Method and device for the provision of measurement data for a system

Abstract

In the method, a first sensor signal (SEN1), which represents a first measurement variable, is read in, wherein a first function (A), when executed, is executed depending on the first measurement variable. It is detected whether at least one diagnosed first error symptom (Sym1, Sym2) is present, wherein the diagnosed first error symptom(s) (Sym1, Sym2) occur depending on the first sensor signal (SEN1). If one or more first error symptoms (Sym1, Sym2) are present, a first function-specific sensor signal (SEN1A) is determined for the first function (A) from a predefined first set of signals and / or is selected depending on predefined rules. Furthermore, a quality indicator (Qi_1A) is selected from a predefined set of quality indicators (Qi) for the first function-specific sensor signal (SEN1A) of the first function (A) on the basis of the predefined rules, in particular on the basis of a decision matrix (9), depending on the at least one provided diagnosed first error symptom (Sym1, Sym2). The first function-specific sensor signal (SEN1A) and the quality indicator (Qi_1A) determined for the first function (A) are forwarded to the first function (A).

Description

[0001] Description

[0002] Method and device for providing measurement data for a system

[0003] The present disclosure relates to a method and a corresponding device for providing measurement data for a system, in particular for a vehicle. Furthermore, the disclosure relates to a control unit, a computer program, and a computer-readable storage medium.

[0004] Modern vehicles are increasingly integrating control units and implementing ever more functionalities. Due to their increasing interconnectedness and complexity, the implementation of functional safety is also becoming increasingly complex.

[0005] In addition, the trend toward autonomous vehicles is drastically increasing the requirements for functional safety. Whereas previously the driver often had to make the final decision in safety-relevant situations, the use of numerous driver assistance systems is increasingly shifting this decision to the vehicle, or rather the vehicle control system itself.

[0006] For this purpose, numerous sensor signals are detected or recorded, which are used, for example, as reference or manipulated variables. If the sensor signals cannot be provided or are not provided with sufficient quality and / or integrity, this can lead to restricted vehicle operation or even vehicle failure.

[0007] In the past, the focus in implementing functional safety was almost exclusively on deactivating the system when a fault was detected (“fail-safe”). However, systems for autonomous vehicles require the implementation of a significantly more complex fault response in order to achieve the lowest-risk state for the vehicle (“fail-operational”). For example, instead of shutting the vehicle down as quickly as possible in the event of a fault, it may be necessary to accelerate the vehicle again first, for example, to move the vehicle away from the tracks when crossing a level crossing. A key prerequisite for this is that the relevant measurement data is available in sufficient quality and with sufficient integrity in every situation.

[0008] One problem to be solved is therefore to provide a method that enables a reliable and flexible provision of measurement data for a system, in particular for a vehicle.

[0009] The problem is solved by the features of the independent patent claims. Advantageous developments of the invention are characterized in the subclaims.

[0010] According to a first aspect and a second aspect, the object is achieved by a method and a corresponding device for providing measurement data for a system. The system is, for example, a vehicle or a subsystem of a vehicle. The system is configured to perform at least a first function. The function is, for example, a vehicle function.

[0011] In the method, a first sensor signal, which is provided by a sensor device of the system and is representative of a first measured variable, is read in, wherein the first function is carried out as a function of the first measured variable when it is carried out.

[0012] For the purposes of this document, the term sensor signal includes both analog sensor signals and digital sensor signals that are transmitted serially or in parallel, and sensor data that is transmitted, for example, via a specified network, for example an Ethernet network, or a specified bus, for example a CAN bus, using a protocol.

[0013] It is detected whether at least one diagnosed first error symptom is present, wherein the diagnosed first error symptom(s) occur depending on the first sensor signal. The diagnosed first error symptoms can be provided by diagnostic devices of the system. Preferably, all first error symptoms that occur depending on the first sensor signal are provided and read in. The respective diagnosed error symptom can be provided, for example, in the form of a specific error code. If no diagnosed first error symptom is present, a first quality indicator indicating a valid first sensor signal is assigned to the first sensor signal, and the first sensor signal and the assigned first quality indicator are forwarded to the first function.

[0014] If one or more first error symptoms are present, a first function-specific sensor signal for the first function is determined and / or selected from a predetermined first set of signals depending on predetermined rules.

[0015] The rules may comprise a decision matrix relating possible diagnosable first error symptoms for the first function to predetermined requirements of the first function for a signal quality and / or a signal integrity of a signal representing the first measured quantity.

[0016] Furthermore, a quality indicator is selected from a predefined set of quality indicators for the first function-specific sensor signal of the first function based on the predefined rules, in particular based on the decision matrix, depending on the at least one provided diagnosed first error symptom. The first function-specific sensor signal and the associated determined quality indicator are forwarded to the first function. Forwarding the first function-specific sensor signal and the associated determined quality indicator to the first function results in, in particular, the first function being executed as in a fault-free case, being executed differently than in a fault-free case, not being executed at all, and / or being executed only for a specific duration, depending on the determined quality indicator.

[0017] Advantageously, this allows the evaluation of the sensor signal to be carried out centrally and not by the first function, and if necessary, another suitable signal can be provided for the first function.

[0018] In at least one advantageous embodiment according to the first and second aspects, the determination and / or selection of the first function-specific sensor signal for the first function and / or the selection of the quality indicator for the first function takes place depending on a comparison of the first sensor signal with a reference, wherein the reference can comprise a further first sensor signal which is also representative of the first measured variable, but is detected and / or determined differently than the first sensor signal.

[0019] In at least one advantageous embodiment according to the first and second aspects, the reference comprises a further first sensor signal, which is also representative of the first measured variable, but is detected and / or determined differently than the first sensor signal. This makes it easy to detect a faulty first sensor signal.

[0020] In at least one advantageous embodiment according to the first and second aspects, the first set of signals comprises at least two of the following signals:

[0021] - the first sensor signal and / or

[0022] - the further first sensor signal and / or

[0023] - a constant first signal with a value equal to a maximum value of the first sensor signal, and / or a

[0024] - constant second signal with a value equal to a minimum value of the first sensor signal, and / or

[0025] - a constant third signal with a value equal to a stored last valid sensor value, and / or

[0026] - a first model signal, which is determined depending on a given model and is representative of the first measured quantity.

[0027] In at least one advantageous embodiment according to the first and second aspects, the set of quality indicators comprises at least two of the following indicators:

[0028] - the first quality indicator indicating a valid first sensor signal, and / or

[0029] - a second quality indicator indicating an invalid first sensor signal, and / or

[0030] - a third quality indicator indicating that a stored last valid first sensor signal value is provided, and / or

[0031] - a fourth quality indicator indicating that the further first sensor signal is provided, and / or

[0032] - a fifth quality indicator indicating that the model signal is provided, and / or

[0033] - a sixth quality indicator indicating that the maximum value of the first sensor signal is provided, and / or - a seventh quality indicator indicating that a minimum value of the first sensor signal is provided, and / or

[0034] - an eighth quality indicator indicating that an initialization value is provided.

[0035] In at least one advantageous embodiment according to the first and second aspects, the system is designed to perform at least one second function in addition to the first function. The second function is executed depending on the first measured variable. For this purpose, the method comprises the further steps described below.

[0036] If there is no diagnosed first fault symptom, the first sensor signal and the associated first quality indicator are forwarded to the second function.

[0037] If one or more diagnosed first error symptoms are present, a second function-specific sensor signal for the second function is determined from the predefined first set of signals depending on the predefined rules, in particular based on the decision matrix, depending on the provided diagnosed first error symptom(s). For this purpose, the decision matrix additionally includes predefined requirements of the second function for the second function regarding the signal quality and / or the signal integrity of the signal representing the first measured variable, and the decision matrix relates the possible diagnosable first error symptoms to the requirements of the second function regarding the signal quality and / or the signal integrity of the signal representing the first measured variable.Furthermore, a quality indicator is selected from the predefined set of quality indicators for the second function-specific sensor signal of the second function depending on the predefined rules, in particular based on the decision matrix, depending on the diagnosed first error symptom(s) provided. The second function-specific sensor signal and the associated determined quality indicator are forwarded to the second function. Forwarding the second function-specific sensor signal and the associated determined quality indicator to the second function results in, in particular, the second function being executed as in a fault-free case, being executed differently than in a fault-free case, not being executed at all, and / or being executed only for a specific duration, depending on the determined quality indicator.Advantageously, this allows different signals or the relevant measurement data and different quality indicators to be made available for the functions depending on the requirements, thus increasing the availability of the system.

[0038] In at least one advantageous embodiment according to the first and second aspects, in response to a request from the first and / or second function, which includes an instruction to adapt the decision matrix, the decision matrix is ​​adapted with respect to the selection of the quality indicators and / or the selection of the first function-specific sensor signal or the second function-specific sensor signal, respectively, wherein the request is dependent on predetermined criteria for a behavior of the first or second function when various error situations occur. In particular, the request can be dependent on a duration, how long the respective first error symptom has already occurred and / or whether an error causing the at least one error symptom has been confirmed.

[0039] This advantageously allows each function, in a fault scenario, to configure its requirement characteristics regarding signal quality and / or signal integrity based on the provided fault symptoms. Each function can thus decide which measured values ​​or "substitute values" and which quality indicator it may or wants to receive in a specific fault symptom-active case.

[0040] In at least one advantageous embodiment, a tolerance is determined and provided for each of the first sensor signal and / or the first function-specific sensor signal and / or the second function-specific sensor signal, wherein the tolerance represents a difference between the first sensor signal and the further first sensor signal.

[0041] The problem is solved according to a third aspect by a control unit comprising a device according to the second aspect, a receiving interface, and an output interface. The receiving interface is configured to receive the first sensor signal and the further first sensor signal from predetermined sensor devices and the instructions from units that perform the first and / or second function and to forward them to the device. The output interface is configured to send the first sensor signal, the first function-specific sensor signal, and the second function-specific sensor signal, as well as the quality indicators, to the units that perform the first and / or second function.

[0042] The device includes a processor and a program memory. The processor may be a central processing unit (CPU), another general-purpose processor, a microcontroller, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA), or another programmable logic device. The general-purpose processor may be a microprocessor, or the processor may be any conventional processor or the like.

[0043] The object is achieved according to a fourth aspect by a computer program comprising instructions which, when executed by a computer, cause the computer to carry out the method according to the first aspect.

[0044] For the purposes of this document, the term "computer program" refers to a program element or a computer program product containing instructions for controlling a computer system to coordinate the operation of a system or method in a suitable manner to achieve the effects associated with the method according to the invention. The computer program can be implemented as computer-readable instruction code in any suitable programming language, such as JAVA, C++, etc. The instruction code can program a computer or other programmable device to perform the desired functions.

[0045] According to a fifth aspect, the problem is solved by a computer-readable storage medium on which the computer program according to the fourth aspect is stored.

[0046] The computer program can be stored on a computer-readable storage medium (CD-ROM, DVD, Blu-ray Disc, removable drive) or in a volatile or non-volatile memory, built-in memory / processor, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM), etc. The computer-readable storage medium is configured to store associated program instructions and associated data.

[0047] Furthermore, the computer program may be provided on a network, such as the Internet, from which it can be downloaded by a user when required.

[0048] Advantageous embodiments of the first and second aspects also apply to the third, fourth and fifth aspects.

[0049] Further advantageous embodiments are disclosed in the appended claims and the following description of exemplary embodiments with reference to the attached figures. The description of the subject matter specified here is not limited to the individual specific embodiments. Features of different exemplary embodiments can be combined with one another—where technically feasible—to form further exemplary embodiments. For example, variations or modifications described with regard to one of the exemplary embodiments may also be applicable to other exemplary embodiments, unless otherwise stated.

[0050] It shows:

[0051] Figure 1 is a schematic block diagram of an embodiment of a control unit with a measurement data provision module for a system.

[0052] In the figures, the same reference numerals are used for elements with essentially the same function, but these elements do not have to be identical in all details.

[0053] Figure 1 shows a simplified exemplary block diagram for a control unit 1 with a measurement data provision module 5 for a system.

[0054] The system is, for example, a vehicle or a subsystem of a vehicle.

[0055] The subsystem can, for example, be a high-voltage system of the vehicle. The system is designed to perform at least a first function A. Preferably, the system is designed to perform multiple functions. In the exemplary embodiment shown in Figure 1, a first function A and a second function B are shown by way of example. In the case of a vehicle, functions A and B are vehicle functions.

[0056] The control unit 1 has a receiving interface 3, an output interface 7, and the measurement data provision module 5. The measurement data provision module 5 can also be referred to as a device for providing measurement data or as a sensor signal integrity coordinator.

[0057] The measurement data provision module 5 has, for example, a processor and a program memory and functions as a computing unit that executes a computing program.

[0058] The receiving interface 3 is configured to receive a first sensor signal SEN1. The first sensor signal SEN1 is representative of a first measured variable used by the first function A and the second function B. In particular, the first function A and the second function B are executed depending on the first measured variable.

[0059] The first measured value is, for example, a cell voltage of a battery cell in a vehicle's high-voltage battery.

[0060] The receiving interface 3 is further configured to receive at least one diagnosed first error symptom Sym1, Sym2, for example in the form of an error code, wherein the at least one diagnosed first error symptom Sym1, Sym2 occurs depending on the first sensor signal SEN1. For example, the diagnosed first error symptom Sym1 occurs when the first sensor signal SEN1 is faulty, for example, exceeds a predetermined tolerance range.

[0061] The at least one diagnosed error symptom Sym1, Sym2 is sent, for example, from a diagnostic device of the sensor device, which provides the first sensor signal SEN1, to the receiving interface 3.

[0062] For example, during a cell voltage measurement, a main analog-to-digital converter and an auxiliary analog-to-digital converter, also known as a redundant analog-to-digital converter, are used, and the results are compared. If the results differ too significantly, an error message, which can also be referred to as a fault symptom, is issued. The error message does not contain any information about the actual cause of the fault.

[0063] The receiving interface 3 can further be configured to receive a diagnosed further first error symptom Sym2, wherein the diagnosed further first error symptom Sym2 also occurs depending on the first sensor signal SEN1. For example, the diagnosed further first error symptom Sym2 occurs when the first sensor signal SEN1 has a constant level of 0 volts, for example.

[0064] Preferably, several diagnosed first error symptoms Sym1, Sym2 are provided to the measurement data provision module 5. It is advantageous if the receiving interface 3 is configured to receive all first error symptoms Sym1, Sym2 that occur as a function of the first sensor signal SEN1 and to provide them to the measurement data provision module 5.

[0065] The measurement data provision module 5 has a decision matrix 9. The decision matrix 9 can also be referred to as a decision table.

[0066] The measurement data provision module 5 is designed to select and / or determine a first output sensor signal for the first function A from a predetermined first set of signals with the aid of the decision matrix 9 depending on the at least one received diagnosed first error symptom.

[0067] The measurement data provision module 5 is further designed, for example, to select and / or determine a second output sensor signal for the second function B from the predetermined first set of signals with the aid of the decision matrix 9 depending on the at least one received diagnosed first error symptom Sym1, Sym2.

[0068] The decision matrix 9 relates the possible diagnosable first error symptoms Sym1, Sym2, which occur depending on the first sensor signal SEN1, to predetermined requirements of the first function A regarding a signal quality and / or a signal integrity of a signal representing the first measured variable. Furthermore, the decision matrix 9, for example, relates the possible diagnosable first error symptoms Sym1, Sym2, which occur depending on the first sensor signal SEN1, to predetermined requirements of the second function B regarding a signal quality and / or a signal integrity of a signal representing the first measured variable.

[0069] In Figure 1, a diagnosed first error symptom Sym1 and a diagnosed further first error symptom Sym2 are provided as examples.

[0070] The measurement data provision module 5 thus selects, with the aid of the decision matrix 9, the first function-specific sensor signal SEN1 A for the first function A and a second function-specific sensor signal SEN1 B for the second function B from the predetermined first set of signals, depending on the diagnosed first fault symptom Sym1 and the diagnosed further first fault symptom Sym2. The first and second function-specific sensor signals SEN1 A, SEN1 B can be the same or different.

[0071] The first set of signals comprises at least two of the following signals: the first sensor signal SEN1 and / or the further first sensor signal SEN_red and / or a constant first signal with a value that is equal to a maximum value of the first sensor signal SEN1, and / or a constant second signal with a value that is equal to a minimum value of the first sensor signal SEN1, and / or a constant third signal with a value that is equal to a stored last valid sensor value, and / or a first model signal that is determined depending on a predetermined model and is representative of the first measured variable.

[0072] The measurement data provision module 5 is further designed to select a quality indicator Qi_1 A from a predetermined set of quality indicators Qi for the first function-specific sensor signal SEN1 A of the first function A with the aid of the provided decision matrix 9 depending on the at least one provided diagnosed first error symptom Sym1, Sym2.

[0073] The measurement data provision module 5 is further configured, for example, to select a quality indicator Qi_1 B from the predetermined set of quality indicators Qi for the second function-specific sensor signal SEN1 B of the second function B with the aid of the provided decision matrix 9 depending on the provided diagnosed first error symptom Sym1 and depending on the diagnosed further first error symptom Sym2.

[0074] The quality indicator Qi_1A of the first function-specific sensor signal SEN1 A and the quality indicator Qi_1 B of the second function-specific sensor signal SEN1 B may be the same or different.

[0075] The set of quality indicators Qi comprises at least two of the following indicators: the first quality indicator indicating a valid first sensor signal, and / or a second quality indicator indicating an invalid first sensor signal, and / or a third quality indicator indicating that a stored last valid first sensor signal value is provided, and / or a fourth quality indicator indicating that the further first sensor signal SEN1_red is provided, and / or a fifth quality indicator indicating that the model signal is provided, and / or a sixth quality indicator indicating that the maximum value of the first sensor signal SEN1 is provided, and / or a seventh quality indicator indicating that a minimum value of the first sensor signal SEN1 is provided, and / or an eighth quality indicator indicating that an initialization value is provided.

[0076] The measurement data provision module 5 is designed, for example, if no diagnosed first error symptom Sym1, Sym2 is present, to assign the first quality indicator, which indicates a valid first sensor signal, to the first sensor signal and to forward the first sensor signal SEN1 and the associated first quality indicator to the first function A and the second function B.

[0077] If, however, the diagnosed first error symptom Sym1 and / or the diagnosed further first error symptom Sym2 is detected for the first time, the second quality indicator, which indicates an invalid first sensor signal, can be selected for the first function A, which places very high demands on signal quality, and the first sensor signal SEN1 can be forwarded to the first function A. In contrast, for the second function B and a third function, for example, the first sensor signal SEN1 or the further first sensor signal SEN_red can be selected, depending on which of the two signals has a higher value (the first sensor signal SEN 1 and the further first sensor signal SEN_red are still available, but differ from each other beyond a tolerance limit). In addition, the second quality indicator, which indicates an invalid first sensor signal, can be selected for the second function B and the third function.

[0078] If, however, the diagnosed first error symptom Sym1 or the diagnosed further first error symptom Sym2 occurs for a longer period or repeatedly and / or a permanent error is confirmed by the occurrence of an additional first error symptom, the second quality indicator, which indicates an invalid first sensor signal, can be selected for the second function B, for example, since the second function B can only tolerate poorer signal quality for a certain period of time (for example, fault tolerance time, FTT, for a certain safety objective). For the third function, the first quality indicator can continue to be selected, for example, since the third function can be executed with the "limp home" value as long as a certain tolerance is not violated.

[0079] The measurement data provision module 5 is thus also designed, for example, in response to a request from the first and / or the second function B and / or the third function, which has an instruction to adapt the decision matrix 9, to adapt the decision matrix 9 with regard to the selection of the quality indicators Qi and / or the selection of the first function-specific sensor signal SEN1A or the second function-specific sensor signal SEN1B, wherein the request and / or the sending of the request is dependent on predetermined criteria for a behavior of the first, the second or the third function when various error situations occur.

[0080] List of reference symbols

[0081] 1 control unit

[0082] 3 Receive interface

[0083] 5 Measurement data provision module

[0084] 7 Output interface

[0085] 9 Decision matrix

[0086] A first function

[0087] B second function

[0088] SEN1 first sensor signal

[0089] SEN1_red further first sensor signal

[0090] Smy1 , Sym2 first error symptoms

[0091] SEN1A first function-specific sensor signal

[0092] SEN1 B second function-specific sensor signal

[0093] Qi, Qi_1A, Qi_1 B quality indicator

[0094] T_1A, T_1 B tolerance

Claims

Patent claims 1 . A method for providing measurement data for a system, wherein the system is designed to perform at least a first function (A) and the method comprises the following steps: - Reading in a first sensor signal (SEN1 ) which is received from a sensor device of the System and is representative of a first measured variable, wherein the first function (A) is executed depending on the first measured variable, - Detect whether at least one diagnosed first error symptom (Sym1 , Sym2), whereby the diagnosed first error symptom(s) (Sym1 , Sym2) occur depending on the first sensor signal (SEN1 ), - if no diagnosed first error symptom (Sym1, Sym2) is present, assigning a first quality indicator indicating a valid first sensor signal to the first sensor signal (SEN1) and forwarding the first sensor signal (SEN1) and the associated first quality indicator to the first function (A), and - if one or more initial error symptoms (Sym1, Sym2) are present, Determining and / or selecting a first function-specific sensor signal (SEN1A) for the first function (A) from a predetermined first set of signals depending on predetermined rules and depending on the provided diagnosed first error symptom(s) (Sym1, Sym2), - selecting a quality indicator (Qi_1A) from a predetermined set of quality indicators (Qi) for the first function-specific sensor signal (SEN1 A) of the first function (A) depending on the predetermined rules and depending on the at least one provided diagnosed first error symptom (Sym1, Sym2), Forwarding the first function-specific sensor signal (SEN1A) and the associated determined quality indicator (Qi_1A) to the first function (A).

2. The method according to claim 1, wherein the predetermined rules comprise a decision matrix (9) which relates possible diagnosable first error symptoms which occur as a function of the first sensor signal (SEN1) to predetermined requirements of the first function (A) for a signal quality and / or a signal integrity of a signal which represents the first measured variable.

3. The method according to claim 1 or 2, wherein the determination and / or selection of the first function-specific sensor signal (SEN1 A) for the first function (A) and / or the selection of the quality indicator (Qi_1 A) is carried out depending on a comparison of the first sensor signal (SEN1 ) with a reference.

4. The method according to claim 3, wherein the reference comprises a further first sensor signal (SEN1_red) which is also representative of the first measured variable, but is detected and / or determined differently than the first sensor signal (SEN_1).

5. The method according to any one of the preceding claims, wherein the first set of signals comprises at least two of the following signals: the first sensor signal (SEN1 ) and / or the further first sensor signal (SEN1_red) and / or a constant first signal with a value that is equal to a maximum value of the first sensor signal (SEN1 ), and / or a constant second signal with a value that is equal to a minimum value of the first sensor signal (SEN1 ), and / or a constant third signal with a value that is equal to a stored last valid sensor value, and / or a first model signal that is determined as a function of a predetermined model and is representative of the first measured variable.

6. The method according to one of the preceding claims, wherein the set of quality indicators (Qi) comprises at least two of the following indicators: the first quality indicator indicating a valid first sensor signal, and / or a second quality indicator indicating an invalid first sensor signal, and / or a third quality indicator indicating that a stored last valid first sensor signal value is provided, and / or a fourth quality indicator indicating that the further first sensor signal (SEN1_red) is provided, and / or a fifth quality indicator indicating that the model signal is provided, and / or a sixth quality indicator indicating that the maximum value of the first sensor signal (SEN1) is provided, and / or a seventh quality indicator indicating that a minimum value of the first sensor signal (SEN1) is provided, and / or an eighth quality indicator,which indicates that an initialization value is provided., 7. Method according to one of the preceding claims, wherein the system is designed to carry out at least one second function (B) in addition to the first function (A), wherein the second function (B) during its execution depending on the first measured value and the procedure comprises the following steps: - if no diagnosed first error symptom (Sym1 , Sym2) is present, forwarding the first sensor signal (SEN1 ) and the associated first quality indicator (Q1 ) to the second function (B), and - if one or more diagnosed first error symptoms (Sym1 , Sym2) are present, Determining and / or selecting a second function-specific sensor signal (SEN1 B) for the second function (B) from the predetermined first set of signals on the basis of the decision matrix (9) depending on the provided diagnosed first error symptom(s) (Sym1, Sym2), wherein the decision matrix (9) additionally relates the possible diagnosable first error symptoms for the second function (B) that occur depending on the first sensor signal (SEN1) to predetermined requirements of the second function (B) regarding the signal quality and / or the signal integrity of the signal that represents the first measured variable, - selecting a quality indicator (Qi_1 B) from the predetermined set of quality indicators (Qi) for the second function-specific sensor signal (SEN1 B) of the second function (B) on the basis of the decision matrix (9) depending on the provided diagnosed first error symptom(s) (Sym1, Sym2), Forwarding the second function-specific sensor signal (SEN1 B) and the associated determined quality indicator (Qi_1 B) to the second function (B).

8. Method according to one of the preceding claims, in which, in response to a request (A_A, A_B) of the first and / or the second function (A, B), which has an instruction to adapt the decision matrix (9), the decision matrix (9) is adapted with regard to the selection of the quality indicators (Qi) and / or the selection of the first function-specific sensor signal (SEN1A) or the second function-specific sensor signal (SEN1B), wherein the request (A_A, A_B) is dependent on predetermined criteria for a behavior of the first or the second function (A, B) when different error situations occur.

9. Method according to one of the preceding claims, in which for the first sensor signal (SEN1 ) and / or the first function-specific sensor signal (SEN1 A) and / or the second function-specific sensor signal (SEN2A) a tolerance (T_1 A, T_1 B) is determined and provided, wherein the tolerance (T_1A, T_1 B) represents a difference between the first sensor signal (SEN1 ) and the further first sensor signal (SEN1_red).

10. Device comprising a processor and a program memory and configured to carry out the method according to one of the preceding claims 1 to 7.

11. Control unit (1), comprising a device according to claim 10, a receiving interface (3) which is designed to receive the sensor signals (SEN1, SEN1_red) from predetermined sensor devices and the instructions (A_A) from units which carry out the first and / or second function (A, B) and to forward them to the device, an output interface (7) which is designed to send the first sensor signal (SEN1) and the first function-specific sensor signal (SEN1A) and the second function-specific sensor signal SEN1B) as well as the quality indicators (Q1, Qi_1A, Qi_1B) to the units which carry out the first and / or second function (A, B).

12. A computer program comprising instructions which, when executed by a computer, cause the computer to carry out the method according to any one of claims 1 to 9.

13. A computer-readable storage medium on which the computer program according to claim 12 is stored.

Images