A control device 11 for a motor vehicle is connected with at least one data acquisition unit 30-34, via an Ethernet connection 16, the control device exchanging data packets with the data acquisition unit via a transmission module (e.g. switch) 18. Upon identification of an error, an error reaction is initiated, in which firstly all data packets present in a memory of the transmission module are erased. The control device may be a camera system for a driverless car using images to calculate steering movements. Should a calculation error occur, the sending of image data or other safety-relevant control signals is rapidly blocked, preventing transmission of erroneous data without complete switch-off of all communications. The output buffer may be emptied by means of a separate command or by altering the buffer size to zero or by altering the shaping rate, using the leaky bucket shaper, to reduce the transmission rate resulting in timeout errors at the receiver.
展开▼
