A method of preparing a vehicle control system having an intended function by using at least two ECUs is provided. One of the at least two ECUs is used for adaptively incorporating a modified portion of the intended function of the vehicle control system through re-design in a short period, while the rest of the ECUs in the vehicle control system sustain and support an unchanging portion of the intended function of the vehicle control system.

A vehicle control system includes a central ECU configured to generate control signals for devices, and relay devices each disposed in a communication path between the central ECU and a corresponding device among the devices. The relay devices include a specific relay device configured to output a control signal to a specific selective device not related to driving control, braking control, and steering control of a vehicle. The specific relay device includes a sub-control unit capable of controlling the specific selective device, based on an output of at least one sensor. In response to a central control abnormality that is an abnormality related to a control signal from the central ECU, the specific relay device controls, with the sub-control unit, the specific selective device coupled to the specific relay device.

A device for triggering at least one external protection function for a motor vehicle for the protection of external road users in particular need of protection, in particular for the protection of pedestrians, includes a control unit for evaluating sensor data from a first sensor system for sensing collision objects and for outputting a first trigger signal for the at least one external protection function, as well as an auxiliary control unit for evaluating sensor data from a second sensor system for sensing collision objects and for directly outputting a second trigger signal for the at least one external protection function if a collision object was detected, the auxiliary control unit being adapted such that the control unit is bypassed when the second trigger signal is output.

An in-vehicle communication system includes a master control unit mounted on a vehicle, a plurality of slave devices mounted on the vehicle, a plurality of buckles provided in association with each of a plurality of seats mounted on the vehicle, and at least one switch unit configured to generate a signal in accordance with an attachment and detachment state of at least one of the plurality of buckles. The master control unit is communicably connected to each of the slave devices. The master control unit controls the plurality of slave devices based on the signal generated by the at least one switch unit.

A device for triggering at least one external protection function for a motor vehicle for the protection of external road users in particular need of protection, in particular for the protection of pedestrians, includes a control unit for evaluating sensor data from a first sensor system for sensing collision objects and for outputting a first trigger signal for the at least one external protection function, as well as an auxiliary control unit for evaluating sensor data from a second sensor system for sensing collision objects and for directly outputting a second trigger signal for the at least one external protection function if a collision object was detected, the auxiliary control unit being adapted such that the control unit is bypassed when the second trigger signal is output.

An in-vehicle communication system includes a master control unit mounted on a vehicle, a plurality of slave devices mounted on the vehicle, a plurality of buckles provided in association with each of a plurality of seats mounted on the vehicle, and at least one switch unit configured to generate a signal in accordance with an attachment and detachment state of at least one of the plurality of buckles. The master control unit is communicably connected to each of the slave devices. The master control unit controls the plurality of slave devices based on the signal generated by the at least one switch unit.

A method of preparing a vehicle control system having an intended function by using at least two ECUs is provided. One of the at least two ECUs is used for adaptively incorporating a modified portion of the intended function of the vehicle control system through re-design in a short period, while the rest of the ECUs in the vehicle control system sustain and support an unchanging portion of the intended function of the vehicle control system.

A circuit assembly for plausibility checking of sensor signals, which can be generated by at least two separate sensor elements, includes at least one evaluation and control unit which receives the sensor signals via at least one interface unit and evaluates the received sensor signals for generating sensor data. A first evaluation and control unit is configured to receive the sensor signals of a first sensor element and to generate first sensor data from the first sensor signals. The first evaluation and control unit is configured to provide the generated first sensor data via at least one interface unit to a second evaluation and control unit, which receives and evaluates the sensor signals of a second sensor element to generate second sensor data. The second evaluation and control unit compares the generated second sensor data and the generated first sensor data to each other and inspects them for plausibility.