System and method for activating a function of a machine

Abstract

The present invention relates to a system (1), comprising a first machine (2), a mobile operating unit (3), and a localization system (4), wherein the mobile operating unit (3), the localization system (4) and the first machine (2) are communicatively connected, wherein the localization system (4) is intended and configured to determine the local position of the mobile operating unit (3), wherein the first machine (2) has at least a first function (5) and a second function (6), wherein the first machine (2) is assigned a first function range (7), wherein the first function range (7) is locally limited, wherein the first machine (2) is assigned a second function range (8), wherein the second function range (8) is locally limited, wherein the first function range (7) and the second function range (8) are differently locally limited, wherein the mobile operating unit (3) has at least a first user interface (9), wherein the mobile operating unit (3) is intended and configured to receive a first activation request (10) to activate the first function (5) or a second activation request (11) to activate the second function (6) from a user (12) via the first user interface (9), and wherein the system is intended and configured to activate the first function (5) of the first machine (2) when at least a first activation condition (13) is met, and to activate the second function (6) of the first machine (2) when at least a second activation condition (14) is met, wherein the first activation condition (13) is met when the mobile operating unit (3) receives the first activation request (10) and the position of the mobile operating unit (3) as determined by the localization system (4) is located within the first function range (7), and the second activation condition (14) is met when the mobile operating unit (3) receives the second activation request (11) and the position of the mobile operating unit (3) as determined by the localization system (4) is located within the second function range (8).

Description

[0001] System and method for activating a function of a machine

[0002] The invention relates to a system comprising a first machine, in particular a machine tool, a mobile operating unit, and a positioning system.

[0003] Furthermore, the invention relates to a method for activating a first function of a first machine or a second function of the first machine.

[0004] A method for location-dependent control access is known from US 2009 / 065578 A1.

[0005] The invention is based on the object of providing a system and a method as mentioned above, which further develop the state of the art.

[0006] This object is achieved by a system according to claim 1 and a method according to claim 10.

[0007] A system is provided, comprising a first machine, in particular a machine tool, a mobile operating unit, and a positioning system, wherein the mobile operating unit, the positioning system and the first machine are communicatively connected, wherein the positioning system is provided and configured to determine the local position of the mobile operating unit, wherein the first machine has at least a first function and a second function, wherein a first functional area is assigned to the first machine, wherein the first functional area is locally limited, wherein a second functional area is assigned to the first machine, wherein the second functional area is locally limited, wherein the first functional area and the second functional area are locally limited differently, wherein the mobile operating unit has at least one first user interface,wherein the mobile operating unit is provided and configured to receive a first activation request for activating the first function or a second activation request for activating the second function from a user via the first user interface, and wherein the system is provided and configured to activate the first function of the first machine if at least one first activation condition is met, and to activate the second function of the first machine if at least one second activation condition is met, wherein the first activation condition is met when the mobile operating unit receives the first activation request and the position of the mobile operating unit determined by the positioning system lies within the first functional area, and the second activation condition is met,if the mobile control unit receives the second activation request and the position of the mobile control unit determined by the positioning system lies within the second functional area.

[0008] The first machine thus has two functions linked to different local functional areas. The assigned function can be activated from each of the different functional areas. This is particularly useful for functions that can otherwise only be activated at fixed user interfaces, ensuring that the user has access to the affected functional areas.

[0009] The mobile control unit can be a smartphone or a tablet, for example. Mobile means that the control unit is not permanently connected to the first machine. The first user interface can be a touchscreen, for example. Alternatively or additionally, switches, rotary knobs, or other control elements for manual inputs, or a microphone for acoustic inputs, are also possible.

[0010] The positioning system preferably uses a plurality of stationary units and at least one mobile unit, wherein the mobile unit can be part of the mobile control unit or can be connected to the mobile control unit. The positioning system is provided and configured to determine the position of the mobile unit relative to the stationary units and thus to determine the position of the mobile control unit relative to the stationary units. The positions of the stationary units are known in advance, so that the position of the mobile control unit can be determined.

[0011] To check the activation conditions, the system preferably contains a computing unit. For the first activation condition, the computing unit checks whether the position of the mobile control unit determined by the positioning system lies within the first functional range and whether the mobile control unit has received a first activation request. If the first activation condition is met, the computing unit activates the first function of the first machine. For the second activation condition, the computing unit checks whether the position of the mobile control unit determined by the positioning system lies within the second functional range and whether the mobile control unit has received a second activation request. If the second activation condition is met, the computing unit activates the second function of the first machine.

[0012] The computing unit can be part of the mobile control unit, part of the positioning system, part of the first machine, or a standalone unit. If the computing unit is a standalone unit, the computing unit is communicatively connected to the mobile control unit, the positioning system, and the first machine. It is understood that the communicative connection can be direct or indirect. For example, the computing unit can be connected to the mobile control unit, and the mobile control unit can be connected to the first machine. In this way, the computing unit is communicatively connected to the first machine.

[0013] The receipt of the activation request and the determination of the location preferably occur essentially simultaneously. This essential simultaneity can be established, for example, by allowing a maximum of a specified time period between the receipt of the activation request and the determination of the location. The specified time period is preferably five seconds, particularly preferably one second. In a preferred embodiment, the receipt of the activation request triggers a determination of the location. This ensures that a current position is available for the received activation request.

[0014] Preferably, the tracking system determines the position of the mobile control unit at regular intervals. This ensures that the current position of the mobile control unit is always available. Upon receipt of the first or second activation request, the last determined position or the next determined position can be used to verify the first or second activation condition.

[0015] In a preferred embodiment, the first function is a safety-critical function, and the second function is a non-safety-critical or safety-critical function. A safety-critical function within the meaning of this disclosure is a function whose incorrect operation represents a safety risk. A safety-critical function is, in particular, a function by which a safety aspect of the machine is confirmed by the user. A safety-critical function is, for example, the closing of a safety circuit of the first machine or the release of a safety area of ​​the first machine. Locally limited functional areas are particularly advantageous for safety-critical functions that require the user to view specific areas of the first machine.Advantageously, the first functional area is spatially limited in such a way that the user within the first functional area has visibility into a safety area of ​​the first machine. This ensures that the user can only release the safety area if they have visibility into the safety area. A non-safety-critical function is a function with no relevance to safety and is therefore a harmless function. In particular, incorrect operation of a non-safety-critical function does not pose a safety risk. For example, an incorrectly triggered emergency stop does not pose a safety risk. A non-safety-critical function is, for example, a data query from the first machine or a job transfer to the first machine. Starting the first machine can be a non-safety-critical function if safety is guaranteed by a safety area that must be released.In a preferred embodiment, at least the activation request for the safety-critical function is transmitted with a cryptographic signature. In particular, the activation request can be transmitted with a cryptographic signature between the mobile control unit and the machine and / or between the mobile control unit and the computing unit and / or between the computing unit and the machine. The cryptographic signature allows the recipient to verify whether the activation request was sent by a legitimate sender. Activation of the safety-critical function by an unauthorized unit is thus prevented.

[0016] In a preferred embodiment, at least the activation request for the safety-critical function is transmitted via two independent communication channels. In particular, the activation request can be transmitted between the mobile control unit and the machine and / or between the mobile control unit and the computing unit and / or between the computing unit and the machine via two independent communication channels. Preferably, an activation request for a safety-critical function is transmitted via two independent communication channels, and the safety-critical function is only activated if the activation request is received on both communication channels. The use of two independent communication channels provides greater transmission security against communication errors and attacks on the transmission of safety-critical functions.Particularly preferably, an activation request for a non-safety-critical function, in particular an emergency stop function, is transmitted over two independent communication channels, and the non-safety-critical function is activated when the activation request is received on at least one communication channel. The use of two independent communication channels provides greater transmission security against communication line failures.

[0017] In a preferred embodiment, at least part of the first functional area is located within the second functional area. In other words, the two functional areas can overlap, or the first functional area can be a sub-area of ​​the second functional area. In a preferred embodiment, the first machine has a third function, and the mobile control unit is provided and configured to receive a third activation request to activate the third function, and the system is provided and configured to activate the third function when the mobile control unit receives the third activation request. The third function can be activated independently of functional areas. The third function can, for example, be an emergency stop function.

[0018] In a preferred embodiment, the mobile control unit has a second user interface, in particular a push button, and the mobile control unit is designed and configured to receive the third activation request via the second user interface. The second user interface prevents confusion between the third activation request and the first and second activation requests. Push buttons are particularly suitable for an emergency stop function, so that it can be safely activated at any time.

[0019] In a preferred embodiment, the positioning system is designed and configured to determine the position of the mobile control unit using trilateration of ultra-wideband signals or triangulation of ultra-wideband signals. Trilateration can be performed based on time-of-arrival (ToA) or time-difference-of-arrival (TDoA) calculations. Triangulation determines the reception angle of the ultra-wideband signals; typically, multiple antennas on the receiving unit are used for this purpose.

[0020] In a preferred embodiment, the system is provided and configured to receive operator authentication via the mobile control unit and to verify the operator's authentication when verifying the first activation condition. The first function, which may in particular be a safety-critical function, is therefore only activated if the operator has previously authenticated themselves. Particularly preferably, authentication-free activation is possible for the third function, which may in particular be an emergency stop function. The third function can therefore be activated by any operator.

[0021] In a preferred embodiment, the system comprises a second machine, wherein the second machine, the positioning system and the mobile operating unit are communicatively connected, wherein a third functional area is assigned to the second machine, wherein the third functional area is locally limited, wherein the second machine also has the third function, wherein the system is provided and configured to activate the third function on the first machine when the mobile operating unit receives the third activation request and the position of the mobile operating unit determined by the positioning system lies within the first functional area or within the second functional area, wherein the system is provided and configured to activate the third function on the second machine,if the mobile control unit receives the third activation request and the position of the mobile control unit determined by the positioning system is within the third functional area.

[0022] The first machine and the second machine comprise an identical, or at least similar, third function. Depending on the position of the mobile control unit, the third function is activated on the first machine or the second machine upon the third activation request. The user does not need to select the desired machine.

[0023] In a preferred embodiment, the system is provided and configured to activate the third function on the first machine and the second machine when the mobile control unit receives the third activation request and the position of the mobile control unit determined by the positioning system lies outside the first, second, and third functional ranges. This embodiment is particularly advantageous when the third function is an emergency stop function. If the desired machine cannot be clearly determined from the position of the mobile control unit, the emergency stop function is activated on both machines. This ensures that the emergency stop function is activated immediately after receiving the third activation request.

[0024] In an alternative embodiment, the system is provided and configured to offer the first machine and the second machine for selection for activating the third function, in particular via the first user interface or the second user interface, when the mobile control unit receives the third activation request and the position of the mobile control unit determined by the positioning system lies outside the first, second and third functional range.

[0025] A method is provided for activating a first function of a first machine or a second function of the first machine, wherein a mobile operating unit, a positioning system and the first machine are communicatively connected, wherein the first machine has at least the first function and the second function, wherein a first functional area is assigned to the first machine, wherein the first functional area is spatially limited, wherein a second functional area is assigned to the first machine, wherein the second functional area is spatially limited, wherein the first functional area and the second functional area are spatially differently limited, wherein the mobile operating unit has at least one first user interface, wherein the positioning system determines the local position of the mobile operating unit,wherein the mobile operating unit receives a first activation request for activating the first function or a second activation request for activating the second function from a user via the first user interface, wherein the first function of the first machine is activated if at least one first activation condition is met, and the second function of the first machine is activated if at least one second activation condition is met, wherein the first activation condition is met when the mobile operating unit receives the first activation request and the positioning system locates the mobile operating unit within the first functional area, and wherein the second activation condition is met,when the mobile control unit receives the second activation request and the positioning system locates the mobile control unit within the second functional area. In a preferred embodiment, the first function is a safety-critical function and the second function is a non-safety-critical or safety-critical function.

[0026] In a preferred embodiment, the positioning system is provided and configured to determine the position of the mobile control unit using a trilateration of ultra-wideband signals or a triangulation of ultra-wideband signals.

[0027] The following description of preferred embodiments, in conjunction with the drawings, serves to explain the invention in more detail.

[0028] They show:

[0029] Fig. 1 shows a system with a first machine;

[0030] Fig. 2 shows another system with a first machine;

[0031] Fig. 3 shows a system with a first machine and a second machine;

[0032] Fig. 4 shows another system with a first machine and a second

[0033] Machine;

[0034] Fig. 5 is a schematic view of the communication between the units of the system; and

[0035] Fig. 6 shows the flow of a method.

[0036] Identical or functionally equivalent elements are designated by the same reference numerals in all embodiments.

[0037] An embodiment of a system 1 is shown in Fig. 1. The system comprises a first machine 2, a mobile operating unit 3 and a positioning system 4, wherein the positioning system comprises several stationary units 4a and a mobile unit 4b, here the mobile operating unit 3. In this example, a computing unit 15 is also shown. In this example, the computing unit 15 is shown as an independent unit, but it can also be part of the first machine 2, the mobile operating unit 3 or a stationary unit 4a of the positioning system 4. The first machine 2 comprises a first functional area 7 and a second functional area 8. In this example, the first functional area 7 is a sub-area of ​​the second functional area 8. The first functional area 7 is assigned to a first function of the first machine 2 and the second functional area 8 is assigned to a second function of the first machine 2.In this example, the first function of the first machine 2 is to release a security area of ​​the first machine 2. The security area may only be released if the user has clear visibility into the security area. In this example, clear visibility is only possible from one side, so the first functional area 7 is located on only one side of the first machine 2. The second function is a harmless function that does not require clear visibility into the security area, so the second functional area is located well around the first machine 2.

[0038] The positioning system 4 determines the position of the mobile control unit 3 at regular intervals. To do this, the mobile control unit 3 transmits ultra-wideband signals, which are received by the stationary units 4a. The position of the mobile control unit 3 relative to the stationary units 4a is determined using a time-of-flight (TDoA) method. The positions of the stationary units 4a are known and allow the position of the mobile control unit 3 to be determined. The position of the mobile control unit is communicated to the processing unit 15.

[0039] In this example, the mobile control unit 3 is located within the first functional area 7. The mobile control unit 3 is a tablet with a touchscreen as the first user interface. A user 12 can enter a first activation request to activate the first function or a second activation request to activate the second function via the first user interface. If the user 12 enters an activation request via the first user interface, the activation request is forwarded from the mobile control unit 3 to the computing unit 15. The computing unit 15 checks whether the first or second activation condition is met.The first activation condition is met when the mobile operating unit 3 receives the first activation request and the position of the mobile operating unit 3 determined by the positioning system 4 lies within the first functional area 7, and the second activation condition is met when the mobile operating unit 3 receives the second activation request and the position of the mobile operating unit determined by the positioning system lies within the second functional area 8. If the first activation condition is met, the computing unit 15 activates the first function of the first machine 2, and if the second activation condition is met, the computing unit 15 activates the second function of the first machine 2. In this example, the user 12 can activate both the first function and the second function from their displayed position.

[0040] Fig. 2 shows a further system 1 with a first machine 2. In the following, only the differences from Fig. 1 are described. While in the example from Fig. 1 the first functional area 7 is a sub-area of ​​the second functional area 8, in this example the first functional area 7 is separate from the second functional area 8. In this example, the mobile control unit 3 is located within the first functional area 7. In contrast to the example from Fig. 1, the user 12 can activate the first function from his illustrated position, but not the second function. In this example, the first function and the second function are safety-critical functions.

[0041] If the user 12 enters a first activation request via the first user interface, the first activation request is forwarded from the mobile operating unit 3 to the computing unit 15 with a cryptographic signature. The computing unit 15 then initiates a determination of the position of the mobile operating unit 3 using the positioning system 4. After receiving the position, the computing unit 15 checks whether the first activation condition is met. In this example, the first activation condition is met, and the computing unit 15 activates the first function of the machine 2 via a cryptographically signed message to the machine. If the user 12 enters a second activation request via the first user interface, the second activation request is forwarded from the mobile operating unit 3 to the computing unit 15 with a cryptographic signature.The computing unit 15 then initiates a determination of the position of the mobile control unit 3 using the positioning system 4. After receiving the position, the computing unit 15 checks whether the second activation condition is met. In this example, the second activation condition is not met, and the computing unit 15 refuses to activate the second function.

[0042] Fig. 3 shows a system 1 with a first machine 2 and a second machine 30. Only the differences from Fig. 1 are described below. In this example, in addition to the first machine 2, a second machine 30 is present. The second machine 30 is assigned a third functional area 31. All functions of the second machine 30 can be activated by the operator 12 via the mobile control unit 3 when the mobile control unit 3 is within the third functional area. The check to determine whether the mobile control unit 3 is within the third functional area is carried out analogously to the previously described examples.

[0043] Fig. 4 shows another system 1 with a first machine 2 and a second machine 30. Only the differences from Fig. 3 are described below. In this example, the operator 12 with the mobile control unit 3 is located outside the functional areas. The first machine 2 and the second machine 30 each include a third function, in this case an emergency stop of the machine. A third activation request to activate the third function can be entered by the operator 12 via a second user interface of the mobile control unit 3. If the operator 12 enters a third activation request via the second user interface, the third activation request is forwarded from the mobile control unit 3 to the computing unit 15.The computing unit 15 checks whether the position of the mobile control unit 3 is within the first or second functional area 7, 8 of the first machine 2 and whether the mobile control unit is within the third functional area 31 of the second machine. In this example, the position of the mobile control unit 3 is outside the first, second, and third functional areas; therefore, the computing unit activates the third function, i.e., the emergency stop, on both machines 2, 30.

[0044] Fig. 5 schematically illustrates the communication between the units of system 1. In this example, system 1 comprises the first machine 2, the mobile operating unit 3, a stationary unit 4a of the positioning system 4, and a computing unit 15. The mobile operating unit 3 is simultaneously a mobile unit 4b of the positioning system 4. The mobile operating unit 3 has a first user interface 9, here a touchscreen, and a second user interface 22, here a push button. The mobile operating unit 3 is capable of transmitting a first activation request 10, a second activation request 11, and a third activation request 21 to the computing unit 15. The mobile operating unit 3, as the mobile unit 4b of the positioning system 4, and the stationary unit 4a of the positioning system 4 exchange ultra-broadband messages to determine the position of the mobile operating unit 3.The position of the mobile control unit 3 is transmitted from the positioning system 4 to the processing unit 15. The processing unit 15 checks whether the received activation request 10, 11, 21 and the position of the mobile control unit 3 satisfy the first activation condition 13 or the second activation condition 14. If an activation condition 13, 14 is satisfied, the processing unit activates the corresponding function of the first machine 2.

[0045] Fig. 6 shows the sequence of an exemplary method. In a first step 41, a first activation request or a second activation request is transmitted. In a second step 42, the position of the mobile control unit is determined. In a third step 43, it is determined whether the activation request and the position satisfy an activation condition. If a first activation condition is satisfied, the first function is activated in a fourth step. If a second activation condition is satisfied, a second function is activated. List of reference symbols

[0046] System first machine mobile control unit

[0047] Tracking system a fixed unit b mobile unit

[0048] First function

[0049] Second function

[0050] First functional area

[0051] Second functional area

[0052] First user interface 0 First activation request 1 Second activation request 2 User 3 First activation condition 4 Second activation condition 5 Computing unit 0 Third function 1 Third activation request 2 Second user interface 0 Second machine 1 Third functional area 1 First step 2 Second step 3 Third step 4 Fourth step 5 Fifth step

Claims

Patent claims 1. A system (1) comprising a first machine (2), in particular a machine tool, a mobile operating unit (3), and a positioning system (4), wherein the mobile operating unit (3), the positioning system (4), and the first machine (2) are communicatively connected, wherein the positioning system (4) is provided and configured to determine the local position of the mobile operating unit (3), wherein the first machine (2) has at least a first function (5) and a second function (6), wherein a first functional area (7) is assigned to the first machine (2), wherein the first functional area (7) is spatially delimited, wherein a second functional area (8) is assigned to the first machine (2), wherein the second functional area (8) is spatially delimited, wherein the first functional area (7) and the second functional area (8) are spatially delimited differently, wherein the mobile operating unit (3) has at least one first user interface (9),wherein the mobile operating unit (3) is provided and configured to receive a first activation request (10) for activating the first function (5) or a second activation request (11) for activating the second function (6) from a user (12) via the first user interface (9), and wherein the system is provided and configured to activate the first function (5) of the first machine (2) if at least one first activation condition (13) is met, and to activate the second function (6) of the first machine (2) if at least one second activation condition (14) is met, wherein the first activation condition (13) is met if the mobile operating unit (3) receives the first activation request (10) and the position of the mobile operating unit (3) determined by the positioning system (4) lies within the first functional area (7), and, the second activation condition (14) is fulfilled when the mobile control unit (3) receives the second activation request (11) and the position of the mobile control unit (3) determined by the positioning system (4) lies within the second functional area (8).

2. System (1) according to claim 1, wherein the first function (5) is a safety-critical function and the second function (6) is a non-safety-critical or a safety-critical function.

3. System (1) according to claim 2, wherein the safety-critical function is a function whose incorrect operation represents a safety risk, in particular a closing of a safety circuit of the first machine (2) or the release of a safety area of ​​the first machine (2).

4. System according to claim 3, wherein the first functional area (7) is spatially limited such that the user (12) within the first functional area (7) has insight into the safety area of ​​the first machine (2) 5. System (1) according to one of the preceding claims, wherein at least a part of the first functional area (7) is located locally within the second functional area (8).

6. System (1) according to one of the preceding claims, wherein the first machine (2) has a third function (20) and the mobile operating unit (3) is provided and configured to receive a third activation request (21) for activating the third function (20), wherein the system (1) is provided and configured to activate the third function (20) when the mobile operating unit (3) receives the third activation request (21).

7. System (1) according to one of the preceding claims, wherein the mobile operating unit (3) has a second user interface (22), in particular a push button, and the mobile operating unit (3) is provided and configured to transmit the third activation request (21) via the second User interface (22) to receive.

8. System (1) according to one of the preceding claims, wherein the locating system (4) is provided and configured to determine the position of the mobile control unit (3) using a trilateration of ultra-wideband signals or a triangulation of ultra-wideband signals.

9. System (1) according to one of the preceding claims, wherein the system (1) comprises a second machine (30), wherein the second machine (30), the positioning system (4), and the mobile operating unit (3) are communicatively connected, wherein the second machine (30) is assigned a third functional area (31), wherein the third functional area (31) is spatially limited, wherein the second machine (30) also has the third function (20), wherein the system (1) is provided and configured to activate the third function (20) on the first machine (2) when the mobile operating unit (3) receives the third activation request (21) and the position of the mobile operating unit (3) determined by the positioning system (4) lies within the first functional area (7) or within the second functional area (8), wherein the system (1) is provided and configured to activate the third function (20) on the second machine (30),if the mobile control unit (3) receives the third activation request (21) and the position of the mobile control unit (3) determined by the positioning system (4) lies within the third functional area (31).

10. System (1) according to one of the preceding claims, wherein the system (1) is provided and configured to activate the third function (20) on the first machine (2) and the second machine (30) when the mobile operating unit (3) receives the third activation request (21) and the position of the mobile operating unit (3) determined by the positioning system (4) lies outside the first (7), second (8) and third functional area (31).

11. System (1) according to one of claims 1 to 8, wherein the system (1) is provided and set up to offer the first machine (2) and the second machine (30) for activation of the third function (20) for selection, in particular via the first user interface (9) or the second user interface (22), when the mobile operating unit (3) receives the third activation request (21) and the position of the mobile operating unit (3) determined by the positioning system (4) lies outside the first (7), second (8) and third functional area (31).

12. Experienced for activating a first function (5) of a first machine (2) or a second function (6) of the first machine (2), wherein a mobile operating unit (3), a positioning system (4), and the first machine (2) are communicatively connected, wherein the first machine (2) has at least the first function (5) and the second function (6), wherein a first functional area (7) is assigned to the first machine (2), wherein the first functional area (7) is spatially limited, wherein a second functional area (8) is assigned to the first machine (2), wherein the second functional area (8) is spatially limited, wherein the first functional area (7) and the second functional area (8) are spatially different, wherein the mobile operating unit (3) has at least one first user interface (9), wherein the positioning system (4) determines the local position of the mobile operating unit (3),wherein the mobile operating unit (3) receives a first activation request (10) for activating the first function (5) or a second activation request (11) for activating the second function (6) from a user (12) via the first user interface (9), wherein the first function (5) of the first machine (2) is activated if at least one first activation condition (13) is fulfilled, and the second function (6) of the first machine (2) is activated if at least one second activation condition (13) is fulfilled, wherein the first activation condition (12) is fulfilled if the mobile, Operating unit (3) receives the first activation request (10) and the locating system (4) locates the mobile operating unit (3) within the first functional area (7), and wherein the second activation condition (14) is met when the mobile operating unit (3) receives the second activation request (11) and the locating system (4) locates the mobile operating unit (3) within the second functional area (8).

13. Experience according to claim 12, wherein the first function (5) is a safety-critical function and the second function (6) is a non-safety-critical or a safety-critical function.

14. Experience according to claim 12, wherein at least the activation request for the safety-critical function (5) is transmitted in a cryptographically signed manner.

15. Method according to one of claims 12 to 14, wherein at least the activation request for the safety-critical function (5) is transmitted via two independent communication channels.

16. The method according to any one of claims 12 to 15, wherein the first machine (2) has a third function (20) and the third function (20) is activated when the mobile operating unit (3) receives a third activation request (21).

17. Method according to one of claims 12 to 16, wherein the positioning system (4) operates with a trilateration of ultra-wideband signals or a triangulation of ultra-wideband signals.

Images