Method for determining a permissible state variable boundary value of a technical system in a vehicle

1 . A method for determining a permissible state variable boundary value of a technical system in a vehicle, via which a state variable of a subsystem of the technical system can be influenced, based on an Automotive Safety Integrity Level (ASIL) index that characterizes a potential hazard of the technical system and is made up of parameters for:

a probability of occurrence in relation to a frequency distribution of the state variable of the subsystem,

a controllability of a risk situation in the case of a malfunction in the driving situation, and

a degree of severity of the risk situation,

each ASIL index being assigned an ASIL summed index of a sum of the probability of occurrence, controllability, and degree of severity, the method comprising the following steps:

defining or determining the ASIL index of the subsystem of the technical system;

ascertaining a controllability of the subsystem from the ASIL summed index of the subsystem minus a current probability of occurrence in relation to a frequency distribution of a state variable of the subsystem and minus a current degree of severity ascertained from the state variable of the subsystem; and

ascertaining the permissible state variable boundary value of the technical system based on the ascertained controllability of the subsystem and taking into account the ASIL index specified for the technical system and/or for a current driving situation,

controlling a subsystem of the technical system in the vehicle based on the ascertained permissible state variable boundary value, wherein controlling the subsystem includes adjusting one or more vehicle components including at least one of a brake system, a drive system, or a steering system,

wherein the determining the probability of occurrence in relation to the frequency distribution of the state variable of the subsystem includes determining the probability of occurrence based on empirical field data or reference trip data associated with the state variable,

wherein the permissible state variable boundary value includes a limit on a driving state variable including at least one of a vehicle yaw moment, a transverse acceleration, or a longitudinal acceleration, and

wherein the controlling reduces a likelihood or a severity of a hazardous driving situation in the vehicle.

2 . The method as recited in claim 1 , wherein the driving situation is a braking process and/or a steering process in the vehicle.

3 . The method as recited in claim 1 , wherein the subsystem is a sensor system in the vehicle.

4 . The method as recited in claim 1 , wherein the technical system in the vehicle is an autonomous or partly autonomous driver assistance system.

5 . The method as recited in claim 1 , wherein the technical system in the vehicle is an electronic stability control system.

6 . The method as recited in claim 1 , wherein the technical system in the vehicle is an electronic stability program (ESP).

7 . The method as recited in claim 1 , wherein the probability of occurrence in relation to the frequency distribution of the state variable of the subsystem is determined from a characteristic curve that indicates a distribution of the state variable in relation to the state variable.

8 . The method as recited in claim 1 , wherein the state variable of the subsystem is a transverse acceleration of the vehicle.

9 . The method as recited in claim 3 , wherein the permissible state variable boundary value, which is ascertained from the ascertained controllability of the subsystem, relates to an interfering variable of the technical system.

10 . The method as recited in claim 1 , wherein the permissible state variable boundary value, which is ascertained from the ascertained controllability of the subsystem, relates to an interfering yaw moment.

11 . The method as recited in claim 1 , wherein the permissible state variable boundary value of the technical system, which is ascertained on based on the controllability of the subsystem, is calculated from an empirical relation from the controllability of the subsystem.

12 . The method as recited in claim 1 , wherein the permissible state variable boundary value of the technical system, which is ascertained based on the controllability of the subsystem, is calculated from a physical relation directly or indirectly from the controllability of the subsystem.

13 . The method as recited in claim 1 , wherein the controllability of the subsystem is set to a value that is smaller than the ASIL summed index of the subsystem minus the current probability of occurrence minus the current degree of severity.

14 . A control device configured to determine a permissible state variable boundary value of a technical system in a vehicle, via which a state variable of a subsystem of the technical system can be influenced, based on an Automotive Safety Integrity Level (ASIL) index that characterizes a potential hazard of the technical system and is made up of parameters for:

a probability of occurrence in relation to a frequency distribution of the state variable of the subsystem,

a controllability of a risk situation in the case of a malfunction in the driving situation, and

a degree of severity of the risk situation, e

each ASIL index being assigned an ASIL summed index of a sum of the probability of occurrence, controllability, and degree of severity, the control device being configured to:

define or determine the ASIL index of the subsystem of the technical system;

ascertain a controllability of the subsystem from the ASIL summed index of the subsystem minus a current probability of occurrence in relation to a frequency distribution of a state variable of the subsystem and minus a current degree of severity ascertained from the state variable of the subsystem; and

ascertain the permissible state variable boundary value of the technical system based on the ascertained controllability of the subsystem and taking into account the ASIL index specified for the technical system and/or for a current driving situation,

controlling a subsystem of the technical system in the vehicle based on the ascertained permissible state variable boundary value, wherein controlling the subsystem includes adjusting one or more vehicle components including at least one of a brake system, a drive system, or a steering system,

wherein the determining the probability of occurrence in relation to the frequency distribution of the state variable of the subsystem includes determining the probability of occurrence based on empirical field data or reference trip data associated with the state variable,

wherein the permissible state variable boundary value includes a limit on a driving state variable including at least one of a vehicle yaw moment, a transverse acceleration, or a longitudinal acceleration, and

wherein the controlling reduces a likelihood or a severity of a hazardous driving situation in the vehicle.

15 . The technical system as recited in claim 14 , wherein the technical system is an electronic stability program (ESP) system.

16 . A technical system in a vehicle for influencing a state variable, comprising:

a control device configured to determine a permissible state variable boundary value of the technical system, via which the state variable of a subsystem of the technical system can be influenced, based on an Automotive Safety Integrity Level (ASIL) index that characterizes a potential hazard of the technical system and is made up of parameters for:

a probability of occurrence in relation to a frequency distribution of the state variable of the subsystem,

a controllability of a risk situation in the case of a malfunction in the driving situation, and

a degree of severity of the risk situation,

each ASIL index being assigned an ASIL summed index of a sum of the probability of occurrence, controllability, and degree of severity, the control device being configured to:

define or determine the ASIL index of the subsystem of the technical system;

ascertain a controllability of the subsystem from the ASIL summed index of the subsystem minus a current probability of occurrence in relation to a frequency distribution of a state variable of the subsystem and minus a current degree of severity ascertained from the state variable of the subsystem; and

ascertain the permissible state variable boundary value of the technical system based on the ascertained controllability of the subsystem and taking into account the ASIL index specified for the technical system and/or for a current driving situation,

controlling a subsystem of the technical system in the vehicle based on the ascertained permissible state variable boundary value, wherein controlling the subsystem includes adjusting one or more vehicle components including at least one of a brake system, a drive system, or a steering system,

wherein the determining the probability of occurrence in relation to the frequency distribution of the state variable of the subsystem includes determining the probability of occurrence based on empirical field data or reference trip data associated with the state variable,

wherein the permissible state variable boundary value includes a limit on a driving state variable including at least one of a vehicle yaw moment, a transverse acceleration, or a longitudinal acceleration, and

wherein the controlling reduces a likelihood or a severity of a hazardous driving situation in the vehicle.

17 . A non-transitory computer-readable medium on which is stored a computer program having program code for determining a permissible state variable boundary value of a technical system in a vehicle, via which a state variable of a subsystem of the technical system can be influenced, based on an Automotive Safety Integrity Level (ASIL) index that characterizes a potential hazard of the technical system and is made up of parameters for:

a probability of occurrence in relation to a frequency distribution of the state variable of the subsystem,

a controllability of a risk situation in the case of a malfunction in the driving situation, and

a degree of severity of the risk situation,

each ASIL index being assigned an ASIL summed index of a sum of the probability of occurrence, controllability, and degree of severity, the program code, when executed by a computer, causing the computer to perform the following steps:

defining or determining the ASIL index of the subsystem of the technical system;

ascertaining a controllability of the subsystem from the ASIL summed index of the subsystem minus a current probability of occurrence in relation to a frequency distribution of a state variable of the subsystem and minus a current degree of severity ascertained from the state variable of the subsystem; and

ascertaining the permissible state variable boundary value of the technical system based on the ascertained controllability of the subsystem and taking into account the ASIL index specified for the technical system and/or for a current driving situation,

controlling a subsystem of the technical system in the vehicle based on the ascertained permissible state variable boundary value, wherein controlling the subsystem includes adjusting one or more vehicle components including at least one of a brake system, a drive system, or a steering system,

wherein the determining the probability of occurrence in relation to the frequency distribution of the state variable of the subsystem includes determining the probability of occurrence based on empirical field data or reference trip data associated with the state variable,

wherein the permissible state variable boundary value includes a limit on a driving state variable including at least one of a vehicle yaw moment, a transverse acceleration, or a longitudinal acceleration, and

wherein the controlling reduces a likelihood or a severity of a hazardous driving situation in the vehicle.