US 12,093,149 B2
Control system for a motor vehicle, motor vehicle, method for controlling a motor vehicle, computer program product, and computer-readable medium
Peter Grabs, Wuerzburg (DE); Frederic Holzmann, Wuerzburg (DE); Ulrich Koehler, Lippstadt (DE); Matthias Korte, Wuerzburg (DE); Carsten Kuegeler, Lippstadt (DE); and Sergey Orlov, Paderborn (DE)
Assigned to Hella GmbH & Co. KGaA, Lippstadt (DE)
Filed by HELLA GmbH & Co. KGaA, Lippstadt (DE)
Filed on Jul. 15, 2019, as Appl. No. 16/511,823.
Application 16/511,823 is a continuation of application No. PCT/EP2018/050339, filed on Jan. 8, 2018.
Claims priority of application No. 10 2017100 618.4 (DE), filed on Jan. 13, 2017.
Prior Publication US 2019/0340090 A1, Nov. 7, 2019
Int. Cl. G06F 11/20 (2006.01); G05D 1/00 (2024.01)
CPC G06F 11/2023 (2013.01) [G05D 1/0077 (2013.01); G06F 11/2028 (2013.01); G06F 11/2033 (2013.01)] 14 Claims
OG exemplary drawing
 
1. A control system for a motor vehicle, the control system comprising:
a first controller configured to control one first function of a motor vehicle;
a second controller configured to control a second function of the motor vehicle;
a backup controller; and
a user interface,
wherein the first and the second controller are each connected in a signal-transmitting manner with at least one sensor and/or at least one actuator,
wherein at least the first or the second controller is connected in a signal-transmitting manner with the backup controller,
wherein the backup controller is connected to the first and the second controller in a signal-transmitting manner and is configurable in response to an input of an error signal from the first or the second controller, identifying the first controller or the second controller as a faulty controller, such that the backup controller is configured to control a function of the motor vehicle corresponding to the faulty controller,
wherein the backup controller is connectable in a signal-transmitting manner with the at least one sensor and/or at least one actuator corresponding to the faulty controller,
wherein the user interface is configured to allow a user to set the control system in a deactivation state and an activation state, and
wherein in the deactivation state of the control system, the backup controller does not control the function of the motor vehicle corresponding to the faulty controller irrespective of the input of the error signal, and in the activation state of the control system, said backup controller controls the function of the motor vehicle corresponding to the faulty controller in response to the input of the error signal.