US 12,093,006 B2
Method and device for controlling a driving function
Charles Kalleppally, Aalen (DE); Hans-Leo Ross, Lorsch (DE); and Jan Wiese, Stuttgart (DE)
Assigned to ROBERT BOSCH GMBH, Stuttgart (DE)
Filed by Robert Bosch GmbH, Stuttgart (DE)
Filed on Mar. 17, 2022, as Appl. No. 17/697,200.
Claims priority of application No. 10 2021 202 935.3 (DE), filed on Mar. 25, 2021.
Prior Publication US 2022/0308539 A1, Sep. 29, 2022
Int. Cl. B60R 16/023 (2006.01); B60W 50/023 (2012.01); B60W 50/04 (2006.01); G05B 19/042 (2006.01); G06F 11/16 (2006.01)
CPC G05B 19/042 (2013.01) [B60W 50/023 (2013.01); B60R 16/023 (2013.01); B60W 50/04 (2013.01); B60W 2556/45 (2020.02); G05B 2219/2637 (2013.01); G06F 11/16 (2013.01)] 11 Claims
OG exemplary drawing
 
1. A method for controlling a driving function, comprising the following steps:
in a first processing instance:
conveying first input data relevant for the driving function to a cluster;
generating, by each of a first processing unit and a second processing unit, respective first output data by redundant processing of the first input data on the first processing unit and the second processing unit in the cluster;
supplementing, by each of the first and second processing units, the respective first output data to additionally provide first control fields;
conveying the first output data of the first and second processing units to a comparison, thereby ascertaining a first comparison result; and
in response to the first comparison result being that the first output data and first control fields pass the comparison, controlling an operation of a vehicle with the driving function affecting a drive of the vehicle on a road utilizing the first output data together with the first respective control fields; and
in a second processing instance:
conveying second input data relevant for the driving function to the cluster;
generating, by each of the first processing unit and the second processing unit, respective second output data by redundant processing of the second input data on the first processing unit and the second processing unit in the cluster;
supplementing, by each of the first and second processing units, the respective second output data to additionally provide second control fields;
conveying the second output data of the first and second processing units to the comparison, thereby ascertaining a second comparison result; and
in response to the second comparison result being that the second output data or second control fields deviate, marking the second output data as erroneous so that the second output data is not used for controlling the operation of the vehicle.