Electronic protection device for a system with multiple electrical functional modules for protection against electromagnetic radiation, as well as system and method thereof

Abstract

The invention relates to an electronic protection device (10) for a system (100) with several electrical function modules (16) for protection against electromagnetic radiation, comprising several peripheral modules (14) and a central monitoring module (12) for detecting the start of an event (52). The peripheral modules (14) are each configured to leave the operation of a connectable function module (16) essentially unaffected in a normal state of the peripheral module (14), to switch from a normal state to a protection state when the start of an event (52) is signaled by the central monitoring module (12), and to influence the operation of the connectable function module (16) in the protection state. The invention further relates to a system (100) with an electronic protection device (10) and a method (200) for operating an electronic protection device (10).

Description

The invention relates to the field of protective devices for systems comprising multiple electrical functional modules. Systems with electrical functional modules are well known and include, for example, technical equipment such as machines, vehicles, or control rooms for coordinating manufacturing and / or monitoring processes in the industrial or commercial sector. Functional modules can correspond to individual control and / or monitoring modules of different units within the system. For example, a single functional module can execute a single process step in a manufacturing process, so a controller for a robot arm could be considered a functional module. Another example of a system with multiple electrical functional modules is a vehicle, which includes several control units, such as an engine control unit, where each of the control units can be referred to as a functional module. Such systems, which can sometimes also be referred to as electronic systems, comprise functional modules that are typically powered by an energy source, such as a battery or a mains connection, and are connected to other components and / or to each other via communication lines. These systems, and in particular the functional modules, are inherently susceptible to overvoltages, which can, for example, originate from a power supply. It is known that protective devices against such overvoltages from a power supply network are provided; these protective devices can also be referred to as electronic protection devices or surge protection. In addition to power surges from the grid, events that generate or cause electromagnetic radiation can also negatively impact the function of a functional module. Electromagnetic radiation can arise, for example, from atmospheric discharges such as lightning or magnetized plasma from a solar flare. Furthermore, such events that generate electromagnetic radiation can also be analogous to a nuclear explosion or meltdown, for example, in a nuclear power plant, even if these occur at a great distance. Such effects can also be referred to as Transient Radiation Effects on Electronics (TREE). It is therefore also known to design functional modules in such a way that they are resistant to such events and can maintain their function despite the presence of strong electromagnetic radiation. Such functional modules are also referred to as hardened components or hardened functional modules. For this purpose, special components, such as protective diodes, are incorporated into such functional modules, and / or conductor tracks are laid out or dimensioned in a specific way. Often, the functional modules are additionally surrounded by conductive materials that provide shielding, or such conductive materials are integrated into the functional module to absorb or dissipate electromagnetic radiation. Such specially designed functional modules, which are protected against events, particularly those of the type mentioned, are manufactured only in small quantities and for specific applications, as they are typically used only in safety-critical systems, such as in the aerospace or military sectors. However, it is desirable to also protect systems with standardized functional modules, which are also used in the civilian sector, from these events, especially from the resulting electromagnetic radiation. This is currently not possible due to the high cost of the specially designed functional modules. Document DE 40 22 419 A1 discloses a protective device for safeguarding electronic systems against gamma radiation, comprising a gamma-radiation-sensitive detector, a threshold switch, an event memory, and a timer for switching the electronic system off and on again. The sensor belonging to the protective device is constructed from radiation-resistant components and protects the connected electronic system as a unit by temporarily interrupting the power supply. Document DE 689 03 751 T2 discloses a detector for nuclear events which, upon detection of gamma radiation above a threshold level, selectively disconnects the power supply to sensitive components of electronic equipment. Only the sensitive components are disconnected from the power supply, while the remaining components of the equipment continue to be powered. Additionally, the detector allows for the dissipation of residual energy stored in the disconnected components without interrupting the power supply to the remaining components. Document US 2020 / 0156805 A1 concerns a system for protecting a digital control system embedded in an aircraft, primarily against cyberattacks. In the event of a malfunction, control is transferred to an analog backup control unit that has a power source independent of the digital components. Isolation components separate the digital control unit from the controllable component while simultaneously enabling the activation of the analog control unit. The object of the present invention is to address the problems of the prior art. In particular, it is an object of the present invention to find a way to reliably protect systems against electromagnetic radiation without having to redesign all functional modules of the system. In any case, it is an object of the present invention to present an alternative to what is known from the prior art. Solutions to overcome the aforementioned problems are provided by an electrical protection device in accordance with the independent claims. An electronic protection device for a system with several electrical function modules is proposed for protection against electromagnetic radiation. The electronic protection device comprises a central monitoring module and several peripheral modules. According to one alternative, the central monitoring module is a standalone module, separate from the peripheral modules and / or function modules. According to another alternative, the central monitoring module is integrated into one of the peripheral modules or can be integrated into one of the function modules. Thus, preferably according to the last-mentioned alternative, the central monitoring module is part of one of the peripheral modules or is designed to be integrated into a function module. The central monitoring module is designed to detect the start of an event that causes electromagnetic radiation. Furthermore, the central monitoring module is designed to signal the start of the event to an output device and / or to several peripheral modules, particularly if the central monitoring module is a separate module or a module that can be integrated into a functional module. In the event that the central monitoring module is integrated into a functional module, this functional module can be protected from the central monitoring module by a peripheral module, i.e., electrically connected to a peripheral module, or it can be a functional module that is already structurally protected from electromagnetic radiation and therefore does not have a peripheral module assigned to it. In the event that the central monitoring module is integrated into one of the peripheral modules, the central monitoring module is configured to signal the start of the event to the several other peripheral modules, namely those into which the central monitoring module is not integrated, whereby the start of the event can also be signaled to the peripheral module into which the central monitoring module is integrated. In addition to or instead of directly signaling the start of an event to and / or for the peripheral modules, the central monitoring module is configured as an alternative to signal the start of the event to an output device. The output device can be an optical output device, such as a display, or an acoustic output device, such as a loudspeaker. The start of the event can thus be communicated to a driver or operator of a system equipped with the electronic protection device. The peripheral modules are each electrically connectable to one of the several functional modules. Preferably, the peripheral modules and the functional modules each have electrical contacts to connect the respective peripheral module or functional module to other modules in a system, preferably an electrical one. These contacts of the peripheral modules and functional modules can also be referred to as module interfaces. Thus, each peripheral module preferably has electrical contacts, which can also be referred to as a functional module interface, to establish an electrical connection with a functional module, and these contacts can be connected to contacts of the functional module.The function module interface also includes, for example, a communication interface, which can also be referred to as the function module communication interface, to send requests from the central monitoring module to a connected function module via the function module communication interface, or to receive messages from the connected function module and send or forward them to the central monitoring module, the peripheral module with the central monitoring module, or the function module with the central monitoring module. Preferably, each peripheral module has additional contacts or a module interface for connection to other modules, such as a power supply for the system. Additionally or alternatively, each peripheral module preferably has a module interface for connection to the central monitoring module, in particular a module interface of the central monitoring module, especially for receiving information or messages, such as signaling the start of an event. According to the invention, the peripheral modules are each configured to leave the operation of a connectable functional module essentially unaffected in a normal state of the peripheral module. The respective functional module can therefore preferably be operated as if no peripheral module were present or electrically connected. Furthermore, the peripheral modules are each configured to switch from a normal state to a protective state in the event of an event being signaled by the central monitoring module and / or an input device. Thus, the event start can be automatically transmitted from the central monitoring module to the peripheral modules, enabling a rapid response to an event. In addition to, or instead of, signaling the event start from the central monitoring module, the event start can also be signaled by an input device. The event start can then be displayed or acknowledged by a driver or operator of a system equipped with the electronic protection device for the peripheral modules, particularly after the event start has been displayed to the driver by the central monitoring module via an output device.The driver or operator can thus decide, especially if the central monitoring module does not directly signal the start of the event to the peripheral modules, whether to actually switch from the normal state to a protective state or whether, possibly due to special circumstances, the switchover should not take place at all or should take place at a later time. Furthermore, the peripheral modules are each configured to influence the operation of the connectable functional module in the protected state. The operation is preferably influenced in such a way that the connected functional module is rendered inoperable, meaning it can no longer perform its function fully or at least partially. Preferably, this influencing or disabling is achieved by altering the external wiring of the functional module. Existing connections between contacts or terminals of the functional module, which exist when the functional module is operating normally, are altered when the external wiring is changed, for example, by the peripheral module. Preferably, the central monitoring module and / or the peripheral modules each have a protective device and / or configuration for protection against electromagnetic radiation. A protective device can, for example, comprise one or more components, such as protection diodes, which serve, for instance, to dissipate interference pulses caused by voltage or current pulses. Furthermore, the protective device can include additional sections of conductor tracks, such as meandering ones, arranged instead of direct connections between electronic components. A protective device can also include oversized conductor tracks. A protective device can also, for example, include a shield, such as a conductive grid or mesh surrounding the peripheral module or parts thereof, to at least partially absorb electromagnetic radiation. According to a first alternative of the invention, the central monitoring module detects the start of an event that causes electromagnetic radiation and sends a signal to the peripheral modules, or outputs a signal to the peripheral modules, indicating that an event start has been detected. This signal from the central monitoring module can also be referred to as a switching signal. The peripheral modules then switch from a normal state to a protection state, thereby transferring the functional module associated with the peripheral module into an operating state in which the respective functional module can no longer perform its normal operation, but which protects the functional module from electromagnetic radiation. According to a second alternative of the invention, the central monitoring module detects the start of an event that causes electromagnetic radiation and sends a signal to an output device and the peripheral modules, or outputs a signal to the peripheral modules and the output device indicating that an event start has been detected. The peripheral modules then switch from a normal state to a protective state. According to a third alternative of the invention, the central monitoring module detects the start of an event that causes electromagnetic radiation and sends a signal to an output device, such as a display. A user can then detect the start of the event with the output device and confirm it via an input device, such as an input field. If the user confirms the start of the event at the input device, the input device sends a signal to the peripheral modules or outputs a signal to the peripheral modules indicating that an event start has been detected. This signal from the input device can also be referred to as a switching signal. The peripheral modules then switch from a normal state to a protective state. According to a fourth alternative of the invention, the central monitoring module detects the start of an event that causes electromagnetic radiation and sends a signal to an output device, such as a display, and to the peripheral modules. A user can then detect the start of the event with the output device and confirm it via an input device, such as an input button. If the user confirms the start of the event at the input device, the input device sends a signal to the peripheral modules or outputs a signal to the peripheral modules indicating that an event start has been detected. The peripheral modules switch from a normal state to a protective state when the start of the event has been received by the central monitoring module and confirmed by a further signal from the input device. The electronic protection device thus allows the use of standardized functional modules that themselves do not have any protective devices against electromagnetic radiation. The peripheral modules influence the function of the functional modules, particularly through external circuitry, in such a way as to protect them from electromagnetic radiation. It is accepted that, after the onset of an event, the functional modules may no longer be able to perform their function or normal operation, but they are protected from electromagnetic radiation and can preferably resume normal operation after the event. Therefore, each individual functional module does not need its own protective device against electromagnetic radiation. Overall, standardized functional modules can thus be protected against electromagnetic radiation. The electronic protection device can therefore also be retrofitted into an existing system to protect this system against electromagnetic radiation, i.e. to make the system resistant to electromagnetic radiation. Preferably, one and the same peripheral module can be used for different functional modules. Particularly preferred are all peripheral modules, or all peripheral modules except for the peripheral module that, according to one embodiment, comprises the central monitoring module, designed identically, so that a modular design of the electronic protection device is possible and, depending on the design of the system to be protected, in particular the number of functional modules to be protected, a corresponding number of identically designed peripheral modules can be provided. It should be noted that a certain reaction time is necessary, which elapses from the detection of an event start or the actual commencement of the event until the peripheral modules switch to the protected state, i.e., until the functional modules are protected. If the functional modules were inherently protected, this reaction time would not be required. The invention is also based on the understanding that electromagnetic radiation does not instantly damage functional modules, and therefore the reaction time achievable through the design of fast-acting peripheral modules is sufficient. According to one embodiment, the central monitoring module is also configured to detect the end of an event and signal this to one, several, or all of the peripheral modules and / or the output device. The peripheral modules are further configured to switch from the protected state to the normal state after the respective peripheral module has been signaled the end of the event either directly by the central monitoring module and / or by the input device. For example, the end of the event is detected based on a predefined time period that begins running at or immediately after the start of the event, such as when the time period expires. The time period can be, for example, 5 minutes or more. By detecting and signaling not only the start but also the end of an event, the functional modules can resume normal operation. This is achieved by the peripheral modules switching back to their normal state, thus preventing further disruption to the functional modules' function. As long as the functional modules were successfully protected from electromagnetic radiation by the peripheral modules during the event, the entire system can continue normal operation. According to another embodiment, the central monitoring module corresponds to a sensor unit designed to detect the start of an event and preferably has no functions beyond detecting the start of the event. Particularly preferably, the central monitoring module designed as a sensor unit is integrated into a peripheral module. This allows for the provision of a simple and cost-effective electronic protection device. According to a further embodiment, the central monitoring module for detecting the start and / or end of an event comprises a sensor unit. The sensor unit is configured or designed to detect electromagnetic interference, preferably electromagnetic waves or electromagnetic radiation. According to a particular embodiment, the start and end of the event are detected by the sensor unit. According to a further particular embodiment, only the start of the event is detected by the sensor unit, and a timer begins to run simultaneously or immediately after the detection of the start of the event. After the timer has elapsed, the end of the event is detected. Preferably, the sensor unit is configured or designed to detect gamma radiation and / or ionizing radiation, in particular an electromagnetic pulse, also known as an EMP, or a nuclear electromagnetic pulse, also known as a NEMP. EMPs and NEMPs are the source of a multitude of different radiation components, so that, according to an alternative configuration, the sensor unit is at least configured or designed to detect only parts, i.e., components of an EMP or NEMP. Particularly preferably, the sensor unit is configured to detect an initial radiation or a part of an initial radiation of a NEMP. According to one embodiment, the central monitoring module for detecting the start and / or end of an event may also include a radio module that receives a message from a remote device detecting the start and / or end of an event and transmits the detected start and / or end to the radio module. Alternatively or additionally, a sensor unit is integrated directly into the electronic protection device, preferably as part of the central monitoring module. This allows for reliable detection of the start of an event, even if a radio connection is disrupted, particularly by the event itself. According to another embodiment, the sensor unit corresponds to a Geiger counter, a radiation meter, a semiconductor detector, or a scintillation counter. Such devices are known and can be reliably used to accurately detect the start and / or end of an event. According to a further embodiment, the sensor unit can measure a level of radiation in the area of ​​the electronic protection device, particularly in the area of ​​the central monitoring module. Specifically, the sensor unit can measure gamma or neutron radiation. Preferably, the measurement corresponds to a value, which is particularly preferably recorded in J / kg or Sievert. Furthermore, at least one threshold value is stored or can be stored in the central monitoring module. Preferably, an upper threshold value and a lower threshold value are stored in the central monitoring module. The threshold value(s) are preferably predetermined, for example, by tests, simulation, or calculation. The threshold value(s) are preferably adjustable, especially if they are already stored. According to this embodiment, the central monitoring module is further configured to detect the start of an event if the radiation level exceeds the threshold value or one of the threshold values, in particular the upper threshold value. Thus, if, for example, the measured value, preferably measured periodically or essentially continuously, which corresponds to the radiation level, exceeds the threshold value, in particular the upper threshold value, the start of an event is detected and then signaled to the peripheral modules. Preferably, the central monitoring module is also configured to detect the end of an event after the threshold value or a further lower threshold value, for example the lower threshold value, has been undershot.For example, if the measured value, which corresponds to the level of radiation, falls below the threshold, especially the lower threshold, an event end is detected and the detected event end is signaled to the peripheral modules. By determining a level of radiation and setting one or more threshold values, a reliable distinction can be made between an event and ambient radiation that has no effect on the operation of the functional modules. By taking appropriately set threshold values ​​into account, the operation of the functional modules is therefore only affected if radiation harmful to the functional modules is actually expected. Otherwise, the operation of the system is not interfered with. This prevents erroneous interventions in a system by the electronic protection device. According to a further embodiment, the peripheral modules comprise at least one short-circuit circuit. The short-circuit circuit is designed to electrically connect at least two terminals or contacts of one of the functional modules, in particular directly or via an electronic safety circuit, in the protected state and to disconnect them in the normal state. The electrical connection in the protected state affects the operation of the functional module. In particular, it renders the functional module inoperable. However, the short circuit prevents high electrical voltages in the functional modules that could be caused by electromagnetic radiation.A safety circuit can be provided, for example, to short-circuit the connections or contacts not directly, but via at least one electrical component, such as a diode, a capacitor, a transistor, a temperature-dependent resistor (PTC), or a series or parallel circuit of several of the components, in order to limit currents or to allow currents to flow only in predefined directions. According to a further embodiment, the peripheral modules comprise at least one interrupting circuit for electrically connecting at least one connecting line of a system to be protected to a terminal or contact of the functional module in the normal state and for interrupting the connection in the protection state. The functional module can thus be protected from high currents or voltages in the periphery that are caused directly or indirectly by radiation in connecting lines via other components. Interrupting the connection in the protection state affects the operation of the functional module. In particular, it renders the functional module inoperable. According to a further embodiment, the peripheral modules and / or the central monitoring module each have a protective device and / or configuration for protection against electromagnetic radiation. According to a particular embodiment, a protective configuration includes one, several, or all transistors of the peripheral module(s) and / or the central monitoring module being designed as gallium nitride transistors, or GaN transistors for short. According to the latter or a further particular embodiment, a protective configuration of the peripheral module(s) and / or the central monitoring module includes a design of the circuit, for example, a printed circuit board, and / or the entire module, including connections to interfaces, optimized for the shortest possible length. In particular, this protective configuration enables a rapid switchover from the normal state to a protected state. This prevents electromagnetic radiation from impairing the function of the peripheral modules and / or the central monitoring module, so that the functional modules can be safely switched back to normal operation after the detected event has ended. According to another embodiment, the central monitoring module is configured to issue an audible and / or visual alarm after detecting the start of an event. The alarm informs individuals, such as operators of the system being protected, that the system is switching to a protection mode and can therefore no longer operate normally. This allows individuals to detect any deviation from the system's expected behavior at an early stage. Additionally or alternatively, a signal is issued to notify another component via a network connectable to the central monitoring module. This network could, for example, be a radio or satellite network. The start of the event is thus indicated to remote facilities or individuals who might not yet be able to detect it themselves.This allows remote facilities or individuals to react early to expected radiation, in particular by putting peripheral modules of the remote facilities into a protection mode. According to another embodiment, the central monitoring module is configured to switch from a normal mode to a protective mode after detecting the start of an event. Thus, the central monitoring module also includes a special mode during an event. The protective mode can reduce the activities of the central monitoring module to such an extent that only the sensor unit and a processor for evaluating the radiation level remain operational in order to detect the end of an event. In addition to, or alternatively, a protective device and / or configuration for the central monitoring module, this provides even better protection against electromagnetic radiation. According to another embodiment, the central monitoring module is configured to log the start and / or end times of events and / or states of the peripheral modules and / or functional components connected to the peripheral modules. This allows for subsequent evaluation. According to a further embodiment, the central monitoring module is configured to initiate (i.e., request) fault diagnoses from one, several, or all peripheral modules and / or functional components connected to the peripheral module(s), and to receive diagnostic results from the peripheral module(s) or, via the peripheral modules, from the functional modules. Thus, after detecting the end of an event, the central monitoring module can first check the functionality of several or all peripheral modules and / or functional components connected to the peripheral module(s) and preferably signal the end of the event only to those peripheral modules whose function was not affected by the event. Functional modules that are no longer functioning or are not functioning correctly can therefore remain switched off and do not cause any errors. Safe operation after the end of an event is thus possible. According to a further embodiment, the central monitoring module is configured to request and / or receive vital signs from several or all of the peripheral modules and / or the function modules associated with the peripheral modules. Preferably, the several or all peripheral modules and / or function modules are configured to periodically or continuously send vital signs to the central monitoring module via the peripheral modules so that the latter can receive these vital signs. The vital signs can also be referred to as "alive signals" and indicate that the transmitter of the signal has a predefined operational readiness. Preferably, a transmitted vital sign indicates that the transmitter is fully functional and normal operation is possible. Preferably, the peripheral modules and / or the function modules assigned to the peripheral modules send the live signal to the central monitoring module after the central monitoring module has requested transmission. This request can occur, for example, after the central monitoring module has detected the end of an event, but preferably has not yet signaled this to the peripheral modules. The peripheral modules are therefore, for example, still in a protected state and initially send a live signal upon request, if possible. Alternatively, the end of the event is first signaled by the central monitoring module to the peripheral modules, and the live signals are automatically sent to the central monitoring module, if possible, particularly if they are received by the peripheral modules from the connected function modules, after the peripheral modules have switched to their normal state. Based on the received and missed (i.e., not received) vital signs, the central monitoring module can then signal the end of the event, for example, only to the peripheral modules that sent a vital sign, initiate a diagnostic procedure, and / or send a recommended operating mode for the system to a central control unit of the system. In particular, according to one embodiment, the central monitoring module is connected to a central control unit of the system via a communication link, either directly or via one of the peripheral modules. Additionally or alternatively, the central monitoring module is therefore configured to generate one or more control signals depending on the received and absent (i.e., not received) vital signs and / or diagnostic results, in particular system diagnostics. Specifically, the control signal is used to define an operating mode for the system or one or more of its function modules. The control signal is preferably sent to another component, such as a central control unit of the system, which in turn sets the operating mode for the system or one or more of its function modules. Preferably, before setting an operating mode specified or suggested by the central monitoring module, the central control unit checks whether the implementation is feasible and then sets this operating mode or an operating mode of the system deemed suitable by the central control unit. According to a further embodiment, the central monitoring module is configured to send a request to perform a fault diagnosis to one or more of the peripheral modules and / or one or more function modules assigned to the peripheral modules, in particular via the peripheral module assigned to the respective function module. In addition to or as an alternative to the vital sign signal, a state of the peripheral modules and / or function modules, particularly after an event, can thus be detected when diagnostic results are sent back to the central monitoring module after the request. According to another embodiment, the central monitoring module is configured to receive diagnostic results from one or more of the peripheral modules and / or one or more of the function modules assigned to the peripheral modules. This allows for higher-level system-level diagnostics to be performed in the central monitoring module. According to another embodiment, the central monitoring module is set up to perform a system diagnosis depending on the diagnostic results. According to another embodiment, the central monitoring module is configured to specify an operating mode for the system or one or more of the function modules depending on a system diagnostic result. The operating mode is transmitted, for example, via the aforementioned control signal to another component, such as a central system controller, which in turn specifies the operating mode for the system or one or more of the function modules. The central controller is preferably also protected as a function module by a peripheral module or includes its own protective device and / or configuration for protection against electromagnetic radiation. In the latter case, the central controller is therefore not a standard component. Furthermore, the invention relates to a system with an electronic protection device according to one of the aforementioned embodiments. The system comprises several functional modules, each of which is electrically connected to a peripheral module of the electronic protection device. According to one embodiment, the system corresponds to a vehicle with a drive system. The drive system can be an internal combustion engine, an electric motor, or a hybrid drive system combining an internal combustion engine and an electric motor. The vehicle, therefore, corresponds to a motorized vehicle that is a mobile means of transport and can be, for example, a land or water vehicle. The vehicle comprises at least one control unit for controlling or regulating a component of the vehicle and preferably a central control unit that is connected to the control unit(s) for controlling or regulating a component. The control unit for controlling or regulating a component corresponds, for example, to a steering control unit, a brake control unit, or an engine control unit.The component therefore preferably corresponds to an actuator or sensor of the vehicle, and the control unit serves to control the actuator or read the sensor depending on request signals generated, for example, by input devices such as pedals or hand switches, and / or by the central control unit. The control unit corresponds to a functional module that is connected to a peripheral module. Preferably, the peripheral module is connected to power supply connections, i.e., contacts or module contacts of the control unit, which preferably serve to supply power to the module. Furthermore, the peripheral module is preferably connected to a power source, such as a battery or a generator of the vehicle. The peripheral module is also preferably configured to interrupt the power supply to the control unit from a power source, such as the battery, when the system is in protection mode. Therefore, the peripheral module is preferably connected as a type of disconnect switch between the power source and the control unit. Alternatively or additionally, the peripheral module is preferably configured to directly short-circuit the power supply terminals, particularly when the power source has been disconnected. Alternatively, the peripheral module is preferably configured to indirectly short-circuit the power supply terminals via an electrical circuit or electrical components, for example comprising a diode, i.e., by connecting the electrical circuit or components between the power supply terminals. Additionally or alternatively, according to a further embodiment, the peripheral module is connected to communication interface ports of a communication interface of the control unit, i.e., the function module. The communication interface ports preferably serve to connect to a communication line and / or another control unit of the system, namely to the communication interface ports of the other control unit, for communication with the other control unit, for example via a bus. The peripheral module is therefore also connected to the communication interface ports of the other control unit, i.e., electrically connected between the control unit and the other control unit.The peripheral module is also preferably configured to interrupt the communication interface connections of the control unit's communication interface with a communication line or with further communication interface connections of another control unit in the protected state. Alternatively or additionally, the peripheral module is preferably configured to directly short-circuit the communication interface connections. Alternatively, the peripheral module is preferably configured to indirectly short-circuit the communication interface connections via an electrical circuit or electrical components, for example comprising a diode, i.e., by connecting the electrical circuit or components between the power supply connections. Preferably, the peripheral module is therefore essentially implemented with simple isolating and / or switching switches, optionally using simple additional components such as diodes or resistors. According to one embodiment, each of the peripheral modules is composed exclusively of discrete components. According to a further embodiment, the system, designed as a vehicle, comprises at least one internal combustion engine and an internal combustion engine control unit for controlling the internal combustion engine. The internal combustion engine control unit has protective devices and / or a protective configuration for protection against electromagnetic radiation or corresponds to a functional module connected to a peripheral module. This ensures that the internal combustion engine can continue to propel the vehicle after an event that causes electromagnetic radiation. Furthermore, the system preferably comprises an engine cooling system for cooling the internal combustion engine and an engine cooling control unit for controlling the engine cooling. The engine cooling control unit also preferably includes protective devices and / or a protective configuration for protection against electromagnetic radiation or corresponds to a functional module connected to a peripheral module. This ensures that engine cooling can continue to operate even after an event, so that the combustion engine is safely protected from overheating and the vehicle can continue to move. According to a further embodiment, the system comprises at least one electric motor for propelling the vehicle, i.e., an electric drive, and an electric motor control unit for controlling the electric motor. Preferably, the electric motor control unit corresponds to a functional module connected to a peripheral module. Particularly preferably, a peripheral module is also electrically connected to the electric motor itself. The central monitoring module is further configured to activate or enable operation of the electric motor depending on received and absent (i.e., not received) vital signs, in particular by transmitting a control signal, preferably a suggested operating mode, to a central control unit of the vehicle. Alternatively, activation or enabling can occur depending on diagnostic results or a system diagnostic result. Activation or enabling can also preferably be achieved by signaling the end of an event to the peripheral module associated with the electric motor control unit. The central monitoring module is preferably also configured to activate or enable operation of the combustion engine depending on received and absent (i.e., not received) vital signs. Alternatively, the operation of the combustion engine can also be activated or enabled depending on diagnostic results or a system diagnostic result. Furthermore, the invention comprises a method for operating an electronic protection device or a system according to one of the embodiments. In particular, the method comprises operating the peripheral modules in a normal state, wherein the functional module connected to the respective peripheral module remains unaffected by the peripheral module in the normal state. Furthermore, the start of an event that causes electromagnetic radiation is detected by the central monitoring module. The start of the event is signaled to several peripheral modules, each of which is electrically connected to a functional module of the system, and / or to an output device. The peripheral modules switch from a normal state to a protection state after being signaled by the central monitoring module and / or after being signaled by an input device.In the protected state, the operation of the functional module is affected by the connected peripheral module, in particular by changing the external wiring of the functional module. According to one embodiment, the end of an event is detected by the central monitoring module and signaled to the peripheral modules and / or the output device. After receiving a signal from the central monitoring module or an output device, the peripheral modules switch from the protected state to the normal state. According to one embodiment, the peripheral modules or the function modules send a vital sign signal to the central monitoring module in the normal state via the peripheral modules. According to a further embodiment, after the end of the event has been signaled to the peripheral modules by the central monitoring module, vital signs are requested, monitored, or received from the peripheral modules. The central monitoring module then performs a system diagnosis based on the vital signs or requests diagnostic results from the function modules via the peripheral modules and specifies an operating mode of the system based on the diagnostic results or a system diagnosis for a component, in particular a central control unit, of the system. Further embodiments are shown in the exemplary embodiments illustrated in the following figures. Figure 1 shows an exemplary embodiment of the electronic protection device in a system according to one exemplary embodiment, Figure 2 shows a further exemplary embodiment of the electronic protection device in a system according to one exemplary embodiment, Figure 3 shows a further exemplary embodiment of the electronic protection device in a system according to one exemplary embodiment, and Figure 4 shows an exemplary embodiment of a method. Fig. 1 shows a system 100 with an electronic protection device 10 according to an exemplary embodiment. The electronic protection device 10 comprises a central monitoring module 12 and several peripheral modules 14. Each of the peripheral modules 14 is electrically connected to one of several function modules 16. System 100 corresponds here to a vehicle 110 as an example. For clarity, only a few other components of vehicle 110, and thus of system 100, are shown below. These components, along with the electronic protection device 10, are part of system 100. Accordingly, one of the function modules 16 corresponds to an engine cooling control unit 18, which, for example, corresponds to a fan-motor converter. The engine cooling system controlled by the engine cooling control unit 18, namely the fan itself, is not shown for clarity. Another function module 16 corresponds to an internal combustion engine control unit 20, i.e., a control unit for controlling an internal combustion engine, which is also not shown. Furthermore, a transmission control unit 22 is shown as a function module 16.In particular, the combustion engine control unit 20 and the engine cooling control unit 18 must be protected against electromagnetic radiation in order to ensure residual mobility for the system 100, i.e. the vehicle 110, after an event that is the cause of electromagnetic radiation. Furthermore, the system 100, configured as vehicle 110, includes another functional module 16, corresponding to a vehicle computer 24, which can be provided for non-critical tasks in vehicle 110 but does not necessarily have to be protected by an electronic protection device 10. The peripheral module 14 associated with the vehicle computer 24 is therefore shown with dashed lines, as it is optional. In addition, vehicle 110 includes further components as functional modules 16, which can also optionally be protected by an associated peripheral module 14. Preferably, according to this configuration, vehicle 110 includes further functional modules 16 corresponding to an electric motor control unit 38, which essentially corresponds to an inverter, an electric motor 40, and a battery 42. Furthermore, a central control unit 44 is provided as a function module 16, which is connected to the individual function modules 16 via communication lines 46. The communication lines 46 provide a communication link and correspond, for example, to bus systems with bus interfaces, such as one or more CAN buses. The communication lines 46 between the function modules 16, in particular between the central control unit 44 and the other function modules 16, serve to coordinate the operation of the vehicle 110, which is specified, for example, by the central control unit 44 in the form of an operating mode. Fig. 1 further shows that the central monitoring module 12 has a sensor unit 48 for detecting the start and / or end of an event, wherein the sensor unit 48 is configured to detect electromagnetic radiation, compare it with one or more stored threshold values ​​50, and, depending on the comparison, signal an event start 52 or an event end 54 to the peripheral modules 14. The peripheral modules 14 are also connected to the central monitoring module 12 via communication lines 46 to enable communication. The communication lines 46 between the peripheral modules 14 and the central monitoring module 12 are preferably separate and not connected to any other communication lines 46 of the system.Communication lines 46 are also arranged between the peripheral modules 14 and the respective associated function module 16 to enable communication, wherein the communication lines 46 between the peripheral modules 14 and the respective associated function module 16 are preferably part of or correspond to the electrical connection between peripheral modules 14 and the respective associated function module 16. Figures 2 and 3 show further embodiments of a system 100 with an electronic protection device 10. The systems in Figures 2 and 3 are similar to the system 100 shown in Figure 1. Identical reference numerals in Figures 1, 2, and 3 correspond to identical features. System 100 in Fig. 2 differs from system 100 in Fig. 1 in that no separate central monitoring module 12 is provided, but rather the central monitoring module 12 is integrated into one of the peripheral modules 14. The peripheral module 14, which is exemplified as being assigned to the engine cooling control unit 18, comprises the central monitoring module 12. According to further embodiments not shown, the invention also includes the integration of the central monitoring module 12 into any other peripheral module 14. The central monitoring module 12 is designed as a sensor unit 48. The start of an event 52 and the end of an event 54 are signaled accordingly for the peripheral module 14, which is exemplified as being assigned to the engine cooling control unit 18, by the peripheral module 14 itself.Event start 52 and event end 54 are signaled to the other peripheral modules 14, which are not assigned to the engine cooling control unit 18, by the peripheral module 14, which is assigned to the engine cooling control unit 18. System 100 in Fig. 3 differs from System 100 in Figs. 1 and 2 in that it includes a separate central monitoring module 12, which corresponds to a single sensor unit 48. The sensor unit signals the start of an event 52 and the end of an event 54 to an output device 56, which then outputs the information. System 100 also includes an input device 58. A user can input data via the input device 58, thereby signaling the start of an event 52 and the end of an event 54 to the other peripheral modules 14 from the input device 58. According to the invention, unlike the present depiction, the central monitoring module 12, which then corresponds to the sensor unit 48, can signal only the start of the event 52 to the output device 56, and the operator can signal the start of the event 52 to the peripheral modules 14 using the input device 58. Additionally, after a predetermined time period, the operator can signal the end of the event 54 to the peripheral modules 14 using the input device 58. In this case, the sensor unit 48 would therefore only detect the start of the event 52, the predetermined time period would begin at the start of the event 52, and after the predetermined time period has elapsed, the operator would signal the end of the event 54 to the peripheral modules 14 using the input device 58. In Fig. 1 and Fig. 2, the start of the event 52 and the end of the event 54 are automatically signaled to the peripheral modules 14. In Fig. 3, the start of the event 52 and the end of the event 54 are manually signaled to the peripheral modules 14. An embodiment of a method by which the system 100 can be operated with the electronic protection device 10 is shown in Fig. 4. The procedure 200 comprises, in a first step 210, the starting of a system 100, for example, the vehicle 110. In step 212, after the start, the state of the system 100 is continuously logged by the central monitoring module 12. In step 214, it is checked whether all function modules 16 equipped with a peripheral module 14 are sending a vital sign signal via their respective peripheral module 14. In a decision step 216, if all function modules 16 are sending a vital sign signal, a normal operating mode 220 is set in all peripheral modules 14 in step 218. In step 222, all function modules 16 to which a peripheral module 14 is assigned are then operated without being influenced by the peripheral modules 14. A corresponding normal operating mode is transferred from the central monitoring module 12 to a central control unit 44 in step 224.This operating mode is, for example, a hybrid operation of a vehicle 110, which includes an electric motor 40 and an internal combustion engine. If one or more peripheral modules 14 do not report a vital sign signal in step 216, a normal operating mode 220 is set in step 226 for the function modules 16 that have sent a vital sign signal, so that in step 228 all function modules 16 that have sent a vital sign signal are operated in a normal operating mode 220, which is unaffected by the respective peripheral module 14. In step 230, however, a different operating mode is then reported or suggested to the central control unit 44 in order to operate the system 100 in the other operating mode. For example, the system 100 could be configured as a vehicle 110, and components such as the internal combustion engine, the internal combustion engine control unit 20, and preferably an engine cooling control unit 18 and an engine cooling system, could be equipped with protective devices to ensure safe operation. In this case, the other operating mode specified or executed in step 230 indicates internal combustion engine operation without the use of an electric motor 40. This other operating mode is then executed. In particular, if the vehicle 110 is in a normal operating mode 220, the system 100 is then operated in step 232 in the specified operating mode, either in the normal operating mode or in the other operating mode.Steps 214 to 230 are optional and it is also possible that after the system 100 is started in step 210, especially if no event has occurred beforehand that is the cause of electromagnetic radiation, the system 100 will automatically operate in a normal operating mode 220 in step 232. In step 232, specifically in the normal operating mode 220 of system 100, the central monitoring module 12 monitors the environment and uses a sensor unit 48 to detect a level of electromagnetic radiation. If electromagnetic radiation is detected that exceeds an upper threshold value 234, this is recognized as an event start 52, and an alarm, for example, audible or visual, is immediately triggered in step 236. In step 238, the event start 52 is sent to all peripheral modules 14 and is detected by all peripheral modules 14 in step 240. In step 242, a first peripheral module 14 switches to a protection state, thereby activating protection mechanisms for a first functional module 16 in step 244. In step 246, the first functional module 16 is affected in its function or operation and thus protected. A second peripheral module 14 switches to a protection state analogously in step 248.Protection mechanisms for a second function module 16 are activated in step 250, and the second function module 16 is affected, so that the function module 16 is protected in step 252. Steps 254, 256, and 258 represent steps 242 to 252, which are also executed for a number of function modules corresponding to the number of function modules 16 of the system 100 to be protected. In step 260, an event end 54 is detected when the electromagnetic radiation falls below a lower threshold value 262. In step 264, the type of the previously detected event is evaluated. Depending on the type of the previously detected event, in particular if it caused, for example, a measured particularly high level of electromagnetic radiation or lasted for a particularly long period, a dependent predefined operating mode is selected in step 266.This could correspond, for example, to the other operating mode set in step 230, which differs from the normal operating mode and is an emergency operating mode, enabling the system 100 to continue operating, at least partially, in a safe mode. The emergency operating mode is executed in step 268. This emergency operating mode is set, for example, by sending a corresponding signal from the central monitoring module 12 to the central control unit 44 via the peripheral module 14 assigned to the central control unit 44. If the system 100 is a vehicle 110, the emergency operating mode can correspond to a mode in which only the combustion engine is active, thus ensuring residual mobility. If the nature of the event was not so critical that several or all function modules 16 could continue operating, in step 270 the end of the event 54 is first signaled to all peripheral modules 14, and the system waits to see if the peripheral modules 14 transmit vital signs from their respective assigned function modules 16. In step 272, a decision is then made based on the vital signs received or not received as to whether a normal operating mode 220 is possible. If all function modules 16 report a vital sign via the assigned peripheral modules 14, in step 274 a diagnostic mode of the respective function module 16 with the respective peripheral module 14 is initiated by means of a request from the central monitoring module 12 to the peripheral modules 14.In step 276, a diagnostic result from the function module 16 is transmitted via the respective peripheral module 14 to the central monitoring module 12. Based on the diagnostic results, a system diagnosis is performed and evaluated in step 278. If only a specific operating mode is possible, for example, the operating mode set in step 230, step 268 is executed again, and the system 100 is operated in emergency mode. If the diagnosis indicates that a specific, only slightly restricted operating mode or even the normal operating mode is possible, this operating mode, which appears possible based on the system diagnosis, is transmitted to the central control unit 44 in step 280, preferably as a proposed operating mode. The central control unit 44 decides in step 282 whether the proposed operating mode is possible and sets it in step 284.Alternatively, the central control unit 44 decides that only emergency operating mode is possible because certain system-level requirements, which the central monitoring module 12 does not recognize, are not met. Step 268 is then executed again. If, in step 272, it is already detected that no vital sign signal is being sent by several peripheral modules 14, a normal operating mode is not possible, then in step 286 the peripheral modules 14 are informed that an operating mode deviating from the normal operating mode 220 will be set, and the peripheral modules 14, for example, in step 288 put all function modules 16 not required for the operating mode mentioned in step 268 into a protective state in order to execute the special operating mode or emergency operating mode, also in step 268. In step 290, the system 100 is switched off after completion of an operation. REFERENCE MARK LIST 10 Electronic protection device 12 Central monitoring module 14 Peripheral module 16 Function modules 18 Engine cooling control unit 20 Internal combustion engine control unit 22 Transmission control unit 24 Vehicle computer 38 Electric motor control unit 40 Electric motor 42 Battery 44 Central control unit 46 Communication lines 48 Sensor unit 50 Threshold 52 Event start 54 Event end 56 Output device 58 Input device 100 System 110 Vehicle 200 Procedure 210 Start a system 212 Log a state 214 Check sending a vital sign signal 216 Decision step 218 Set normal operating mode 220 Normal operating mode 222 Operate function modules and transfer operating mode 224 Send normal operating mode 226 Set normal operating mode 228 Operate function modules 230 Send other operating mode 232 Operate system in specified operating mode 234 upper Threshold 236 Issue alarm 238 Send event start 240 Detect event start 242 Switch firstPeripheral module in protection state 244 Activate protection mechanisms 246 Protect first function module 248 Switch second peripheral module to protection state 250 Activate protection mechanisms 252 Protect second function module 254 Switch nth peripheral module to protection state 256 Activate protection mechanisms 258 Protect nth function module 260 Detect event end 262 Lower threshold 264 Evaluate event 266 Select operating mode 268 Operate system in safe mode, emergency mode 270 Send event end 272 Decide whether normal operating mode is possible 274 Initiate diagnostic mode 276 Transmit diagnostic result 278 Execute system diagnostics 280 Transmit operating mode 282 Decide whether proposed operating mode is possible 284 Set operating mode 286 Notify that a different operating mode is being set 288 Set function modules to protection state 290 Shutdown system

Claims

Electronic protection device (10) for a system (100) with several electrical function modules (16) for protection against electromagnetic radiation, comprising: - several peripheral modules (14), each of which can be electrically connected to one of the several function modules (16), and - a central monitoring module (12) for detecting the start of an event (52) of an event that causes electromagnetic radiation and for signaling the start of the event (52) - to an output device and / or - to and / or for the several peripheral modules (14), wherein the central monitoring module (12) is configured as a separate module from the several peripheral modules (14), is integrated into one of the several peripheral modules (14), or can be integrated into one of the function modules (16), wherein the several peripheral modules (14) are each configured- to leave the operation of the associated connectable function module (16) essentially unaffected in a normal state of the respective peripheral module (14), - to switch from a normal state to a protection state when an event start (52) is signaled by the central monitoring module (12) and / or an input device, and - in the protection state to influence the operation of the associated connectable function module (16), in particular to render it inoperable, preferably by changing an external circuit of the function module (16). Electronic protection device (10) according to claim 1, wherein the central monitoring module (12) is configured to detect an event end (54) and to signal the event end (54) to the output device and / or at least one or all of the multiple peripheral modules (14), wherein the peripheral modules (14) are each configured to switch from the protection state to the normal state after the event end (54) has been signaled to the respective peripheral module (14) by the central monitoring module and / or input device. Electronic protection device (10) according to claim 1 or 2, wherein the central monitoring module (12) for detecting the start (52) and / or end (54) of the event comprises a sensor unit (48) which is configured to detect an electromagnetic disturbance, preferably electromagnetic waves or electromagnetic radiation, in particular gamma radiation and / or ionizing radiation, in particular an EMP or NEMP or parts thereof. Electronic protection device (10) according to claim 3, wherein the sensor unit (48) corresponds to a Geiger counter, a radiation measuring device, a semiconductor detector or a scintillation counter, in particular for detecting gamma radiation. Electronic protection device (10) according to claim 4, wherein the sensor unit (48) is capable of measuring a measure of radiation, in particular gamma radiation or neutron radiation, preferably a measured value, particularly preferably in J / kg or Sievert, in the area of ​​the central monitoring module (12), and at least one threshold value (234, 262) is stored or can be stored in the central monitoring module (12), wherein the central monitoring module (12) is configured to detect the start of the event (52) if the measure of radiation exceeds the threshold value or one of the threshold values ​​(234, 262), and preferably to detect the end of the event (54) after falling below the threshold value (234, 262) or a further lower second threshold value (262). Electronic protection device (10) according to one of the preceding claims, wherein the peripheral modules (14) each comprise at least one of: - at least one short-circuit circuit for electrically connecting two terminals or contacts of one of the functional modules (16), in particular directly or via an electronic safety circuit, in the protection state and for interrupting the connection in the normal state, - at least one interrupter circuit for electrically connecting at least one connecting line of a system (100) to be protected and a terminal of the associated functional module (16) in the normal state and for interrupting the connection in the protection state. Electronic protection device (10) according to one of the preceding claims, wherein the peripheral modules (14) and / or the central monitoring module (12) each have a protective device and / or protective configuration for protection against electromagnetic radiation and / or the central monitoring module (12) is configured to: - issue an audible and / or visual alarm and / or a signal to notify another component via a network connectable to the central monitoring module (12) after detecting the start of an event (52); - switch from a normal mode to a protection mode after detecting the start of an event (52); - log the start and / or end times of events and / or states of the peripheral modules (14) and / or function modules (16) connected to the peripheral modules (14); and / or - perform fault diagnoses from ato initiate several or all peripheral modules (14) and / or functional modules (16) connected to the peripheral module(s) (14) and to receive diagnostic results from the peripheral module(s) (14). Electronic protection device (10) according to one of the preceding claims, wherein the central monitoring module (12) is configured, in particular after the detection of an event end (54), to request and / or receive vital signs from several, preferably each, of the peripheral modules (14) and / or the function modules (16) associated with the peripheral modules (14), wherein the central monitoring module (12) is further configured to generate one or more control signals depending on the vital signs received and those not received, i.e., not received, received, in particular to specify an operating mode for the system (100) or one or more of the function modules (16) with the control signal and / or to signal an event end (54). Electronic protection device (10) according to one of the preceding claims, wherein the central monitoring module (12) is configured to: - send a request to perform a fault diagnosis to one or more of the peripheral modules (14) and / or one or more of the function modules (16) associated with the peripheral modules (14) and / or - receive diagnostic results from one or more of the peripheral modules (14) and / or one or more of the function modules (16) associated with the peripheral modules (14), - perform a system diagnosis depending on the diagnostic results and - specify an operating mode for the system (100) or one or more of the function modules (16) depending on a system diagnosis result of the system diagnosis. System (100) with an electronic protection device (10) according to one of the preceding claims, wherein the system (100) has several functional modules (16), wherein one or more of the functional modules (16) are each assigned a peripheral module (14) of the electronic protection device (10). System (100) according to claim 10, wherein the system (100) corresponds to a vehicle (110) with a drive system and the vehicle (110) comprises at least one control unit for controlling or regulating a component of the vehicle (110), such as a steering system or a brake system, wherein the control unit of the component corresponds to a functional module (16) to which a peripheral module (14) is assigned, wherein the peripheral module (14) is preferably i) connected to power supply terminals of the control unit, wherein the peripheral module (14) is in particular configured, in the protection state: - to interrupt a power supply to the control unit from a power source, in particular a battery, and / or - to short-circuit power supply terminals of the control unit after the interruption of the power supply, and / or - to insert a circuit, for example comprising a diode, between the power supply terminals of the control unit.in particular after the interruption of the power supply, to switch and / orii) is connected to communication interface connections of a communication interface of the control unit, wherein the peripheral module (14) is in particular configured, in the protected state: - to interrupt communication interface connections of the communication interface of the control unit with a communication line (46) or with further communication interface connections of another control unit and / or - to short-circuit the communication interface connections of the control unit, in particular after the interruption with the communication line (46) and / or - to switch a circuit, for example comprising a diode, between the communication interface connections of the control unit, in particular after the interruption with the communication line (46). System (100) according to claim 11, further comprising: - at least one internal combustion engine, - an internal combustion engine control unit (20) for controlling the internal combustion engine, - preferably an engine cooling system and an engine cooling control unit (18) for controlling the engine cooling system, wherein the internal combustion engine control unit (20) has protective devices and / or a protective configuration for protection against electromagnetic radiation or the internal combustion engine control unit (20) corresponds to a functional module (16) connected to a peripheral module (14) and preferably the engine cooling control unit (18) has protective devices and / or a protective configuration for protection against electromagnetic radiation or the engine cooling control unit (18) corresponds to a functional module (16) connected to a peripheral module (14). System (100) according to claim 11 or 12, further comprising: - at least one electric motor (40), - an electric motor control unit (38) for controlling the electric motor (40), wherein the electric motor control unit (38) preferably corresponds to a function module (16) connected to a peripheral module (14), wherein the central monitoring module (12) is preferably configured to output a signal or control signal to activate or enable operation of the electric motor (40) depending on received and absent, i.e., not received, vital signs and / or on diagnostic results or on a system diagnostic result. Method (200) for operating an electronic protection device (10) according to any one of claims 1 to 9 or a system (100) according to any one of claims 10 to 13, wherein the method (200) in particular comprises the steps of: - operating the peripheral modules (14) in a normal state, wherein the functional module (16) connected to the respective peripheral module (14) remains unaffected in the normal state, - detecting the start of an event (52) of an event that is the cause of electromagnetic radiation with the central monitoring module (12), - signaling the start of the event (52) to an output device and / or to and / or for several peripheral modules (14), each of which is electrically connected to a functional module (16) of the system (100), - switching from a normal state to a protection state of the peripheral modules (14) after signaling the start of the event (52) from an input device or the central monitoring module (12),and- influencing the operation of the functional module (16) by the connected peripheral module (14) in the protected state, in particular by changing the external wiring of the functional module (16). Method (200) according to claim 14, wherein the method (200) further comprises the following steps: - Detecting the end of an event (54) with the central monitoring module (12), - Signaling the end of the event (54) to the peripheral modules (14), - Switching from the protection state to the normal state of the peripheral modules (14) after signaling, and preferably: - Requesting or receiving vital signs from the peripheral modules (14), - Performing a system diagnostic depending on the vital signs, - Specifying an operating mode of the system (100) depending on the system diagnostic.

Images