Control device for controlling a vehicle function of a vehicle and method for operating a control device

Abstract

The present solution relates to a control device (105) for controlling vehicle functions of a vehicle (100). The control device (105) has at least one electronic or electrical component (110), at least one main switch (115) and a component switch (120). The component (110) is configured to implement a vehicle function. The main switch (115) is connected via an electrical line (125) between the component (110) and a supply voltage terminal (130) for supplying a supply voltage to the component (110). The component switch (120) is arranged between the component (110) and the main switch (115) and is configured to connect the component (110) to the line (125).

Description

Technical Field

[0001] The present solution relates to a control device for controlling vehicle functions of a vehicle and a method for operating the control device. Background Art

[0002] The current E / E (electrical / electronic) architecture in vehicles integrates one or a small number of vehicle functions into each control device. Therefore, the number of control devices and distributed software functions is very large, and the complexity of networking is also very high. WO 2004 / 042888 A1 discloses an in-vehicle system for supplying power to at least one consumer, which has increased requirements for the availability of the in-vehicle system. Summary of the Invention

[0003] In this context, the present solution provides, according to the independent claims, an improved control device for controlling vehicle functions of a vehicle and a method for operating the improved control device. Advantageous design solutions are derived from the dependent claims and the following description.

[0004] The advantage that can be achieved with the proposed solution is that a control device is provided, in which individual components or structural components can be switched on or off as needed for implementing different vehicle functions. In one embodiment, a highly integrated control device is provided here, which can save many individual control devices for each vehicle function.

[0005] A control device for controlling vehicle functions of a vehicle has at least one electronic or electrical component, at least one main switch, and a component switch. The component is configured to implement a vehicle function. The main switch is connected via an electrical line between the component and a power voltage terminal for supplying a power voltage to the component. The component switch is arranged between the component and the main switch and is configured to connect the component to the line.

[0006] The vehicle can be a vehicle capable of highly automated or fully automated driving, and it can be shaped for transporting people and additionally or alternatively transporting goods. The component can be, for example, a part of a structural component of a plurality of electronic or electrical components for implementing vehicle functions. The control device can also include the entire structural component. In order to implement a vehicle function, a power voltage can be provided, for example, for the operation of any vehicle component of the vehicle used to implement the vehicle function. The main switch can be a switch through which, in the closed state of the main switch, a power voltage can be supplied to all components of the control device, or by means of which, in the open state of the main switch, all components of the control device can be separated from the power voltage. Therefore, the component switch can be used to supply or interrupt the power voltage to a specific component. The mentioned components of the control device can be arranged on a common circuit board and additionally or alternatively can be arranged in a common housing.

[0007] In addition, the control device may include at least one electronic or electrical second component for implementing additional vehicle functions of the vehicle and a second component switch, the second component switch being arranged between the second component and the main switch and being configured to connect the second component to the line. The additional vehicle functions may be different from the vehicle functions. Thus, multiple vehicle functions can be controlled via one control device. For example, in a state where all switches are closed, all components can be supplied with a power supply voltage, or in a case where the main switch is open, no component can be supplied with a power supply voltage, or in a case where the main switch is closed and the component switch is closed while the second component switch is open, only the component can be supplied with a power supply voltage, or in a case where the main switch is closed and the component switch is open while the second component switch is closed, only the second component can be supplied with a power supply voltage. This enables energy savings because the power supply voltage can be supplied individually according to the vehicle functions used or required.

[0008] The electronic or electrical component and the electronic or electrical second component may be in parallel with respect to the main switch.

[0009] Furthermore, it is advantageous that the control device includes at least one electronic or electrical third component for implementing additional vehicle functions of the vehicle and a third component switch, the third component switch being arranged between the third component and the main switch and being configured to connect the third component to the line. The additional vehicle functions may be different from the vehicle functions and the additional vehicle functions. Thus, more vehicle functions can be controlled via one control device. The control device may also have any number of additional electronic or electrical components for implementing each different additional vehicle function of the vehicle, and have respectively assigned component switches, these component switches being respectively arranged between the additional components and the main switch and being configured to respectively connect the additional components to the line.

[0010] According to one embodiment, the control device may further include a second main switch, which is connected between the component and a second power supply voltage terminal for providing a second power supply voltage via a second electrical line, and additionally or alternatively further has an additional component switch arranged between the component and the second main switch, which is configured to connect the component to the second line. Thus, a redundant system is provided, which can take over in the event of failure of the first main switch, the electrical line, and the additional or alternative component switch.

[0011] The electrical line and the second electrical line can be electrically isolated from and / or electrically insulated from each other. Thus, the component can be supplied with the supply voltage either via the electrical line or via the second electrical line. For example, the electrical line can be configured to provide the supply voltage, while the second electrical line can be configured to provide a second supply voltage, where the supply voltage and the second supply voltage are different. For example, the supply voltage terminal can be connected to a voltage source providing a 12-volt voltage, and additionally or alternatively, the second supply voltage terminal can be connected to another voltage source providing a 48-volt voltage. Thus, voltage can be supplied to components with different voltage requirements. However, these voltage sources can also provide the same voltage and thus be used as redundancy.

[0012] Furthermore, advantageously, according to one embodiment, the control device has a supply voltage converter, which is connected via a further electrical line between the main switch and an additional component switch of the component, where the supply voltage converter is configured to change the supply voltage. Here, the supply voltage converter can be configured to, for example, suppress and additionally or alternatively increase the supply voltage. Thus, the component can be supplied with voltage via the voltage source, where a second component can be supplied with another voltage via, for example, the same voltage source. Additionally or alternatively, the control device can have a supply voltage converter connected via a further electrical line or an additional line between a second main switch and an additional component switch of the component.

[0013] The control device can also have a monitoring device, which is configured to identify a fault of the component and, when a fault of the component is identified, additionally or alternatively cause the component switch to open and additionally or alternatively cause it to close. A fault of the component is understood to mean that the component malfunctions or does not work. Due to such a monitoring device, a faulty component can advantageously be switched off, for example, or a reset of the faulty component can be carried out.

[0014] The control device can also have a further monitoring device, which is configured to identify a fault of the control device and, when a fault of the control device is identified, additionally or alternatively cause the main switch to open and additionally or alternatively cause it to close. A fault of the control device is understood to mean that the control device malfunctions or does not work. Due to such a further monitoring device, for example, when the entire control device fails, the control device can be reset.

[0015] Alternatively or additionally, the further monitoring device can also be configured to identify a fault at the supply voltage terminal and, when a fault at the supply voltage terminal is identified, cause the main switch to open. It is also conceivable that the further monitoring device is configured to identify a fault at the supply voltage terminal and, when a fault at the supply voltage terminal is identified, cause the second main switch to open.

[0016] According to a further embodiment, a further monitoring device may also be configured to identify a fault at the power supply voltage terminal and, when a fault at the power supply voltage terminal is identified, cause the main switch to open, wherein, for example, by closing the second main switch, the power supply voltage can continue to be standby without interruption via the power supply voltage terminal. Similarly, according to a further embodiment, a further monitoring device may also be configured to identify a fault at the power supply voltage terminal and, when a fault at the power supply voltage terminal is identified, cause the second main switch to open, wherein, here too, for example, the power supply voltage can continue to be standby without interruption via the power supply voltage terminal by closing the main switch simultaneously.

[0017] In a further embodiment, the monitoring device may be configured to keep the two main switches closed or to close them when a fault occurs at the power supply voltage terminal, whereupon the main switches then open. When a fault at the second power supply voltage terminal is identified, the second main switch may be opened via the monitoring unit or a further monitoring unit. This results in a higher availability by enabling an uninterrupted voltage supply.

[0018] Furthermore, a further embodiment of the solution proposed here can be particularly advantageous for the initial situation in which both main switches are closed, because, for example, a correspondingly large amount of electrical power is required. If a fault at the power supply voltage terminal is now identified, the main switches are, for example, opened and the structural components are switched off via further component switches according to a priority list, or rather these relevant switches are opened, in order to avoid overloading the second electrical line serving as a supply line.

[0019] For a further initial situation, an embodiment of the solution proposed here can also be provided, in which both main switches are closed or are closed because a correspondingly large amount of electrical power is required. If a fault at the second power supply voltage terminal is identified, the second main switch can be opened and the structural components can be switched off via component switches according to a priority list, or these component switches can be opened, in order to avoid overloading the electrical line serving as a supply line.

[0020] According to one embodiment, the control device may have at least one supply energy storage unit, in particular a supercapacitor and additionally or alternatively a buffer battery, the supply energy storage unit being configured to provide an additional supply voltage for the components. Such a supply energy storage unit can, for example, contribute to continuing to supply the vehicle with energy in the event of a vehicle power outage. In the event of a vehicle power outage, here, the main switch may be open or be opened.

[0021] The components may be configured as a communication interface, a computer unit, a voltage converter unit, a processor, an electronic sensor, an actuator and additionally or alternatively as a power distributor. These are all common components for implementing vehicle functions.

[0022] A method for a control device for operating one of the above-mentioned variants has a providing step and a loading step. In the providing step, the control device is provided. In the loading step, a power supply voltage is loaded at the power supply voltage terminals in order to operate the control device.

[0023] The method can be implemented, for example, in software or hardware or in a hybrid form consisting of software and hardware, for example in the control device.

[0024] A computer program product having program code that can be stored on a machine-readable carrier, such as a semiconductor memory, a hard disk memory or an optical memory, and that, when the program is implemented on a computer or a device, is used to execute a method according to one of the above-described embodiments, is also advantageous. Description of the Drawings

[0025] Embodiments of the solution presented here are shown in the drawings and are explained in more detail in the following description. Among them:

[0026] Figure 1 A schematic diagram of a vehicle is shown, the vehicle having a control device for controlling vehicle functions of the vehicle according to an embodiment; and

[0027] Figure 2 A flowchart showing a method for operating a control device according to an embodiment is shown.

[0028] In the following description of the preferred embodiments of the present solution, the same or similar reference numerals are used for elements shown in the various figures and having similar functions, and the repeated description of these elements is omitted here. Detailed Description of the Invention

[0029] Figure 1 A schematic diagram of a vehicle 100 is shown, which has a control device 105 for controlling vehicle functions of the vehicle 100 according to an embodiment.

[0030] The control device 105 has at least one electronic or electrical component 110, at least one main switch 115 and a component switch 120. The component 110 is configured to implement vehicle functions. The main switch 115 is connected via an electrical line 125 between the component 110 and a power supply voltage terminal 130 for supplying a power supply voltage to the component 110. The component switch 120 is arranged between the component 110 and the main switch 115 and is configured to connect the component 110 to the line 125.

[0031] By way of example only, according to the present embodiment, the control device 105 is arranged on or in the vehicle 100. According to the present embodiment, the vehicle 100 is configured as a vehicle 100 capable of highly automated or fully automated driving, and the vehicle is shaped for transporting people and / or goods. The vehicle function is, for example, a driving function for highly automated or fully automated driving or any vehicle component of the vehicle 100. According to one embodiment, the component 110 is part of a structural assembly 135 of a plurality of electronic or electrical components 110, wherein the structural assembly 135 is configured to implement a vehicle function. According to such an embodiment, the control device 105 includes the entire structural assembly 135. According to this embodiment, the components 110, 115, 125, and / or 130 of the control device 105 are arranged on a common circuit board 145 and / or in a common housing.

[0032] According to this embodiment, the control device 105 further has at least one electronic or electrical second component 150 for implementing another vehicle function of the vehicle 100 and a second component switch 155, which is arranged between the second component 150 and the main switch 115 and is configured to connect the second component 150 to the line 125. According to this embodiment, the another vehicle function is different from the vehicle function. According to this embodiment, the electronic or electrical component 110 and the electronic or electrical second component 150 are connected in parallel with respect to the main switch 115. In addition, according to this embodiment, the control device 105 further has at least one electronic or electrical third component 160 for implementing an additional vehicle function of the vehicle and a third component switch 165, which is arranged between the third component and the main switch and is configured to connect the third component 160 to the line 125. According to this embodiment, the additional vehicle function is different from the vehicle function and the another vehicle function. According to one embodiment, the control device 105 further has any number of additional electronic or electrical components B for implementing respectively different another vehicle functions of the vehicle 100 n and respectively assigned component switches S n , and these component switches are respectively arranged between the additional component B n and the main switch 115 and are configured to respectively connect the additional component B n to the line 125. The second component 150, the third component 160, and / or one or more additional components B n may also respectively be part of an independent structural assembly composed of a plurality of second components 150, third components 160, and / or additional components B n . These structural assemblies may be different from each other.

[0033] According to this embodiment, the control device 105 further has a second main switch 170. The second main switch is connected between the component 110 and a second power supply voltage terminal 180 for providing a second power supply voltage via a second electrical line 175, and / or has an additional component switch 185 arranged between the component 110 and the second main switch 170. The additional component switch is configured to connect the component 110 to the second line 175.

[0034] According to this embodiment, the electrical line 125 and the second electrical line 175 are electrically isolated from each other. According to one embodiment, the electrical line 125 is configured, for example, to provide a power supply voltage, while the second electrical line 175 is configured to provide a second power supply voltage, where the power supply voltage and the second power supply voltage are different or correspond to each other. For example, according to this embodiment, the power supply voltage terminal 130 is connected to a voltage source providing a 12 - volt voltage, and / or the second power supply voltage terminal 180 is connected to another voltage source providing a 48 - volt voltage. According to this embodiment, the second component 150, the third component 160, and / or an additional component B n also each have an additional component switch 185, which are configured to connect the second component 150, the third component 160, and / or the additional component B n to the second line 175 respectively.

[0035] Furthermore, according to this embodiment, the control device 105 further has a power supply voltage converter 187, which is connected via an additional electrical line 190 between the second main switch 170, or alternatively the main switch 115, and an additional component switch 192 of the component 110, where the power supply voltage converter 187 is configured to change the second power supply voltage, or alternatively change the power supply voltage. According to one embodiment, the power supply voltage converter 187 is configured to suppress and / or increase the second power supply voltage or the power supply voltage. Additionally, according to one embodiment, the control device 105 may have one or more such additional power supply voltage converters 187, which are connected via one or more additional lines between the main switch 115 or the second main switch 170 and the respectively belonging component switches of the second component 150, the third component 160, and / or the additional component B n respectively.

[0036] According to one embodiment, the control device 105 further has a monitoring device, which is configured to identify a fault of the component 110, and / or cause the component switch 120 and / or an additional component switch 185 of the component 110 and / or an additional component switch 192 of the component 110 to open and / or close when a fault of the component 110 is identified. Thus, according to this embodiment, the monitoring device is configured to identify the second component 150, the third component 160, and / or the additional component B nmalfunctions, and / or when malfunctions are recognized in the second component 150, the third component 160, and / or additional component B n cause the disconnection and / or closing of the respective component switches 155, 165, 185, S of the second component 150, the third component 160, and / or additional component B n when malfunctions are recognized in them. According to one embodiment, the control device 105 also has additional monitoring means, which are configured to recognize malfunctions of the control device 105, and / or cause the disconnection and / or closing of the main switch 115 and / or the second main switch 170 when a malfunction of the control device 105 is recognized. According to one embodiment, the control device 105 has at least one supply energy storage unit, such as a supercapacitor and / or a buffer battery, which is configured to provide an additional supply voltage for the component 110 or all components 110, 150, 160, B n n

[0037] According to one embodiment, the component 110, the second component 150, the third component 160, and / or additional component B n are configured as a communication interface, a computer unit, a voltage converter unit, a processor, an electronic sensor, an actuator, and / or a power distributor. According to this embodiment, the component 110, the second component 150, the third component 160, and / or additional component B n are each connected to the ground terminal 195.

[0038] In the highly integrated control device 105 proposed here, it is advantageously possible to implement a voltage supply for integrating various vehicle functions. Although the vehicle 100 has a large number of functions, in the vehicle 100 there is advantageously only one control device 105 for a large function scale. The control devices used are usually not upgradeable and are designed such that the same functions are implemented throughout the life of the vehicle. Software updates can be implemented to a limited extent over the air or in the workshop. Hardware updates are usually not provided. The devices used comply with the existing technology at the time of vehicle development and usually provide little reserve to save costs. In addition, in the case of an autonomous vehicle, it is necessary to ensure that the vehicle can still continue to drive in the event of a malfunction, for example, in terms of the supply voltage (fail-safe operation), according to the SAE level (classification level according to the level of automation). All of these can be achieved by the control device 105 proposed here.

[0039] The components 110, 150, 160, B in the form of hardware components or hardware functions n ​​The control device 105 presented here is integrated in a manner adapted to the application in terms of size and structural form and assembled like a modular system. Based on this modular circuit board layout, a large number of different modules can be advantageously integrated on a central platform. By assembling specific functions and functional groups in suitable areas, the circuit board layout is optimized. This also ensures a reduction in mutual influences, such as those caused by thermal radiation, short circuits, and overheating.

[0040] A main switch 115 is used at the power supply voltage terminal 130 for the power supply voltage, and / or a second main switch 170 is used at the second power supply voltage terminal 180 for the second power supply voltage, so that in the event of a fault, such as a short circuit, overcurrent, overheating, and / or functional failure, the entire path to all components 110, 150, 160, B n or its structural components can be switched on and off. Such faults can either be identified at the switch by current or voltage measurement or via monitoring devices in the respective structural components. According to one embodiment, the monitoring is additionally or alternatively also carried out via separate, for example, upstream or downstream structural components. Optionally, a second external power supply voltage or an additional second external power supply voltage can be used to continue supplying the structural components in the event of an individual fault in the power supply voltage. If there is a problem with the power supply voltage, according to one embodiment, the switch is disconnected via the main switch 115, for example, via a semiconductor structural element, to avoid feedback. If a fault occurs in the structural component of the component 110 having, for example, a standardized communication interface, CPU, electronic sensor, processing device for external sensor signals, actuator control unit, power distributor, and / or voltage supplier, according to one embodiment, via the component switch S n, 120, 155, 165, 185, 192, depending on the fault situation, connect or disconnect the power supply voltage and / or the second power supply voltage. Thus, on the one hand, not only is the faulty structural component isolated from all other structural components, but also a hard reset is performed according to one embodiment. According to one embodiment, a safe state is established by cutting off the voltage supply. According to one embodiment, energy savings are achieved by specifically cutting off unnecessary consumers. In addition, the power supply voltage and the second power supply voltage can be the same, for example, 12 volts each or 48 volts each, or they can be different, for example, 12V and 48V, or 12V and a high voltage as the main power supply voltage. The high voltage should be understood as a voltage magnitude between 60V and 1.5kV DC voltage. Different voltages can also be used to drive actuators with different nominal voltages, see the additional electrical circuit 190. When, according to one embodiment, the second power supply voltage is 48V and the power supply voltage is 12V, then, according to one embodiment, a power supply voltage converter 187 in the form of a DC / DC converter can be used to convert 48V to 12V. By means of an uninterrupted voltage supply, the availability within the control device 105, which can also be referred to as an "ECU", is greatly increased. Optionally, a supercapacitor or a buffer battery can ensure functionality for a certain period of time in the event of a vehicle power outage. In this case, one or more main switches 115, 170 are opened.

[0041] The main features of the control device 105 proposed here are summarized as follows: The main switch 115 and the respective component switches 120, 155, 165, S in the form of switches on the structural components are used n for voltage supply (without redundancy). Optionally, additionally, there is voltage supply (with redundancy) using the second main switch 170 and additional and / or supplementary component switches 185, 192 in the form of switches on the structural components. Optionally, there are different voltage levels for the power supply voltage and the second power supply voltage, and it is possible for the voltage to change internally.

[0042] One of the additional monitoring devices can also be configured to identify a fault of the control device 105 and / or to cause the opening and / or closing of the second main switch 170 when a fault of the control device 105 is identified. Additionally, according to one embodiment, the additional monitoring device is further configured to identify a fault at the power voltage terminal 130 and to cause the opening of the main switch 115 when a fault at the power voltage terminal 130 is identified. Similarly, according to another embodiment, the additional monitoring device is also configured to identify a fault at the power voltage terminal 180 and to cause the second main switch 170 to open when a fault at the power voltage terminal 180 is identified. According to another embodiment, the additional monitoring device is further configured to identify a fault at the power voltage terminal 130 and to cause the opening of the main switch 115 when a fault at the power voltage terminal 130 is identified. In this case, it is also possible, for example, to continue to supply the power voltage via the power voltage terminal 180 without interruption by closing the second main switch 170 simultaneously.

[0043] It is also conceivable that, according to another embodiment, the additional monitoring device is configured to identify a fault at the power voltage terminal 180 and to cause the second main switch 170 to open when a fault at the power voltage terminal 180 is identified, wherein, for example, the power voltage is also continued to be supplied via the power voltage terminal 130 without interruption by closing the main switch 115 simultaneously.

[0044] In another embodiment, the monitoring device or the additional monitoring unit is configured to keep the main switches 115 and 170 closed or to close them when a fault occurs at the power voltage terminal 130, and then to open the main switch 115. When a fault at the second power voltage terminal 180 is identified, the second main switch 170 can be opened via the monitoring unit or the additional monitoring unit. This results in higher availability by enabling an uninterrupted voltage supply. Additionally, another embodiment of the solution proposed herein is particularly advantageous for the following initial situation: namely, that both main switches 115 and 170 are closed, for example because a relatively large amount of power is required. If a fault at the power voltage terminal 130 is now identified, then, for example, the main switch 115 is opened, and the structural components are switched off according to a priority list via the additional component switch 185, or rather, these associated switches 185 are opened, to avoid overloading the second electrical line, which is the supply line 175.

[0045] For another initial situation in which both main switches 115 and 170 are closed or have been closed (because a relatively large amount of power is required), an embodiment of the solution proposed herein is also advantageous. If a fault at the second power voltage terminal 180 is identified, then the second main switch 170 is opened, and via the component switches 120, 155, 165, S according to a priority list nTurn off the structural components, or disconnect these component switches 120, 155, 165, S n , to avoid overloading the electrical line 125 as a supply line.

[0046] Figure 2 2 shows a flow chart of a method 200 for operating a control device according to an exemplary embodiment. Figure 1 Control device described in .

[0047] The method 200 has a providing step 205 and a loading step 210. In the providing step 205, a control device is provided. In the loading step 210, a supply voltage is applied to the supply voltage terminal in order to operate the control device.

[0048] The embodiments described and shown in the figures are selected only as examples. Different embodiments can be combined with each other completely or also with regard to individual features. An embodiment can also be supplemented by features of other embodiments.

[0049] Furthermore, method steps presented here may be repeated and may also be performed in an order different from that described.

[0050] If an embodiment includes an "and / or" conjunction between a first feature and a second feature, this will be interpreted as the embodiment having the first and second features according to one embodiment, and either having only the first feature or only the second feature according to another embodiment.

[0051] Reference numerals list

[0052] B n Other components

[0053] S n Assigned component switch

[0054] 100 Vehicles

[0055] 105 Control Equipment

[0056] 110 Components

[0057] 115 Main switch

[0058] 120 Component switch

[0059] 125 Electrical wiring

[0060] 130 Supply voltage terminal

[0061] 135 Structural components

[0062] 145 Circuit Board

[0063] 150 Second component

[0064] 155 Second component switch

[0065] 160 Third component

[0066] 165 Third component switch

[0067] 170 Second main switch

[0068] 175 Second electrical circuit

[0069] 180 Second power supply voltage terminal

[0070] 185 Additional component switch

[0071] 187 Power supply voltage converter

[0072] 190 Additional electrical circuit

[0073] 192 Additional component switch

[0074] 195 Grounding terminal

[0075] 200 Method for operating a control device

[0076] 205 Providing step

[0077] 210 Loading step

Claims

1. A control device (105) for controlling vehicle functions of a vehicle (100), wherein, the control device (105) has the following features: - at least one electronic or electrical component (110) for implementing a vehicle function, - at least one main switch (115) which is connected via an electrical line (125) between the component (110) and a power voltage terminal (130) for supplying a power voltage to the component (110), - a component switch (120) arranged between the component (110) and the main switch (115), the component switch being configured to connect the component (110) to the electrical line (125), wherein the component (110) can be supplied with power voltage via the main switch (115), the electrical line (125) and the component switch (120), and - a second main switch (170) which is connected via a second electrical line (175) between the component (110) and a second power voltage terminal (180) for supplying a second power voltage different from the power voltage to the component (110); and - a further component switch (185) arranged between the component (110) and the second main switch (170), the further component switch being configured to connect the component (110) to the second electrical line (175), wherein the component (110) can be supplied with the second power voltage via the second main switch (170), the second electrical line (175) and the further component switch (185), wherein, the electrical line (125) and the second electrical line (175) are electrically isolated from each other and / or electrically insulated from each other, and wherein, the control device (105) is configured such that for an initial situation where both the main switch (115) and the second main switch (170) are closed or have been closed, if a fault is detected at the power voltage terminal (130), then the main switch (115) is opened and the associated further component switch (185) is opened according to a priority list to avoid overloading of the second electrical line (175) as a supply line, and / or if a fault is detected at the second power voltage terminal (180), then the second main switch (170) is opened and the associated component switch (120) is opened according to a priority list to avoid overloading of the electrical line (125) as a supply line.

2. The control device (105) according to claim 1, characterized in that it has at least one electronic or electrical second component (150) for implementing a further vehicle function of the vehicle (100) and has a second component switch (155) which is arranged between the second component (150) and the main switch (115) and is configured to connect the second component (150) to the electrical line (125).

3. The control device (105) according to claim 2, wherein, the electronic or electrical component (110) and the second electronic or electrical component (150) are in parallel with respect to the main switch (115).

4. The control device (105) according to any one of claims 1 to 3, wherein it has at least one third electronic or electrical component (160) for implementing additional and / or redundant vehicle functions of the vehicle (100) and has a third component switch (165), the third component switch being arranged between the third component (160) and the main switch (115) and being configured to connect the third component (160) to the electrical line (125).

5. The control device (105) according to any one of claims 1 to 3, wherein it has a power supply voltage converter (187), the power supply voltage converter being connected via an additional electrical line (190) between the main switch (115) or the second main switch (170) and an additional component switch (192) of the component (110), wherein the power supply voltage converter (187) is configured to change the power supply voltage.

6. The control device (105) according to any one of claims 1 to 3, wherein it has a monitoring device configured to identify a fault of the component (110) and / or to cause opening and / or closing of the component switch (120) when a fault of the component (110) is identified.

7. The control device (105) according to any one of claims 1 to 3, wherein it has an additional monitoring device configured to identify a fault of the control device (105) and / or to cause opening and / or closing of the main switch (115) when a fault of the control device (105) is identified.

8. The control device (105) according to any one of claims 1 to 3, wherein it has an additional monitoring device configured to identify a fault of the control device (105) and / or to cause opening and / or closing of the second main switch (170) when a fault of the control device (105) is identified, and / or wherein, The additional monitoring device is configured to identify a fault at the power supply voltage terminal (130) and cause the main switch (115) to open when a fault at the power supply voltage terminal (130) is identified, and / or wherein the additional monitoring device is configured to identify a fault at the power supply voltage terminal (180) and cause the second main switch (170) to open when a fault at the power supply voltage terminal (180) is identified, and / or wherein the additional monitoring device is configured to identify a fault at the power supply voltage terminal (130) and cause the main switch (115) to open when a fault at the power supply voltage terminal (130) is identified, and / or wherein the additional monitoring device is configured to identify a fault at the power supply voltage terminal (180) and cause the second main switch (170) to open when a fault at the power supply voltage terminal (180) is identified.

9. The control device (105) according to any one of claims 1 to 3, characterized in that it has at least one supply energy storage unit which is configured to provide an additional power supply voltage for the components (110, 150, 160, Bn).

10. The control device (105) according to any one of claims 1 to 3, characterized in that, the components (110, 150, 160, Bn) are configured as a communication interface, a computer unit, a voltage conversion unit, a battery, a processor, an electronic sensor, an actuator and / or a power distributor.

11. A method (200) for operating the control device (105) according to any one of claims 1 to 10, wherein, the method (200) has the following steps: - providing (205) the control device (105); and - applying (210) a power supply voltage at the power supply voltage terminal (130) in order to operate the control device (105).

12. A computer program product which is set up to carry out and / or drive the steps (205, 210) of the method (200) according to claim 11.

Images