hybrid topology with multiple distributor devices can be constructed for the data network system without causing a deterioration in signal quality. The data network system is divided into individual sub-network systems by the distributor device and these sub-network systems are monitored separately. The switching unit with a monitoring mechanism monitors the information flow and maintains the communication for the communication partner at the fault-free communication interface even in the event of a fault.

[0026] At the hardware level, a point-to-point connection is created, which is electrically optimal for signal quality. Impedance continuity is significantly higher in point-to-point connections than in other connections, such as star topologies or rings. Problems with signal quality, such as those in CAN-FD, are avoided, especially at higher frequencies. Thus, neither a reduction in signal quality nor a suppression of signal amplitude occurs in the data network system.

[0027] In another specific embodiment, a decoupling element may be arranged between at least one of the transceivers and the switching unit, which decoupling element may be designed to electrically decouple the respective transceiver from the data line and / or to disconnect the data line in a controlled manner.

[0028] If the individual communication interfaces are electrically decoupled, electrical faults or electrical disturbances, such as, for example, overvoltages, in the individual branches of the data network system cannot extend beyond the communication interfaces and the coupling means. Of course, only selected transceivers or also all transceivers can be electrically decoupled. For example, separation using appropriate switching elements serves to protect the remaining buses from faults or to prevent faults from spreading.

[0029] In one embodiment, the monitoring device can be configured to check, when outputting data at one of the first communication interfaces or at one of the second communication interfaces, whether the data output to the corresponding transceiver corresponds to the signal level present on the corresponding data line. The monitoring device can be configured to separate or isolate the corresponding communication interface in terms of communication if the data output to the corresponding transceiver does not correspond to the signal level present on the corresponding data line.

[0030] Thus, the monitoring device can detect, for example, faults of individual transceivers and data lines. For example, a transceiver may not convert predefined data into corresponding signal levels on the data lines of the corresponding branches of the data network system when a corresponding defect occurs. Other faults that may lead to such a state are, for example, short circuits of data lines.

[0031] If the monitoring device detects such a fault, it can separate or isolate the corresponding branch of the data network system, ie the corresponding communication interface, with regard to communication.

[0032] In another embodiment, the monitoring device can be constructed to check, during monitoring, for communication messages received via one of the first communication interfaces and / or one of the second communication interfaces whether the corresponding received communication message is not defective in form and / or whether the corresponding received communication message has an identification code released for the corresponding communication partner and / or whether the corresponding received communication message does not exceed a predetermined maximum length.

[0033] As already explained above, the monitoring device can check whether the message is free of defects as soon as it arrives at one of the communication interfaces. "Free of defects" can mean that the communication message is checked for consistency according to predefined rules. The check can be carried out in particular in parallel with the reception of the communication message.

[0034] Thus, the monitoring device can already detect, for example, during the reception of a message, whether the message complies with formal requirements. The formal requirements can relate, for example, to compliance with predetermined intervals between messages, predetermined byte lengths for the respective bus system, etc. Form defects can thus be detected at the beginning of the transmission of a communication message, in particular even before, for example, the transmission of a complete identification code or ID of the communication message.

[0035] Bus systems, such as the CAN bus, support IDs or identification codes for individual communication messages. For such bus systems, the monitoring device can, for example, check when receiving a communication message via one of the second communication interfaces whether the ID sent can actually be sent by the corresponding communication partner. In the event of a fault, for example, a low-priority communication partner can send a message with an incorrect high-priority ID at one of the second communication interfaces and thus overwrite the message of the high-priority communication partner at one of the first communication interfaces. As a result, the message of the high-priority communication partner is overwritten and cannot be transmitted.

[0036] When receiving communication messages via one of the second communication interfaces, the monitoring device can also check, for example, whether the respective communication message complies with a predetermined maximum length. This serves to detect so-called "babbling idiot" fault situations and to avoid disruptions to the data network system. A "babbling idiot" is generally a communication partner which, due to a fault, sends messages to the data network system in an uncontrolled manner.

[0037] In another embodiment, the monitoring device can be designed to check whether the received communication message has a predefined message priority when receiving a communication message via one of the first communication interfaces, and if the received communication message has the predefined message priority, prohibit the transmission of the communication message by the second communication interface for the duration of the transmission of the received communication message. The prohibition can be carried out in such a way that the communication of the high-priority communication partner itself is not disrupted in the event of a fault of the low-priority communication partner. For this purpose, for example, the transmission of a signal by the corresponding transceiver to the coupling device can be prevented.

[0038] A high-priority communication partner at the first communication interface can send communication messages with different message priorities. Therefore, a high-priority communication partner can send not only communication messages with low message priorities but also communication messages with high message priorities. Here, the communication messages with high message priorities may, for example, relate to safety-related functions. And the communication messages with low message priorities may, for example, relate to non-critical functions. Therefore, communication messages sent by high-priority communication partners are not necessarily treated equally. The concept of "predetermined message priority" may here relate to a single priority or a group or a range of priorities. Therefore, the message priority may just correspond to the predetermined message priority or be within a predetermined range or a predetermined group.

[0039] However, if a high-priority communication partner sends a communication message with a high priority, the monitoring device can detect this. During the transmission of such a communication message, the monitoring device can prohibit the transmission of the communication message at the second communication interface.

[0040] For the CAN bus, arbitration is implicitly performed when transmitting communication messages. At the beginning of the communication message, the ID of the communication message is transmitted for arbitration. The ID also corresponds to the priority of the message. If two communication partners start transmission at the same time, the first dominant byte of one ID overwrites the corresponding inferior byte of the other ID. The communication message - the ID of which has the first inferior byte - is therefore identified as a communication message with a lower priority. The corresponding communication partner then ends its transmission so that the communication message with the higher ID can be sent without hindrance. Therefore, in order to transmit a communication message with a high priority, an ID with a high priority (= low ID, such as 0) is also pre-given to provide it with priority during transmission.

[0041] The monitoring device can thus check with which message priority one of the high-priority systems sends a communication message. If the message priority is known or identified as high priority, communication to the communication partner is blocked at the second communication interface for the duration of the communication message. However, communication can continue to be allowed at the first communication interface, since one of the communication partners can send a communication message with an even higher message priority at the other first communication interface.

[0042] In yet another embodiment, the distributor device can have a separation element for each first communication interface and each second communication interface, and the separation element can be configured to controllably isolate the corresponding communication interface. The monitoring device can be configured to correspondingly control the corresponding separation element in order to isolate one of the first communication interfaces or one of the second communication interfaces.

[0043] The separating element can be arranged, for example, as a dedicated switch or the like on the respective transceiver or between the respective signal converter and the switching unit.

[0044] It goes without saying that the separating element and components of the monitoring device can also be arranged together in or on a corresponding signal converter, for example.

[0045] In another embodiment, the coupling mechanism can have a signal line, which can be coupled to a power supply via a pull-up resistor. The signal line can be coupled to the transmit input of the communication interface via a monitoring mechanism, that is, for example, coupled to the TX input of the transceiver. In addition, the signal line can be coupled to the receive input of the communication interface via a diode in the conduction direction, that is, for example, coupled to the RX input of the transceiver. It goes without saying that only separate components for communication, such as the monitoring mechanism, can be arranged between the signal line and the communication interface, that is, for example, a switch element for the transmit input and a switch element for the receive input. Other elements of the monitoring mechanism, such as an interface logic circuit unit or similar devices, can be arranged separately from these switch elements. BRIEF DESCRIPTION OF THE DRAWINGS

[0046] The advantageous embodiments of the present invention are explained below with reference to the accompanying drawings, wherein:

[0047] Figure 1 A block diagram showing an embodiment of a dispenser device according to the present invention;

[0048] Figure 2 A block diagram showing a cut-out portion of an embodiment of a dispenser device according to the present invention;

[0049] Figure 3 A block diagram showing another embodiment of a dispenser device according to the present invention;

[0050] Figure 4 shows a diagram with possible signal profiles in an exemplary embodiment of a distributor device according to the invention;

[0051] Figure 5 A flow chart showing an embodiment of the method according to the present invention;

[0052] Figure 6 A flow chart showing an embodiment of a monitoring process according to the method of the present invention;

[0053] Figure 7 A flow chart showing an embodiment of a monitoring process according to the method of the present invention;

[0054] and Figure 8 A flow chart showing an exemplary embodiment of a monitoring sequence of the method according to the present invention.

[0055] The drawings are merely schematic and serve only to explain the invention. Identical or identically acting elements are consistently provided with the same reference numerals. DETAILED DESCRIPTION

[0056] Figure 1 A block diagram of an embodiment of a distributor device 100 is shown. The distributor device 100 can be used, for example, in a data network system in a vehicle, such as a CAN bus. The distributor device 100 has three first communication interfaces 101, 102, 103 and three second communication interfaces 104, 105, 106 as an example. It goes without saying that any other number of first communication interfaces and / or any other number of second communication interfaces are also possible. A coupling mechanism 107 couples the first communication interfaces 101, 102, 103 and the second communication interfaces 104, 105, 106 to each other in a communicative manner. A monitoring mechanism 108 is arranged between the first communication interfaces 101, 102, 103 and the second communication interfaces 104, 105, 106.

[0057] The first communication interfaces 101, 102, 103 are respectively coupled to a first priority communication partner 150, 151, 152. The second communication interfaces 104, 105, 106 are respectively coupled to a second priority communication partner 153, 154, 155. The second priority is lower than the first priority. This means that the first priority communication partners 150, 151, 152 can be classified as more important than the second priority communication interfaces 153, 154, 155. The first priority communication partners 150, 151, 152 can therefore be classified as high priority or safety-related, for example, while the second priority communication interfaces 153, 154, 155 can only provide convenience functions, for example. It goes without saying that more than one communication partner 150, 151, 152, 153, 154, 155 can be connected to each of the first communication interfaces 101, 102, 103 and the second communication interfaces 104, 105, 106. For example, a network system branch with multiple users can be connected to one or more of the first communication interfaces 101, 102, 103 and the second communication interfaces 104, 105, 106.

[0058] The coupling device 107 represents a kind of star point between the respective first communication interface 101, 102, 103 and the second communication interface 104, 105, 106. The coupling device thus couples these communication interfaces to one another in such a way that a signal transmission is possible between the first communication interface 101, 102, 103 and the second communication interface 104, 105, 106. The coupling device is transparent to the respective communication partners 150, 151, 152, 153, 154, 155 and allows a delay-free communication between the respective communication partners 150, 151, 152, 153, 154, 155.

[0059] Thus, the communication partners 150, 151, 152, 153, 154, 155 can communicate with each other via the coupling mechanism 107. As already explained above, however, the first priority communication partners 150, 151, 152 are classified as high priority or safety-related. Thus, in the vehicle, for example, it should be ensured that the second priority communication partners 153, 154, 155 cannot interfere with the communication of the first priority communication partners 150, 151, 152.

[0060] Thus, the monitoring device 108 monitors the communication implemented via the second communication interfaces 104, 105, 106. When a communication fault occurs at one of the second communication interfaces 104, 105, 106, the monitoring device 108 can then at least isolate the first communication interface 101, 102, 103 from the corresponding second communication interface 104, 105, 106 in which the fault occurred. It goes without saying that the monitoring device 108, for example, only isolates the second communication interface 104, 105, 106 in which the fault occurred. Thus, the first priority communication partner 150, 151, 152 and the second priority communication partner 153, 154, 155 that is not connected to the second communication interface 104, 105, 106 with the fault continue to communicate with each other. It goes without saying that the monitoring device 108 can also monitor the first communication interface 101, 102, 103 for the occurrence of a fault and isolate it in the event of a fault.

[0061] The monitoring device 108 can, for example, check the received communication messages to see whether the respective received communication messages are not defective in form, i.e., for example, comply with predetermined time intervals and signal lengths. In addition, the monitoring device 108 can, for example, monitor whether the respective received communication messages have an identification code released by the respective communication partner 150, 151, 152, 153, 154, 155 or whether the respective received communication messages do not exceed a predetermined maximum length. The monitoring device 108 can of course check other formal aspects of the received communication information.

[0062] When receiving a communication message via one of the first communication interfaces 101, 102, 103, the monitoring device 108 can also check whether the received communication message has a predefined message priority, which identifies this communication message as having a high priority. If the received communication message has a predefined message priority, the monitoring device 108 can prohibit the transmission of communication messages by the second communication interface 104, 105, 106 for the duration of the transmission of the received communication message. The second-priority communication partner 153, 154, 155 therefore cannot interfere with the transmission of the high-priority communication message.

[0063] In addition, the monitoring device 108 can check whether the data outputted at one of the first communication interfaces 101, 102, 103 or at one of the second communication interfaces 104, 105, 106 corresponds to the signal level applied to the corresponding data line. For example, for the CAN bus, a signal with a positive voltage level on the data line cannot be output if the corresponding wire has a short circuit to ground, the data lines of the CAN bus are short-circuited to each other, or the corresponding interface is defective. Other faults are possible. If such a fault occurs, the monitoring device 108 can also isolate the corresponding communication interface 101, 102, 103, 104, 105, 106.

[0064] Figure 2 A cutout of an embodiment of a distributor device according to the invention is shown, which represents the connection of the distributor device to a data line 215. The data line 215 can be, for example, the high and low conductors of a CAN bus, also referred to as CAN-H and CAN-L. Corresponding terminating resistors are drawn as an example and may be necessary depending on the application, depending on the selected communication medium and communication standard. It goes without saying that the distributor device according to the invention can also be used with bus systems that use only data lines. In such a system, for example, a common ground line is used as a return line for the signal.

[0065] The data line 215 is coupled to the transceiver 210 via an optional decoupling element 214, which is used to electrically separate the data line 215. The transceiver 210 is connected to the separation element 211 via a transmission line TX and a reception line RX. The separation element 211 is also coupled to the interface logic circuit 212 via the transmission line TX and the reception line RX. Therefore, the separation element 211 can implement a logical decoupling of the corresponding data line 215.

[0066] In addition, the interface logic circuit 212 is coupled to the control input of the separation element 211 and the switching unit 213. Optionally, the interface logic circuit 212 can also be connected to the control input of the decoupling element 214, so that this decoupling element 214 can be disconnected in a controlled manner. For this purpose, the decoupling element 214 can have, for example, a switching element in the data line 215, which can be disconnected when, for example, a fault exists in the distributor device. This is used to not negatively affect the remaining buses on the corresponding transceiver 210 or to prevent the spread of faults. Therefore, the decoupling element 214 can also implement an additional electrical separation.

[0067] exist Figure 22 shows the interface logic circuit 212 and the switching unit 213 as components of the combined coupling device 207 and the monitoring device 208. For example, the combined coupling device 207 and the monitoring device 208 can be implemented in an FPGA.

[0068] Furthermore, it goes without saying that the order of the individual elements shown can be changed. Furthermore, for example, elements can also be removed. For example, the decoupling element 214 can be regarded as a mere optional element. Furthermore, for example, the interface logic 212 can be coupled to the transceiver 210 and the separation element 211 can be arranged between the interface logic 212 and the switching unit 213 or between the decoupling element 214 and the interface logic 212.

[0069] Furthermore, the decoupling element 214 may be integrated, for example, in the corresponding transceiver 210 .

[0070] The interface logic 212 can be functionally designed as a component of the monitoring device 208. Physically, a separate interface logic 212 can be provided for each communication interface. The interface logic 212 monitors the corresponding communication interface according to the functions described for the monitoring device 208 and activates the disconnecting element 211 in the event of a fault. The disconnecting element 211 disconnects the corresponding communication interface during corresponding activation, that is, prevents further transmission of data or signals via the corresponding communication interface, here via the data lines 215, CAH-H and CAN-L.

[0071] The switching unit 213 is coupled to all first communication interfaces and all second communication interfaces and establishes data communication connections between these communication interfaces. As described above, the switching unit 213 can be configured as a passive or logic-based switching unit 213, which allows a dominant signal received by one of the communication interfaces to overwrite or rewrite the inferior signal of the other communication interface.

[0072] For a CAN bus, a passive or logic-circuit-based switching unit 213 can, for example, only have an electrical connection of the signal lines, ie, TX and RX, and a pull-up resistor for the connection. Figure 3 A detailed explanation is given in.

[0073] Furthermore, parts of the monitoring logic of the monitoring device 208 can also be implemented in the switching unit 213. For example, during the transmission of high-priority messages, a blocking of low-priority communication messages can be implemented in the logic of the switching unit 213.

[0074] Figure 31 shows a block diagram of a distributor device 300. The distributor device 300 has a central coupling mechanism 307. The coupling mechanism is coupled to four separation elements 324, 325, 326, 327 by way of example, respectively, via TX and RX lines, which are also coupled to transceivers 320, 321, 322, 323, respectively. It goes without saying that more or fewer separation elements are possible. The transceivers 320, 321, 322, 323 are designed as CAN bus transceivers 320, 321, 322, 323 and are coupled to CAHH (CAN High) and CANL (CAN Low), respectively.

[0075] The separating elements 324, 325, 326, 327 each have a controllable switching element 328 for the TX line and a controllable switching element 329 for the RX line. For the sake of clarity, only the switching elements of the first separating element 324 are provided with reference numerals here.

[0076] The coupling mechanism 307 has a central signal line 330, which is coupled to a power supply 332 via a resistor 331. The resistor 331 thus acts as a pull-up resistor. The connection between the signal line 330 and the transceivers 320, 321, 322, 323 via the TX conductor has no further elements besides the switching element 328. The connection between the signal line 330 and the transceivers 320, 321, 322, 323 via the RX conductor has a diode 333 between the signal line 330 and the switching element 329 in the conducting direction.

[0077] For the distributor device 300 , the transceivers 320 , 321 are coupled, by way of example, to a high-priority communication partner, and the transceivers 322 , 323 are coupled, by way of example, to a low-priority communication partner.

[0078] In addition, two interface logic circuit units 334, 335 are provided. It goes without saying that the division into two interface logic circuit units 334, 335 is selected only as an example and the functions described in this regard can also be provided in the interface logic circuit, for example. The interface logic circuit units 334, 335 are respectively coupled to the corresponding RX line between the corresponding switching element 329 and the corresponding transceiver 320, 321, 322, 323 for detecting the received signal. It goes without saying that the interface logic circuit units 334, 335 can also be coupled to the TX line or other connections or other elements of the transceiver, such as its diagnostic connection. The interface logic circuit units 334, 335 represent the functions of the monitoring device in this embodiment.

[0079] The interface logic unit 334 is used to monitor the signal level at the transceivers 320, 321 coupled to the high-priority communication partner. If the interface logic unit 334 detects, for example, that a communication message with a high priority is received at one of the transceivers 320, 321, it can prevent the reception of signals by the transceivers 322, 323 by opening the corresponding switching elements in the separating elements 326, 327.

[0080] The interface logic unit 335 is used to monitor the signal level on the transceivers 320, 321 coupled to the low-priority communication partner. The interface logic unit 335 monitors whether one of the transceivers 322 or 323 has attempted to pull the communication network system or the CAN bus to the prevailing level during the high-priority message and then blocked it via the disconnecting elements 326, 327. The interface logic unit 335 can also check, for example, whether a signal level corresponding to the state of the TX line is received via the RX line of the corresponding transceiver 320, 321. In the event of a fault, the two signals may differ from each other. Subsequently, the interface logic unit 335 can, for example, be able to disconnect the two switching elements 328, 329 of the corresponding transceiver 322, 323.

[0081] It goes without saying that interface logic units 334 , 335 can also check received signals for formal correctness, as already explained above.

[0082] For easy understanding, the following description will focus on Figure 1-3 The reference numerals are retained for reference.

[0083] Figure 4 A diagram with possible signal profiles in an embodiment of a distributor device 100, 300 is shown. In this diagram, signal profiles are shown for three channels or sub-buses by way of example. Channel 1 and channel 2 represent channels with high-priority communication partners, while a low-priority communication partner is connected to channel 3. The signal profile on the left represents a fault-free signal profile of a low-priority arbitration. The signal profile on the right represents the signal profile of a high-priority message with a fault on channel 3 during arbitration, for which a signal is received on channel 3 that must not be sent on said channel 3. The diagrams each show the start of communication on the CAN bus and for each channel the signals on the RX line (e.g. channel 1IN) and the TX line (e.g. channel 1OUT). The value 0 represents the dominant signal here.

[0084] At the beginning of each communication on the CAN bus, the so-called interframe interval, i.e. the following time, must be observed, during which no communication may be performed. This is followed by the start of the frame signal, which indicates the start of a new frame. The bytes corresponding to the high-priority part of the ID of the communication message or frame are then transmitted. In the example shown here, three bytes are selected. The low-priority bytes of the ID, the control field and then the user data are transmitted.

[0085] In the diagram on the left, the start of a frame signal is received on channel 1 and output on the other channels at the same time. Subsequently, the transmitter transmits a low-priority ID to channel 1, for which the fourth byte, i.e. the first low-priority byte, is dominant. This byte is also transmitted to the other channels. The fifth byte of the ID is inferior on channel 1. However, the communication partner on channel 3 sends the dominant fifth byte. This communication partner thus "wins" the arbitration and is allowed to transmit its message.

[0086] In the diagram on the right, the start of a frame signal is received again on channel 1. This time, the first byte of the ID, i.e. the first high-priority byte, is also received. This is a sign that a high-priority message is received. Therefore, no communication partner connected on channel 3 may send. This can be reliably prevented by disconnecting the corresponding switching element after the start of the frame byte (corresponding to the switching element 329 in the separating elements 326, 327, see Figure 3 ). However, at the same time, the signal received on channel 3 can continue to be monitored.

[0087] In the diagram on the right, a dominant signal is received at the position of the second byte of the ID, ie still within the high-priority ID, on channel 3. Since this is not allowed, a fault can be detected and channel 3 can be subjected to corresponding fault handling.

[0088] Figure 5 A flow chart of a method for communication in a data network system, for example in a vehicle, via a distributor device 100 , 300 is shown.

[0089] In a first step S1 of communication, communication is performed with a first priority communication partner 150, 151, 152, 153, 154, 155 via a certain number of communication interfaces 101, 102, 103. In a second step S2 of communication, communication is performed with a second priority communication partner 150, 151, 152, 153, 154, 155 via a certain number of second communication interfaces 104, 105, 106, wherein the second priority is lower than the first priority. In a third step S3 of coupling, the first communication interface 101, 102, 103 and the second communication interface 104, 105, 106 are coupled to each other in a communication connection. In a fourth step S4 of monitoring, the communication performed via the second communication interface 104, 105, 106 is monitored. In a fifth step S5 of isolation, when a communication error occurs at one of the second communication interfaces 104, 105, 106, at least the first communication interface 101, 102, 103 is isolated from the corresponding second communication interface 104, 105, 106. It goes without saying that the steps S1-S4 are performed permanently, that is, in parallel and without delay or buffering during the operation of the data network system.

[0090] In the distributor device 100, 300, data of a communication message received via one of the first communication interfaces 101, 102, 103 can be output as a communication message on the other first communication interface 101, 102, 103 and the second communication interface 104, 105, 106. Likewise, in the distributor device 100, 300, data of a communication message received via one of the second communication interfaces 104, 105, 106 can be output as a communication message on the first communication interface 101, 102, 103 and the other second communication interface 104, 105, 106.

[0091] When data are output at one of the first communication interfaces 101, 102, 103 or at one of the second communication interfaces 104, 105, 106, it can also be checked in the distributor device 100, 300 whether the data output at the corresponding transceiver 210, 320, 321, 322, 323 correspond to the signal level present on the corresponding data line 215, 210, 320, 321, 322, 323. The corresponding communication interface 101, 102, 103, 104, 105, 106 can be decoupled in terms of communication, for example, by the decoupling element 214, if the data output at the corresponding transceiver 210, 320, 321, 322, 323 do not correspond to the signal level present on the corresponding data line 215.

[0092] During monitoring, it can be checked for each communication message received via one of the first communication interfaces 101, 102, 103 and / or one of the second communication interfaces 104, 105, 106 whether the corresponding received communication message is not defective in form and / or whether the corresponding received communication message has an identification code released for the corresponding communication partner 150, 151, 152, 153, 154, 155 and / or whether the corresponding received communication message does not exceed a predetermined maximum length. Of course, other criteria are also conceivable.

[0093] When receiving a communication message via one of the first communication interfaces 101, 102, 103, it can be checked whether the received communication message has a predefined message priority. If the received communication message has the predefined message priority, the transmission of the communication message by the second communication interface 104, 105, 106 can be inhibited for the duration of the transmission of the received communication message. In particular, interference caused by the communication partner 153, 154, 155 can be avoided at the second communication interface 104, 105, 106 in this way.

[0094] Figure 6 A flow chart of a monitoring process which can be implemented in the switching unit 213 is shown, for example. Figure 6 and the following Figure 7 and 8 In the description of FIG. 1 , it is assumed that signals with a "low" level, that is, a voltage of, for example, 0 V, prevail in the data network system. Correspondingly, signals with a "high" level, that is, a voltage of, for example, 3.3 V or 5 V, are inferior. It goes without saying that other voltages or logic circuits are also possible, in which, for example, it is detected whether the communication medium is occupied. The entire method can be carried out in parallel or without delay.

[0095] The monitoring process starts in step S11, in which the data network system is in a quiescent state. The internal representation of the data network system, hereinafter referred to as SP for the star point, is therefore inferior. If the SP changes to the dominant state, it is checked in decision E11 whether the start of the received communication message is correct in form. If this is not the case, it jumps to step S12 and marks the fault state for the corresponding communication interface 101, 102, 103, 104, 105, 106. If the received communication message is correct in form, it is checked in decision E12 whether the sender of the message has a high priority or a low priority, that is, whether the communication message was received at one of the first communication interfaces 101, 102, 103 or at one of the second communication interfaces 104, 105, 106.

[0096] If the communication message is received at one of the second communication interfaces 104, 105, 106, then in decision E13, it is checked whether the received communication message has an allowed identification code or ID, that is, an ID that identifies a low priority. If this is not the case, then jump to step S12 and mark the fault state for the corresponding communication interface 104, 105, 106. If this is the case, then in the decision, it is checked whether the received communication message has an allowed length. If this is not the case, then jump to step S12 and mark the fault state for the corresponding communication interface 104, 105, 106. If the received communication message has an allowed length, then no fault is marked and the transmission of the received communication message is not interrupted.

[0097] If it is determined in decision E12 that the communication message is received at one of the first communication interfaces 101, 102, 103, then in decision 15, it is checked whether the received communication message is a high priority message, that is, it has an ID that identifies the high priority. If this is the case, then in decision E14, it is checked whether the received communication message has an allowed length. If this is not the case, then jump to step S12 and mark the fault state for the corresponding communication interface 101, 102, 103. If this is the case, then no fault is marked and the received communication message can be transmitted through the switching unit 213.

[0098] If it is determined in decision E15 that the received communication message is a high-priority message, a flag is set for the duration of the transmission of the received communication message in step S14. This flag can be used, for example, to block the transmission of communication messages with low priority during this duration.

[0099] In optional decision E16, it is also checked during the transmission of the received communication message whether the communication partner with low priority attempts to interfere with the transmission of the communication message with high priority. If this is the case, the communication partner with low priority is marked as faulty in step S12 without having a bad influence on the communication of the high priority message.

[0100] If step S12 is reached, ie a fault is detected, then the data network system is synchronized in step S13. In the CAN bus, this can be done, for example, by sending out a so-called "error frame".

[0101] Figure 7 A flow chart of a monitoring and control process is shown, which can be implemented, for example, in the interface logic circuit for monitoring the communication between the switching unit and the transceiver.

[0102] The monitoring process starts in step S21, in which the data network system is in a static state. The internal illustration of the data network system, which is referred to below as the SP for the star point, is therefore inferior. The same applies to the TX and RX connectors of the transceiver. If an activity is performed, that is, if the SP, TX or RX changes its state, it is checked in the decision E21 whether a fault is marked for the corresponding transceiver 210, 320, 321, 322, 323 or the corresponding communication interface 101, 102, 103, 104, 105, 106. If this is the case, TX is set to high, that is, inferior, and RX and SP are also set to inferior in step S22. Thus, the corresponding transceiver 210, 320, 321, 322, 323 can be decoupled from the rest of the data network system. This setting of TX, RX and SP can also be regarded as isolation or decoupling caused by the separation elements 211, 324, 325, 326, 327.

[0103] If no fault is marked for the corresponding transceiver 210, 320, 321, 322, 323 or the corresponding communication interface, it is checked in decision E22 whether SP has a "low" state, that is, a dominant state. If this is the case, TX is set to low in step S23. In addition, RX can be locked in its current state for a predetermined time period in step S23, for example, to avoid echoes caused by the changed TX signal. A loop is formed by decision E28, which is repeated until SP is converted to a "high" state, that is, an inferior state. If this occurs, the TX signal is set to "high" in step S24 and the TX signal is unlocked in step S25. Thereafter, the process returns to step S21.

[0104] If it is determined in decision E22 that the SP is not in a dominant state, then in decision E23 it is checked whether the RX signal is in a dominant state, that is, "low". If this is not the case, the monitoring process returns to step S21. If the RX signal is in a dominant state, that is, "low", then in decision E24 it is checked whether a fault is marked for the corresponding transceiver 210, 320, 321, 322, 323 or the corresponding communication interface 101, 102, 103, 104, 105, 106. If this is the case, in step S26 the SP for the corresponding transceiver 210, 320, 321, 322, 323 is set to a disadvantageous state. If this is not the case, then in decision E25 it is checked whether the corresponding sender of the received communication message is allowed to send a message of the corresponding priority. That is, it is checked whether the communication partner 153, 154, 155 marked as low priority has sent a high priority message. If this is the case, the process jumps to step S26. If this is not the case, the SP signal is set to the dominant state, ie "low", in step S27.

[0105] Then, in decision E26, it is checked whether RX has been converted to an inferior state. If this is not the case, in decision E27, it is checked whether a fault has been marked for the corresponding transceiver 210, 320, 321, 322, 323 or the corresponding communication interface 101, 102, 103, 104, 105, 106 during this period, because, for example, the permitted message length has been exceeded. If this is the case, jump to step S26. If no fault has been marked for the corresponding transceiver 210, 320, 321, 322, 323 or the corresponding communication interface 101, 102, 103, 104, 105, 106, jump to step S27. If in decision E26, RX has been converted to an inferior state, jump to step S27 as well.

[0106] Figure 8 The flowchart shows a monitoring and control sequence as it can also be implemented, for example, in an interface logic circuit. Figure 8 The monitoring process is used to monitor signal levels and identify differences between signal levels on a data line of a data network system and signals TX and RX of a transceiver.

[0107] The monitoring process starts with step S31. In step S32, TX is set to high. This can be used, for example, as Figure 7The monitoring and control process is carried out based on the results of the monitoring and control process. In step S33, the transceiver becomes active and sets the corresponding signal level on the data line of the data network system. In decision E31, it is checked whether the RX signal corresponds to the signal level on the data line. If this is not the case, the corresponding transceiver 210, 320, 321, 322, 323 is isolated in S34 and a fault state is marked.

[0108] If the RX signal corresponds to the signal level on the data line, then in decision E32, it is checked whether the TX signal corresponds to the signal level on the data line. If this is not the case, the corresponding transceiver 210, 320, 321, 322, 323 is isolated and a fault state is marked in S34. If this is the case, decision E31 is started. The transceivers 210, 320, 321, 322, 323 can be separated in terms of communication, for example, on the star point side by separating elements 211, 324, 325, 326, 327. In addition, in one embodiment, the remaining bus is separated from the corresponding transceiver 210, 320, 321, 322, 323 by disconnecting the decoupling element 214 or the switching element provided in the decoupling element 214.

[0109] Since the devices and methods described in detail above are exemplary embodiments, they can be modified in a conventional manner by a person skilled in the art within a wide range without departing from the scope of the invention. In particular, the mechanical requirements of the individual components and the size ratios relative to each other are merely exemplary. In addition, the flow charts can be extended or merged, the signal levels can be inverted or changed and the logic circuits can be adapted to other transmission methods and media.

[0110] List of reference numerals:

[0111] 100, 300 Distributor Device

[0112] 101, 102, 103 first communication interface

[0113] 104, 105, 106 Second communication interface

[0114] 107, 207, 307 coupling mechanism

[0115] 108, 208 Monitoring Agency

[0116] 210 Transceiver

[0117] 211 Separate components

[0118] 212 Interface Logic Circuit

[0119] 213 Exchange Unit

[0120] 214 Decoupling element

[0121] 215 Data cable

[0122] 216 Terminal resistance

[0123] TX transmission line

[0124] RX receiving line

[0125] 320, 321, 322, 323 transceivers

[0126] 324, 325, 326, 327 separate components

[0127] 328, 329 Switching elements

[0128] 330 signal line

[0129] 331 Resistor

[0130] 332 Power Supply

[0131] 333 Diode

[0132] 334, 335 Interface logic circuit unit

[0133] TX Send signal

[0134] RX Receive signal

[0135] CAHH, CANL data line

[0136] 150, 151, 152, 153, 154, 155 Communication partners

[0137] S1, S2, S3, S4, S5 Method Steps

[0138] S11-S14, S21-S28, S31-S34 Method steps

[0139] E11-E16, E21-E28, E31, E32 judgment

Claims

1. A distributor device (100, 300) for a data network system in a vehicle, the distributor device (100, 300) being inserted into a CAN bus of the data network system and having: A number of first communication interfaces (101, 102, 103) capable of coupling to a first priority communication partner (150, 151, 152, 153, 154, 155); a number of second communication interfaces (104, 105, 106) that can be coupled to communication partners (150, 151, 152, 153, 154, 155) of a second priority, wherein the second priority is lower than the first priority; A coupling mechanism (107, 207, 307) configured to communicatively couple the first communication interface (101, 102, 103) and the second communication interface (104, 105, 106) to each other; as well as A monitoring device (108, 208) is designed to monitor the communication carried out via the second communication interface (104, 105, 106) and to disconnect at least the first communication interface (101, 102, 103) from the corresponding second communication interface (104, 105, 106) in terms of communication when a communication error occurs at one of the second communication interfaces (104, 105, 106); in, The coupling mechanism (107, 207, 307) has a switching unit (213), which is coupled to the first communication interface (101, 102, 103) and the second communication interface (104, 105, 106), wherein each first communication interface (101, 102, 103) and each second communication interface (104, 105, 106) can have a transceiver (210, 320, 321, 322, 323) coupled to the switching unit (213), and wherein the switching unit (213) is configured to transmit a communication message to the first communication interface (101, 102, 103) outputting data of a communication message received via the first communication interface (101, 102, 103) on the first communication interface (101, 102, 103) and on the second communication interface (104, 105, 106) and outputting data of a communication message received via the second communication interface (104, 105, 106) as a communication message on the first communication interface (101, 102, 103) and on the second communication interface (104, 105, 106), wherein the switching unit comprises a passive or logic-circuit-based structure for providing a coupling connection between the first communication interface and the second communication interface for delay-free operation without a processing based on a computing unit or software; The monitoring device (108, 208) is designed to check, when outputting data at one of the first communication interfaces (101, 102, 103) or at one of the second communication interfaces (104, 105, 106), whether the data output to the corresponding transceiver (210, 320, 321, 322, 323) corresponds to the signal level applied to the corresponding data line (215), and the monitoring device (108, 208) is designed to check, when outputting data at one of the first communication interfaces (101, 102, 103) or at one of the second communication interfaces (104, 105, 106), whether the data output to the corresponding transceiver (210, 320, 321, 322, 323) corresponds to the signal level applied to the corresponding data line (215). 1, 102, 103, 104, 105, 106) if the data output by the coupling mechanism (107, 207, 307) to the corresponding transceiver (210, 320, 321, 322, 323) does not correspond to the signal level applied to the corresponding data line (215) and / or the data read in by the corresponding transceiver (210, 320, 321, 322, 323) on the data line (215) does not correspond to the signal level applied to the corresponding data line (215).

2. The distributor device (100, 300) according to claim 1, wherein a decoupling element (214) is arranged between at least one of the transceivers (210, 320, 321, 322, 323) and the switching unit (213) or between the corresponding transceiver (210, 320, 321, 322, 323) and the corresponding data line (215), the decoupling element being designed to electrically decouple the corresponding transceiver (210, 320, 321, 322, 323) from the data line (215) and / or to separate the data line (215) in a controlled manner.

3. A distributor device (100, 300) according to any of the preceding claims, wherein the monitoring device (108, 208) is configured to check, when monitoring a communication message received via one of the first communication interfaces (101, 102, 103) and / or one of the second communication interfaces (104, 105, 106), whether the corresponding received communication message is free of defects in form and / or whether the corresponding received communication message has an identification code released for the corresponding communication partner (150, 151, 152, 153, 154, 155) and / or whether the corresponding received communication message does not exceed a predetermined maximum length.

4. A distributor device (100, 300) according to any of the preceding claims, wherein the monitoring device (108, 208) is configured to check whether the received communication message has a predetermined message priority when receiving a communication message via one of the first communication interfaces (101, 102, 103), and if the received communication message has the predetermined message priority, prohibiting the second communication interface (104, 105, 106) from transmitting the communication message during the duration of the transmission of the received communication message.

5. The distributor device (100, 300) according to any of the preceding claims, comprising a separation element (211, 324, 325, 326, 327) for each first communication interface (101, 102, 103) and each second communication interface (104, 105, 106), wherein the separation element is designed to separate the corresponding communication interface (101, 102, 103, 104, 105, 106) in a controlled manner with respect to communication, wherein the monitoring device (108, 208) is designed to respectively control the corresponding separation element (211, 324, 325, 326, 327) in order to separate one of the first communication interfaces (101, 102, 103) or one of the second communication interfaces (104, 105, 106).

6. A distributor device (100, 300) according to any one of the preceding claims, wherein the coupling mechanism (107, 207, 307) has a signal line (330), which is coupled to a power supply (332) via a pull-up resistor (331), wherein the signal line (330) is coupled to a transmission input of the communication interface via the monitoring mechanism (108, 208), and wherein the signal line (330) is coupled to a reception input of the communication interface in a conducting direction via a diode (333).

7. A method for communicating via a distributor device (100, 300) in a data network system in a vehicle, wherein: The distributor device (100, 300) is inserted into a CAN bus of the data network system, and the method comprises the following steps: Communicating with a first priority communication partner (150, 151, 152, 153, 154, 155, 156) using a certain number of first communication interfaces (101, 102, 103) (S1); Communicating (S2) with a second priority communication partner (150, 151, 152, 153, 154, 155) using a certain number of second communication interfaces (104, 105, 106), wherein the second priority is lower than the first priority; The first communication interface (101, 102, 103) and the second communication interface (104, 105, 106) are coupled in a communication connection via a coupling mechanism (107, 207, 307) (S3); wherein the coupling mechanism (107, 207, 307) has a switching unit (213), which is coupled to the first communication interface (101, 102, 103) and the second communication interface (104, 105, 106), and the switching unit includes a passive or logic circuit-based structure for providing the coupling connection without processing based on a computing unit or software to perform delay-free operation; monitoring (S4) the communication implemented through the second communication interface (104, 105, 106); and When a communication failure occurs at one of the second communication interfaces (104, 105, 106), at least the first communication interface (101, 102, 103) is separated from the corresponding second communication interface (104, 105, 106) (S5); wherein data of a communication message received via one of the first communication interfaces (101, 102, 103) is output as a communication message on the other first communication interface (101, 102, 103) and the second communication interface (104, 105, 106), and data of a communication message received via one of the second communication interfaces (104, 105, 106) is output as a communication message on the first communication interface (101, 102, 103) and the other second communication interface (104, 105, 106); When data is output at one of the first communication interfaces (101, 102, 103) or one of the second communication interfaces (104, 105, 106), it is checked whether the data output to the corresponding transceiver (210, 320, 321, 322, 323) corresponds to the signal level applied to the corresponding data line (215), and if the data output to the corresponding transceiver (210, 320, 321, 322, 323) does not correspond to the signal level applied to the corresponding data line (215) and / or the data read in by the corresponding transceiver (210, 320, 321, 322, 323) on the data line (215) does not correspond to the signal level applied to the corresponding data line (215), the corresponding communication interface (101, 102, 103, 104, 105, 106) is separated in terms of communication. 8 . The method according to claim 7 , wherein the first communication interface ( 101 , 102 , 103 ) and / or the second communication interface ( 104 , 105 , 106 ) are electrically decoupled.

9. A method according to claim 7 or 8, wherein during monitoring, a check is performed for a communication message received via one of the first communication interfaces (101, 102, 103) and / or one of the second communication interfaces (104, 105, 106) to determine whether the corresponding received communication message is free of defects in form and / or whether the corresponding received communication message has an identification code released for the corresponding communication partner (150, 151, 152, 153, 154, 155) and / or whether the corresponding received communication message does not exceed a predetermined maximum length.

10. A method according to any one of the preceding claims 7 to 9, wherein when a communication message is received via one of the first communication interfaces (101, 102, 103), it is checked whether the received communication message has a predetermined message priority, and if the received communication message has the predetermined message priority, transmission of the communication message by the second communication interface (104, 105, 106) is prohibited during the duration of transmission of the received communication message.

11. The method according to claim 7, wherein for isolation a separating element (211, 324, 325, 326, 327) is respectively actuated for each first communication interface (101, 102, 103) and / or each second communication interface (104, 105, 106).

Images