Functional module, control unit for an operation assistance system, and device

1. A controller for a transportation vehicle driving assistance system, the controller comprising:

a main function unit configured to produce and provide a function parameter set having at least one function parameter for control driver assistance system functionality; and

a test and auxiliary function unit,

wherein the main function unit and the test and auxiliary function unit are implemented as a combination of software stored on a non-transitory computer readable medium and/or an application specific integrated circuit, and

wherein the test and auxiliary function unit is configured to:

test the function parameter set of the main function unit to determine whether the at least one parameter is within a predetermined range of values to determine whether to operate the test and auxiliary function unit in a normal mode of operation or an auxiliary mode of operation output the function parameter set of the main function unit in response to a determination that the at least one parameter is within the predetermined range of values so as to operate the test and auxiliary function unit in the normal mode of operation to control driver assistance system functionality, and

produce an auxiliary parameter set having at least one auxiliary parameter in response to a determination that the at least one parameter is not within the predetermined range of values so as to operate the test and auxiliary function unit in the auxiliary mode of operation and outputting the auxiliary parameter set to control driver assistance system functionality,

wherein the main function unit is configured for functional and/or operational safety according to a first level of the ISO 26262 standard,

wherein the test and auxiliary function unit is configured for functional and/or operational safety according to a second level of the ISO 26262 standard, and

wherein the first level is different than the second level.

2. The controller of claim 1 , wherein the main function unit:

has a higher algorithmic and/or circuit-oriented control and functional complexity than the test and auxiliary function unit, and/or

is configured for maximum comfort and to meet all demands made on the function, and the test and auxiliary function unit is configured in a simpler state and not for the same comfort and complies with only the most necessary demands made on the function for maintaining safe control of the function of the driver assistance system functionality of the transportation vehicle.

3. The controller of claim 1 , wherein the first level is a QM level of the ISO 26262 standard.

4. The controller of claim 1 , wherein the second level is an ASIL-D level of the ISO 26262 standard.

5. The controller of claim 1 , wherein the main function unit and/or the test and auxiliary function unit receives an input parameter set having at least one input parameter, which input parameter set is representative of the status and/or the operation of the underlying transportation vehicle and is identical, and takes the input parameter set as a basis for producing the function parameter set or the auxiliary parameter set.

6. The controller of claim 1 , wherein the test and auxiliary function unit is configured to:

test function parameters picked up from the main function unit for plausibility with reference to the status and/or to the operation of the underlying transportation vehicle and/or driver assistance system functionality, and

operate in the normal mode of operation when plausibility is present, and

operate in the auxiliary mode of operation when plausibility is absent.

7. The controller of claim 1 , wherein the test and auxiliary function unit is configured, in the auxiliary mode of operation, to set a function parameter picked up from the main function unit:

to a zero value,

to a status- and/or operation-dependent minimum value,

to a status- and/or operation-dependent maximum value and/or

to a status- and/or operation-dependent setpoint value to be determined with lower complexity than in the main function unit, and

to output the function parameter as auxiliary parameter.

8. A control unit for a driving assistance system of a transportation vehicle, the control unit comprising:

a controller for the transportation vehicle driving assistance system, the controller comprising:

a main function unit configured to produce and provide a function parameter set having at least one function parameter for control driver assistance system functionality; and

a test and auxiliary function unit,

wherein the main function unit and the test and auxiliary function unit are implemented as a combination of software stored on a non-transitory computer readable medium and/or an application specific integrated circuit, and

wherein the test and auxiliary function unit is configured to:

test the function parameter set of the main function unit to determine whether the at least one parameter is within a predetermined range of values to determine whether to operate the test and auxiliary function unit in a normal mode of operation or an auxiliary mode of operation output the function parameter set of the main function unit in response to a determination that the at least one parameter is within the predetermined range of values so as to operate the test and auxiliary function unit in the normal mode of operation to control driver assistance system functionality, and

produce an auxiliary parameter set having at least one auxiliary parameter in response to a determination that the at least one parameter is not within the predetermined range of values so as to operate the test and auxiliary function unit in the auxiliary mode of operation and outputting the auxiliary parameter set to control driver assistance system functionality,

wherein the main function unit is configured for functional and/or operational safety according to a first level of the ISO 26262 standard,

wherein the test and auxiliary function unit is configured for functional and/or operational safety according to a second level of the ISO 26262 standard, and

wherein the first level is different than the second level.

9. The control unit of claim 8 , wherein the main function unit:

has a higher algorithmic and/or circuit-oriented control and functional complexity than the test and auxiliary function unit, and/or

is configured for maximum comfort and to meet all demands made on the function, and the test and auxiliary function unit is configured in a simpler state and not for the same comfort and complies with only the most necessary demands made on the function for maintaining safe control of driver assistance system functionality of the transportation vehicle.

10. The control unit of claim 8 , wherein the first level is a QM level of the ISO 26262 standard.

11. The control unit of claim 8 , wherein the second level is an ASIL-D level of the ISO 26262 standard.

12. The control unit of claim 8 , wherein the main function unit and/or the test and auxiliary function unit receives an input parameter set having at least one input parameter, which input parameter set is representative of the status and/or the operation of the underlying transportation vehicle and is identical, and takes the input parameter set as a basis for producing the function parameter set or the auxiliary parameter set.

13. The control unit of claim 8 , wherein the test and auxiliary function unit is configured to:

test function parameters picked up from the main function unit for plausibility with reference to the status and/or to the operation of the underlying transportation vehicle and/or of driver assistance system functionality, and

operate in the normal mode of operation when plausibility is present, and

operate in the auxiliary mode of operation when plausibility is absent.

14. The control unit of claim 8 , wherein the test and auxiliary function unit is configured, in the auxiliary mode of operation, to set a function parameter picked up from the main function unit:

to a zero value,

to a status- and/or operation-dependent minimum value,

to a status- and/or operation-dependent maximum value and/or

to a status- and/or operation-dependent setpoint value to be determined with lower complexity than in the main function unit, and

to output the function parameter as auxiliary parameter.

15. An autonomous driving transportation vehicle apparatus comprising: at least one piece of equipment for operating the autonomous driving transportation vehicle; and a control unit for controlling the at least one piece of equipment as part of a driving assistance system of the autonomous driving transportation vehicle, the control unit including: a controller for controlling the at least one piece of equipment of the transportation vehicle driving assistance system, the controller comprising: a main function unit configured to produce and provide a function parameter set having at least one function parameter for control of the function of the at least one piece of equipment; and a test and auxiliary function unit wherein the main function unit and the test and auxiliary function unit are implemented as a combination of software stored on a non-transitory computer readable medium and/or an application specific integrated circuit, and wherein the test and auxiliary function unit is configured to: test the function parameter set of the main function unit to determine whether the at least one parameter is within a predetermined range of values to determine whether to operate the test and auxiliary function unit in a normal mode of operation or an auxiliary mode of operation output the function parameter set of the main function unit in response to a determination that the at least one parameter is within the predetermined range of values so as to operate the test and auxiliary function unit in the normal mode of operation to control the at least one piece of equipment and/or driver assistance system functionality, and produce an auxiliary parameter set having at least one auxiliary parameter in response to a determination that the at least one parameter is not within the predetermined range of values so as to operate the test and auxiliary function unit in the auxiliary mode of operation and outputting the auxiliary parameter set to control the at least one piece of equipment and/or driver assistance system functionality, wherein the main function unit is configured for functional and/or operational safety according to a first level of the ISO 26262 standard, wherein the test and auxiliary function unit is configured for functional and/or operational safety according to a second level of the ISO 26262 standard, and wherein the first level is different than the second level.

16. The apparatus of claim 15 , wherein the main function unit:

has a higher algorithmic and/or circuit-oriented control and functional complexity than the test and auxiliary function unit, and/or

is configured for maximum comfort and to meet all demands made on the function, and the test and auxiliary function unit is configured in a simpler state and not for the same comfort and complies with only the most necessary demands made on the function for maintaining safe control of the function of the at least one piece of equipment of the transportation vehicle.

17. The apparatus of claim 15 , wherein the first level is a QM level of the ISO 26262 standard.

18. The apparatus of claim 15 , wherein the second level is an ASIL-D level of the ISO 26262 standard.

19. The apparatus of claim 15 , wherein the main function unit and/or the test and auxiliary function unit receives an input parameter set having at least one input parameter, which input parameter set is representative of the status and/or the operation of the underlying transportation vehicle and is identical, and takes the input parameter set as a basis for producing the function parameter set or the auxiliary parameter set.

20. The apparatus of claim 15 , wherein the test and auxiliary function unit is configured to:

test function parameters picked up from the main function unit for plausibility with reference to the status and/or to the operation of the underlying transportation vehicle and/or the at least one piece of equipment, and

operate in the normal mode of operation when plausibility is present, and

operate in the auxiliary mode of operation when plausibility is absent.

21. The apparatus of claim 15 , wherein the test and auxiliary function unit is configured, in the auxiliary mode of operation, to set a function parameter picked up from the main function unit:

to a zero value,

to a status- and/or operation-dependent minimum value,

to a status- and/or operation-dependent maximum value and/or

to a status- and/or operation-dependent setpoint value to be determined with lower complexity than in the main function unit, and

to output the function parameter as auxiliary parameter.