SYSTEM FOR CONTROLLING AN ELECTRIC MOTOR

Description

[0001] In the wake of the energy transition, electric motors are becoming increasingly important. Electric motors are already being used in a wide variety of applications. To meet the requirements of the respective applications, particularly with regard to speed, torque, costs, etc., it is advisable to operate an electric motor in field-weakening mode if necessary.

[0002] Field weakening can be used to influence, in particular, the speed and torque of the electric motor. A magnetic field induced by an excitation coil can be reduced, for example, using switchable excitation windings.

[0003] In addition to the possibility of optimizing the speed and torque of the electric motor, field weakening operation has the advantage that motor currents can be reduced in asynchronous motors.

[0004] However, operating an electric motor in field weakening mode requires some safety measures to protect the electric motor and its control system from damage or destruction, particularly in the event of a power failure or excessively high speed, see also EP 2 763 303 A1 and WO 2013 / 088832 A1.

[0005] EP 1 768 251 A1 discloses an emergency shutdown device for protecting against failures that affect the safety of a switch bridge driving a permanent magnet synchronous motor (PMSM). The switch bridge contains high- and low-side switches connected in a bridge and is controlled by a gate driver circuit during operation of the PMSM in a field-weakening mode, wherein the gate driver circuit includes stages for controlling the high- and low-side switches. During normal operation, the main power supply provides a DC power supply to operate the controller via the DC bus. In the event of a main power failure, a backup power supply provides a backup voltage to the gate driver circuit to enable the low-side switch to turn on and cause each of the high-side switches to turn off. As a result, the motor terminals are short-circuited.

[0006] EP 3 651 353 A1 shows that an inverter control device controls the movement of a rotating electrical machine via an inverter. The control is achieved via a control circuit and an inverter, which are connected in series.

[0007] Based on this, the object of the invention is to provide an improved system for controlling an electric motor. Description

[0008] A system according to the invention for controlling an electric motor according to claim 1 comprises an inverter bridge for transforming electrical energy to drive the electric motor. Transforming can include, for example, frequency adjustment, voltage transformation, etc. The inverter bridge can be configured to transform an alternating voltage and / or a direct voltage into alternating voltages, in particular into alternating voltages with different phase positions and the same frequency. The driving can include applying a predetermined voltage, in particular a predetermined alternating voltage, and / or a predetermined current, in particular a predetermined alternating current. In some embodiments, the inverter bridge can be connected to a power supply network, for example a direct voltage network or an alternating voltage network.

[0009] Furthermore, the system according to the invention comprises a control unit for controlling the inverter bridge, a safety unit for monitoring the control of the electric motor, and a control unit for controlling the electric motor by means of the control unit and the inverter bridge. The safety unit can, for example, be configured to detect generator operation of the electric motor, particularly in the event of a power failure, and to prevent this by means of the control unit and the inverter bridge.

[0010] Furthermore, the safety unit can be configured to monitor the speed of the electric motor. For this purpose, the speed of the electric motor can be determined, for example, using a sensor. The safety unit can, for example, include a comparison unit for comparing the determined speed with a predetermined maximum speed.

[0011] The safety unit can be configured to bring the electric motor into a predetermined operating state by means of the control unit and the inverter bridge when the determined speed exceeds the predetermined maximum speed.

[0012] Examples of a predetermined state of the electric motor are normal operation without field weakening operation, field weakening operation with a predetermined field weakening factor, braking operation in which the speed of the electric motor is reduced by mechanical friction and / or magnetic currents (in particular by means of a short circuit), operation at a predetermined speed, standstill, decoupling of the electric motor from the inverter bridge by open switches, etc.

[0013] Monitoring may include detection of a departure from one or more predetermined working areas, for example one or more units of the system, and a return to a predetermined working area of ​​the one or more working areas.

[0014] Monitoring may include control through constant observation.

[0015] In some embodiments, the safety unit can be configured to monitor a temperature of the electric motor, in particular by means of sensors. For this purpose, the safety unit can be configured to compare sensor values ​​with temperature reference values ​​and, if the sensor values ​​exceed the temperature reference values, to bring the electric motor into a predetermined operating state (condition) by means of the control unit and the inverter bridge.

[0016] The control unit may, for example, comprise an analog and / or digital circuit, in particular an FPGA, a microcontroller, etc. The control unit may, for example, comprise an analog and / or digital circuit, in particular an FPGA, a microcontroller, etc. The safety unit may, for example, comprise an analog and / or digital circuit, in particular an FPGA, a microcontroller, etc.

[0017] For signal transmission, the control unit is connected to the control unit, and the safety unit is connected to the control unit. Signal transmission can be via radio and / or wired, for example.

[0018] The control unit can be configured to control the electric motor by means of the control unit and the inverter, for example, to achieve control objectives according to user specifications, etc. If control of the electric motor by the control unit conflicts with control by the safety unit, the control unit can be configured to control the electric motor by means of the inverter bridge in accordance with the control of the safety unit.

[0019] According to the invention, the safety unit monitors the control of the electric motor independently of the control unit. This ensures that the electric motor and / or a control circuit (e.g., the inverter bridge, the control unit, etc.) are protected from damage and / or destruction in the event of a failure of the control unit and / or faulty control of the electric motor by the control unit.

[0020] A further advantage of the system according to the invention is that the control unit can be easily adapted with regard to its functionality, for example with regard to the control objectives, the control algorithms, the user inputs, without the need for a check with regard to errors and / or susceptibility to errors, etc., since the operation of the electric motor is monitored by the safety unit independently of the control unit.

[0021] This means that the system can be flexibly adapted in terms of control algorithms, control parameters, etc., particularly cost-effectively and with little effort.

[0022] In a particularly flexible embodiment of the invention, the control unit can be configured to operate the electric motor in a field weakening mode and / or the electric motor can be configured to be operated in a field weakening mode.

[0023] This allows the frequency range and torque of the electric motor to be adapted to requirements particularly cost-effectively. Another advantage is that this reduces the electric motor's energy consumption.

[0024] In embodiments with a particularly high safety aspect, the safety unit can be configured to detect a failure of a mains voltage during field weakening operation of the electric motor as a fault, and / or the safety unit can comprise an interface for transmitting fault signals, wherein the safety unit can be configured to put the electric motor into a predetermined state by means of the inverter bridge by transmitting and / or not transmitting a signal to the control unit in the event of a fault.

[0025] Further examples of an error are exceeding a specified maximum speed by the electric motor, exceeding the temperature of the electric motor above a specified temperature reference value, a mechanical load on the electric motor above a specified value, etc.

[0026] Advantageously, the control unit can be configured to control the inverter bridge and thus the electric motor using pulse width modulation (PWM). In some embodiments, the control unit can be configured to transmit a pulse-width modulated signal to the control unit, and the control unit can be configured to control the inverter bridge according to the pulse-width modulated signal depending on a signal from the safety unit.

[0027] In a particularly flexible embodiment, the safety unit can be configured to analyze signals from a sensor connected to the safety unit, to detect an error based on the analysis, and, if an error is present, to set the electric motor into a predetermined state by means of the inverter bridge by transmitting and / or not transmitting a signal to the control unit.

[0028] This has the advantage that, using the safety unit for monitoring the control of the electric motor, other components, parameters, etc. that are particularly connected to and / or interact with the electric motor can be efficiently monitored. This eliminates the need for separate system monitoring. Furthermore, the other components can be controlled easily, since the control is monitored by the safety unit.

[0029] For example, an analysis may include comparing the sensor signal with a reference value. In some embodiments, an analysis may include detecting one or more patterns in the sensor signal.

[0030] In particularly adapted embodiments, a predetermined state can be selected from several predetermined states by the safety unit as a function of one or more detected errors and / or as a function of the control signals of the control unit.

[0031] This can have the advantage that it can counteract a fault to a particular extent and that control of the electric motor by the control unit is restricted as little as possible.

[0032] In particularly advantageous embodiments, the system can comprise an electric motor in the form of a compressor of a heat pump and / or the system can be a heat pump. A compressor of a heat pump can be configured to compress a gas / liquid. The compressor can comprise an electric motor. A heat pump is a machine that, by expending technical work, for example by means of a compressor, absorbs thermal energy from a reservoir with a lower temperature (usually the environment) and transfers it - together with the drive energy - as useful heat to a system to be heated at a higher temperature (space heating).

[0033] This can have the advantage that a heat pump can be particularly efficient, for example, by operating the electric motor as part of the compressor in field-weakening mode. Another advantage can be that the control unit of the heat pump or compressor can be easily adapted to changes, particularly with regard to a control algorithm, control targets, etc., since the safety unit monitors the heat pump or the heat pump's compressor independently of the control unit.

[0034] Furthermore, this can reduce the costs for the development of the control unit.

[0035] Operating the heat pump in field weakening mode can also have the advantage that the speed can be increased while maintaining a constant electrical power consumption.

[0036] In particularly integrated embodiments, one or more pressure sensors can be arranged on a refrigeration circuit of the heat pump for pressure monitoring in the refrigeration circuit (in particular on a pipe / hose unit of the heat pump) and / or a temperature sensor can be arranged on the compressor of the heat pump for temperature monitoring of the compressor and connected to the safety unit for signal transmission.

[0037] This can have the advantage that the heat pump can be monitored for pressure and / or temperature in a simple and efficient manner. Since in this embodiment, a safety-relevant component, including the compressor (electric motor), the inverter bridge, the control unit, and the safety unit, is decoupled from the control unit, the heat pump can be controlled particularly easily using the control unit with regard to control parameters, control algorithms, areas of application of the heat pump, etc., without the need for complex safety measures, such as safety certification of the control unit, etc. This allows the heat pump to be used and adapted particularly flexibly.

[0038] A further advantage is that the heat pump can be monitored particularly efficiently and cost-effectively in terms of pressure and temperature, while field weakening operation of the electric motor (of the compressor) enables particularly flexible use of the heat pump.

[0039] In particularly compact embodiments, the system can comprise a computing unit and the control unit, the safety unit and / or the regulating unit can each be executed by means of a computing core of the computing unit.

[0040] A computing unit can be, for example, a microcontroller, an FPGA (Field Programmable Gate Array), an ASIC (Application-Specific Integrated Circuit), an integrated circuit, etc.

[0041] A computing core, for example, is a (largely) complete computing unit that is largely independent of other computing cores, including its own register sets and arithmetic logic units (ALUs). Preferably, several computing cores are arranged in a computing unit with shared connections and memory.

[0042] This has the advantage that monitoring by the safety unit can be carried out independently of the control unit, while the control unit, the safety unit and / or the control unit are designed in a particularly compact and cost-effective manner using a computing unit.

[0043] In some embodiments, the safety unit and the control unit can be implemented as a single unit that complies with a predetermined safety standard, particularly with regard to monitoring the control of the electric motor and / or monitoring the heat pump. Accordingly, the safety unit and the control unit can be implemented jointly using a computing core of a computing unit.

[0044] In a particularly advantageous embodiment, the control unit, the safety unit and the regulating unit can be implemented by means of a computing unit, the computing unit can comprise three computing cores, wherein the control unit, the safety unit and the regulating unit are each executed by means of a computing core of the computing unit.

[0045] This has the advantage that requirements regarding the safety of the electric motor and / or heat pump can be complied with in a particularly clear and understandable manner. This allows for the corresponding safety inspection to be carried out particularly efficiently and easily.

[0046] In a particularly integrated embodiment, the control unit, the safety unit and the regulating unit can be implemented by means of a computing unit and the computing unit can comprise two computing cores, wherein the regulating unit is executed by means of a first computing core of the computing unit and the control unit and the safety unit are executed jointly by means of a second computing core of the computing unit.

[0047] This has the advantage that the security unit and the control unit are designed to be particularly resource-efficient in terms of energy consumption and the number of processing cores. This, in turn, reduces operating and manufacturing costs.

[0048] In a particularly robust embodiment, the control unit can include a logic circuit. This has the advantage of making the control unit particularly fail-safe against programming errors. Furthermore, it can reduce the complexity of the control unit and thus simplify its implementation. Description of the drawing

[0049] Figure 1schematically shows a system for controlling an electric motor according to one embodiment of the invention. The system 10 comprises an inverter bridge 11, a control unit 12, a safety unit 13, and a control unit 14. The inverter bridge 11 is configured to supply electrical energy, which is provided, for example, by a mains voltage 15, to an electric motor 16 in response to control by the control unit 12.

[0050] The control unit 12 can be configured to control the inverter bridge 11 depending on signals from the safety unit 13 and signals from the control unit 14. Advantageously, the control unit can be configured to process the signals from the safety unit 13 and the control unit 14 such that the control signals (signals) from the safety unit 13 are dominant over the control signals (signals) from the control unit 14 for the control of the inverter bridge by the control unit 12.

[0051] The safety unit 13 is configured to monitor the control of the electric motor 16.

[0052] In some embodiments, the safety unit 13 can be connected to the inverter bridge 11 so that the safety unit can monitor a power supply from the inverter bridge to the electric motor 16 (control). This can include, for example, the detection of motor operation and / or generator operation of the electric motor 16. Based on the detection of whether the electric motor is operating in motor operation or generator operation, the safety unit can detect the operating state as an error and transmit a corresponding signal to the control unit. Based on the signal (control signal) from the safety unit to the control unit, the control unit can control the inverter bridge such that the electric motor is transferred (brought) to a predetermined state.

[0053] Furthermore, the safety unit can be connected, for example, to a sensor 17. The sensor can, for example, provide the safety unit 13 with a signal depending on a motor speed of the electric motor 16, depending on a temperature of the electric motor 16, etc. The safety unit can be configured to analyze the sensor signal and detect an error based on the analysis. Analyzing the sensor signal can, for example, include comparing the sensor signal with a reference signal.

[0054] Examples of a predetermined state of the electric motor are normal operation without field weakening operation, field weakening operation with a predetermined field weakening factor, braking operation in which the speed of the electric motor is reduced by mechanical friction and / or magnetic currents (in particular by means of a short circuit), operation at a predetermined speed, standstill, decoupling of the electric motor from the inverter bridge by open switches, etc.

[0055] Advantageously, the control unit 14 can be configured to transmit a signal (control signal) to the control unit based on a predetermined control target, so that a minimal control difference between the control target and the controlled variable is achieved. In some embodiments, the control unit 14 can be connected to one or more sensors 17 for detecting controlled variables. As shown in Figure 1As can be seen, the safety unit 13 monitors the control of the electric motor 16 independently of the control unit 14.

[0056] In some embodiments, the safety unit 13 and the control unit 14 can share sensors, so that a sensor signal is used by both the safety unit 13 and the control unit 14. Advantageously, the sensor signal can be forwarded from the safety unit to the control unit, so that the control unit can be dependent on the safety unit, but the safety unit is not dependent on the control unit. In some embodiments, a sensor for transmitting sensor signals can be connected in parallel to both the safety unit and the control unit.

[0057] Figure 2 shows schematically a system for controlling an electric motor according to an embodiment of the invention. The system 10 comprises analogous to Figure 1an inverter bridge 11, a control unit 12, a safety unit 13 and a control unit 14.

[0058] Analogous to Figure 1 The inverter bridge 11 can be connected to a mains voltage 15 and / or an electric motor 16. The safety unit 13 can, for example, be connected to the inverter bridge 11 and / or to one or more sensors 17 for monitoring the control of the electric motor 16.

[0059] In this embodiment, the control unit comprises logic components such as "AND" and "OR" gates. Using these logic circuits, the safety unit 13 is configured to place the electric motor into a predetermined state via the inverter bridge by transmitting or not transmitting a signal to the control unit.

[0060] In this embodiment, the control unit 14 comprises six signal outputs PWM U TOP, PWM U BOT, PWM V TOP, PWM V BOT, PWM W TOP, PWM W BOT, which are connected to the control unit. The signals at the six signal outputs can advantageously be pulse-width modulated. Two signal outputs BOT, TOP each form a signal pair PWM U, PWM V, PWM W for controlling the electric motor. When a TOP signal is present, a phase U, V, W of the electric motor in the inverter bridge can be connected to a first, high potential of a supply voltage. When a BOT signal is present, a phase U, V, W of the electric motor in the inverter bridge can be connected to a second, low potential. Advantageously, a signal is only present at one signal output TOP or BOT of the signal pairs in order to avoid a short circuit between the first, high and second, low potential.In some embodiments, the signal outputs of a signal pair may be combined into one signal output.

[0061] In some embodiments, a predetermined potential may be generated by the presence of a TOP and a BOT signal through the inverter bridge.

[0062] As in Figure 2 As shown, a TOP signal output is connected to a signal input of an AND gate of the control unit and a BOT signal output is connected to a signal input of an OR gate of the control unit.

[0063] Another signal input of the AND gate is connected in an inverted manner to a signal output of the safety unit 13. Another signal input of the OR gate is also connected to the signal output of the safety unit 13.

[0064] The control unit 12, as in Figure 2shown, is designed to control the inverter bridge 11 by means of the signal outputs of the AND and OR gates.

[0065] Figure 3 shows schematically an implementation of the system according to an embodiment of the invention. In the Figure 3In the implementation shown, the control unit 14 is implemented, for example, by means of a first computing unit 31, and the control unit 12 and the safety unit 13 are implemented by means of a second computing unit 32. This has the advantage that the safety-relevant units, the control unit, and the safety unit, are decoupled from the non-safety-relevant control unit 14 in terms of execution. This ensures that a failure of the first computing unit 31 due to a programming error in the control unit 14 does not impair the functioning of the safety unit, the control unit, and the inverter bridge. As a result, damage to the system for controlling the electric motor by the electric motor due to a failure of the control unit 14 can be avoided.

[0066] A further advantage of this embodiment is that the number of computing units can be reduced without reducing the security of the control.

[0067] Figure 4 schematically shows an implementation of a system for controlling an electric motor according to an embodiment of the invention. In this embodiment, the control unit 14, the control unit 12, and the safety unit 13 are each implemented by a computing unit 31, 32a, 32b. This embodiment has the advantage that the units are separate from each other in terms of their implementation, thus promoting a simple, clear, and structured implementation of the control unit, the control unit, and the safety unit.

[0068] Figure 5 shows schematically an implementation of a system for controlling an electric motor according to an embodiment of the invention. In the Figure 5In the implementation of the system 10 shown, the control unit, the control unit, and the safety unit are implemented by means of a computing unit 33. In this embodiment, the computing unit comprises two computing cores 51, 52, wherein the control unit is implemented by means of a first computing core 51 and the control unit and the safety unit are implemented by means of a second computing core 52. In some embodiments, the control unit 12 can be implemented by means of a second computing core and the safety unit 13 can be implemented by means of a third computing core.

[0069] The Figure 5The implementation of the system according to the invention shown can have the advantage that a safety-relevant part, comprising the control unit and the safety unit, can be separated from a non-safety-relevant part, the control unit 14, in a simple and cost-effective manner. This allows safety requirements for the system for controlling an electric motor to be met particularly efficiently.

[0070] Figure 6schematically shows a system for controlling an electric motor according to one embodiment of the invention. In this embodiment, the electric motor is part of a compressor 61. The compressor 61, a heat source 62, a heat collector 63, and a compression valve 64 can be part of a heat pump. The heat source 62, the compressor 61, the heat collector 63, and the expression valve 64 are connected to one another to transport a liquid and / or gas, in particular a refrigerant. For this purpose, the system can comprise, for example, a hose and / or pipe unit 68. One or more pressure sensors 17b, 17c can be attached to the hose or pipe unit 68 at various points to monitor the heat pump.

[0071] For example, a temperature sensor 17a for monitoring the temperature of the electric motor arranged in the compressor 61 can be arranged on the compressor 61.

[0072] As in Figure 6As shown, the sensors 17a, 17b, 17c can advantageously be connected to the safety unit. The safety unit can be configured to detect the presence of an error depending on one or more sensor values, for example by comparing one or more sensor values ​​with one or more reference values, and, depending on the error, to set the electric motor of the compressor to a predetermined state by means of the inverter bridge by transmitting and / or not transmitting a signal to the control unit.

[0073] Possible errors include, for example, overpressure or underpressure in the pipe or hose unit 68, too high or too low a temperature in the pipe or hose unit 68, overheating of the compressor 61, in particular of the electric motor in the compressor 61, a power failure, in particular when the electric motor of the compressor 61 is operated in field weakening mode, etc.

[0074] Examples of a predetermined state of the electric motor or compressor are normal operation without field weakening, field weakening operation with a predetermined field weakening factor, braking operation in which the speed of the electric motor is reduced by mechanical friction and / or magnetic currents (in particular by short-circuiting the electric motor), operation at a predetermined speed, standstill, decoupling of the electric motor from the inverter bridge by open switches, normal operation with reduced speed, etc.

[0075] This has the advantage of allowing a heat pump to be monitored in a simple and cost-effective manner, while simultaneously allowing an electric motor for operating the heat pump's compressor to be operated in field-weakening mode with the required monitoring. Furthermore, the control unit can be implemented in a simple and cost-effective manner and updated as needed, since the control unit, unlike the safety unit and the control unit, is subject to no or fewer safety-related requirements.

[0076] As a result, a heat pump can be controlled particularly efficiently by the control unit, and the compressor's electric motor can be operated in field-weakening mode. This results in a reduction in power consumption.

[0077] Figure 7 shows schematically a system for controlling an electric motor according to an embodiment of the invention. In the Figure 7In the system 10 shown, an inverter bridge 11 is shown in detail.

[0078] In this embodiment, the inverter bridge comprises diodes at the grid connections (three phases) for rectifying an alternating voltage provided by the grid 15. In addition, in this embodiment, capacitors are connected in parallel with the diode circuit to further smooth the generated direct voltage. Using six transistors, the direct voltage is converted into an alternating voltage with a predetermined frequency and amplitude, which drives an electric motor 16. The transistors of the inverter bridge 11 for generating the alternating voltage are switched by the control unit 12.

[0079] The control unit 12, in turn, controls the inverter bridge depending on signals provided by the control unit 14 and the safety unit 13. Advantageously, the signals from the safety unit 13 dominate over the signals from the control unit 14.

[0080] Advantageously, the control unit 12 can control the inverter bridge 11 by means of pulse-width modulated signals to control the electric motor.

[0081] The Figures 1 to 7 The systems shown and the embodiments additionally mentioned in the description can be combined in some embodiments with regard to their features if they are not contracting to one another.

Claims

1. System (10) for controlling an electric motor, wherein the system (10) includes an electric motor (16) in the form of a compressor (61) of a heat pump and / or the system is a heat pump, comprising: - an inverter bridge (11) for transforming electrical energy for driving the electric motor (16), - a control unit (12) for controlling the inverter bridge (11), - a safety unit (13) for monitoring the driving of the electric motor (16), - a regulating unit (14) for regulating the electric motor (16) by means of the control unit (12) and the inverter bridge (11), wherein, for signal transmission, the regulating unit (14) is connected to the control unit (12) and the safety unit (13) is connected to the control unit (12), the safety unit (13) monitors the driving of the electric motor (16) independently of the regulating unit (14), the control unit (12) is configured to operate the electric motor (16) in a field weakening mode, and / or the electric motor (16) is configured to be operated in a field weakening mode, one or more pressure sensors (17b) are arranged on a refrigeration circuit of the heat pump for pressure monitoring in the refrigeration circuit and / or a temperature sensor (17a) is arranged on the compressor of the heat pump for temperature monitoring of the compressor (61) and are connected to the safety unit (13) for signal transmission, and the safety unit (13) is configured to detect the presence of a fault as a function of one or more sensor values of the one or more pressure sensors (17b) and / or of the temperature sensor (17a) and to set the electric motor (16) of the compressor (61) into a predefined state by means of the inverter bridge (11) as a function of the fault by transmitting and / or not transmitting a signal to the control unit (12), characterized in that the control unit (12) is configured to control the electric motor (16) by means of the inverter bridge (11) according to the control of the safety unit (13) if a control of the electric motor (16) by the regulating unit (14) conflicts with a control by the safety unit (13).

2. System (10) according to Claim 1, wherein the safety unit (13) is configured to detect a failure of a mains voltage during a field weakening mode of the electric motor as a fault, and / or the safety unit comprises an interface for transmitting fault signals, wherein the safety unit (13) is configured to set the electric motor (16) into a predefined state by transmitting and / or not transmitting a signal to the control unit (12) by means of the inverter bridge (11) in the presence of a fault.

3. System (10) according to Claim 1 or 2, wherein the safety unit (13) is configured to analyze signals of a sensor connected to the safety unit (13), to detect a fault on the basis of the analysis and to set the electric motor (16) into a predefined state by transmitting and / or not transmitting a signal to the control unit (12) by means of the inverter bridge (11) in the presence of a fault.

4. System according to one of Claims 1 to 3, wherein a predefined state is selected from a plurality of predefined states as a function of one or more detected faults by the safety unit (13).

5. System (10) according to one of Claims 1 to 4, wherein the system (10) comprises a computing unit (33), and the control unit (12), the safety unit (13) and / or the regulating unit (14) are each executed by means of a computing core of the computing unit.

6. System (10) according to one of Claims 1 to 5, wherein the control unit (12), the safety unit (13) and the regulating unit (14) are implemented by means of a computing unit, the computing unit comprises three computing cores, wherein the control unit (12), the safety unit (13) and the regulating unit (14) are each executed by means of a computing core of the computing unit.

7. System (10) according to one of Claims 1 to 5, wherein the control unit (12), the safety unit (13) and the regulating unit (14) are implemented by means of a computing unit, the computing unit comprises two computing cores, wherein the regulating unit (14) is executed by means of a first computing core of the computing unit and the control unit (12) and the safety unit (13) are executed jointly by means of a second computing core of the computing unit.

8. System (10) according to one of Claims 1 to 6, wherein the control unit (12) comprises a logic circuit.