Method for operating an at least partially automated vehicle in a manual driving mode, computer program product and system

1 . A method for operating a vehicle comprising at least one functional unit for carrying out a driving function of the vehicle, the functional unit being activatable by a control unit of the vehicle for performing the driving function automatically in an automated driving mode, the method comprising:

carrying out an initialization process for activating a manual driving mode for external activation of the driving function via an operating device;

obtaining external operating information for activation of the driving function in the manual driving mode from the operating device by the control unit, wherein the operating information encompasses first operating data obtained by a first module of the control unit, and second operating data obtained by a second module of the control unit; and

transmitting internal control information for activating the driving function to the functional unit as a function of the external operating information by the control unit.

2 . The method of claim 1 , wherein the transmission of the internal control information is based on a plausibility check of the external operating information using the first operating data and the second operating data.

3 . The method of claim 1 , wherein the first module comprises a first communication interface for obtaining the first operating data via a first communication channel, and the second module comprises a second communication interface for obtaining the second operating data via a second communication channel.

4 . The method of claim 1 , wherein first control data is transmitted via a first control channel and second control data is transmitted via a second control channel by the control unit during the transmission of the internal control information, such that the internal control information is redundantly transmitted via the first control channel and the second control channel.

5 . The method of claim 1 , wherein the initialization process includes an authentication process for authenticating a user, wherein first authentication data is received by the first module and second authentication data is received by the second module during the authentication process, and the manual driving mode is activated as a function of the first authentication data and the second authentication data.

6 . The method of claim 1 , wherein position data for locating the user is detected during the initialization process, with the manual driving mode being activated as a function of the position data.

7 . The method of claim 1 , further comprising:

recognizing an emergency situation based on sensor data indicating a collision risk, a vehicle malfunction, or a user-initiated alert;

generating automated operating information for activating the driving function by the control unit based on the recognition of the emergency situation; and

transmitting internal control information for activating the driving function to the functional unit by the control unit as a function of the automated operating information.

8 . The method of claim 7 , wherein the automated operating information is generated to carry out an emergency stop process for decelerating the vehicle and wherein the automated operating information is prioritized over the external operating information based on the recognition of the emergency situation.

9 . A system for operating a vehicle, comprising:

at least one functional unit configured to carry out a driving function of the vehicle;

a control unit configured to activate the functional unit for performing the driving function automatically in an automated driving mode;

an operating device configured for external activation of the driving function in a manual driving mode;

wherein the control unit is configured to:

carry out an initialization process to activate the manual driving mode via the operating device;

obtain external operating information for activation of the driving function in the manual driving mode from the operating device, wherein the external operating information includes first operating data obtained by a first module of the control unit, and second operating data obtained by a second module of the control unit; and

transmit internal control information for activating the driving function to the functional unit as a function of the external operating information.

10 . The system of claim 9 , wherein the control unit is configured to transmit the internal control information based on a plausibility check of the external operating information using the first operating data and the second operating data.

11 . The system of claim 9 , wherein the first module comprises a first communication interface for obtaining the first operating data via a first communication channel, and the second module comprises a second communication interface for obtaining the second operating data via a second communication channel.

12 . The system of claim 9 , wherein the control unit is configured to transmit first control data via a first control channel and second control data via a second control channel during the transmission of the internal control information, such that the internal control information is redundantly transmitted via the first control channel and the second control channel.

13 . The system of claim 9 , wherein the initialization process includes an authentication process for authenticating a user, wherein first authentication data is received by the first module and second authentication data is received by the second module during the authentication process, and the manual driving mode is activated as a function of the first authentication data and the second authentication data.

14 . The system of claim 9 , wherein the control unit is configured to detect position data for locating the user during the initialization process, with the manual driving mode being activated as a function of the position data.

15 . The system of claim 9 , wherein the control unit is further configured to:

recognize an emergency situation based on sensor data indicating a collision risk, a vehicle malfunction, or a user-initiated alert;

generate automated operating information for activating the driving function based on the recognition of the emergency situation; and

transmit internal control information for activating the driving function to the functional unit as a function of the automated operating information.

16 . The system of claim 15 , wherein the automated operating information is generated to carry out an emergency stop process for decelerating the vehicle and wherein the automated operating information is prioritized over the external operating information based on the recognition of the emergency situation.

17 . A non-transitory computer-readable medium storing instructions that, when executed by a processor of a vehicle control system, cause the vehicle to:

initiate an initialization process to activate a manual driving mode for external activation of a driving function via an operating device;

acquire external operating information for activating the driving function in the manual driving mode from the operating device, wherein the external operating information includes first operating data acquired by a first module of the control unit and second operating data acquired by a second module of the control unit; and

transmit internal control information for activating the driving function to the functional unit based on the external operating information.

18 . The non-transitory computer-readable medium of claim 17 , wherein the instructions further cause the vehicle to transmit the internal control information based on a plausibility check of the external operating information using the first operating data and the second operating data.

19 . The non-transitory computer-readable medium of claim 17 , wherein the instructions further cause the vehicle to configure the first module with a first communication interface for acquiring the first operating data via a first communication channel and configure the second module with a second communication interface for acquiring the second operating data via a second communication channel.

20 . The non-transitory computer-readable medium of claim 17 , wherein the instructions further cause the vehicle to transmit first control data via a first control channel and second control data via a second control channel during the transmission of the internal control information, ensuring that the internal control information is redundantly transmitted via the first control channel and the second control channel.