Methods for operating a vehicle

Abstract

The invention relates to a method for operating (170) a vehicle (200), a computer program product, a computer-readable data carrier, a control unit (ECU) and a vehicle (200).

Description

[0001] The invention relates to a method with the features of the independent method claim, a computer program product with the features of the independent patent claim relating to a computer program product, a computer-readable data carrier with the features of the independent patent claim relating to a computer-readable data carrier, a control unit with the features of the independent patent claim relating to a control unit, and a vehicle with the features of the independent vehicle claim.

[0002] Vehicles are known to have a control unit. Within the vehicle and / or the control unit, functional units, particularly at least partially software-based functional units such as internet radio, online navigation, and the like, can be provided. These functional units can have sub-functional units and / or be linked or connected to them. The sub-functional units can be configured to provide sub-functions, which preferably enable the functional unit (or different functional units) to perform its functionality. A simple example would be a functional unit that provides and / or features internet radio. Corresponding sub-functional units or sub-functions can include (software-implemented and / or hardware-implemented) data connections, transmit / receive units, URLs, TLS encryption / settings, and / or MQTT protocols.In particular, different functional units can access one or more (same and / or different) sub-functional units and / or depend on their (functionality).

[0003] The current state of the art has its drawbacks. For example, if one or more functional units and / or sub-functional units malfunction, provision and / or operation may be impossible, or only possible with reduced functionality. Furthermore, the underlying problem and / or the activation actions required to restore a (non-existent) functionality may be unknown and / or impossible to determine. For instance, a vehicle user might only be notified that a function is (generally) unavailable. This can reduce efficiency and / or comfort. It can also reduce robustness and / or safety, for example, if (at least partially) autonomous and / or automated and / or driver assistance functions cannot be provided (e.g., a modern adaptive cruise control system or similar).It may also result in costs for drivers and / or manufacturers if (different) faults, especially for different drivers and / or vehicles, have to be rectified (separately).

[0004] Therefore, one task can be to at least partially reduce one of the above disadvantages. This could involve improving comfort, efficiency, robustness, safety, expandability, maintenance requirements, and / or costs.

[0005] The foregoing problem is solved by a method with the features of the independent method claim, a computer program product with the features of the independent patent claim relating to a computer program product, a computer-readable data carrier with the features of the independent patent claim relating to a computer-readable data carrier, a control unit with the features of the independent patent claim relating to a control unit, and a vehicle with the features of the independent vehicle claim. Further features and details of the invention will become apparent from the dependent claims, the description, and the drawings.Features and details described in connection with the method according to the invention naturally also apply in connection with the computer program product according to the invention and / or in connection with the computer-readable data carrier according to the invention and / or in connection with the control unit according to the invention and / or in connection with the vehicle according to the invention, and vice versa, so that the disclosure relating to the individual aspects of the invention always refers to each other. In particular, advantages described within the first, second, third, fourth and / or fifth aspect also apply to the first, second, third, fourth and / or fifth aspect.

[0006] The above problem is solved, according to a first aspect, by a method for operating a vehicle, comprising: - Detection, by a control unit of the vehicle, a multitude of functional units and a multitude of sub-functional units, - Detect, by the control unit, a multitude of malfunctions, each malfunction being specific to one functional unit of the multitude of functional units, - Detect, by the control unit, a plurality of sub-function malfunctions, each sub-function malfunction being specific to one sub-function unit of the plurality of sub-function units, - Determining, through the control unit, a connection structure between each functional unit of the multitude of functional units and each sub-functional unit of the multitude of sub-functional units, - Determine, by the control unit, from a transmission plan encompassing transmission data and transmission paths depending on the multitude of functional malfunctions, the multitude of sub-functional malfunctions, and the connection structure, - Transmitting, by the control unit, the transmission data via the transmission paths depending on the transmission plan, - Operation of the vehicle by the control unit depending on the transmitted data.

[0007] The method according to the first aspect can be at least partially computer-implemented and / or repeated. Advantageously, the method can perform at least one of the described steps, preferably sequentially in the specified order or, alternatively, in any other arbitrary order, and / or individual steps can optionally be repeated. Preferably, the method can be performed at, before, and / or (preferably) during a standstill, charging, parking, operation, or use of a vehicle and / or control unit. Operation can include (manual) driving, autonomous driving, and / or (at least partially) automated driving. It can be provided that the method is performed at least partially during vehicle start-up, commissioning, and / or maintenance.It is conceivable that the procedure could be carried out, for example, while a vehicle is undergoing an inspection and / or refurbishment (or complete overhaul). In this case, a control unit could implement the procedure (at least partially), for example, by (combining) performing the steps mentioned above and / or controlling and / or regulating relevant components (e.g., steering unit and / or drive unit and / or transmitter / receiver unit).

[0008] Within the scope of the invention, a vehicle can comprise a motor vehicle and / or a truck. The vehicle can be equipped for operation, in particular for autonomous and / or (at least partially) automated driving. For example, the vehicle can be an electric vehicle.

[0009] A functional unit can be and / or provide a (vehicle) function that is at least partially implemented in software (as a computer program or part of a computer program) and / or hardware (e.g., as an integrated electronic unit, ASIC, and / or FPGA). For example, a functional unit can have and / or provide: - Internet radio, - (Online) navigation and / or - at least partially automated and / or autonomous driving, for example via software and / or hardware-implemented driving functions.

[0010] A sub-functional unit can be a function implemented at least partially in software (as a computer program or part of a computer program) and / or hardware (e.g., as an integrated electronic unit, ASIC, and / or FPGA) and / or provide it. A sub-functional unit can be subordinate to, linked with, (data-communicating with), and / or assigned to at least one or more functional units. Accordingly, a sub-functional unit can have and / or provide one or more sub-functions, in particular to one or more functional units. For example, a sub-functional unit can have and / or provide: - a data transfer, - Communication information and / or communication protocols, - one or more URLs, - Encryption information and / or encryption protocols, - MQTT protocols, - Control signals and / or regulation signals and / or signal sequences, e.g. for autonomous and / or automated driving and / or - Privacy information, access information and / or authorization information.

[0011] The functional unit(s) and / or sub-functional unit(s) can be implemented and / or executed, at least partially, by a control unit and / or further control units. It can also be provided that (at least) one further control unit executes them (partially). The control units can be interconnected via data communication.

[0012] Capturing the multitude of functional units can (only) encompass a single functional unit, which in particular has one (subordinate or dependent) or several (a multitude) sub-functional units. A sub-functional unit can also be linked to several different functional units and / or provide sub-functions to them.

[0013] The recording of the multitude of sub-functional units can (only) encompass a single sub-functional unit, which is in particular subordinate to or dependent on one or more functional units.

[0014] In the simplest case, there can be only one functional unit and one sub-functional unit. It is also possible to have one functional unit and several sub-functional units. Furthermore, it is possible to have multiple functional units (e.g., two or more) and multiple sub-functional units (e.g., two or three or more).

[0015] It may be intended that the assignment and / or linking changes, particularly dynamically. It may be intended that new functional unit(s) and / or subfunctional unit(s) are added, for example, as part of new functions and / or an update. Likewise, (existing) functional unit(s) and / or subfunctional unit(s) can be deactivated and / or removed. This allows for dynamic changes (module by module). This enables the flexible implementation of new functions, which can be implemented at least partially in software and / or hardware.

[0016] It may be provided that during and / or through the acquisition process, another control unit receives an acquisition signal, e.g., via a data connection. The acquisition can then be carried out, at least partially, for and / or by the other control unit.

[0017] It may be possible for change information to be transmitted to the control unit(s) during and / or before data capture, for example from the backend, e.g., via a (wireless) data connection such as the internet. Depending on the change information, the state of the functional units and / or sub-functional units may change, e.g., through an update, deactivation (e.g., for security reasons), and / or (re)configuration.

[0018] Determining the functional malfunction(s) and / or subfunctional malfunction(s), or their respective number, can include determining a functional status and / or operational readiness. This can be carried out individually and / or separately for each functional unit and / or subfunctional unit.

[0019] A malfunction can be specific to a partial or (preferably) complete lack of functionality within a functional unit. Accordingly, a malfunction can be present and / or positive if the functionality of the functional unit is at least partially absent. The control unit can determine this, for example, via a test routine. In the simplest case, a malfunction may or may not be present.

[0020] A subfunction malfunction can be specific to a partial or (preferably) complete lack of functionality within a subfunction. Accordingly, a subfunction malfunction can be present and / or positive if the functionality of the subfunction is at least partially absent. The control unit can determine this, for example, via a test routine. In the simplest case, a subfunction malfunction may or may not be present.

[0021] It may be planned that (first) a large number of functional malfunctions are identified, and in particular subsequently a large number of sub-functional malfunctions are identified.

[0022] Determining a transmission plan can involve defining transmission data and transmission paths, which may be specifically designed depending on the functional and / or subfunctional malfunctions and / or the connection structure. Accordingly, the transmission plan can determine which transmission data should be transmitted via which transmission paths, for example, based on the (already determined) connection structure. The transmission data can be specific to the functional units and / or subfunctional units, particularly to the respective functional and / or subfunctional malfunctions. Similarly, the transmission paths can be specific to the functional units and / or subfunctional units and / or the (data) connections between them.It is particularly preferred that the transmission data includes the functional and / or subfunctional malfunctions, in particular comprising a respective identifier and / or information (e.g., identifier) ​​of the relevant functional and / or subfunctional unit. It may also include a corresponding activation requirement. The transmission paths may have corresponding data connections, which are arranged (physically and / or software-based) between the functional and / or subfunctional units. Furthermore, the transmission data may be transmitted cascaded across the transmission paths according to the transmission plan. This allows the control unit to determine how the number and / or distance of the transmission paths could be minimized.

[0023] The transmission of data via the transmission paths can be configured to make the data available to the respective functional unit and / or sub-functional unit. Thus, for example, in the event of a functionally critical sub-functional malfunction, a corresponding functional unit can determine that and / or why its functionality may be restricted. Based on this, appropriate operational measures can be taken (see below).

[0024] Within the scope of the invention, it can be advantageous that the multitude of functional units and / or the multitude of sub-functional units are at least partially designed as software and / or hardware, which are implemented in particular by the control unit and / or another control unit of the vehicle.

[0025] Within the scope of the invention, it is conceivable that, particularly before detection, a deactivation is carried out which at least partially deactivates the plurality of functional units and / or the plurality of sub-functional units, wherein the plurality of functional malfunctions and / or the plurality of sub-functional malfunctions exhibit at least partial software deactivation, wherein in particular the deactivation by the control unit is designed as a function of a deactivation command originating from another control unit, a backend and / or a user of the vehicle.

[0026] A functional malfunction and / or subfunctional malfunction can (therefore) be due to a (physical and / or software-based) defect and / or to deactivation. In each case, the function may be completely or partially reduced.

[0027] Within the scope of the invention, it may be provided that the determination of a connection structure for each functional unit of the plurality of functional units comprises a subdivision of the plurality of sub-functional units, wherein the subdivision - functionally essential sub-functional units are identified, whereby the functionally essential sub-functional units provide at least one functionally essential sub-function that is absolutely necessary for the functionality of the functional unit, - optional sub-functional units are identified, wherein the optional sub-functional units provide at least one optional sub-function that is optional for a functionality of the functional unit, - Irrelevant sub-functional units are identified, whereby the irrelevant sub-functional units are irrelevant for a functionality of the functional unit.

[0028] Determining the connection structure allows for the identification of the dependency of each functional unit on each sub-functional unit. This involves verifying the connection between each functional unit and each sub-functional unit, particularly on an individual basis. This allows for the determination of which functional units depend on which sub-functional units, especially to provide their full functionality. For example, an internet radio might be designed to have: - Communication information, a data connection, a transmitting and / or receiving unit as functionally essential sub-functional units, - Encryption information as optional sub-functional units, - Media information, e.g., song lyrics, logos, image information, and / or - Authorization information as irrelevant sub-functional units.

[0029] Understanding the connection structure allows for subsequent verification of functionality. Through this structure, sub-functional units can provide their services, functionality, and / or (sub-)functions to a functional unit.

[0030] It is also conceivable that when a large number of sub-function malfunctions are identified for each sub-function unit, non-functional sub-functions are identified, in particular non-functional essential sub-functions and / or non-functional optional sub-functions.

[0031] This allows for a (more precise) determination of which sub-functions require a full or partial range of functions.

[0032] It is also conceivable that, during the determination process, the transmission data and transmission paths for each functional unit of the multitude of functional units are determined (only) depending on the non-functional sub-functions, in particular (only) the non-functional essential sub-functions and / or non-functional optional sub-functions, wherein preferably the transmission data includes the non-functional essential sub-functions and the non-functional optional sub-functions (or a corresponding identifier and / or a name and / or [sub-]function error message), wherein in particular the transmission paths are determined for each functional unit and for this functional unit specific essential sub-function units and optional sub-function units.

[0033] Preferably, the transmission paths can provide an information flow from the sub-functional unit(s), in particular from those exhibiting a sub-functional malfunction, towards the functional unit(s) (or vice versa).

[0034] The transmission paths between a functional unit(s) and the sub-functional units specific to them (essential and / or optional) can be provided / specific.

[0035] Within the scope of the invention, it is optionally possible that, particularly after transmission, the control unit determines activation requirements depending on the multitude of functional malfunctions and / or the multitude of sub-functional malfunctions.

[0036] This allows for the determination of activation requirements for each functional unit and / or sub-functional unit.

[0037] Activation requirements may include, for example: - disabling private mode, - configuring a data transmission protocol, - downloading an update, - the reset and / or repair of a software (function), - the reset and / or repair of a hardware (function), - verifying and / or acquiring a license, - entering an activation key and / or - configuring a (data) connection.

[0038] Furthermore, it may be provided within the scope of the invention that, in particular after the transmission and / or determination of activation requirements, the control unit performs a re-determination of a current plurality of functional malfunctions and / or a re-determination of a current plurality of sub-functional malfunctions, whereby in particular a current activation state is determined for each functional unit of the plurality of functional units.

[0039] The (above) steps of recording, identifying and determining, transmitting and / or operating can be repeated.

[0040] With regard to the present invention, it is conceivable that the transmission from at least one sub-functional unit of the plurality of sub-functional units to a functional unit of the plurality of functional units is carried out, in particular via an intermediate data connection and / or that the transmission from at least one functional unit of the multitude of functional units to a sub-functional unit of the multitude of sub-functional units is carried out, in particular via an intermediate data connection.

[0041] A data connection can be at least partially implemented in software and / or hardware.

[0042] Furthermore, it is conceivable that the operation of the vehicle by the control unit, depending on the transmitted data, involves at least one of the following steps: - the output of a detailed error message, in particular depending on the non-functional sub-functions, for example the non-functional essential sub-functions and / or the non-functional optional sub-functions, and / or depending on the functional malfunctions and / or sub-function malfunctions, via a display unit of the vehicle, in particular to a user of the vehicle, and / or - limited operation of the vehicle using the functional unit, which only provides a limited range of functions.

[0043] Within the scope of the invention, it may be advantageous that the operation of the vehicle by the control unit, depending on the transmitted data, includes activating and / or deactivating the functional unit and / or the sub-functional unit, wherein at least one of the following steps is carried out: - a transfer of activation data from a backend to the vehicle, in particular to the control unit, wherein the activation data is configured to enable, in particular depending on the transmission data, the activation of the functional unit, in particular with full functionality, for example by implementing a (software) update for a functional unit and / or functionally essential (and / or optional) sub-functional unit, - the acquisition of a license, in particular depending on the transmission data, for example for a functional unit and / or functionally essential (and / or optional) sub-functional unit, - issuing an authentication request, in particular via a display unit and / or to a user of the vehicle, whereby, in particular after authentication, the functional unit and / or functionally essential (and / or optional) sub-functional unit can be activated, and / or - disabling a private mode of the control unit.

[0044] The transfer process can be configured to bring each functional unit and / or sub-functional unit(s) into a fully functional state. This can result in a full range of functions being available. In this process, all functional units and / or sub-functional units can be configured, or become configured, through their respective activation data to provide their function and / or sub-function again.

[0045] It may also be possible to provide the backend with relevant transmission data and / or information, in particular the status of the vehicle, its functional units, and / or sub-functional units, and specifically how activation and / or deactivation can be performed. This allows the backend to provide a quick and / or proven solution, especially for similar problems encountered in other vehicles.

[0046] The above problem is solved according to a second aspect by a computer program product according to the invention, comprising instructions which, when the computer program product is executed by a computer, in particular a control unit, cause it to implement the method according to the first aspect.

[0047] This results in the same advantages with regard to a computer program product according to the invention as have already been described with regard to a method according to the first aspect.

[0048] The above problem is solved according to a third aspect by a computer-readable data carrier according to the invention, in which instructions are stored which, when executed by a computer, in particular a control unit, cause it to carry out the method according to the first aspect.

[0049] This results in the same advantages with regard to a computer-readable data carrier according to the invention as have already been described with regard to a method according to the first aspect and / or a computer program product according to the second aspect.

[0050] The above problem is solved according to a fourth aspect by a control unit according to the invention, comprising a computing unit and / or a storage unit in which instructions are stored which, when at least partially executed by the computing unit, carry out a method according to the first aspect.

[0051] The control unit can include a storage unit and / or a computing unit, in particular a processor and / or data processing means. The control unit can be connected to the backend for data communication, in particular via a data connection. Accordingly, the control unit can control the backend, e.g., via a control signal, and / or receive data from it. This allows the control unit to implement the process (at least partially). It can be provided that the control unit and / or another control unit includes, implements, and / or is connected to the functional unit(s) and / or sub-functional unit(s), in particular at least partially. The control unit and the other control unit can be connected for data communication, e.g., via a data connection.It is also possible for the control unit to be designed as a central control unit, which is preferably connected to (at least) one further (sub-)control unit. Accordingly, the functional unit(s) and / or sub-functional unit(s) can be implemented at least partially in and / or as software within the control unit and / or the further control unit(s). During operation, the control unit can perform control and / or regulation, for example, depending on one or more of the functional units. For instance, driver assistance functions of a functional unit can be used fully (e.g., after activation) or partially (with restrictions), while simultaneously displaying to the driver which (sub-)functions are unavailable (and / or why) and / or how this can be remedied (see above).

[0052] This results in the same advantages with regard to a control unit according to the invention as have already been described with regard to a method according to the first aspect and / or a computer program product according to the second aspect and / or a computer-readable data carrier according to the third aspect.

[0053] The above problem is solved according to a fifth aspect by a vehicle according to the invention, comprising a control unit, according to the fourth aspect.

[0054] This results in the same advantages with regard to a vehicle according to the invention as have already been described with regard to a method according to the first aspect and / or a computer program product according to the second aspect and / or a computer-readable data carrier according to the third aspect and / or a control unit according to the fourth aspect.

[0055] Further advantages, features, and details of the invention will become apparent from the following description, in which several embodiments of the invention are described in detail with reference to the drawings. The features mentioned in the claims and in the description can each be essential to the invention individually or in any combination. The following are shown as examples: Fig. 1 a procedure Fig. 2 a vehicle, and Fig. 3 a multitude of functional units.

[0056] The figures use identical reference numerals for the same technical features, even for different embodiments.

[0057] Fig. Figure 1 shows a method for operating a vehicle 200, comprising: - Capture 110, by a control unit ECU of the vehicle 200, a multitude of functional units 11, 12 and a multitude of sub-functional units 21, 22, 23, - Detect 120, by the control unit ECU, a plurality of functional malfunctions Err11, Err12, wherein each functional malfunction Err11, Err12 is specific for one functional unit 11, 12 of the plurality of functional units 11, 12, - Detect 130, by the control unit ECU, a plurality of sub-function malfunctions Err21, Err22, Err23, wherein each sub-function malfunction Err21, Err22, Err23 is specific for each sub-function unit 21, 22, 23 of the plurality of sub-function units 21, 22, 23, - Determine 140, by the control unit ECU, a connection structure Con between each functional unit 11, 12 of the plurality of functional units 11, 12 and each sub-functional unit 21, 22, 23 of the plurality of sub-functional units 21, 22, 23, - Determine 150, by the control unit ECU, from a transmission plan T comprising transmission data T_dat and transmission paths T_path depending on the multitude of functional malfunctions Err11, Err12, the multitude of sub-functional malfunctions Err21, Err22, Err23 and the connection structure Con, - Transmit 160, by the control unit ECU, of transmission data T_dat via the transmission paths T_path depending on the transmission plan T, - Operation of vehicle 200 by the control unit ECU depending on the transmitted data T_dat.

[0058] Within the scope of the invention, it can be advantageous that the plurality of functional units 11, 12 and / or the plurality of sub-functional units 21, 22, 23 are at least partially designed as software, which is implemented in particular by the control unit ECU and / or another control unit of the vehicle 200.

[0059] Within the scope of the invention, it is conceivable that, in particular before the detection 110, a deactivation 105 is carried out, which at least partially deactivates the plurality of functional units 11, 12 and / or the plurality of sub-functional units 21, 22, 23, wherein the plurality of functional malfunctions Err11, Err12 and / or the plurality of sub-functional malfunctions Err21, Err22, Err23 have at least partial software deactivation, wherein in particular the deactivation 105 is designed by the control unit ECU depending on a deactivation command originating from a further control unit, a backend 300 and / or a user of the vehicle 200.

[0060] Within the scope of the invention, it may be provided that the fixing 140 of a connecting structure Con for each functional unit 11, 12 of the plurality of functional units 11, 12 comprises a subdivision 141 of the plurality of sub-functional units 21, 22, 23, wherein the subdivision 141 - Functionally essential sub-functional units 21f, 22f, 23f are determined, wherein the functionally essential sub-functional units 21f, 22f, 23f provide at least one functionally essential sub-function fsub_f that is absolutely necessary for the functionality of the functional unit 11, 12, - optional sub-function units 21o, 22o, 23o are determined, wherein the optional sub-function units 21o, 22o, 23o provide at least one optional sub-function fsub_o, which is optional for a functionality of the function unit 11, 12, - irrelevant sub-functional units are identified, whereby the irrelevant sub-functional units are irrelevant for a functionality of the functional unit 11, 12.

[0061] It is also conceivable that, during the detection process 130, a multitude of sub-function malfunctions Err21, Err22, Err23 are identified for each sub-function unit 21, 22, 23, specifically non-functional sub-functions fsub_no, in particular non-functional essential sub-functions fsub_no_f and / or non-functional optional sub-functions fsub_no_o. Alternatively or additionally, this may be carried out during the detection process 140.

[0062] It is also conceivable that, during the determination process 150, the transmission data T_dat and the transmission paths T_path for each functional unit 11, 12 of the plurality of functional units 11, 12 are determined depending on the non-functional sub-functions fsub_no, in particular the non-functional essential sub-functions fsub_no_f and / or non-functional optional sub-functions fsub_no_o, wherein preferably the transmission data T_dat includes the non-functional essential sub-functions fsub_no_f and the non-functional optional sub-functions fsub_no_o, wherein in particular the transmission paths T_path are determined for each functional unit 11, 12 and for these functional units 11, 12 specific essential sub-function units 21f, 22f, 23f and optional sub-function units 21o, 22o, 23o.

[0063] Within the scope of the invention, it is optionally possible that, particularly after transmission 160, the control unit ECU performs a determination 161 of activation requirements depending on the multitude of functional malfunctions Err11, Err12 and / or the multitude of sub-functional malfunctions Err21, Err22, Err23.

[0064] Furthermore, it may be provided within the scope of the invention that, in particular after the transmission 160 and / or determination 161 of activation requirements, the control unit ECU performs a re-detection 220 of a current plurality of functional malfunctions Err11, Err12 and / or a re-detection 230 of a current plurality of sub-functional malfunctions Err21, Err22, Err23, whereby in particular a current activation state for each functional unit 11, 12 of the plurality of functional units 11, 12 is determined.

[0065] With regard to the present invention, it is conceivable that the transmission 160 from at least one sub-functional unit 21, 22, 23 of the plurality of sub-functional units 21, 22, 23 to a functional unit 11, 12 of the plurality of functional units 11, 12 is carried out, in particular via an intermediate data connection Con1, Con2, Con3 and / or that the transmission 160 from at least one functional unit 11, 12 of the plurality of functional units 11, 12 to a sub-functional unit 21, 22, 23 of the plurality of sub-functional units 21, 22, 23 is carried out, in particular via an intermediate data connection Con1, Con2, Con3.

[0066] Furthermore, it is conceivable that the operation of vehicle 200 by the control unit ECU, depending on the transmission data T_dat, involves at least one of the following steps: - Output of a detailed error message 171, in particular depending on the non-functional sub-functions fsub_no, for example the non-functional essential sub-functions fsub_no_f and / or the non-functional optional sub-functions fsub_no_o, and / or depending on the functional malfunctions Err11, Err12 and / or sub-functional malfunctions Err21, Err22, Err23, via a display unit of the vehicle 200, in particular to a user of the vehicle 200, and / or - limited operation 172 of the vehicle 200 using the functional unit 11, 12, which provides only a limited range of functions.

[0067] Within the scope of the invention, it can be advantageous that the operation 170 of the vehicle 200 by the control unit ECU, depending on the transmission data T_dat, includes an activation 173 of the functional unit 11, 12 and / or the sub-functional unit 21, 22, 23, wherein at least one of the following steps is carried out: - a transfer 174 of activation data from a backend 300 to the vehicle 200, in particular to the control unit ECU, wherein the activation data is configured to enable, in particular depending on the transmission data T_dat, an activation 173 of the functional unit 11, 12, in particular with a full range of functions, - acquiring a license, in particular depending on the transmission data T_dat, - issuing an authentication request, in particular via a display unit and / or to a user of the vehicle, and / or - a deactivation 177 of a private mode of the control unit ECU.

[0068] Fig. Figure 2 shows a vehicle 200 comprising a control unit ECU having a processing unit CU and a storage unit MU. The control unit ECU can be configured to execute the procedure according to the first aspect and / or according to Fig. 1. The control unit ECU can be connected via a data connection to an (external) backend 300, e.g., a manufacturer's cloud. The control unit ECU can be connected via a data connection to at least one functionally essential component of the vehicle 200, for example, a steering unit and / or a drive unit. This allows the control unit ECU to operate 170 the vehicle 200. It can also be provided that the control unit ECU has a connection structure Con, whereby, in particular, the functional unit(s) 11, 12 and / or sub-functional units 21, 22, 23 are interconnected. The functional unit(s) 11, 12 and / or sub-functional units 21, 22, 23 can be configured (at least partially) separately from the control unit ECU (as shown).The functional unit(s) 11, 12 and / or sub-functional units 21, 22, 23 can be (at least partially) implemented by and / or in the control unit ECU, e.g. as software.

[0069] Fig.Figure 3 shows a plurality of functional units 11, 12, in this case two in total. A (first) functional unit 11 can be provided, which, in particular according to a connection structure Con, is connected to a plurality of sub-functional units 21, 22, 23 or to the sub-functional units 21, 22, 23. The (second) functional unit 12 can, in particular according to a connection structure Con, be connected (only) to a sub-functional unit 22. Thus, the functional unit 11, 12 can depend on the provision of certain sub-functions by the sub-functional unit 22. The following primarily describes the procedure for the functional unit 11, although this can be applied analogously to a plurality of functional units. When subdividing 141, the following can be determined for a functional unit 11: - functionally essential sub-functional units 21f, 22f, in particular the sub-functional units 21, 22 (continuous data connections Con1, Con2), - optional sub-functional units 23o, in particular sub-functional unit 23, and / or - whereby the remaining (not shown) sub-functional units may represent correspondingly irrelevant sub-functional units.

[0070] Sub-function unit 22 may exhibit a sub-function malfunction Err22. For example, sub-function unit 22 may be defective and / or (currently) blocked by an update (which can be transmitted via backend 300). Consequently, no (or only a reduced) range of (sub-)functions can be provided from sub-function unit 22 to function unit 11 (analogously, for example, for function unit 12). Therefore, upon detection 130, non-functional essential sub-functions fsub_no_f (here sub-function 22f) and / or non-functional optional sub-functions fsub_no_o (here sub-function 23o, especially since this is optional for function unit 11) can be identified. According to a transmission plan T generated (by detection 150), transmission data T_dat can now be defined via the transmission paths T_path.For example, in this case, transmission data T_dat can be structured depending on the non-functional essential subfunctions fsub_no_f (here subfunctions 21f, 22f) and / or non-functional optional subfunctions fsub_no_o (here subfunction 23o), in particular by including or (preferably) including an identification and / or a reason for the malfunction. In other words, subfunction unit 22 can inform function unit 11 via the transmission path T_path or the data connection Con2 that subfunction unit 22 has no functionality, or that subfunction unit 22 cannot provide any (sub)function(s) to function unit 11, particularly due to the subfunction malfunction Err2 and / or because it represents a non-functional essential subfunction fsub_no_f.For example, the transmission data T_dat could contain information that the sub-functional unit 22:. - has a non-functional, functionally essential sub-functional unit fsub_no_f and / or - is blocked by an update.

[0071] A similar or analogous procedure can also be applied to functional unit 12, for which sub-functional unit 22 also represents a non-functional, functionally essential sub-functional unit fsub_no_f.

[0072] Accordingly, by transmitting 160, it can be achieved that the functional units 11, 12, for example during operation 170, especially during output 171, can provide a detailed error message. Reference symbol list 105 Deactivate 110 Capturing a large number of functional units 120 Identifying a multitude of malfunctions 130 Identifying a multitude of sub-function malfunctions 140 Identifying a connection structure 141 Subdivision of the multitude of sub-functional units 150 Determining a transmission plan 160 Transmission of transmission data via the transmission paths 161 Determining activation requirements 170 Operating a vehicle 171 Outputting a detailed error message 172 Restricted operation of the vehicle 173 Activating the functional unit 174 Transferring activation data from a backend 175 Acquiring a license 176 Issuing an authentication request 177 Deactivating private mode 200 vehicles 220 Identifying a current multitude of malfunctions 230 Identifying a current multitude of sub-function malfunctions 300 Backend 11, 12 functional unit(s) 21, 22, 23 Subfunctional unit(s) 21f, 22f, 23f functionally essential sub-functional units 21o, 22o, 23o optional sub-functional units Con connection structure Con1, Con2, Con3 Data connection ECU control unit CU computing unit MU storage unit Err11, Err12 functional malfunction(s) Err21, Err22, Err23 Subfunction malfunction(s) fsub_f essential subfunction fsub_o optional subfunction fsub_no non-functional subfunctions fsub_no_f non-functional essential subfunctions fsub_no_o non-functional optional subfunctions T transmission plan T_dat transmission data T_path transmission paths

Claims

[1] Method for operating (170) a vehicle (200), comprising: - Detection (110), by a control unit (ECU) of the vehicle (200), a multitude of functional units (11, 12) and a multitude of sub-functional units (21, 22, 23), - Detect (120), by the control unit (ECU), a plurality of functional malfunctions (Err11, Err12), wherein each functional malfunction (Err11, Err12) is specific to one functional unit (11, 12) of the plurality of functional units (11, 12), - Detect (130), by the control unit (ECU), a plurality of sub-function malfunctions (Err21, Err22, Err23), wherein each sub-function malfunction (Err21, Err22, Err23) is specific for each sub-function unit (21, 22, 23) of the plurality of sub-function units (21, 22, 23), - Determining (140), by the control unit (ECU), a connection structure (Con) between each functional unit (11, 12) of the plurality of functional units (11, 12) and each sub-functional unit (21, 22, 23) of the plurality of sub-functional units (21, 22, 23), - Determine (150), by the control unit (ECU), from a transmission plan (T) comprising transmission data (T_dat) and transmission paths (T_path) depending on the multitude of functional malfunctions (Err11, Err12), the multitude of sub-functional malfunctions (Err21, Err22, Err23) and the connection structure (Con), - Transmitting (160) the transmission data (T_dat) by the control unit (ECU) via the transmission paths (T_path) depending on the transmission plan (T), - Operation (170) of the vehicle (200) by the control unit (ECU) depending on the transmitted data (T_dat). [2] Method according to claim 1, characterized by, that the multitude of functional units (11, 12) and / or the multitude of sub-functional units (21, 22, 23) are at least partially designed as software, which is implemented in particular by the control unit (ECU) and / or another control unit of the vehicle (200). [3] Method according to claim 1 or 2, characterized by, that, in particular before the detection (110), a deactivation (105) is carried out which at least partially deactivates the plurality of functional units (11, 12) and / or the plurality of sub-functional units (21, 22, 23), wherein the plurality of functional malfunctions (Err11, Err12) and / or the plurality of sub-functional malfunctions (Err21, Err22, Err23) exhibit at least partial software deactivation, wherein in particular the deactivation (105) is designed by the control unit (ECU) depending on a deactivation command originating from another control unit, a backend (300) and / or a user of the vehicle (200). [4] Method according to any one of the preceding claims, characterized by, that the determination (140) of a connection structure (Con) for each functional unit (11, 12) of the plurality of functional units (11, 12) comprises a subdivision (141) of the plurality of subfunctional units (21, 22, 23), wherein the subdivision (141) - functionally essential sub-functional units (21f, 22f, 23f) are determined, wherein the functionally essential sub-functional units (21f, 22f, 23f) provide at least one functionally essential sub-function (fsub_f) that is absolutely necessary for the functionality of the functional unit (11, 12), - optional sub-function units (21o, 22o, 23o) are determined, wherein the optional sub-function units (21o, 22o, 23o) provide at least one optional sub-function (fsub_o) that is optional for a functionality of the function unit (11, 12), - irrelevant sub-functional units are identified, whereby the irrelevant sub-functional units are irrelevant for a functionality of the functional unit (11, 12). [5] Method according to any one of the preceding claims, characterized by , that when detecting (130) a plurality of subfunction malfunctions (Err21, Err22, Err23) for each subfunction unit (21, 22, 23) non-functional subfunctions (fsub_no) are identified, in particular non-functional essential subfunctions (fsub_no_f) and / or non-functional optional subfunctions (fsub_no_o). [6] Method according to claim 5, characterized by, that in the determination (150) the transmission data (T_dat) and the transmission paths (T_path) for each functional unit (11, 12) of the plurality of functional units (11, 12) are determined depending on the non-functional sub-functions (fsub_no), in particular the non-functional essential sub-functions (fsub_no_f) and / or non-functional optional sub-functions (fsub_no_o), wherein preferably the transmission data (T_dat) include the non-functional essential sub-functions (fsub_no_f) and the non-functional optional sub-functions (fsub_no_o) and / or the plurality of functional malfunctions (Err11, Err12) and / or the plurality of sub-function malfunctions (Err21, Err22, Err23), wherein in particular the transmission paths (T_path) are determined for each functional unit (11, 12) and for this functional unit (11, 12) specific functionally essential sub-functional units (21f, 22f,23f) and optional sub-functional units (21o, 22o, 23o) are determined. [7] Method according to any one of the preceding claims, characterized by , that, in particular after transmission (160), the control unit (ECU) performs a determination (161) of activation requirements depending on the multitude of functional malfunctions (Err11, Err12) and / or the multitude of sub-functional malfunctions (Err21, Err22, Err23). [8] Method according to any one of the preceding claims, characterized by, that, in particular after the transmission (160) and / or determination (161) of activation requirements, the control unit (ECU) performs a re-detection (220) of a current plurality of functional malfunctions (Err11, Err12) and / or a re-detection (230) of a current plurality of sub-functional malfunctions (Err21, Err22, Err23), thereby in particular determining a current activation state for each functional unit (11, 12) of the plurality of functional units (11, 12). [9] Method according to any one of the preceding claims, characterized by, that the transmission (160) from at least one sub-functional unit (21, 22, 23) of the plurality of sub-functional units (21, 22, 23) to a functional unit (11, 12) of the plurality of functional units (11, 12) is carried out, in particular via an intermediate data connection (Con1, Con2, Con3), and / or that the transmission (160) from at least one functional unit (11, 12) of the plurality of functional units (11, 12) to a sub-functional unit (21, 22, 23) of the plurality of sub-functional units (21, 22, 23) is carried out, in particular via an intermediate data connection (Con1, Con2, Con3). [10] Method according to any one of the preceding claims, characterized by , that the operation (170) of the vehicle (200) by the control unit (ECU) depending on the transmitted data (T_dat) includes at least one of the following steps: - output (171) a detailed error message, in particular depending on the non-functional sub-functions (fsub_no), for example the non-functional essential sub-functions (fsub_no_f) and / or the non-functional optional sub-functions (fsub_no_o), via a display unit of the vehicle (200), in particular to a user of the vehicle (200), and / or - limited operation (172) of the vehicle (200) using the functional unit (11, 12), which provides only a limited range of functions. [11] Method according to any one of the preceding claims, characterized by , that the operation (170) of the vehicle (200) by the control unit (ECU) depending on the transmission data (T_dat) involves an activation (173) of the functional unit (11, 12) and / or the sub-functional unit (21, 22, 23), wherein at least one of the following steps is performed: - a transfer (174) of activation data from a backend (300) to the vehicle (200), in particular to the control unit (ECU), wherein the activation data is configured to enable, in particular depending on the transmission data (T_dat), an activation (173) of the functional unit (11, 12), in particular with a full range of functions, - the acquisition (175) of a license, in particular depending on the transmission data (T_dat), - issuing (176) an authentication request, in particular via a display unit and / or to a user of the vehicle (200), and / or - a deactivation (177) of a private mode of the control unit (ECU). [12] Computer program product comprising instructions which, when the computer program product is executed by a computer, cause it to implement the method according to any of the preceding claims. [13] A computer-readable data carrier in which instructions are stored which, when executed by a computer, cause it to carry out the method according to one of the preceding claims. [14] Electronic control unit (ECU) comprising a computing unit (CU) and / or a storage unit (MU) in which instructions are stored which, when at least partially executed by the computing unit (CU), perform a method according to one of the preceding claims. [15] Vehicle (200) comprising a control unit (ECU) according to the preceding claim.

Images