Fault-tolerant control device for a physical system, in particular vehicle dynamics control device for a motor vehicle

摘要

The unit has a condition value determining unit (3), a fault treatment unit (6), which controllably frees or blocks the supply of a respective condition value to the regulating and/or control unit (2). A fault identifying and isolating logic unit (5) identifies a fault occurring in a channel. Also for at least one condition value of an identified fault, determined redundant across two parallel physical channels and an analytical channel, using a unit producing a functional redundancy, or isolates an observation unit of the analytical channel. The fault treatment filter is also controlled, for the blocking of the channel, associated with the fault to be identified or to be isolated. The regulating and/or control unit is designed for operation in different regulating quality steps, depending on which channel the condition value determining unit identifies as fault-free. The determining unit causes a respective operation in that regulating and or control step, giving still possible maximum, depending on the channels identified instantaneously as fault-free.