METHOD FOR ENSURING OR MAINTAINING THE FUNCTION OF A COMPLEX COMPLETE SAFETY-CRITICAL SYSTEM

摘要

Method for maintaining the function of a complex complete vehicle control system in the event of the occurrence of faults, malfunctions or other events which affect the availability of subfunctions, in which, following the findings of a fault source analysis, the complete system is subdivided into system components, in which operating modes are defined for the individual system components, wherein, in the event of the occurrence of faults/events in the complete system, the fault sources are analysed and those operating modes which are affected by the faults or signals which have occurred are determined, wherein those operating modes which ensure that the function of the complete system is maintained are selected from the operating modes which are still free from the faults/events, and wherein, when defining the faults/events, the latter are divided into faults/events which occur only occasionally and into faults/events which definitively restrict the system.